Configurations Flashcards

1
Q

the configuration object for config.xml

A

Magento\Framework\App\Config.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

logical component that organizes code for optimized request processing

A

An area

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Commerce framework is organized into what main areas?

A

Admin (adminhtml)
Storefront (frontend)
Basic (base)
Cron (crontab)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what class always loads the ‘crontab’ area?

A

\Magento\Framework\App\Cron

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

an area that is used as a fallback for files absent in adminhtml and frontend areas.

A

Basic (base)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

entry point for admin area

A

pub/index.php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

the code needed for store management can be found in what area?

A

The Admin panel area

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what area contains template and layout files that define the appearance of your storefront.

A

frontend

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what directory contains all the code for components you’ll see while working in the Admin?

A

/app/design/adminhtml directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

with what areas you send requests to the Commerce framework?

A

Web API REST (webapi_rest)
GraphQL (graphql)
Web API SOAP (webapi_soap)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

entry point for webapi_rest?

A

pub/index.php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

how does URL look up for rest area happens?

A

The REST area has a front controller that understands how to do URL lookups for REST-based URLs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

entry point for GraphQl?

A

pub/index.php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

entry point for webapi_soap?

A

pub/index.php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Disabling an area does not result in disabling the modules related to it. (True/False)

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

where are areas registered?

A

di.xml

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

how does adobe commerce interpret the HTTP request that arrives state the format?

A

[frontName]/[controller folder]/[controller class]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

what is the class for catalog/product_compare/add?

A

Magento/Catalog/Controller/Product/Compare/Add.php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

the controller folders are separated with dash, * or line or _?

A

underscore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

what method gets executed on controller?

A

only the execute() method of any given controller is executed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

the scope for Shipping Methods in B2B

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

what is Offloader Header scope?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

how to identify the protocol between the client and load balancer?

A

Offloader Header value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what is default vaLUE FOR offloaded header?

A

X-Forwarded-Proto (XFP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

what is yes on Upgrade Insecure Requests?

A

converts unsecure (HTTP) requests received from the browser to the secure (HTTPS) protocol.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

what does Enabling HTTP Strict Transport Security (HSTS) do?

A

provides a measure of security against “man in the middle” attacks, and prevents users from overriding the “invalid certificate” message.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

in what condition you can choose to run the store Admin, with or without SSL encryption?

A

If your domain has a security certificate.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

what is the scope for Use Secure URLs in Admin?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

what is the scope for Use Secure URLs on Storefront?

A

Store view

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

what is the scope for Secure Base URL for User Media Files?

A

Store view

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

the scope for cookie life time, Cookie Domain and cookie path?

A

Store View

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

what field Determines if Commerce Cookies can be used only over an unsecure channel (http), or can also be used over an encrypted channel (https).

A

Use HTTP Only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

what field Verifies that the IP Address of a request matches $_SESSION data?

A

Validate REMOTE_ADDR to yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

what does Validate HTTP_VIA do?

A

if yes, Verifies incoming proxy data and checks that the proxy address of a request matches $_SESSION data. The session terminates if a different proxy address is detected.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

name all 4 Session Validation configuration settings?

A

Validate REMOTE_ADDR
Validate HTTP_VIA
Validate HTTP_x_FORWARDED_FOR
Validate HTTP_USER_AGENT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

what is scope for Cookie Restriction Mode?

A

Website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

what is the scope for Base Currency?

A

Website or Global depends what was set on price catalog scope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is the scope for Default Display Currency?

A

Store View

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

what is the scope for Allowed Currencies?

A

Store View

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

what is fixer.io?

A

Foreign exchange
rates and currency
conversion JSON API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

what is the scope for API key and Connection Timeout in Seconds for fixer.io?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

what options frequency has for scheduled import configurations?

A

daily/weekly/monthly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What field Specifies the month and day upon which the year-to-date calculations are based?

A

Year-to-Date Starts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What field Specifies the day of the month that is used in calculations to mark the beginning of the current month?

A

Current Month Starts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

collection of statistics scope for fields?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

what is the scope for WYSIWYG Editor?

A

Website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

what is the scope for Use Static URLs for Media Content in WYSIWYG?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

in cms configurations, what does Enable Hierarchy Metadata do?

A

Gives you the ability to associate meta data with pages in the hierarchy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

options for Default Layout for Hierarchy Menu?

A

Content, Right column, Left Column

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

how many currencies in the world adobe commerce accepts?

A

more than 200 countries around the world.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

set the display of the price can be done in what scopes?

A

separately for each store or view.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

If you have a multisite Adobe Commerce or Magento Open Source installation, you can manage multiple base currencies by…………?

A

by setting the scope to the website level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

base currency is set to what by default?

A

It is set to global by default,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

the base currency scope is defined by?

A

the catalog price scope- catalog->price->catalog price scope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Set Catalog Price Scope to either …….

A

Global or Website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

name 2 currency service connection?

A

fixer.io and Currency Converter API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

how to update the currency rates?

A

update the rates manually or to import the rates automatically.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

3 Redis features ?

A

PHP session storage
Tag-based cache cleanup without foreach loops
On-disk saves and master/slave replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

find your Redis configuration in one of the following files?

A

/etc/redis/redis.conf or /etc/redis/<port>.conf</port>

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

How To optimize the Redis instance for your requirements?

A

using a dedicated instance for each session, Commerce cache and FPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

name 2 persistence options of redis?

A

Redis Database Backup (RDB)
Append Only File (AOF)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

what does Redis Database Backup (RDB) do?

A

Redis Database Backup (RDB) snapshots store the complete database in a dump file after a given time, when a minimum number of keys have changed since the last save. Use the save setting inside the redis.conf file to configure this setting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

what does Append Only File (AOF) in redis do?

A

Append Only File (AOF) stores each write operation sent to Redis in a journal file. Redis reads this file on restart only and uses it to restore the original dataset.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

AOF files are usually ……. than the equivalent RDB files for the same dataset.

A

bigger

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

AOF can be …… than RDB depending on the exact fsync policy

A

slower

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

If you care a lot about your data, but still can live with a few minutes of data loss in case of disasters, you can simply use

A

RDB alone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

There are many users using …… alone, but redis discourage it since to have an —- snapshot from time to time is a great idea for doing database backups, for faster restarts, and in the event of bugs in the AOF engine.

A

AOF
RDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

By default Redis saves snapshots of the dataset on disk, in a binary file called …..

A

dump.rdb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

for in linux

A

create a child process

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

how much should be the redis cache instance?

A

As a starting point, you can use the size of the cache folder on your file system. For example, if the var/cache folder on your file system is 5 GB, set up your Redis instance with at least 5 GB to start. Persistence is not required for the cache instance because the Commerce cache can be restored.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

performance options on redis

A

lazyfree-lazy-eviction yes
lazyfree-lazy-expire yes
lazyfree-lazy-server-del yes
replica-lazy-flush yes
6.x or later redis:
lazyfree-lazy-user-del yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

commandline for redis setup

A

bin/magento setup:config:set –cache-backend=redis –cache-backend-redis-<parameter_name>=<parameter_value>...</parameter_value></parameter_name>

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

To configure Redis page caching

A

bin/magento setup:config:set –page-cache=redis –page-cache-redis-<parameter_name>=<parameter_value>...</parameter_value></parameter_name>

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

enables Redis page caching, sets the host to 127.0.0.1 and assigns the database number to 1.all others set to default

A

bin/magento setup:config:set –page-cache=redis –page-cache-redis-server=127.0.0.1 –page-cache-redis-db=1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

what is required in redis if you use Redis for both the default and full page cache.

A

Important: If you use Redis for more than one type of caching, the database numbers must be different. It is recommended that you assign the default caching database number to 0, the page-caching database number to 1, and the session storage database number to 2. 0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

how to On install the Redis client on the EC2 instance?

A

sudo apt-get install redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

Configure Commerce to use Redis for session storage:

A

bin/magento setup:config:set –session-save=redis –session-save-redis-host=<ElastiCache> --session-save-redis-port=<ElastiCache> --session-save-redis-log-level=4 --session-save-redis-db=2</ElastiCache></ElastiCache>

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

extended Redis cache implementation in etc/env.php

A

‘cache’ => [
‘frontend’ => [
‘default’ => [
‘backend’ => ‘\Magento\Framework\Cache\Backend\Redis’,
‘backend_options’ => [
‘server’ => ‘127.0.0.1’,
‘database’ => ‘0’,
‘port’ => ‘6379’
],
],
],

79
Q

In case you are using the preload feature with the L2 cache, do not forget to add the……suffix to your keys, since L2 cache only transfers the hash of the data, not the data itself:

A

:hash

80
Q

L2 cache only transfers the ….. of the data, not the data itself:

A

hash

81
Q

what is L2 cache?

