Which AWS service can be integrated with AWS Shield Advanced to provide additional application-layer protection?

AWS Identity and Access Management (IAM)

A global e-commerce company uses Amazon CloudFront and AWS WAF to protect its website. The security team has noticed a high volume of traffic from a specific country that is not a major market. The traffic is consuming resources and causing increased costs. The team wants to block traffic from this country, but they are concerned that some legitimate users may be using VPNs or proxies that appear to be from that country. What should the security engineer do?

Use AWS Shield Advanced to block traffic from the country based on IP reputation.

Use AWS WAF to block traffic from the country, but allow requests that include a valid session cookie or a specific header that indicates a legitimate user.

Use CloudFront geo-restriction to block traffic from the country, and accept that some legitimate users may be affected.

Use AWS WAF geo-match rule to block traffic from the country, and add a rate-based rule to limit requests from that country.

AWSCertified Security - Specialty

Domain 3Objective 1

Task 3.1: Design, Implement, and Troubleshoot Security Controls for Network Edge Services SCS-C03 Practice Questions (Page 5)

Part of the Content Domain 3: Infrastructure Security domain, which accounts for 18% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~13–21 in this domain), expect 4–7 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

11concepts

18%of the exam

11 Concepts in This Objective

Edge Security Strategy Selection
CloudFront Headers and Security
AWS WAF Implementation
AWS IoT Policies for Edge Security
S3 CORS Configuration
AWS Shield Advanced Deployment
Geographic and Geolocation Controls
Rate Limiting at the Edge
Client Fingerprinting
Edge Service Integration with Third-Party WAF
Open Cybersecurity Schema Framework (OCSF) Integration

Questions 21–25

21foundation · easy
A company uses Amazon CloudFront to serve content from an S3 bucket. The security team wants to ensure that the S3 bucket can only be accessed by CloudFront, not directly by users. Which CloudFront security control should be used?
Select an answer first
22foundation · easy
Which AWS service can be integrated with AWS Shield Advanced to provide additional application-layer protection?
Select an answer first
23foundation · easy
In an S3 CORS configuration, which element specifies the HTTP methods that are allowed for cross-origin requests?
Select an answer first
24expert · hard
A global e-commerce company uses Amazon CloudFront and AWS WAF to protect its website. The security team has noticed a high volume of traffic from a specific country that is not a major market. The traffic is consuming resources and causing increased costs. The team wants to block traffic from this country, but they are concerned that some legitimate users may be using VPNs or proxies that appear to be from that country. What should the security engineer do?
Select an answer first
25foundation · easy
A company wants to use AWS WAF to protect its application from common web exploits. Which AWS WAF feature provides pre-configured rules for common threats like SQL injection and cross-site scripting?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCS-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.

Task 3.1: Design, Implement, and Troubleshoot Security Controls for Network Edge Services SCS-C03 Practice Questions (Page 5)

Questions 21–25

A company uses Amazon CloudFront to serve content from an S3 bucket. The security team wants to ensure that the S3 bucket can only be accessed by CloudFront, not directly by users. Which CloudFront security control should be used?

Which AWS service can be integrated with AWS Shield Advanced to provide additional application-layer protection?

In an S3 CORS configuration, which element specifies the HTTP methods that are allowed for cross-origin requests?

A company wants to use AWS WAF to protect its application from common web exploits. Which AWS WAF feature provides pre-configured rules for common threats like SQL injection and cross-site scripting?

Keep studying — Content Domain 3: Infrastructure Security