nerdexam
Amazon

SOA-C02 · Question #230

A company's web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB). A SysOps administrator must make the applica

The correct answer is D. Add a custom HTTP header to the origin settings for the distribution in the ALB listener add a rule. Configure CloudFront to add a custom HTTP header to requests that it sends to the Application Configure the Application Load Balancer to only forward requests that contain the custom HTTP (Optional) Require HTTPS to improve the security of this solution. https://docs.aws.amazon.c

Submitted by miguelv· Mar 30, 2026Security and Compliance

Question

A company's web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB). A SysOps administrator must make the application accessible only through the CloudFront distribution and not directly through the ALB. The SysOps administrator must make this change without changing the application code. Which solution will meet these requirements?

Options

  • AModify the ALB type to internal.
  • BCreate a Lambda@Edge function.
  • CReplace the ALB with a new internal ALB.
  • DAdd a custom HTTP header to the origin settings for the distribution in the ALB listener add a rule

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    10% (2)
  • D
    76% (16)

Explanation

Configure CloudFront to add a custom HTTP header to requests that it sends to the Application Configure the Application Load Balancer to only forward requests that contain the custom HTTP (Optional) Require HTTPS to improve the security of this solution. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/restrict-access-to-load-

Topics

#CloudFront custom header#ALB access restriction#origin security#direct access prevention

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice