nerdexam
Amazon

SOA-C02 · Question #370

A company is storing media content in an Amazon S3 bucket and uses Amazon CloudFront to distribute the content to its users. Due to licensing terms, the company is not authorized to distribute the con

Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #370. The question stem and answer options stay visible for context.

Submitted by kim_seoul· Mar 30, 2026Networking and Content Delivery

Question

A company is storing media content in an Amazon S3 bucket and uses Amazon CloudFront to distribute the content to its users. Due to licensing terms, the company is not authorized to distribute the content in some countries. A SysOps administrator must restrict access to certain countries. What is the MOST operationally efficient solution that meets these requirements?

Options

  • AConfigure the S3 bucket policy to deny the GetObject operation based on the
  • BCreate a secondary origin access identity (OAI). Configure the S3 bucket policy to prevent access
  • CEnable the geo restriction feature in the CloudFront distribution to prevent access from
  • DUpdate the application to generate signed CloudFront URLs only for IP addresses in authorized

Unlock SOA-C02 to see the answer

You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#CloudFront geo restriction#S3 content distribution#licensing compliance#content delivery
Full SOA-C02 Practice