SAP-C02 · Question #429
SAP-C02 Question #429: Real Exam Question with Answer & Explanation
The correct answer is C: Add a security group rule to the ALB to allow traffic from the AWS managed prefix list for. https://docs.amazonaws.cn/en_us/AmazonCloudFront/latest/DeveloperGuide/LocationsOfEdgeS AWS managed prefix list is more recommended.
Question
A company runs an application on a fleet of Amazon EC2 instances that are in private subnets behind an internet-facing Application Load Balancer (ALB). The ALB is the origin for an Amazon CloudFront distribution. An AWS WAF web ACL that contains various AWS managed rules is associated with the CloudFront distribution. The company needs a solution that will prevent internet traffic from directly accessing the ALB. Which solution will meet these requirements with the LEAST operational overhead?
Options
- ACreate a new web ACL that contains the same rules that the existing web ACL contains.
- BAssociate the existing web ACL with the ALB.
- CAdd a security group rule to the ALB to allow traffic from the AWS managed prefix list for
- DAdd a security group rule to the ALB to allow only the various CloudFront IP address ranges.
Explanation
https://docs.amazonaws.cn/en_us/AmazonCloudFront/latest/DeveloperGuide/LocationsOfEdgeS AWS managed prefix list is more recommended.
Community Discussion
No community discussion yet for this question.