Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SA Associate > AWS Caching, Governance, Migration > Flashcards

AWS Caching, Governance, Migration Flashcards

1
Q

What are the two types of caching that AWS supports ?

A

Internal caching: ElastiCache for database DAX for dynamo DB
External caching: Cloudfront CDN, Global accelerator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is cloudFront?

A

CloudFront is a CDN that securely delivers data and reduces latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What data is the most suitable for caching?

A

Static data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the best service for delivering our data to our users faster?

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What mechanism is used to make sure your data doesn’t become stale?

A

TTL Settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What service will help you avoid issues with cached IP’s?

A

Global Accelerator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is global accelerator?

A

Is a networking service that send your users’ traffic through AWS’s global network infrastructure. It can increase performance and help deal with IP caching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How do you add HTTPS to a static website being hosted in an S3 bucket?

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are AWS’s two options for in-memory databases?

A

Redis, DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is ElasticCache?

A

Is a managed version of 2 open source caching solutions, Memchached and Redis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the difference between Memcached and Redis?

A

Both are database caching solutions but Redis can also be a standalone in memory database with support for failover, backups and multi AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is DAX?

A

DynamoDB accelerator is a in memory cache for dynamoDB that reduces response times from milliseconds to microseconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is AWS organizations?

A

A free governance tool by AWS that allows you to manage multiple accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the best practice for centralizing all your logs and making sure they can’t be accidentally deleted.

A

Creating a logging account with AWS organizations and restricting access using SCP’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are SCP’s

A

Service Control Policies are policies that are set up in AWS organization that limits the Access of the AWS accounts that they are attached to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What’s the difference between Allow policies and Deny SCPs

A

Allow Service Control Policies will only give an account access to the services that are listed “filtering out all other services” A deny policy will deny access to the listed services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the main benefits of using AWS organisations?

A
  1. Logging accounts
  2. Programmatic Creation
  3. Reserved Instances
  4. Consolidated Billing
  5. Service Control policies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can you share reserved instance across multiple accounts?

A

Yes you can using AWS organisations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is AWS RAM?

A

Resource access management is a AWS feature that allows you to share aws resources such as a VPC between multiple accounts. Internal or External to your organizaition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How much does AWS RAM cost?

A

Resource Access Management is free

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the difference between sharing a VPC using RAM and VPC peering?

A

RAM is easier and is generally suitable for Intra organization sharing
VPC Peering excels when you’re connecting 2 separate networks (Inter organization)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are cross account roles ?

A

It’s a IAM feature that allows you to give the user of another role access to resources inside your account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the preferred way of giving a user access to your AWS resources?

A

Give them role access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is AWS Config?

A

AWS Config is an inventory management and control tool that allows you to show what infrastructure you have set up and the history of your infrastructure including deleted resources. It also allows you to create rules and enforce standards for how your infrastructure should be configured

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the best tool to check that your resources conform to the set of standards you have configured ?

A

AWS Config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are the four main features of AWS config ?

A
  1. Standards definition and enforcement
  2. Enforcement
  3. View Resource history including deleted resources
  4. Consolidation to a single region
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is AWS Directory Service?

A

It is a fully managed version of Active Directory.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are the three typed of AWS Directory service?

A
  1. Managed Microsoft AD: The full AD suite deployed in AWS
  2. AD Connect: Creates a tunnel between AWS and your on-premises AD
  3. Simple AD: Standalone directory powered by Linux Samba AD compatible Server
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

When would you want to use AD Connect not Managed Microsoft AD?

A

When you don’t want to fully move your AD deployment to the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is AWS Cost Explorer?

A

It is an easy to use tool that allows you to visualize your cloud costs and filter those costs based on a variety of structures including resource tags. It also allows you to forecast future spend

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What do you have to do to be able to use a tag for filtering in Cost Explorer?

A

Setup the tag as a cost allocation Tag

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What are the three main features of AWS Cost Explorer?

A
  1. Understand Bills and Filter by tags: Can help filter by departement
  2. Generate Budgets and reports
  3. Predict future spend
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What are the three main features of AWS Cost Explorer?

A
  1. Understand Bills and Filter by tags: Can help filter by department
  2. Generate Budgets and reports
  3. Predict future spend
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is AWS budgets?

A

AWS budgets is a budgeting tool that allows you to easily set budgets based on costs, Usage, Reservations and Savings Plans and alert on certain thresholds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is CUR?

A

Costs and Usage Reports It is the most comprehensive and detailed view of your AWS spending

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What are the main features of CUR?

A
  1. Comprehensive
  2. Centralized: Can send all your reports to S3
  3. Use with organizations
  4. AWS intergrations with Athena, Redshift, QuickSight
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is AWS Compute Optimizer?

A

It provides recommendations based on collected utilization and configuration metrics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What 4 resources does AWS Optimizer work with?

A
  1. Amazon EC2
  2. Auto Scailing groups
  3. AWS Lambda
  4. Amazon EBS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is AWS Optimizations default state?

A

Disabled by default

39
Q

What are the three types of user accounts?

A
  1. Standalone accounts
  2. Member accounts: an account that is part of a organization
  3. Management Account: AWS organizations management account
40
Q

What are AWS savings plans?

A

Flexible offerings for pricing on AWS compute usage, Similar to reserved instances

41
Q

What are the 3 savings plans types?

A
  1. General Compute Savings Plans,
  2. EC2 instance savings plans
  3. SageMaker Savings Plans
42
Q

What is the pricing structure for saving plans?

A

1 and 3 year agreements. All upfront, Partial Upfront, No upfront

43
Q

What is AWS trusted adviser?

A

It is a fully managed best-practice auditing tool.

44
Q

What are the five areas that AWS trusted adviser will scan in your account?

A
  1. Cost Optimization
  2. Performance
  3. Security
  4. Fault Tolerance
  5. Service Limits
45
Q

What is the best way to action AWS trusted advisor recommendations?

A
  1. Set alerts
  2. Automate responses to those alerts
    Note: AWS trusted advisor will not fix any problems just notify
46
Q

What is the cost of AWS trusted advisor?

A

Some services are free but other require payment

47
Q

What is AWS Control Tower?

A

The quickest way to create and manage secure, compliant, multi-account environment based on best practices (Account Orchestration)

48
Q

What are the five features of Control Tower

A
  1. Landing zones
  2. Guard rails
  3. Account factory
  4. CloudFormation StackSet
  5. Shard Accounts
49
Q

What is a Control Tower Landing zone?

A

Well-achitected, multi-account environment

50
Q

What are the two types of Guardrails?

A

Preventive: use SCPs to allow or disallow actions (supported in all regions)
Detective: use AWS config rules just notifies (support in certain regions)

51
Q

What are the types of Control tower shared accounts?

A
  1. Management account
  2. Log Archive account
  3. Audit account
52
Q

What are guard rails?

A

High level rules providing continuous governance for the AWS envirnoment

53
Q

What is account factory?

A

Configurable account template for the standardizing pre-approved configs of new accounts

54
Q

What is CloudFormation StackSet?

A

Automated deployment of templates deploying repeated resources for governance

55
Q

What is AWS license manager?

A

A service that makes managing licenses simpler and more efficient.

56
Q

What are the four features of License manager?

A
  1. Centralized
  2. Set Usage Limits
  3. Reduces Overages
  4. Supports software based on physical machine limits
57
Q

What is AWS Health / AWS personal health

A

It is a service that allows you to gain visibility into services and resource health of your AWS resources and accounts. It can inform you AWS maintenance and availability events (Specific and public events)

58
Q

What is AWS service catalog ?

A

It is a versioned, centralized catalog of pre-approved multipurpose components (AMIs, servers, software, databases …) That is defined as cloud formation templates to allow standardization and self-service of resources

59
Q

What is AWS Proton?

A

It is a service that offers standardized infrastructure as code provisioning and deployment of serverless/container architectures including deployment of code

60
Q

What is AWS WA tool?

A

AWS Well-Architected Tool is a tool for measuring current workloads against established AWS best practices and Historical data. It aids in documentation of workload and architecture decisions

61
Q

What is the AWS Snow family?

A

A set of secure appliances that provide peta-byte scale migration into and out of AWS so offering built-in compute

62
Q

What are the member of the Snow Family?

A
  1. SnowCone: up to 8TB
  2. SnowBall: 50 -80TB comes in storage, compute and GPU variants
  3. SnowMobile: 100 PB
63
Q

How long does migration take when using the snow family?

A

About a week

64
Q

What is Storage Gateway?

A

Storage gateway is a hybrid cloud storage service that helps you merge on-premises resources with the cloud

65
Q

What are the three types of Storage Gateway?

A
  1. File Gateway: NFS or SMB
  2. Volume Gateway: iSCSI
  3. Tape Gateway: Archive
66
Q

What are the two general modes supported by Storage Gateway?

A
  1. Caching recent files on premises with main storage in AWS
  2. Storing all files in AWS
67
Q

What are the main use cases for AWS Gateway?

A

Scalable Hybrid storage solution with AWS
Migration to AWS

68
Q

What is AWS DataSync?

A

It is a Secure (TLS) agent-based solution primarily for migrating on-premises storage to AWS. It allows you to easily move data between NFS and SMB and AWS S3, EFS, and FSx

69
Q

What is the AWS transfer family?

A

It is a solution that allows you to move files in and out of S3 or EFS using (SFTP, FTPS Externally) and FTP(Within the VPC in AWS)

70
Q

What is AWS Migration Hub?

A

It is a centralized dashboard where you can view SMS and DMS migration

71
Q

What is AWS SMS ?

A

Server migration service is a service that allow you to migrate your on-premsise virtual machinces and turn them into AWS AMIs

72
Q

What is AWS DMS?

A

Database migration service allows you to migrate your on-premises databases (Relational and non-relational) to AWS and leverage tools like schema conversion to transition to RDS or Aurora
Note: Only works with a AWS endpoint

73
Q

What is AWS Application discovery service?

A

It is a service that allows to use Agentless (OVA file) or Agent-Based application discovery so that you can easily and quickly migrate applications to AWS

74
Q

What is AWS MGN?

A

AWS migration service is an automated lift and shift for migrating infrastructure to AWS by replicating source servers (VM’s, Physical, or cloud servers)

75
Q

What is AWS SCT?

A

Schema conversion tool allows you to convert database schemas

76
Q

What are the three types of data migration?

A
  1. Full load
  2. Full Load and Change data Capture (CDC): captures changes during migration
  3. CDC only: Only replicates changes from the source database
77
Q

What is AWS Amplify?

A

Amplify offers tools for front-end web and mobile developer to build full-stack applications. It offers support for Vue, Angular, React and Server side rendering (SSR) with Next.js Provide two main tools Amplify Hosting and Amplify Studio

78
Q

What is AWS Pinpoint?

A

Pinpoint is a service that enables you to engage with your customers it is primarily used for marketing campaigns and communicating with your customers. It allows you to leverage machine learning models to predict engagement interactions

79
Q

What are the 3 main use cases for AWS Pinpoint?

A
  1. Marketing
  2. Transactions
  3. Bulk communication to up to millions of people
80
Q

What is AWS Comprehend ?

A

It’s a service that uses natural language processing to understand the meaning behind text. Implement sentiment analysis, in and search product reviews, Manage legal briefs

81
Q

What is AWS Kendra?

A

A service that uses machine learning to build an intelligent search service using unstructured text (S3, File Server, Databases)

82
Q

What is AWS Textract?

A

A service that uses machine learning to extract text from handwriting, and other scanned documents

83
Q

What is AWS Forcast?

A

Amazon forecast is a time-series forecasting service that uses machine learning and is built to give you important business insights

84
Q

What is Amazon Fraud Detector?

A

It is a fraud detection machine learning model that is highly customized based on your data (Free trial abuse, High risk account)

85
Q

What is Amazon Transcribe?

A

A service for converting live video and speech into text

86
Q

What is Amazon Lex?

A

A service that provides conversational chat bot functionality

87
Q

What is Amazon Polly?

A

A service for converting speech to text

88
Q

What is Amazon rekognition?

A

It is a computer vision service that automates the recognition of pictures and videos using deep learning and neural network. (You can use these processes to understand and label what is in a picture or video) Face Detection, Content Moderation

89
Q

What is Amazon SageMaker?

A

It is a service where you create, train and deploy machine learning models in AWS

90
Q

What is one way to decrease your sage maker costs?

A

Elastic inference (EI)

91
Q

What is amazon translate?

A

Allows you to translate from one language to another using deep learning/neural networks.

92
Q

What is sage maker NEO?

A

It’s a service that allows you to optimize for a specific computer architecture

93
Q

What is Amazon Elastic Transcoder?

A

It allows businesses and developers to convert media files from their original source format into versions that are optimized for various devices

94
Q

What are amazon kinesis video streams?

A

It is a service that allows you to stream media content data from a large number of devices to AWS and then run analytics, machine learning, playback and other processing

AWS SA Associate (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions