Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certs > AWS Flashcards > Flashcards

AWS Flashcards

1
Q

Which service gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount?

A

AWS Budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What service has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time?

A

AWS Cost Explorer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What service provides threat detection and continuous monitoring for malicious activity and unauthorized behavior to protect your AWS accounts and workloads?

A

AWS GuardDuty

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What service is a fully-managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS? It also provides an inventory of S3 buckets that are public, unencrypted, or shared with AWS accounts outside the ones defined in your AWS organizations, which it can alert for sensitive data such as PII.

A

Amazon Macie

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the default configuration of the default NACL?

A

Allow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the default configuration of a custom NACL?

A

Deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What service can you use to create and provide trusted users with temporary short term security credentials that can control access to your AWS resources? This provides access to your AWS resources to your users, without having to define an AWS identity for them.

A

AWS Security Token Service (STS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Is Redshift appropriate for handling session state of a web application?

A

No, it is a data warehouse

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the easiest way to reliably load streaming data into data lakes, data stores, and analytics tools? It can capture, transform, and load streaming data into Amazon S3, Amazon Redshift, Amazon Elasticsearch Service, and Splunk, enabling near-real-time analytics with existing business intelligence tools and dashboards you’re already using today. It is a fully-managed service. It can also batch, compress, transform, and encrypt the data before loading it.

A

Amazon Kinesis Data Firehose

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How is Kinesis Data Firehose different from Kinesis Data Streams?

A

It takes more work to set up Data Streams, but Firehose transfers into fewer places.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Where can Amazon Kinesis Data Firehose transfer information into?

A

S3<br></br>Redshift<br></br>Elasticsearch<br></br>Splunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Ignoring cost, which Disaster Recovery plan has a better RTO and RPO? Warm standby, or Backup and Restore?

A

Warm Standby

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is RT in disaster recovery?

A

Recovery time - How fast the system is back up

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is RP in disaster recovery?

A

Recovery point - How much data is recovered

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What can you do with an EBS volume while taking a snapshot of it?

A

Anything. It can be used normally.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a “warm attach” of an ENI?

A

Attaching it to an instance while it’s stopped.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is a “hot attach” of an ENI?

A

Attaching it to an instance while it’s running.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is a “cold attach” of an ENI?

A

Attaching it to an instance while it’s being launched.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Suppose you want a CFT to work in multiple regions, and therefore need to set the AMI based on the region. What’s a good way to do that?

A

Use a mapping, taking the region as a key and AMI as the value.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How could you implement synchronous data replication for an RDS database to meet a disaster recovery plan’s RTO?

A

RDS Multi-AZ deployments. When you provision an instance of one, RDS creates a primary DB instance and sychronously replicates the data to standby instances in different AZs. If the primary fails, it automatically falls over to a standby instance, while keeping the same endpoint.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which DR plan optimizes RT with cost not being a major factor? Multi-site, Warm Standby, Pilot Light, or Backup and Restore?

A

Multi-Site. By having identical infrastructure in both places, you spend more money but have optimal RT.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Does RDS multi-region exist?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Does RDS multi-AZ exist?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What DNS records need to be made at the zone apex to point to the DNS name of an ALB?

A

Alias with A and AAAA type record sets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How long does multi-AZ RDS take to failover from one AZ to another?

A

One to two minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

You have an ALB pointed at an autoscaling group of EC2 instance.<br></br><br></br>What action does an ALB take if an EC2 instance fails a health check?

A

The ALB stops sending traffic to the instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the Backup and Restore DR plan?

A

Taking snapshots of data, and restoring from them in an incident.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are the benefits of the Backup and Restore DR plan?

A

It’s cheap.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is the Pilot Light DR plan?

A

Keeping the critical elements of a system ready to scale up. This gets rid of the time spent creating initial infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What are the drawbacks of the Backup and Restore DR plan?

A

It takes the longest time to recover.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the Warm Standby DR plan?

A

Keeping a scaled-down version of a fully functional environment always running.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is the Multi-site DR plan?

A

Having a one-one copy of your infrastructure in another region or AZ.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are the four different DR plan types?

