Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Solutions Architect Professional > AWS Solutions Architect Professional > Flashcards

AWS Solutions Architect Professional Flashcards

1
Q

What are the 5 pillars of the well-architected framework?

A
  1. Operational Excellence
  2. Security
  3. Reliability
  4. Performance Effeciency
  5. Cost Optimization
  6. Sustainablility (not on current exam)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a homogenous migration in DMS?

A

In homogeneous database migrations, the source and target database engines are the same or are compatible—like Oracle to Amazon RDS for Oracle, MySQL to Amazon Aurora, MySQL to Amazon RDS for MySQL, or Microsoft SQL Server to Amazon RDS for SQL Server. Since the schema structure, data types, and database code are compatible between the source and target databases, this kind of migration is a one-step process.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a heterogenous migration in DMS?

A

In heterogeneous database migrations, the source and target databases engines are different—like in the case of Oracle to Amazon Aurora, Oracle to PostgreSQL, or Microsoft SQL Server to MySQL migrations. In this case, the schema structure, data types, and database code of source and target databases can be quite different, requiring a schema and code transformation before the data migration starts. That makes heterogeneous migrations a two-step process. First, use the AWS Schema Conversion Tool to convert the source schema and code to match that of the target database.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What tool can be used to covert schema to a different db format?

A

AWS schema conversion tool

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the supported source db formats for DMS?

A 
Oracle
Microsoft SQL Server
MySQL
MariaDB
PostgreSQL
MongoDB
SAP
IBM db2
Azure SQL
Google Cloud for MySQL
s3
documentDB
Aurora MySQL and PostgreSQL
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the supported target db formats for DMS?

A 
Oracle
Microsoft SQL Server
MySQL
MariaDB
PostgreSQL
SAP
Redis v6
Redshift
s3
OpenSearch/Elasticsearch
Elasticache Redis
Kinesis Data Streams
DcoumentDB
Neptune
Kafka
Babelfish for PostgreSQL
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the limit of records per shard in kinesis?

A

1000 records per shard, or 1MB/s, or 1000 writes/s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the components of a kinesis record?

A

partition key, sequence number, and data blob

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the size limit of kinesis data blob?

A

1MB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the default and max retention times for kinesis stream?

A

default 24h

max 7 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How is Kinesis firehose different than data streams

A

firehose simply delivers data to a storage destination such as s3. It doesn’t allow processing on the stream.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Kinesis Analytics?

A

lets you analyze and transform data in real time with Apache Flink. Works with both streams and firehose.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the dynamo db max item size?

A

400kb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a partition in dynamo db?

A

physical space where data is stored

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a partition key in dynamo db?

A

unique identifier for each key. Records can have the same partition key if the sort key is different.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a sort key in dynamo db?

A

Combined with partition key to for defining storage order

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What chunk size are dynamo db partitions divided into?

A

10gb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the formula for determining # of dynamo db partitions by capacity?

A

(total RCU/3000) + (total WCU/1000)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the formula for determing # of dynamo db partisions by size?

A

total size / 10gb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How to determine number of partitions in a dynamo db table?

A

round up MAX(by capacity, by size)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is a dynamo db secondary global index?

A

Think of it as a copy of the original table. Can have different partition and sort keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What autoscaling method does dynamo db use?

A

It uses target tracking for WCU and RCU utilization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are some limitations of dynamo db scale down?

A

It won’t scale down automatically if consumption drops completely to 0.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is dynamo db accelerator (DAX)

A

an in memory cache in front of dynamo db for speeding up latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does ACID stand for

A

Atomic
Consistent
Isolated
Durable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What does BASE mean?

A

basically available
soft state
eventually consistent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the s3 max object size?

A

5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Above what size object should you use multi part uploads with s3?

A

100mb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is s3 transfer acceleration?

A

uses cloudfront to speed up uploads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is Glacier Vault Lock?

A

Lets you specify compliance rules on glacier. Prevents future changes to data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the Amazon Data Lifecycle Manager?

A

automate the creation, retention, and deletion of EBS snapshots and EBS-backed AMIs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is AWS Data Sync used for ?

A

Online transfer of data between storage services. Both AWS and on prem.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

How much more expensive is EFS than ebs and s3?

A

3x more than EBS

20x more than s3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

How does File Gateway expose storage?

A

exposes NFS and Samba

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

How does Volume Gateway expose storage?

A

iSCSI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is the difference between Volume Gateway cached and stored mode?

A

Stored mode keeps a copy of all data locally, asyncronously copies to s3.

Cached mode caches frequently access files locally with all data in s3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Can dynamo db be ACID compliant?

A

Yes, using dynamo db transactions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is a dynamo db local secondary index?

A

Allows for different sort keys with the same partition key on the table.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What is AWS Redshift?

A

PostgreSQL compatible data warehouse.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What is AWS Neptune?

A

A managed graph database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

When would you use Redshift over Athena?

A

When joins or unions are required on the data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What storage format provides the best performance with Athena?

A

Apache parquet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is amazon QLDB

A

Quantum Ledger Database (QLDB) is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is Amazon Managed Blockchain?

A

Managed blockchain service built on top of QLDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What are the reserved VPC addresses of a VPC with cidr 172.16.32.0?

A
  1. 16.32.0 - VPC network address
  2. 16.32.1 - VPC router
  3. 16.32.2 - VPC DNS resolver
  4. 16.32.3 - AWS Future Use
  5. 16.32.255 - Unusable Broadcast Address
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Does AWS VPC support broadcast layer 2 traffic?

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What protocol does AWS Managed VPN use?

A

ipsec

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is the max speed of a Direct Connect link?

A

10GB/s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is Direct Connect plus VPN?

A

Uses ipsec to secure direct connect link.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What is AWS VPN Cloud Hub

A

Allows connecting multiple locations in hub and spoke manner with AWS. AWS is the hub and all traffic goes through it to spokes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is a transit VPC?

A

A common VPC uses to connect multiple locations and VPCs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

How is private link different than direct connect?

A

Private link adds VPC endpoint to connect to services over AWS private network. Only VPC interface endpoints, not a full network connection like direct link. Can be used for 3rd parties to provide access as well.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What services do VPC Gatway Endpoints support?

A

s3 and dynamodb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What is are the types of ec2 placement groups?

A

spread: spreads small groups of instances across logical partitions that do not share hardware
partition: spreads groups of instances in partitions that are spread across underlying hardware. For large distributed workloads like Hadoop and Cassandra
clustered: pack instances closely together in an AZ, same hardware, to get the lowest latency possible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What are the route53 routing policies?

A 
simple
failover
geolocation
geoproximity
latency
mulitple answer
weighted
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Does Application Load Balancer support Elastic IP?

A

No. Only when used with global accelerator.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What are the AWS Cloud Directory services?

A
  • Cognito
  • Simple AD
  • AD Connector
  • Directory Service for Microsoft Active Directory
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What is a token vending machine?

A

A method for providing temp AWS credentials in mobile applications. It is recommended to use Cognito instead.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What is cloud HSM?

A
  • Dedicated, single-tenant hardware for encryption keys.
  • must be in VPC
  • used for TDE with Oracle DBs
  • classic HSM has upgront cost
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What is the difference between IDS and IPS?

A

IDS (intrustion detection service) is a monitor. IPS (intrusion prevention system) is active.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Does cloudtrail provide native alerting?

A

No, must use cloudwatch events.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

What is the value proposition of Service Catalog?

A

Uses adopted roles so users don’t need direct IAM permisson required to launch stack.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

How do you override settings from Global Service Catalog?

A

You have to create a matching local portfolio to override settings like the IAM role inherited from a service catalog in a shared account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Re-host

A

lift and shift. e.g. move VMs directly from on prem to ec2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

re-platform

A

lift and rshape

e.g. on prem mysql to rds

66
Q

re-purchase

A

drop and shop

abondon existing solution and use a new one

67
Q

re-architect

A

redesign in cloud native manner

68
Q

retire

A

get rid of applications

69
Q

retain

A

do nothing, keep as is

70
Q

rank re-host, re-platform, re-purchase, re-architect, retire, and retain by effort (time and cost) from lowest to highest

A
  1. retire
  2. retain
  3. re-host
  4. re-purchase
  5. re-platform
  6. re-architect
71
Q

What is the Cloud Adoption Framework?

A

an approach for designing, planning, and implementing IT architectures in the cloud. It is not a cookbook but rather a holistic approach that can be adopted.

72
Q

What is the AWS Server Migration Service?

A
  • Migrates on prem vmware and microsoft hyper-v VMs to AWS
  • syncs volumes and creates periodic AMIs
  • downloaded as virtual appliance for vmware or hyper-v
73
Q

What is the Schema Conversion Tool

A

Used for hetergenous database migrations. Converts schema from source format to a separate target format.

74
Q

What is the Database Migration Service?

A

Used to migrate databases between different source and destination databases.

75
Q

What is the AWS Application Discovery Service?

A

Helps customers gather info about on premise data centers to help plan migrations. Uses Migration Hub in console.

76
Q

Does AWS Application Discovery Service require a software agent on every node?

A

No. Agentless mode is supported with vmware. Non vmware environments require the agent.

77
Q

What cidr masks do VPCs support?

A

/16 to /28

78
Q

What is the storage capacity of AWS Snowball?

A

80TB

79
Q

What is the difference between AWS Snowball and AWS Snowball Edge?

A

Snowball edge includes on board lambda and clustering that can used to process the data in transit.

80
Q

What is the storage capacity of AWS Snowmobile?

A

100PB

81
Q

What is the difference between AWS Snowmobile and AWS Snowmobile Edge?

A

Snowmobile edge includes onboard lambda and clustering for processing data

82
Q

What is AWS Auto Scaling?

A

An API to manage autoscaling for non ec2 services such as

  • dynamo
  • ecs
  • emr
  • spot fleet
  • aurora
  • sagemaker endpoints
83
Q

AWS Auto Scaling Service in Console

A

A higher level abstraction for managing autoscaling for an application both for ec2 and other services.

84
Q

Target tracking scale policy

A

specify a target value for metric

85
Q

step and simple scale policies

A

choose scaling metrics and threshold values for the CloudWatch alarms that invoke the scaling process. You also define how your Auto Scaling group should be scaled when a threshold is in breach for a specified number of evaluation periods.

86
Q

What is the default ec2 autoscaling cooldown period?

A

300s

87
Q

Can cloudfront cache dynamic content?

A

Yes! dynamic content uses http cookies forwarded from the origin

88
Q

What are the supported origins for cloudfront?

A

s3, ec2, elb, or other web server

89
Q

How serve different content based on URL paths with cloudfront?

A

use cloudfront behaviors

90
Q

Does cloudfront support multiple origins?

A

Yes, using behaviors and http paths?

91
Q

How do you invalidate cloudfront cache?

A
  • delete file from origin and wait for ttl
  • use AWS console to specify an invalidation for a specific path such as /images/*
  • cloudfront API
  • third party tools have support
92
Q

What endpoint protocols does SNS support?

A

http(s), email, SQS, Amazon Device Messaging (push notifications), and lambda

93
Q

What is the storage lifetime of an SQS message?

A

default 4 days

max 14 days

94
Q

What is the max message size with SQS?

A

256KB

a special java sdk may be used to get messages up to 2GB however

95
Q

What is Amazon MQ?

A

Managed Apache Active MQ message broker

96
Q

What are dynamo db streams?

A

DynamoDB Streams captures a time-ordered sequence of item-level modifications in any DynamoDB table and stores this information in a log for up to 24 hours. Applications can access this log and view the data items as they appeared before and after they were modified, in near-real time.

97
Q

What is the Serverless Application Model?

A

A framework for building serverless apps on AWS. Includes a CLI to help with building and deploying.

98
Q

What are the transformation domains of the cloud adoption framework?

A
  • technology
  • process
  • organization
  • product
99
Q

What are the 6 perspectives of the cloud adoption framework?

A
  • business
  • people
  • governance
  • platform
  • security
  • operations
100
Q

What is sybase?

A

An SAP database supported by dms

101
Q

What is AWS simple workflow service?

A

a managed status tracking system, best suited for human enabled workflows like order fullfilment

recommended to use step functions instead for new projects

102
Q

What is a Simple Workflow Service activity worker?

A

a program that interacts with SWF to get tasks, process tasks, and return results

103
Q

What is a Simple Workflow Service decider?

A

a program that controllers coordination of tasks such as ordering, concurrency, and scheduling

104
Q

When to use step functions?

A

out of the box coordination between AWS services

example: order processing flow

105
Q

When to use simple workflow service?

A

need to support external services or specialized logic. usually use step functions instead

example: load application process with manual review steps.

106
Q

When to use SQS?

A

message queue for store and forward patterns

example: image resize process

107
Q

When to use AWS Batch?

A

scheduled or recurring tasks that do not require heavy logic

example: rotate logs daily on firewall appliance

108
Q

what is cloudfront zone apex support?

A

supports cdn for the root domain

both www.example.com and example.com can work without doing any redirect stuff

109
Q

What is the serverless application model?

A

Tool to help manage serverless applications.

  • frontend to cloudformation
  • cli
  • local dev
110
Q

What is business continuity?

A

seeks to minimize business activity disruption when something unexpected occurs

111
Q

What is disaster recovery?

A

Act of responding to an event that threatens business continuity

112
Q

What is high availability?

A

designing in redundancies to reduce the chance of impacting service levels

113
Q

What is fault tolerance?

A

Designing in the ability to absorb problems without impacting service levels

114
Q

What is recovery time objective (RTO)?

A

Time that it takes after a disruption to restore business processes to their service levels

T is for time

115
Q

What is recovery point objective (RPO)?

A

Acceptable amount of data loss measured in time

P is for data goes “poof”

116
Q

what is raid 0?

A

no redundancy, data striped across drives for extra performance

can be used to boost EBS iops and throughput

117
Q

what is raid 1?

A

1 drive can fail

data is mirrored between 2 drives, less storage capacity

118
Q

what is raid 5?

A

NOT recommended on AWS due to i/o requirements

1 drive can fail

minimum of 3 drives

2 drives store data, 3rd drive stores parit bit

119
Q

what is raid 6?

A

NOT recommended on AWS due to i/o requirements

2 drives can fail

minimum of 4 drives

2 methods of parity

120
Q

What raid levels does AWS recommend when working with EBS?

A

raid 0 and raid 1

121
Q

What are the availability SLA of s3 storage classes?

A

standard = 99.99
standard infrequent access = 99.9
one zone infrequent access = 99.5

122
Q

What is the s3 durability sla?

A

11 9s

99.999999999

123
Q

Does Redshift support multi AZ deployments?

A

no

use multi node cluster

124
Q

Can RDS failover to a read replica automatically?

A

no

125
Q

what are some ways to accomplish blue green deployments on AWS?

A

update route53 to point to new elb or ec2 instance

swap out autoscaling groups

create a new launch config and assign to elb

elastic beanstalk

clone stack in opsworks and point dns to new stack

126
Q

what is continuous integration?

A

merge code changes back to main branch as frequently as possible with automated testing along the way

127
Q

what is continuous delivery?

A

automated release process you can manually trigger

128
Q

what is continous deployment?

A

each code change that passes all stages of release process is released to production without human intervention

129
Q

What is a cloudformation change set?

A

a summary of proposed changes to a stack that allows you to review changes before applying

130
Q

What are cloudformation stack policies?

A

protect specific resources from being unintentionally deleted or updated. protect everything by default.

can’t be removed once applied

After you set a stack policy, all of the resources in the stack are protected by default. To allow updates on specific resources, you specify an explicit Allow statement for those resources in your stack policy. You can define only one stack policy per stack, but, you can protect multiple resources within a single policy. A stack policy applies to all AWS CloudFormation users who attempt to update the stack. You can’t associate different stack policies with different users

A stack policy applies only during stack updates. It doesn’t provide access controls like an AWS Identity and Access Management (IAM) policy. Use a stack policy only as a fail-safe mechanism to prevent accidental updates to specific stack resources. To control access to AWS resources or actions, use IAM.

131
Q

What is AWS config?

A

a service that allows you to access, audit, and evaluate configurations of all AWS resources

useful for config mgmt as part of an ITIL program

can track variations against baselines and issue alarms

example rules:

  • is backup enabled on RDS?
  • is cloudtrail enabled on the account?
  • are ebs volumes encrypted?
132
Q

What is Amazon WorkLink?

A

provides secure access to internal web apps

133
Q

What is Amazon Comprehend?

A

natural language processing (NLP)

sentiment analysis

134
Q

What is Amazon Forecast?

A

analyzes time series data to delivery forecasts

135
Q

What is Amazon Lex?

A

understand intent and context of natural speach, useful for chatbots

136
Q

What is Amazon Personalize?

A

recommendation engine as a service based on demographic and behavioral data

137
Q

What is Amazon Polly?

A

text to speech service

138
Q

What is Amazon Rekognition?

A

image and video object recognition and face recognition

139
Q

What is Amazon Textract?

A

OCR, extract text

140
Q

What are the elasticbeanstalk supported platforms?

A
  • docker
  • go
  • java
  • tomcat
  • .net
  • node.js
  • php
  • ruby
  • python
141
Q

What is a disposable upgrade?

A

one were a new release is deployed on new instances while instances containing the old version are terminated.

142
Q

What are AWS Resource Groups?

A

groupings of AWS resources defined by tags

143
Q

what is the difference between standard and convertible reserved instances?

A
  • both valid for 1 or 3 years
  • standard has a bigger discount
  • both change az, instance size,
  • convertible lets you change instance family
  • convertible benefits from ec2 cost reductions when they occur
  • only standard can be sold on the marketplace
144
Q

What type of reserved instance gaurantees availability in a particular AZ?

A

zonal reserved instance

145
Q

What are dedicated instances?

A

hardware reserved just you, instances share hardware with other instances within your same account

2$ more per hour on instance costs

146
Q

What is dedicated host (ec2)?

A

physical servers dedicated just to your use

each dedicated host can only run 1 ec2 instance size and type

147
Q

What are AWS savings plans?

A

pricing model offering lower prices compared to On-Demand pricing, in exchange for a specific usage commitment (measured in $/hour) for a one or three-year period. AWS offers three types of Savings Plans – Compute Savings Plans, EC2 Instance Savings Plans, and Amazon SageMaker Savings Plans. Compute Savings Plans apply to usage across Amazon EC2, AWS Lambda, and AWS Fargate. The EC2 Instance Savings Plans apply to EC2 usage, and Amazon SageMaker Savings Plans apply to Amazon SageMaker usage.

148
Q

What is AWS Budgets?

A

allows to setup predefined limits and get notified if they are exceeded

can be based on cost, usage, or utilization of reserved instances

149
Q

Can you move reserved instances between regions?

A

no

150
Q

How do you provide temporary access to KMS keys?

A

using grants

Grants are commonly used by AWS services that integrate with AWS KMS to encrypt your data at rest. The service creates a grant on behalf of a user in the account, uses its permissions, and retires the grant as soon as its task is complete.

151
Q

What service do you use if you need to analyze IOT data in real time for analytics?

A

kinesis data analytics

152
Q

What is AWS Artifact?

A

provides on-demand downloads of AWS security and compliance documents, such as AWS ISO certifications, Payment Card Industry (PCI), and Service Organization Control (SOC) reports.

153
Q

What is Amazon Inspector?

A

Amazon Inspector is an automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (EC2) and container workloads for software vulnerabilities and unintended network exposure.

154
Q

What is AWS Firewall Manager?

A

Central management of WAF, WAF Shield, security groups, network firewall, and route53 resolver DNS firewall

Firewall Manager is particularly useful when you want to protect your entire organization rather than a small number of specific accounts and resources, or if you frequently add new resources that you want to protect. Firewall Manager also provides centralized monitoring of DDoS attacks across your organization.

155
Q

What is Aurora backtracking?

A

With Amazon Aurora MySQL-Compatible Edition, you can backtrack a DB cluster to a specific time, without restoring data from a backup.

156
Q

Why might an EBS volume created from a snapshot be slow initially?

A

For volumes that were created from snapshots, the storage blocks must be pulled down from Amazon S3 and written to the volume before you can access them. This preliminary action takes time and can cause a significant increase in the latency of I/O operations the first time each block is accessed. Volume performance is achieved after all blocks have been downloaded and written to the volume.

157
Q

When should I use Amazon EC2 Auto Scaling vs. AWS Auto Scaling?

A

You should use AWS Auto Scaling to manage scaling for multiple resources across multiple services.

158
Q

Can service control policies have more than one statement element or json object?

A

no

159
Q

Can you use non RFC1918 addresses with VPC cidrs?

A

yes, but you will not be able to route traffic to the internet with them

160
Q

What are the 5 design principles of the operation excellence pillar of the well architected framework?

A
  • perform operations as code
  • make frequent, small, reversible changes
  • refine operations procedures frequently
  • Anticipate failure
  • learn from all operational failures

AWS Solutions Architect Professional (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions