nerdexam
Amazon

SAA-C03 · Question #483

A company uses an Amazon CloudFront distribution to serve thousands of media files to users. The CloudFront distribution uses a private Amazon S3 bucket as an origin. A solutions architect must preven

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #483. The question stem and answer options stay visible for context.

Submitted by satoshi_tk· Mar 4, 2026Design Secure Architectures

Question

A company uses an Amazon CloudFront distribution to serve thousands of media files to users. The CloudFront distribution uses a private Amazon S3 bucket as an origin. A solutions architect must prevent users in specific countries from accessing the company's files. Which solution will meet these requirements in the MOST operationally-efficient way?

Options

  • ARequire users to access the files by using CloudFront signed URLs.
  • BConfigure geographic restrictions in CloudFront.
  • CRequire users to access the files by using CloudFront signed cookies.
  • DConfigure an origin access control (OAC) between CloudFront and the S3 bucket.

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 Practice