A Solutions Architect Must Design a Solution That Uses Amazon

question 583

Multiple Choice

A solutions architect must design a solution that uses Amazon CloudFront with an Amazon S3 origin to store a static website. The company's security policy requires that all website traffic be inspected by AWS WAF. How should the solutions architect comply with these requirements?

• A) Configure an S3 bucket policy to accept requests coming from the AWS WAF Amazon Resource Name (ARN) only.
• B) Configure Amazon CloudFront to forward all incoming requests to AWS WAF before requesting content from the S3 origin.
• C) Configure a security group that allows Amazon CloudFront IP addresses to access Amazon S3 only. Associate AWS WAF to CloudFront.
• D) Configure Amazon CloudFront and Amazon S3 to use an origin access identity (OAI) to restrict access to the S3 bucket. Enable AWS WAF on the distribution.

---

Definitions:

Modus Tollens

A form of deductive argument that takes the form "If P, then Q. Not Q. Therefore, not P," which is used to derive a conclusion from a hypothesis by negation.

Hypothetical Syllogism

A logical argument consisting of two conditional statements and a conclusion that is logically inferred.

Modus Ponens

A form of deductive reasoning that asserts if a conditional statement "If P, then Q" is accepted as true and P is true, then Q must also be true.

Modus Tollens

A method of logical argument that infers the falsehood of a proposition from the impossibility of its consequence.