Amazon Exam SCS-C02 Topic 8 Question 23 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 23
Topic #: 8

A company uses HTTP Live Streaming (HL'S) to stream live video content to paying subscribers by using Amazon CloudFront. HLS splits the video content into chunks so that the user can request the right chunk based on different conditions. Because the video events last for several hours, the total video is made up of thousands of chunks.

The origin URL is not disclosed, and every user is forced to access the CloudFront URL. The company has a web application that authenticates the paying users against an internal repository and a CloudFront key pair that is already issued.

What is the simplest and MOST effective way to protect the content?

ADevelop the application to use the CloudFront key pair to create signed URLs that users will use to access the content.

BDevelop the application to use the CloudFront key pair to set the signed cookies that users will use to access the content.

CDevelop the application to issue a security token that Lambda@Edge will receive to authenticate and authorize access to the content

DKeep the CloudFront URL encrypted inside the application, and use AWS KMS to resolve the URL on-the-fly after the user is authenticated.

Show Suggested Answer

Suggested Answer: B

Utilizing CloudFront signed cookies is the simplest and most effective way to protect HLS video content for paying subscribers. Signed cookies provide access control for multiple files, such as video chunks in HLS streaming, without the need to generate a signed URL for each video chunk. This method simplifies the process for long video events with thousands of chunks, enhancing user experience while ensuring content protection.

by Jacquline at Jul 08, 2024, 10:58 PM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pete

18 days ago

Haha, I love how they're trying to 'not disclose the origin URL.' Like that's going to stop anyone these days. All the more reason to go with option B and keep things simple. Signed cookies all the way!

upvoted 0 times

...

Marta

1 months ago

I don't know, guys. Signed URLs just seem like the most straightforward solution to me. Less overhead than managing cookies or security tokens, and it still keeps the content protected. I think option A is the winner here.

upvoted 0 times

Lacresha

20 days ago

I agree, signed URLs are simple and effective. Option A is the way to go.

upvoted 0 times

...

I think the simplest and most effective way to protect the content is to develop the application to use the CloudFront key pair to create signed URLs.

upvoted 0 times

...