nerdexam
Amazon

SAP-C02 · Question #473

A company is designing a new website that hosts static content. The website will give users the ability to upload and download large files. According to company requirements, all data must be…

The correct answer is A. Turn on S3 server-side encryption for the S3 bucket that the web application uses. C. Create a bucket policy that denies any unencrypted operations in the S3 bucket that the web E. Configure redirection of HTTP requests to HTTPS requests in CloudFront. https://aws.amazon.com/tw/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-

Submitted by parkjh· Mar 6, 2026Design for New Solutions

Question

A company is designing a new website that hosts static content. The website will give users the ability to upload and download large files. According to company requirements, all data must be encrypted in transit and at rest. A solutions architect is building the solution by using Amazon S3 and Amazon CloudFront. Which combination of steps will meet the encryption requirements? (Choose three.)

Options

  • ATurn on S3 server-side encryption for the S3 bucket that the web application uses.
  • BAdd a policy attribute of "aws:SecureTransport": "true" for read and write operations in the S3
  • CCreate a bucket policy that denies any unencrypted operations in the S3 bucket that the web
  • DConfigure encryption at rest on CloudFront by using server-side encryption with AWS KMS keys
  • EConfigure redirection of HTTP requests to HTTPS requests in CloudFront.
  • FUse the RequireSSL option in the creation of presigned URLs for the S3 bucket that the web

How the community answered

(38 responses)
  • A
    82% (31)
  • B
    3% (1)
  • D
    11% (4)
  • F
    5% (2)

Explanation

https://aws.amazon.com/tw/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice