Deck Flashcards

1
Q

Does IAM apply to regional assets?

A

No, IAM is universal across the platform

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the root IAM account?

A

The account created when the AWS instance is first setup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Should you use IAM roles or hard coded secrets/keys in programmatic access?

A

IAM roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Do new users have permissions when they are created?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Can you view a new user’s access key id & secret access key after creation?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can you use the access keys to login to the AWS console?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Should the root account have MFA setup?

A

Yes, always

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

True or False: AWS recommends that EC2 instances have credentials stored on them so that the instances can access other resources (such as S3 buckets).

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the best way to enable your EC2 instance to read files in an S3 bucket?

A

Create an IAM role with read access to S3 and assign the role to the EC2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is an IAM Policy?

A

A JSON document which defines one or more permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What IAM entity can you use to delegate access to your AWS resources to users, groups or services?

A

IAM Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the EC2 Options

A

On Demand, Reserved, Spot, Dedicated Hosts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the Reserved EC2 Option

A

provides you with a capacity reservation, and offer a significant discount on the hourly charge for an instance. 1 or 3 year term reservation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

FIGHTDRMCPX

A

FPGA, IOPS, Graphics, High Disk Throughput, Cheap General Purpose(T2 Micro), Density, Ram, Main choice for general purpose apps(M), Compute, Graphics(Pics), Extreme Memory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Amazon EBS?

A

Elastic Block Storage (disk)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What EBS type would I use for more than 10000 IOPS?

A

IO1 aka, not GP2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What EBS type would I use for less than 10000 IOPS?

A

GP2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the On Demand EC2 Option

A

Allows you to pay a fixed rate by the hour or second with no commitment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the Spot EC2 option

A

enables you to bid whatever price you want for the instance - instances are brought online when the price drops at or below your bid and then terminated when the price goes back up

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the dedicated hosts EC2 option

A

Physical EC2 server dedicated for your use.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

True or False: When a sport EC2 instance is terminated by Amazon, you will not be charged for the partial hour of use

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What types of SSD storage does Amazon offer for EC2?

A

General Purpose SSD and Provisioned IOPS SSD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What types of Magnetic storage does Amazon offer for EC2?

A

Throughput Optimized HDD, Cold HDD, and Magnetic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is an EC2 Security Group

A

Virtual Firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What types of Load balancers exist on Amazon

A

Application, Network, and Classic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are application load balancers

A

Best suited for load balancing HTTP/S traffic and operate at layer 7

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are network load balancers

A

Best suited for TCP traffic where extreme performance is needed, operates at layer 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are classic load balancers

A

Legacy elastic load balancers, does both layer 4 and layer 7

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

With a classic load balancer, what happens when your application stops responding

A

Load balancer responds with a 504 error

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is the X-Forwarded-For header

A

Header that contains the actual client IP Address for a request that came through a classic load balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is Amazon Route53

A

Amazon DNS service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What services can you map domain names to with Route53

A

EC2 instances, Load Balancers, S3 Buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What do all AWS CLI commands start with

A

AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

How much access should I grant to CLI users

A

The least amount needed to do their job

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Should users be assigned to groups

A

Yes, this is preferred way of granting permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

How can you access Amazon services from EC2 instances without an access key

A

Use IAM Roles assigned to the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is the preferred way of granting access to Amazon services for EC2 instances

A

IAM Roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What controls what an IAM Role can do

A

JSON Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

When do changes to policies on a role take affect

A

Immediately

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Can you attach or detach a role from a running EC2 instance

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

If you create an EBS volume from an encrypted snapshot, is the newly created volume encrypted?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

If you create an EBS volume from an unencrypted snapshot, is the newly created volume unencrypted?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

If you create an EBS volume from an encrypted snapshot, is the newly created volume unencrypted?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

If you create an EBS volume from an unencrypted snapshot, is the newly created volume encrypted?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Do your EC2 instances need to be in the same availability zone as the EBS volumes they use?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

When creating a volume from a snapshot, can you change whether the drive is encrypted or not?

A

No, the un/encryption is all based on the snapshot itself and cannot be changed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What are the two ways for encrypting a root EBS drive?

A

Using the OS, like Bitlocker, or by taking a snapshot in AWS Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is the preferred way of encrypting a root EBS drive?

A

Using the AWS Console and a snapshot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Can you encrypt an unencrypted EBS snapshot?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

How do you encrypt an unencrypted EBS snapshot?

A

Create a copy of the snapshot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is Amazon RDS

A

Relational Database Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What is Amazon Elasticache

A

Web service that makes it easy to deploy, operate, and scale an in-memory cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What two open-source in-memory caching engines are supported by Elasticache

A

Memcached and Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Is Amazon RDS service for OLTP or OLAP

A

OLTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What is Amazon’s NoSQL Db?

A

DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What is Amazon’s OLAP service?

A

Redshift

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

By default, can resource security groups talk to one antoher?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

How can you make it so one security group can talk to another?

A

Define an inbound rule for the target security group from the source security group. i.e. Db group and web server group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What are the two types of RDS backups in AWS?

A

Automated backups and Database snapshots

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

How can you restore a RDS db from an Automated Backup

A

You can restore to any point within a retention period

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

How long is the retention period for an Automated Backup

A

one to 35 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

True or False: Automated RDS backups take a full snapshot daily

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Do Automated backups store transaction logs throughout the day?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

How accurate is a recovery from an Automated Backup for RDS

A

Down to a second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Where does Amazon store the Automated backups

A

In a S3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Ture or False: When you restore a RDS from a backup,, a new database is created

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

True or False: When you restore a RDS from a Automated Backup, a new database is created

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

True or False: When you restore a RDS from a snapshot, a new database is created

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Does a RDS instance restored from a backup get a new DNS pointer?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Can you encrypt an existing RDS instance in place?

A

No, you must create a snapshot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

In RDS, what is Multi-AZ

A

When you select to have a database live in multiple availability zones for disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

In RDS, is Multi-AZ designed and used for high availability?

A

No, for disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

Do you ever use a public IP when working with a RDS database instance?

A

No, never use public IP - always use the DNS name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

When should you use the DNS name to connect to a RDS instance?

A

Always

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

True or False: RDS Multi-AZ is used for disaster recovery only

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

True or False: RDS Multi-AZ is used for increasing performance

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

How would I increase performance of my RDS instance?

A

Using a read replica

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What is a RDS read replica

A

Automatically updated RDS instances used to increase read throughput for your database instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

Can you have read replicas of a read replica?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

True or False: RDS Read replica is used for disaster recovery only

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

True or False: RDS Read Replica is used for increasing performance

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

True or False: Each read replica of a RDS instance will have its own DNS endpoint

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

Can you have Multi-AZ for read replicas?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

Can you have both Read Replica and Multi-AZ RDS instances?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

True or False: A read replica can be promoted to become its own RDS instance?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

What does promoting a read replica to its own database do?

A

Creates a RDS instance from the read replica and breaks replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

True or False: You can’t have read replicas in a second region?

A

False, you can

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

Which Elsticache provider do you use to have Multi-AZ

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

Does the Memcached Elasticache provider allow for Multi-AZ

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

Which Elasticache provider should I use if object caching is my primary goal?

A

Memcached

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

Which Elasticache provider should I use if I want the simplest possible approach

A

Memcached

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

Which Elasticache provider should I use if I am planning on running large cache nodes, and require multithreaded performance with utilization of multiple cores?

A

Memcached

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

Which Elasticache provider should I use if I need to scale my cache horizontally as i grow?

A

Memcached

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

Which Elasticache provider should I use if I have more advanced datatypes

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

Which Elasticache provider should I use if sorting and ranking datasets in memory will help me

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

Which Elasticache provider should I use if persistance of my keystore is important

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

Which Elasticache provider should I use if I want to run Multi-AZ

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

If my database is under a lot of stress/load and is read heavy executing many OLTP, what Amazon service should i use to alleviate this?

A

Elasticache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

If my database is under a lot of stress/load and is executing OLAP, what Amazon service should I use to alleviate this?

A

Redshift

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

Which Elasticache provider should I use if I need pub/sub capabilities?

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

Which Elasticache provider should I use if I am implementing leaderboards?

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
102
Q

What is S3?

A

Simple Storage Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
103
Q

What does S3 provide to customers?

A

secure, durable, highly-scalabale object storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
104
Q

What is the main purpose of S3?

A

To store objects, not operating systems or databases

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
105
Q

Can I use S3 to store/run a database?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
106
Q

Can I use S3 to store/run an operating system?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
107
Q

Can I use S3 to store a webpages, files, or images?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
108
Q

Is S3 a safe place to store your files?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
109
Q

Does S3 store your objects across multiple devices and facilities?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
110
Q

Does S3 have high availability built in?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
111
Q

True or False: S3 has an element of disaster recovery built in?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
112
Q

How big can one file be in S3?

A

5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
113
Q

True or False: S3 provides unlimited storage

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
114
Q

True or False: S3 limits your total amount of storage

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
115
Q

If I have a 4.5TB file, can I store this in S3?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
116
Q

If I have a 5.1TB file, can I store this in S3?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
117
Q

What are folders called in S3?

A

Buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
118
Q

What is a bucket in S3?

A

Location files are stored (folder)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
119
Q

True or False: S3 bucket names must be unique globally

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
120
Q

What HTTP code is returned when you successfully upload a file to S3?

A

200 OK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
121
Q

What data consistency does S3 provide for PUTs of new objects?

A

Read after write

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
122
Q

How long do I have to wait to access my file in S3 after I have finished uploading it?

A

You don’t have to wait at all

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
123
Q

What data consistency does S3 provide for overwriting an existing file with a PUT or DELETEs on a file?

A

Eventual Consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
124
Q

True or False: S3 is a key-value store

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
125
Q

An S3 object consists of _______

A

Key, Value, Version ID, Metadata, Subresources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
126
Q

Does S3 support versioning of specific files?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
127
Q

Is S3 designed to sustain the loss of 2 facilities at the same time?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
128
Q

What is S3 - IA?

A

S3 for infrequently accessed data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
129
Q

When using S3 - IA, do I pay per data retrieval?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
130
Q

What is S3 - One Zone IA?

A

S3 for infrequently accessed data that is only in one availability zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
131
Q

What is S3 reduced redundancy storage?

A

S3 for data that is easy to recreate, like thumbnails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
132
Q

What is S3 Glacier?

A

Very cheap S3 bucket for archiving data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
133
Q

How long do you have to wait before accessing your data in Glacier?

A

3-5 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
134
Q

Which S3 storage class has the highest availability and durability?

A

Standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
135
Q

What is S3 Intelligent tiering?

A

automatically moves your S3 buckets to the most cost effective tier based on how you access each object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
136
Q

What is S3 intelligent tiering used for?

A

Unknown or unpredictable access patterns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
137
Q

What are the two tiers for S3 intelligent tiering?

A

Frequent and infrequent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
138
Q

How long does data have to go unaccessed before it is moved to the infrequent tire in S3 intelligent tiering?

A

30 consecutive days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
139
Q

How much does S3 Intelligent tiering cost?

A

$0.0025 per 1000 objects/month

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
140
Q

What do you get charged for in S3

A

Storage per GB, Requests, Storage management pricing, data management pricing(for moving data out of S3), Transfer Acceleration (using cloudfront)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
141
Q

True or False: Newly created buckets in S3 are publicly available?

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
142
Q

True or False: Newly created buckets in S3 are private?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
143
Q

What are the mechanisms for controlling access to your S3 buckets?

A

Bucket policies and access control lists

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
144
Q

What is an S3 Bucket Policy

A

Access control policy at the bucket level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
145
Q

What is a S3 Access Control List

A

Access control policy at the object level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
146
Q

Can I configure my S3 bucket to log accesses?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
147
Q

Can I configure my S3 bucket to log accesses and store those logs in another bucket?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
148
Q

Does S3 support encryption on objects?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
149
Q

Will S3 encrypt your objects for you?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
150
Q

True or False: I must encrypt files myself before uploading them to S3 if I want them to be encrypted

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
151
Q

True or False: I cannot log API actions at the bucket level in S3

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
152
Q

What tool can I use to log actions at the bucket level in S3

A

CloudTrail, for additional cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
153
Q

Can I monitor the performance of requests into my S3 buckets?

A

Yes, using CloudWatch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
154
Q

Can you upload a publicly available file to a private bucket?

A

No, the bucket must be publicly available

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
155
Q

If a bucket is publicly available, are all the objects automatically publicly available?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
156
Q

What types of encryption does S3 support?

A

In transit and at rest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
157
Q

What types of in transit security are supported by S3?

A

SSL/TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
158
Q

What types of at rest encryption does S3 support?

A

SSE-S3, SSE-KMS, SSE-C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
159
Q

Can I encrypt existing objects in my S3 bucket?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
160
Q

Can I provide my own keys for S3 encryption?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
161
Q

How would I enforce S3 object encryption on my bucket for all newly uploaded files?

A

Using a bucket policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
162
Q

What encryption parameter should you include to encrypt your files at upload time?

A

x-amz-server-side-encryption: AES256 or ams:kms

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
163
Q

Does S3 support CORS access?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
164
Q

What is CloudFront?

A

Amazon’s CDN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
165
Q

What is an Edge Location in CloudFront?

A

Geographically dispersed data centers that you can select to host your CDN in

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
166
Q

What is an Origin in CloudFront?

A

This is the origin of all the files that the CDN will distribute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
167
Q

What are valid Origins for a CloudFront CDN?

A

S3 Bucket, EC2 instance, Elastic Load Balancer, or Route53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
168
Q

What is a CloudFront Distribution

A

Name given to a CDN which consists of a collection of edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
169
Q

What is a CloudFront Web Distribution?

A

A distribution typically used for WebSites

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
170
Q

What is RTMP in CloudFront?

A

A distribution used for media streaming on the CDN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
171
Q

What does RTMP stand for in CloudFront

A

Real Time Messaging Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
172
Q

If I want to optimize performance for global users of my S3 backed website, what tool should I use?

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
173
Q

Can I use CloudFront with any non-AWS Origin server?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
174
Q

Is a CloudFront edge location the same thing as an AWS Region or Availability Zone?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
175
Q

True or False: CloudFront edge locations are read-only

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
176
Q

How long are objects cached in an edge location?

A

For the TTL (Time to LIve)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
177
Q

True or False: I cannot manually clear an edge location cache

A

False, you can

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
178
Q

True or False: Manually clearing an edge location cache is free

A

False, it costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
179
Q

I have content on my website that I want to restrict to paid users only and I’m using CloudFront for CDN. How do I achieve this?

A

By using the Signed URLs/Signed Cookies option

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
180
Q

True or False: The first time a user access a file using cloudfront, the file will load fast

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
181
Q

When does a file get cached in an edge location by cloudfront?

A

The first time a user access the file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
182
Q

How would I optimize performance for my GET-Intensive S3 workloads?

A

CloudFront CDN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
183
Q

How would I optimize performance for my Mixed Request Type workloads

A

Using a random key name instead of a sequential one

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
184
Q

What are the S3 storage classes?

A

S3, S3 - IA, S3 - One Zone IA, S3 - Reduced Redundancy, Glacier

185
Q

What is the default TTL for CloudFront cache?

A

24 hours

186
Q

True or False: If you want to enable a user to download private data directly from S3, you can use a signed URL

A

True

187
Q

What is the largest file size you can transfer to S3 using a PUT operation?

A

5GB

188
Q

What are the ways to trigger an AWS lambda

A

HTTP Triggers and event triggers

189
Q

What is API Gateway

A

The API proxy service

190
Q

What languages are supported by Lambda

A

Node.js, Java, Python, C#, Go

191
Q

If I execute less than 1 million requests per month, will I incur a charge for my lambda functions?

A

No

192
Q

If I execute more than 1 million requests per month, will I incur a charge for my lambda functions?

A

Yes, $0.20 per 1 million requests

193
Q

Is there a charge for the duration my lambda functions run?

A

Yes, $0.00001667 per GB-Second

194
Q

True or False: Lambda scales out (not up) automatically

A

True

195
Q

Are my lambda functions independent, meaning 1 trigger means 1 function?

A

Yes

196
Q

Is lambda a compute service?

A

Yes

197
Q

What services in AWS are serverless?

A

Lambda, S3, API Gateway, Dynamo Db

198
Q

Can my lambda function trigger other lambda functions?

A

Yes

199
Q

What service allows you to debug your lambda functions

A

AWS X-Ray

200
Q

Are lambdas limited to interacting with other services that are in the same region as the lambda itself?

A

No

201
Q

True or False: An AWS API Gateway exposes HTTPS Endpoints to define a RESTful API

A

True

202
Q

Can I track and control API usage using an AWS API Gateway?

A

Yes

203
Q

Can I cache API Responses with API Gateway

A

Yes, for a specified TTL

204
Q

What are the Lambda triggers?

A

API Gateway, AWS IoT, Alexa Skills Kit, Alexa Smart Home, CloudFront, CloudWatch events, CloudWatch Logs, CodeCommit, Cognito Sync Trigger, DynamoDb, Kinesis, S3, SNS

205
Q

Does AWS Lambda support versioning

A

Yes

206
Q

Can I have more than one version of my Lambda published?

A

Yes

207
Q

What are the ARN types for Lambda functions

A

Qualified and Unqualified

208
Q

What is a Qualified ARN

A

The function ARN with the version suffix

209
Q

What is an Unqualified ARN

A

The function ARN without the version suffix

210
Q

What is a Lambda alias

A

A name that points to a particular version of your lambda function

211
Q

Can I change a lambda function version after I have published it?

A

No, you must edit the $LATEST version

212
Q

Can I split traffic across two versions of a lambda?

A

Yes

213
Q

How would I split traffic across two versions of a lambda?

A

Using an alias

214
Q

Can I include the $LATEST version in an alias that splits traffic between two versions of a lambda

A

No, you can only used published versions

215
Q

What are step functions?

A

These allow you to visualize and test your serverless applications by providing a GUI to arrange and visualize the components of your applications

216
Q

What is AWS X-Ray

A

A service that collects data about requests that your application serves and provides tools you can use to view, filter, and gain insights into that data to identify issues

217
Q

How does data flow in X-Ray

A

X-Ray SDK -> X-Ray Daemon -> X-Ray API -> X-Ray Console

218
Q

What services does X-Ray work with?

A

Elastic Load Balancers, Lambda, API Gateway, EC2, Elastic Beanstalk

219
Q

What programming languages does X-Ray support

A

Java, Go, Node.js, python, Ruby, .NET

220
Q

True of False: One can import a API definition to API Gateway

A

True

221
Q

What specification should an API Definition be written in to import it to API Gateway

A

Swagger v2.0/OpenAPI

222
Q

What is the steady state default throttling setting for API Gateway

A

10000 requests per second

223
Q

What is the maximum concurrent requests for API Gateway

A

5000

224
Q

What error will you receive if you exceed your request throttling limits with API Gateway

A

429 Too Many Requests

225
Q

If a caller submits 10000 requests evenly across a one second time span, will API Gateway process them all?

A

Yes

226
Q

If a caller submits 10000 requests in the first millisecond of a one second time span, will API Gateway process them all?

A

No, only 5000 will get handled, the others will get a 429

227
Q

If a caller submits 5000 requests in the first millisecond and then evenly spreads 5000 requests across the remaining 999 milliseconds in a one second time span, will API Gateway process them all?

A

Yes

228
Q

Can you use API Gateway to pass through SOAP requests?

A

Yes

229
Q

Can you lift the DynamoDb default throttling limits?

A

Yes

230
Q

What are the data models supported by DynamoDB

A

document and key/value pairs

231
Q

What physical storage technology is utilized by DynamoDb

A

SSDs

232
Q

Do DynamoDBs get spread across regions?

A

Yes, spread across three geographically distinct data centers

233
Q

What data consistency models does DynamoDb support?

A

Eventual Consist Reads and strongly consistent reads

234
Q

In DynamoDb, what is Eventually Consistent reads?

A

Consistency across all copies of data is reached within a second.

235
Q

What DynamoDb consistency model offers the best read performance?

A

Eventually Consistent Reads

236
Q

In DynamoDB, what is Strongly Consistent Reads?

A

Reflects all writes that received a successful response prior to the read

237
Q

In DynamoDb, what specifications can i use in a stored document?

A

JSON, HTML, XML

238
Q

What types of Primary Keys does DynamoDb use?

A

Partition key and composite key

239
Q

What is a partiion key in dynamodb

A

A unique attribute(column) on teh data i.e. UserId

240
Q

What is a composite key in dynamodb

A

A partition key coupled with a sort key

241
Q

When should I use a composite key instead of a partition key

A

When the partition key is not unique to my table i.e. forum posts

242
Q

If I have multiple records in a DynamoDb table that will have the same partition key, what primary key type should I use?