A

A level 2 cache (L2 cache) is a CPU cache memory that is located outside and separate from the microprocessor chip core

82
Q

Redis ping command?

A

redis-cli ping

83
Q

Redis monitor command?

A

redis-cli monitor

84
Q

what is response of redis ping?

A

pong

85
Q

what tool in redis supports automatic decompression of Commerce 2 Session and Page cache and displays PHP session data in a human-readable form. ?

A

RESP.app-GUI for Redis

86
Q

parameters for enabling Redis session storage?

A

–session-save=redis

87
Q

default value for session-save-redis-compression-threshold?

A

2048

88
Q

how to disable compression in redis?

A

session-save-redis-compression-threshold=0

89
Q

options for compression lib in redis?

A

Options: gzip, lzf, lz4 or snappy.

90
Q

default value for session-save-redis-compression-lib

A

gzip

91
Q

session-save-redis-log-level options?

A

Set to any of the following, listed in order from least verbose to most verbose:
0 (emergency: only the most severe errors)
1 (alert: immediate action required)
2 (critical: application component unavailable)
3 (error: runtime errors, not critical but must be monitored)
4 (warning: additional information, recommended)
5 (notice: normal but significant condition)
6 (info: informational messages)
7 (debug: the most information for development or testing only)

92
Q

how to set log level for redis to the only the most severe errors?

A

0

93
Q

what is 5 in log level of redis?

A

(notice: normal but significant condition

94
Q

how to have the most info on log level of redis?

A

set session-save-redis-log-level to 7 (debug: the most information for development or testing only)

95
Q

name 4 essential initialization routines happening in app/bootstrap.php

A

1- error handling
2-initialing the autoloader
3- setting profiling options
4-setting the default timezone

96
Q

in catching exceptions in bootstrap what happens in true/false?

A

If true: Commerce handled exception successfully. No need to do anything else.
If false: (or any other empty result) Commerce did not handle the exception. The bootstrap object performs the default exception-handling subroutine.

96
Q

bootstrap run logic , what 4 steps should happen before starting the application?

A

Initializes the error handler.

Creates the object manager and basic shared services that are used everywhere and are affected by the environment. The environment parameters are injected properly into these objects.

Asserts that maintenance mode is not enabled; otherwise, terminates.

Asserts that the Commerce application is installed; otherwise, terminates.

97
Q

bootstrap object file name?

A

/app/bootstrap.php /

98
Q

an application for retrieving static resources ?

A

\Magento\Framework\App\StaticResource

99
Q

how avoid potential exploits on the server?

A

The entry point for static view files is not used in production mode ,In production mode, the Commerce application expects that all necessary resources exist in the <your>/pub/static directory.</your>

100
Q

in what mode the content of the file is returned so that every time the resource is requested, the returned content is up to date?

A

developer mode

101
Q

in what mode the retrieved resource is published so it is accessible by the previously requested URL?

A

default mode

102
Q

in what mode bootstrap shows exception as is?

A

developer mode

103
Q

in what mode bootstrap attempts to log exception and display a generic error message?

A

any mode except developer mode

104
Q

what’s error code for default exception handling in bootstrap?

A

Terminates Commerce with error code 1

105
Q

what is edit resource entry point?

A

Magento\MediaStorage\App\Media

106
Q

——– attempts to find the media file in the configured ———and and write it into the ——– directory, then return its ——.

A

\Magento\Core\App\Media
database storage
pub/static
contents

107
Q

\Magento\Core\App\Media On error, returns an ….. status code in the —— with ——

A

HTTP 404 (Not Found)
header
no contents

108
Q

HTTP entry point Error handling
If you are using developer mode:
If the Commerce application is not installed, ——–
If the Commerce application is installed, display an error and HTTP status code 500 (Internal Server Error).

A

redirect to Setup Wizard.

109
Q

HTTP entry point Error handling
If you are using developer mode:

If the Commerce application is installed, display an error and HTTP status code ——–

A

500 (Internal Server Error).

110
Q

HTTP entry point Error handling
If the Commerce application is in maintenance mode, display a user-friendly “Service Unavailable” landing page with———

A

HTTP status code 503 (Service Unavailable).

111
Q

If the Commerce application is not installed, ——–

A

redirect to Setup Wizard.

112
Q

If the session is invalid,———

A

redirect to the home page.

113
Q

If there is any other application initialization error, display a user-friendly “Page Not Found” page with ———-

A

HTTP status code 404 (Not Found).

114
Q

On any other error, display a user-friendly “Service Unavailable” page with HTTP response ———

A

e with HTTP response 503 and generate an error report and display its ID on the page.

115
Q

what is maintenance parameter on bootstrap file?

A

$params[Bootstrap::PARAM_REQUIRE_MAINTENANCE]

116
Q

what is default value for $params[Bootstrap::PARAM_REQUIRE_MAINTENANCE] ?

A

false

117
Q

what is default value for $params[Bootstrap::PARAM_REQUIRE_IS_INSTALLED] ?

A

true

118
Q

what is input for $bootstrap->createApplication(X?)?

A

Magento\Framework\App\Http

119
Q

in what mode Exceptions are not displayed to the user; instead, exceptions are written to log files.?

A

default, production

120
Q

what mode Hides custom X-Magento-* HTTP request and response headers?

A

default

121
Q

in what mode You can configure maintenance mode to allow visitor access from a specified list of IP addresses.?

A

maintenance mode

122
Q

how to Redirects site visitors to a default Service Temporarily Unavailable page.?

A

maintenance mode

123
Q

what mode Enables automatic code compilation?

A

developer mode

124
Q

what mode Shows custom X-Magento-* HTTP request and response headers?

A

developer mode

125
Q

what mode Serves static view files from cache only?

A

production

126
Q

what mode enables you to deploy the Commerce application on a single server without changing any settings?

A

default

127
Q

in what modes Static view files are cached?

A

default

128
Q

in what mode You cannot enable or disable cache types using the Admin.?

A

production

129
Q

in what mode Static view files are not materialized, and URLs for them are composed on the fly.

A

production

130
Q

in what mode An exception is thrown when an event subscriber cannot be invoked?

A

developer

131
Q

in what mode Static view files are not cached; they are written to the pub/static directory every time they are called?

A

developer

132
Q

when application runs a deployment script, If the app/etc/config.php file does not exist in the codebase, static files are ———–and deployed during this phase. This ——– the length of your deploy phase and site maintenance.

A

compressed using gzip
increases

133
Q

what file defines how to build and deploy Adobe Commerce, including user access, service mapping (relationships), hooks, cron jobs, and more.

A

.magento.app.yaml

134
Q

defines the system-specific settings Adobe Commerce uses to configure your store. Adobe Commerce generates this file if it does not detect it during the build phase

A

app/etc/config.php

135
Q

defines the services Adobe Commerce uses by name and version. For example, this file can include versions of MySQL, PHP extensions, and Elasticsearch or OpenSearch. These are referred to as services.

A

.magento/services.yaml

136
Q

defines how Adobe Commerce processes an incoming URL.

A

.magento/routes.yaml

137
Q

centralizes the management of build and deploy actions across all of your environments, including Pro Staging and Production, using environment variables.

A

.magento.env.yaml

138
Q

user access, service mapping (relationships), hooks, cron jobs, a are in what file?

A

.magento.app.yaml

139
Q

how to view logs in magento cloud?

A

You can view logs using the magento-cloud log command.

140
Q

build phase

A

During the build phase, the site is not in maintenance mode and will not be brought down if errors or issues occur. We build only what has changed since the last build.

141
Q

how to change Fastly API token credentials?

A

submit a ticket to adobe support

142
Q

what is apex domain?

A

An apex domain is a custom domain that does not contain a subdomain,

143
Q

name common attacks that vastly can avoid?

A

Ping of Death, Smurf attacks, as well as other ICMP-based floods.

144
Q

Fastly manages the TCP level attacks at the———

A

cache layer

145
Q

DDOS protection is built-in to the ——- service.

A

FAstly CDN

146
Q

For attacks targeting ……, the Fastly service filters out ———-

A

layer 3 or 4
traffic based on port and protocol,

147
Q

The apex domain (testweb.com and www.testweb.com) is linked to the Adobe Commerce on cloud infrastructure Fastly service account. You want to manage Fastly services for the service.testweb.com and product-updates.testweb.com subdomains from a ——- Fastly account.Submit a Adobe Commerce support ticket requesting that the subdomains be delegated from the Adobe Commerce on cloud infrastructure Fastly service account to the Fastly account. Include the ——– for the Fastly account in the ticket.

A

different
Service ID

148
Q

how to Block traffic by IP?

A

the most effective way to block traffic by specific IP addresses and subnets is adding an ACL for Fastly in the Commerce Admin. Following are the steps with links to more detailed instructions:
Stores > Configuration > Advanced > System > Full Page Cache > Fastly Configuration.
Create a new ACL with a list of IP addresses or subnets you’re going to block.
Add it to the ACL list and block as described in the Blocking guide for the Fastly_Cdn module for Adobe Commerce.

149
Q

Block by country?

A

For the Adobe Commerce on cloud infrastructure store, the most effective way to block traffic by country(s) is adding an ACL for Fastly in the Commerce Admin.

In the Commerce Admin, navigate to Stores > Configuration > Advanced > System > Full Page Cache > Fastly Configuration.
Select the countries and configure blocking using ACL as described in the Blocking guide for the Fastly_Cdn module for Adobe Commerce.

150
Q

To establish blocking based on user agent,?

A

To establish blocking based on user agent, you need to add a custom VCL snippet to your Fastly configuration. To do this, take the following steps:

In the Commerce Admin, navigate to Stores > Configuration > Advanced > System > Full Page Cache.
Then Fastly Configuration > Custom VCL Snippets.
Create the new custom snippet as described in the Custom VCL snippets guide for the Fastly_Cdn module. You can use the following code sample as an example. This sample disallows traffic for the AhrefsBot and SemrushBot user agents.
name: block_bad_useragents
type: recv
priority: 5
VCL:
if ( req.http.User-Agent ~ “(AhrefsBot|SemrushBot)” ) {
error 405 “Not allowed”;
}

151
Q

what is rate limiting?

A

Rate limiting is a strategy for limiting network traffic.

152
Q

There is an experimental Fastly functionality for Adobe Commerce on cloud infrastructure which allows you to specify the …….for particular paths

A

rate limit

153
Q

Fastly works with —— to provide fast caching capabilities and a Content Delivery Network (CDN) for static assets

A

Varnish

154
Q

Get Fastly credentials for Staging and Production environments
Enable Fastly CDN caching
Upload Fastly ………
Update ——- to ——- traffic to the Fastly service
Test Fastly caching

A

VCL snippets
DNS configuration, rout

155
Q

file to get Fastly credentials?

A

/mnt/shared/fastly_tokens.txt

156
Q

command to get Fastly credentials?

A

magento-cloud variable:get -e <environment></environment>

157
Q

environment variables for Fastly

A

CONFIG__DEFAULT__SYSTEM__FULL_PAGE_CACHE__FASTLY__FASTLY_API_KEY

CONFIG__DEFAULT__SYSTEM__FULL_PAGE_CACHE__FASTLY__FASTLY_SERVICE_ID

158
Q

DNS setting for Fastly

A

For Pro Staging and Production:
mcprod.<your-domain>.com
mcstaging.<your-domain>.com
For Starter Production only:
mcprod.<your-domain>.com</your-domain></your-domain></your-domain>

159
Q

how to check version of Fastly installed?

A

composer show fastly

160
Q

curl command to check response headers?

A

curl -vo /dev/null -H Fastly-Debug:1 https://<live-URL></live-URL>

161
Q

command with resolution bypass of dns

A

curl -vo /dev/null -H Fastly-Debug:1 –resolve <live-URL-hostname>:443:<live-IP-address></live-IP-address></live-URL-hostname>

162
Q

response that Fastly is working

A

< Fastly-Magento-VCL-Uploaded: yes
< X-Cache: HIT, MISS

163
Q

domains and subdomains for Fastly can configurations

A

DOMAIN OR SUBDOMAIN CNAME
mcprod.your-domain.com prod.magentocloud.map.fastly.net
mcstaging.your-domain.com prod.magentocloud.map.fastly.net

164
Q

When the CNAME records are live, Adobe——-certificates and uploads the ——

A

provisions, SSL/TLS certificates.

165
Q

image optimization features by Fastly

A

Force lossy conversion
Deep image optimization
Adaptive pixel ratios
Support for common image formats: PNG, JPEG, GIF, and WebP

166
Q

. Image optimization only applies to —– images. —— images are not resized.

A

product, CMS

167
Q

Deep image optimization is —– by default. When this feature is —-, the built-in resizing feature in Adobe Commerce is turned —– and resizing work is ——- to the Fastly IO service.

A

off, enabled,off,offloaded

168
Q

The Adaptive pixel ratios feature is useful to optimize images for ——– web applications. It allows you to deliver multiple image sizes and resolutions from —— image source file by adding a —– for each product image.

