AWS DEV-A Practice Exam 6 (training mode) Flashcards
Envelope encryption is the practice of encrypting __________ data with a data key, and then __________ the data key under another key.
Envelope encryption is the practice of encrypting plaintext data with a data key, and then encrypting the data key under another key.
With envelope encryption, one key must ____ ____ ________ so you can decrypt the keys and your data.
With envelope encryption, one key must remain in plaintext so you can decrypt the keys and your data.
Amazon Cognito Sync ________ user profile data across ________ devices and the ____ without requiring your backend.
Amazon Cognito Sync synchronizes user profile data across mobile devices and the web without requiring your backend.
The AWS Serverless Application Model (SAM) provides ______ syntax to express functions, APIs, ________, and _____ ______ mappings.
The AWS Serverless Application Model (SAM) provides shorthand to express functions, APIs, databases and event source mappings
During deployment, SAM transforms and expands the ____ syntax into AWS ____________ syntax, enabling you to build serverless applications faster.
During deployment, SAM transforms and expands the SAM syntax into AWS CloudFormation syntax, enabling you to build serverless applications faster.
Amazon Kinesis Data Firehose is the easiest way to reliably ____ streaming data into data lakes, data ________ and ________ tools
Amazon Kinesis Data Firehose is the easiest way to reliably load streaming data into data lakes, data stores and analytics tools.
Amazon Kinesis Data Firehose can ________, ________, and ____ streaming data into S3, Redshift, ________________, and ________.
Amazon Kinesis Data Firehose can capture, transform, and load streaming data into S3, Redshift, Elasticsearch, and Splunk.
Amazon Kinesis Firehose can enables near real-time ________ with existing business intelligence ________ and ________ .
Amazon Kinesis FIrehouse can enables near real-time analytics with existing business intelligence tools and dashboards.
With an Application Load Balancer it is possible to route requests based on the _____ _____ specified in the Host header
With an Application Load Balancer it is possible to route requests based on the domain name specified in the Host header.
AWS Step Functions is based on the concepts of ____ and state _________.
AWS Step Functions is based on the concepts of tasks and state machines.
AWS Step Functions
You define state machines using the JSON-based Amazon ________ Language.
You define state machines using the JSON-based Amazon States Language.
AWS ________ makes it easy for developers to analyze the behavior of their production, distributed applications with end-to-end tracing capabilities
AWS X-Ray makes it easy for developers to analyze the behavior of their production, distributed applications with end-to-end tracing capabilities
AWS X-Ray
Use ________ to record data you want to store in the trace but don’t need to use for searching traces.
Use metadata to record data you want to store in the trace but don’t need to use for searching traces.
AWS X-Ray
Annotations are simple key-value pairs that are indexed for use with ____ ______.
Annotations are simple key-value pairs that are indexed for use with filter expressions
The memberOf task placement constraint places tasks on container instances that ________ an expression.
The member Of task placement constraint places tasks on container instances that satisfy an expression.
A task placement ______ is a rule that is considered during task placement. Task placement constraints can be specified when either running a task or creating a new service.
A constraint is a rule that is considered during task placement. Task placement constraints can be specified when either running a task or creating a new service.
A ________________ is a collection of build commands and related settings, in ____ format, that CodeBuild uses to run a build your application
A buildspec.yml is a collection of build commands and related settings, in YAML format, that CodeBuild uses to run a build using AWS CodeBuild.
You can apply task placement strategies and constraints to customize how Amazon ECS ________ and ________ tasks.
You can apply task placement strategies and constraints to customize how Amazon ECS places and terminates tasks.
In IAM roles, use the ________ element in the role trust policy to specify who can assume the role.
In IAM roles, use the Principal element in the role trust policy to specify who can assume the role.
Amazon ____ ____ ________ requires consumers running on EC2 instances or AWS Lambda for processing the data from the stream.
Amazon Kinesis Data Streams requires consumers running on EC2 instances or AWS Lambda for processing the data from the stream.
To encrypt ________ quantities of data with the AWS Key Management Service (KMS), you must use a ____ encryption key rather than a ________ master keys
To encrypt large quantities of data with the AWS Key Management Service (KMS), you must use a data encryption key rather than a ; customer master keys
IAM JSON policy required elements
Version
Statement
Effect
Principal: You must use the Principal element in resource-based policies.
The ____ policy element is mandatory and tells AWS whether this policy will explicitly Allow or Deny access to the particular resources declared in the statement.
The Effect policy element is mandatory and tells AWS whether this policy will explicitly Allow or Deny access to the particular resources declared in the statement.
{
“Version”: “2012-10-17”,
“Statement”:[
{
“Effect”: “Allow”,
}
]
}
IAM JSON policy elements:
The ____ element describes the specific actions that will be allowed or denied. Statements must include either an ____ or ________ element.
The Action element describes the specific action or actions that will be allowed or denied. Statements must include either an Action or NotAction element.
{
“Version”: “2012-10-17”,
“Statement”:[
{
“Effect”: “Allow”,
“Action”: “ec2:StartInstances”,
}
]
}
CodeDeploy
The AppSpec.yml file specifies the ____ ____ definition used for the deployment,
The AppSpec.yml file specifies the ECS task definition used for the deployment.
CodeDeploy provides two deployment type options: __ ______ and ___/____.
CodeDeploy provides two deployment type options: in-place and blue/green
In-place deployment:
The application on each instance in the deployment group is ________ , the latest application revision is ________, and the new version of the application is started and ________.
The application on each instance in the deployment group is stopped, the latest application revision is installed, and the new version of the application is started and validated.
Whats the only situation that will allow you to usein-place deployments?
EC2/On-Premises compute platforms