11 Miscellaneous Topics Flashcards

1
Q

What is AWS Storage Gateway?

A

A bridge between on-premises data and AWS storage, running as a virtual machine or hardware appliance, using common protocols like iSCSI, NFS, or SMB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What AWS services does Storage Gateway integrate with?

A

EBS, S3, and Glacier.

Not EFS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are common use cases for Storage Gateway?

A

Data migration to AWS, cloud storage extensions when on-premises storage is constrained, and backups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Volume Gateway in AWS Storage Gateway?

A

A SAN that presents block storage volumes to on-premises devices using iSCSI.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the two operating modes of Volume Gateway?

A

Stored mode and Cached mode.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does Stored mode in Volume Gateway do?

A

Stores all data locally on-premises and asynchronously uploads it to AWS as EBS volume snapshots in S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does Cached mode in Volume Gateway do?

A

Stores frequently accessed data locally while keeping all data in AWS, accessible through the Storage Gateway.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How does Tape Gateway function in AWS Storage Gateway?

A

As a virtual tape library (VTL) that stores data in S3 or Glacier.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does File Gateway enable in AWS Storage Gateway?

A

Access to files stored in S3 using NFS (Linux) or SMB (Windows).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How is File Gateway different from Volume Gateway?

A

File Gateway allows direct access to the S3 bucket, while Volume Gateway requires accessing S3 data via the Storage Gateway.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What caching does File Gateway provide?

A

Read and write caching locally to improve performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What happens if multiple File Gateways are used?

A

Files aren’t lost, and changes made by one gateway can override others’ changes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does the NotifyWhenUploaded API in File Gateway do?

A

Uses EventBridge to notify other gateways when files have changed, so they can update their caches.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the difference between AWS Transfer and DataSync?

A

Transfer is used by applications running in the cloud. DataSync moves data in and out of the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is AWS DataSync used for?

A

AWS DataSync moves data between on-premises and AWS, or vice versa.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What feature ensures data integrity in AWS DataSync?

A

Built-in data validation ensures data integrity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Where does the AWS DataSync Agent run?

A

The AWS DataSync Agent runs on-premises.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What protocols does the AWS DataSync Agent use to connect to existing storage?

A

The AWS DataSync Agent uses NFS or SMB protocols.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is a Task in AWS DataSync?

A

A Task defines what data is being synced and includes options like traffic throttling or scheduling.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which AWS services can AWS DataSync synchronize data to?

A

AWS DataSync can synchronize data to EFS, FSx, and S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is AWS Direct Connect?

A

A physical connection into a DX location, which has a direct link to an AWS Region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is a dedicated connection in AWS Direct Connect?

A

A single physical connection assigned to a single customer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is a hosted connection in AWS Direct Connect?

A

A connection re-sold by AWS partners and shared with multiple customers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Who installs the physical connection for AWS Direct Connect?

A

The customer or a third-party.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are the costs associated with AWS Direct Connect?

A

A fixed hourly cost and a charge for data transfer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Does a single AWS Direct Connect connection have redundancy?

A

No, a single Direct Connect connection does not have redundancy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Who owns AWS Direct Connect locations?

A

They are not AWS-owned; they are typically major third-party data centers where AWS rents a cage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are Virtual Interfaces (VIFs) used for in AWS Direct Connect?

A

They are used for configuration of connections.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is a Public VIF?

A

A VIF that gives access to public AWS endpoints (e.g., *.REGION.amazonaws.com).

It also gives access to Public IPs of EC2 instances etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is a Private VIF?

A

A VIF that gives access to Private Virtual Gateways attached to VPCs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How many VIFs can a single dedicated Direct Connect connection have?

A

50 public & private VIFs and 1 transit VIF.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

How many VIFs can a hosted connection have?

A

Just one.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is MACSec in the context of AWS Direct Connect?

A

A security protocol that encrypts frames, providing encryption in transit at Layer 2.

This protects the connection from the customer router to the AWS router

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What are the key features of MACSec?

A

Data integrity, data origin authenticity, and replay protection.

35
Q

How does MACSec operate?

A

It is hop-by-hop and only works between two adjacent network devices.

36
Q

Does MACSec replace end-to-end encryption?

A

No, it does not replace end-to-end encryption using IPSec.

37
Q

What identifies channels in MACSec?

A

The Secure Channel Identifier (SCI).

38
Q

What does MACSec inject into each frame?

A

A 16-byte MACSec tag at the start and a 16-byte integrity check at the end.

39
Q

What is required for authenticating connections in MACSec?

A

A CAK/CKN pair of keys added by the customer.

40
Q

What is an LOA-CFA in AWS Direct Connect?

A

A Letter of Authorization – Customer Facility Assignment that authorizes a cross-connect from the AWS cage to the customer’s port.

41
Q

What does the LOA-CFA establish?

A

A physical cable that establishes a Layer 1 connection.

42
Q

How does AWS Direct Connect integrate with an on-premises network?

A

Using VLAN and BGP sessions.

43
Q

Between which devices is the BGP session established in AWS Direct Connect?

A

Between the customer DX router and the AWS DX router, but it can be extended to the customer premises.

44
Q

What is the purpose of VLANs in AWS Direct Connect?

A

To create multiple isolated connections between the customer and DX routers.

45
Q

What is each Virtual Interface (VIF) created from in AWS Direct Connect?

A

A VLAN and a BGP session.

46
Q

What is a Private VIF used for?

A

To access a specific VPC using private IP addressing.

47
Q

Are Private VIF connections encrypted by default?

A

No, connections are not encrypted unless an application protocol (e.g., HTTPS) is used.

48
Q

What type of frames are supported by Private VIFs?

A

Jumbo frames.

49
Q

What does AWS advertise using BGP in Private VIFs?

A

The VPC CIDR.

50
Q

What can the customer advertise using BGP in Private VIFs?

A

Specific corporate prefixes.

51
Q

Can Private VIFs connect to VPCs in different regions?

A

No, they can only connect to VPCs in the same region as the DX location is advertised in.

52
Q

What do Private VIFs connect to within a VPC?

A

A Virtual Gateway (VGW).

53
Q

What is the purpose of Direct Connect Gateways?

A

To allow Private VIFs to access multiple VPCs and VPCs in other regions. They do this by logically mapping to Virtual Private Gateways

54
Q

How many VGWs can be associated with a single Direct Connect Gateway?

A

Up to 10 VGWs.

55
Q

Does a Direct Connect Gateway allow inter-VPC routing?

A

No, it only supports traffic between on-premises and VPCs.

56
Q

What are association proposals in the context of Direct Connect Gateways?

A

They allow cross-account VPCs to connect. The VPC account creates the proposal, and the DX Gateway account must accept it to enable routing.

57
Q

What does a Public VIF provide access to?

A

AWS public space resources, such as S3 and public IPs (e.g., Elastic IPs) of resources.

58
Q

What does AWS advertise to customers through a Public VIF?

A

All AWS public IPs, including those in every AWS region.

59
Q

Can customers advertise their own public IPs through a Public VIF?

A

Yes, customers can advertise any public IPs they own.

60
Q

Is the advertisement of public IPs through a Public VIF transitive?

A

No, prefixes from other customers cannot be accessed via the VIF.

61
Q

What does a Transit VIF connect to?

A

Transit Gateways from on-premises.

62
Q

How many Transit Gateways can a Transit VIF be associated with?

A

Up to three Transit Gateways via a single DX Gateway.

63
Q

What additional functionality does a Transit VIF provide?

A

It allows routing between two on-premises sites if both are connected to the Transit Gateway using Transit VIFs.

64
Q

Can a single DX Gateway be associated with both Private VIFs and Transit VIFs?

A

No, a single DX Gateway can only be associated with either Private VIFs or Transit VIFs, not both.

65
Q

What is used for end-to-end encryption over AWS Direct Connect?

A

An IPSec VPN over a Public VIF.

66
Q

Why is a Public VIF required for an IPSec VPN?

A

Because the VPN endpoint has a public IP.

67
Q

How does IPSec compare to MACSec in terms of overhead?

A

IPSec has higher overhead than MACSec but has wider support from routers.

68
Q

Is AWS Direct Connect highly available by default?

A

No, it is not highly available by default.

69
Q

What is a common failover pattern for a single Direct Connect connection?

A

Using a Site-to-Site VPN connection for failover.

70
Q

What is an alternative to a single Direct Connect connection for redundancy?

A

Using two separate connections.

71
Q

What is a Linked Aggregation Group (LAG) in AWS Direct Connect?

A

Multiple physical connections used as one logical connection.

72
Q

What is the primary purpose of a LAG in AWS Direct Connect?

A

To improve bandwidth rather than resiliency.

73
Q

Do all connections in a LAG need to terminate at the same Direct Connect location?

A

Yes, all connections must terminate at the same Direct Connect location.

74
Q

What does AWS Migration Hub do?

A

Migration Hub tracks migrations managed by other services.

75
Q

What does the Application Discovery Service do?

A

Application Discovery Service catalogues on-premises VMs, helping customers plan migrations.

76
Q

How does the Application Discovery Service operate in agent-less mode?

A

In agent-less mode, it scrapes VMWARE and other management APIs.

77
Q

How does the Application Discovery Service operate in agent-based mode?

A

In agent-based mode, it runs agents inside VMs, collecting detailed information about resource usage and network traffic.

78
Q

What does the Server Migration Service do?

A

Server Migration Service migrates entire VMs as-is.

79
Q

Is the Server Migration Service agent-based or agentless?

A

Server Migration Service is agentless, using a connector running on-premises to access data.

80
Q

What feature of the Server Migration Service ensures minimal disruption to on-premises VMs?

A

It performs incremental replication of live volumes to avoid disrupting on-premises VMs.

81
Q

What AWS service has the Server Migration Service replaced?

A

Server Migration Service replaced the now-deprecated VM Import / Export service.

82
Q

What does the Database Migration Service do?

A

The Database Migration Service migrates data into RDS and DynamoDB.

83
Q

Can the Database Migration Service migrate only data, or also ongoing changes?

A

The Database Migration Service can perform a one-off migration or migrate data along with subsequent changes to the original database.

84
Q

What tool helps convert database schemas during migrations?

A

The Schema Conversion Tool converts schemas, allowing migrations between database engines.