Missed Questions Flashcards

1
Q

What options exist for accidental deletion in S3?

A

Versioning on deletions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a predefined security policy?

A

Determine protocols and ciphers used between load balancer and client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What resource allows creation of subnets, modify IP address ranges, change network configurations, etc?

A

Virtual Private Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the best solution for multiple new employees that need different access?

A

Use AWS Organizations and service control policies to manage actions and services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What’s the best option for EC2 only needed for 9 months?

A

Partial Upfront Reserved Instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What storage class when unsure of access patterns of your data objects?

A

S3 Intelligent-Tiering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What automatic monitoring is available in 5-minute increments for EC2?

A

Basic (free and collects metrics at 5-minute intervals)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How to get a CPU dashboard of metrics at 1-minute intervals?

A

Detailed Monitoring for EC2 instances and CloudWatch for the dashboard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

CloudWatch vs CloudTrail

A

CloudTrail is for logging via API; CloudWatch is for viewing metrics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Linux OS on EC2 - how is it classified and who is responsible for patching?

A

Guest Operating System; Customer’s Responsibility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What tools to migrate MySQL DB to Amazon RDS?

A

AWS DMS and MySQL tools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What instances would an Auto Scaling group use?

A

Spot Instances and On-Demand Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are S3 Bucket Name limitiations?

A

No uppercase, no underscores, no name duplications anywhere

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What component can allow private subnet to connect to internet and make connections highly available?

A

NAT Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What regional storage option gives ability to store and manage files?

A

Amazon EFS (Elastic File System)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What pillar is effective running workloads and gaining insight into operations and process improvements for business value?

A

Operational Excellence

17
Q

What piller is a workload functioning correctly and consistently?

A

Reliability

18
Q

What piller is efficient usage of resources and maintaining efficiency as demands and tech chnages?

A

Performance Efficiency

19
Q

What pillar is ensuring security and asset protection?

A

Security

20
Q

What pillar is operating systems in a way that delivers business value in most economical way?

A

Cost Optimization

21
Q

What service can create hierarchical estimate of costs grouped by sections of the organization’s architecture?

A

AWS Pricing Calculator

22
Q

When does DynamoDB encrypt data at rest?

A

Only when creating a new table structure

23
Q

Which component allows keeping up with employees, project listings, and tech resources over time?

A

Entity Lifecycle Tracking

24
Q

What VPC endpoint focuses only on DynamoDB and Amazon S3?

A

Gateway type endpoint

25
Q

Who is responsible for encrypting data at rest for a file sharing server?

A

The customer

26
Q

How can you connect VPCs so devices can communicate?

A

VPC Peering

27
Q

What is the AWS-provided firewall and who configures it?

A

It’s a Security Group (acts as a firewall) and the customer configures it

28
Q

What is an Elastic IP?

A

Public, static IPv4 address allocated to your account until you release it. It can be rapidly remapped to another instance, but is only for 1 Region.
It incurs a cost whether it is used or not, until released.

29
Q

What is a key benefit of S3 related to data durability?

A

Data is automatically distributed across 3 Availability Zones within a Region

30
Q

Which caching solution routes traffic within AWS resources and also outside AWS using cloud DNS?

A

Route 53

31
Q

What compute resources option for a CONSISTENT level of resource usage for 3 years?

A

Savings Plan model - up to 72% savings compared to On-Demand. Anything beyond the committed amount is processed as On-Demand

32
Q

What S3 bucket policy can limit access to a specific object?

A

IP Address Range, Custom Prefix, and AWS Account

33
Q

What instance type allows changing resource type during the term?

A

Convertible Reserved Instances - but only when changing to higher or equal value to original instance

34
Q

What’s the first thing to do when logging in as root user for the first time?

A

Turn on Mult-factor authentication