Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AWS SA Associate > AWS Caching, Governance, Migration > Flashcards

AWS Caching, Governance, Migration Flashcards

1
Q

What are the two types of caching that AWS supports ?

A

Internal caching: ElastiCache for database DAX for dynamo DB
External caching: Cloudfront CDN, Global accelerator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is cloudFront?

A

CloudFront is a CDN that securely delivers data and reduces latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What data is the most suitable for caching?

A

Static data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the best service for delivering our data to our users faster?

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What mechanism is used to make sure your data doesn’t become stale?

A

TTL Settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What service will help you avoid issues with cached IP’s?

A

Global Accelerator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is global accelerator?

A

Is a networking service that send your users’ traffic through AWS’s global network infrastructure. It can increase performance and help deal with IP caching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How do you add HTTPS to a static website being hosted in an S3 bucket?

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are AWS’s two options for in-memory databases?

A

Redis, DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is ElasticCache?

A

Is a managed version of 2 open source caching solutions, Memchached and Redis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the difference between Memcached and Redis?

A

Both are database caching solutions but Redis can also be a standalone in memory database with support for failover, backups and multi AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is DAX?

A

DynamoDB accelerator is a in memory cache for dynamoDB that reduces response times from milliseconds to microseconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is AWS organizations?

A

A free governance tool by AWS that allows you to manage multiple accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the best practice for centralizing all your logs and making sure they can’t be accidentally deleted.

A

Creating a logging account with AWS organizations and restricting access using SCP’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are SCP’s

A

Service Control Policies are policies that are set up in AWS organization that limits the Access of the AWS accounts that they are attached to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What’s the difference between Allow policies and Deny SCPs

A

Allow Service Control Policies will only give an account access to the services that are listed “filtering out all other services” A deny policy will deny access to the listed services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the main benefits of using AWS organisations?

A
  1. Logging accounts
  2. Programmatic Creation
  3. Reserved Instances
  4. Consolidated Billing
  5. Service Control policies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can you share reserved instance across multiple accounts?

A

Yes you can using AWS organisations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is AWS RAM?

A

Resource access management is a AWS feature that allows you to share aws resources such as a VPC between multiple accounts. Internal or External to your organizaition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How much does AWS RAM cost?

A

Resource Access Management is free

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the difference between sharing a VPC using RAM and VPC peering?

A

RAM is easier and is generally suitable for Intra organization sharing
VPC Peering excels when you’re connecting 2 separate networks (Inter organization)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are cross account roles ?

A

It’s a IAM feature that allows you to give the user of another role access to resources inside your account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the preferred way of giving a user access to your AWS resources?

A

Give them role access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is AWS Config?

A

AWS Config is an inventory management and control tool that allows you to show what infrastructure you have set up and the history of your infrastructure including deleted resources. It also allows you to create rules and enforce standards for how your infrastructure should be configured

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
What is the best tool to check that your resources conform to the set of standards you have configured ?
AWS Config
25
What are the four main features of AWS config ?
1. Standards definition and enforcement 2. Enforcement 3. View Resource history including deleted resources 4. Consolidation to a single region
26
What is AWS Directory Service?
It is a fully managed version of Active Directory.
27
What are the three typed of AWS Directory service?
1. Managed Microsoft AD: The full AD suite deployed in AWS 2. AD Connect: Creates a tunnel between AWS and your on-premises AD 3. Simple AD: Standalone directory powered by Linux Samba AD compatible Server
28
When would you want to use AD Connect not Managed Microsoft AD?
When you don't want to fully move your AD deployment to the cloud
29
What is AWS Cost Explorer?
It is an easy to use tool that allows you to visualize your cloud costs and filter those costs based on a variety of structures including resource tags. It also allows you to forecast future spend
30
What do you have to do to be able to use a tag for filtering in Cost Explorer?
Setup the tag as a cost allocation Tag
31
What are the three main features of AWS Cost Explorer?
1. Understand Bills and Filter by tags: Can help filter by departement 2. Generate Budgets and reports 3. Predict future spend
32
What are the three main features of AWS Cost Explorer?
1. Understand Bills and Filter by tags: Can help filter by department 2. Generate Budgets and reports 3. Predict future spend
33
What is AWS budgets?
AWS budgets is a budgeting tool that allows you to easily set budgets based on costs, Usage, Reservations and Savings Plans and alert on certain thresholds
34
What is CUR?
Costs and Usage Reports It is the most comprehensive and detailed view of your AWS spending
35
What are the main features of CUR?
1. Comprehensive 2. Centralized: Can send all your reports to S3 3. Use with organizations 4. AWS intergrations with Athena, Redshift, QuickSight
36
What is AWS Compute Optimizer?
It provides recommendations based on collected utilization and configuration metrics
37
What 4 resources does AWS Optimizer work with?
1. Amazon EC2 2. Auto Scailing groups 3. AWS Lambda 4. Amazon EBS
38
What is AWS Optimizations default state?
Disabled by default
39
What are the three types of user accounts?
1. Standalone accounts 2. Member accounts: an account that is part of a organization 3. Management Account: AWS organizations management account
40
What are AWS savings plans?
Flexible offerings for pricing on AWS compute usage, Similar to reserved instances
41
What are the 3 savings plans types?
1. General Compute Savings Plans, 2. EC2 instance savings plans 3. SageMaker Savings Plans
42
What is the pricing structure for saving plans?
1 and 3 year agreements. All upfront, Partial Upfront, No upfront
43
What is AWS trusted adviser?
It is a fully managed best-practice auditing tool.
44
What are the five areas that AWS trusted adviser will scan in your account?
1. Cost Optimization 2. Performance 3. Security 4. Fault Tolerance 5. Service Limits
45
What is the best way to action AWS trusted advisor recommendations?
1. Set alerts 2. Automate responses to those alerts Note: AWS trusted advisor will not fix any problems just notify
46
What is the cost of AWS trusted advisor?
Some services are free but other require payment
47
What is AWS Control Tower?
The quickest way to create and manage secure, compliant, multi-account environment based on best practices (Account Orchestration)
48
What are the five features of Control Tower
1. Landing zones 2. Guard rails 3. Account factory 4. CloudFormation StackSet 5. Shard Accounts
49
What is a Control Tower Landing zone?
Well-achitected, multi-account environment
50
What are the two types of Guardrails?
Preventive: use SCPs to allow or disallow actions (supported in all regions) Detective: use AWS config rules just notifies (support in certain regions)
51
What are the types of Control tower shared accounts?
1. Management account 2. Log Archive account 3. Audit account
52
What are guard rails?
High level rules providing continuous governance for the AWS envirnoment
53
What is account factory?
Configurable account template for the standardizing pre-approved configs of new accounts
54
What is CloudFormation StackSet?
Automated deployment of templates deploying repeated resources for governance
55
What is AWS license manager?
A service that makes managing licenses simpler and more efficient.
56
What are the four features of License manager?
1. Centralized 2. Set Usage Limits 3. Reduces Overages 4. Supports software based on physical machine limits
57
What is AWS Health / AWS personal health
It is a service that allows you to gain visibility into services and resource health of your AWS resources and accounts. It can inform you AWS maintenance and availability events (Specific and public events)
58
What is AWS service catalog ?
It is a versioned, centralized catalog of pre-approved multipurpose components (AMIs, servers, software, databases ...) That is defined as cloud formation templates to allow standardization and self-service of resources
59
What is AWS Proton?
It is a service that offers standardized infrastructure as code provisioning and deployment of serverless/container architectures including deployment of code
60
What is AWS WA tool?
AWS Well-Architected Tool is a tool for measuring current workloads against established AWS best practices and Historical data. It aids in documentation of workload and architecture decisions
61
What is the AWS Snow family?
A set of secure appliances that provide peta-byte scale migration into and out of AWS so offering built-in compute
62
What are the member of the Snow Family?
1. SnowCone: up to 8TB 2. SnowBall: 50 -80TB comes in storage, compute and GPU variants 3. SnowMobile: 100 PB
63
How long does migration take when using the snow family?
About a week
64
What is Storage Gateway?
Storage gateway is a hybrid cloud storage service that helps you merge on-premises resources with the cloud
65
What are the three types of Storage Gateway?
1. File Gateway: NFS or SMB 2. Volume Gateway: iSCSI 3. Tape Gateway: Archive
66
What are the two general modes supported by Storage Gateway?
1. Caching recent files on premises with main storage in AWS 2. Storing all files in AWS
67
What are the main use cases for AWS Gateway?
Scalable Hybrid storage solution with AWS Migration to AWS
68
What is AWS DataSync?
It is a Secure (TLS) agent-based solution primarily for migrating on-premises storage to AWS. It allows you to easily move data between NFS and SMB and AWS S3, EFS, and FSx
69
What is the AWS transfer family?
It is a solution that allows you to move files in and out of S3 or EFS using (SFTP, FTPS Externally) and FTP(Within the VPC in AWS)
70
What is AWS Migration Hub?
It is a centralized dashboard where you can view SMS and DMS migration
71
What is AWS SMS ?
Server migration service is a service that allow you to migrate your on-premsise virtual machinces and turn them into AWS AMIs
72
What is AWS DMS?
Database migration service allows you to migrate your on-premises databases (Relational and non-relational) to AWS and leverage tools like schema conversion to transition to RDS or Aurora Note: Only works with a AWS endpoint
73
What is AWS Application discovery service?
It is a service that allows to use Agentless (OVA file) or Agent-Based application discovery so that you can easily and quickly migrate applications to AWS
74
What is AWS MGN?
AWS migration service is an automated lift and shift for migrating infrastructure to AWS by replicating source servers (VM's, Physical, or cloud servers)
75
What is AWS SCT?
Schema conversion tool allows you to convert database schemas
76
What are the three types of data migration?
1. Full load 2. Full Load and Change data Capture (CDC): captures changes during migration 3. CDC only: Only replicates changes from the source database
77
What is AWS Amplify?
Amplify offers tools for front-end web and mobile developer to build full-stack applications. It offers support for Vue, Angular, React and Server side rendering (SSR) with Next.js Provide two main tools Amplify Hosting and Amplify Studio
78
What is AWS Pinpoint?
Pinpoint is a service that enables you to engage with your customers it is primarily used for marketing campaigns and communicating with your customers. It allows you to leverage machine learning models to predict engagement interactions
79
What are the 3 main use cases for AWS Pinpoint?
1. Marketing 2. Transactions 3. Bulk communication to up to millions of people
80
What is AWS Comprehend ?
It's a service that uses natural language processing to understand the meaning behind text. Implement sentiment analysis, in and search product reviews, Manage legal briefs
81
What is AWS Kendra?
A service that uses machine learning to build an intelligent search service using unstructured text (S3, File Server, Databases)
82
What is AWS Textract?
A service that uses machine learning to extract text from handwriting, and other scanned documents
83
What is AWS Forcast?
Amazon forecast is a time-series forecasting service that uses machine learning and is built to give you important business insights
84
What is Amazon Fraud Detector?
It is a fraud detection machine learning model that is highly customized based on your data (Free trial abuse, High risk account)
85
What is Amazon Transcribe?
A service for converting live video and speech into text
86
What is Amazon Lex?
A service that provides conversational chat bot functionality
87
What is Amazon Polly?
A service for converting speech to text
88
What is Amazon rekognition?
It is a computer vision service that automates the recognition of pictures and videos using deep learning and neural network. (You can use these processes to understand and label what is in a picture or video) Face Detection, Content Moderation
89
What is Amazon SageMaker?
It is a service where you create, train and deploy machine learning models in AWS
90
What is one way to decrease your sage maker costs?
Elastic inference (EI)
91
What is amazon translate?
Allows you to translate from one language to another using deep learning/neural networks.
92
What is sage maker NEO?
It's a service that allows you to optimize for a specific computer architecture
93
What is Amazon Elastic Transcoder?
It allows businesses and developers to convert media files from their original source format into versions that are optimized for various devices
94
What are amazon kinesis video streams?
It is a service that allows you to stream media content data from a large number of devices to AWS and then run analytics, machine learning, playback and other processing

AWS SA Associate (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions