SOA-C02 Question #666: Real Exam Question with Answer & Explanation

Question

A SysOps administrator is troubleshooting a website that will not load for users. The website is hosted by an Amazon CloudFront distribution that has an Amazon S3 bucket as the origin. The CloudFront distribution is named d111111labcdef8.cloudfront.net. The S3 bucket has the following Amazon Resource Name (ARN): arn:aws:s3:::example-com-website-files. The S3 bucket has S3 Block Public Access enabled. The SysOps administrator examines the website's DNS CNAME records and discovers that the record value is set to s3.amazonaws.com/example-com- website-files/. What should the SysOps administrator do to configure the website for use with CloudFront?

Options

• ADisable S3 Block Public Access on the S3 bucket.
• BCreate an S3 access point in the same AWS Region where the S3 bucket is located. Configure
• CModify the value of the DNS CNAME record to be arn:aws:s3:::example-com-website-files instead
• DModify the value of the DNS CNAME record to be d111111abcdef8.cloudfront.net instead of the

Explanation

The website is hosted using Amazon CloudFront, with an S3 bucket as the origin. However, the DNS CNAME record is incorrectly pointing to the S3 bucket instead of the CloudFront distribution. The correct approach is to modify the DNS CNAME record so that it points to the CloudFront distribution domain name (d111111abcdef8.cloudfront.net). CloudFront will handle requests, retrieve content from the S3 bucket, and serve it efficiently to users with caching and security features. The S3 bucket should not be directly exposed to users when using CloudFront as the delivery mechanism.

No community discussion yet for this question.