CloudFront CDN Lab Flashcards

1
Q

Can you have multiple origins per distribution?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Create a web distribution if you want to:

A

Speed up distribution of static and dynamic content, for example, .html, .css, .php, and graphics files.
Distribute media files using HTTP or HTTPS.
Add, update, or delete objects, and submit data from web forms.
Use live streaming to stream an event in real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Create an RTMP distribution…

A

…to speed up distribution of your streaming media files using Adobe Flash Media Server’s RTMP protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

For web distributions, what can be the origin of your files?

A

either an Amazon S3 bucket or a web server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

After you create the web distribution, can you add more origins?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

With an RTMP distribution, can you play a media file before the file has finished downloading from a CloudFront edge location?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

For RTMP distributions, what can be the origin of your files?

A

an Amazon S3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

To use CloudFront live streaming…

A

…create a web distribution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Origin Domain Name

A

name of the bucket or webserver

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can you have on-premise origins?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Origin Path

A

way of adding multiple subfolders in the origin (pictures, videos, etc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Origin ID

A

name of the origion

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Restrict Bucket Access

A

Yes or No, example: stop people from using s3 bucket url so that they use CloudFront instead

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

If you decide to restrict bucket access…

A

…you need to create an Origin Access Identity (OAI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is an Origin Access Identity?

A

a user. can add permissions to that user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

If you do not update the bucket policy to Grant Read Permissions…

A

…you will have to manually update the permissions yourself

17
Q

Path Pattern

A

allows us to set different origin servers

18
Q

Which HTTP methods are cached by default?

A

GET, HEAD

19
Q

If you have objects that constantly need to change (e.g. every 12 hours)…

A

…decrease the TTL

20
Q

What is meant by Restrict Viewer Access?

A

Viewers have to use signed URLs or signed cookies

21
Q

Restrict Viewer Access use case

A

If you have content you want to restrict to a certain audience, e.g. A Cloud Guru, it checks to make sure users have signed URLs or cookies (ie if users paid)

22
Q

Signed URLs/cookies are…

A

…private

23
Q

How are you going to secure CloudFront or secure objects in S3 to make sure only paying customers use it?

A

Always use signed URLs or signed cookies

24
Q

AWS WAF Web ACL

A

…Layer 7 protection, so WAF operates at the application layer. Protects against SQL injection, cross-site scripting

25
Q

Default CloudFront Certificate (*.cloudfront.net)

A

Choose this option if you want your users to use HTTPS or HTTP to access your content with the CloudFront domain name (such as https://d111111abcdef8.cloudfront.net/logo.jpg).

26
Q

Custom SSL Certificate (example.com)

A

Choose this option if you want your users to access your content by using an alternate domain name, such as https://www.example.com/logo.jpg.

27
Q

If you need to prevent users in selected countries from accessing your content…

A

…you can specify either a whitelist (countries where they can access your content) or a blacklist (countries where they cannot)

28
Q

Can you have both a whitelist and a blacklist simultaneously?

A

No

29
Q

Invalidating objects…

A

… removes them from CloudFront edge caches. there is a charge

30
Q

T/F: You can use CloudFront to download and upload files.

A

True