AWS Route53, ELB, Cloudwatch, Decouple Workflows Flashcards

1
Q

Whats an example of a top level domain name and a second level domain name ?

A

Top Level (.com)
Second Level (.co.nz)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are A and AAAA records?

A

These are DNS records that live on the Nameserver and map domain names to IP address.
A is ipv4
AAAA is ipv6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a DNS SOA?

A

A start of authority record is a type of resource record that contains administrative information about a zone. Every registered domain name has an associated SOA record.
1. name of the zone
2. Zone Class
3. Primary Master Name server
4. Email address of the administrator.
5. Refresh and TTL times

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a DNS zone?

A

A DNS zone is a mechanism for partitioning the domain namespace. DNS zones are delegated to a legal entity (person/organization) that acts as an administrator and can specify things like the authoritative name servers for the domain names in that zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a DNS CNAME record?

A

A CNAME is a canonical name it can be used to resolve one domain name to another domain name. specific.thetest.com => thetest.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Whats the difference between Alias records and CNAME?

A

Alias records are strictly a AWS record. The work like a CNAME records and allow you to map one domain name to another but (usually aws resources). CNAMES cant have ‘naked ‘ domain name ‘thetest.com’ they must map to ‘something.thetest.com’ Alias records can have naked domain names.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are DNS NS records?

A

Name server records are used by top-level domain servers to direct traffic to the correct content DNS servers (name servers) that contain the information and records for a given domain name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What service can you use to register a domain name?

A

Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What service can you use to create health checks on individual endpoints?

A

Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

If you want to setup a routing policy that gives you back a random endpoint which route 53 policy would you use ?

A

Simple policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

If you want to route to a specific endpoint based on the quickest response times which routing policy would you use?

A

Latency based routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

If you want to route to a endpoint based on location which policy would you use?

A

Geolocation Routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

If you want to automatically switch endpoint when one fails a health check which policy would you use?

A

Failover policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

If you would like to bias the routing of traffic between multiple endpoint which policy would you use?

A

Weighted Routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is route 53 traffic flow?

A

Traffic Flow is a way to make complex customized traffic routing policies in AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a Multivalue Routing policy in Route 53?

A

It is a policy that allows you to randomly return an endpoint from a set of endpoints but only if it passes a health check

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is an ELB?

A

A Elastic Load Balance is a service that intelligently distributes application traffic across targets possibly across multiple AZs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the three types of ELBs?

A

Application Loadbalancer (standard)
Network Loadbalancer(Performance)
Classic Loadbalancer(legacy / Dev)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are health checks?

A

They are a mechanism that allows you to determine if a resource is in service or OutOfService and you can use them to determine if you can route traffic to that resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What osi layer does a application load balancer function at?

A

Application layer. Layer 7

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is a Listener on an Application ELB?

A

A listener checks for connection requests from clients, using the protocol and port you configure. ex HTTP:80

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are Rules on an Application ELB?

A

Rules determine how the load balancer routes requests, Each rule consists of a priority, one or more actions and one or more conditions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are Target groups on an Application ELB?

A

The target group routes requests to one or more registered targets, such as EC2 instances, using the protocol and port number you specify

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is path-based routing and how do you enable it?

A

Path-based routing is when requests are routed based on the url paths and you enable it by enabling path patterns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are the limitations of the Application ELB?

A

Application load balancers can only be used with HTTP and HTTPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are you required to do before you can use HTTPS with ELB?

A

You must deploy at least one SSL/TLS server certificate on you load balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What OSI layer does network ELB work on?

A

Layer 4 (Transport layer)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is the difference between a Listener on an Application ELB and a Network ELB?

A

Listeners on Network ELB’s don’t have Rules( Intelligent based routing )

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is the best use case for Network ELB?

A

Network Load Balancers are best suited for balancing TCP traffic where extreme performance is required. TCP, TLS, UDP, TCP_UDP or applications where application load balancers arent supported

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is a x-forwarded-for header?

A

It provides the external IP address of your user even through a ELB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is a GateWay 504?

A

It means the load balancer is running but the application hasn’t replied within the idle time period

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is ELB sticky sessions?

A

Enables users to be routed to the same EC2 instance (ie. you are storing information locally to that instance) it must be disabled if you chose to move that EC2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is ELB deregistration delay?

A

It allows load balancers to keep existing connections open if the EC2 instances are deregistered or become unhealthy. If it is disabled it will automatically close connections if the EC2 instance becomes unhealthy or deregistered

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is CloudWatch?

A

CloudWatch is a monitoring and observability platform that was designed to give us insight into our AWS architecture.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is CloudWatch’s policy for default alarms?

A

There are no default alarms

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is CloudWatch’s default monitoring intervals?

A

Standard is 5 minutes
Detailed is 1-minute

37
Q

What is CloudWatch’s policy for metrics you can monitor?

A

AWS can give you metrics below the hypervisor level. CPU usage but for custom metrics like memory monitoring you have to install and setup a cloud watch agent.
The more managed a service is the more default metrics you get

38
Q

What is CloudWatch’s policy for metrics you can monitor?

A

AWS can give you metrics below the hypervisor level. CPU usage but for custom metrics like memory monitoring you have to install and set up a cloud watch agent.
The more managed service is the more default metrics you get

39
Q

What is CloudWatch Logs?

A

It is a service on the CloudWatch platform that gives you a centralized location to monitor, store and access log files

40
Q

What is a log event?

A

Its is a single event with a timestamp

41
Q

What is a log stream?

A

Its a collection of log events from a single source

42
Q

What is a log group?

A

Its a collection of log streams

43
Q

What are the main CloudWatch logs features?

A
  1. Filter patterns to look for specific terms in your logs.
  2. CloudWatch Logs insights allow you to query all your logs using SQL-like ineractive solutions
  3. Alarms
44
Q

What is amazon managed grafana?

A

Fully managed AWS service allowing secure data “visualizations” for instantly querying, correlating, metrics, logs and traces

45
Q

What is amazon managed service for Prometheus?

A

A serverless, Prometheus-compatible service used for securely monitoring “container” metrics at scale (EKS)

46
Q

What is a Launch Template?

A

It provides a predefined configuration for setting up a EC2 instance

47
Q

What’s the difference between a Launch template and a Launch Configuration

A

Launch Configurations are a older version of launch templates

48
Q

What is a vital thing to remember about launch templates and networking configuration?

A

Launch Templates that have network configuration defined cannot be used for auto scailing

49
Q

What are the restrictions you can set using Auto Scaling?

A
  1. Minimum
  2. Maximum
  3. Desired (how instances do I want right now)
50
Q

Can you use spot and on demand instance with Auto Scailing?

A

Yes

51
Q

What is an Auto Scailing group?

A

A auto-scaling group contains a collection of EC2 instances that share a launch template, the EC2 instances are managed by the auto-scailing group and instances are created or terminated to meet a desired capacity

52
Q

How does Auto Scaling help with high availability?

A

You can achieve high availability with auto-scaling by spreading resources across multiple AZ and it is best practice to do so

53
Q

Where should you define networking when you are setting up auto scailing groups?

A

In the auto-scaling group not in the launch template

54
Q

How do you route traffic to your auto-scaling group?

A

It is vital to select a load balancer for the instances to live behind

55
Q

What is a warm-up period in auto-scaling ?

A

It is the period of time where the EC2 instances have been provisioned but are still setting up and aren’t online yet

56
Q

What is the cool-down period in auto-scaling?

A

Pauses auto-scaling for a set amount of time and help to avoid runaway scaling events (Scaling up and Scaling down)

57
Q

What is thrashing in auto-scaling?

A

It’s when the instance count is rapidly change to try and keep up with demand

58
Q

What are the types of scaling?

A
  1. Reactive Scaling
  2. Scheduled Scaling
  3. Predictive Scaling (AWS builds a model that predicts the usage pattern of your usage)
59
Q

What is a steady-state auto-scaling group?

A

It’s an autoscaling group with a min, max, and desired of one that will automatically migrate or provision a single EC2 instance if it is terminated or the AZ goes down

60
Q

What are 4 strategies for effective auto scaling?

A
  1. Scale Out Aggressively and Scale in conservatively
  2. Bake as much as you can in your AMI to minimize provisioning time
  3. Use RI’s and Spot instance to reduce costs
  4. Use CloudWatch to inform you about the capacity trends of your application
61
Q

What are the four ways to scale relational databases?

A
  1. Vertical Scaling
  2. Storage Scaling
  3. Read Replicas
  4. Aurora Serverless (Fully managed)
62
Q

What is the main thing to remember about scaling storage for relational database

A
  1. You can scale up but you can’t scale down.
  2. Aurora Auto Scales in 10GB increments
63
Q

What are two types of capacity settings for DynamoDB?

A
  1. Provisioned (you know the number of reads and writes you need)
  2. On-Demand (Pay a small amount of money per read and write)
64
Q

What is poll-based messaging?

A

The consumer has to go to retrieve the message

65
Q

What is SQS?

A

Simple queue service is a messaging queue that allow you to asynchronously process message and is a great tool for decoupling workloads

66
Q

What is SQS deliver delay and what is the default?

A

It is the amount of time it takes until a message shows up on the queue. Default is zero/

67
Q

What is the maximum message size?

A

256KB

68
Q

What is SQS message retention and what is the default and maximum value?

A

Its how long the queue will keep the message and it has a default of 4 days and can be set between 1 minute and 14 days

69
Q

What is SQS queue depth?

A

It is the number of messages on the queue and it can be used to trigger auto scaling

70
Q

What is the visibility timeout?

A

It is a configurable amount of time that keeps hides but preserves a message on the queue until the service that has consumed it confirms that it has been processed correctly. If the confirmation doesn’t happen within the timeout the the message reappears on the queue.

71
Q

What is the difference between long and short polling?

A

Short polling is continually connecting and disconnecting when a message isn’t available.
Long polling is connecting waiting for a message then disconnecting (prefered)

72
Q

What is a DLQ?

A

A dead-letter is a SQS queue where you can automatically send messages that have failed to be processed a set number of times

73
Q

What is the default ordering policy for SQS?

A

Standard - (best-effort ordering) There is no Guarentee that messages will come out in order they went into the queue and messages maybe duplicated

74
Q

What are the two types of SQS queue and whats the difference?

A

Standard - Best effort ordering but no throughput limitations
FIFO - guaranteed ordering but max 300msg/sec

75
Q

What is SNS ?

A

It is simple notification service a push based message service (Alarms)

76
Q

What is a SNS subscriber?

A

A endpoint the messages will be pushed to
HTTP(S), SMS, txt only email, lambda, application endpoints

77
Q

What is the maximum size for a SNS message?

A

256KB

78
Q

What are the two types of SNS queues?

A

FIFO, Standard

79
Q

Does SNS support DLQ?

A

Yes SNS supports dead letter queues

80
Q

Which subscriber endpoints support SNS retries?

A

HTTP / HTTPS

81
Q

What is API Gateway?

A

is a fully managed service that allows you to easily create, publish, monitor and secure a API

82
Q

What are the main features of API gateway?

A
  1. Security WAF - web application firewall
  2. Stop Abuse Ddos
  3. Ease to use and setup
83
Q

What is AWS Batch?

A

It a managed service that allows you to run long running batch computing workloads with AWS on EC2/ECS/Fargate (Compute environment)

84
Q

What is the recommended computing environment for AWS Batch?

A

Fargate

85
Q

What are the considerations when picking between AWS Batch or Lambda?

A
  1. Lambda has 15minute execution limit
  2. Lambda has diskspace limitiations
  3. Lambda has limited native runtime support
  4. Batch runtimes use docker so they can be anything
86
Q

What is Amazon MQ?

A

Is a managed message broker service allowing for easier migration of existing applications to the cloud (Apache, ActiveMQ, RabbitMQ) Protocols supported JMS, AMQP 0-9-1, AMQP 1.0, MQTT, OpenWire, STOMP

87
Q

What are AWS Step functions?

A

It is a serverless orchestration service that combine AWS services for business application i.e Lambda, SNS, Batch

88
Q

What are the key features of AWS Step functions?

A
  1. Orchestration
  2. Graphical Console
  3. State Machines - a particular workflow
  4. States - A single unit of work in the state machine
89
Q

What is AppFlow?

A

Is a fully managed integration service for exchanging data between Saas app vendors (salesforce, zendesk, slack) and AWS Services