Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

SAA-CO1 > Design Resilient Architectures > Flashcards

Design Resilient Architectures Flashcards

1
Q

What does IAM comprise of?

A

Users
Groups
Policies
Roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How are policies formatted?

A

In JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What type of access does new users have when they are assigned an Access Key and Secret Access Key

A

Programmatic Access; Cannot use to log into the AWS console.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What can new users utilize their new Access Key and Secret Access Key on?

A

AWS via CLI and API.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What access does a Power User have?

A

Access to all AWS services except the management of groups and users within IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the size limit of S3?

A

0 Bytes to 5 TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the S3 successful upload code?

A

HTTP 200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does S3 consist of?

A
  • Key
  • Value
  • Version ID
  • Metadata
  • Access Control Lists (permissions of objects)
  • Torrent
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

S3 Data Consistency for PUTS of new objects

A

Read after Write (read immediately)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

S3 Data Consistency for overwrites of PUTS

A

Eventual consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

S3 Data Consistency for overwrites of DELETES

A

Eventual Consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Storage that is 99.99% availability, 99.999999999% durability

A

Standard S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is S3 – IA (Infrequently Accessed) ?

A

Data that is Accessed less frequently but requires rapid access. Lower fee than S3 but you are charged a retrieval fee.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is S3 – IA (Infrequently Accessed) One Zone?

A

99.50% availability, Lower cost option, does not require multiple Availability Zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Storage Tier that uses machine learning, automatically moves data to the most cost-efficient tier without performance impact or operational overhead.

A

S3 – Intelligent Tiering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

S3 Glacier

A

Data archiving (Minutes to hours retrieval)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

S3 Glacier Deep Archive

A

Lowest cost storage class with a retrieval time of 12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Use this capability for large uploads for APIs of objects.

A

Multipart Upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Used to move object to different storage tiers.

A

Lifecycle Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How to control access to buckets

A

Bucket Access Control Lists or Bucket Policies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

True or False: By default, newly created buckets are public.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How are S3 buckets encrypted in Transit?

A

SSL/TLS (HTTPS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the different server side encryptions at rest for S3? (what is stored)

A
  • SSE-S3: Managed By Amazon
  • SSE-KMS (User and Amazon manage together)
  • SSE -C: Give Amazon your own keys that you manage
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Logging all requests made to the S3 bucket.

A

By creating Access Logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

True/False: Access logs in S3 CAN BE sent to another bucket in another account.

A

TRUE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

TRUE/FALSE: Versoning in S3 can be deleted.

A

FALSE; only suspended

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

On Organizational and Individual Accounts, how are AWS services enabled/disabled

A

Using Service Control Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Ways to share buckets across accounts.

A
  • Using Bucket Policies & IAM
  • Using Bucket ACLs (Access Control Lists) & IAM
  • Cross-account IAM Roles
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is S3 Transfer Acceleration?

A

Utilizes the CloudFront Edge Network to accelerate uploads to S3. Instead of uploading directly to your S3 bucket, you can use a distinct URL to upload directly to an edge location which will then transfer that file to S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Types of CDN Distribution.

A
  • Web Distribution – Typically for websites

- RTMP – For media streaming/Adobe Media

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

TRUE/FALSE: Edge locations are read only.

A

False; you can write to them as well. (ex. Put an object to it)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is Storage Gateway?

A

service that connects an on-premises software appliance with cloud-based storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Types of Storage Gateway:

A
  • File Gateway
  • Volume Gateway
  • Tape Gateway (VTL) Virtual Tape Library
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Types of Volume Gateways:

A
  • Stored Volumes – Entire Data set is stored on site primary data locally. Asynchronously backed up to S3.
  • Cached Volumes – Entire Dataset is stored on S3 and the most frequently accessed data is cached onsite.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is Athena?

A

Severless interactive query service which enables you to analyze and query data located in S3 using standard SQL. Turns S3 into a giant DB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is Macie?

A

Security service which uses Machine Learning and NLP (Natural Language Processing) to discover, classify and protect sensitive data stored in S3. Can also analyze CloudTrail logs.

37
Q

What are the EC2 Pricing models?

A

On Demand, Reserved, Spot, Dedicated Hosts.

38
Q

What is the Spot EC2 pricing model?

A

Everyone is not using EC2 at once. Enables you to bid whatever price you want for instance capacity.

39
Q

What is the On Demand EC2 pricing model?

A

Pay fixed rate by the hour (or by the second) with no commitment. For short term unpredictable uploads.

40
Q

What is the Reserved EC2 pricing model?

A

For predictable usage. Provides capacity reservation and for 1 Year or 3 Year contract terms.

41
Q

TRUE/FALSE: Reserved pricing of EC2 can be moved from one region to another.

A

FALSE

42
Q

What is the Dedicated Host EC2 pricing model?

A

Physical EC2 servers that are dedicated for your use. Good for regulatory requirements.

43
Q

TRUE/FALSE: EBS Termination Protection is turned on by default.

A

FALSE; Must be turned on in case of accidental termination of EC2 instance.

44
Q

True/False: All inbound traffic is blocked by default.

A

True.

45
Q

True/False: All outbound traffic is blocked by default.

A

False; does not have effect on security group.

46
Q

TRUE/FALSE: Security Groups are Stateless.

A

FASLE: o If you create an inbound rule allowing traffic in, that traffic is automatically allowed back out again.

47
Q

TRUE/FALSE: Specific IP address can be blocked using Security Groups.

A

False; Network Access Control Lists

48
Q

What is Amazon EBS (Elastic Block Store) ?

A

Provides persistent block storage volumes for use with Amazon EC2 instances in the AWS Cloud. Basically a virtual hard disk in the cloud.

49
Q

Types of EBS storage:

A
  • General Purpose (SSD)
  • Provisioned IOPS (SSD)
  • Throughput Optimized Hard Disk Drive (HDD)
  • Cold Hard Disk Drive (HDD) - Magnetic
50
Q

TRUE/FALSE: Wherever the EC2 instance is, the volume will be in the same Availability Zone

A

TRUE

51
Q

Where do Snapshots exist?

A

In s3.

52
Q

What needs to be done to create a snapshot for Amazon EBS volumes that serve as root devices?

A

Stop the instance before taking the snapshot. However, you can take a snapshot while the instance is running.

53
Q

What can be created from Snapshots?

A

AMIs

54
Q

TRUE/FALSE: Instance Store Volume backed instances can be stopped. You will not lose the data on this instance if it is stopped

A

FALSE - EBS Volumes

55
Q

TRUE/FALSE: Encrypted snapshots can be shared.

A

False: only if they are unencrypted.

56
Q

What is EFS (Elastic File System)?

A

NFS File storage for EC2 instances and Linux based applications.

57
Q

EC2 Clustered Placement

A

Grouping of instances close together within a single Availability Zone. Low network latency, high network throughput.

58
Q

EC2 Spread Placement

A

Group of instances that are each placed on distinct underlying hardware. Individual critical EC2 instances.

59
Q

Partitioned Placement in EC2

A

Can have multiple EC2 instances within a logical segments (partition).

60
Q

TRUE/FALSE: EC2 Clustered Placement can span multiple AZ’s.

A

FALSE; A spread placement and partitioned group can; but they must be in the same region.

61
Q

Types of instances can be launched in a placement group.

A
  • Compute Optimized
  • GPU
  • Memory Optimized
  • Storage Optimized
62
Q

TRUE/FALSE: You can’t move an existing instance into a placement group.

A

False; Before you move the instance, the instance must be in the stopped state.

63
Q

TRUE/FALSE; You can move or remove an instance via the console.

A

You can move or remove an instance using the AWS CLI or an AWS SDK, you can’t do it via the console yet.

64
Q

How to block malicious IP addresses.

A
  • AWS WAF (Web Application Firewall)

- Network ACLs

65
Q

Relational DBs on AWS

A
  • SQL Server
  • Oracle
  • MySQL Server
  • PostgreSQL
  • Aurora
  • MariaDB
66
Q

Amazon’s NoSQL solution.

A

DynamoDB

67
Q

Key feature of RDS.

A
  • Multi-AZ – For disaster recovery

- Read Replicas – For performance (Up to 5 copies)

68
Q

What does a Nonrelational DB consist of?

A
  • Collection = Table
  • Document = Row
  • Key Value Pairs = Fields/Columns
69
Q

Amazon Redshift

A

Used to analyze data; For Business Intelligence or Data Warehousing

70
Q

What is Elasticache used for?

A

To speed up performance of existing databases (frequent identical queries)

71
Q

Types of Elasticache

A
  • Memcached

- Redis

72
Q

TRUE/FALSE: RDS is serverless.

A

FALSE.

73
Q

Types of RDS backups

A
  • Automated Backups (Enabled by default, stored in S3)

- Database Snapshots – Done manually

74
Q

What databases support encryption at rest?

A
  • MySQL
  • Oracle
  • SQL Server
  • PostgreSQL
  • MariaDB
  • Aurora
75
Q

How are RDS instances encrypted at rest?

A

Using the AWS KMS (Key Management Service)

76
Q

What is Mutli-AZ used for?

A

Disaster Recovery

77
Q

DBs that support read replicas.

A
  • mySQL
  • PostgreSQL
  • MariaDB
  • Oracle
  • Aurora
78
Q

TRUE/FALSE: Redshift can be Multi-AZ

A

FALSE

79
Q

What DBs are compatible with Amazon Aurora?

A

MySQL and PostgreSQL

80
Q

TRUE/FALSE: Memcached is Multi-AZ

A

FALSE; Redis

81
Q

What is created by default on a VPC?

A

A default Route Table, Network Access Control List (NACL) and default security group.

82
Q

How many IPs does Amazon reserve within subnets?

A

5

83
Q

TRUE/FALSE: When provisioning a Load Balancer, you need at least three public subnets.

A

False; two

84
Q

What are Bastions?

A

Used to securely administer EC2 instances (Using SSH or RDP).

85
Q

What is CloudFormation?

A

A way of completely scripting your cloud environment.

86
Q

What is Elastic Beanstalk?

A

Quickly deploy and manage applications in the AWS Cloud without worrying about the infrastructure that runs those applications.

87
Q

What is Elastic Transcoder?

A

Coverts media files from their original files to multiple device formats (phone, tablet, etc.).

88
Q

What is Kinesis?

A

A platform on AWS to send all your streaming data to for 24 hours to 7 days.

89
Q

TRUE/FALSE: Elastic Load Balancers (ELB) help deliver stateless services.

A

FALSE; Stateful

SAA-CO1 (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions