Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SA Associate > AWS Big Data, Serverless, Security, Automation > Flashcards

AWS Big Data, Serverless, Security, Automation Flashcards

1
Q

What are the 3 V’s of big data?

A

Volume
Variety
Velocity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Redshift ?

A

RedShift is a relational data warehousing service for BI applications that can store up to 16 PetaBytes of data, Not highly available and single AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is ETL?

A

Extract Transform Load is a data processing pipeline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is EMR?

A

Elastic MapReduce is an amazon service for launching EC2 clusters for ETL processing using open-source ETL engines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Amazon Kensis?

A

Kinesis is a service for streaming data in real time or near real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the difference between Kensis Firehose and Kensis Streams?

A

Kensis Firehose is fully managed, automatically scales, Easier to configure but slower and only allows for preconfigured consumers such as S3. Kensis Streams is realtime but requires you to scale the streams manually and develop your own consumers using the Kensis SDK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Kensis Analytics ?

A

Kensis analytics allows you to transform your data as it passes through the stream using SQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is amazon Athena ?

A

It is a serverless SQL solution that allows you to query data stored in S3. i.e Logs / BI application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Amazon Glue?

A

Glue is a serverless ETL service that allows you to process your data without having to worry about EC2 instances and third party software, unlike Elastic MapReduce

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is amazon QuickSight?

A

Amazon Quicksight is a fully managed business intelligence (BI) data visualization service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is amazon data pipeline?

A

A managed ETL Service that automates movements and transformations of your data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What storage integrations does data pipeline support?

A

DynamoDB
RDS
Redshift
S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are three key features for amazon data pipeline?

A

Integrates with EC2 and EMR
Integrates with SNS
Data-driven workflows
automatic-retries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Amazon MSK?

A

Amazon managed stream for Kafka is a fully managed service for running and building Apache Kafka data streaming applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is amazon OpenSearch?

A

It is a managed service allowing you to run open source search and analytics engines for various use cases it is the successor to amazon ElasticSearch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Lambda?

A

Lambda is a serverless compute service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the limitations for a Lambda?

A

10GB Ram
Max 15mins execution time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are five configuration aspects that are vital for Lambda?

A
  1. Runtime
  2. Permissions (Defining access to other resources)
  3. Networking (Accessing Endpoint for other resources)
  4. Resources (CPU, RAM, Maz execution time)
  5. Triggers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is AWS Serverless Application Repository?

A

It is a repository solution for serverless applications which allows you to publish or deploy public or private serverless applications that use lambda compute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a AWS SAM Template?

A

AWS Serverless application model template are used to define serverless application stacks and are private by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is ECR?

A

Elastic Container Registry is a managed repository to store your OCI repositories, Docker images and intergrates with ECS and EKS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is ECS?

A

Elastic Container Service is a fully managed AWS service that allows you to run and orchestrate large numbers of containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is EKS?

A

Elastic Kubernetes Service allow you to run a Kubernetes in the AWS cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the difference between EKS and ECS?

A

ECS is proprietary to amazon therefore it can’t be run on-premises without AWS outposts. ECS provides quicker and easier integration with AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are the compute options for ECS and what are their differences?

A
  1. EC2
  2. Fargate

EC2 (Long running) is just a normal server instance and therefore they require the same maintenance that a regular EC2 would require. EC2 pricing model is often cheaper. Fargate (Short running) is a serverless option and removes the need to maintain the guest operating system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is AWS eventBridge ?

A

It is a service that allows you to trigger other services (Lambda, SQS, SNS) based on API calls and events. The fastest way to setup events. Used to be cloudWatch Events

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is a service you can use to scan your container images for vulnerabilities?

A

Amazon ECR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is the difference between amazon EKS and EKS-D

A

EKS-D is Elastic Kubernetes Service Distro and is fully managed by you where as EKS is fully managed by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is Amazon Aurora Serverless?

A

It is a auto scaling, on demand version of aurora

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is a Aurora ACU?

A

Aurora capacity unit, it is a unit of scale for a aurora serverless deployment and you set a minimum and maximum for you needs. billed per second used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is AWS X-RAY?

A

It is a AWS service for gaining insights on application requests and responses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is AWS AppSync?

A

It is a Scalable GraphQL interface for application developers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is DDos?

A

Denial of service attack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is an example of a layer 4 DDos attack?

A

SYN floods or NTP amplification attacks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is a common layer 7 attack?

A

Floods of GET/POST requests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is Cloud Trail?

A

AWS CloudTrail increases visibility into your user and resource activity by recording AWS management console actions and API Calls.
*After the fact incident investigation
*Near real-time intrusion detection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What 6 things does cloud trail track?

A
  1. Metadata around API calls
  2. The identity of the API caller
  3. The time of the API call
  4. The source IP address of the API caller
  5. The request parameters
  6. The response elements returned by the service
38
Q

What is AWS Shield?

A

AWS Shield is free DDOS protection and protects against Layer 3 and Layer 4 attacks (SYN/UDP) floods

39
Q

What is the difference between AWS Shield and Shield advanced

A

Shield advanced provides more sophisticated DDOS protection and a 24/7 response team but costs $3000 USD/month

40
Q

What is AWS WAF?

A

Web application firewall is a service that allows you to defend against Layer 7 attacks. WAF can block or allow specific countries or IP addresses and can defend against SQL injection and cross-site scripting

41
Q

What is AWS GuardDuty?

A

Guard duty is a threat detection service that uses machine learning to identify and alert you of malicious behavior.
*Can be across multiple accounts
*Automated response using CloudWatch Events and Lambda
*Unusual API calls
*Calls from known malicious IP

42
Q

What does GuardDuty monitor?

A
  1. Malicious IP addresses
  2. CloudTrail Logs
  3. VPC Flow Logs
    4 DNS Logs
43
Q

What is AWS Firewall manager?

A

Firewall manager is a security management service that allows you to centrally set up and manage firewall rules across multiple AWS accounts and applications in AWS organizations.

44
Q

What is the benefits of Firewall Manager?

A
  1. Simplify Management of firewall rules across your accounts
  2. Ensure compliance of existing and new applications
45
Q

What is PII and what are some examples?

A

Personally identifiable information is personal data used to establish an individuals identity.
1. Home address
2, Email address,
3. Date of birth
4. Phone number

46
Q

What is AWS Macie?

A

Macie is a AWS service that uses machine learning and pattern matching to discover sensitive data stored in s3. PII, PHI (Personal health information) and financial data.
It alerts you to unencrypted bucket
alerts you to public buckets
Great for frameworks like HIPAA and GDPR

47
Q

What is AWS Inspector?

A

Inspector is a service used to perform vulnerability scans on both EC2 ( host assessments ) and VPCs ( network assessments ). It allows you to run assessments once or, alternatively, run them weekly

48
Q

What is AWS KMS?

A

AWS Key management service is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. (Shared tenancy of HSM (Hardware security module)

49
Q

What is a HSM?

A

An HSM is a hardware security module that contains one or more secure cryptoprocessor chips

50
Q

What is a CMK and what is it used for?

A

A customer master key is a logical representation of a master key. The customer master key contains the key material used to encrypt or decrypt data. You start using AWS KMS by requesting or creating a CMK

51
Q

What are the three ways of generating a CMK?

A
  1. Generated within HSM’s managed by AWS KMS
  2. Import your own key material and associate it with a CMK
  3. Have a key generated by the AWS CloudHSM-cluster
52
Q

What are the 3 ways to control CMK permissions?

A
  1. Key policies
  2. IAM policies with key policies
  3. Grants with key policies
53
Q

What is the difference between KMS and CloudHSM?

A

KMS
Shared tenancy of hardware
Automatic key rotation
Automatic key generation
CloudHSM
Dedicated HSM to you
Full control of hardware
No automatic key rotation
Full control of users, groups, keys, etc

54
Q

What is AWS Secrets Manager?

A

A service that securely stores, encrypts, and rotates your database credentials and other secrets. API keys, SSH keys, passwords

55
Q

What happens immediately after enabling credential rotation on secrets manager?

A

Your secrets are rotated and this may cause application with hardcoded secrets to break

56
Q

What is AWS parameter store?

A

parameter store is a free capability of AWS systems manager that provides, hierarchical storage for data management and secrets management but has a limit of 10000 parameters

57
Q

What is the difference between parameter store and Secrets manager ?

A

Parameter store is free
Parameter store doesn’t do key rotation
Only Secrets Manager can generate passwords using CloudFormation

58
Q

What are presigned URL’s?

A

The are urls that you can generate that can give a user timed access to private objects in your S3 bucket

59
Q

What are presigned Cookies?

A

This can be useful when you want to provide access to multiple private objects in your S3 bucket

60
Q

What is a AWS ARN ?

A

Amazon resource name

61
Q

What is the form of a ARN?

A

arn:partition(aws):service(s3):region(us-east-1):account_id(123456789012)

62
Q

What is the difference between a Identity Policy and a Resource Policy?

A

an Identity policy is usually attached to a human user a resource policy is attached to amazon resources

63
Q

What are IAM Permission boundaries?

A

This is a feature that allows you to give specific administration rights to other users

64
Q

What is the default behaviour in IAM if a group doesn’t have any policies attached?

A

Everything is implicitly denied

65
Q

What is AWS Certificate Manager?

A

Is a free service that allows you to create, manage and deploy public and private SSL certificates for use with other AWS services, Elastic Load Balancer, CloudFront, and API Gateware

66
Q

What is AWS audit manager?

A

A service that allows you to continually audit your AWS usage to make sure you stay compliant with industry standards and regulations and generate automated reports (HIPAA, GDPR)

67
Q

What is AWS Artifact?

A

It is a single source you can visit to get the compliance-related information that matters to you, such as AWS security and compliance reports HIPAA, GDPR, PCI

68
Q

What is AWS Cognito?

A

Cognito provides authentication, authorization, and user management for your web and mobile apps.

69
Q

What is a user pool in cognito?

A

User directory that provide sign up and sign in options for users of you application

70
Q

What is a Identity pool in cognito?

A

Allows your users to access other AWS services

71
Q

What is the sign in process for cognito?

A
  1. Authenticate and get tokens
  2. Exchange tokens and get AWS credentials
  3. Access AWS services using credentials
72
Q

What is amazon detective?

A

It is a service that operates across multiple AWS services and analyzes the root cause of an event using machine learning and graph theory.

73
Q

What is the difference between amazon detective and amazon inspector?

A

Inspector is an automated vulnerability management service that continually SCans EC2 and software vulnerabilities. Amazon detective is for finding the root cause of a suspected vulnerability incident

74
Q

What is AWS network firewall?

A

Network firewall is a managed service that makes it easy to deploy physical firewall protection across your VPCs, it includes a intrusion prevention system (IPS).

75
Q

What does AWS network firewall allow you to do?

A
  1. Filter Internet Traffic
  2. Filter Outbound Traffic
  3. Inspect VPC-to-VPC traffic
76
Q

What is AWS Security Hub?

A

Security Hub is a single place to view all your security alerts from services such as GuardDuty, Inspector, Macie and AWS Firewall Manager. It works across multiple accounts

77
Q

What is CloudFormation?

A

CloudFormation is a service that allows you to define your infrastructure as code

78
Q

What is a CloudFormation Parameter

A

Theses are values that can be set by the operator during deployment

79
Q

What is a service that allows you to create immutable architecture?

A

CloudFormation

80
Q

What are the 3 critical sections of a cloudformation template?

A
  1. Mapping: Filling in configuration options based on region
  2. Resources: The resources that make up the architecture
  3. Parameters: Values that can be provided during deployment
81
Q

What is a common cause for cloud formation template failure?

A

Hard-coded resource IDs

82
Q

What is Paas?

A

It is Platform as a service

83
Q

What is Elastic Beanstalk?

A

Elastic Beanstalk is a one stop solution for deploying applications in AWS. It automates the process of provisioning the resources you need to get your application online

84
Q

What is Elastic Beanstalk?

A

Elastic Beanstalk is a easy one-stop solution for deploying applications in AWS. It automates the process of provisioning the resources you need to get your application online

85
Q

What is systems manager?

A

It is a free suite of tools designed to let you view, control and automate both your AWS architecture and on-premisies resources

86
Q

What are automation documents / Run Books?

A

A runbook defines action that the systems manager performs on your managed instances

87
Q

How do you make a Instance join system manager?

A
  1. Add system manager agent
  2. Add system manager permission through role
88
Q

What is patch manager?

A

A feature that allows system manager to patch your instances

89
Q

What is session manager?

A

Session managers allows you to easily open remote connections with your instances

90
Q

What is Run Command?

A

Run Command allows you to execute commands on your instances

91
Q

What are hybrid activations?

A

Are on-premises system manager deployments

AWS SA Associate (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions