Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS2020 > AWS-SA-2020 > Flashcards

AWS-SA-2020 Flashcards

1
Q

What AWS functionality is used to move S3 data from one storage class to another

A

Life cycle policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

s3 durability

A

11 x 9

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

For all s3 storage classed how my zones are data stored in?

A

3 except for single zone s3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what should you use for hot or fast backup

A

IA standard (infrequent access, fast)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

srr vs crr

A

same region replication vs cross region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

when to use crr

A

compliance, latency (users in different locations), ops efficiency (compute clusters in different locations)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

before setting up cross region replication you must

A

enable versioning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

If object locking is enabled can you use regional replication?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What types of access control exists for s3?

A

ACLs, bucked policy, iam

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

s3 standard replication to # of az?

A

3 availability zone replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

s3 intelligent does what

A

moves data to the most cost-effective access tier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

s3 one zone ia

also s3 IA

A

one zone, used to be RRS, costs 20% less than standard IA vs
s3 IA is multi zone (3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Glacier AZ, cost, retrieval

A

Multiple AZ, retrieve in minutes or hours, low cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Glacier deep dive details

A

lowest cost, accessed 1,2x per year compliance types, 12 hours, 3 AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

for cross region replication to work + what happens to new/old/deleted files

A

1 versioning must be enabled on both
2 existing files not auto replicated, new will
3 deletes not replicated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

object vs block and which is s3

A

object = files, block = os, s3 is object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

bucket names are

A

are universal, unique

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

4 types of at rest encryption

A

s3 managed keys (sse-s3 / aes-256
aws key mgt - sse-kms
server side w/client keys sse-c
or client side and upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

transfer accelerator uses

A

edge locations to speed up transfer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is cloudfront

A

content delivery network - simple api that allows files to be delivered to end-users using a global network of edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the main logical components of AWS IAM?

A

Users, Groups, Roles, Permission Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Can a user assume a role in another account?

A

Yes, a user can assume a role in another account by calling assume-role using the CLI or using the Web console switch role function. With the CLI asume-role requires an –role-arn and a –role-service-name.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

From an IAM perspective, what should I do with the root user first thing after setting up a new account?

A
  • Remove the access key.
  • Set an extremely secure password on the root user.
  • Do not use the root password only;y in emergencies
  • Enable MFA and lock away the security key.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

List the EC2 instance categories?

A

Spot Instance, On-Demand Instances, Reserved Instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

3 types of LB

A

app - intelligent
network - performance
basic - easy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

x-forwarded-for

A

if you need the ip of end user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

instances reported by ELB are reported as

A

inService, out of service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

LB have their own DNS name but never

A

never an IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

sticky sessions can be set with these types of lb

A

classic, application (target group level)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

cross-zone lb

A

balancing across AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

path pattern

A

route based on path (images or content, different paths)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

multi-az vs read replicas

A

az is for DR, Read replicas for performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Cloudformation is

A

script cloud environment - Create Your AWS Stack From a Recipe

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Quickstart cloudformation

A

templates already built to create environments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Elastic Beanstalk is for

A

developers can upload code and elatic beanstalk handles deployment, scaling,etc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

SQS is

A

decouple components, stores messages in que
acts as buffer
pull not pushed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

types of sqs queues

A

standard - unlimited transactions per second

fifo - exactly once, first in/out 300ps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

SQS retention period

A

default 4 days

can be 1min to 14 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

sqs visibility timeout

A

re appears if ec2 doesn’t delete after pickup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

SWF is

A

SWF as a fully-managed state tracker and task coordinator that runs background jobs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

SNS

A

web notifications

push, delivers messages to subscribers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

elastic transcoder is

A

converts media files to other formats

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

api gateway can access

A

can access ec2 or serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

api gw features

A

cache, auto scale, can throttle for attacks, cloudwatch logging

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is CORS

A

allows webpages to talk to resources in another domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

what if you get “Origin policy cannot be read at remote source”

A

enable CORS API GW

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Kinesis is used for

A

streaming data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

3 types of Kinesis & define

A

Streams - endpoints stream and its stored in shards
Firehose - no storage, need to process asap
Analytics - analyzes streams/firehose and stores data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Cognito is

A

AWS web ID federation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

cognito user vs identity pools

A

cognito aws user - registration, accounts

identity - grants IAM roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

lambda is

A

compute service, upload code and go
very cheap, scales out auto (not up)
serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

aws x-ray

A

debug lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

lambda can do global activities like

A

backup s3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What can’t trigger lambda

A

rds, ec2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

IAM is universal or regional

A

Universal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

root account

A

account created when you setup account that has admin access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

new users have _ permission

A

no permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

new users are assigned a

A

access key and secret access key to access system - cannot use this to access console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

2 types of aws access for user

A

console and programmatic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

s3 file size, and maximum

A

0 to 5TB, unlimited

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

s3 namespace is _

A

universal, global, creates http://xxxname

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

successful s3 upload

A

200 ok

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

how to protect objects in s3

A

mfa

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

s3 file fundamentals & components

A 
key - name
value - data
version id
metadata
sub resources like acls and torrents
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

s3 PUTS new ojbects =

A

read after write (instant)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

s3 overwrite PUTS or deletes

A

eventual consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

control access to buckets using

A

bucket ACL or policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Versioning can be use for backups and w/lifecycle rules

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Can versioning use MFA for delete

A

yes, adds extra security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Lifecycle management summary

A

moves object between tiers of storage
can be used with versioning
applies to current/past versions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

cross-region replication versioning

A

must be enabled on source and destination bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

cross-region replication regions must be

A

unique

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

what is an edge location, is it read or write

A

where content is cached

can read and write

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

CloudFront originates from what AWS services

A

s3 bucket, ec2 instance, elb, rt53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Cloudfront distribution points are what

A

collection of edge locations given to CDN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

For streaming what does each stand for : WEB vs RTMP

A

websites vs media streaming

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

what is snowball & where does it import/export

A

Petabyte scale transport system, big disk

import/export to s3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

termination protection is turned _ by default

A

off

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

EBS backed instance default action is for root EBS volume to be _ on termination

A

deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

Can root volume of default ami be encrypted

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

Security group defaults

A

all inbound traffic blocked, outbound allowed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

security groups applied to EC2 max

A

no max, both directions (EC2 in sec groups)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

Can you block a IP using security groups

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

can you set deny rules in a security group

A

no, they deny all by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

can volumes exist on ebs

A

yes, its a virtual hard disk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

where do snapshots live

A

s3, like a photo of the disk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

what is a snapshot

A

point in time copy of volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

are snapshots incremental

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

Should you stop an instance before taking snapshot of the root volume

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

can you take a snaphot while instance is running

A

yes, but should only of not root volumes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

what can you change for a used ebs volume

A

can change on the fly

can change type

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

How to move ec2 volume from one AZ or region to another

A

take snapshot
create ami
launch ec2 instance in new az
for regions you have to copy the ami to new region first

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

instance store volumes are sometimes called

A

ephemeral

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

instance vs ebs backed - will you lose data

A

if instance host fails data is gone, ebs will stay

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

what happens to root volumes on instance termination

A

they are deleted unless you told aws to keep ebs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

are snapshots of encrypted volumes auto encrypted

A

yes

97
Q

volumes of restored encrypted snapsots are

A

encrypted automatically

98
Q

can you share snaphots

A

only if they are unencrypted

99
Q

can you encrypt root devices volumes

A

yes

100
Q

If you don’t select encrypt when building, how to encrypt root volume

A

snapshot
copy snapshot, select encryption
create ami
use ami to create instance

101
Q

what is cloudwatch

A

monitors performance
can monitor applications, events, billing, can create notifications
create dashboards, alarms, logs

102
Q

cloudtrail is all about

A

auditing

103
Q

CloudWatch standard vs detailed monitoring time

A

1 vs 5 min

104
Q

roles vs storing keys for IAM

A

roles are much more secure and easier to manage

105
Q

roles can be assigned to

A

ec2 instances

106
Q

are roles universal

A

yes

107
Q

how to get info about an instance

A

curl command, ec2 instance metadata

108
Q

EFS supports & pay

A

NFS v 4

pay for what you use, no pre provisioning, up to Petabytes

109
Q

EFS stored where and consistency is

A

stored - multiple AZs in region

read after write consistency

110
Q

3 types of placement groups

A

clustered - low network latency (ec2 same AZ)
spread - need individual ec2 on separate hardware
partitioned - multiple ec2 instances separate hw

111
Q

placement group names and regions

A

must be same region

must have unique name in account

112
Q

how to move instance into a placement group

A

instance must be stopped, using cli or sdk (no console)

113
Q

Elasticache does what and the names of memory types are

A

improves performances of web apps to speed up databases

memcached, redis

114
Q

RDS OLTP flavors

A

sql, mysql, postgresql, oracle, aurora, mariadb

115
Q

aws no sql

A

dynamo db

116
Q

redshift olap

A

data warehousing or bus intelligence

117
Q

RDS runs on

A

virtual machines that you have no access to

118
Q

can you patch your rds instance

A

no, amazon does it

119
Q

is RDS serverless

A

no, but there is serverless aurora

120
Q

read replicas allow

A

read only copy of database, to improve performance

121
Q

2 ways to improve DB performance

A

elasticache and read replicas

122
Q

read replicas available for following databases

A

mysql, postgresql, mariadb, oracle, aurora

123
Q

must have _ turned on to deploy read replicas

A

automatic backups

124
Q

you can have up to _ copies of any db

A

5

125
Q

Can you have read replicas of read replicas

A

yes - watch for latency

126
Q

each read replica will have its own

A

dns endpoint

127
Q

can you have read replicas in multi az or region

A

yes

128
Q

can you promote read replicas

A

yes, it breaks replication

129
Q

2 types of RDS backups

A

automated - scheduled

snapshots - manually

130
Q

how to force failover from one az to another for RDS

A

reboot RDS instance

131
Q

Encryption at rest supported for which rds

A

all server RDS options

132
Q

dynamo db used what kind of disk

A

ssd storage

133
Q

dynamo db spread across

A

3 AZ

134
Q

dynamo db read options

A

eventually consistent - over 1 second

strongly consistent - under 1 second

135
Q

redshift is available in _ azs

A

1

136
Q

redshift backups

A

1-35 days, 1 is default, maintains 3 copies of data in s3

137
Q

Aurora is

A

aws own sql compatible with mysql, postgrssql

2 copies stores in min 3 az

138
Q

can you share aurora snapshots with other accounts

A

yes

139
Q

2 types of aurora replicas & what can failover

A

aurora and mysql

automated failover only w/aurora

140
Q

aurora backups

A

on by default

141
Q

redis is highly available?

A

yes - multi az

142
Q

ELBs have IP or DNS name

A

DNS name only assigned

143
Q

alias vs cname

A

alias - naked (always choose alias in exam)

cname - other than naked

144
Q

can you buy domain names through aws

A

yes- can take 3 days to register

145
Q

rt53 simple routing

A

1 dns record, multiple IP, random order to user

146
Q

rt53 weighted routing

A

send to region based on weights we supply

147
Q

rt53 health checks

A

removed a record entry until its online and you can send sns notification if one fails

148
Q

rt53 latency based routing

A

rt53 chooses lowest latency path

149
Q

rt53 failover routing

A

active/passive site - rt53 healthcheck will failover

150
Q

rt53 geolocation routing

A

send based on user location

151
Q

rt53 Geoproximity routing

A

send users based on location of users and resources, must use rt53 traffic flow

152
Q

rt53 multi value answers

A

multiple record sets, same as simple w/health checks

153
Q

VPC consists of

A 
Internet gateways
route tables
NACLs
Subnets
Security groups
154
Q

1 subnet =

A

1 availability zone

155
Q

which can have deny rules - nacls or security groups

A

nacls

156
Q

can VPCs have transitive pairing

A

no

157
Q

When you creaet a VPC what is created by default

A

route table, nacl, security group ( no subnets)

158
Q

how many IPs does AWS reserve in your subnet

A

5

159
Q

how many internet gateways per vpc

A

1

160
Q

can security groups span vpcs

A

no

161
Q

are nat gateways redundant in the AZ

A

yes

162
Q

how many nat gateways per AZ

A

1

163
Q

NAT GW throughput scales automatically

A

true

164
Q

are nat gateways associated with security groups

A

no

165
Q

do nat gateways have a public IP

A

yes

166
Q

what do you need to do if you add a nat gateway so your ec2’s can talk out

A

add a route to the nat gw in the route table

167
Q

if you have resources in multiple AZ that share a nat GW what happens if that AZ goes down

A

resources in the other AZ will not have a GW, configure a nat gw in all AZ where you have resources

168
Q

default network ACL default allow

A

all outbound/inbound

169
Q

customer network ACLs allow

A

nothing, denies all

170
Q

each subnet in your vpc must be associated with a _

A

ACL, else its assigned to default

171
Q

can you block IP

A

yes with NACL

172
Q

how many NACLs can a subnet be associated with, and vice versa

A

network ACL to many subnets

subnet to just 1 ACL

173
Q

NACL rules applied how

A

in order, lowest number first (so last wins)

174
Q

How many public subnets to create a LB

A

2+

175
Q

can you enable flow logs for peered VPCs

A

only if the VPC is in your account

176
Q

can you tag a flow log

A

no

177
Q

can you change a flow log

A

no

178
Q

what is direct connect

A

connects your datacenter to aws for high throughput workloads or stable/secure connection

179
Q

If you have a VPN connection that keeps dropping out due to throughput erros what should you use

A

direct connect

180
Q

what is a VPC endpoint

A

connect VPC to aws services

181
Q

2 types of VPC endpoints

A

interface

gateway - s3, dynamo db

182
Q

If you upload an object using AWS Identity and Access Management (IAM) user or role credentials who owns the object?

A

the AWS account that the user or role belongs to owns the object.

183
Q

File gateway types

A

Volume gateway
Tape Library (backups only)
File gateway

184
Q

volume gateway has what 2 modes

A

cached and stored

stored uses EBS snapshots

185
Q

which storage gateway for object based files

A

file gateway

186
Q

are security groups stateful or stateless & meaning

A

security groups are stateful - incoming rule auto allows outgoing

187
Q

are NACLs stateful or stateless + meaning

A

stateless - if you add a rule it doesn’t auto allow the other directions

188
Q

Maximum dynamodb string size

A

400kb

189
Q

List the rt53 routing policies (names only)

A 
simple
failover
geolocation
geoproximity
latency
multivalue
weighted
190
Q

max instances for spread placement group per AZ

A

7

191
Q

can you use 3rd party encryption tools

A

no

192
Q

Are security groups global

A

no, regional only

193
Q

If you copy a ami to a new region do the tags and iam permissions follow it

A

no

194
Q

What is the maximum VisibilityTimeout of an SQS message in a FIFO queue?

A

12 hours

195
Q

AWS premium support levels

A

basic, developer, business, enterprise

196
Q

What can aws see for cloudwatch in the ec2 instance

A 
For the most part think it can't see inside but...
CPU = how much
Network in
disk read
Can't see Memory
197
Q

what is an elastic IP

A

static, public ip associated with your AWS account which allows you to rapidly remap to a new instance in case of failure

198
Q

You create flow logs for these network items

A

You can create a flow log for a VPC, a subnet, or a network interface

199
Q

You can create flow logs for network interfaces on these network services

A

ELB, RDS, Elasiticach, etc

200
Q

VPC Flow Logs is a feature that enables you to…

A

capture information about the IP traffic going to and from network interfaces in your VPC.

201
Q

What are dedicated instances

A

HW dedicated to single customer

202
Q

management service that provides managed instances of Chef and Puppet

A

AWS OpsWorks

203
Q

Access Keys are used for

A

API Calls

204
Q

What do you use to logon to an ec2 instance

A

key pairs

205
Q

EBS volume types

A

General purpose - SSD
Provisioned IOPS - SSD
Throughput optomized - hDD
Cold - HDD

206
Q

how traffic is shifted from the original AWS Lambda function version to the new AWS Lambda function

A

Canary, linear, all at once

207
Q

What is AWS IoT Core

A

service for Internet of Things

208
Q

Is all data between gateway appliance and s3 encrypted

A

yes, SSL

209
Q

Perfect Forward Secrecy is used to offer SSL/TLS cipher suites for which two AWS services?

A

CloudFront and ELB

210
Q

what is Server Name Indication (SNI)

A

host multiple TLS secured applications, each with its own TLS certificate, behind a single load balancer

211
Q

What is an ENI

A

Elastic Network Interface - VPC network card, can attached to ec2

212
Q

snowball vs snowball edge capacity

A

80 vs 100TB

213
Q

What is AWS Security Token Service (AWS STS)

A

the service that you can use to create and provide trusted users with temporary security credentials

214
Q

Can you use Amazon Data Lifecycle Manager (Amazon DLM) to automate the creation, retention, and deletion of snapshots taken to back up your Amazon EBS volumes

A

yes

215
Q

Auto scaling cooldown does what

A

ensures new ec2 is not launched too soon

default 300 seconds

216
Q

How are EBS volumes stored and replicated

A

Single AZ only

217
Q

Is Redshift fast or slow

A

fast, scalable, cost effective

218
Q

what is Pilot light DR

A

minimal standby architecture

219
Q

Authenticate to your RDS instance using what IAM ___

A

IAM DB authentication

220
Q

set custom budgets that alert you when your costs or usage exceed

A

AWS budgets

221
Q

Lambda encrypts using

A

AWS Key Management Service

222
Q

S3 Select is an Amazon S3 feature that makes it easy to

A

retrieve specific data from the contents of an object using simple SQL expressions

223
Q

Amazon DynamoDB Accelerator (DAX) cab

A

reduce Amazon DynamoDB response times`

224
Q

What allows you to establish a trusted relationship between your Active Directory and AWS

A

AWS connector

225
Q

To monitor advanced metrics on DB use

A

Enhanced monitoring

226
Q

What provides you a managed Hadoop framework to process data across dynamically scalable Amazon EC2 instances

A

EMR

227
Q

For Redshift, OLap, to define the number of query queues that are available and how queries are routed

A

Use WLM work load management

228
Q

A DynamoDB stream is an _ _ _

A

Ordered flow of information about changes to items in an Amazon DynamoDB table

229
Q

CloudFront signed URLs and signed cookies provide the same basic functionality which is what ?

A

They allow you to control who can access your content

230
Q

Which ec2 instance will be removed first from a scale in on auto scale groups

A

wherever there are the most in AZ ECs, then oldest

231
Q

Use Amazon MQ instead of SQS when you are

A

moving messaging with existing apps to cloud quickly

232
Q

If you will get bursts of traffic on your API gateway use _

A

Throttling

233
Q

What protects against DDOS attached

A

AWS Shield

234
Q

Instances that you launch into a default subnet receive what IP(s)

A

public and private

235
Q

What to use when data must be stored in a columnar fashion

A

Redshift

236
Q

Max IOPS SSD

A

32000

237
Q

Retrieval types to use/purchase to speed things up

A

provisioned and expedited

238
Q

Do SQS standard queues preserve the order of message?

A

yes

239
Q

What is a scheduled reserved instance

A

It allows you to reserve instances for a specific time period at a cheaper rate than on demand when using a 1 year term

AWS2020 (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions