A Company's Web Application Will Be Migrated to AWS

question 549

Multiple Choice

A company's web application will be migrated to AWS. The application is designed so that there is no server-side code required. As part of the migration, the company would like to improve the security of the application by adding HTTP response headers, following the Open Web Application Security Project (OWASP) secure headers recommendations. How can this solution be implemented to meet the security requirements using best practices?

• A) Use an Amazon S3 bucket configured for website hosting, then set up server access logging on the S3 bucket to track user activity. Then configure the static website hosting and execute a scheduled AWS Lambda function to verify, and if missing, add security headers to the metadata.
• B) Use an Amazon S3 bucket configured for website hosting, then set up server access logging on the S3 bucket to track user activity. Configure the static website hosting to return the required security headers.
• C) Use an Amazon S3 bucket configured for website hosting. Create an Amazon CloudFront distribution that refers to this S3 bucket, with the origin response event set to trigger a Lambda@Edge Node.js function to add in the security headers.
• D) set an Amazon S3 bucket configured for website hosting. Create an Amazon CloudFront distribution that refers to this S3 bucket. Set "Cache Based on Selected Request Headers" to "Whitelist," and add the security headers into the whitelist.

---

Definitions:

Choosing a course

The process of selecting an educational or training path that aligns with one's interests, career goals, or academic requirements.

Decision-making model

A conceptual framework or process used to make systematic and informed choices among available options.

Vroom, Yetton, and Jago

Refers to a model of decision-making that outlines how leaders can choose among different leadership styles based on certain situational variables.

Authority decisions

decisions made by individuals in positions of power within an organization, often without extensive consultation.