Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AWS > CloudFront > Flashcards

CloudFront Flashcards

1
Q

Features:
- Content Delivery Network (CDN)
- Improves read performance, content is cached at the edge
- Improves users experience
- 216 Point of Presence globally (edge locations)
- DDoS protection (because worldwide), integration with Shield, AWS Web Application Firewall

A

Amazon CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is an origin?

A

Location where content is stored, and from which CloudFront gets content to serve to viewers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Four features of S3 bucket origin?

A
  • For distributing files and caching them at the edge
  • Enhanced security with CloudFront Origin Access Control (OAC)
  • OAC is replacing Origin Access Identity(OAI)
  • CloudFront can be used as an ingress (to upload files to S3)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Four custom origins, that are HTTP servers.

A
  • Application Load Balancer
  • EC2 instance
  • S3 website (must first enable the bucket as a static S3 website)
  • Any HTTP backend you want
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Features:
- Global Edge network
- Files are cached for a TTL (maybe a day)
- Great for static content that must be available everywhere

A

CloundFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Features:
- Cross Region Replication: Must be setup for each region you want replication to happen
- Files are updated in near real-time
- Read only
- Great for dynamic content that needs to be available at low-latency in few regions

A

S3 Region Replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

CloudFront is a ……,which is to cache content …..,

whereas S3 Cross-Region Replication is to….. an entire bucket into another…….

A

CDN, all around the world, replicate, region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Where is the cache located?

A

At each CloudFront Edge Location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How does CloudFront identify each object in the cache?

A

Cache Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

You want to maximize the Cache Hit ratio to minimize requests to the origin?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How can you invalidate part of the cache?

A

Use the CreateInvalidation API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

You want to cache as much stuff as possible in your edge locations?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is CloudFront Cache Key?

A

A unique identifier for every object in the cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

CloudFront Cache Key can have additional elements then the default ones?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How can you add other elements(HTTP headers, cookies, query strings) to the Cache Key?

A

CloudFront Cache Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Are all HTTP headers, cookies, and query strings that you include in the Cache Key automatically included in origin requests?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What happens when Cache policy HTTP header is None?

A
  • Don’t include any headers in the Cache Key (except default)
  • Headers are not forwarded (except default)
  • Best caching performance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What happens when Cache policy HTTP header is Whitelisted?

A
  • only specified headers included in the Cache Key
  • Specified headers are also forwarded to Origin
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Cache Policy Query Strings is None?

A
  • Don’t include any query strings in the Cache Key
  • Query strings are not forwarded
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Cache Policy Query Strings is Whitelist?

A
  • Only specified query strings included in the Cache Key
  • Only specified query strings are forwarded
21
Q

Cache Policy Query Strings is Include All-Except?

A
  • Include all query strings in the Cache Key except the specified list
  • All query strings are forwarded except the specified list
22
Q

Cache Policy Query Strings are All?

A
  • Include all query strings in the Cache Key
  • All query strings are forwarded
  • Worst caching performance
23
Q

Cache Policies based on HTTP Headers?

A

-None
-WhiteList

24
Q

Cache Policies based on Query Strings?

A
  • None
    – Whitelist
    – Include All-Except
    – All
25
What allows specifying values that you want to include in origin requests without including them in the Cache Key (no duplicated cached content)
Origin Request Policy?
26
Origin request policy grants ability to add CloudFront ...... and ...... to an origin request that were not included in the viewer request.
HTTP headers, Custom Headers
27
Purpose of CloudFront Cache Policy?
Controls how CloudFront caches your content at edge locations.
28
Purpose of CloudFront Origin Request Policy?
Controls what information CloudFront includes in requests to your origin.
29
Origin Request Policies can be include in...?
1. HTTP Headers 2. Cookies 3. Query Strings
30
CloudFront won't know about a back-end origin update until the TTL has expired?
True.
31
How can you bypass the TTL and force and entire or partial cache refresh?
Perform a CloudFront Invalidation
32
When will CoundFront know that the back-end origin has been updated?
After the TTL has expired causing a refresh.
33
With Cache Behaviors you can...... different settings for a given ...... pattern
Configure,URL path
34
With Cache Behaviors you can .......to different kind of origins/origin groups based on the .......or ........pattern
route, content type, path
35
When adding additional Cache Behaviors, the .......... is always the....... to be processed and is always /*
Default Cache Behavior, last
36
EC2 instances must be......., otherwise the edge locations ............ our EC2 instances because there's no ........connectivity in CloudFront.
public, will not be able to access, private VPC
37
What is Geo Restriction?
Restrict who can access your distribution based on location.
38
Use case: You want to distribute paid shared content to premium users over the world.
Use CloudFront Signed URL / Cookie
39
Features: - Includes URL expiration - Includes IP ranges to access the data from - Trusted signers (which AWS accounts can create signed URLs)
Can be included to policy attached to CloudFront Signed URL / Cookie?
40
What is a Signed URL for?
Grants access to individual files (one signed URL per file)
41
What is a Signed Cookie for?
access to multiple files (one signed cookie for many files)
42
Features: - Allow access to a path, no matter - Account wide key-pair, only the root can manage it - Can filter by IP, path, date, expiration - Can leverage caching features
CloudFront Signed URL
43
Features: - Issue a request as the person who pre-signed the URL - Uses the IAM key of the signing IAM principal - Limited lifetime
S3 Pre-Signed URL
44
What are Origin Groups for?
To increase high-availability and do failover
45
How do Origin Groups work?
There is one primary and one secondary origin If the primary origin fails, the second one is used
46
What is Field Level Encryption?
Protects user sensitive information through application stack
47
What does Field Level Encryption work?
Adds an additional layer of security along with HTTPS encrypted at the edge close to user
48
How can you get real-time requests received by CloudFront sent to Kinesis Data Streams
Real Time Logs
49
What allows you to Monitor, analyze, and take actions based on content delivery performance
Real Time Logs

AWS (17 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions