SAP-C02 Design for New Solutions Practice Question
A company is designing a new solution to host a static website with global low latency. The website content is stored in an S3 bucket. The company wants to use a custom domain name and SSL/TLS termination. Which THREE services should the company use together to meet these requirements? (Choose THREE.)
⚠ Common exam trap
Test-takers frequently confuse AWS WAF as a mandatory component for security compliance, but the question only asks for services to meet the specific requirements of hosting a static website with global low latency, custom domain, and SSL/TLS termination—WAF is not required for these core functions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon CloudFront with an S3 origin.
Amazon CloudFront with an S3 origin is correct because CloudFront is a global content delivery network (CDN) that caches static content at edge locations, providing low-latency access worldwide. It also supports custom domain names via alternate domain names (CNAMEs) and integrates with AWS Certificate Manager (ACM) for SSL/TLS termination, meeting all requirements for hosting a static website with global performance and security.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Amazon CloudFront with an S3 origin.
Why this is correct
CloudFront provides global content delivery and SSL termination.
- ✗
AWS WAF to protect the website.
Why it's wrong here
Not required for the basic requirements.
- ✓
Amazon S3 to store the website content.
Why this is correct
S3 is the storage for static files.
- ✗
Application Load Balancer to distribute traffic across multiple S3 buckets.
Why it's wrong here
Not needed; CloudFront can handle distribution.
- ✓
Amazon Route 53 to point the custom domain to CloudFront.
Why this is correct
Route 53 provides DNS routing to CloudFront.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.