A

Composite Key

243
Q

Does DynamoDb allow for restricting users’ access to only their own data?

A

Yes, via an IAM Condition

244
Q

How would I restrict DynamoDb access so that a user can only access their own data?

A

Using an IAM Condition

245
Q

What does DynamoDb consist of?

A

Tables, items, and Attributes

246
Q

Hos is general access to a DynamoDb database controlled?

A

IAM Policies

247
Q

If I want to enable fine grained access control for my dynamoDb, i.e. row level security, what IAM condition parameter would I use?

A

dynamodb:LeadingKeys

248
Q

What are the types of indexes supported by DynamoDb

A

Local Secondary Index and Global Secondary Index

249
Q

In dynamodb, what is a local secondary index?

A

created at table creation time, same partition key as your table, different sort key, increases query performance for the composite key used to define it

250
Q

In dynamodb, what is a global secondary index?

A

created whenever, different partition and sort key, increases query performance when using the composite key used to define it

251
Q

Does a local secondary index use the same partition key as the table?

A

Yes

252
Q

Does a local secondary index us the same sort key as the table?

A

No

253
Q

Does a global secondary index use the same partition key as the table its on?

A

No

254
Q

Does a global secondary index use the same sort key as the table its on?

A

No

255
Q

When can you create a local secondary index?

A

At table creation time

256
Q

When can you create a global secondary index?

A

Any time

257
Q

Can I create a local secondary index after i have created my table?

A

No

258
Q

What are the ways to get data out of a dynamodb table?

A

Scan and Query

259
Q

What is a dynamodb query?

A

Operation that finds items in a table based on the primary key

260
Q

For a dynamodb query, what is a ProjectionExpression?

A

The equivalent of the select statement for sql - filters the attributes returned for a given query

261
Q

Can you reverse the order that a query returns results in for DynamoDb?

A

Yes

262
Q

What parameter would I use to reverse the query results in dynamo db?

A

ScanIndexForward

263
Q

What consistency model do queries use by default?

A

Eventually Consistent

264
Q

Can I use a different consistency model for my dynamodb queries?

A

Yes, can set to Strongly Consistent

265
Q

What is a scan operation in DynamoDb

A

an operation that examines every item in the table

266
Q

Can you limit attributes returned by a scan operation?

A

Yes

267
Q

How would I limit the attributes returned by a scan operation?

A

Use the ProjectExpression parameter

268
Q

Does a scan operation filer the data on the server side?

A

No, it dumps the data out, then filters it

269
Q

What is the most efficient way to get data out of a dynamodb table?

A

Query

270
Q

True or False: A scan dumps the entire table to memory, then filters

A

True

271
Q

Can you page results from a dynamo query or scan

A

Yes

272
Q

What is the default order of results for a dynamodb data operation?

A

Ascending Order

273
Q

What is DynamoDb provisioned throughput?

A

Throttling for Dynamodb measured in capacity units configured when you create your table

274
Q

How do you calculate how many read units are needed for a strongly consistent table?

A

you take the size of each item / 4KB, round up to the nearest whole number, then multiply by the number of reads per second

275
Q

How do you calculate how many read units are needed for an eventually consistent table?

A

You take the number needed for a strongly consistent table and divide by two

276
Q

How do you calculate how many write units are needed?

A

You take the size of each item, divide by 1 KB, round up to the nearest whole number, multiply by the number of writes per second

277
Q

What is one write capacity unit?

A

1 x 1 KB Write per second

278
Q

What is one read capacity unit?

A

1 x 4 KB Strongly consistent read OR 2 x 4 KB Eventually consistent reads per second

279
Q

What is the DynamoDb on-demand capacity model?

A

Allows your DB to automatically scale for the workload

280
Q

If I have unpredictable or unknown capacity needs, what capacity model should I use?

A

On demand

281
Q

Can I change the capacity model my dynamodb uses after its created?

A

Yes

282
Q

How often can I change the dyanmodb capacity model

A

Once per day

283
Q

What is DAX

A

DynamoDb Accelerator

284
Q

What is DynamoDb Accelerator (DAX)?

A

A Fully managed, clustered in-memory cache for dynamodb

285
Q

How much faster is DAX?

A

10x read performance

286
Q

Does DAX improve write performance?

A

No

287
Q

What consistency model and operation does DAX use if there is a cache miss?

A

Eventually Consistent GetItem

288
Q

What caching strategies are available in ElastiCache

A

Lazy Loading and Write Through

289
Q

What is the lazy loading strategy in ElastiCache

A

Loads the data into the cache only when it’s necessary

290
Q

When using the lazy loading strategy in ElastiCache, what happens when there is a cache miss?

A

ElastiCache returns null and Your application fetches the data from the database and then writes the data into the cache

291
Q

What is write through caching strategy for ElastiCache

A

Adds or updates data to the cache whenever data is written to the database

292
Q

True or False: DAX only supports write-through caching strategy

A

True

293
Q

True or False: You can use DAX or ElastiCache with DynamoDb

A

True

294
Q

How would I avoid stale data in my ElastiCache when using the Lazy Loading strategy?

A

Using a TTL

295
Q

What are DynamoDb transactions?

A

ACID Transactions

296
Q

What does ACID stand for?

A

Atomic, Consistent, Isolated, Durable

297
Q

Can I read/write data across multiple tables in a DynamoDb transaction?

A

Yes

298
Q

Do DynamoDb transactions allow for me to check a pre-requisite condition before writing to a table?

A

Yes

299
Q

What is DynamoDb TTL?

A

TTL attribute defines an expiry time for your data after which the data is marked for deletion

300
Q

How long can it take for an item to be deleted after the TTL expires in dynamodb?

A

Up to 48 hours

301
Q

What are DynamoDb streams?

A

Time-ordered sequence of item level modifiations

302
Q

True or False: A dynamoDb stream is like an audit trail for an item

A

True

303
Q

Are my DynamoDb streams encrypted?

A

yes, at rest

304
Q

How long are my DynamoDb streams stored?

A

24 hours

305
Q

What item update lifecycle hooks can I use for dynamodb streams?

A

Before and after

306
Q

How does my application access dynamodb streams?

A

Via a separate API from the DynamoDb one

307
Q

True or False: DynamoDb streams are NOT recorded near-real time

A

False

308
Q

Can I use DynamoDb streams as a Lambda trigger?

A

Yes

309
Q

If I exceed the provisioned throughput for my DynamoDb, what exception do I get?

A

ProvisionedThroughputExceededException

310
Q

What is exponential backoff for provisioned throughput in DynamoDB?

A

Waits progressively longer to retry a request when failed requests happen

311
Q

When using exponential backoff, if your request still has not succeeded after one minute, what does this indicate?

A

That your request may be too large for the provisioned throughput on your table and that you may need to increase the limits

312
Q

True or False: A local secondary index can be deleted at any time

A

False

313
Q

True or False: A global secondary index can be deleted at any time

A

True

314
Q

What service should you use to securely store confidential information like credentials and license codes?

A

Systems Manager Parameter Store

315
Q

What API Call should you use to get multiple items from a DynamoDb table

A

BatchGetItem

316
Q

What is KMS

A

Key Management Service

317
Q

Are KMS Encryption Keys Regional?

A

Yes

318
Q

True or False: KMS Encryption Keys are globally available

A

False

319
Q

Can I export my customer master key?

A

No

320
Q

What does a customer master key consist of?

A

alias, creation date, description, key state, key material

321
Q

What terminal command do you have to run in order to use the AWS CLI?

A

aws configure

322
Q

What CLI command do I use to encrypt a file using KMS?

A

aws kms encrypt

323
Q

What CLI command do I use to decrypt a file using KMS>

A

aws kms decrypt

324
Q

What does the CLI command aws kms encrypt do

A

encrypts a local file using KMS

325
Q

What does the CLI command aws kms decrypt do

A

decrypts a local frile using KMS

326
Q

What does the CLI command aws kms re-encrypt do

A

re encrypts an already encrypted file by decrypting it to plain text, encrypting, and immediately destroying the plain text

327
Q

What does the CLI command aws kms enable-key-rotation do

A

Turns on key rotation so that they key is changed every year

328
Q

What is KMS envelope encryption

A

The process of encrypting your envelope key

329
Q

Describe KMS envelope enccryption

A

We use the CMK to encrypt the key that is used to encrypt our data

330
Q

How long does it take to delete an encryption key

A

7 to 30 days

331
Q

What is SQS?

A

Simple Queue Service

332
Q

How big can my SQS message be?

A

256 KB

333
Q

What types of queues are available on SQS

A

Standard queues and FIFO Queues

334
Q

Do standard SQS queues have ordering

A

No

335
Q

Are standard SQS queues guaranteed to deliver a message at least once?

A

Yes

336
Q

Are standard SQS queues guaranteed to delivery a message only once?

A

No

337
Q

True or False: FIFO SQS queues have an order

A

True

338
Q

True or False: FIFO SQS queues delivery a message exactly once

A

True

339
Q

I need to guarantee my message is only processed one time - which SQS queue type should I use

A

FIFO

340
Q

What is the transaction limit for a FIFO SQS queue

A

300 transaction per second

341
Q

What is the transaction limit for a Standard SQS queue

A

There isn’t one

342
Q

True or False: SQS is Pull based

A

True

343
Q

True or False: SQS is push based

A

False

344
Q

What is the time span that a message can live in a SQS queue?

A

1 minute to 14 days

345
Q

What is the default retention period for SQS messages?

A

4 days

346
Q

What is visibility timeout in SQS?

A

The amount of time that the message is invisible in the SQS queue after a reader picks up that message

347
Q

What is the default visibility timeout

A

30 seconds

348
Q

What is the maximum visibility timeout

A

12 hours

349
Q

What is SWS Long Polling?

A

This is a type of polling that doesn’t return until a message arrives in the queue or the long poll times out

350
Q

What is amazon SNS?

A

Simple Notification Service

351
Q

What is SNS used for?

A

Think push notifications

352
Q

True or False: SNS is instantaneous push-based delivery of notification

A

true

353
Q

What pricing model is used by SNS

A

Pay as you go

354
Q

If I need to use Pull based messaging which service should I use?

A

SQS

355
Q

If I need to use push based messaging, which service should I use

A

SNS

356
Q

True or False: SNS uses a Pub-Sub model

A

True

357
Q

True or False: SQS uses a Pub-Sub model

A

False

358
Q

What format of notification can I send using SNS

A

SMS, Email, SQS, HTTP

359
Q

What is SES

A

Simple Email Service

360
Q

Can SES be used to receieve emails

A

Yes

361
Q

True or False: SES can trigger lambda functions or SNS services when email is received

A

True

362
Q

True or False: SES allows users to send automated emails

A

True

363
Q

True or False: SES can send more than just email

A

False

364
Q

What is Amazon Kinesis

A

An AWS service to send your streaming data to

365
Q

What are Kinesis streams made out of

A

Shards

366
Q

What is kinesis firehose

A

Kinesis without streams or shards

367
Q

What are kinesis analytics

A

Allows you to run SQL queries to send on to a destination

368
Q

What is elasticbeanstalk

A

A service for deploying and scaling web applications developed in various languages

369
Q

What programming languages does ElasticBeanstalk support?

A

Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker

370
Q

What web servers does ElasticBeanstalk support

A

Tomcat, Nginx, Puma, Passenger, and IIS

371
Q

Does ElasticBeanstalk autoscale up and down?

A

Yes

372
Q

What is an ElasticBeanstalk deployment policy

A

Method under which ElasticBeanstalk deploys changes or updates

373
Q

What are the options for an ElasticBeanstalk deployment

A

All at once, rolling, rolling with additional batch, immutable

374
Q

Will I have downtime with an ElasticBeanstalk all at once deployment

A

Yes

375
Q

How does an all at once ElasticBeanstalk deployment work

A

It deploys the new version to all instances simultaneously

376
Q

How do you recover from a failed all at once ElasticBeanstalk deployment

A

You must roll back the changes by re-deploying the original version to all your instances

377
Q

What is an ElasticBeanstalk rolling deployment

A

Deploys the new version in batches

378
Q

How does a rolling deployment work

A

Takes each batch of instances out of service while the deployment takes place

379
Q

Will I experience downtime with a rolling deployment?

A

No

380
Q

What is the negative impact for a rolling deployment

A

Reduced capacity

381
Q

How do I recover from a rolling deployment failure

A

You must perform an additional rolling update to roll back the changes

382
Q

What is rolling deployment with additional batch policy

A

Launches additional batch of instances during update

383
Q

Will I experience downtime during a rolling deployment with additional batch policy

A

No

384
Q

Will I experience any loss of capacity during a rolling deployment with additional batch policy

A

No

385
Q

How do I recover from a failure during a rolling deployment with additional batch policy

A

Perform an additional rolling update to roll back the changes

386
Q

What is immutable deployment in ElasticBeanstalk

A

Deploys a the new version to a fresh group of instances in their own new autoscaling group

387
Q

Will I experience downtime during an immutable deployment

A

No

388
Q

How do I recover from a failure during an immutable deployment

A

Terminate the new auto scaling group, done

389
Q

Can I customize my ElasticBeanstalk environment

A

Yes

390
Q

How would I customize my ElasticBeanstalk environment

A

Using an ElasticBeanstalk configuration file

391
Q

What specifications are supported for an ElasticBeanstalk configuration file

A

YAML and JSON

392
Q

What folder must my ElasticBeanstalk configuration files be in?

A

.ebextensions

393
Q

Does the name of my ElasticBeanstalk configuraiton file matter?

A

No

394
Q

What file extension does my ElasticBeanstalk configuration file need to have

A

.config

395
Q

Where should the .ebextensions folder go for it to configure my ElasticBeanstalk env

A

In the root of the repo

396
Q

Can I put my .config files for ElasticBeanstalk under source control

A

Yes

397
Q

What options do I have for launching an RDS instance

A

Launch within ElasticBeanstalk and Launch outside ElasticBeanstalk

398
Q

Which RDS instance launch strategy should I use for my production instance

A

Outside ElasticBeanstalk

399
Q

What is the systems manager parameter store

A

Place to store sensitive information to share across services

400
Q

What types of data are supported by the systems manager parameter store

A

String, String List, Secure String

401
Q

Does the systems manager parameter store support versioning of parameters?

A

Yes

402
Q

What API Call would you use to extend the time allowed for a SQS message to be processed by a consumer

A

ChangeMessageVisibility

403
Q

What is the maximum timeout for visibility of a message in a SQS queue

A

12 Hours

404
Q

What is the maximum long poll timeout

A

20 Seconds

405
Q

What is AWS Storage Gateway

A

Service used for attaching infrastructure located in a data center to the aws storage infrastructure

406
Q

What are all of the DevOps services prefixed with

A

Code, i.e. CodeCommit, CodeBuild, CodePipeline, CodeDeploy

407
Q

Where can I deploy code using CodeDeploy

A

EC2, on-premise systems, and lambda functions

408
Q

What are the deployment approaches when using CodeDeploy

A

In-Place and Blue/Green

409
Q

What deployment targets can I use an in-place deployment strategy from CodeDeploy for?

A

EC2 and on-premise systems

410
Q

Can I do an in-place deployment from CodeDeploy on a Lamdba

A

No

411
Q

For CodeDeploy, what doe the Blue and Green colors represent

A

Blue are the active deployment and green are the new release

412
Q

What is a CodeDeploy deployment group

A

Set of EC2 instances or Lambda functions to which a new version of the software is to be deployed

413
Q

What is a CodeDeploy Deployment

A

The process and components used to apply a new revision

414
Q

What is a CodeDeploy Deployment Configuration

A

A set of deployment rules as well as success/Failure conditions used during a deployment

415
Q

What is a CodeDeploy AppSpec File

A

Defines the deployment actions you want CodeDeploy to do

416
Q

What is a CodeDeploy revision

A

Everything needed to deploy the new version

417
Q

What is a CodeDeploy Application

A

Unique Identifier for the application you want to deploy

418
Q

What are the fields in a CodeDeploy app spec file?

A

Version, resources, hooks

419
Q

What are the CodeDploy Hooks?

A

BeforeAllowTraffic, AfterAllowTraffic, BeforeInstall, AfterInstall, ApplicationStart, ValidateStart, BeforeBlockTraffic, BlockTraffic, AfterBlockTrffic,ApplicationStop, DownloadBUndle, Install, ApplicationStart, ValidateService, AllowTraffic

420
Q

What fields does an on-premise AppSpec file have

A

version, os, files, hooks

421
Q

What are the three stages of hooks for a CodeDeploy lifecycle

A

Traffic Deregistration, Application Upgrade, Traffic Registration

422
Q

What is BigBAADBrazenIconAboutAllVisualBAAmfs

A

The order of CodeDeploy lifecycle hooks

BeforeBlockTraffic
BlockTraffic
AfterBlockTraffic
ApplicationSTop
DownloadBundle
BeforeInstall
Install
AfterInstall
ApplicationStart
ValidateService
BeforeAllowTraffic
AllowTraffic
AfterAllowTraffic
423
Q

What is CloudFormation

A

Allows you to provision infrastructure using code

424
Q

What specifications does CloudFormation support

A

YAML and JSON

425
Q

Is CloudFormation free to use?

A

Yes

426
Q

What is the only mandatory section for a CloudFormation template?

A

Resources

427
Q

What are the main sections for a CloudFormation template

A

Parameters, Conditions, Resources, Mappings, Transforms

428
Q

What is the serverless appliation model (SAM)

A

An extension of the CloudFormation used to define serverless applications

429
Q

What are the SAM cli commands

A

sam package and sam deploy

430
Q

What is a CloudFormation Nested Stack

A

Allow you to reuse your CloudFormation code

431
Q

If I want to use the output of my CloudFormation stack

as input to another CloudFormation stack, which section would I use?

A

Outputs

432
Q

How can you prevent CloudFormation from deleting your entire stack on failure?

A

Set the Rollback on failure radio button to no in the console or use the –disable-rollback flag with the AWS CLI

433
Q

Which section of the CloudTransformations spec do you use to reference code in an S3 bucket

A

Transforms

434
Q

What is web identity federation

A

Allows users to login to AWS using a 3rd part provider like Facebook, Amazon, or Google

435
Q

What is Amazon Cognito

A

Web Identity Federation provider

436
Q

What is the recommended identity provider for mobile apps running on AWS

A

Cognito

437
Q

What is a Cognito user pool

A

Directories used to managed signup and sign-in functionality for mobile and web applications

438
Q

What are Cognito identity pools

A

These enable you to create unique identifiers for your users and auth them with identity providers

439
Q

What technology does Cognito use to provide a seamless experience for you application

A

Push Synchronization

440
Q

What are the different types of IAM Policies

A

Managed Policies, Customer Managed Policies, Inline Policies

441
Q

What is a IAM managed policy

A

An IAM Policy which is created and administered by AWS

442
Q

What is a IAM Customer Managed Policy

A

An IAM policy which is created and administered by the customer

443
Q

What is a IAM Inline Policy

A

An IAM Policy that is embedded within the user, group or role to which it applied

444
Q

Can an Inline policy apply to more than one object?

A

No

445
Q

What is assume-role-with-web-identity

A

API Provided by STS that allows you to get temporary security credentials for user authenticated by a mobile or web app

446
Q

What is returned from the STS when making an assume-role-with-web-identity call

A

The role’s ARN and ID along with the toke, access key, and expiration

447
Q

What is cross account access

A

This grants access to multiple AWS instances using a single identity

448
Q

What is CLoudWatch

A

A monitoring service that allows you to keep track of your AWS resources and applications running in AWS

449
Q

What does CloudWatch monitor by default on your EC2 instances

A

CPU, Network, Disk, Status Check

450
Q

I want to Monitor RAM usage on an EC2 instance, how would I do that?

A

Create a custom CloudWatch Metric

451
Q

What is the default monitoring interval on EC2 for CloudWatch

A

5 minutes

452
Q

Can I make CloudWatch monitor my EC2 instances on a shorter interval

A

Yes, you can select detailed monitoring which shortens the interval to 1 minute

453
Q

How long does CloudWatch store your data by default

A

Indefinitely

454
Q

Can I get data about an EC2 instance after it is terminated?

A

Yes

455
Q

For custom metrics in CloudWatch, what is the minimum granularity I can have?

A

1 minute

456
Q

What is a CloudWatch alarm

A

A noification for a CloudWatch threshold

457
Q

CloudWatch VS CloudTrail

A

CloudTail is used to track API calls, CloudWatch monitors performance

458
Q

What is AWS Config

A

Records the state of your AWS environment and will notify you of changes

459
Q

What is the default S3 bucket limit per AWS account?

A

100