AWS Certified Solutions Architect CloudFront and Content Delivery

Question 1

What is the primary purpose of Amazon CloudFront?

Accepted Answer

To distribute content globally with low latency via edge locations

Answer

CloudFront is a content delivery network (CDN) that caches and serves content from edge locations close to end users, reducing latency.

Question 2

A company wants to run custom authentication logic at AWS edge locations before requests reach the origin. Which CloudFront feature enables this?

Accepted Answer

Lambda@Edge

Answer

Lambda@Edge allows you to run Node.js or Python Lambda functions at CloudFront edge locations to customize content delivery, including at the viewer-request stage for authentication.

Question 3

Which CloudFront feature restricts access to an S3 bucket so that only CloudFront can read objects, preventing direct S3 access?

Accepted Answer

Origin Access Control (OAC)

Answer

Origin Access Control (OAC) is the recommended mechanism that grants CloudFront permission to access a private S3 bucket while blocking direct public access.

Question 4

A CloudFront distribution is configured with an S3 origin. A user requests an object that is not currently cached at the edge location. What happens next?

Accepted Answer

CloudFront fetches the object from the S3 origin, caches it, and returns it to the user

Answer

On a cache miss, CloudFront forwards the request to the configured origin (e.g., S3), retrieves the object, stores it in the edge cache, and delivers it to the user.

Question 5

Which CloudFront feature allows you to block or allow content delivery based on a viewer's country?

Accepted Answer

CloudFront Geographic Restrictions (Geo-Blocking)

Answer

CloudFront Geographic Restrictions (also called geo-blocking) lets you whitelist or blacklist specific countries to control where your content is distributed.

AWS Practice Test

AWS Practice Test

AWS Certified Solutions Architect CloudFront and Content Delivery