Amazon
SCS-C02 · Question #247
A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CtoudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #247. The question stem and answer options stay visible for context.
Submitted by tyler.j· Mar 6, 2026Infrastructure Security
Question
A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CtoudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of countries to comply with recent data regulation policies. Which solution will meet these requirements MOST cost-eftectively?
Options
- ACreate an AWS WAF web ACL with an IP match condition to deny the countries" IP ranges.
- BCreate an AWS WAF web ACL with a geo match condition to deny the specific countries.
- CUse the geo restriction feature in CloudFront to deny the specific countries.
- DUse geolocation headers in CloudFront to deny the specific countries.
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Geo-blocking#CloudFront#AWS WAF#Compliance