Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AWS SA Associate > AWS Big Data, Serverless, Security, Automation > Flashcards

AWS Big Data, Serverless, Security, Automation Flashcards

1
Q

What are the 3 V’s of big data?

A

Volume
Variety
Velocity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Redshift ?

A

RedShift is a relational data warehousing service for BI applications that can store up to 16 PetaBytes of data, Not highly available and single AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is ETL?

A

Extract Transform Load is a data processing pipeline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is EMR?

A

Elastic MapReduce is an amazon service for launching EC2 clusters for ETL processing using open-source ETL engines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Amazon Kensis?

A

Kinesis is a service for streaming data in real time or near real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the difference between Kensis Firehose and Kensis Streams?

A

Kensis Firehose is fully managed, automatically scales, Easier to configure but slower and only allows for preconfigured consumers such as S3. Kensis Streams is realtime but requires you to scale the streams manually and develop your own consumers using the Kensis SDK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Kensis Analytics ?

A

Kensis analytics allows you to transform your data as it passes through the stream using SQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is amazon Athena ?

A

It is a serverless SQL solution that allows you to query data stored in S3. i.e Logs / BI application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Amazon Glue?

A

Glue is a serverless ETL service that allows you to process your data without having to worry about EC2 instances and third party software, unlike Elastic MapReduce

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is amazon QuickSight?

A

Amazon Quicksight is a fully managed business intelligence (BI) data visualization service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is amazon data pipeline?

A

A managed ETL Service that automates movements and transformations of your data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What storage integrations does data pipeline support?

A

DynamoDB
RDS
Redshift
S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are three key features for amazon data pipeline?

A

Integrates with EC2 and EMR
Integrates with SNS
Data-driven workflows
automatic-retries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Amazon MSK?

A

Amazon managed stream for Kafka is a fully managed service for running and building Apache Kafka data streaming applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is amazon OpenSearch?

A

It is a managed service allowing you to run open source search and analytics engines for various use cases it is the successor to amazon ElasticSearch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Lambda?

A

Lambda is a serverless compute service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the limitations for a Lambda?

A

10GB Ram
Max 15mins execution time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are five configuration aspects that are vital for Lambda?

A
  1. Runtime
  2. Permissions (Defining access to other resources)
  3. Networking (Accessing Endpoint for other resources)
  4. Resources (CPU, RAM, Maz execution time)
  5. Triggers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is AWS Serverless Application Repository?

A

It is a repository solution for serverless applications which allows you to publish or deploy public or private serverless applications that use lambda compute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a AWS SAM Template?

A

AWS Serverless application model template are used to define serverless application stacks and are private by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is ECR?

A

Elastic Container Registry is a managed repository to store your OCI repositories, Docker images and intergrates with ECS and EKS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is ECS?

A

Elastic Container Service is a fully managed AWS service that allows you to run and orchestrate large numbers of containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is EKS?

A

Elastic Kubernetes Service allow you to run a Kubernetes in the AWS cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the difference between EKS and ECS?

A

ECS is proprietary to amazon therefore it can’t be run on-premises without AWS outposts. ECS provides quicker and easier integration with AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What are the compute options for ECS and what are their differences?
1. EC2 2. Fargate EC2 (Long running) is just a normal server instance and therefore they require the same maintenance that a regular EC2 would require. EC2 pricing model is often cheaper. Fargate (Short running) is a serverless option and removes the need to maintain the guest operating system.
26
What is AWS eventBridge ?
It is a service that allows you to trigger other services (Lambda, SQS, SNS) based on API calls and events. The fastest way to setup events. Used to be cloudWatch Events
27
What is a service you can use to scan your container images for vulnerabilities?
Amazon ECR
28
What is the difference between amazon EKS and EKS-D
EKS-D is Elastic Kubernetes Service Distro and is fully managed by you where as EKS is fully managed by AWS
29
What is Amazon Aurora Serverless?
It is a auto scaling, on demand version of aurora
30
What is a Aurora ACU?
Aurora capacity unit, it is a unit of scale for a aurora serverless deployment and you set a minimum and maximum for you needs. billed per second used
31
What is AWS X-RAY?
It is a AWS service for gaining insights on application requests and responses
32
What is AWS AppSync?
It is a Scalable GraphQL interface for application developers
33
What is DDos?
Denial of service attack
34
What is an example of a layer 4 DDos attack?
SYN floods or NTP amplification attacks
35
What is a common layer 7 attack?
Floods of GET/POST requests
36
What is Cloud Trail?
AWS CloudTrail increases visibility into your user and resource activity by recording AWS management console actions and API Calls. *After the fact incident investigation *Near real-time intrusion detection
37
What 6 things does cloud trail track?
1. Metadata around API calls 2. The identity of the API caller 3. The time of the API call 4. The source IP address of the API caller 5. The request parameters 6. The response elements returned by the service
38
What is AWS Shield?
AWS Shield is free DDOS protection and protects against Layer 3 and Layer 4 attacks (SYN/UDP) floods
39
What is the difference between AWS Shield and Shield advanced
Shield advanced provides more sophisticated DDOS protection and a 24/7 response team but costs $3000 USD/month
40
What is AWS WAF?
Web application firewall is a service that allows you to defend against Layer 7 attacks. WAF can block or allow specific countries or IP addresses and can defend against SQL injection and cross-site scripting
41
What is AWS GuardDuty?
Guard duty is a threat detection service that uses machine learning to identify and alert you of malicious behavior. *Can be across multiple accounts *Automated response using CloudWatch Events and Lambda *Unusual API calls *Calls from known malicious IP
42
What does GuardDuty monitor?
1. Malicious IP addresses 2. CloudTrail Logs 3. VPC Flow Logs 4 DNS Logs
43
What is AWS Firewall manager?
Firewall manager is a security management service that allows you to centrally set up and manage firewall rules across multiple AWS accounts and applications in AWS organizations.
44
What is the benefits of Firewall Manager?
1. Simplify Management of firewall rules across your accounts 2. Ensure compliance of existing and new applications
45
What is PII and what are some examples?
Personally identifiable information is personal data used to establish an individuals identity. 1. Home address 2, Email address, 3. Date of birth 4. Phone number
46
What is AWS Macie?
Macie is a AWS service that uses machine learning and pattern matching to discover sensitive data stored in s3. PII, PHI (Personal health information) and financial data. It alerts you to unencrypted bucket alerts you to public buckets Great for frameworks like HIPAA and GDPR
47
What is AWS Inspector?
Inspector is a service used to perform vulnerability scans on both EC2 ( host assessments ) and VPCs ( network assessments ). It allows you to run assessments once or, alternatively, run them weekly
48
What is AWS KMS?
AWS Key management service is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. (Shared tenancy of HSM (Hardware security module)
49
What is a HSM?
An HSM is a hardware security module that contains one or more secure cryptoprocessor chips
50
What is a CMK and what is it used for?
A customer master key is a logical representation of a master key. The customer master key contains the key material used to encrypt or decrypt data. You start using AWS KMS by requesting or creating a CMK
51
What are the three ways of generating a CMK?
1. Generated within HSM's managed by AWS KMS 2. Import your own key material and associate it with a CMK 3. Have a key generated by the AWS CloudHSM-cluster
52
What are the 3 ways to control CMK permissions?
1. Key policies 2. IAM policies with key policies 3. Grants with key policies
53
What is the difference between KMS and CloudHSM?
KMS Shared tenancy of hardware Automatic key rotation Automatic key generation CloudHSM Dedicated HSM to you Full control of hardware No automatic key rotation Full control of users, groups, keys, etc
54
What is AWS Secrets Manager?
A service that securely stores, encrypts, and rotates your database credentials and other secrets. API keys, SSH keys, passwords
55
What happens immediately after enabling credential rotation on secrets manager?
Your secrets are rotated and this may cause application with hardcoded secrets to break
56
What is AWS parameter store?
parameter store is a free capability of AWS systems manager that provides, hierarchical storage for data management and secrets management but has a limit of 10000 parameters
57
What is the difference between parameter store and Secrets manager ?
Parameter store is free Parameter store doesn't do key rotation Only Secrets Manager can generate passwords using CloudFormation
58
What are presigned URL's?
The are urls that you can generate that can give a user timed access to private objects in your S3 bucket
59
What are presigned Cookies?
This can be useful when you want to provide access to multiple private objects in your S3 bucket
60
What is a AWS ARN ?
Amazon resource name
61
What is the form of a ARN?
arn:partition(aws):service(s3):region(us-east-1):account_id(123456789012)
62
What is the difference between a Identity Policy and a Resource Policy?
an Identity policy is usually attached to a human user a resource policy is attached to amazon resources
63
What are IAM Permission boundaries?
This is a feature that allows you to give specific administration rights to other users
64
What is the default behaviour in IAM if a group doesn't have any policies attached?
Everything is implicitly denied
65
What is AWS Certificate Manager?
Is a free service that allows you to create, manage and deploy public and private SSL certificates for use with other AWS services, Elastic Load Balancer, CloudFront, and API Gateware
66
What is AWS audit manager?
A service that allows you to continually audit your AWS usage to make sure you stay compliant with industry standards and regulations and generate automated reports (HIPAA, GDPR)
67
What is AWS Artifact?
It is a single source you can visit to get the compliance-related information that matters to you, such as AWS security and compliance reports HIPAA, GDPR, PCI
68
What is AWS Cognito?
Cognito provides authentication, authorization, and user management for your web and mobile apps.
69
What is a user pool in cognito?
User directory that provide sign up and sign in options for users of you application
70
What is a Identity pool in cognito?
Allows your users to access other AWS services
71
What is the sign in process for cognito?
1. Authenticate and get tokens 2. Exchange tokens and get AWS credentials 3. Access AWS services using credentials
72
What is amazon detective?
It is a service that operates across multiple AWS services and analyzes the root cause of an event using machine learning and graph theory.
73
What is the difference between amazon detective and amazon inspector?
Inspector is an automated vulnerability management service that continually SCans EC2 and software vulnerabilities. Amazon detective is for finding the root cause of a suspected vulnerability incident
74
What is AWS network firewall?
Network firewall is a managed service that makes it easy to deploy physical firewall protection across your VPCs, it includes a intrusion prevention system (IPS).
75
What does AWS network firewall allow you to do?
1. Filter Internet Traffic 2. Filter Outbound Traffic 3. Inspect VPC-to-VPC traffic
76
What is AWS Security Hub?
Security Hub is a single place to view all your security alerts from services such as GuardDuty, Inspector, Macie and AWS Firewall Manager. It works across multiple accounts
77
What is CloudFormation?
CloudFormation is a service that allows you to define your infrastructure as code
78
What is a CloudFormation Parameter
Theses are values that can be set by the operator during deployment
79
What is a service that allows you to create immutable architecture?
CloudFormation
80
What are the 3 critical sections of a cloudformation template?
1. Mapping: Filling in configuration options based on region 2. Resources: The resources that make up the architecture 3. Parameters: Values that can be provided during deployment
81
What is a common cause for cloud formation template failure?
Hard-coded resource IDs
82
What is Paas?
It is Platform as a service
83
What is Elastic Beanstalk?
Elastic Beanstalk is a one stop solution for deploying applications in AWS. It automates the process of provisioning the resources you need to get your application online
84
What is Elastic Beanstalk?
Elastic Beanstalk is a easy one-stop solution for deploying applications in AWS. It automates the process of provisioning the resources you need to get your application online
85
What is systems manager?
It is a free suite of tools designed to let you view, control and automate both your AWS architecture and on-premisies resources
86
What are automation documents / Run Books?
A runbook defines action that the systems manager performs on your managed instances
87
How do you make a Instance join system manager?
1. Add system manager agent 2. Add system manager permission through role
88
What is patch manager?
A feature that allows system manager to patch your instances
89
What is session manager?
Session managers allows you to easily open remote connections with your instances
90
What is Run Command?
Run Command allows you to execute commands on your instances
91
What are hybrid activations?
Are on-premises system manager deployments

AWS SA Associate (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions