Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Certified Assoc > Misc > Flashcards

Misc Flashcards

1
Q

What does AWS Trusted Advisor makes recommendations for?

A 
Cost
Performance
Fault Tolerance
Security
Service Limits
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AWS Glue

A

fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AWS Neptune

A

fully-managed graph database service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How do you create a shared resource with AWS Resource Access Manager

A
  1. create a Resource Share
  2. specify resources
  3. specify accounts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

AWS Resource Access Manager (RAM), describe and how is it billed?

A

a service that enables you to easily and securely share AWS resources with any AWS account or within your AWS Organization (or OU) or with IAM users and roles

RAM is available to you at no additional charge.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What can be shared in AWS Resource Access Manager?

A

You can share AWS Transit Gateways, Subnets, AWS License Manager configurations, and Amazon Route 53 Resolver rules resources with RAM and more.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Amazon Cognito Identity Pools

A

Identity pools provide AWS credentials to grant your users access to other AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Amazon Cognito User Pools

A

A user pool is a user directory in Amazon Cognito. You can leverage Amazon Cognito User Pools to either provide built-in user management or integrate with external identity providers, such as Facebook, Twitter, Google+, and Amazon.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Features of AWS WAF

A

Create policy
Block & Filter traffic
Monitor web traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

AWS WAF

A

a web application firewall
protects your web applications or APIs against common web exploits and DDOS

controls how traffic reaches your applications with security rules that block common attack patterns, such as SQL injection or cross-site scripting, and rules that filter out specific traffic patterns you define

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS Organizations

A

Account management service that enables you to consolidate multiple AWS accounts into an organization that you centrally manage

Accounts can be organized in a hierarchy*

AWS Organizations includes account management and consolidated billing capabilities across accounts

Enables budget management, security guard rails/restrictions, and compliance across accounts

Using AWS Organizations, you can automate account creation, create groups of accounts to reflect your business needs, and apply policies for these groups for governance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Amazon GuardDuty

A

Threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts, workloads, and data stored in Amazon S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AWS Shield

A

a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. AWS Shield provides always-on detection and automatic inline mitigations that minimize application downtime and latency. There are two tiers of AWS Shield - Standard and Advanced.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

AWS CloudFront

A

Delivers content to end users with lower latency to edge locations located around the world

Global service

Uses cache at edge location (Edge Cache) to prevent latency

Can serve both dynamic and static content.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

AWS Region

A

Two or more availability zones

User enables and controls data replication across regions

Select a region to store data baed on compliance and network latency requirements

AWS services are available by region; not all regions have same services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Availability Zone

A

One or more data centers
Designed for fault tolerance
AWS recommends replicating across AZ for resiliency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

AWS Fargate

A

Fargate is a fully managed serverless service for running containers on AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

AWS CloudHSM

A

AWS CloudHSM your keys are held in AWS in a hardware security module.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Amazon CloudWatch

A

Performance monitoring

Amazon CloudWatch monitors your Amazon Web Services (AWS) resources and the applications you run on AWS in real time.

You can create alarms that watch metrics and send notifications (SNS) or automatically make changes to the resources you are monitoring when a threshold is breached (ASG).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

AWS Cloud Trail

A

Auditing

Logs AWS API calls to account to CloudWatch or S3

21
Q

Origin Access Identity

A

Used to restricting access to Amazon S3 content exposed by CloudFront

  1. Create a special CloudFront user called an origin access identity (OAI) and associate it with your distribution.
  2. Configure your S3 bucket permissions so that CloudFront can use the OAI to access the files in your bucket and serve them to your users. Make sure that users can’t use a direct URL to the S3 bucket to access a file there.
22
Q

To migrate accounts between AWS Organizations what is needed?

How do you migrate resources?

A

Root or IAM access to both the member and master accounts.

Resources will remain under the control of the migrated account.

23
Q

Amazon Athena

A

Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. Athena is serverless, so there is no infrastructure to manage, and you pay only for the queries that you run.

24
Q

What are the default metrics CloudWatch collects?

A 
Instance metrics - CPU Util, Network In/Out, Disk Read/Write Ops, Disk Read/Write Bytes, Network Packets In/Out, MetadataNoToken
CPU credit metrics
Dedicated Host metrics
Amazon EBS metrics for Nitro-based instances
Status check metrics
Traffic mirroring metrics
Amazon EC2 metric dimensions
Amazon EC2 usage metrics
25
Q

Cloud Watch vs Cloud Trail

A 
Cloud Watch
Performance Monitor
Logs events across AWS services e.g. operations
High level logging
Stores logs indefinitely
Alarm History for 14 days

Cloud Trail
Auditing
Logs activity across API calls e.g. activity
Granular or low level logging
Stores logs in S3 or CloudWatch indefinitely
No native alarming, must sent logs to cloud watch and use cloud watch alarm

Both support multiple accounts

26
Q

AWS API Gateway

A

Fully managed service that allows you to create, publish, maintain, monitor, and secure APIs at scale

27
Q

What APIs does AWS API Gateway support?

A

Stateful Websocket API
Stateless HTTP and REST APIs
HTTP API - low latency cost effective
REST APIs - offer more features

28
Q

AWS API Gateway Features

A
  1. Stateless and stateful APIs
  2. Authentication using IAM, Lamda authorizer functions and Cognito user pools
  3. Developer portal for publishing APIs
  4. Throttles request to your API
  5. Canary release deployments
  6. CloudTrail logging and monitoring of API usage/changes
  7. CloudWatch access and execution logging, set alarms
  8. API creation with CloudFormation
  9. Custom domain names
  10. Integration with AWS WAF and AWS X-Ray
29
Q

Canary release deployments

A

allows test and prod deployments and small and random amount of live traffic goes to test

30
Q

AWS X-Ray

A

helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture

provides an end-to-end view of requests as they travel through your application, and shows a map of your application’s underlying components

31
Q

What well architected principle does shield not address AWS Shield?

A

Shield cannot be used to improve application resiliency to handle spikes in traffic.

32
Q

AWS Shield Standard

A

Provides protection for all AWS customers and defends against most common, frequently occurring network and transport layer DDoS attacks that target your web site or applications. When you use AWS Shield Standard with Amazon CloudFront and Amazon Route 53, you receive comprehensive availability protection against all known infrastructure (Layer 3 and 4) attacks.

33
Q

AWS Shield Advanced

A

enhanced protections for more sophisticated and larger attacks on EC2, ELB, CloudFront, Global Accelerator, and Route53

supports automatic mitigation in some scenarios and real time notification of suspected DDOS

engage Shield Response Team 24x7

34
Q

How is AWS Shield billed?

A

Standard is built in and no additional costs

Advance is 3K per month per organization

You can save by consolidating accounts into an organization, enable Advance in each account and only pay the monthly fee once as along as accounts are under a single consolidated billing and you own all the accounts and resources

35
Q

What does GuardDuty use as input for continuous monitoring? Why are these inputs used?

A
  1. CloudTrail Management Events - monitor AWS accounts
  2. CloudTrail S3 Data Events - monitor data access
  3. VPC Flow Logs - monitor network
  4. DNS Logs - monitor network
36
Q

How can you take action on Guard Duty identified threats?

A

Review findings in console and integrate into event management or workflow system or trigger lambda for automated remediation

37
Q

What are possible actions in AWS GaurdDuty lifecycle?

A

Enable in console

Suspend the service in general settings - stops analyzing data sources but doesn’t delete findings or configuration

Disable in general settings - delete all remaining data including findings and configuration before relinquishing service permissions and resetting service

38
Q

How can you limit geographies with WAF?

A

Use WAF with ALB

Use Geo Match Conditions to allow or deny application access based on geolocation of user

39
Q

Languages supported by Lambda

A 
Java
Go
PowerShell
Node.js
C#
Python
Ruby 
provides a Runtime API allowing you to use any additional programming languages to author your functions.
40
Q

AWS Lambda

A

AWS Lambda is a serverless compute service that runs your code in response to events and automatically manages the underlying compute resources for you.

41
Q

AWS Lambda Billing

A

you pay for execution duration rather than server unit

42
Q

Amazon EventBridge

A

serverless event bus to build event-driven applications at scale using events generated from your applications, integrated Software-as-a-Service (SaaS) applications, and AWS services

43
Q

Amazon ECS task definition

A

required to run Docker containers in Amazon ECS

44
Q

Amazon Inspector

A

automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (EC2) and container workloads for software vulnerabilities and unintended network exposure

45
Q

CloudWatch vs CloudTrail

A

CloudWatch: “What is happening on AWS?” and logging all the events for a particular service or application.
CloudTrail: “Who did what on AWS?” and the API calls to the service or resource.

CloudTrail logs can be ingested into CloudWatch to monitor and identify your AWS account activity against security threats, and create a governance framework for security best practices.

46
Q

Languages supported by Elastic Beanstalk?

A

Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker

47
Q

AWS Elastic Beanstalk

A

is an easy-to-use service for deploying and scaling web applications and services

simply upload your code and Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring. At the same time, you retain full control over the AWS resources powering your application and can access the underlying resources at any time.

48
Q

How is Elastic Beanstalk billed?

A

There is no additional charge for Elastic Beanstalk - you pay only for the AWS resources needed to store and run your applications.

Certified Assoc (12 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions