Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Solutions Architect - Revised Subjects (SAA-C02) > Deck 3 > Flashcards

Deck 3 Flashcards

1
Q

How many servers can you have per AZ in a spread placement group?

A

7

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which AWS service can you use to import data from supported databases into AWS Redshift?

A

DMS (Database Migration Service)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What subnet and VPC combinations are allowed when using the VPC Creation Wizard?

A

VPC with a single public subnet
VPC with public and private subnets (NAT)
VPC with public and private subnets and with hardware VPN access
VPC with a private subnet only and hardware VPN access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the best way to reuse code in multiple Lambda functions?

A

Create a Lambda layer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which VPC does a Lambda function usually run in, and what do you need to do if you change this?

A

They run in an AWS owned VPC by default

If you run a Lambda function in your own VPC it will need a route through a NAT gateway to access public resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What type of access control gives user level control, but not AWS account level control for S3 buckets?

A

IAM Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What type of access control gives AWS account level control, but not user level control for S3 buckets?

A

ACLs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What type of access control gives both AWS account level control and user level control for S3 buckets?

A

Bucket Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the best way to improve S3 upload speed?

A

Use multipart uploads (allows for parallel uploads)

Use Amazon S3 Transfer Acceleration (transfers file to an edge location)

(do not accept Global Accelerator as an answer)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the most efficient way to send data from AWS S3 to Kinesis Data Streams?

A

AWS DMS service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which storage classifications can S3 Storage Class Analysis offer recommendations for?

A

Standard IA only.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How could you prevent another website from using your assets in a public S3 bucket?

A

Remove the public read access and use pre-signed URLs with expiry dates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What AWS services would you use to implement a “follow” feature in a DynamoDB social network?

A

DynamoDB Stream, with an AWS Lambda trigger to process the data and publish to an SNS topic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What happens if there is an explicit deny in an IAM policy?

A

All other allows are overriden.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the correct tool to use for mitigating DDoS attacks?

A

AWS Shield Advanced

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the best way to take data from an EC2 application with an RDS database, and push it through a distributed processing system?

A

On the EC2 instance, create a function or procedure to invoke a Lambda function. Configure the function to send event notifications to an SQS queue to be processed by the distributed system.

17
Q

What two AWS services could you use to store web session data?

A

ElastiCache and DynamoDB

18
Q

Does Amazon ECS support resource-based policies?

A

No - you need to use IAM (execution) roles instead.

19
Q

What’s the best way to get detailed monitoring of your RDS instance, including percentage of CPU bandwidth and memory used by each process?

A

Enabling enhanced monitoring in RDS

20
Q

How would you enable a lot of employees to use S3 to store their personal documents?

A

Set up a Federation Proxy or Identify provider and use AWS Security Token Service to generate temporary tokens and set up an IAM Policy and Role to allow access to S3.

21
Q

List the standard EC2 Cloudwatch metrics

A

Broad statistics:

  • CPU Utilisation
  • Disk read and write
  • Network in/out
22
Q

How would you protect a serverless, API application in times of large traffic spikes?

A

Enable throttling limits and result caching in API Gateway

23
Q

What is an HTTP 504 error?

A

A Gateway Timeout server error, caused but it not being able to communicate with an upstream server in time

24
Q

Given a company that needs to have a minimum of two EC2 instances for its normal application workload, and that they want it to be highly available and fault tolerant, scaling up to a maximum of six EC2 instances for high loads, how would you size the auto-scaling groups across AZs to facilitate this?

A

Create an Auto Scaling group with two instances in each AZ, and a maximum capacity of six instances.

25
Q

Which AWS service do you use to connect on premises Active Directory to AWS?

A

AWS Directory Service AD Connector

26
Q

How would you ensure your RDS database can only be accessed using an access token or profile credentials?

A

Enable IAM DB Authentication

27
Q

What is the most secure option to keep a Lambda function’s API keys and database credentials from being read by other members of the team?

A

Create a new KMS key and use it to enable encryption when creating the function.

28
Q

What is AWS Rekognition?

A

Amazon’s AI image recognisation platform

29
Q

What is AWS Inspector?

A

Amazon’s automated vulnerability scanner

30
Q

What is Amazon Macie, and what does it do?

A

Machine learning powered data security and privacy service.

Tells you where your sensitive data is and where your risks/vulnerabilities are.

31
Q

What are DynamoDB streams?

A

A stream of information about the data that has changed in a Dynamo database. Allows for event driven programming.

32
Q

What feature must you enable to enable DynamoDB global tables?

A

DynamoDB Data Streams

33
Q

How does object level versioning differ from Object Lock?

A

Versioning allows items to be overwritten at a later date. With object lock an object is immutable.

34
Q

If you need to filter messages going from SNS into SQS, which application should the filtering be done in?

A

SNS

35
Q

What types of attacks can AWS Web Application Firewall be used to block?

A

SQL injection and cross site scripting

36
Q

What does VPC sharing allow you to do?

A

Allows you to share subnets with other AWS accounts in the same organisation

37
Q

What does VPC peering allow?

A

Network communication between two VPCs to allow for privately routed traffic

Solutions Architect - Revised Subjects (SAA-C02) (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions