Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Solutions Architect Flashcards > Exam 7 services > Flashcards

Exam 7 services Flashcards

1
Q

Amazon Managed Service for Prometheus

A

Fully managed monitoring service
Prometheus - an open-source monitoring and alerting toolkit, similar to CloudWatch.
Cloud-agnostic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Amazon Managed Service for Prometheus

A

Fully managed visualisation and analysis service
Grafana - open source visualisation and analytics dashboards. Similar to dashboard elements of CloudWatch
Cloud-agnostic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Amazon KeySpaces and Apache Cassandra.

A

Amazon Keyspaces is a fully managed database service for running Cassandra workload, Cassandra is the Apache Cassandra Database (NoSQL)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Security Hub (4 points)

A
  • Sums security findings for AWS and partner products.
  • Continuous checking of AWS resources for best practice
  • Auto fix by integrating with lambda and config.
  • Main dashboard to view and manage security posture through AWS

Still quite a general tool

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

AWS proton (4 points)

A
  • fully managed containerization service
  • service and environment templates
  • AWS Proton service is an instantiation of a service template
  • Useful when frequent resource changes.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

QuickSight (2 points)

A
  • Business-Intelligence (BI) for interactive dashboards and visualizations. uses ML
  • Can intake from Amazon Athena and S3 (for example)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

X-ray (1 point)

A
  • Debug and analyse microservices applications by tracing requests so you can find the root cause.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Elastic Map Reduce (3 points)

A
  • Runs big data applications at PETABYTE scale (e.g. Apache Spark)
  • Does stuff like data analysis in logs, web indexes, ML
  • Sort of similar to Athena and Redshift.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

NetApp ONTAP and FSx for ONTAP (4 points)

A
  • NetApp’s ONTAP is a file system.
  • FSx for ONTAP - FULLY MANAGED
  • supports NFS, SMB and ISCSi
  • Single and Multi-AZ deploys.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Netapp SnapMirror (1 point)

A

-Replication solution for NetApp storage systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Compute Optimizer (4 points)

A
  • Suggests ideal AWS resources for your workloads to lower cost and up performance
  • supports 1) EC2, 2) EC2 ASG, 3) EBS, 4) Lambda
  • Last 14 days
  • Opt-in
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

AWS timestream (3 points)

A
  • fully managed
  • Time-series database for IoT and operational apps.
  • Store and analyse trillions of events per day cheaper than SQL databases
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AWS Lake Formation (3 points)

A
  • S3 based, Integrates with Redshift, EMR, Amazon Athena
  • Provides cross-account permissions
  • Has tag-based access control
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Transfer Family (2 points)

A
  • Fully Managed
  • Secure file transfer over protocols such as SFTP, FTPS, and FTP directly into and out of Amazon S3 or Amazon EFS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

SNS mobile push (1 point)

A

send push notifications to mobile devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

DynamoDB streams (2 points)

A
  • capture changes to items, each change is recorded as a stream record, which can be processed asynchronously.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Transfer Accelerator (2 points)

A
  • Sort of the like the upload version of S3 upload version of Global Accelerator
  • Speeds up file upload/download by using CF edge locations.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Key Material vs KMS key (1 point)

A

Key material: The actual cryptographic key for encrypting/decrypting
KMS key: logical container with the key material, metadata and policies for it’s use

Importing the key material is a one time thing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

FSX with OpenZFS

A
  • NFSI only
  • Sub mili-second latency and high-performance storage
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

CloudTrail Lake (2 points)

A
  • Fully managed
  • Collect, store, analyze AWS API activity logs in a data lake. It allows for advanced querying and analysis of logs to enhance security and compliance monitoring.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

WAF vs NF (2 points in each for what they do)

A

WAF - APPLICATION SPECIFIC SECURITY

  • Layer 7 - XSS and SQL injection
  • Rules to control the web traffic pattern access to the app layer

NF - NETWORK PROTECTION

  • The network layer
  • Filter traffic coming in and out of VPC, i.e. manage IP addresses and ports.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

When to use Aurora Serverless Vs Aurora provisioned

A

Serverless:

  • unpredictable
  • infrequent
  • sporadic

Provisioned:

  • predictable
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Are Application load balancers in one region?

A

YES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

AWS Systems Manager Automation runbooks

A

AWS Systems Manager Automation runbooks are predefined procedures designed to automate common tasks and processes

25
Q

mysqldump (2)

A
  • Back up MySQL databases hosted on Amazon RDS (Relational Database Service) or on EC2 instances
  • Dumps stuff needed to recreate the schema and data
25
Q

PrivateLink (vs VPC endpoint) (5 points - 1 for VPC endpoint, 4 for Private Link)

A

VPC endpoint - The ENTRY POINT in your VPC that allows you to connect privately to a service.

AWS PrivateLink - A TECHNOLOGY providing connectivity between VPCs and services.

Can be done with without internet and VPC peering

Can be your own services or provided by AWS

What enables Interface endpoints. Allows injection of an ENI

26
Q

Transparent Data Encryption (2 points)

A
  • Encrypt Data AT REST
  • RDS for SQL and Oracle.
27
Q

static Anycast IP (2 points)

A
  • single IP advertised from multiple locations simultaneously.
  • Traffic sent to this IP address is routed to the nearest/best-performing location via shortest path determined by network’s routing protocol.
  • Mainly for global accelerator
28
Q

TCP vs HTTP(S) healthchecks (2 points)

A

TCP healthcheck only offered by NLB

HTTP(S) health checks are offered by ALB and NLB

29
Q

Simple Token Service (2 points)

A
  • Supports SAML
  • Good for identity federation, cross-account access and IAM roles.
30
Q

AWS App Mesh (1 point)

A

connect, secure, and monitor microservices across your infrastructure.

31
Q

Kubernetes Autoscalers (2)

A
  • Karpenter - Launch appropriately sized compute resources, more sophisticated
  • Cluster Autoscaler - adjust number of nodes in node groups, more traditional.
32
Q

Kinesis data streams - FIFO and durability

A

FIFO - yes
Data won’t go missing - yes

33
Q

Service Health vs Personal Health Dashboard

A

Service Health Dashboard:
General status and health of AWS services worldwide.

Personal Health Dashboard:
Personalized alerts and information related to issues and events affecting your specific AWS account and resources.

34
Q

Datasync vs Storage Gateway

A

AWS Storage Gateway: Use for integrating on-premises environments with cloud storage for backup, archival, and hybrid storage solutions.

AWS DataSync: fast, automated transfers and migrations between on-prem and AWS storage services, especially for large datasets or periodic synchronization.

For S3, EFS, FSX for win file server.

Connects to SMB and NFS

35
Q

Application Discovery Service (2)

A

CANT DO ACTUAL MIGRATION

Helps organizations discover and analyze their on-premises applications and infrastructure to plan effective migrations to AWS.

36
Q

AWS migration service (MGN) (1)

A
  • Primary migration service recommended for lift-and-shift migrations. (Suggested over Elastic Disaster Recovery)
37
Q

AWS Replication Agent (1)

A

Component used to facilitate data replication for disaster recovery and backup purposes in AWS

38
Q

AWS Forecast (1)

A

time-series forecasting service based on machine learning (ML) and built for business metrics analysis

39
Q

Step function and task assignment (2)

A
  • Tasks are never duplicated
  • assigned once - task to only one worker
40
Q

Things Cloud Watch Alarms can do (3)

A
  • Trigger SNS
  • Change EC2 instance state or EC2 ASG
  • Trigger System Manager Automation documents
41
Q

AWS Snowcone (1)

A

Small - essentially a rugged portable hard drive - up to 8 tb

42
Q

Cloudfront viewer and origin policies (3 for each)

A

Viewer policy - from user to cloudfront edge location or regional edge cache

Viewer:

HTTP/HTTPS
HTTP -> HTTPS
HTTPS only

Origin:
HTTP only
HTTPs only
Match viewer

CloudFront can serve content over both HTTP and HTTPS. You can configure CloudFront to accept only HTTPS requests, redirect HTTP to HTTPS, or accept both.

43
Q

DR Strategies (4)

A
  • Backup and restore : RPO/RTO of hours
  • Pilot light: RPO/RTO 10s of minutes
  • Warm Standby: RPO/RTO minutes
  • Multi-site active/active: RPO/RTO
44
Q

Lambda encryption (1)

A

Technically, Lambda encrypts by default using KMS. BUT using default KMS key, meaning anyone with access to Lambda console could see it.

Better to create new KMS key and uses encryption helpers (explained in another flashcard)

45
Q

Encryption Helpers (1)

A

Allow client-side encryption of environment variables in lambda.

46
Q

Where can read-replicas be for RDS read replicas (1)

A

In the same AZ, Cross AZ, or Cross Region

47
Q

API Gateway caching (1)

A

Can do it. Sort of similar to others, has Cache invalidation, TTL, etc.

48
Q

Aurora auto-scaling - what is being scaled?

A

The number of read replicas in the DB cluster.

49
Q

Native functions and stored procedures

A

Native Functions: Built-in functions provided by the RDS, perform common operations directly in SQL queries. Efficient and predefined.

Stored Procedures: User-defined programs that encapsulate SQL statements and business logic. stored in DB can include complex logic, parameters, and transaction management.

50
Q

CloudWatch Alarms vs CloudWatch Logs vs CloudWatch Events (EventBridge)

A

Alarms:

  • Monitor metrics and trigger actions based on threshold breaches.
  • Detect issues with resources and automatically respond to performance metrics or system health changes.

Logs:

  • Collect, store, and analyze log data from various sources
  • Troubleshoot applications, maintain compliance, and analyze log data for insights.

Events:

  • Respond to system events and automate workflows based on changes in AWS resources
  • Automate tasks in response to events, integrate services, and manage event-driven processes.

Key diff:

  • EVENTS happens when it’s created or a schedule, alarms need a threshold reached.
  • Can emit alarms to events
51
Q

Kendra

A

Uses NLP and ML to return specific answers to search questions from your data

52
Q

Device Farm

A

Application testing service for web and mobile apps. tests on desktop and mobile devices

53
Q

Amplify

A

JavaScript library for Frontend and mobile developers building cloud-enabled applications

54
Q

S3 transition periods with lifecycle policies

A

IA: 30 DAYS
1 Zone IA: 30 DAYS
Glacier: No time constraint apparently
Glacier deep archive: No time constraint apparently

55
Q

CloudFront Geoblocking

A

Can implement blocking based on geographical location. using allow lists.

56
Q

Can Inspector scan EBS volume?

A

No

57
Q

What can types can EBS be encrypted with?

A

Customer-managed or AWS-managed key, but not AWS owned key.

AWS Solutions Architect Flashcards (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions