Cost Control

Question 1

If you’re accessing S3 buckets using NAT instances in multiple AZs and switch to a VPC Gateway Endpoint for S3, will your costs increase, decrease, or stay the same? Why?

Answer 1

Costs will decrease. There are data transfer charges when using NAT instances with S3 across multiple AZs, but there are none with VPC Gateway Endpoint for S3 within the same region.

Question 2

A solution for quick DB resets between tests.

Answer 2

AWS Aurora backtracking

Question 3

What service provides a TagOption library to allow administrators to easily manage tags on provisioned AWS products?

Answer 3

AWS Service Catalog

Question 4

You’re restoring a Provisioned IOPS SSD EBS Volume. After it goes live, it has extremely poor performance and significant latency. Why, and what can you do about it?

Answer 4

When a data block is accessed for the first time on a freshly restored EBS Volume, EBS has to download the block from S3 first. This increases the I/O latency until all blocks are accessed at least once. To fix this, update the restoration process to run tools to read the entire volume before putting the instance back to production.

Question 5

How to replicate EBS snapshots in another region.

Answer 5

Create snapshots Data Lifecycle Manager. Copy the snapshots to another region using the copy-snapshot API.

Question 6

What tool to send notification emails when a service has exceeded a certain amount of usage?

Answer 6

AWS Budgets

Question 7

What to use to set desired capacity to 0 at night for all Auto Scaling groups

Answer 7

Lambda Function

Question 8

What type of EBS snapshots can be used to create a new AMI

Answer 8

Root volume snapshots only

Question 9

What is a good way to reduce costs when you have many VPCs with lots of cross-region traffic?

Answer 9

Consolidate resources into as few regions and AZs as necessary.

Question 10

What does a Fargate ECS cluster in a private subnet need to connect with resources?

Answer 10

interface VPC endpoints

Question 11

How to ensure that reserved instances are being allocated efficiently over multiple accounts?

Answer 11

Consolidated Billing with Reserved Instance Sharing

Question 12

What type of reservation to use with your autoscaler when you need to guarantee capacity for a short-term burst in traffic?

Answer 12

On-Demand Capacity Reservation

Question 13

Most cost effective way to encrypt data at rest when you cannot use a key generated by a third party.

Answer 13

Create a customer managed CMK (Customer Master Key) with KMS (AWS Key Management Service) and import your own key.

Question 14

What types of Reserved Instances can you sell on the Reserved Instance Marketplace?

Answer 14

Standard EC2 only. Not Convertible and not Reserved Instances for other AWS services like RDS.

Question 15

Tool to ensure that Reserved Instances are used efficiently across multiple accounts within an Organization

Answer 15

Cost Explorer

Question 16

When you set up Cross-Region Replication for an S3 bucket, how do you replicate pre-existing content

Answer 16

You have to do it manually (or write a script)

Question 17

Can an Application Load Balancer handle multiple SSL Certificates?

Answer 17

Yes