Configure an origin group with a designated primary and secondary origin to enable automatic failover, Route requests to different origins by defining separate cache behaviors for path patterns such as /static/* and /api/*, and Apply field-level encryption in CloudFront to encrypt sensitive fields like card numbers at the edge are correct.

Configure an origin group with a designated primary and secondary origin to enable automatic failover is correct because CloudFront supports origin groups that perform health checks and automatically fail over to a secondary origin when the primary is unhealthy or returns configured error responses.

Route requests to different origins by defining separate cache behaviors for path patterns such as /static/* and /api/* is correct since CloudFront uses cache behaviors and path pattern matching to send different request paths to different origins and to apply different caching and routing settings per path.

Apply field-level encryption in CloudFront to encrypt sensitive fields like card numbers at the edge is correct because CloudFront can encrypt specified request fields at the edge with public keys so that sensitive form fields remain protected until a trusted backend decrypts them.

Use geo restriction to achieve failover and high availability across countries is incorrect because geo restriction only allows or blocks viewers by location and does not provide redundancy or automatic failover between origins.

Use AWS Key Management Service (AWS KMS) directly in CloudFront to selectively encrypt specific form fields is incorrect because CloudFront does not integrate with KMS for per field encryption. Field level encryption uses public keys managed for CloudFront and decryption happens at the trusted backend.

Send viewer traffic to different origins based on the selected price class is incorrect because price classes influence which edge locations are used to serve viewers by cost tier and do not control how requests are routed to origins.

Full AWS Practitioner Certification Question