Aireddy Questions Flashcards
How many cloudformation stacks can a single cloudformation template create?
unlimited
8.7 hours downtime per year is
99.9% uptime
5.26 minutes downtime per year is
99.999% uptime
What is more expensive and complicated, high availability or fault tolerance?
The effect of an IAM statement is to either ___ or ___?
ALLOW or DENY
What type of IAM policy grants access and is assigned on each account individually?
Inline policy
What type of IAM policy is applied to all users at once?
managed policy
What is the max amount of IAM users per account?
5000
An IAM user can be a member of how many groups?
10
TRUE OR FALSE: GROUPS ARE NOT A TRUE IDENTITY THEY CAN’T BE REFERENCED AS A PRINCIPAL IN A POLICY
TRUE
____ limit what the account, including root can do inside that account. They don’t grant permissions themselves, just act as a barrier.
SCP’s
CloudTrail is enabled by default to retain for ___ days without cost or the need of S3?
90 days
Is CloudTrail real time?
No
in S3, use a ____ policy when you want to manage permissions in one place (IAM) and have access to the accounts accessing the bucket
Identity Policy
in S3, use a _____ policy if you need to grant anonymous or cross-account access to the bucket
bucket (or resource) policy
Question concerning web hosting and providing a maintenance or status page out of band
Use R53 and a different S3 bucket
EBS volumes are created in the ___ and isolated to the __ they were created in
AZ and isolated
EBS volumes are resilient to an AZ failure?
No
Can you create a presigned URL for an object you have do not have access too?
Yes
If use case mentions Legacy software licensed using a mac address, you can:
associate the mac address to a secondary ENI
What is the most performant EC2 Placement Group?
Cluster
What type of placement group Provides the highest level of availability and resilience?
Spread
Are spread placement groups supported for dedicated hosts?
No
What supports EC2, EKS, Lambda, HTTPS, HTTP/2 and websockets, ALB or ELB?
ALB
What AWS service automatically discover, classify, and protect your sensitive data?
Macie
What does SWF stand for?
Simple Workflow Service
SCPs do not affect any _______ role. these type of roles enable other AWS services to integrate with AWS Organizations and can’t be restricted by SCPs.
service-linked
Is RedShift OLTP or OLAP based DB?
OLAP
What is a petabyte scale data warehouse service?
RedShift
True/False: RedShift is serverless
False
EBS volume type for infrequent access?
Cold HDD (sc1)
EBS volume type that provides the highest performance SSD volume for mission-critical low-latency or high-throughput workloads?
Provisioned IOPS (io1)
EBS volume type that provides low-cost magnetic storage that defines performance in terms of throughput rather than IOPS.
Throughput Optimized HDD ( st1 )
________ is a natural language processing (NLP) service that uses machine learning to find insights and relationships in text.
Amazon Comprehend
______ is a service for building conversational interfaces using voice and text
Amazon Lex
Alexa is powered by
Lex
________ is a service that turns text into lifelike speech, enabling you to create applications that talk and build entirely new categories of speech-enabled products.
Amazon Polly
What allows you to Quickly build custom machine learning models to detect objects and scenes unique to your business?
Rekognition
______ provides high-quality and affordable speech-to-text transcription for a wide range of use cases.
Amazon Transcribe
______ users are users (or applications) who do not have AWS accounts.
Federated
Does Storage Gateway stored volume mode extend the on-premises capacity into AWS?
No, Stored Gateway mode ALL stored on-premises
What protocols does storage gateway volume stored present to clients?
iSCSI, NFS and SMB
Where does the data live when using storage gateway volume cached mode?
in AWS
Does using storage gateway volume cached mode utilize a Storage Gateway Endpoint?
Yes
Does using storage gateway volume stored mode utilize a Storage Gateway Endpoint?
Yes
If you want to extend your on-premises storage capacity, which storage gateway mode would you use, volume cached or volume stored?
volume cached
_____ bridges on-premises file storage and s3
storage gateway file gateway
What types of protocols can you mount a storage gateway file gateway?
NFS or SMB
Does file gateway allow for file locking?
No
What virtualization platforms are supported by SMS?
VMWare, Hyper-V and AzureVM
Is SMS agent based or agentless?
Agentless
What is a hardware VPN connection from your on-premises network equipment on a remote network to AWS managed network equipment attached to your Amazon Virtual Private Cloud (Amazon VPC)?
AWS Managed VPN
What is a hub-and-spoke model for connecting multiple remote branch offices to an Amazon VPC?
AWS VPN Cloudhub
What is a VPN connection from your equipment on a remote network to a user-managed software VPN appliance running inside your Amazon VPC?
Software VPN
An _______ endpoint is an elastic network interface with a private IP address that serves as an entry point for traffic destined to services powered by AWS PrivateLink.
interface
A _____ endpoint is a gateway that is a target for a specified route in your route table. This type of endpoint is used for traffic destined to a supported AWS service, such as Amazon S3 or Amazon DynamoDB.
gateway
Which Kinesis service is zero admin and provides latency of 60 seconds or higher?
Firehose
Which Kinesis service is sub 1 second latency?
Streams
Which Kinesis service allows for choice of stream processing frameworks?
Streams
Which Kinesis service allows for use of existing AWS analytics tools like S3, redshift, and ES (elasticsearch)?
Firehose
Which Elisticache service allows for backup/restore, scaling via read replicas, persitence and advanced data structures?
Redis
Which Elisticache service is a simple key value storage, is non-persistant, supports multi-threaded ops but does not support backup/restore?
memcached
What feature of cloudformation would you use to extend its functionality or integrate it with other system?
Custom resources
_____ helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture.
AWS X-Ray
______ is a serverless, interactive query service to query data and analyze big data in Amazon S3 using standard SQL
Amazon Athena