AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 194

Question

A company is using an Amazon CloudFront distribution that is configured with an Application Load Balancer (ALB) as an origin. A network engineer needs to implement a solution that requires all inbound traffic to the ALB to come from CloudFront. The network engineer must implement the solution at the network layer rather than in the application. Which solution will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Add an inbound rule to the ALB's security group to allow the AWS managed prefix list for CloudFront. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 194