AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 168

Question

A company runs a global ecommerce website that is hosted on AWS. The company uses Amazon CloudFront to serve content to its user base. The company wants to block inbound traffic from a specific set of countries to comply with recent data regulation policies. Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Use the geo restriction feature in CloudFront to deny the specific countries. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. This option delivers the requirement at the lowest cost.

AWS Certified Security - Specialty SCS-C02 — Question 168