AWS cloud guru developer Flashcards

1
Q

what languages are supported by aws lambda

A

node.js, java, python, go, C#

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what tool allows you to debug what’s happening inside a lambda function

A

AWS X rays

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what is sqs visibility timeout

A

its the amount of time a message remains in an invisible state. The invisible state is the state a message gets into after it has been picked up by a server for processing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what if the visibility timeout occurs before the server finishes processing the message.

A

The message becomes visible again and another server can take up it’s processing. If the first server that took this up processes it, it can result in multiple processing of the same mesaage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what if the server finishes processing before the visibility timeout occurs?

A

the message is deleted from the queue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what are the min and max values of the visibility timeout of an SQS queue

A

30 seconds to 12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

what service is used for sending email only?

A

SES - simple email service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

while uploading your deployment package to AWS lambda, what information do you need to provide as configuration?

A

name of the handler method, compute requirements, and runtime.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what permission policies should you set on the zip file which you upload as a lambda function?

A

read permission for global users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

with what permissions does AWS lambda access other resources from your code?

A

The same permission as that of the IAM user who is running the lambda function.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

in the context of a lamda frunction, for poll based sources where is the event source mapping stored?

A

in AWS lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

in the context of a lamda frunction, for push based event sources where is the event sourc mapping stored?

A

in the source service or resorce (e/g/S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

in the context of a lamda frunction, what is an event source mapping?

A

delineates what events to track and what functions to invoke.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

where are event source mappings stored in the event source or the lambda function?

A

for push based events like S3 in the event source

for poll based events in the lambda function,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

if you’re using an S3 as an event source, where do you configure the notification?

A

Notification configuration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

In the context of AWS lambda what are the primary resources

A

The lambda function and event source mapping.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

when launching an ec2 instance which volume is not and cannot be encrypted at the time of launch?

A

root volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

how long does it take for a change of rule in security group to take effect?

A

almost immediately.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

are security group rules stateful? what does it mean?

A

yes, it means when you create an inbound rule, a corresponding outobound rule for the same port is implicitly created. e.g. allowing incoming http will allow your server to respond as well

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

are network access control list rules stateful?

A

no ther are not.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

if you want to block a particular port or ip address, can you do it with a security group or a network access control list?

A

network access control list.

22
Q

can you assign multiple security groups to an ec2 instance?

A

yea

23
Q

whats one thing aws does to achieve high availability and durability on ebs?

A

automatically replicate an EBS volume within the availability zone/

24
Q

what are different EBS options available?

A

SSD - general purpose SSD, provisioned IOPS SSD

HDD - throughput optimized HDD, cold HDD, EBS magnetic

25
Q

what availability zone is the EBS in compared to the ec2 instance?

A

EBS volume and EC2 instance are in the same availability zone.

26
Q

if you terminate an ec2 instance what happens to the root device volume?

A

that gets deleted as well.

27
Q

if you terminate an ec2 instance what happens to the additional volumes (other than the root) which are attached?

A

they are not deleted by default. In fact they become “available” for use.

28
Q

what are two different ways you can create an image from a snapshot?

A

volume – snapshot–image

volume –image

29
Q

what are different ways in which you could select AMIUs

A

PORAS - permissions, operating system, region, architecture - 32 vs 64 bits, storage for the root device.

30
Q

if the snapshot out of which an image was created is encrypted, then can you launch that image on a volume that is unencrypted?

A

no

31
Q

what is the encryption status of volumes restored from encrypted snapshots

A

they are encrypted as well.

32
Q

what is the difference between cloud watch and cloud trail?

A

cloud watch = monitoring performance (gym)

cloud trail = monitoring API calls (CCTV camera)

33
Q

what is the default monitoring interval of ec2 by cloud watch?

A

every 5 minutes.

34
Q

2 differences between efs and ebs

A

increase in size, mounted simaltaneously on multiple ec2 instances

35
Q

difference between acl and security groups

A

acls - stat, have both allow and deny rules

36
Q

what is a bastion host?

A

it’s a host in the public subnet that you use to connect to an instance in the private subnet

37
Q

what is the largest subnet you can use in an AWS VPS?

A

/16

38
Q

what is the smallest subnet you can condigure in an AWS VPC?

A

/28

39
Q

what kind of vpc configuration peering is allowed: star or transitive

A

star only not transitive

40
Q

what is created by default when a vpc is created?

A

security group, network acl and route table

41
Q

how many IP addresses are reserved per subnet?

A

5

42
Q

can you have multiple internet gateways per vpc?

A

no

43
Q

can you use a security group from one vpc in another vpc?

A

no, security groups do not span VPCs

44
Q

what is the difference between a nat instance and a nat gateway?

A

a nat instance is an ec2 instance with nat functionality whereas a nat gateway ihas HA, etc.

45
Q

are NAT gateways assigned to a security group?

A

no

46
Q

are nat gateways automatically assigned a public IP address?

A

yes

47
Q

which of the following does a security group allow by default: all in bound traffic or all outbound traffic?

A

all outbound traffic

48
Q

how many public subnets do you need at a minimum ro be able to configure a load balancer?

A

two

49
Q

at what different levels can flow logs be created?

A

VPC, subnet, network interface level

50
Q

after creating a flowlog can you change it’s association?

A

no