Deck 1 Flashcards

1
Q

In the context of an ENI, what is a hot attach?

A

Attaching the ENI with the instance running

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In the context of an ENI, what is a warm attach?

A

Attaching the ENI with the instance stopped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In the context of an ENI, what is a cold attach?

A

Attaching the ENI when the instance launches.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which types of records should you use to point a domain’s apex zone (root) to an Application Load Balancer?

A

An A record (IPv4)

An AAAA record (IPv6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How long does it take to complete an AZ failover in a multi-AZ RDS scenario

A

A minute or two

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which tool can help you import and export DynamoDB data sets as part of your testing?

A

EMR (Elastic Map Reduce)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What do you need to refer to when considering doing Penetration testing on your AWS infrastructure?

A

The Customer Service Policy for Penetration Testing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which type of load balancer do you use if you want to do path based load balancing?

A

An Application Load Balancer (ALB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What sort of traffic does a NACL allow by default?

A

All of it, both in and out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What should you have a look at if you’re having trouble getting to the internet gateway from one of your instances?

A

Your routing table(s)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How are NACL rules assigned and evaluated?

A

They are assigned numbers, and are evaluated from the smallest number to the largest.

The first match is the action that is completed.

You can use a wildcard (*) to catch all other traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

IAM: Do roles go against compute objects or “people” objects (users and groups)?

A

They go against compute objects. Policies go against “people”.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What can you do with reserved instance time you no longer need?

A

Sell it on the AWS Marketplace.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How much faster is Aurora than MySQL and Postgres RDS flavours?

A

5x faster than MySQL RDS

3x faster than Postgres RDS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What can ElastiCache help with?

A

Caching databases (RDS, in particular) to ease read pressures on them

It can also be used to store user session data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What’s the maximum IOPS of a GP2 volume?

A

16,000

17
Q

What is the maximum IOPS for io1 or io2 volumes?

A

64,000 on a Nitro EC2 instance, or 32,000 on a non-Nitro EC2 instance

18
Q

What’s the maximum IOPS you can achieve with an IO2 Block Express volume?

A

256,000

19
Q

How performant is EFS?

A

Very - supports 1000s of NFS clients and 10+GB/s throughput

20
Q

What does Amazon GuardDuty do?

A

An Intelligent Threat discovery tool.

It analyses your account and network activity, and uses machine learning and known bad IP addresses to block malicious traffic.

21
Q

What is AWS Kinesis Data Streams?

A

A serverless streaming data service.

22
Q

What does AWS Kinesis Firehose do?

A

Allows near real time delivery of Kinesis data to S3