Practice Test GeeksAWS Practice Test
← All AWS Flashcard Decks

Certified Solutions Architect CloudFront and Content Delivery Flashcards

7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Certified Solutions Architect CloudFront and Content Delivery flashcards as text

  1. What is the difference between Lambda@Edge and CloudFront Functions?

    Answer: Lambda@Edge supports all four CloudFront events; CloudFront Functions only support viewer-request and viewer-response events

    Lambda@Edge supports all four triggers (viewer-request, origin-request, origin-response, viewer-response) with longer execution time and more memory, while CloudFront Functions are limited to viewer-request and viewer-response with sub-millisecond execution.

  2. A company uses CloudFront to serve a dynamic web application. To protect against SQL injection and cross-site scripting attacks, which AWS service should be integrated with CloudFront?

    Answer: AWS WAF (Web Application Firewall)

    AWS WAF integrates directly with CloudFront to inspect incoming requests and block common web exploits such as SQL injection and XSS based on configurable rules.

  3. Which type of CloudFront distribution origin supports streaming media using RTMP protocol?

    Answer: S3 bucket origin (RTMP distribution)

    CloudFront RTMP distributions use an S3 bucket as the origin and are specifically designed for streaming media files using Adobe's RTMP protocol.

  4. An application behind CloudFront needs to receive the real IP address of end users. Which HTTP header should the origin inspect?

    Answer: X-Forwarded-For

    CloudFront forwards the viewer's IP address to the origin in the X-Forwarded-For header, which may contain a comma-separated list of IPs if the request passed through multiple proxies.

  5. A solutions architect wants to serve different versions of a webpage (desktop vs. mobile) from CloudFront without creating separate distributions. What is the recommended approach?

    Answer: Configure a CloudFront cache behavior to forward the User-Agent header and use Lambda@Edge to customize the response

    By forwarding the User-Agent header in a cache behavior and using Lambda@Edge at the origin-request stage, CloudFront can serve device-specific content from a single distribution.

  6. What is the purpose of CloudFront's 'Viewer Protocol Policy' setting?

    Answer: It specifies how CloudFront handles HTTP vs. HTTPS requests from viewers (e.g., redirect HTTP to HTTPS)

    The Viewer Protocol Policy determines how CloudFront responds to HTTP and HTTPS viewer requests — options include HTTPS Only, Redirect HTTP to HTTPS, or allow both protocols.

  7. A company distributes software binaries globally via CloudFront with an S3 origin. Download speeds from South America are slower than expected. The architect wants to improve performance for all regions without restricting access. What should be configured?

    Answer: Enable CloudFront Origin Shield in a region close to the S3 bucket

    Enabling Origin Shield reduces redundant origin fetches by consolidating cache-miss requests, improving cache hit ratios for all regions including South America while keeping the S3 bucket in its original region.