A company wants to protect its website from man-in-the-middle attacks by using Amazon CloudFront.
Which solution will meet these requirements with the LEAST operational overhead?

A. Use the SimpleCORS managed response headers policy.

B. Use a Lambda@Edge function to add the Strict-Transport-Security response header.

C. Use the SecurityHeadersPolicy managed response headers policy.

D. Include the X-XSS-Protection header in a custom response headers policy.








 

Suggested Answer: C

Community Answer: C




This question is in SCS-C01 AWS Certified Security – Specialty Exam
For getting AWS Certified Security – Specialty Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exam.