Amazon
SCS-C02 · Question #194
A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CloudFront to serve content to its user base. The company wants to block inbound traffic from a specific set…
The correct answer is C. Use the geo restriction feature in CloudFront to deny the specific countries. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html
Submitted by haru.x· Mar 6, 2026Infrastructure Security
Question
A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CloudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of countries to comply with recent data regulation policies. Which solution will meet these requirements MOST cost-effectively?
Options
- ACreate an AWS WAF web ACL with an IP match condition to deny the countries' IP ranges.
- BCreate an AWS WAF web ACL with a geo match condition to deny the specific countries.
- CUse the geo restriction feature in CloudFront to deny the specific countries.
- DUse geolocation headers in CloudFront to deny the specific countries.
How the community answered
(18 responses)- A11% (2)
- C83% (15)
- D6% (1)
Explanation
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html
Topics
#CloudFront geo restriction#country blocking#cost optimization#content delivery
Community Discussion
No community discussion yet for this question.