Answers I got wrong before on exams Flashcards

1
Q

Can Lamda get execution access to an S3 bucket in another account?

A

Yes, using an IAM lamba execution role and bucket policy on the bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Can I write directly to Glacier?

A

No, only data stored in S3 can be moved to glacier, using lifecycle rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does VPC sharing do?

A

VPC sharing allows customers to share subnets with other AWS accounts within the same AWS Organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Why would I want to use Enhanced Fanout with Kinisis Streams?

A

By default, the 2MB/second/shard output is shared between all of the applications consuming data from the stream. You should use enhanced fan-out if you have multiple consumers retrieving data from a stream in parallel.

With enhanced fan-out developers can register stream consumers can receive their own 2MB/second pipe of read throughput per shard, and this throughput automatically scales with the number of shards in a stream.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Opsworks?

A

It is AWS’s version of Chef (recipes) and Puppet (manifest) - which is used to create launch templates. Opworks can store various versions of these launch templates and is therefore a better solution than S3 for Chef questions.

Think Deployment as code. Both are open source, and both are multi-cloud compatible.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are sticky sessions?

A

Sticky sessions are a rule in the load balancer that direct all traffic to the EC2 instance that was first contacted by the user. If all traffic goes to ONE EC2 instance behind any load balancer, it’s a good idea to disable Sticky sessions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is ECR

A

Elastic Container Registry- Where you can store Docker images.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is RPO

A

Recovery Point Objective- How recent is the Lookback- so how many hours of work can you lose, for example?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is RTO

A

Recovery Time Objective- How soon do you need the system back online?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

You have set-up a direct connection between your Corporate Data Center and your VPC A. You need to access VPC B in another region from your Corporate Data Center as well. What should you do?

A

Set up Direct Connect Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Does S3 always return the latest version of an object?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How can I modify the launch configuration for an AutoScaling group?

A

You can’t. You’d have to make a new one, then attach it to the ASG and delete the older launch configuration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are Auto Scaling group lifecycle hooks?

A

enable you to perform custom actions as the Auto Scaling group launches or terminates instances. Lifecycle hooks enable you to perform custom actions by pausing instances as an Auto Scaling group launches or terminates them. When an instance is paused, it remains in a wait state either until you complete the lifecycle action using the complete-lifecycle-action command or the CompleteLifecycleAction operation, or until the timeout period ends (one hour by default). For example, you could install or configure software on newly launched instances, or download log files from an instance before it terminates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are Auto Scaling group lifecycle hooks?

A

enable you to perform custom actions as the Auto Scaling group launches or terminates instances. Lifecycle hooks enable you to perform custom actions by pausing instances as an Auto Scaling group launches or terminates them. When an instance is paused, ‘wait’s either until you complete the lifecycle action using the ‘complete-lifecycle-action’ command or the ‘CompleteLifecycleAction’ operation, or until the timeout period ends (one hour by default). For example, install or configure software on new instances, or download logs from an instances before it terminates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is CloudWatch Logs Agent?

A

Send logs from my instance OS to CloudWatch for capture. Works well for AutoScaling groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Can I scale Availability Zones and Regions with Auto Scaling Groups?

A

Availability Zones: Yes

Regions: No

17
Q

A company hires experienced specialists to analyze the customer service calls attended by its call center representatives. Now, the company wants to move to AWS Cloud and is looking at an automated solution to analyze customer service calls for sentiment analysis and security.

As a Solutions Architect, which of the following solutions would you recommend?

A

Use Amazon Transcribe to convert audio files to text and Amazon Athena to understand the underlying customer sentiments

18
Q

What is a Security Group?

A

A security group acts as a virtual firewall that controls the traffic for one or more instances.

19
Q

What is AWS Ops Hub

A

A way to manage and coordinate large fleets of Snowball devices

20
Q

What is SNI in the context of SSL

A

Server Name Indication (SNI) allows the server to safely host multiple TLS Certificates for multiple sites. To use SNI, all you need to do is bind multiple certificates to the same secure listener on your load balancer. ALB will automatically choose the optimal TLS certificate for each client.

21
Q

What is Amazon MQ

A

Amazon MQ is a Message Broker that uses Apache to make a message queue that is a go-between to help applications that normally can’t talk to eachother work in a chain together, based on sending and recieving messages.

22
Q

As part of the on-premises data center migration to AWS Cloud, a company is looking at using multiple AWS Snow Family devices to move their on-premises data.

Which Snow Family service offers the feature of storage clustering?

A

AWS Snowball Edge Compute Optimized

23
Q

What is Amazon Event Bridge?

A

Amazon EventBridge is recommended when you want to build an application that reacts to events from SaaS applications and/or AWS services.

24
Q

What is Amazon Event Bridge?

A

Amazon EventBridge is recommended when you want to build an application that reacts to events from SaaS applications and/or AWS services. Amazon EventBridge is the only event-based service that integrates directly with third-party SaaS partners. Amazon EventBridge also automatically ingests events from over 90 AWS services without requiring developers to create any resources in their account.

25
Q

Say I want to analyze AWS CloudTrail, VPC Flow Logs, and AWS DNS logs at the same time, what service might I use?

A

Amazon GuardDuty analyzes AWS CloudTrail, VPC Flow Logs, and AWS DNS logs. The service is optimized to consume large volumes of data for near real-time processing of security detections. It is billed in a pro-rated way by the million events. It is a regional service.

26
Q

What is EMR

A

Elastic Map Reduce: It’s a way to easily run and scale Apache Spark, Hive, Presto, and other big data frameworks.