Review Mode Set 2, Question 9 Answer is incorrect

[sgcooper78]

In the past, This answer use to be the correct answer and I use to implement it myself. However AWS has since moved away from this and you actually are able to implement them in the response header. Using Lambda@Edge is a waste of money since you can now implement this directly.
These are the Security Headers you can set

• HTTP Strict Transport Security (HSTS)
• X-XSS-Protection
• X-Content-Type-Options
• X-Frame-Options
• Referrer-Policy
• Content-Security-Policy

Which are all listed in the question.

See This link.

[Amiel-Palacol-TutorialsDojo]

Hi Scott,

Thanks for the feedback.

Our team will take a look into this and will review the options.

Should we make changes, we’ll upload the update as soon as possible to reflect it on the practice exams.

Let us know if you need further assistance. The Tutorials Dojo team is dedicated to helping you pass your AWS exam!

Regards,

Amiel Palacol @ Tutorials Dojo