A

Backup & Restore<br></br>Pilot Light<br></br>Warm Standby<br></br>Multi-Site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Your team has provisioned Auto Scaling Groups in a single Region. The Auto Scaling Group at max capacity would total 40 EC2 instances between them. However, you notice that the Auto Scaling Groups will only scale out to a portion of that number of instances at any one time. What could be the problem?

A

There is a vCPU-based on-demand instance limit per region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is an IAM group?

A

An IAM group is a collection of IAM users. They let you specify permissions for multiple users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Where are point-in-time snapshots of EBS volumes stored?

A

S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Which would be faster, a point-in-time EBS volume snapshot, or copying their data to s3 manually?

A

The snapshot.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Can SNS send emails?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Can you send cloudwatch alerts through SES?

A

No, SES is for sending communications via email, not for cloudwatch notification. Use SNS instead.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

The allowed block size in VPC is between a /?? netmask and /?? netmask

A

/16 (65536 IP addresses) and /28 (16 IP addresses)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

When you create a subnet, is it automatically associated with the main route table for the VPC?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

To enable the connection to a service running on an instance, the associated NACL must allow both inbound traffic on the service port as well as outbound traffic from ____

A

Ephemeral ports. When a client connects to a server, a random port from the ephemeral port range becomes the client’s source port.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is DAX?

A

DynamoDB accelerator is a fully managed, highly available, in-memory cache for DynamoDB. It provides an in-memory cache that delivers up to 10x performance improvement from milliseconds to microseconds or even at millions of requests per second.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is AWS Backup?

A

AWS Backup is a centralized backup service that makes it easy and cost-effective for you to backup your application data across AWS services in the AWS Cloud, helping you meet your business and regulatory backup compliance requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is the maximum retention period for an RDS automated backup?

A

35 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Is it possible to create an active-active failover with one primary and one secondary resource in route53?

A

No, because active-active means sending traffic to both endpoints.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Will stopping an EC2 instance detach its ENI (elastic network interface)?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Will stopping an EC2 instance disassociate an Elastic IP address from it?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Why would you use AWS Storage gateway over Amazon FSx for Windows File Server, for a hybrid cloud’s SMB share with low-latency access to data in AWS for on-premises applications?

A

AWS Storage Gateway supports local caching without any development overhead.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Can you make a DynamoDB table globally accessible in all regions?

A

Yes, via global tables.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Is autoscaling enabled by default for dynamodb tables created using the aws CLI?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Do RDS read replicas provide synchronous or asynchronous replication?

A

Asynchronous

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

How big of a range does 10.0.0.0/32 refer to?

A

A single IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What is a VPC endpoint?

A

An endpoint that lets you connect between a VPC and an AWS service (like s3).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Which type of s3 VPC endpoint is billed, Gateway or Interface?

A

Interface endpoint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Which type of s3 VPC endpoint allows access from a VPC in another region, using VPC peering or AWS Transit Gateway? Interface, or Gateway

A

Interface endpoint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Which type of s3 VPC endpoint allows access from on premises? Interface, or Gateway?

A

Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Which type of s3 VPC endpoint uses Amazon S3 public IP addresses? Gateway, or Interface

A

Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Which type of S3 VPC endpoint uses private IP addresses from your VPC to access Amazon S3? Gateway or Interface?

A

Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Will you be billed for a spot instance when it’s preparing to stop with a ‘stopping’ state?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Will you be billed when your on-demand instance is preparing to hibernate with a stopping state?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Is it a valid DDOS prevention measure, to add multiple Elastic Fabric Adapters (EFA,) to EC2 instances to increase network bandwidth.

A

You can only attach one EFA per EC2 instance, and they’re for performance improvement, not DDoS prevention.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

How can you get data out of S3 Glacier quickly?

A

Purchase provisioned retrieval capacity, and use an Expedited retrieval.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

In a CFT, use the ____ attribute when you want to wait on resource configuration actions before stack creation proceeds.

A

CreationPolicy

65
Q

If an NACL has an allow rule that matches a piece of traffic, followed by a deny rule that also matches it, will the traffic be allowed?

A

Yes, once a rule is matched (from low to high number) the rest are not evaluated.

66
Q

What endpoint should be used to load balance read requests between Aurora read replicas?

A

The built-in Reader endpoint.

67
Q

Scenario: Set up asynchronous data replication to another RDS DB instance hosted in another AWS Region<br></br><br></br>Solution: ______

A

Create a Read Replica

68
Q

Should you use an Aurora Provisioned DB cluster for intermittent, sporadic, and unpredictable transactional workloads?

A

No, it is more suited to predictable workloads, because you can adjust capacity manually. Use serverless instead.

69
Q

Why would you prefer target tracking scaling to simple scaling?

A

You can have shorter cooldown periods, and you don’t have to create cloudwatch alarms.

70
Q

What is target tracking scaling?

A

Scaling to keep a given metric within a specified range.

71
Q

Can you directly set CloudWatch Alarms to update an ECS task count?

A

No, you should use CloudWatch Events instead.

72
Q

Can an SQS queue subscribe to an SNS topic?

A

Yes

73
Q

Are SQS messages automatically deleted after retrieval?

A

No

74
Q

How can Cloudfront help fix users getting lots of 504 errors?

A

Origin failover. It can automatically fail over from a primary to a secondary origin group, if a 504 (gateway timeout) error occurs.

75
Q

Should you use AWS Storage Gateway to migrate a file share to AWS, if you plan on migrating an entire application from on-premise to AWS?

A

No, it i used to integrate on-prem and AWS systems. If you’re migrating the entire applicaiton to AWS, you can use a purely-AWS storage solution.

76
Q

What is AWS Resource Access Manager?

A

AWS Resource Access Manager (RAM) helps you securely share your resources across AWS accounts, within your organization or organizational units (OUs) in AWS Organizations, and with IAM roles and IAM users for supported resource types

77
Q

Can RDS events capture INSERT/DELETE/UPDATE calls?

A

No, you should use native functions or stored procedures.

78
Q

Which has better schema flexibility and scalability? Aurora or DynamoDB?

A

DynamoDB. Being nonrelational helps in these aspects.

79
Q

How would you get metrics from RDS that aren’t normally available in CloudWatch (e.g. memory usage)?

A

Enable Enhanced Monitoring

80
Q

With Amazon Aurora, how would you point production traffic to high-capacity instances and reporting traffic to low-capacity instances in a cluster?

A

Custom endpoints.

81
Q

How do you prevent an RDS DB from losing access due to an AZ’s outage?

A

Mutli-AZ failover

82
Q

Which is more appropriate for set permissions for Active Directory users from AWS Directory Service AD Connector? IAM Roles or IAM Groups?

A

IAM Roles

83
Q

If you have an Auto Scaling Group of EC2 instances in two availability zones, what minimum number of instances do you need to insure there are never fewer than two instances running?

A

Four. This will have 2 instances running in each AZ, so if one AZ has an outage you will still have 2 running in the other.

84
Q

How can you ensure that your RDS database can only be accessed using the profile credentials specific to your EC2 instances via an authentication token?

A

Enable IAM DB Authentication

85
Q

Can you set up an IAM Policy and MFA which require other AWS users to enter their IAM credentials and token before accessing an ElastiCache cluster?

A

No. You have to use the Redis AUTH option instead.

86
Q

How would you add environment variables to a Lambda function that could only be read by users with access to a KMS key (as opposed to users with access to the lambda)?

A

Use the KMS key to enable encryption helpers to store and encrypt the sensitive information.

87
Q

Are third party tool necessary to use Corporate AD/LDAP to let users access their (and only their) folder in an S3 bucket?

A

No. Just set up a federation proxy or identity provider, use Security Token Service to generate temp tokens, and configure an IAM role and IAM Policy to access the bucket.

88
Q

Should you store encryption keys in S3?

A

No, CloudHSM is a more appropriate place to store them

89
Q

Is EBS On-Premises Data Encryption a thing?

A

No. EBS is purely in the cloud, not on your premises, so there cannot be on-premises encryption.

90
Q

What are the features in AWS that can ensure data security for your confidential documents in s3?

A

S3 Client-Side and Server-Side encryption.

91
Q

Are DynamoDB streams enabled by default?

A

No, you have to enable each one you want to create

92
Q

What is Amazon MQ?

A

Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that makes it easy to set up and operate message brokers on AWS.

93
Q

How can API Gateway protect backend systems and applications from traffic spikes?

A

Throttling limits

94
Q

What is AWS Control Tower?

A

AWS Control Tower provides the easiest way to set up and govern a secure, multi-account AWS environment, called a landing zone. It creates your landing zone using AWS Organizations, bringing ongoing account management and governance as well as implementation best practices

95
Q

Is it possible to upgrade the storage capacity of a DynamoDB Table?

A

No, it is fully managed and automatically scales its storage

96
Q

How are geoproximity and geolocation routing different?

A

Geoproximity lets you configure the size of the geographic region from which traffic is routed, geolocation just lets you choose the instances based on location.

97
Q

Are IPv4 CIDRs required in a VPC, or can you use purely IPv6?

A

Yes, they are required.

98
Q

Which EBS volume type is most cost-effective for infrequent, large, sequential I/O operations?

A

Cold HDD (sc1)

99
Q

Which is better for processing a 5 minute workload? On-demand EC2 instances, or Lambda?

A

Lambda

100
Q

Can EBS volumes be attached to any EC2 instance in any Availability Zone?

A

No, they can only be attached to instances in the same AZ

101
Q

Can you change the configuration of an EBS volume while it’s being used?

A

Yes

102
Q

How would you create a static IP for an ALB and its targets?

A

Create elastic IP, point it at an NLB, put the ALB in the NLB’s target group.<br></br><br></br>EIP -> NLB -> ALB -> Targets

103
Q

Can an NACL allow/disallow communication between two subnets?

A

Yes

104
Q

Can you set filter policies in an SNS topic to choose which SQS queue to publish a message to?

A

Yes

105
Q

Can you block SQL Injection and XSS attacks via AWS Web Application Firewall?

A

Yes

106
Q

The maximum ratio of provisioned IOPS to requested volume size (in GiB) is __:1

A

50 : 1

107
Q

How do you protect a Redshift cluster from a regional outage?

A

Enable Cross-Region Snapshots Copy in the Redshift Cluster

108
Q

What are AWS Step Functions?

A

AWS Step Functions is a low-code, visual workflow service that developers use to build distributed applications, automate IT and business processes, and build data and machine learning pipelines using AWS services. Workflows manage failures, retries, parallelization, service integrations, and observability so developers can focus on higher-value business logic.

109
Q

Can AWS SWF prevent duplicate tasks?

A

Yes

110
Q

Can you specify a security group as the source for the rule in another security group?

A

Yes, although that doesn’t add a corresponding rule to the other security group.

111
Q

Is “RDS Child Processes” included in the enhanced monitoring metrics that cloudwatch gathers from RDS DB instances?

A

Yes

112
Q

Is “OS Processes” included in the enhanced monitoring metrics that cloudwatch gathers from RDS DB instances?

A

Yes

113
Q

Is “Database Connections” included in the enhanced monitoring metrics that cloudwatch gathers from RDS DB instances?

A

No

114
Q

Is “CPU Utilization” included in the enhanced monitoring metrics that cloudwatch gathers from RDS DB instances?

A

No

115
Q

When the instance is terminated, what happens to the data on the root volume?

A

It is automatically deleted

116
Q

Suppose I want to keep an automatically created backup of RDS for more than 35 days. How should I do that?

A

Use AWS Backup to create a backup plan

117
Q

What can you use to encrypt all the data on an EBS Volume?

A

Encrypt it using AWS KMS

118
Q

Is VPC Peering supported on a DirectConnect connection?

A

No

119
Q

Which DB solution is more fully managed? DynamoDB or RDS?

A

DynamoDB. RDS still has backups, and choosing when automated OS patching occurs

120
Q

What happens to data in an Instance Store when you stop an instance?

A

It does not persist.

121
Q

Can you encrypt an Instance Store?

A

No

122
Q

Can simple scaling scaled based on a set of adjustments?

A

No

123
Q

If AWS Storage Gateway is used to integrate AWS cloud storage with on-premise systems, what is used to migrate from on-premise systems?

A

AWS DataSync

124
Q

Are IAM roles specific to a region?

A

No, IAM is a global service

125
Q

How long must objects be stored in S3 before they can be moved to Infrequent Access tiers?

A

30 days

126
Q

Does Redshift autoscale?

A

No

127
Q

Is Amazon Aurora appropriate for OLTP, or OLAP?

A

OLTP Online Transactional Processing

128
Q

Is Redshift appropriate for OLTP or OLAP?

A

OLAP, Online analytical processing

129
Q

Are CloudTrail event log files encrypted by S3 server side encryption by default?

A

Yes

130
Q

Does Aurora have warm standbys, ready for instant failover, running by default?

A

No, you have to use Aurora Replica

131
Q

How does Aurora replica quickly fail over to a new AZ?

A

Flipping the CNAME record for the instance to point at the healthy replica

132
Q

Is data moving from an encrypted EBS volume to an instance encrypted?

A

Yes

133
Q

Are Elastic Fabric Adapters supported on windows instances?

A

No, the OS-bypass capabilities are not supported

134
Q

Elastic Fabric Adapters are ___ with added capabilities

A

Elastic Network Adapters

135
Q

Can IAM allow/deny access to resources with specific tags?

A

Yes

136
Q

___ is an interactive query service that makes it easy to analyze data directly in Amazon Simple Storage Service (Amazon S3) using standard SQL.

A

Amazon Athena

137
Q

Is IAM DB authentication in RDS supported for Microsoft SQL Server instances?

A

No

138
Q

A mobile application stores pictures in Amazon Simple Storage Service (S3) and allows application sign-in using an OpenID Connect-compatible identity provider.<br></br><br></br>Which AWS Security Token Service approach to temporary access should you use for this scenario?

A

Web Identity Federation

139
Q

What benefit do launch templates have over launch configurations?

A

You can have multiple versions of a launch template

140
Q

What service can you use to import/export data from DynamoDB?

A

Elastic Map Reduce

141
Q

Do Launch Configurations support dedicated hosts?

A

No, you must use Launch Templates

142
Q

When can data persist in an instance store?

A

In a reboot

143
Q

By default, is Autoscaling enabled in DynamoDB tables created in the console?

A

Yes

144
Q

How many security groups can you assign to an instance?

A

Five

145
Q

Can you directly attach a policy to a group, or do you need to use a role?

A

You can directly attach it

146
Q

What does EBS Encryption by Default do in a region?

A

Configures your AWS account to enforce the encryption of the new EBS volumes and snapshot copies that you create

147
Q

How many instances should you launch when you create a cluster placement group?

A

All that you plan on using. Adding later runs into the chance that you get an insufficient capacity error

148
Q

Does RDS for MySQL have cross region read replicas with sub-second replication?

A

No, they are async and have a replication latency measured in seconds

149
Q

What is an Egress-only Internet Gateway?

A

A gateway that allows an EC2 instance to communicate to the internet but prevents inbound traffic.

150
Q

What kind of load balancing allows the load balancer to distribute incoming requests evenly to all EC2 instances across multiple availability zones?

A

Cross-zone load balancing

151
Q

Should you use an NLB to route traffic to ALBs across multiple regions?

A

No. Use AWS Global Accelerator instead

152
Q

Does Inter-Region VPC Peering exist?

A

Yes

153
Q

Can inter-AZ data transfers accrue cost?

A

Yes, deploy to one AZ to reduce transfer costs

154
Q

Is ALB Target Group CPU utilization a usable metric for auto scaling?

A

No

155
Q

Can you use Lambda@Edge functions as part of an origin group in cloudfront?

A

No

156
Q

Can you configure AWS Lambda with Elastic BeanStalk?

A

No

157
Q

A serverless application consists of multiple Lambda Functions and a DynamoDB table. The application must be deployed by calling the CloudFormation APIs using AWS CLI. The CloudFormation template and the files containing the code for all the Lambda functions are located on a local computer.

What should the Developer do to deploy the application?

A

Use the aws cloudformation package command and deploy using aws cloudformation deploy.

158
Q

A transcoding media service is being developed on Amazon Cloud. Photos uploaded to Amazon S3 will trigger a Lambda function. The Lambda function will cause the Step Functions to coordinate a series of processes that will do the image analysis tasks. The input of each function should be preserved on the result to conform to the application’s logic flow.

What should the developer do?

A

Declare a ResultPath field filter on the Amazon States Language specification.

159
Q

Can you set reserved concurrency in AWS Lambda?

A

Yes, you can set the reserved concurrency to limit the amount of scaling a Lambda function can do, and ensure your other functions don’t prevent a specific one from scaling.

AWS Certs (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions