AWS Certified Advanced Networking – Specialty ANS-C00 – Question323 | AWS Certified Advanced Networking

You need to ensure the files served by your CloudFront distribution are only accessible to authorized users.
You hope to serve thousands of users. What two steps should you take? (Choose two.)

A. Configure signed cookies.
B. Configure a WAF.
C. Configure a bucket policy restricting the bucket to only CloudFront OAI.
D. Configure an SSL on the distribution.

Correct Answer: AC

Explanation:

Explanation:
A WAF can block users from accessing the site and CloudFront, but that’s not the best option since you have so many users. An SSL will encrypt, but not prevent a user from viewing the content.