Examkin

Question

Difficulty: EasyAmazon CloudFront Caching, Origins, and Security

A company hosts a static website using Amazon CloudFront. The security team mandates that all communication between the viewers and the CloudFront distribution must be encrypted in transit. Which two Viewer Protocol Policy settings will satisfy this requirement? (Select TWO.)

  1. Redirect HTTP to HTTPSAnswer
  2. HTTPS OnlyAnswer
  3. C
    HTTP and HTTPS
  4. D
    HTTP Only

Answer

The settings 'Redirect HTTP to HTTPS' and 'HTTPS Only' ensure that all communication between the viewers and the CloudFront distribution is encrypted in transit.
The correct options are 'Redirect HTTP to HTTPS' and 'HTTPS Only'. The 'Redirect HTTP to HTTPS' setting automatically redirects unencrypted HTTP requests to the secure HTTPS protocol. The 'HTTPS Only' setting blocks unencrypted HTTP requests entirely, forcing the viewer to use HTTPS. Both settings ensure that all viewer communication with the distribution is encrypted.

Step-by-Step Solution

1
Analyze the requirement for transport encryption between viewers and the CloudFront distribution.
The requirement dictates that all client-to-edge connections must use HTTPS.
This establishes the necessary protocol constraint for the CloudFront behavior configuration.
2
Evaluate the Viewer Protocol Policy options available in CloudFront.
Viewer Protocol Policy has three main settings: 'HTTP and HTTPS', 'Redirect HTTP to HTTPS', and 'HTTPS Only'.
Identifying the available settings allows selection of the ones that enforce encryption.
3
Select the settings that enforce HTTPS.
'Redirect HTTP to HTTPS' and 'HTTPS Only' both guarantee that no unencrypted HTTP traffic is served by the distribution.
Choosing these two configurations successfully meets the requirement.

Key Concept

CloudFront Viewer Protocol Policy options for enforcing HTTPS
Rate this question

Topics

Amazon CloudFront Caching, Origins, and Security

More questions from this topic