Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Solutions Architect - Revised Subjects (SAA-C02) > Deck 2 > Flashcards

Deck 2 Flashcards

1
Q

How long does an object need to sit in S3 Standard storage classes before they can be moved down to the infrequent access tier?

A

30 days (even using a lifecycle policy)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the name of AWS’ serverless user management tool, and what does it do in a few words?

A

Cognito User Pools, which provides a user directory you can use for your application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When is using Route 53 weighted routing not a good idea for testing blue/green application deployments?

A

When DNS caching will have a significant effect on the rollout.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which applications would you use in your stack if you want to buffer or throttle the traffic coming into your system?

Why?

A

Amazon API Gateway, Amazon SQS and Amazon Kinesis

API Gateway has a “bucket” of authentication tokens it can give out, which naturally throttles it.

SQS is a queuing system so creates a buffer.

Kinesis is fully managed and scalable, so it will always able to handle the queries (why this means you can consider it throttled I don’t know).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Of SNS and SQS, which applications is capable of queuing requests and which isn’t?

A

SQS can queue requests - SNS cannot.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which tools would you use to make sure only permitted EC2 instances can communicate with an EFS file system?

A

An IAM policy on the file system

EFS Access Points

VPC security groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are GuardDuty’s data sources?

A

CloudTrail Logs
VPC Flow Logs
DNS Logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is Amazon CloudFront?

A

AWS’ Global CDN (Content Distribution Network)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What’s the best way to sync S3 data across regions?

A

Copy data from source to destination using the AWS S3 sync command

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Does S3 Cross-Region replication work to copy objects already in S3?

A

No - cross region replication only works on data that is added after the replication is enabled.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which services can use VPC Gateway Endpoints?

A

DynamoDB and Amazon S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which services would you use to build a highly available solution to store and reliably process key-value pairs data that is collected once a minute?

Why?

A

Lambda - means you only pay when code is being executed

DynamoDB - key:value pair database with high performance and high availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How do you modify a launch configuration after you’ve created it?

A

You can’t - you need to create a new one.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Can you copy items directly into AWS Glacier?

A

No - you need to put it into standard S3 first, and then move it across.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What would you do to provide good protection against items in your S3 buckets being deleted?

A

Enable versioning and MFA delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What can S3 bucket policies do?

A

Allow public access to the bucket

Force objects to be encrypted at upload

Grant access to another account (cross account)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can S3 buckets replicate across accounts?

A

Yes they can.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

S3 Replications - What are the use cases for cross region replication?

A

Compliance, lower latency access, replication across accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

S3 Replications - What are the use cases for same region replication?

A

Log aggregation, live replication between production and test accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the six tiers of S3 storage class?

A 
S3 Standard
S3 Standard IA (Infrequent Access)
S3 One Zone IA
S3 Intelligent Tiering
Glacier
Glacier Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the retrieval options for AWS Glacier storage?

A

Expedited: 1-5 minutes
Standard: 3-5 hours
Bulk: 5-12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the retrieval options for AWS Glacier Deep Archive storage?

A

Standard: 12 hours
Bulk: 48 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the minimum storage duration for AWS Glacier items?

A

90 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the minimum storage duration for AWS Glacier Deep Archive items?

A

180 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is the minimum storage duration for any object that involves the Infrequent Access storage tiers?

A

30 days

26
Q

When using a Network Load Balancer (NLB), how is traffic routed to the target instances?

A

Traffic is routed to instances using the primary private IP address specified in the primary private network interface for the instance.

27
Q

What are the similarities between AWS Global Accelerator and AWS CloudFront?

A

Both services use the AWS global network and the edge locations around the world

Both services integrate with AWS Shield for DDoS protection

28
Q

What are the differences between AWS Global Accelerator and AWS CloudFront?

A

CloudFront is a caching solution, which is good for static content, APIs and some dynamic content.

Global Accelerator is much better for non-HTTP traffic like gaming or VoIP, or for HTTP traffic that absolutely needs a static IP address.

29
Q

What is AWS Global Accelerator?

A

Amazon’s Global Proxying solution.

Traffic comes into the nearest edge location to the end user, and is routed over Amazon’s core network to the required region.

You get two static (Anycast) IPs which you can use worldwide, which are then routed.

30
Q

What is AWS CloudFront?

A

CloudFront is AWS’ CDN, which uses their global network to cache data at the Edge.

31
Q

How should you handle installing applications on an EC2 instance when it launches?

A

Use a lifecycle hook to put the instance in a wait state and run a script to install the software.

32
Q

What is the maximum storage you can have in an Aurora database?

A

128TB

33
Q

How many read replicas can an Aurora database have?

A

15

34
Q

How does AWS Aurora (non-serverless) support high availability and read scaling?

A

Data is stored in 6 copies across 3 AZs
One instance takes writes
Other instances can be read replicas

Also supports multi-master for instant failover

35
Q

How is Global Aurora set up?

A

Uses cross-region replicas
One primary region (read & write)
Up to 5x secondary (read-only) regions

Up to 16 read-replicas per secondary region
Promoting another region to master takes <1 minute

36
Q

What is an AWS dedicated instance?

A

An instance running on hardware dedicated to you.

Less access to underlying hardware than a dedicated host, so no licencing benefits, but requirement of “no shared hosts” is met.

37
Q

What is a dedicated host?

A

Your own EC2 host that only you can use. Allows you to use your own legacy licences and satisfy shared tenancy compliance requirements.

38
Q

What is AWS Transit Gateway?

A

Allows transitive peering between VPC and on-premises connections

39
Q

How can you improve the bandwidth of your site-to-site VPN?

A

Use multiple parallel VPNs and set up equal-cost multi-path routing (ECMP) to balance traffic

40
Q

Can you share Direct Connect between multiple AWS accounts?

A

Yes - use Transit Gateway

41
Q

How can you inspect traffic going to an interface without interfering with it?

A

Use Traffic Mirroring to copy the network traffic to a different set of EC2 instances for analysis

42
Q

What are Cognito Identity Pools?

A

A service that allows your users to authenticate into other AWS services.

43
Q

How do Cognito Identity Pools integrate with Cognito User Pools?

A

A user from the User Pool exchanges its tokens for another token from the Identity Pool.

44
Q

How much data can be in a Kinesis shard per second?

A

1MB (per second)

44
Q

How much data can be in a Kinesis share per second?

A

1MB (per second)

45
Q

How many messages can be in a Kinesis shard per second?

A

1000 (messages per second)

46
Q

What does the Enhanced Fan-Out mode of Kinesis offer over the standard mode?

A

You can pull 2MB/s of data per consumer, rather than across all of them.

47
Q

What do AWS’ DMS, Glue and Schema Conversion Tool services do?

A

DMS is designed for migrating databases from on-premises to the cloud, and vice versa. It can be set up to run the copy continuously.

Glue is a data transformation program, designed to work when data is being ingested.

Schema conversion allows you to move your schema between different database engines (like SQL Server to MySQL etc.)

48
Q

What management does a NAT Instance need?

A

Resilience
Patching
Security groups

49
Q

What are the advantages of a NAT Gateway over a NAT Instance?

A

No patching required
Higher bandwidth
No security groups to manage

50
Q

What are the drawbacks of a NAT Gateway over a NAT instance?

A

You can’t use it from an EC2 instance in the same subnet it’s in
You can’t use it as a Bastion host (unlike a NAT instance)
Doesn’t support port forwarding

51
Q

What is AWS X-Ray?

A

Amazon’s debugging and analytics application, which helps you to visualise your application and its requests.

52
Q

What levels of access restrictions are there for AWS S3 buckets?

A

User based:
IAM Policies

Resource based:
Bucket Policies
Object Access Control list
Bucket Access Control list

53
Q

What can be used as a final “hard stop” to prevent a user or resource accessing an S3 bucket?

A

An explicit deny in the bucket policy.

54
Q

Of Launch Templates and Launch Configurations, which is newer and what can it do above the older one?

A

Launch Templates are newer.

They support:

  • multiple versions
  • partial configuration to allow substitution with values upon use
  • on-demand or spot instances (or both)
55
Q

What do you use to connect to most AWS services, without hitting the public internet, that aren’t S3 and DynamoDB?

A

Interface endpoints

56
Q

Which sites does a site-to-site VPN connect?

A

Your site to AWS

57
Q

What options do (non-Aurura) RDS databases have for availability?

A

Multi-AZ standby deployments

58
Q

What are some drawbacks of AWS’ read replicas?

A

The client connection string needs to be changed in the applications.

They are asynchronously linked to the main database, so they are “eventually consistent”.

59
Q

What does AWS’ Redshift Spectrum service allow you to do?

A

Query Redshift data in S3 without loading it

Solutions Architect - Revised Subjects (SAA-C02) (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions