Global Content Delivery

Question 1

Regional service handles the complexity of creating, storing, and renewing public and private SSL/TLS X.509 certificates and keys that protect your AWS websites and applications

Answer 1

AWS Certficate manager

Question 2

Applications need to trust

Answer 2

Private Certificate Authority

Question 3

Browers trust a list of providers which can trust other providers

Answer 3

Public Certificate Authority

Question 4

CloudFront and Load Balancers are the only supported services for ACM

Answer 4

True

Question 5

Can EC2 be used with ACM?

Answer 5

No

Question 6

Can you use Certifications from one region in another region?

Answer 6

No, certifications cannot leave the region they are generated/imported from

Question 7

In CloudFront if you want to add certificates the always need to be in US East 1

Answer 7

True

Question 8

Do self signed certificates work in CloudFront?

Answer 8

No

Question 9

The two SSL connections in CloudFront (viewer -> CF, CF -> origin) both need to have public certificates

Answer 9

True

Question 10

TLS extension which tells the server which domain name it is trying to access

Answer 10

SNI

Question 11

Restrict s3 access so that it is only accessible via CloudFront distribution

Answer 11

S3 origin with legacy access identites

Question 12

if using an S3 origin are the viewer and origin protocols the same?

Answer 12

Yes

Question 13

Used to secure custom Origins

Answer 13

Custom headers

Question 14

Provide Access to one object

Answer 14

SignedURLS

Question 15

If client doesnt support cookies which should you use

Answer 15

SignedURLS

Question 16

Provides access to groups of objects which are all the same type

Answer 16

SignedCookies

Question 17

allow lightweight lambda functions at edge locations

Answer 17

Lambda@Edge

Question 18

Lambda@Edge only supports Node.js and Python

Answer 18

True

Question 19

Allows single IP to be in multiple locations

Answer 19

Anycast IP

Question 20

Data transits globally across the AWS global backbone network directly under AWS control and with fewer hops

Answer 20

Global accelerator