AmazonAmazon
SCS-C02 · Question #194
SCS-C02 Question #194: Real Exam Question with Answer & Explanation
The correct answer is C: Use the geo restriction feature in CloudFront to deny the specific countries.. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html
Submitted by haru.x· Mar 6, 2026
Question
A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CloudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of countries to comply with recent data regulation policies. Which solution will meet these requirements MOST cost-effectively?
Options
- ACreate an AWS WAF web ACL with an IP match condition to deny the countries' IP ranges.
- BCreate an AWS WAF web ACL with a geo match condition to deny the specific countries.
- CUse the geo restriction feature in CloudFront to deny the specific countries.
- DUse geolocation headers in CloudFront to deny the specific countries.
Explanation
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html
Community Discussion
No community discussion yet for this question.