Amazon
SCS-C02 · Question #247
A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CtoudFront to serve content to its user base. The company wants to block inbound traffic from a specific set…
The correct answer is C. Use the geo restriction feature in CloudFront to deny the specific countries. See the full explanation below for the reasoning.
Submitted by tyler.j· Mar 6, 2026Infrastructure Security
Question
A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CtoudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of countries to comply with recent data regulation policies. Which solution will meet these requirements MOST cost-eftectively?
Options
- ACreate an AWS WAF web ACL with an IP match condition to deny the countries" IP ranges.
- BCreate an AWS WAF web ACL with a geo match condition to deny the specific countries.
- CUse the geo restriction feature in CloudFront to deny the specific countries.
- DUse geolocation headers in CloudFront to deny the specific countries.
How the community answered
(17 responses)- A6% (1)
- B12% (2)
- C76% (13)
- D6% (1)
Topics
#Geo-blocking#CloudFront#AWS WAF#Compliance
Community Discussion
No community discussion yet for this question.