Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Associates Exam > AWS > Flashcards

AWS Flashcards

1
Q

What are the four disaster recovery strategies outlined by AWS in order of expense and RTO (low to high)?

A

Backup and Recover, Pilot Light, Warm Standby, Multi-size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is RPO and what does it stand for?

A

Recovery Point Objective. The optimal point in time from which you’ll be recovering from.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is RTO and what does it stand for?

A

Recovery Time Objective. The amount of time it will take for a backup system to be fully operational.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the least expensive DR solution recommended by AWS?

A

Backup and Restore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What durability does S3 have?

A

11 9s durability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When would you use Pilot Light?

A

When you don’t want to pay the cost of having unused compute infrastructure but want to limit RTO to tens of minutes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What happens when an EC2 instance that’s fronted by an ELB fails it’s health check?

A

The ELB stops sending it traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

When attached an ENI to an EC2, what’s the difference between a cold, warm, and hot attach?

A

Cold: attaching when the EC2 is being launched, Warm: attaching when EC2 is stopped, Hot: attaching when EC2 is running

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When can you move an ENI from one instance to another?

A

When the ENI’s are in the same AZ and VPC but in different subnets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Would you choose RDS read replicas or RDS Multi-Region if you wanted to minimize RTO?

A

You would choose RDS Mutli-Region since read replicas are not updated synchronously.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Is DynomoDB an appropriate option for infrequently accessed data?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Are NACLs stateless? Are Security group stateless?

A

NACLS are stateless, Security groups are stateful.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What order are NACL rules evaluated in?

A

They are evaluated by rule number from lowest to highest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

You have been evaluating the NACLs in your company. Currently, you are looking at the default network ACL. Which statement is true about NACLs?

A

The default configuration of the default NACL is Allow, and the default configuration of a custom NACL is Deny.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What service can you use to ensure that resources you’ve deployed are within budget?

A

AWS Budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How many AZs can a subnet span?

A

Just one.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What addresses in the CIDR address block used by your Subnet are reserved and for what?

A

x. x.x.0 is the network address
x. x.x.1 is the VPC router
x. x.x.2 is for the DNS
x. x.x.3 is reserved for future use
x. x.x.255 is used for broadcast, which is in not supported by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How many internet gateways can you have per VPC?

A

Just one.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Why wouldn’t you want to create a route out to the internet on your main route table in your VPC?

A

Any subnet created in your VPC will be associated with the main route table be default; if your main route table has a route table to the internet, all subnets will be public by default.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Why would you use a NAT gateway?

A

To enable an instance in a private subnet to have access to the internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How can you ensure an auto scaling group automatically scales out at a certain time every day?

A

Create a scheduled action

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How can you block a specific IP address from accessing your subnet?

A

Using a Network ACL. You cannot use a security group to block a specific IP address.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How many network ACLs is your subnet associated with?

A

Exactly 1.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is a VPC Endpoint?

A

A virtual device that allows communications between your VPC components and AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is the maximum bandwidth of a NAT Gateway?

A

They scale from 5 Gbps to 100 Gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

When would you use an interface endpoint as opposed to a gateway endpoint?

A

Use gateway endpoints when you need to access DynomoDB or S3; otherwise use an interface endpoint. The interface endpoint uses an ENI while the gateway endpoint sits at the edge of your VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Can you do transitive peering with VPCs?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Can you peer VPCs across regions?

A

Yup

29
Q

Can you have overlapping CIDR address ranges when you peer two VPCs?

A

Nope

30
Q

If you need to connect your VPC to tens, hundreds, or thousands of VPCs, which service could you use?

A

AWS PrivateLink

31
Q

What does the service and customer need to create in their VPCs to use PrivateLink

A

The service needs to set up a Network Load balancer and the consumer needs to set up an ENI

32
Q

When would you use VPN CloudHub?

A

When you have multiple sites with VPN connections that need to connect together.

33
Q

If you want to avoid the complexity of peering together multiple VPCs, which service can you use?

A

Transit Gateway

34
Q

Can you use Transit Gateway to connect VPCs in multiple regions?

A

Yes

35
Q

How can you prevent VPCs from communicating with each other if they are connected through Transit Gateway?

A

Configure your route tables to prevent them from interacting.

36
Q

What can you do to simplify your network architecture if you have less than 10 VPCs that are connected to your data center using direct connect?

A

Use a direct connect gateway.

37
Q

Is a NAT gateway redundant in the AZ?

A

Yes

38
Q

What should you do to create an availability zone-independent architecture when setting up NATs?

A

Create one in each AZ.

39
Q

Is Direct Connect encrypted by default?

