SAP-C02 Question #241: Real Exam Question with Answer & Explanation

Question

A company is using an Amazon CloudFront distribution to distribute both static and dynamic content from a web application running behind an Application Load Balancer. The web application requires user authorization and session tracking for dynamic content. The CloudFront distribution has a single cache behavior configured to forward the Authorization, Host, and User-Agent http whitelist headers and a session cookie to the origin. All other cache behavior settings are set to their default value. A valid ACM certificate is applied to the CloudFront distribution with a matching CNAME in the distribution settings. The ACM certificate is also applied to the https listener for the Application Load Balancer. The CloudFront origin protocol policy is set to https only. Analysis of the cache statistics report shows that the miss rate for this distribution is very high. What can the Solutions Architect do to improve the cache hit rate for this distribution without causing the SSL/TLS handshake between CloudFront and the Application Load Balancer to fail?

Options

• ACreate two cache behaviors for static and dynamic content. Remove the User-Agent and Host
• BRemove the User-Agent and Authorization https headers from the whitelist headers section of the
• CRemove the Host http header from the whitelist headers section and remove the session cookie
• DCreate two cache behaviors for static and dynamic content. Remove the User-Agent http header