Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS - Solutions Architect > Global Content Delivery > Flashcards

Global Content Delivery Flashcards

1
Q

What is ACM?

A

AWS Certificate Manager (ACM) is a service which allows for the creation, management, and renewal of certificates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True/False. ACM can run as either a public or private Certificate Authority (CA).

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Can ACM generate or import certificates?

A

Both.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

True/False. If ACM generates a certificate, it cannot renew said certificate for us.

A

False. If ACM generates a certificate, it CAN renew said certificate for us.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

True/False. If we import a certificate into ACM, we are responsible for renewing the certificate.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can ACM certificates be deployed to all AWS services?

A

No. Certificates can only be deployed to supported services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Can ACM be used with EC2?

A

No.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

True/False. ACM is a regional service.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

True/False. Certificates cannot leave the region they are generated or imported in.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Do services using ACM certificates need to be in the same region as the ACM certificate that they are using?

A

For most services, the certificate needs to be located in the same region as the service (if the service is in ap-southeast-2 then the ACM would also need to be in ap-southeast-2).

For global services, such as CloudFront, the ACM would need to be located in ’us-east-1’.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is CloudFront?

A

CloudFront is a Content Delivery Network (CDN) within AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What all can be configured in CloudFront on a behavior basis?

A

Caching policies, allowed HTTP methods, and viewer access can be configured on a behavior basis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the default TTL for objects cached in CloudFront?

A

Objects cached by CloudFront have a default TTL of 24 hours.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Is it possible to set min/max TTL values in CloudFront?

A

It’s possible to set minimum TTL and maximum TTL values that will be applied across all objects.

Different headers can also be used to set TTLs, but if the values indicated in these headers is outside the range of the minimum/maximum TTLs, the minimum/maximum TTL would then be applied.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are examples of headers that can be used with custom origins in CloudFront?

A

Origin Header: Cache-Control max-age (seconds)

Origin Header: Cache-Control s-maxage (seconds)

Origin Header: Expires (Date & Time)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How is cache invalidations performed in CloudFront?

A

Cache invalidations are performed on a distribution.

17
Q

What do CloudFront Distributions do for CloudFront?

A

CloudFront distributions tell CloudFront where we want content to be delivered from, and the details about how to track and manage content delivery.

Cache invalidations are applied to all edge locations within that distribution.

18
Q

How can we identify what specific image was used when viewing CloudFront logs in CloudWatch?

A

Versioned file names can be useful for quickly identifying what specific image was used when we view our logs in CloudWatch, and it also results in us not needed to be overly dependent on using cache invalidations.

19
Q

Does CloudFront support SSL by default?

A

CloudFront supports SSL by default via the following certificate:

*.cloudfront.net
20
Q

When can we not use the default SSL certificate in CloudFront?

A

The default SSL certificate cannot be used if we’re taking advantage of the Alternate Domain Names feature and using a DNS Provider such as Route53 to point our Alternate Domain Name at our CloudFront Distribution.

21
Q

What is SNI?

A

Server Name Identification (SNI) is an extension for the TLS protocol to indicate a hostname in the TLS handshake.

22
Q

What are CloudFront origins?

A

CloudFront origins are the location where content is stored, and from which CloudFront gets content to serve to users.

23
Q

What type of identity can be associated with CloudFront Distributions that utilize S3 Origins?

A

An Origin Access Identity (OAI) is a type of identity that can be associated with CloudFront Distributions that utilize S3 Origins.

24
Q

True/False. OAIs can be used in S3 Bucket Policies to allow access from an OAI, but implicitly deny everything else.

A

True.

25
Q

True/False. OAIs are generally used to ensure direct access to S3 objects is allowed when using private CloudFront Distributions.

A

False. OAIs are generally used to ensure NO direct access to S3 objects is allowed when using private CloudFront Distributions.

26
Q

How can CloudFront Distributions be secured that use custom origins?

A

To secure CloudFront Distributions that use custom origins, we can either require custom headers or use the publicly available IP ranges of CloudFront to create a firewall around our custom origin(s).

27
Q

What security modes can CloudFront run in?

A
  1. Public — This is the default mode, and it results in open access to objects. When using this mode, content is available to any viewer.
  2. Private — If this mode is configured, requests require a signed cookie or signed URL.
28
Q

What is AWS Global Accelerator?

A

AWS Global Accelerator is designed to improve global network performance by offering entry points onto the global AWS transit network as close to customers as possible via the usage of anycast IP addresses.

29
Q

What is Anycast?

A

Anycast is an IP network addressing scheme that allows multiple servers to share the same IP address, allowing for multiple physical destination servers to be logically identified by a single IP address.

30
Q

What is the difference between Global Accelerator and CloudFront?

A

One difference between Global Accelerator and CloudFront is that Global Accelerator can be used for non HTTP/HTTP applications (this means it could work with TPC/UDP applications whereas CloudFront wouldn’t be able to).

Another difference between the two is that Global Accelerator doesn’t cache content, whereas CloudFront does.

31
Q

How does Global Accelerator improve performance for customers?

A

Global Accelerator improves performance simply by moving the AWS network closer to customers.

32
Q

What is Lambda@Edge?

A

Lambda@Edge is a feature of CloudFront that allows us to run lightweight Lambda functions at CloudFront edge locations to modify traffic.

These functions can adjust the data between the Viewer & the Origin.

33
Q

What languages does Lambda@Edge currently support?

A

Lambda@Edge currently only supports Node.js and Python.

34
Q

True/False. It runs in the AWS Public Space.

A

True.

35
Q

True/False. Lambda@Edge supports Lambda Layers.

A

False. Lambda@Edge does not support Lambda Layers.

AWS - Solutions Architect (13 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions