A Company's Web Application Will Be Migrated to AWS

question 502

Multiple Choice

A company's web application will be migrated to AWS. The application is designed so that there is no server-side code required. As part of the migration, the company would like to improve the security of the application by adding HTTP response headers, following the Open Web Application Security Project (OWASP) secure headers recommendations. How can this solution be implemented to meet the security requirements using best practices?

• A) Use an Amazon S3 bucket configured for website hosting, then set up server access logging on the S3 bucket to track user activity. Then configure the static website hosting and execute a scheduled AWS Lambda function to verify, and if missing, add security headers to the metadata.
• B) Use an Amazon S3 bucket configured for website hosting, then set up server access logging on the S3 bucket to track user activity. Configure the static website hosting to return the required security headers.
• C) Use an Amazon S3 bucket configured for website hosting. Create an Amazon CloudFront distribution that refers to this S3 bucket, with the origin response event set to trigger a Lambda@Edge Node.js function to add in the security headers.
• D) Use an Amazon S3 bucket configured for website hosting. Create an Amazon CloudFront distribution that refers to this S3 bucket. Set "Cache Based on Selected Request Headers" to "Whitelist," and add the security headers into the whitelist.

---

Definitions:

Wild Frontier

A term used to describe an undeveloped, often lawless region at the edge of civilization.

More Educated

Describes individuals or populations that have attained a higher level of formal education, often associated with greater knowledge, skills, and opportunities.

Expressing Hate

The act of showing intense dislike or hostility towards individuals, groups, objects, or ideas, often resulting in harmful behavior or speech.

Internet Tool

A software or online resource designed to perform or facilitate specific tasks on the internet, such as communication, research, or content creation.