Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Developer > General > Flashcards

General Flashcards

1
Q

What error will you get if you try to ssh into an instance with a new keypair?

A

Permissions 0644 for are too open.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What should you run to resolve permission 0644 error?

A

chmod 0400

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Can security groups span regions?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the most likely cause of a connection timeout?

A

Issue in Security Group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the most likely cause of a Connection Refused error?

A

An application error after successfully communicating with server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the default inbound/outbound rules for a default security group?

A

All inbound traffic is blocked

All outbound traffic is allowed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the difference between an IP assigned to an instance and an Elastic IP?

A

An assigned IP can change if the instance is rebooted. An Elastic IP is an IP you manage and allows you to have a fixed IP for your instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are 5 features of the Application Load Balancer?

A
  • Handles Layer 7 HTTP traffic
  • It can load balanced to multiple applications on the same machine
  • It can load balance based on the route in the URL
  • It can load balance based on the hostname in the URL
  • It has a port mapping feature to redirect to a dynamic port
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does an A record do?

A

Maps a URL to an IPv4 address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does an AAAA record do?

A

Maps a URL to an IPv6 address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does a CNAME do?

A

Maps a url to another url (one domain to another).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does an Alias do?

A

Maps a URL to an AWS resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does ASYNC Replication mean?

A

It means that the consistency will be eventual consistency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How is RDS data encrypted at REST?

A

AWS-KMS using AES-256 encryption.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How do you enforce SSL in PostgreSQL?

A

On the AWS RDS Console in Parameter Groups, set rds.force_ssl=1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you enforce SSL in MySQL?

A

In the DB, set:

GRANT USAGE ON . TO ‘mysqluser’@’%’ REQUIRE SLL;

17
Q

How do you enable SSE-S3?

A

When posting an object, set a header to:

“x-amz-server-side-encryption”: “AES256”

18
Q

How do you enable SSE-KMS?

A

When posting an object, set a header to:

“x-amz-server-side-encryption”: “aws:kms”

19
Q

What is a CMK?

A

A KMS Customer Master Key

20
Q

What does CORS stand for?

A

Cross Origin Resource Sharing

21
Q

Why would you need to enable CORS?

A

If you request data from another s3 bucket

22
Q

Previously, what would you have done to optimize your s3 key performance?

A

prefix the keys with random characters.

23
Q

What is Lazy Loading in Elasticache?

A

Lazy Loading means to Load only when necessary.

24
Q

What is Write Through in Elasticache?

A

It is when you add or update the cache when the database is updated

25
Q

What is S3 Select and Glacier Select?

A

It allows you to use SQL SELECT queries to tell S3 or Glacier exactly what attributes/filters you want.

26
Q

What file formats does S3 Select work with?

A

CSV, JSON or Parquet

27
Q

Can you use subqueries or joins in S3 SELECT?

A

No

28
Q

What 2 things must you do to enable HTTPS on ElasticBeanstalk?

A
  • Load an SSL Cert onto the Load Balancer

- Configure a Security Group Rule to allow incoming traffic on port 443

29
Q

What 3 ways can you assign an SSL cert to the load balancer for Elastic Beanstalk?

A
  • In the AWS console, in the ELB configuration
  • In the code, in the ebextensions/securelistener-alb.config file
  • Using AWS Certificate Manager
30
Q

How do you configure ELasticBeanstalk to redirect from HTTP to HTTPS?

A
  • Configure instances to redirect
  • Configure Application Load Balancer with a rule
  • Make sure Health Checks are not redirected
31
Q

What is the max version count that ElasticBeanstalk can store?

A

1000

32
Q

What are the 2 Lifecycle policies for ElasticBeanstalk?

A
  • Time Based

- Space Based

33
Q

What is a worker environment?

A

It is an ElasticBeanstalk application for workloads that take long to complete

34
Q

In ElasticBeanstalk, how can you define periodic tasks?

A

In a cron.yaml file

35
Q

What is Kinesis KCL?

A

It is Kinesis Client Library which is a Java library that helps read a record from a Kinesis Stream

36
Q

How many KCL instances can query a shard?

A

1

37
Q

How do you bundle your dependencies with you Lambda function?

A

You need to install your packages alongside your code and zip together

38
Q

What is the max size of the Lambda /tmp directory

A

512MB

39
Q

What is Lambda@Edge?

A

It is the process of deploying a Lambda function into a CDN network to make the Lambda Global

AWS Developer (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions