nerdexam
AmazonAmazon

SAA-C03 · Question #702

SAA-C03 Question #702: Real Exam Question with Answer & Explanation

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #702. The question stem and answer options stay visible for context.

Submitted by viktor_hu· Mar 4, 2026Design Secure Architectures

Question

A company plans to deploy an application that uses an Amazon CloudFront distribution. The company will set an Application Load Balancer (ALB) as the origin for the distribution. The company wants to ensure that users access the ALB only through the CloudFront distribution. The company plans to deploy the solution in a new VPC. Which solution will meet these requirements?

Options

  • AConfigure the network ACLs in the subnet where the ALB is deployed to allow inbound traffic only
  • BCreate a VPC origin for the CloudFront distribution. Set the VPC origin Amazon Resource Name
  • CCreate a security group that allows only inbound traffic from the public IP addresses of the
  • DCreate a VPC origin for the CloudFront distribution. Configure an ALB rule. Set the source IP

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions