Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 32 discussion

C - This is routing based on user location

Answer is A Enable CloudFront geo restriction on your distribution by following these steps: Open the CloudFront console. Choose the distribution that you want to apply geo restriction to. Choose the Restrictions tab. Choose Edit. For Enable Geo-Restriction, choose Yes. For Restriction Type, choose Whitelist to allow access to certain countries, or choose Blacklist to block access from certain countries. For Countries, select the countries that you want to allow or block. Then, choose Add. Choose Yes, Edit. Note: You can set your CloudFront distribution to return a custom error message when a user from a blocked country tries to access content. https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-geo-restriction/

Answer: C. When you use geolocation routing, you can localize your content and present some or all of your website in the language of your users. You can also use geolocation routing to restrict content distribution to only the locations in which you have distribution rights.

C. Configure Amazon Route 53 with a geolocation policy. Amazon Route 53 allows you to route traffic based on the geographic location of your users using geolocation routing policies. By configuring geolocation routing policies in Route 53, you can direct users from different geographic locations to different Application Load Balancers (ALBs) based on their location. This way, you can ensure that users are served the correct content based on their geographic location without violating distribution rights.

The best configuration to meet the requirement is option A. Configure Amazon CloudFront with AWS WAF. Amazon CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally. With CloudFront, you can use the geo restriction feature to block access to your content based on the geographic location of your users. This feature allows you to restrict access to your content based on the country, state, or region of the user's IP address. AWS WAF is a web application firewall that helps protect web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. With WAF, you can block, allow, or monitor HTTP/HTTPS traffic to your web application. By combining CloudFront with AWS WAF, you can ensure that users are served the correct content based on their geographic location, and protect your application from common web exploits.

C for me

C. If it involves "proper material is given to users without infringing on distribution rights" or "Copy Rights", usually related to geolocation distribution

Routing based on User location.

Answer is C. It's about serving different contents based on location and NOT BLOCKING the access.

C is right

Answer is C: And questions says Web site is hosted behind multiple ALBs. Geolocation routing lets you choose the resources that serve your traffic based on the geographic location of your users, meaning the location that DNS queries originate from. For example, you might want all queries from " Europe to be routed to an ELB load balancer in the Frankfurt region" . When you use geolocation routing, "you can localize your content" and " present some or all of your website in the language of your users". "You can also use geolocation routing to restrict distribution of content to only the locations in which you have distribution rights". https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

Answer is C: Please don't confuse others if you are not certain about your reference Hint: When you use geolocation routing, you can localize your content and present some or all of your website in the language of your users. You can also use geolocation routing to restrict distribution of content to only the locations in which you have distribution rights. Another possible use is for balancing load across endpoints in a predictable, easy-to-manage way, so that each user location is consistently routed to the same endpoint.

C. Configure Amazon Route 53 with a geolocation policy.

I am thinking restricting route 53 DNS respond doesn't means you are blocking the users from improper countries to access your website by IP. I will go for B as ALB can configure with WAF alone with webACL to block access from certain country. https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html Cloud Front is

Geolocation routing policy – Use when you want to route traffic based on the location of your users. Geoproximity routing policy – Use when you want to route traffic based on the location of your resources and, optionally, shift traffic from resources in one location to resources in another. Answer C is correct.

It's C - "You can also use geolocation routing to restrict distribution of content to only the locations in which you have distribution rights"

Answer is C. Refer udemy stefen Marek course with similar question and answer: Geolocation routing lets you choose the resources that serve your traffic based on the geographic location of your users, meaning the location that DNS queries originate from. For example, you might want all queries from Europe to be routed to an ELB load balancer in the Frankfurt region. You can also use geolocation routing to restrict the distribution of content to only the locations in which you have distribution rights. Use georestriction to prevent users in specific geographic locations from accessing content that you're distributing through a CloudFront web distribution You can use georestriction, also known as geo-blocking, to prevent users in specific geographic locations from accessing content that you're distributing through a CloudFront web distribution.