A Company Has a Web-Based Application Using Amazon CloudFront and Running

question 249

Multiple Choice

A company has a web-based application using Amazon CloudFront and running on Amazon Elastic Container Service (Amazon ECS) behind an Application Load Balancer (ALB) . The ALB is terminating TLS and balancing load across ECS service tasks. A security engineer needs to design a solution to ensure that application content is accessible only through CloudFront and that it is never accessible directly. How should the security engineer build the MOST secure solution?

• A) Add an origin custom header. Set the viewer protocol policy to HTTP and HTTPS. Set the origin protocol policy to HTTPS only. Update the application to validate the CloudFront custom header.
• B) Add an origin custom header. Set the viewer protocol policy to HTTPS only. Set the origin protocol policy to match viewer. Update the application to validate the CloudFront custom header.
• C) Add an origin custom header. Set the viewer protocol policy to redirect HTTP to HTTPS. Set the origin protocol policy to HTTP only. Update the application to validate the CloudFront custom header.
• D) Add an origin custom header. Set the viewer protocol policy to redirect HTTP to HTTPS. Set the origin protocol policy to HTTPS only. Update the application to validate the CloudFront custom header.

---

Definitions:

Economic Wealth

The accumulation of valuable resources and assets, including money, property, and investments, that contribute to an individual's or nation's economic power and living standard.

Economic Freedom

The ability of individuals to make their own economic decisions, including the decisions to buy, sell, and produce, with minimal government intervention.

Heritage Foundation

A conservative think tank based in the United States that conducts research and advocacy on public policy issues.

Hong Kong

A Special Administrative Region of China known for its vibrant economy and status as a global financial center.