Architecture Flashcards
What are the differences between Kinesis Data Streams and Firehose
- Data Streams is a low latency streaming service in AWS Kinesis with the facility for ingesting at scale.
- Kinesis Firehose aims to serve as a data transfer service.
- Users must employ manual configuration for shards to ensure proper provisioning of KDS.
- Kinesis Data Firehose comes forward as a fully managed service.
- In the case of data streams, you can configure data storage for holding data from one to seven days.
- Firehose does not provide any facility for data storage.
- Kinesis Data Streams supports real-time processing.
- Kinesis Data Firehose features near real-time processing.
In which frequency does Trusted Advisor evaluate your AWS environment?
Trusted Advisor continuously evaluates your AWS environment
How does AWS Trusted Advisor help you?
- optimize costs,
- increase performance,
- improve security and resilience,
- operate at scale in the cloud.
How can you Identify Amazon EC2 instances with low-utilization, and reduce cost by stopping or rightsizing?
Use AWS Cost Explorer Resource Optimization to get a report of Amazon EC2 instances that are either idle or have low utilization.
How can AWS support your MQTT implementation?
AWS IoT Core is a fully managed service that lets you connect billions of IoT devices and route trillions of messages to AWS services.
Amazon MQ supports industry-standard messaging protocols like AMQP and MQTT.
What is Amazon MQ
Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ.
What are Amazon MQ use cases?
- Low-latency event messaging
- Migrate with flexible configurations
- Invoke AWS Lambda functions
What is the AWS service recommended when you want to build an application that reacts to events from SaaS applications and/or AWS services.
Amazon EventBridge is recommended when you want to build an application that reacts to events from SaaS applications and/or AWS services.
What is the main purpose of SNI?
The main purpose of SNI is to facilitate virtual hosting for secure connections (HTTPS). With SNI support AWS makes it easy to use more than one certificate with the same ALB.
What is SNI?
SNI stands for Server Name Indication (SNI)
The following are supported as CloudWatch alarm actions.
- SNS
- Lambda function.
- EC2 actions, such as stopping
- Auto Scaling group actions
- Create OpsItems in Systems Manager Ops Center or create incidents in AWS Systems Manager Incident Manager.
Which performs best to migrate hundreds of terabytes AWS DataSync, File Gateway or S3TA?
- AWS DataSync: DataSync is a data transfer service specifically designed for efficient large-scale data transfers. It utilizes parallel data transfer streams and employs optimizations such as bandwidth throttling and automatic recovery from failures, making it highly performant for large data migrations.
- File Gateway is a part of the AWS Storage Gateway service, which enables on-premises applications to seamlessly use AWS cloud storage.
- S3TA is a feature of Amazon S3 that optimizes data transfers over long distances or poor network conditions.
By default, is cross-zone load balancing is enabled for Application Load Balancer and for Network Load Balancer?
By default, cross-zone load balancing is enabled for Application Load Balancer and
disabled for Network Load Balancer
Which storage services on the cloud can be directly loaded from AWS Snowball Edge ?
- Amazon S3 (Simple Storage Service)
What Account management tasks that require root credentials?
- Change your account settings.
- Restore IAM user permissions.
- Close your AWS account.
What Billing Tasks that require root credentials?
- Activate IAM access to the Billing and Cost Management console.
- View certain tax invoices.
What Amazon Simple Queue Service Task require root credentials?
- Edit or delete an Amazon SQS resource policy that denies all principals.
What Amazon Simple Storage Service Tasks require root credentials?
- Configure an Amazon S3 bucket to enable MFA (multi-factor authentication).
- Edit or delete an Amazon S3 bucket policy that denies all principals.
What are AWS Storage Gateway solutions?
File Gateway: NFS; SMB; 64TB local cache;
Volume Gateway (cached): iSCSI; 32 volumes; 32tb cache
Volume Gateway (stored): iSCSI; 32 volumes; 16tb cache;
Volume Gateway (tape): iSCSI; Glacier
Whats are the services covered by AWS Firewall Manager
- AWS WAF
- AWS Shield Advanced
- Amazon VPC security group
- Amazon VPC network ACL
- AWS Network Firewall
- DNS Firewall
- Palo Alto Networks Cloud Next Generation Firewall
- Fortigate CNF
How do we choose Redis or memcached?
Redis
- Advanced data structures
- Snapshots
- Replication
- Pu/Sub
- Geospatial
- Lua support
Memcached
- Multithreaded architecture
What are the default, minimum and maximum values for SQS visibility timeout?
Default: 30 seconds
Minimum: 0 seconds.
Maximum: 12 hours.
Which service helps you save development time and deployment costs when using common message patterns such as request-response?
Temporary queues
What are the ideal storage for Electronic Design Automation (EDA)?
- FSx for NetApp Ontap
- FSx for Lustre
How CloudFront can help with resiliency?
Amazon CloudFront offers an origin failover feature to help support your data resiliency needs.
Which service enables fast regional failover?
AWS Global Accelerator
What are the SQS FIFO throughputs?
- up to 3,000 messages per second with batching
- up to 300 messages per second without batching.
- up to 70,000 messages per second without batching (high throughput mode)
What are AWS Global Accelerator benefits?
- Improve network performance for your applications by up to 60%.
- Protect your applications from DDoS attacks closer to the source.
- Simplify allowlisting in enterprise firewalling and IoT use cases.
- Route traffic to the nearest Region or achieve fast failover across Regions.
Amazon S3 Transfer Acceleration can speed up content transfers to and from Amazon S3 by:
as much as 50-500% for long-distance transfer of larger objects.
How should I choose between S3 Transfer Acceleration and Amazon CloudFront’s PUT/POST?
CloudFront’s PUT/POST commands if:
- Objects that are smaller than 1 GB or if
- The data set is less than 1 GB in size
Which one requires the LEAST operational overhead: Transit Gateway or Transit VPC?
Transit Gateway
