Q47 — AWS SAA-C03 Ch.3

Question 47 of 65 | ← Chapter 3

Q177. A company uses a popular content management system (CMS) for its corporate website. However, the required patching and maintenance are burdensome.The company is redesigning its website and wants a new solution. The website will be updated four times a year and does not need to have any dynamic content available. The solution must provide high scalability and enhanced security. Which combination of changes will meet these requirements with the LEAST operational overhead? (Select TWO.)

Correct Answer: A. Configure Amazon CloudFront in front of the website to use HTTPS functionality., D. Create the new website and an Amazon S3 bucket. Deploy the website on the S3 bucket with static website hosting enabled.

Explanation

To provide a new solution that meets the requirements of scalability and enhanced security, with the least operational overhead, a company should deploy an Amazon S3 bucket to host the website content and configure Amazon CloudFront in front of it to use HTTPS functionality. Therefore, options A and D are the correct answers.Option B suggests deploying an AWS WAF web ACL in front of the website to provide HTTPS functionality. While this approach adds more security compared to using Amazon CloudFront, it requires more configuration management and may be more expensive.Option C suggests creating and deploying an AWS Lambda function to manage and serve the website content. While this approach provides serverless architecture and can reduce operational overhead, it may not provide the desired scalability and may require additional configuration for high availability.Option E suggests deploying the website by using an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer. While this approach provides scalability, it requires more operational overhead compared to using Amazon S3 and Amazon CloudFront.By deploying the website on an Amazon S3 bucket with static website hosting enabled, the company can benefit from the simplicity, durability, and low cost of Amazon S3. Amazon CloudFront can be configured in front of the S3 bucket to provide scalability, caching, and HTTPS functionality with minimal operational overhead. This approach meets the requirements and is highly secure as it uses industry-standard SSL/TLS certificates to encrypt data in transit between CloudFront and end-users.