General Flashcards

Learn General Technical points

1
Q

What 3 AWS services can be used to manage/automate code changes to AWS workloads?

A

AWS CodeCommit
AWS CodeDeploy
AWS CodePipeline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does AWS Config do?

A

Allows you to record and evaluate changes to your resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What 5 AWS services support detective work? (CCCSG)

A
Cloudtrail
Cloudwatch
Config
S3
Glacier
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the 3 steps to securing your 3 tier app?

A

Allow HTTP/HTTPS traffic to the web server
Allow only SSH traffic on App server
Allow only App Server access on Database server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What 3 services are good for a stateless architecture?

A

RDS
Elasticache
DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What 4 services are good for a serverless architecture?

A

API Gateway
Lambda
S3
DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Redis Auth used for?

A

Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are 3 acceptable sources for a security group?

A

Specific IP
CIDR block
Another Security Group id

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which load balancer provides a static IP address which can be whitelisted by clients?

A

Network Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Cloudfront Origin Access Identity

A

A Special Cloudfront user associated with your distribution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a signed url?

A

A url with an expiration dat, used with Cloudfront for accessing S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a better option over Cloudfront if the data changes often?

A

S3 Cross region replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Is FTP, TCP or UDP?

A

TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is RTO?

A

Recovery time objective - Time it takes for a service to recover

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is RPO?

A

Recovery Point Objective - Acceptable amount of data loss in time before disaster occurs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How does your application securely connect to RDS?

A

SSL, not encrypted keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What 4 options be a Route53 alias?

A

S3 static site
ELB
Cloudfront
Elastic BEanstalk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the difference between an Availability Zone and a Region?

A

A Region is a specific geographical area

An Availability Zone is an isolated location within a region

19
Q

What is the availability of S3, S3-IA and S3-RRS?

A

99.99%

20
Q

What is the availability of S3 One-Zone IA?

A

99.5%

21
Q

Are EC2 instances limited to 20 per region or AZ?

A

per region

22
Q

What is Direct Connect?

A

A dedicated line between your on-premise data center and AWS that does not involve the internet.

23
Q

What does Security Token Service do?

A

Grants user limited and temporary access to AWs resources using Federation

24
Q

What are the 3 steps to setup STS to authenticate users against active directory?

A

Develop Identity Broker to communicate with LDAP and AWS STS
Make Identity Broker communicate with LDAP first, then AWS STS
Then provide App with temp access to resources.

25
Q

Can I authenticate using active directory?

A

Yes, using SAML

26
Q

What service is used to process large amounts of data for business intelligence?

A

Redshift

27
Q

What service is used to process large amounts of data for big data?

A

Elastic Map Reduce

28
Q

What are the 3 SWF Actors and what do they do?

A

Workflow starter initiates workflow
Decider Controls the flow of activity tasks
Activity Worker carries out tasks

29
Q

What is an Elastic IP address?

A

A static IP address that can be moved from one server to another

30
Q

What is the difference between High Availability and Fault Tolerance?

A

High Availability means the system is up and running but may perform in a degraded state.
Fault tolerance means the user is not impacted by any fault

31
Q

What are IOPS?

A

Random access read/writes

32
Q

What does a Virtual Private Gateway do?

A

Provides VPN access to on-site resources

33
Q

What EBS volume types are good for random access

A

SSD for random access

34
Q

What EBS volume types are good for sequential access?

A

HDD for sequential access

35
Q

How can you encrypt credentials stored by a Lambda function?

A

Create a new KMS key and use it to enable encryption helpers

36
Q

How do you calculate the total number of IP addresses of a given CIDR Block

A

Subtract the mask number from 32, then raise 2 to the power of the result:
/27 = 32 - 27 = 5
2^5 = 32

37
Q

What is a Route Origin Authorization?

A

Its a document that authorizes Amazon to advertise an address range when you move your IP address to AWS.

38
Q

What is Amazon DynamoDB Accelerator (DAX)?

A

In memory cache for DynamoDB

39
Q

What are 2 possible ways to increase the write performance of a database hosted in an EC2 instance

A

Increase the size of the instance

Setup a standard RAID 0 configuration

40
Q

How can you monitor an RDS instance?

A

Enable Enhanced Monitoring in RDS

41
Q

What is Amazon Redshift workload management (WLM)?

A

It enables users to manage priorities so that short quick queries dont get stuck behind long-running queries

42
Q

When an EBS snapshot is ongoing, what can/cannot be done?

A

EBS volume can be used as normal

43
Q

What is Amazon MQ?

A

A managed message broker service for ApacheMQ to make it easy to migrate to the cloud