SOA-C03 - Networking and Content Delivery (18% of the exam) - Section 5.4

Configure content and service distribution using Amazon CloudFront and AWS Global Accelerator, including origins and cache behaviours.

Configure Amazon CloudFront distributions with origin configuration and cache behaviours to serve content at low latency from edge locations, and use AWS Global Accelerator to route TCP and UDP traffic over the AWS global network. Choose between CloudFront and AWS Global Accelerator based on whether the workload requires HTTP caching or static IP anycast routing.

Amazon CloudFrontAWS Global AcceleratorCache behavioursOrigin configuration

Practice question for this objective

Free sampleNetworking and Content Deliverymedium

A company serves a static marketing website made of HTML, images and JavaScript from an Amazon S3 bucket in eu-west-1. Visitors are spread across Europe, North America and Asia, and pages in distant Regions load slowly. The team wants to cache this cacheable content at edge locations close to viewers and serve it over HTTPS with the least operational overhead. Which service should they place in front of the bucket?

  • AAWS Global Accelerator with the S3 bucket added as an endpoint, so viewers connect to static anycast IP addresses routed to the nearest edge location.
  • BAmazon CloudFront with the S3 bucket as the origin, so cacheable objects are stored at edge locations and served to viewers over HTTPS from the nearest point of presence. Correct
  • CAn Application Load Balancer in each Region pointing at the S3 bucket, so viewers reach a regional balancer that forwards their request on to the static content.
  • DAmazon Route 53 latency-based records that resolve viewers to the S3 website endpoint giving them the lowest measured network latency to the bucket Region.
Choose Amazon CloudFront to cache static website content at edge locations near viewers and serve it over HTTPS. CloudFront is AWS's content delivery network: it caches cacheable objects such as HTML, images and scripts at global edge locations, so a viewer is served from a nearby point of presence instead of the origin Region. That cuts latency for static content and adds HTTPS termination at the edge. Global Accelerator accelerates the network path but never caches, a load balancer works only on regional compute, and latency DNS just picks a Region without any edge cache.

Why A is wrong: Global Accelerator improves the network path for TCP and UDP traffic but does not cache content at the edge, so repeated requests still travel to the origin Region and the slow loads for static assets remain.

Why B is correct: CloudFront is the content delivery network that caches static objects at edge locations near viewers and serves them over HTTPS, which directly reduces latency for the cacheable website content with little ongoing management.

Why C is wrong: An Application Load Balancer distributes requests across compute targets within one Region and cannot use an S3 bucket as a target, so it neither caches objects nor places content closer to distant viewers.

Why D is wrong: Latency routing only steers DNS toward the bucket's single Region and caches nothing, so viewers far from eu-west-1 still fetch every object across a long path with no edge acceleration.

See more SOA-C03 practice questions, answers explained.

Exam traps in Networking and Content Delivery

Answers that look right on this material and are not. Each one is a distractor from a different question in the SOA-C03 bank for this domain.

  • Amazon CloudFront with the two Network Load Balancers configured as origins in an origin group, caching disabled, and the distribution domain published to clients to allowlist.

    Why it is wrong: CloudFront is built to cache and accelerate content, and its edge addresses are not a small fixed set clients can allowlist, so it does not fit a non-cacheable API needing static IPs.

  • Create two separate distributions, one for each origin, and rely on the client application to send static requests to one distribution and API requests to the other.

    Why it is wrong: Using two distributions pushes the routing decision onto the client and abandons the single-distribution requirement, adding management overhead instead of splitting paths within one distribution as asked.

  • Amazon CloudFront with the Network Load Balancers added as custom origins, so player sessions are cached at the edge and routed to the nearest healthy Region automatically.

    Why it is wrong: CloudFront accelerates and caches HTTP and HTTPS content and does not proxy raw UDP game traffic, so it cannot front a TCP and UDP session backend or provide fixed allowlistable entry IPs for it.

Examworthy is not affiliated with or endorsed by Amazon Web Services. Original, blueprint-aligned practice material only.