A Company's Web Application Will Be Migrated to AWS

question 502

Multiple Choice

A company's web application will be migrated to AWS. The application is designed so that there is no server-side code required. As part of the migration, the company would like to improve the security of the application by adding HTTP response headers, following the Open Web Application Security Project (OWASP) secure headers recommendations. How can this solution be implemented to meet the security requirements using best practices?

• A) Use an Amazon S3 bucket configured for website hosting, then set up server access logging on the S3 bucket to track user activity. Then configure the static website hosting and execute a scheduled AWS Lambda function to verify, and if missing, add security headers to the metadata.
• B) Use an Amazon S3 bucket configured for website hosting, then set up server access logging on the S3 bucket to track user activity. Configure the static website hosting to return the required security headers.
• C) Use an Amazon S3 bucket configured for website hosting. Create an Amazon CloudFront distribution that refers to this S3 bucket, with the origin response event set to trigger a Lambda@Edge Node.js function to add in the security headers.
• D) Use an Amazon S3 bucket configured for website hosting. Create an Amazon CloudFront distribution that refers to this S3 bucket. Set "Cache Based on Selected Request Headers" to "Whitelist," and add the security headers into the whitelist.

---

Definitions:

Syllogism

A form of logical reasoning where a conclusion is drawn from two given or assumed propositions (premises).

Mammals

Warm-blooded vertebrate animals characterized by the presence of mammary glands which, in females, produce milk for feeding their young.

Major Premise

The first statement in a syllogism, containing the major term that is also in the conclusion.

Syllogism

A form of deductive reasoning that consists of a major premise, a minor premise, and a conclusion, used to infer a relationship between two statements.