AmazonAmazon
SCS-C02 · Question #247
SCS-C02 Question #247: Real Exam Question with Answer & Explanation
The correct answer is C: Use the geo restriction feature in CloudFront to deny the specific countries.. See the full explanation below for the reasoning.
Submitted by tyler.j· Mar 6, 2026Infrastructure Security
Question
A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CtoudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of countries to comply with recent data regulation policies. Which solution will meet these requirements MOST cost-eftectively?
Options
- ACreate an AWS WAF web ACL with an IP match condition to deny the countries" IP ranges.
- BCreate an AWS WAF web ACL with a geo match condition to deny the specific countries.
- CUse the geo restriction feature in CloudFront to deny the specific countries.
- DUse geolocation headers in CloudFront to deny the specific countries.
Topics
#Geo-blocking#CloudFront#AWS WAF#Compliance
Community Discussion
No community discussion yet for this question.