nerdexam
AmazonAmazon

SCS-C02 · Question #275

SCS-C02 Question #275: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #275. The question stem and answer options stay visible for context.

Submitted by zhang_li· Mar 6, 2026

Question

A company's security engineer is configuring Amazon S3 permissions to ban all current and future public buckets. However, the company hosts several websites directly off S3 buckets with public access enabled. The engineer needs to bock me pubic S3 buckets without causing any outages on me easting websites. The engineer has set up an Amazon CloudFrom distribution (or each website. Which set or steps should the security engineer implement next?

Options

  • AConfigure an S3 bucket as the origin an origin access identity (OAI) for the CloudFront distribution
  • BConfigure an S3 bucket as the origin with an origin access identity (OAI) for the CloudFront
  • CConfigure an S3 bucket as the origin with an origin access identity (OAI) for the CloudFront
  • DConfigure an S3 bucket as the origin for me CloudFront distribution.

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SCS-C02 PracticeBrowse All SCS-C02 Questions