A

No

40
Q

What is AWS Personal Health Dashboard

A

The AWS Health Dashboard is the single place to learn about the availability and operations of AWS services. You can view the overall status of AWS services, and you can sign in to view personalized communications about your particular AWS account or organization. Your account view provides deeper visibility into resource issues, upcoming changes, and important notifications.

41
Q

What is the difference between a launch configuration and a launch template?

A

launch template is similar to a launch configuration, in that it specifies instance configuration information. Included are the ID of the Amazon Machine Image (AMI), the instance type, a key pair, security groups, and the other parameters that you use to launch EC2 instances. However, defining a launch template instead of a launch configuration allows you to have multiple versions of a template. With versioning, you can create a subset of the full set of parameters and then reuse it to create other templates or template versions. For example, you can create a default template that defines common configuration parameters and allow the other parameters to be specified as part of another version of the same template.

42
Q

How long does it take to failover when using an RDS with Multi-AZ Deployment

A

1 to 2 minutes

43
Q

When using an RDS with Multi-AZ deployment, what does AWS do to fail over if your primary database fails?

A

When failing over, Amazon RDS simply flips the canonical name record (CNAME) for your DB instance to point at the standby, which is in turn promoted to become the new primary.

44
Q

Can you delete the default security group associated with your VPC?

A

You can’t delete this group, however, you can change the group’s rules.

45
Q

Can you remove the * All Traffic Deny NACL rule?

A

No

46
Q

How many security groups can be attached to an EC2 instance?

A

Up to 5

47
Q

What is AWS Managed VPN?

A

AWS Managed VPN lets you reuse existing VPN equipment and processes, and reuse existing internet connections.

It is an AWS-managed high availability VPN service.

It supports static routes or dynamic Border Gateway Protocol (BGP) peering and routing policies.

48
Q

What are the three most common properties found in an IAM statement?

A

Effect, Action, and Resource

49
Q

Is IAM Universal?

A

Yes

50
Q

What would you use IAM Federation for?

A

When you want to connect to AWS using AD credentials.

51
Q

What’s the file size range for an object in S3?

A

0 to 5 TB

52
Q

What’s the URL syntax for an S3 object?

A

http://[bucket-name].s3.[region].amazonaws.com/[key-name]

53
Q

What status code will you get back when you upload a file to S3?

A

HTTP 200

54
Q

How can you make an S3 object accessible publicly?

A

Enable the bucket to be public and then apply a policy to allow access to the object or the entire bucket

55
Q

Can you disable versioning on a bucket?

A

No, but you can suspend it

56
Q

What the retrieval times for Glacier Instant Retrieval, Glacier Flexible Retrieval, and Glacier Deep Archive?

A

Milliseconds
Minutes to hours
Default of 12 hours

57
Q

When using an object lock, what’s the difference between governance mode and compliance mode?

A

With governance mode, users with a special permission can overwrite the file. With compliance mode, no user (including root) can delete the object until the end of the retention period.

58
Q

What is the difference between SSE-S3, SSE-KMS, and SSE-C

A

SSE-S3: AWS automatically handles the encryption using a key that they manage
SSE-KMS: You use a key provided by KMS
SSE-C: You provide the key

59
Q

How do you enforce encryption in S3?

A

Use a bucket policy to ensure that PUT requests include an encryption parameter in the HTTP header

60
Q

How many PUT/COPY/POST/DELETE requests per second can you make in S3? How many GET/HEAD?

A

3,500 per prefix

5,500 per prefix

61
Q

What must you enable to upload a file over 5GB?

A

Multipart Uploads

62
Q

Why would you use a byte-range fetch?

A

Increase performance when downloading files

63
Q

What is the minimum and maximum time frame for reserving an instance?

A

1 to 3 years

64
Q

Can you attach and detach roles while an EC2 instance is running?

A

Yes

65
Q

What inbound and outbound traffic and allowed by default when creating a security group?

A

All inbound is denied by default and all outbound is allowed by default.

66
Q

What is the difference between users data and meta data?

A

User data is your bootstrap script, meta data is information about EC2

67
Q

When would you use Enhance Networking?

A

You need reliable throughput between 10 Gbps and 100 Gbps

68
Q

When would you use Elastic Fabric Adapter (EFA)

A

High Performance Computing
Machine Learning
OS-Bypass

69
Q

When would you use Cluster, Spread, and Partition placement groups?

A

Use cluster for lower networking latency / high throughput

Use spread for critical EC2 instances that need to be on separate hardware

Partition placement groups can be used to deploy large distributed and replicated workloads, such as HDFS, HBase, and Cassandra, across distinct racks

AWS Associates Exam (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions