DVA-C02 Question 28

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C : Correct — Browser blocks requests from https://www.example.com to a different S3 bucket origin (cross-origin). CORS configuration on the central S3 bucket explicitly allows requests from the web application domains, telling the browser the cross-origin request is permitted.

• Chose C3

  The issue described is related to Cross-Origin Resource Sharing (CORS). A) Eliminated - S3 access points deals with permissions, not with resolving cross-origin issues. B) Eliminated - A bucket policy defines access rules for an S3 bucket (e.g., which users or accounts can access it).Bucket policies define access permissions, but they do not address the cross-origin issue. C) By adding a CORS configuration to the central bucket, you instruct the browser to allow requests from the web application’s domains (origins). D) Eliminated - Content-MD5 is a header used to ensure that data was not corrupted during transmission. it is unrelated to the browser’s blocking behavior due to CORS.

• Chose C1

  ==> Discard A. Access points manage S3 access but don't address browser's cross-origin restrictions. ==> Discard B. Bucket policies control permissions but don't override browser Same-Origin Policy. ==> Discard D. Content-MD5 ensures data integrity but doesn't affect cross-origin resource sharing. C is useful when cross site access