These questions are independently created for study purposes. They are not official AWS exam questions, actual exam questions, leaked questions, or exam dumps.
CLF-022
Which of the following best describes the main use case for Amazon CloudFront?
Choices
Explanation and answer
Read the explanation and correct answer (spoiler — try answering first)
Correct answer: B. Delivering content from edge locations close to users
Explanation
CloudFront is a CDN service that uses edge locations to deliver web content with low latency.
Per-choice explanations
A. Sending only AWS billing budget notifications
Incorrect. Budget notifications are handled by AWS Budgets.
B. Delivering content from edge locations close to users
Correct. CloudFront delivers content from edge locations.
C. Creating IAM users
Incorrect. IAM user management is handled by IAM.
D. Running SQL queries against RDS
Incorrect. SQL execution is performed by databases such as RDS.
Practical Use
Amazon CloudFront is a CDN (Content Delivery Network) service that AWS operates from edge locations worldwide. You register an S3 bucket, an ALB, an API Gateway endpoint, or your own origin server as the origin. Edge locations then cache the content retrieved from the origin and serve it to users from a nearby location. This reduces latency caused by geographic distance and lowers direct origin traffic, which in turn reduces origin load and data transfer cost. On the exam, the typical pattern is to pick CloudFront from keywords such as "a service that delivers content quickly from the edge" or "the CDN service." Common distractors include IAM (user and permission management), RDS (running SQL against a relational database), and AWS Budgets (budget threshold alerts). All of these belong to a completely different domain than content delivery, and the question is essentially asking whether the test taker has confused the role of the service. Key points for CLF-C02 are that CloudFront is a caching delivery service rather than a storage service, that it is used for HTTPS delivery, and that it is combined with ACM certificates. For SAA-C03 and above, more advanced topics are covered. These include protecting an S3 origin with OAC (Origin Access Control) so that the bucket can stay private while still being served, cache TTL and Invalidation operations, the constraint that ACM certificates used with CloudFront must reside in us-east-1, attack mitigation in combination with WAF, and access control through signed URLs and signed cookies.