Design for New Solutions Flashcards

1
Q

What types of attacks can AWS Shield Advance protect against

A

DDoS only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In AWS Service Catalog, what should you use to allow specifying a role for a product in the portfolio?

A

Launch constraints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Two ways to run containers on AWS

A

ECS or Kubernetes (EKS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What Oracle licenses allow version 12c

A

SE2 or Enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How to automatically purge DynamoDB entries after a certain amount of time

A

Set an attribute with the expiration time value and enable Time to Live on the DynamoDB table for that attribute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Best way to provide credentials to members of an IT Operations group to access EC2 instances

A

Configure IAM role access for AWS Systems Manager Session Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

In AWS Service Catalog, what should you use to restrict the configuration parameters available for the user when they launch the product?

A

Template constraints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How do you define service actions for AWS Service Catalog?

A

With AWS System Manager documents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Tool for streaming and analyzing event logs?

A

Amazon OpenSearch Service using CloudWatch Logs and AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Tool to share data in S3 via AWS Marketplace

A

AWS Data Exchange

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to protect ECS from SQL injection attacks

A

AWS WAF on an Application Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Database to use for fast analytic queries of time series data?

A

Amazon Timestream magnetic store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What do you do when you’re running into limitations with Amazon Kinesis Data Streams?

A

Use Amazon Managed Streaming Service for Kafka (Amazon MSK)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the correct CLI command to integrate a Lambda with API Gateway?

A

aws apigateway put-integration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How to use CloudFormation to deploy multiple stacks with one root stack and prevent them from sharing information outside of this stack group

A

Nested stacks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How to fix a DynamoDB table that has gotten too large

A

First, archive as much data as possible. Then, export the remaining data and import it into a new table.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Database to use for high throughput writes of time series data?

A

Amazon Timestream memory store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What tool to run and scale big data workloads?

A

Amazon EMR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

For a cross team application, is it more efficient to use AWS CodePipeline in multiple team accounts or a single DevOps account?

A

A single DevOps account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

When to use Amazon EKS over Amazon ECS with Fargate?

A

When you need your containerized applications to support an open-source API.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How to group EC2 instances for patching.

A

In AWS Systems Manager Patch Manager, create different patch groups using the tag key “Patch Group”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What must resources accessing an EFS file system have in common?

A

They must all be part of the same VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What AWS database services offer multi-region multi-master?

A

DynamoDB only

24
Q

What type of Step Function workflow is suitable for short-duration idempotent tasks?

A

Synchronous/Asynchronous Express Workflows

25
Q

Best way to automatically generate metadata for uploaded images to dynamically add them to an online catalog

A

Trigger a Lambda when images are uploaded to S3 to kick off AWS Step Functions.

26
Q

How long can Amazon Kinesis Data Streams store data?

A

24 hours by default. Can be extended to up to 7 days max

27
Q

What type of Step Function workflow is suitable for long-running, non-idempotent tasks?

A

Standard Workflows

28
Q

After an identity ID is used in a GetCredentialsForIdentity request to an Amazon Cognito identity pool, what do you do with the response to get AWS API credentials?

A

Nothing. AWS API credentials are returned in the response.

29
Q

Is Oracle Data Guard available on RDS?

A

No

30
Q

Tool for simple search and analytics on data in various locations using SQL queries?

A

Amazon OpenSearch

31
Q

Build a response to human speech

A

Amazon Lex

32
Q

Build a chatbot

A

Amazon Lex

33
Q

Simplest solution to grant a free trial of an application that can’t be downloaded and installed locally

A

Amazon AppStream

34
Q

How to check conditions in CloudFormation

A

Fn::If

35
Q

Highest Oracle versions allowed with SE and SE1 licenses

A

11g

36
Q

Tool to run Oracle RAC

A

VMware Cloud on AWS and use Oracle Recovery Manager for S3 backups

37
Q

Tool to provide Internet access to an EC2 instance in an AWS Wavelength Zone?

A

Carrier gateway

38
Q

How to join VMware Cloud on AWS instances to an AD domain

A

Add a VMware Cloud NSX CGW Firewall rule

39
Q

Tool to apply resources created in CloudFormation to some or all Organizational Units?

A

CloudFormation StackSets with service-managed permissions. Deploy to organization or organizational units.

40
Q

Name the AWS streaming services

A

Amazon Kinesis and Amazon Managed Streaming Service for Kafka (Amazon MSK)

41
Q

Can Route 53 consolidate dynamic and static Cloudfront distributions under one alias?

A

No

42
Q

How to join EC2 Linux instances to an AD domain

A

Use a Kerberos client package to perform a Realm Join

43
Q

What tool to automate data movement and transformation between AWS compute and storage services?

A

AWS Data Pipeline

44
Q

Service for converting text to speech

A

Amazon Polly

45
Q

How to set variables for CloudFormation

A

Input parameters

46
Q

What S3 routing to find the fastest connection

A

S3 Latency-based routing

47
Q

Is a secondary Elastic Network Interface the same thing as a secondary IP?

A

Nope!

48
Q

How to charge per-request pricing for AWS Lambda usage

A

API Gateway Serverless Developer Portal to create API keys for subscribers and use AWS Marketplace to create usage plans using metrics from a metering IAM Role

49
Q

How to handle traffic boosts after holidays

A

Scheduled scaling policy

50
Q

How to allow IoT devices to interact with AWS services?

A

AWS IoT rules

51
Q

How to prevent an Auto Scaling Group from terminating a failed instance so you can look at its logs?

A

Suspend the terminate process in the Auto Scaling Group

52
Q

Your ECS cluster cannot access ECR. What do you do?

A

Set up a NAT Gateway for it to access the Internet

53
Q

How to cache API Gateway requests?

A

API Gateway API Caching

54
Q

Which DB solution provides the best global scalability for mobile applications?

A

DynamoDB

55
Q

How to provide access to your ECR images in a second region?

A

Cross-region replication