nerdexam
Amazon

SAP-C02 · Question #692

A medical company is running a REST API on a set of Amazon EC2 instances. The EC2 instances run in an Auto Scaling group behind an Application Load Balancer (ALB). The ALB runs in three public…

The correct answer is A. Store a random string in AWS Secrets Manager. Create an AWS Lambda function for automatic. https://aws.amazon.com/blogs/security/how-to-enhance-amazon-cloudfront-origin-security-with- aws-waf-and-aws-secrets-manager/

Submitted by weili_xi· Mar 6, 2026Continuous Improvement for Existing Solutions

Question

A medical company is running a REST API on a set of Amazon EC2 instances. The EC2 instances run in an Auto Scaling group behind an Application Load Balancer (ALB). The ALB runs in three public subnets, and the EC2 instances run in three private subnets. The company has deployed an Amazon CloudFront distribution that has the ALB as the only origin. Which solution should a solutions architect recommend to enhance the origin security?

Options

  • AStore a random string in AWS Secrets Manager. Create an AWS Lambda function for automatic
  • BCreate an AWS WAF web ACL rule with an IP match condition of the CloudFront service IP
  • CStore a random string in AWS Systems Manager Parameter Store. Configure Parameter Store
  • DConfigure AWS Shield Advanced Create a security group policy to allow connections from

How the community answered

(50 responses)
  • A
    70% (35)
  • B
    4% (2)
  • C
    18% (9)
  • D
    8% (4)

Explanation

https://aws.amazon.com/blogs/security/how-to-enhance-amazon-cloudfront-origin-security-with- aws-waf-and-aws-secrets-manager/

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice