A company runs an application on a fleet of Amazon EC2 instances that are in...

Amazon Web Services SAP-C02 Question Answer

A company runs an application on a fleet of Amazon EC2 instances that are in private subnets behind an internet-facing Application Load Balancer (ALB). The ALB is the origin for an Amazon CloudFront distribution. An AWS WAF web ACL that contains various AWS managed rules is associated with the CloudFront distribution.

The company needs a solution that will prevent internet traffic from directly accessing the ALB.

Which solution will meet these requirements with the LEAST operational overhead?

Create a new web ACL that contains the same rules that the existing web ACL contains. Associate the new web ACL with the ALB.

Associate the existing web ACL with the ALB.

Add a security group rule to the ALB to allow traffic from the AWS managed prefix list for CloudFront only.

Add a security group rule to the ALB to allow only the various CloudFront IP address ranges.

Amazon Web Services SAP-C02 View All Questions

Amazon Web Services SAP-C02 Summary

Vendor: Amazon Web Services
Product: SAP-C02
Update on: May 21, 2026
Questions: 645

Price: $52.5 ~~$149.99~~

Buy Now SAP-C02 PDF + Testing Engine Pack

A company is migrating an application to AWS.

A company hosts a metadata API on Amazon EC2 instances behind an internet-facing Application Load...

Pre-Summer Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmasmnth

A company runs an application on a fleet of Amazon EC2 instances that are in...

The Answer Is:

Explanation:

Amazon Web Services SAP-C02 Summary

Payments We Accept

Contact Us