General Flashcards

To study harder concepts

1
Q

Can a clustered placement group span availability zones?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Can a spread placement group span availability zones?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Context of a placement group’s name: Global, Regional, Account, Availability Zone

A

AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

At which levels can VPC Flow Logs be created?

A

Subnet Level
VPC Level
Network Interface Level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the chief advantage of using VPC endpoints to connect your VPC to services such as S3?

A

Traffic between your VPC and the other service does not leave the Amazon network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When you create a new security group, all outbound traffic is allowed. True or False

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

You created a custom VPC with an instance but forgot to assign an IP to the instance. How would you make the instance accessible from the internet?

A

Create an Internet gateway and an Elastic IP address. Associate the Elastic IP with the EC2 instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

By default, instances in new subnets in a custom VPC can communicate with each other across Availability Zones. True or False?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the purpose of an Egress-Only Internet Gateway?

A
  • Prevents IPv6 based Internet resources initiating a connection into a VPC
  • Allows VPC based IPv6 traffic to communicate to the Internet
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When I create a new security group, all outbound traffic is allowed by default. True or False

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

True or False: A subnet can span multiple Availability Zones.

A

False - A subnet must be associated to one AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When you create a custom VPC, what is created automatically?

A

Access Control List
Security Group
Route Table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

True or False: An Application Load Balancer must be deployed into at least two subnets.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Maximum responce time for premium level support

A

1 hour

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which RDS database engines have a limit to the number of databases that can run per instance?

A

Oracle

SQL Server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Two ways to increase read speeds in RDS

A
  • Place the RDS instances behind an ElastiCache instance.

- Migrate the database from MySQL to Aurora for better performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Configuration to increase network throughput for EC2-based application

A

Spread the Instances over multiple AZs to minimize the traffic concentration and maximize the fault tolerance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

URL formats supported by S3

A

http: //s3-aws-region.amazonaws.com/mynewbucket
http: //mynewbucket.s3-aws-region.amazonaws.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is Kineses used for

A

Streaming large amounts of data into the cloud

Consume Big Data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is RedShift for

A

Business Intelligence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is Elastic Map Reduce for?

A

Big data processing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Elastic Transcoder?

A

Media Transcoder in the cloud
Paid per minute of use and quality (resolution)
Transcoding presets are built in, so no guessing of settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is Simple Workflow

A

AWS Workflow in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the WorkFlow Actors?

A
  1. Workflow starters - an application that can initiate the workflow
  2. Deciders - controls the flow of work. When a step is completed or failed, the decider controls what happens next.
  3. Activity workers - Carries out the work item
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is Athena

A

Amazon Athena is an interactive query service that makes it easy to analyze data directly in Amazon Simple Storage Service (Amazon S3) using standard SQL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

In which regions are inter-regional VPC peerings supported?

A

US East (N. Virginia), US East (Ohio), US West (Oregon) and EU (Ireland). Inter-region data transfer rates apply.

27
Q

Can VPC peers share the same CIDR blocks?

A

No - Each peered VPC must have a unique CIDR block

28
Q

True or False, VPC peering supports transitive peering.

A

False: VPC Peering only supports 1 to 1 peering.

29
Q

What is Security Token Service

A

Grants users limited and temporary access to AWS resources.

30
Q

From what three sources can STS users come?

A
  1. Federation - Typically Active Directory
    a. Uses SAML 2.0
    b. Grants temp access based on AD - does not need
    IAM user
    c. Single Sign On
  2. Federation with Mobile Apps such as Facebook.
  3. Supports cross account access.
31
Q

STS Process

A
  1. Use an identity broker that will communicate with your LDAP
  2. IB Auths first against LDAP, then against STS
  3. App gets temp access to AWS resource.
    a. App may assume IAM role per AWS policy
32
Q

Can you login into AWS using ADFS?

A

Yes - Uses SAML

33
Q

What is Amazon Workspace

A

VDI in the cloud. Virtual desktops

34
Q

Do you need an AWS account for users of Workspaces?

A

No

35
Q

What permissions are users granted on their VDI by default?

A

Administrator. This can be customized.

36
Q

On what drive should user data be stored?

A

D drive

37
Q

How often in the D:\ drive backed up?

A

Every 12 hours

38
Q

True or false: By default, users can adjust their experience, including wallpaper, icons, etc.

A

True. However, this can be limited by administrators.

39
Q

Can ECS clusters contain multiple container types?

A

Yes

40
Q

True or False, ECS clusters can span multiple regions?

A

False - EC2 clusters are region specific

41
Q

True or false, Container instances can be part of only one cluster at a time

A

True

42
Q

What types of scheduling does ECS support?

A
  1. Service scheduler - Ensures a certain number of tasks are running.
  2. Custom scheduler - Ability to create schedules to meet your business needs.
43
Q

Does ECS scheduler support 3rd party schedulers?

A

Yes

44
Q

True or False - ECS tasks can be registered with ELB?

A

True

45
Q

True or False, ECS instances require an ECS agent to participate in ECS clusters?

A

True - The agent is included in the Amazon Optimized Container image, but it can be installed on others.

46
Q

True or False: ECS agents work with Windows OS?

A

False - ECS agent is Linux only

47
Q

At which of the following levels can VPC Flow Logs be created?

A
  1. VPC Level
  2. Subnet Level
  3. Network Interface Level
48
Q

When I create a new security group, all outbound traffic is allowed by default.

A

True

49
Q

A VPN connection consists of which components?

A

Virtual Private Gateway - VPN on AWS side

Customer Gateway - VPN on cusomter side

50
Q

True or False: In Amazon VPC, an instance does not retain its private IP.

A

False

51
Q

True or False: An Application Load Balancer must be deployed into at least two subnets.

A

True

52
Q

When you create a custom VPC, what is created automaticaly?

A
  1. Route Table
  2. Security Group
  3. Access Control List
53
Q

True or False: By default, instances in new subnets in a custom VPC can communicate with each other across Availability Zones.

A

True

54
Q

Can I “force” a failover for any RDS instance that has Multi-AZ configured?

A

Yes

55
Q

In RDS, do changes to the backup window take place immediately?

A

Yes

56
Q

True or False: RDS Reserved instances are available for multi-AZ deployments.

A

True

57
Q

True or False: With new RDS Db instances, automated backups are enabled by default?

A

True

58
Q

True or False: When you add a rule to an RDS DB security group, you must specify a port number or protocol.

A

False - When you provision from RDS, the port information is generated automatically applied to the RDS security group

59
Q

MySQL default port

A

3306

60
Q

When you have deployed an RDS database into multiple availability zones, can you use the secondary database as an independent read node?

A

No

61
Q

Which AWS DB platform is most suitable for OLTP?

A

RDS

62
Q

How many copies of my data does RDS - Aurora store by default?

A

6

63
Q

Which of the following data formats does Amazon Athena support?

A
  1. Apache Parquet
  2. JSON
  3. Apache ORC
64
Q

Which of the following DynamoDB features are chargeable, when using a single region?

A
  1. Storage of Data

2. Read and Write Capacity