Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cloud_AWS > aws cloud guru soln architect may 19 > Flashcards

aws cloud guru soln architect may 19 Flashcards

1
Q

To which region does the IAM account apply?

A

it does not apply to any specific region at this time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

file zie range in s3

A

0-5 tb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what does an s3 ojcet consist of

A

key (object name), value (Object byte stream), version, metadata,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

s3 consistency model for new puts

A

read after write consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

s3 consistency for overwrite puts and delete

A

eventual consistency, i.e. when you access immediately sometimes the data may be stale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what is the difference between s3 glacier and deep archive?

A

s3 glacier has a few minutes s3 glacier archive has 12 hrs as retrieval time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

which s3 storage classes have a per GB retrieval fee?

A

all except s3 standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what storage class is ideal for data archiving?

A

s3 glacier and s3 glacier deep archive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what are two strategies for encrypting s3 data at rest

A

client side and server side

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what are 3 ways to encrypt data server side. for s3

A
  1. S3 managed keys (SSES3) - uses AES256
  2. AWS key management service (SSE-KMS) - jointly managed - aws and customer.
  3. Customer Keys (SSE-C) - managed purely by customer.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

while setting up cross-region replication on a bucket in s3 what happens to the existing objects in a bucket and what happens to a new object on the bucket?

A

The existing objects are not replicated and the new objects are

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what condition on versioning must be satisfied before cross region replication can be setup on s3 bucket

A

versioning must be setup on both the source and destination bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

are delete markers replicated automatically during cross region replication on s3

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

are deletions in s3 bucket automatically replicated cross-region?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what are the two dfferent types of cloudfront delivery methods?

A

web - for static and dunamic content and media using http and https, web forms
rtmp: speed up distribution of streaming media files using adobe flash player, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

what if you don’t want cloudfront to cache certian objects from the s3 bucket it is configured for?

A

you create an invalidation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

any activity on the IAM service is pertaining to which region?

A

global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

once a cloudfront distro is created hot do you access an s3 object named object?

A

cloudfrontname.cloudfront.net/object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

can multiple security groups be assigned to an ec2 instance?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

what region will the ebs volume associated with an ec2 instance be?

A

in the same region as the ec2 instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

when you create an image from an EBS snapshot, what virtualization type should you chose to ensure that it works on most ec2 platforms?

A

hardware-assisted virtualization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

when you terminate an ec2 instance, what happens to the root device volume as well as the others?

A

the root device volume is deleted but others remain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

where are volumes and snapshots stored?

A

snapshots are stored in s3 and volumes are stored on EBS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what are two ways to move an ec2 instance to a new region?

A

(option1) create snapshot-create ami-launch ami in new region
(option2) create snapshot - create ami - copy ami to new region - launch ec2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

if you loose the access key and secret access key or an iam user what do you do?

A

go into IAM - select that user - make the keys inactive and generate new ones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

in what step do you mention bootstarp script for the ec2 instance?

A

step 3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

what traffic is not monitored in a VPC flow logs?

A

traffic involving amazon DNS, VPC router, instance metadata, DHCP traffic, windows instance for license activation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

is RDS serverless?

A

no with the exception of aurora which is serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

who’s responsibility is it to patch RDS

A

amazon’s, in fact you cant even ssh into an rds instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

what are the two types of backups in rds?

A

automated and data snapshot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

what is the retention period is the context of automated backups of rds?

A

this is the amount in time since the backup is taken during which the database can be restored to a second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

what are the two parts of an automated backup?

A

a full daily snapshot and transaction logs during the day

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

where are automated backups from rds stored and what is the amount limit?

A

they are stored in s3 and size = size of your database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

when are backups taken and what is the user experience during backups (in the context of rds)

A

they are taken during a defined window and any storage or IO may be suspended when data is being backed up

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

when you restore wither an automated or manual snapshot of the rds, does the DNS endpoint remain the same?

A

no, a new rds instance with a new endpoint is created

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

who initiates rds db snapshots?

A

they are initiated by the user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

once encryption is turned on for rds, what all are encrypted?

A

data stored at rest, automated backups, read replicas and snapshots

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

what are the differences between multiu az and read replicas?

A

multi az, the backup can’t be accessed until there is a failover

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

can read replicas be in the same region?

A

yes and they can also be in different region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

what happens when read replicas are promoted to master?

A

they break the read replication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

is dynamo db serverless?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

what are the two read models of dyanmoDB?

A

eventual read consistency and strong read consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

what kind of storage is dynamo db stored in?

A

SSD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

How many geographical centers is dynamoDB spread across?

A

3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

what are the two engines supported by elastic cache?

A

memcached and redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

which is the only serverless RDS service?

A

aurora

47
Q

what must be turned on to enable read replicas in RDS?

A

autobackup

48
Q

how do you force a failover from one RDS instance to another in a multi AZ setting?

A

by rebooting

49
Q

which RDS services support encryption and using what?

A

using KMS - all 6 - aurora, sql server, oracle, mysql, postgresql

50
Q

how many availability zones is redshift available in?

A

1

51
Q

how many copies of your data does reshift maintain?

A

3 - original and replica on compute nodes and backup in s3

52
Q

what can redshift do to aid disaster recovery?

A

asynchronously replicate your snapshot to s3 in another region.

53
Q

what are the two types of replicas available with aurora and which one of them supports automated failover?

A

aurora replicas and mysql replicas. Automated backup supported only by aurora replicas

54
Q

what dynamodb features are chargeable?

A

storage of data and read and write capacity

55
Q

how many copies of data per AZ and across how many AZs is amazon aurora storing data in?

A

2 copies per AZ and 3 AZs

56
Q

what are the two possible states of instances monitored by load balancers?

A

InService, OutOfService

57
Q

how to delete all instances under an autoscaling group?

A

just delete the autoscaling group itself.

58
Q

what is quick start

A

a bunch of cloudformation templates built by aws architects to allow you to build complex environments quickly

59
Q

what programming languages does lambda support?

A

node.js, java, python, c#, go and powershell

60
Q

what is pricing model for lambda?

A

based on the number of requests and duration

61
Q

what aws service allow you to debug complex architectures?

A

aws x ray

62
Q

can RDS trigger a lambda?

A

no

63
Q

which aws service is appropriate for identity federation?

A

amazon cognito

64
Q

what is the 4 step process Cognito works

A
  1. facebook provides authentication token to cognito pool when user logs in.
  2. cognito converts uthentication key to jwt token
  3. user provides jwt token to cognito identitiy pool which responds with an IAM role to access specific AWS resource
  4. user access spcific aws resource using theIAM role provided.
65
Q

what does cognito use to synchronize user data across multiple devices?

A

push synchronization.

66
Q

what is the difference between user pool and identity pool in the context of amazon Cognito?

A

user pool handle user registration, authentication and account recovery
identity pool authorizes access to aws resources.

67
Q

what is topic in the context of SNS

A

group of all devices which will receive a notification at the same time

68
Q

what is the difference between SNS and SQS?

A

SNS is push based and SQS is poll based.

69
Q

what are the two different types of queue in SQS?

A

standard and fifo queue

70
Q

whats the different between a standard and fifo queue?

A

standrad queue - best effort usually in the same order as sent and messages can be delivered more than once. FIFO queue- strict ordering with no dups.

71
Q

how long are messages kept in the queue?

A

1 minute to 14 days

72
Q

what is the default retention period for SQS?

A

4 days

73
Q

what is visibility timeout in the context of SQS?

A

Amount of time a message is invisible after a reader picks up message. If the message is not processed within visibility timeout (e.g. ec2 instance has to delete the message), it becomes visible again. There is a possibility that the same mesage can be processed more than once.

74
Q

what is one way to save money pent during SQS polling?

A

use long polling.

75
Q

what is kinesis

A

a platform for sending streaming data to

76
Q

what are the three different types of kinesis?

A

streams, firehose,analytics

77
Q

what is kinesis streams?

A

an aws service that stores data for a period of 24 hours to 7 days. Within this time a consumer (typically an ec2 instance) is supposed to read and process the data and put it into redshift, emr, etc.

78
Q

what are shards in the context of kinesis streams?

A

data put into a kinesis stream is stored in shards.

79
Q

what is maximum read rate for kinesis?

A

5 transaction per second; max of 2MB persecond per shard

80
Q

what is the max write rate for kinesis?

A

1000 records per-second;max of 1 MB per second per shard

81
Q

what is the difference between kinesis firehose and streams?

A

in firehose something needs to be done to the data immediately (by triggering a lambda function to store to s3 or redshift) whereas in a stream there is data persistence. Firehose, however, scales automatically whereas streams doesn’t

82
Q

what is kinesis analytics?

A

do analysis within Kinesis streams or firehose inside of kinesis service.

83
Q

what is simple workflow service?

A

managing workflows involving both human and technology components. (e.g. placing order on amazon web site)

84
Q

other than the human element what are some other differences between sqs and swf?

A

sqs has a retention period of 14 days and swf has a retention period of up to 1 iyear
swf offers a task oriented api whereas sqs offers a message-oriented api
swf task is not duplicated whereas sqs task can be duplicated and application must handle this.

85
Q

what are three different types of actors in swf?

A

workflow starters, deciders, and activity workers

86
Q

what are some services that can be there behind an API Gateway?

A

lambda, ec2 and dynamoDB

87
Q

does api gateway enable caching?

A

yes

88
Q

in the context of api gateway, when resources are requested from multiple sources, what do you need to enable so that this is supported?

A

enable CORS on the api gateway

89
Q

if CORS is not enabled, what is the typical error message?

A

Origin policy cannot be read at the remote resource

90
Q

what do you do to api gateways to prevent DoS attacks?

A

throttle

91
Q

can ALB load balance across regions?

A

no

92
Q

what is elastic transcoder service?

A

changes the source format of a video so it’s compatible with different devices. (android, ios smartphone, etc)

93
Q

can dynamodb trigger a lambda function?

A

yes

94
Q

does lamda support hyperthreading?

A

yes

95
Q

on what factors does lambda billing depend?

A

MB of ram served and execution duration in milliseconds

96
Q

how to speed up uploads to s3?

A

use transfer acceleration

97
Q

if you don’t want to wait for TTL to expire before a new object from s3 shows up, what do you do?

A

you invalidate it on cloudfront

98
Q

Can you move AMIs created from EBS volume snapshots across regions or only across availability zones?

A

across regions also

99
Q

difference between s3 IA and one zone IA

A

one zone IA is less expensive but does not provide the same availability or durability as that of S3 IA

100
Q

storage classes for infrequently accesed data (latency same as standard)

A

s3 IA and s3 one zone IA

101
Q

whats the difference between memcache and redis?

A

redis has multi AZ, has more features and is more complex

102
Q

how are EBS snapshots backed into s3?

A

incrementally

103
Q

what is the underlying hypervisor for ec2?

A

xen and niro

104
Q

how do you programatically figure out the public and private IP address of EC2 instance?

A

by querying the instance metadata at

http://169.254.169.254/latest/meta-data/

105
Q

placement groups can be spread across what and not spread across what?

A

spread across AZs and not spread across regions

106
Q

how many running instances can you have in a placement group?

A

7

107
Q

can you take a snapshot of an EBS without stopping the ec2 instance it is attached to?

A

yes, but it can take some time.

108
Q

What is the limit on the number of domain names that you can configure via DNS?

A

50, but you can contact AWS support and increase this.

109
Q

what is allowed by default in a security group?

A

all outbound traffic.

110
Q

what is created by default when you create VPC?

A

route table, security groups and access control lists

111
Q

at what levels can VPC flow logs be created?

A

VPC level, subnet level and network interface level

112
Q

how many VPCs are allowed in each AWS region?

A

5

113
Q

what is the purpose of an egress only internet gateway?

A

allow only IPv6 based connections from inside and prevent IPv6 connections from outside.

Cloud_AWS (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions