nerdexam
Amazon

SCS-C02 · Question #117

A company stores images for a website in an Amazon S3 bucket. The company is using Amazon CloudFront to serve the images to end users. The company recently discovered that the images are being accesse

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #117. The question stem and answer options stay visible for context.

Submitted by andreas_gr· Mar 6, 2026Infrastructure Security

Question

A company stores images for a website in an Amazon S3 bucket. The company is using Amazon CloudFront to serve the images to end users. The company recently discovered that the images are being accessed from countries where the company does not have a distribution license. Which actions should the company take to secure the images to limit their distribution? (Choose two.)

Options

  • AUpdate the S3 bucket policy to restrict access to a CloudFront origin access control (OAC).
  • BUpdate the website DNS record to use an Amazon Route 53 geolocation record deny list of
  • CAdd a CloudFront geo restriction deny list of countries where the company lacks a license.
  • DUpdate the S3 bucket policy with a deny list of countries where the company lacks a license.
  • EEnable the Restrict Viewer Access option in CloudFront to create a deny list of countries where

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#CloudFront geo restriction#S3 origin access control#content distribution#geo-blocking
Full SCS-C02 Practice