CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Navigating AWS Solutions Architect Exam Questions: A Focus on Global Content Delivery
Explore a common exam question on AWS services for low latency and security, and learn how to choose the right options.
A common pitfall in the AWS Certified Solutions Architect - Associate exam involves selecting the right combination of services for global content delivery and security. Candidates often struggle with differentiating between options that seem similar but have distinct purposes.
The question
A startup wants to build a web application that serves content globally with low latency. They also need to ensure secure access to the application. Which combination of AWS services should they use to achieve this?
A. Amazon CloudFront with AWS Shield and WAF
B. Amazon Route 53 with Elastic Load Balancing
C. Amazon S3 for static content and AWS Elastic Beanstalk for dynamic content
D. AWS Global Accelerator with Amazon EC2 instances
Think before you scroll
Before choosing an answer, consider the key requirements: low latency for global content delivery and security measures. Not every combination of services will meet both criteria effectively.
The answer
The correct option is A: Amazon CloudFront with AWS Shield and WAF. This combination provides a global content delivery network (CDN) that minimizes latency while ensuring security against threats.
Why the other options lose
B. Amazon Route 53 with Elastic Load Balancing: While Route 53 is an excellent DNS service and Elastic Load Balancing distributes traffic, this option lacks the global content delivery aspect and specific security features that CloudFront, Shield, and WAF offer.
C. Amazon S3 for static content and AWS Elastic Beanstalk for dynamic content: This option focuses on hosting and managing applications but does not provide a built-in CDN for low latency or the security features necessary for a global audience.
D. AWS Global Accelerator with Amazon EC2 instances: Although Global Accelerator improves the availability and performance of applications, it does not provide the same content delivery capabilities or security features as CloudFront combined with Shield and WAF.
The concept behind it
To meet the needs of serving content globally with low latency and secure access, a combination of CDN and security services is essential. AWS CloudFront acts as a CDN that caches content closer to users, while AWS Shield and WAF add layers of security to protect against common web exploits and DDoS attacks.
Exam trap to remember
Remember the rule of combining a CDN with security services: Always look for options that address both performance and security in tandem.