General Info 2

Question 1

In shared services VPC How can the organization control which networks can access the cluster?

Answer 1

A security group can grant access to traffic from the allowed networks via the CIDR range for each
network. VPC peering and VPN are connectivity services and cannot control traffic for security. Amazon
Redshift user accounts address authentication and authorization at the user level and have no control
over network traffic.

Question 2

General Purpose SSD use case

Answer 2

boot vols, dev-test envs, low latency interactive apps

Max IOPS per Volume - 16,000 not consistent

Question 3

Provisioned IOPS SSD

Answer 3

require sustained IOPS performance, or more than 16,000
Large database workloads. relational DBs
Max IOPS per Volume - 64,000

Question 4

Throughput Optimized HDD

Answer 4

Low-cost esigned for frequently accessed, throughput-intensive workloads
Streaming workloads requiring consistent, fast throughput at a low price
Big data
Data warehouses
Log processing
Cannot be a boot volume

Question 5

NAT gateways can be deployed both in public and private subnet. True/False

Answer 5

False. Only private

Question 6

Which AWS service would simplify migration of a database to AWS

Answer 6

AWS Database Migration Service (AWS DMS)

Question 7

Which AWS offering enables customers to find, buy, and immediately start using software solutions in
their AWS environment?

Answer 7

AWS Marketplace

Question 8

Which service would you use to send alerts based on Amazon CloudWatch alarms

Answer 8

SNS

Question 9

Where can a customer find information about prohibited actions on AWS infrastructure

Answer 9

AWS Acceptable Use Policy

Question 10

HDD is great for random or sequential access

Answer 10

sequential. Large data blocks to read in and fewer read and write operations

Question 11

what type of block storage will you use for backup of database

Answer 11

EBS code HDD

Question 12

EFS features

Answer 12

petabyte, elastic capacity, NFS 4.0 and 4.1

Question 13

S3 IA

Answer 13

cleaper for storage than standard but more expensive for access

Question 14

3 type of retrieval types for Glacier

Answer 14

expedited(5mins), standard or bulk(12Hrs)

Question 15

Name 2 services that facilitate loosely coupled architecture

Answer 15

SQS, ELB

Question 16

fault tolerant is a higher bar than high availability

Answer 16

high available means that system is up and available bu t it might perform at a slightly degraded state.
Fault-tolerant means user does not experience any impact due to fault. Ths SLA is met.

Question 17

AMI’s in cloud formation templates should not be parameterized

Answer 17

Since it is difficult ofr users to enter the AMI ID’s

Question 18

AMI ID’s are different across regious

Answer 18

Use mappings to specify the base AMI since AMI ID’s are different in each region

Question 19

Output from lambda

Answer 19

Cloudwatch logs

Question 20

Output from lambda that is useful for debugging as well

Answer 20

Cloudwatch logs

Question 21

RTO vs RPO

Answer 21

RTO is concerned with applications and systems. The measurement includes data recovery but primarily describes time limitations on application downtime. RPO is concerned with the amount of data that is lost following a failure event

Question 22

RPO stands for

Answer 22

recovery point objective

Question 23

RTO stands for

Answer 23

recovery time objective

Question 24

RTO stands for

Answer 24

recovery time objective

Question 25

Test axioms

Answer 25

single AZ will never be the right answer

AWS managed services should always be preferred