Amazon
SOA-C02 · Question #4
A SysOps administrator has an Amazon S3 website and wants to restrict access to a single Amazon CloudFront distribution. Visitors to the website should not be able to circumvent CloudFront or view the
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #4. The question stem and answer options stay visible for context.
Submitted by andreas_gr· Mar 30, 2026Networking and Content Delivery
Question
A SysOps administrator has an Amazon S3 website and wants to restrict access to a single Amazon CloudFront distribution. Visitors to the website should not be able to circumvent CloudFront or view the S3 website directly from the bucket. Which AWS service or feature will meet these requirements?
Options
- AS3 bucket ACL
- BAWS Firewall Manager
- CAmazon Route 53 private hosted zone
- DOrigin access identity (OAI)
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#CloudFront OAI#S3 access restriction#content delivery#origin access identity