Aireddy Questions Flashcards
How many cloudformation stacks can a single cloudformation template create?
unlimited
8.7 hours downtime per year is
99.9% uptime
5.26 minutes downtime per year is
99.999% uptime
What is more expensive and complicated, high availability or fault tolerance?
The effect of an IAM statement is to either ___ or ___?
ALLOW or DENY
What type of IAM policy grants access and is assigned on each account individually?
Inline policy
What type of IAM policy is applied to all users at once?
managed policy
What is the max amount of IAM users per account?
5000
An IAM user can be a member of how many groups?
10
TRUE OR FALSE: GROUPS ARE NOT A TRUE IDENTITY THEY CAN’T BE REFERENCED AS A PRINCIPAL IN A POLICY
TRUE
____ limit what the account, including root can do inside that account. They don’t grant permissions themselves, just act as a barrier.
SCP’s
CloudTrail is enabled by default to retain for ___ days without cost or the need of S3?
90 days
Is CloudTrail real time?
No
in S3, use a ____ policy when you want to manage permissions in one place (IAM) and have access to the accounts accessing the bucket
Identity Policy
in S3, use a _____ policy if you need to grant anonymous or cross-account access to the bucket
bucket (or resource) policy
Question concerning web hosting and providing a maintenance or status page out of band
Use R53 and a different S3 bucket
EBS volumes are created in the ___ and isolated to the __ they were created in
AZ and isolated
EBS volumes are resilient to an AZ failure?
No
Can you create a presigned URL for an object you have do not have access too?
Yes
If use case mentions Legacy software licensed using a mac address, you can:
associate the mac address to a secondary ENI
What is the most performant EC2 Placement Group?
Cluster
What type of placement group Provides the highest level of availability and resilience?
Spread
Are spread placement groups supported for dedicated hosts?
No
What supports EC2, EKS, Lambda, HTTPS, HTTP/2 and websockets, ALB or ELB?
ALB
What AWS service automatically discover, classify, and protect your sensitive data?
Macie
What does SWF stand for?
Simple Workflow Service