AWS DVA-C02 Cloud-Front Quiz Practice 2026
Guide
1. You have a paid content that is stored in the S3 bucket. CloudFront Signed URL
You want to distribute that content globally, so you
have set up a CloudFront Distribution and configured CloudFront Signed URLs
the S3 bucket to only exchange data with your Cloud- are commonly used to
Front Distribution. Which CloudFront feature allows distribute paid content
you to securely distribute this paid content? through dynamically gen-
Origin Access Control erated signed URLs.
S3 Pre-Signed URL
CloudFront Signed URL
CloudFront Invalidations
2. You have a CloudFront Distribution that serves your Use CloudFront Geo Re-
website hosted on a fleet of EC2 instances behind an striction
Application Load Balancer. All your clients are from the
United States, but you found that some malicious re-
quests are coming from other countries. What should
you do to only allow users from the US and block other
countries?
Use Origin Access Control
Use CloudFront Geo Restriction
Set up a Security Group and attach it to your CloudFront
Distribution
Use a Route 53 Latency record and attach it to Cloud-
Front
3. You have a static website hosted on an S3 bucket. Configure your CloudFront
You have created a CloudFront Distribution that points Distribution and create an
to your S3 bucket to better serve your requests and Origin Access Control, then
improve performance. After a while, you noticed that update your S3 Bucket Pol-
users can still access your website directly from the S3 icy to only accept requests
bucket. You want to enforce users to access the website
1/4
Guide
1. You have a paid content that is stored in the S3 bucket. CloudFront Signed URL
You want to distribute that content globally, so you
have set up a CloudFront Distribution and configured CloudFront Signed URLs
the S3 bucket to only exchange data with your Cloud- are commonly used to
Front Distribution. Which CloudFront feature allows distribute paid content
you to securely distribute this paid content? through dynamically gen-
Origin Access Control erated signed URLs.
S3 Pre-Signed URL
CloudFront Signed URL
CloudFront Invalidations
2. You have a CloudFront Distribution that serves your Use CloudFront Geo Re-
website hosted on a fleet of EC2 instances behind an striction
Application Load Balancer. All your clients are from the
United States, but you found that some malicious re-
quests are coming from other countries. What should
you do to only allow users from the US and block other
countries?
Use Origin Access Control
Use CloudFront Geo Restriction
Set up a Security Group and attach it to your CloudFront
Distribution
Use a Route 53 Latency record and attach it to Cloud-
Front
3. You have a static website hosted on an S3 bucket. Configure your CloudFront
You have created a CloudFront Distribution that points Distribution and create an
to your S3 bucket to better serve your requests and Origin Access Control, then
improve performance. After a while, you noticed that update your S3 Bucket Pol-
users can still access your website directly from the S3 icy to only accept requests
bucket. You want to enforce users to access the website
1/4