A

Progressive, one,srcset

169
Q

The standard WAF service powered by Fastly does not support what features?

A

Protection against malware or bot mitigation
Rate limiting
Configuring a logging endpoint for customer

170
Q

what benefits The WAF service provides ?

A

CI compliance—WAF enablement ensures that Adobe Commerce storefronts in Production environments meet PCI DSS 6.6 security requirements.
Default WAF policy—The default WAF policy, configured and maintained by Fastly, provides a collection of security rules tailored to protect your Adobe Commerce web applications from a wide range of attacks, including injection attacks, malicious inputs, cross-site scripting, data exfiltration, HTTP protocol violations, and other OWASP Top Ten security threats.
WAF onboarding and enablement—Adobe deploys and enables the default WAF policy in your Production environment within 2 to 3 weeks after provisioning is final.
Operations and maintenance support—
Adobe and Fastly set up and manage your logs and alerts for the WAF service.
Adobe triages customer support tickets related to WAF service issues that block legitimate traffic as Priority 1 issues.
Automated upgrades to the WAF service version ensure immediate coverage for new or evolving exploits.

171
Q

collection of security rules in Fastly avoids what attacks?

A

range of attacks, including injection attacks, malicious inputs, cross-site scripting, data exfiltration, HTTP protocol violations,

172
Q

what does WAF do? the WAF in adobe commerce is powered by whom?

A

detects, logs, and blocks malicious request traffic before it can damage your sites or network. , FASTLY

173
Q

customize Fastly error?

A

In the right pane, expand Full Page Cache > Fastly Configuration > Custom Synthetic Pages.

174
Q

how to Retrieve the IP address of your store?

A

nslookup {your_project_id}.ent.magento.cloud

and for integration
nslookup gw.{your_region}.magentosite.cloud

175
Q

If any block in a layout is designated as uncacheable, the entire page is uncacheable.

A

uncacheable

176
Q

name some Examples of uncacheable pages

A

compare products, cart, checkout pages

177
Q

Only HTTP — and —- requests are cacheable.

A

GET ,HEAD

178
Q

The list of resources that you can access depends on your …….Permissions required to access particular resource are configured in the ——

A

user type,webapi.xml

179
Q

if administrators are authorized for the Magento_Customer::group resource, they can make a ……..

A

GET /V1/customerGroups/:id call.

180
Q

user type for Resources with anonymous or self permission

A

Customer

181
Q

user type for Resources with anonymous permission

A

Guest

182
Q

A guest or anonymous is a special permission that doesn’t need to be defined in —–

A

acl.xml

183
Q

what is a special access used if you already have an authenticated session with the system?

A

self

184
Q

For example,——– fetches the logged-in customer’s details. This is typically useful for …….

A

GET /V1/customers/me ,JavaScript-based widgets

185
Q

<route>
33 <service></service>
34 <resources>
35 <resource></resource>
36 </resources>
37 <data>
38 <parameter>%customer_id%</parameter>
39 </data>
). It just indicates that the current resource in webapi.xml can be accessed -------- the need for authentication.
</route>

A

without

186
Q

—- access enables a user to access resources they own.

A

self

187
Q

authentication method for your clients:

A

Mobile application authentication
Third-party application authentication
JavaScript widget authentication (storefront or Admin)

188
Q

Mobile application. 1………..authentication.
Third-party application. 2-…. authentication.
JavaScript widget on the Admin or storefront. 3—– authentication.

A

1-Token-based
2-OAuth-based
3-Session-based

189
Q

access token types in token authentication ?

A

Integration
Admin
Customer

190
Q

DEFAULT LIFETIME for Integration, admin and customer token

A

Integration The merchant determines which Commerce resources the integration can access. Indefinite. It lasts until it is manually revoked.

Admin The merchant determines which Commerce resources an admin user has access to. 4 hours

Customer Commerce grants access to resources with the anonymous or self permission. Merchants cannot edit these settings. 1 hour

191
Q

make a web API call with an admin token:

A

curl -X GET “http://<host>/rest/default/V1/customers/2" -H "Authorization: Bearer vbnf3hjklp5iuytre"</host>

192
Q

make a web API call with a customer token:

A

curl -X GET “http://<host>/rest/default/V1/customers/me" -H "Authorization: Bearer asdf3hjklp5iuytre"</host>