DCT Exam Review Flashcards
A VPC peering connection is a networking connection between two ____ that enables you to _____ traffic between them using private IPv4 or IPv6 addresses.
A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 or IPv6 addresses.
Amazon Elastic File System (Amazon EFS) provides a simple, _______, fully _______ elastic NFS file system for use with _____ services and on-premises resources.
Amazon Elastic File System (Amazon EFS) provides a simple, scalable, fully managed elastic NFS file system for use with Cloud services and on-premises resources.
What are some use cases for DynamoDB?
Managing ___ session data
Storing __________ accessed data
Storing metadata for __ objects
Managing web session data
Storing infrequently accessed data
Storing metadata for S3 objects
You can create a VPC peering connection between your ______ or with a VPC in another AWS _______
You can create a VPC peering connection between your VPCs, or with a VPC in another AWS account.
Kinesis Firehose Destinations include:
Amazon S3
Amazon ________.
Amazon ___________
Splunk
Kinesis Firehose Destinations include:
Amazon S3
Amazon Redshift.
Amazon Elasticsearch
Splunk
_______ per instance is an appropriate metric for auto-scaling with SQS.
Backlog per instance is an appropriate metric for auto-scaling with SQS.
Elasticsearch allows you to store, ______, and ________ huge volumes of data in near real-time and receive a response in _____________.
Elasticsearch allows you to store, search, and analyze huge volumes of data in near real-time and receive a response in milliseconds.
What happens when a load balancer determines that an instance is unhealthy?
What happens when a load balancer determines that an instance is unhealthy?
It stops routing requests to that instance.
Kinesis Data Firehose captures, _________, and _____ streaming data that you can deliver to destinations like S3 for later ________
Kinesis Data Firehose captures, transforms, and loads streaming data that you can deliver to destinations like S3 for later analysis
EBS volumes cannot be shared by _______ instances
EBS volumes cannot be shared by multiple instances
User data can be used to perform common automated ___________ tasks and even run _____ after the instance starts
User data can be used to perform common automated configuration tasks and even run scripts after the instance starts
Kinesis Data Streams use cases include:
Real-time metrics and ________
Real-time data ________
Complex stream _________
Kinesis Data Streams use cases include:
Real-time metrics and reporting.
Real-time data analytics.
Complex stream processing.
By default, security groups have no ________ rules
By default, a security group includes an ________ rule that ______ all ________ traffic
By default, security groups have no inbound rules.
By default, a security group includes an outbound rule that allows all outbound traffic
When to use Elastic Network Interface (ENI):
This is the _____ adapter type for when you don’t have any _____-__________ requirements
Can be used with ___ instance types
When to use Elastic Network Interface (ENI):
This is the basic adapter type for when you don’t have any high-performance requirements
Can be used with all instance types
By default, the root volume for an EC2 backed by EBS is deleted when the instance terminates. You can change the default behavior by setting the _______________ attribute to _____ using a block device mapping.
By default, the root volume for an EC2 backed by EBS is deleted when the instance terminates. You can change the default behavior by setting the DeleteOnTermination attribute to false using a block device mapping.
Security groups are ________. If you send a request from your instance, the response traffic for that request is_______ regardless of _______ SG rules.
Security groups are stateful. If you send a request from your instance, the response traffic for that request is allowed regardless of inbound SG rules.
You cannot create an ________ Read Replica from an __________ master DB instance.
You cannot create an encrypted Read Replica from an unencrypted master DB instance.
File Gateway allows on-prem or EC2 instances to store objects in __ via ___ or ___ mount points
File Gateway allows on-prem or EC2 instances to store objects in S3 via NFS or SMB mount points
Elastic Fabric Adapter (EFA) should be used with
_____-__________ Computing
Machine Learning use cases.
______ coupled applications.
Can be used with all _______ types.
When to use Elastic Fabric Adapter (EFA)
High-Performance Computing
Machine Learning use cases.
Tightly coupled applications.
Can be used with all instance types.
You can change the security groups for an instance when the instance is in the _______ or ______
You can change the security groups for an instance when the instance is in the running or stopped
If you need SSL/TLS encryption in transit when connecting to a database from application servers, you should _________ the AWS-provided ____ _________. Use the __________ when connecting to the RDS DB instance.
If you need SSL/TLS encryption in transit when connecting to a database from application servers, you should Download the AWS-provided root certificates. Use the certificates when connecting to the RDS DB instance.
When to use Enhanced Network Adapter (ENA)
Good for use cases that require higher __________ and lower inter-instance _______.
Supports ___ instance types only
When to use Enhanced Network Adapter (ENA)
Good for use cases that require higher bandwidth and lower inter-instance latency.
Supports HVM instance types only
Kinesis Video Streams Stores data for __ hours by default but can store for up to __ days.
Kinesis Video Streams Stores data for 24 hours by default but can store for up to 7 days.
When using Volume Gateway Cached Mode, your primary data is stored in __ with frequently accessed data is _____ ______ on-prem
When using Volume Gateway Cached Mode, your primary data is stored in S3 with frequently accessed data is cached locally on-prem
Amazon SQS is ___-based polling, not ___-based if you need ___-based polling, use ___
Amazon SQS is pull-based polling, not push-based if you need push-based polling, use SNS
AWS Security Token Service (AWS STS) is the service that you can use to create and provide users with ________ credentials that can control access to your ________
AWS Security Token Service (AWS STS) is the service that you can use to create and provide users with temporary credentials that can control access to your resources
An S3 notification can be set up to notify you when objects are _______ from Glacier to S3 standard.
An S3 notification can be set up to notify you when objects are restored from Glacier to S3.
Auto Scaling groups cannot launch instances in multiple ______
Auto Scaling groups cannot launch instances in multiple Regions
Between ECS and EKS, which is open source and which is AWS proprietary technology?
EKS is a managed version of the open-source tool Kubernetes.
ECS is AWS’ proprietary container management tool.
If you need to prevent users in specific countries from accessing your content, you can use the ___________ geo-restriction
If you need to prevent users in specific countries from accessing your content, you can use the CloudFront geo-restriction