Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SAA > Governance > Flashcards

Governance Flashcards

1
Q

What is needed for creating AWS Organizations

A

Logging Account (which will hold S3 buckets for logging to Cloudtrail)

Primary Account for using for consolidated billing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How to create Global Policy for accounts in AWS Organizations and only way to restrict what root account can do

A

Service Control Policy (SCP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How to Share RIs across multiple accounts

A

AWS Organizations
&
AWS RAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Free service that allows you to share AWS resources with other accounts such as VPC and Transit Gateways

A

AWS RAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

TRUE or FALSE AWS RAM can only share resources with accounts in your AWS Organization

A

False, can also do it with accounts that are outside your org

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

If you need to share resources in the same region which AWS service should you use?

A

AWS RAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

If you need to share VPC resources cross-regionally what should you use?

A

VPC Peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

If I have a temp employee that needs access across my AWS accounts what can I do?

A

Give them temporary Role access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Inventory Management and control tool to see what you have in your AWS account, enforce standards, and notify you when state of architecture changes

A

AWS Config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

3 Key functionalities of AWS Config

A

Query resources

Create Rules to enforce what is happening (prevent public S3 buckets) for compliance

Can tell history of env

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

TRUE or FALSE AWS Config Rules can have remediation steps taken automatically

A

True, can setup Automation Documents or use Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Fully managed AD service for when we want to migrate everything to AWS for AD management

A

Microsoft AD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Fully managed AD for when we want to leave AD on-prem

A

AD Connector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Easy to use tool that allows us to visualize our cost in reports and can allocate costs on resource tags

A

AWS Cost Explorer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Service I can use to forcast how much I will spend based on my billing history.

A

AWS Cost Explorer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Allows Organizations to easily plan and set expectations across cost, allocate spend, and can set alerts when getting close to budget.

A

AWS Budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

4 types of budgets that can be used with AWS Budgets

A

Cost Budgets
Usage Budgets
Reservations Budget
Savings Plan Budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Where does AWS CUR publish billing reports as CSV

A

To centralized S3 bucket

19
Q

How can costs be broken down in AWS CUR

A

time span,
service and resource
tag

20
Q

AWS service that has most comprehensive set of cost and usage data

A

AWS CUR (Cost and Usage Reports)

21
Q

What services does AWS CUR integrate with?

A

Athena
Redshift
Quicksight

22
Q

Services that work with AWS Compute Optimizer Resources

A

EC2
ASG
EBS
Lambda

23
Q

Supported Account types with AWS Compute Optimizer Resources

A

Standalone
Member Account
Management Account in an Organization

24
Q

Compatibile service with AWS Compute Savings Plans

A

EC2, Lambda, and Fargate

25
Q

How to get higher savings plan if just want to save with EC2 instances not necessarily other Compute resources

A

EC2 Instance Savings

26
Q

Save $$ on Sage Maker

A

SageMaker Savings

27
Q

What does AWS Compute Optimizer offer?

A

Recommendations based on usage metrics in your account

28
Q

What are 5 things Trusted Advisor checks for

A

cost optimization,
preformance
security,
fault tolerance
service limit checks

29
Q

Is Trusted Advisor a Paid service?

A

No, although you get some checks out of the box for free some are paid

30
Q

How to set up alerts with Trusted Advisor?

A

SNS, and can use Eventbridge and Lambda to address problems

31
Q

Orchastration service that automates account creation and security controls and monitor account usage which is an extension of AWS Organizations

A

AWS Control Tower

32
Q

High level rules provide continous governance of AWS ENV created with Control Tower

A

Guardrails

33
Q

Automated deployments of templates in either Org unit or Org using config rules can be done with which AWS Service

A

AWS Control Tower

34
Q

How to manage Licenses in AWS in a centralized way and control visibility and usage of licenses across services

A

AWS License Manager

35
Q

Provides visibility of resources, preformance, and availability of AWS services in AWS Accounts and attempts to give you timely alerts for preventions of potential problems

A

AWS Health

36
Q

Dashboard showing all public health events going on in AWS

A

AWS Health Dashboard

37
Q

Allows orgs to create managed catalogs of approved IT services that can be centralized managed with Orgs

A

AWS Managed Catalogs

38
Q

What is a Catalog Template behind the scenes (which AWS Service)

A

CloudFormation Template

39
Q

AWS Service that manages infrastructure and deployment tooling of applications IaC of serverless and container architectures

A

AWS Proton

40
Q

Which template are supported with AWS Proton

A

Cloudformation
Teraform

41
Q

6 Pillars of Well-Architected Framework

A

Operational Excellence
Reliability
Security
Preformance Efficency
Cost Optimization
Sustainability

42
Q

Service that provides a consistent process that measures cloud architecture against 6 pillars

A

AWS Well-Architected Tool

43
Q

What Service can be used to preform vulnerability scans on EC2 servers?

A

AWS Inspector

AWS SAA (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions