Answer-first summary for fast verification
Answer: Set the Origin Protocol Policy to match the viewer's protocol., Redirect HTTP to HTTPS using the Viewer Protocol Policy.
To ensure that customer data from outside the VPC is encrypted in transit, the developer should configure the following CloudFront settings: (1) Set the Origin Protocol Policy to 'Match Viewer' (Option B), which ensures that CloudFront will use HTTPS when the viewer request uses HTTPS, and (2) Set the Viewer Protocol Policy to 'Redirect HTTP to HTTPS' (Option E), which ensures that all HTTP requests are redirected to HTTPS, thereby encrypting the data in transit.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
A developer is deploying a web application on Amazon EC2 instances with an internet-facing Application Load Balancer (ALB). To add Amazon CloudFront in front of the ALB and ensure data encryption in transit from outside the VPC, which CloudFront settings should be configured? (Select two.)
A
Use signed URLs to restrict viewer access.
B
Set the Origin Protocol Policy to match the viewer's protocol.
C
Implement field-level encryption.
D
Activate automatic object compression.
E
Redirect HTTP to HTTPS using the Viewer Protocol Policy.
No comments yet.