AWS SA Pro

Question 1

What are the different types of VIFs in DX and how many are there of each type?

Answer 1

50 Public/Private VIFs, 1 Transit VIF.

Question 2

Are AWS KMS keys regional or global

Answer 2

regional

Question 3

Copying Redshift AWS KMS–encrypted snapshots to another AWS Region

Answer 3

snapshot copy grant

Question 4

Type of interface to be used for DX gateway

Answer 4

Private VIF

Question 5

Where to make the request if using ACM certificate with Amazon CloudFront?

Answer 5

US East

Question 6

What authorizes Amazon to advertise an address range under a specific AS number?

Answer 6

Route Origin Authorization (ROA)

Question 7

Through which do you create ROA and what does it include?

Answer 7

Regional internet registry (RIR). IP ranges, ASN and expiration date.

Question 8

What are the parts in ECS Task definition?

Answer 8

The task family, the IAM task role, the network mode, container definitions, volumes, task placement constraints, and launch types.

Question 9

What are the different modes in ECS Task network mode?

Answer 9

None, bridge, host, awsvpc.

Question 10

What can you monitor with R53 healthcheck

Answer 10

Endpoint, CloudWatch Alarm, Other healthcheck

Question 11

Can you use a self-signed certificate for HTTPS communication between CloudFront and your origin

Answer 11

No

Question 12

What can AWS Config do?

Answer 12

Record configuration changes on resource, audit changes, and check compliance with standards.