Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Solutions Architect Associate > Cantrill Slides > Flashcards

Cantrill Slides Flashcards

1
Q

What are the 5 key features of Cloud Computing?

A
  • On-demand self-service
  • Broad network access
  • Resource pooling
  • Rapid elasticity
  • measured service
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Hybrid Cloud?

A

Using Public Cloud and Private Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is private cloud?

A

Using on-remises cloud, Ie, AWS Outposts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the 9 parts of the infrastructure stack?

A
  • Application
  • Data
  • Runtime
  • Container
  • O/S
  • Virtualisation
  • Servers
  • Infrastructure
  • Facilities
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What level of the infrastructure stack is IaaS?

A

O/S

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What level of the infrastructure stack is PaaS?

A

Runtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What level of the infrastructure stack is SaaS?

A

Application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the parts of the OSI 7-Layer model?

A
  • Layer 7 - Application (Host Layer)
  • Layer 6 - Presentation (Host Layer)
  • Layer 5 - Session (Host Layer)
  • Layer 4 - Transport (Host Layer)
  • Layer 3 - Network (Media Layer)
  • Layer 2 - Data Link(Media Layer)
  • Layer 1 - Physical (Media Layer)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are three different network zones?

A
  • “Public Internet” zone
  • “AWS Public” zone
  • “AWS Private” zone
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

3 features on AWS Regions

A
  • Geographic separation
  • Geopolitical separation
  • location control
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

3 levels of service resilience

A
  • Globally resilient
  • region resilient
  • AZ resilient
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How many accounts and regions can a VPC be within?

A

1 and 1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the default VPC CIDR?

A

172.31.0.0/16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

True or False; Default VPC subnets assign public IPv4 addresses?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What … as a Service is EC2?

A

IaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How are on-demand EC2 instances billed?

A

per second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What 3 things does an AMI contain?

A
  • Permissions
  • Root volume
  • Block device mapping
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

In S3 what are the key and values?

A

Key = name of file
Value = content being stored

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

4 S3 bucket name rules

A
  • Must be globally unique
  • 3 - 63 characters, all lower case, no underscores
  • start with a lowercase letter or a number
  • can’t be IP formatted e.g. 1.1.1.1
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How many S3 buckets can you have?

A
  • 100 soft limit
  • 1,000 hard limit per account
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How many objects can you have in an S3 bucket?

A

Unlimited

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What type of storage is S3?

A

Object store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Are S3 buckets mountable?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does CloudWatch do?

A

Collects and manages operational data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is High-Availability?

A

Short: Minimise any outages

Long:
HA aims to ensure an agreed level of operational performance, usually uptime, for a higher than normal period

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is Fault Tolerance (FT)?

A

Short: Operate through faults

Long: FT is the property that enable a system to continue operating properly in the event of the failure of some (one or more faults within) of its components

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is Disaster Recovery (DR)?

A

Short: Used when high availability and fault-tolerance don’t work

Long: a set of policies, tools and procedures to enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Route53 basic tasks (2):

A

1- Register domains
2 - Host Zones… managed nameservers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What do A records refer to?

A

IPv4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What do AAAA records refer to?

A

IPv6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What are IAM users and when are they used?

A

IAM Users are an identity used for anything requiring long-term AWS access, e.g. Humans, Applications or Service Accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What does an Amazon Resource Name (ARN) do?

A

Uniquely identify resources within any AWS accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is the max number of IAM users per account?

A

5,000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

How many groups can a IAM user be a member of?

A

10 groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What are IAM Groups

A

IAM Groups are containers for IAM Users

36
Q

True or False; Group are not a true identity?

A

True, they can’t be referenced as a principle in a policy

37
Q

What are Service Control Policies (SCPs)?

A
  • Account permissions boundaries, they limit what the account (including account root user) can do.
  • They don’t grant any permissions
38
Q

Are service control policies allow or deny?

39
Q

What does CloudTrail do?

A

Logs API calls/activities as a CloudTrail Event

40
Q

How long is CloudTrail data stored by default in Event History?

41
Q

Is CloudTrail realtime?

42
Q

What is AWS Control Tower?

A

It provides quick and easy setup of a multi-account environment and orchestrates other AWS services to provide this functionality

43
Q

What are Control Tower Guard Rails?

A

They Detect/Mandate rules/standards across all accounts

44
Q

What is Control Tower Account Factory?

A

It Automates and Standardises new account creation

45
Q

What 3 AWS services are used to build AWS Control Tower - Landing Zone?

A
  • AWS Organisations
  • AWS Config
  • AWS CloudFormation
46
Q

True or False; S3 is private by default?

