SAP-C02 CloudFront Invalidation Practice Question
A company is using Amazon CloudFront with an S3 origin. They notice that users are receiving outdated content. What configuration change should be made to ensure users always get the latest content?
⚠ Common exam trap
Choosing to reduce TTL to 0 may seem like a solution but it's inefficient; invalidation is the proper way to clear cached objects.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an invalidation for the objects.
Creating an invalidation removes cached objects from CloudFront edge locations, forcing them to be refreshed from the origin. Option A is incorrect because signed URLs control access, not cache freshness. Option C is incorrect because compression does not affect whether cached or fresh content is served. Option D is incorrect because reducing TTL to 0 would cause every request to go to the origin, increasing load and latency; invalidations are more efficient.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use signed URLs to serve content.
Why it's wrong here
Signed URLs are for access control.
- ✓
Create an invalidation for the objects.
Why this is correct
Invalidation removes cached objects, forcing fresh fetch.
- ✗
Enable compression on the S3 bucket.
Why it's wrong here
Compression does not update cached content.
- ✗
Reduce the TTL to 0 in the CloudFront distribution.
Why it's wrong here
TTL 0 would cause high load on origin.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
This SAP-C02 question is part of Courseiva's 1,660-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.