A Network Engineer Is Designing a New System on AWS

question 306

Multiple Choice

A Network Engineer is designing a new system on AWS that will take advantage of Amazon CloudFront for both content caching and for protecting the underlying origin. There is concern that an external agency might be able to access the IP addresses for the application's origin and then attack the origin despite it being served by CloudFront. Which of the following solutions provides the strongest level of protection to the origin?

• A) Use an IP whitelist rule in AWS WAF within CloudFront to ensure that only known-client IPs are able to access the application.
• B) Configure CloudFront to use a custom header and configure an AWS WAF rule on the origin's Application Load Balancer to accept only traffic that contains that header.
• C) Configure an AWS Lambda@Edge function to validate that the traffic to the Application Load Balancer originates from CloudFront.
• D) Attach an origin access identity to the CloudFront origin that allows traffic to the origin that originates from only CloudFront.

---

Definitions:

Post-structuralist Perspective

An analytical approach in sociology and literary theory that suggests structures and social identities are complex and unstable, shaped by power, knowledge, and discourses.

Single Parenting

Single parenting refers to the act of raising one or more children without the assistance of the other biological parent within the home.

Lenski's Classification

A sociological framework proposed by Gerhard Lenski that categorizes societies based on their technological advancement and economic systems, ranging from pre-industrial to post-industrial stages.

Subsistence Patterns

The means by which societies obtain food and other necessities for survival, including hunting, gathering, agriculture, or trade.