47
Q

Are bucket policies allow or deny?

48
Q

What is Key Management Service (KMS)?

A
  • a Regional and Public service
  • create, store and manage keys
49
Q

True or False; with KMS, keys never leave KMS?

50
Q

What is the max data size that can be used for KMS keys?

51
Q

True or False; S3 buckets can be encrypted?

A

False; Buckets aren’t encrypted, objects are

52
Q

What is the S3 default bucket encryption?

53
Q

How are you charged for S3 standard?

A
  • GB/m fee for data stored
  • $ per GB for transfer out
  • price per 1,000 requests
54
Q

How many AZs is S3 data replicated over?

55
Q

When to use S3 standard?

A

For frequently accessed data which is important and non-replaceable

56
Q

How are you charged for S3 Standard IA?

A

per GB data retrieval fee

57
Q

True or False; S3 Standard IA has a minimum duration charge?

A

True, 30 days

58
Q

When to use S3 Standard IA?

A

For long-lived data, which is important but where access is infrequent

59
Q

How are you charged for S3 One Zone-IA?

A

per GB of data retrieval fee

60
Q

True or False; S3 One Zone-IA has a minimum duration charge?

A

True, 30 days

61
Q

When should you use S3 One Zone-IA?

A

long-lived data which is non-critical and replaceable and where access is infrequent

62
Q

How are you charged for S3 Glacier Instant?

A

per GB data retrieval fee

63
Q

True or False; S3 Glacier instance has a minimum duration charge?

A

True, 90 days

64
Q

When should you use S3 Glacier Instant?

A

for long-lived data, accessed once per quarter with millisecond access

65
Q

True or False S3 Glacier Flexible object can be made publicly accessible?

66
Q

When should you use S3 Glacier Flexible?

A

For archival data where frequent or realtime access isn’t needed (eg yearly), with retrieval time of minutes to hours

67
Q

True or False S3 Glacier Deep Archive object can be made publicly accessible?

68
Q

When should you use S3 Glacier Deep Archive?

A

For archival data that rarely if ever needs to be accessed - hours or days for retrieval

69
Q

What is S3 Intelligent Tiering?

A

Intelligent Tiering monitors and automatically moves any objects not accessed for 30 days to a low cost infrequent access tier, and eventually to archive instant access, archive access or deep archive tiers

70
Q

True or False; with S3 Intelligent Tiering, as objects are accessed, they are moved back to the frequent access tier?

71
Q

How are you charged for S3 Intelligent Tiering?

A

monitoring and automation costs per 1,000 objects

72
Q

When should S3 intelligent tiering be used?

A

For long-lived data, with changing or unknown patterns

73
Q

Why use Same Region Replication (SRR)?

A
  • Log aggregation
  • Prod & Test sync
  • Resilience with strict sovereignity
74
Q

Why use Cross Region Replication?

A
  • Global Resilience Improvement
  • Latency Reduction
75
Q

For S3 presignedURLs, what permissions are granted?

A

The permissions match the identity which generated it

76
Q

True or False; you can create a presignedURL for an object you have no access to?

77
Q

For S3 presignedURLs, what could access denied mean?

A

the generating ID:
- never had access … or
- doesn’t have access now

78
Q

What is S3/Glacier Select?

A

Let’s you use SQL-like statements to select part of the object, pre-filtered by S3. So you don’t need to retrieve the entire object (quicker retrieval and uses less data)

79
Q

What are S3 Event Notifications?

A

Notification generated when events occur in a bucket

80
Q

What is WORM?

A

Write-Once-Read-Many

81
Q

True or False; S3 Object Lock requires versioning?

82
Q

True or False; the account root user can modify S3 object that have object lock enabled?

A

False, the root user can’t adjust, delete or overwrite until retention expires

83
Q

What does an S3 Legal Hold do?

A

It locks an object version until the legal hold is removed, no deletes or changes can be made

84
Q

What are the two types of S3 Object Lock?

A
  • Compliance
  • Governance
85
Q

What is S3 Object Lock Compliance mode?

A
  • Object version can’t be deleted or updated
  • Retention period can’t be shortened
  • Compliance mode can’t be changed, even by the root user
86
Q

What is S3 Object Lock Governance mode?

A

An object version is locked until the retention period expires, except special permissions can be granted allowing lock settings to be adjusted:
s3:BypassGovernanceRetention

87
Q

What is an Internet Gateway?

A

A region resilient gateway attached for a VPC that runs from within the AWS Public Zone

Solutions Architect Associate (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions