AWS Certified Solutions Architect CloudFront and Content Delivery

Question 1

What is the primary purpose of Amazon CloudFront?

Accepted Answer

To distribute content globally with low latency via edge locations

Answer

To store objects with high durability across multiple AZs

Answer

To provide dedicated network connections from on-premises to AWS

Answer

To replicate databases across AWS regions

Question 2

A company wants to run custom authentication logic at AWS edge locations before requests reach the origin. Which CloudFront feature enables this?

Accepted Answer

Lambda@Edge

Answer

CloudFront Functions

Answer

CloudFront Origin Shield

Answer

CloudFront Field-Level Encryption

Question 3

Which CloudFront feature restricts access to an S3 bucket so that only CloudFront can read objects, preventing direct S3 access?

Accepted Answer

Origin Access Control (OAC)

Answer

CloudFront Signed Cookies

Answer

S3 Bucket Policy with IP whitelist

Answer

CloudFront Origin Shield

Question 4

A CloudFront distribution is configured with an S3 origin. A user requests an object that is not currently cached at the edge location. What happens next?

Accepted Answer

CloudFront fetches the object from the S3 origin, caches it, and returns it to the user

Answer

CloudFront returns a 404 error to the user

Answer

CloudFront redirects the user directly to the S3 bucket URL

Answer

CloudFront waits for the next scheduled cache refresh before fetching the object

Question 5

Which CloudFront feature allows you to block or allow content delivery based on a viewer's country?

Accepted Answer

CloudFront Geographic Restrictions (Geo-Blocking)

Answer

CloudFront Signed URLs

Answer

AWS WAF geographic match conditions

Answer

Route 53 Latency-Based Routing

Question 6

An architect needs to serve HTTPS content via CloudFront using a custom domain name. What must be provisioned?

Accepted Answer

An ACM SSL certificate in the us-east-1 (N. Virginia) region

Answer

An ACM SSL certificate in the same region as the origin

Answer

A self-signed certificate uploaded to IAM in any region

Answer

An ACM certificate in the AWS GovCloud region

Question 7

What is the purpose of setting a TTL (Time-To-Live) value in a CloudFront cache behavior?

Accepted Answer

It controls how long CloudFront caches an object at edge locations before checking the origin for updates

Answer

It determines how long CloudFront waits for an origin response before timing out

Answer

It sets the maximum duration a CloudFront distribution can remain active

Answer

It defines the lifespan of a CloudFront signed URL