Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS DVA-C01 2022 Stephane Marek > Names (API, CLI, etc.) > Flashcards

Names (API, CLI, etc.) Flashcards

1
Q

When requesting SSE-S3 encryption for objects sent so S3, what key-value pair must be present in the header?

A

“x-amz-server-side-encryption”: “AES256”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

When requesting SSE-KMS encryption for objects sent to S3, what key-value pair must be present in the header?

A

“x-amz-server-side-encryption”: ”aws:kms”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What CLI option/flag should be used to simulate an AWS API call without using resources?

(Note: this option is not available on all API calls)

A

–dry-run

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You may get long error messages from failed AWS API calls. Which command is used to decode these error messages?

A

sts decode-authorization-message

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

If you want detailed information on an EC2 instance, which URL should you query from that instance?

A

http://169.254.169.254/latest/meta-data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

If you want detailed information on the launch script of an EC2 instance, which URL should you query from that instance?

A

http://169.254.169.254/latest/user-data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

To use MFA with the CLI, which API call is used?

A

STS GetSessionToken

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

To use MFA with the CLI, what CLI command is used?

A

aws sts get-session-token –serial-number arn-of-the-mfa-device –tokencode code-from-token –duration-seconds 3600

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When you upload objects to an S3 bucket encrypted with SSE-KMS, which KMS API call is used?

A

GenerateDataKey

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When you download objects from an S3 bucket encrypted with SSE-KMS, which KMS API call is used?

A

Decrypt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

If you want to invalidate part of your CloudFront cache, which API call can you use?

A

CreateInvalidation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

If you want to place ECS tasks on EC2 machines with the least available amount of memory (to minimize # of EC2 instances and save costs), fill in the Xs.

“placementStrategy”: [

{

“type”: X1,

“field”: X2

}

]

A

X1 = “binpack”

X2 = “memory”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

If you want to place ECS tasks on EC2 machines randomly, fill in the X.

“placementStrategy”: [

{

“type”: X

}

]

A

X = “random”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

If you want to place ECS tasks on EC2 machines distributed evenly across the ECS availability zone, fill in the X.

“placementStrategy”: [

{

“type”: X,

“field”: “attribute:ecs.availability-zone”

}

]

A

X = “spread”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

If you want to place ECS tasks on their own EC2 instances, fill in the X.

“placementStrategy”: [

{

“type”: X

}

]

A

X = “distinctInstance”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

If you want to place ECS tasks on EC2 only in us-east-1a and us-west-2b, fill in the X.

“placementStrategy”: [

{

“type”: X,

“expression”: “attribute:ecs.availability-zone in [us-east-1a, us-east-2b]”

}

]

A

X = “memberOf”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

To login to ECR using AWS CLI v2, what CLI command is used?

A

aws ecr get-login-password –region region | docker login –username AWS –password-stdin aws_account_id.dkr.ecr.region.amazonaws.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

To push to Amazon ECR, what CLI command is used?

A

docker push aws_account_id.dkr.ecr.region.amazonaws.com/demo:latest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

To pull from Amazon ECR using the CLI, what CLI command is used?

A

docker pull aws_account_id.dkr.ecr.region.amazonaws.com/demo:latest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

The directory at the root of your EB project that contains all your .config files has what directory name?

A

.ebextensions/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

EB Single Docker requires one of two files in order to get the container up and running. What are the names of those two files?

(Bonus points, what’s the difference between the two?)

A

Dockerfile : (EB will build and run the container)

Dockerrun.aws.json (v1) : (Describe where an already built container is)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

An EB Multi Docker Container app requires a file with what filename to generate the ECS task definition?

(Bonus points: where should the file be located?)

A

Dockerrun.aws.json (v2)

(at the root of the source code)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

You want to create an EB custom platform. The filename of the AMI must be what?

A

Platform.yaml

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

AWS CodeBuild reads build instructions from a file with what name?

A

buildspec.yml

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

The CodeDeploy Agent runs deployment instructions based on a file with what name?

A

appspec.yml

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

In CloudFormation templates, functions in are prefixed with Fn::

What is the .yml shorthand for function prefixes that’s used in place of Fn:: ?

A

!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

In CloudFormation templates, what is the .yml function for referencing parameters and resources?

(Bonus points: What do Parameters and Resources return?)

A

!REF

Parameters returns the value of the parameter. Resources returns the physical ID of the underlying resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

In CloudFormation templates, what is the .yml function for referencing the attributes of the resources you create? (ex: the AZ of an EC2 machine)

A

!GetAtt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

In CloudFormation templates, what is the .yml function for accessing values from key-value pairs listed in the Mappings section of your template?

A

!FindInMap

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

In CloudFormation templates, what is the .yml function for importing values that are exported from your other CloudFormation templates?

A

!ImportValue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

In CloudFormation templates, what .yml function should you use if you want to generate the following output based on the given input?

Input: “ :: ”, [“Hello”, “World”, “!”]

Output: “Hello :: World :: !”

A

!Join

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

In CloudFormation templates, what is the .yml function equivalent to the str.replace() method?

What is the syntax?

A

!Sub

!Sub

  • String
  • { Var1Name: Var1Value, Var2Name: Var2Value }
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

In CloudFormation templates, what are the 5 .yml condition functions?

A

!IF

!AND

!OR

!NOT

!EQUALS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

To send custom metrics to CloudWatch, which API call is used?

A

PutMetricData

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

To modify metric resolution in CloudWatch, which API call is used?

(Bonus points: what are the logging frequencies for Standard and High Resolution?)

A

StorageResolution

( Standard: 60 sec

High Resolution: 1/5/10/30 sec )

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

To move log data from CloudWatch to S3, which API call is used?

(Bonus points: how long does the transfer take?)

A

CreateExportTask

(up to 12 hours)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

To test CloudWatch alarms and notifications, what CLI command is used?

A

aws cloudwatch set-alarm-state –alarm-name “myalarm” –state-value ALARM –state-reason “testing purposes”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

To upload segment documents to AWS X-Ray, which API call is used?

A

PutTraceSegments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

The AWS X-Ray daemon uploads telemetry with which API call?

A

PutTelemetryRecords

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

To retrieve all sampling rules for X-Ray, which API call is used?

A

GetSamplingRules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Which 3 AWS X-Ray API calls are considered Write APIs?

A

PutTraceSegments

PutTelemetryRecords

GetSamplingRules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

To get the main X-Ray service graph, which API call is used?

A

GetServiceGraph

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

To retrieve a list of traces specified by ID in X-Ray, which API call is used?

(Note: each trace is a collection of segment documents that originates from a single request)

A

BatchGetTraces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

To retrieve IDs and annotations for X-Ray traces available for a specified time frame (using an optional filter), which API call is used?

(Note: to get the full traces, pass the trace IDs to BatchGetTraces)

A

GetTraceSummaries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

To retrieve a service graph for one or more specific trace IDs, which API call should be used?

A

GetTraceGraph

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Which 4 AWS X-Ray API calls are considered Read APIs?

A

GetServiceGraph

BatchGetTraces

GetTraceSummaries

GetTraceGraph

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

To run X-Ray with EB, you can either set the option in the console or with a configuration file in DIRECTORY/FILENAME

What are the missing strings?

A

DIRECTORY = .ebextensions/

FILENAME = xray-daemon.config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

To allow cross account access to SQS queues for an AWS account with a principal of 111122223333, what key-value pair should be present in the IAM policy statement?

A

“Princical”: { “AWS”: [111122223333] }

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What does this IAM policy enable?

A

This policy enables an S3 bucket with a specific source account to write to this SQS queue.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

To change the message visibility timeout in SQS queues, which API call is used?

A

ChangeMessageVisibility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Which SQS parameter determines the number of retries before a message is sent to the queue’s DLQ (if configured)?

A

MaximumReceives

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Which SQS parameter determines the number of seconds a message must stay in queue before it becomes visible to consumers?

A

DelaySeconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

SQS Long Polling can be enabled at the queue level or at the API level using which SQS parameter?

A

WaitTimeSeconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

List the 9 essential SQS API calls:

(Bonus points: which 3 have Batch APIs?)

A

CreateQueue, DeleteQueue

PurgeQueue,

SendMessage, ReceiveMessage, DeleteMessage

MaxNumberOfMessages

ReceiveMessageWaitTimeSeconds

ChangeMessageVisbility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

To create an SQS queue, which API call is used?

(Bonus points: which argument can be used to set how long a message should be kept in queue before being discarded)

A

CreateQueue

(MessageRetentionPeriod)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

To delete an SQS queue (and all messages inside), which API call is used?

A

DeleteQueue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

To delete all the messages in an SQS queue but not the queue itself, which API call is used?

A

PurgeQueue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

To send a message to an SQS queue, which API call is used?

(Bonus points: which argument is used to set the number of seconds of delay)

A

SendMessage

(DelaySeconds)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

To poll an SQS queue for messages, which API call is used?

A

ReceiveMessage

60
Q

To delete an SQS message after it has been processed by a consumer, which API call is used?

A

DeleteMessage

61
Q

To change the number of SQS messages received in a ReceiveMessage API call, which [API call / SQS parameter] is used?

(Bonus points: what is the default number, min number, and max number)

A

MaxNumberOfMessages

(1, 1, 10)

62
Q

To enable long polling of an SQS queue, which [API call / SQS parameter] is used?

A

ReceiveMessageWaitTimeSeconds

63
Q

To change the message timeout for an SQS queue, which [API call / SQS parameter] is used?

A

ChangeMessageVisbility

64
Q

Which 3 SQS API calls have batch APIs available?

A

SendMessage

DeleteMessage

ChangeMessageVisibility

65
Q

Which parameter is used to order subsets of an SQS FIFO queue?

A

MessageGroupID

66
Q

Which 3 Lambda environment variables are communicated with X-Ray?

A

_X_AMZN_TRACE_ID

AWS_XRAY_CONTEXT_MISSING

AWS_XRAY_DAEMON_ADDRESS

67
Q

Which Lambda environment variable contains the tracing heading for X-Ray?

A

_X_AMZN_TRACE_ID

68
Q

To configure Lambda with VPC Lambda will create an ENI, but it first needs which AWS managed IAM role?

A

AWSLambdaVPCAccessExecutionRole

69
Q

Which 3 DynamoDB API calls are considered Write APIs?

A

PutItem

UpdateItem

Conditional Writes

70
Q

To create or replace items in a DynamoDB table, which API call is used?

A

PutItem

71
Q

To update an existing item in DynamoDB or create a new one if it doesn’t exist, which API call is used?

A

UpdateItem

72
Q

To accept a write/update/delete in DynoamoDB only if certain conditions are met, which parameter/category is used?

A

Conditional Writes

73
Q

Which 3 DynamoDB API calls are considered Read API calls?

A

GetItem

Query

Scan

74
Q

To retrieve a specific item from DynamoDB based on its primary key, which API call is used?

(Bonus points: what parameter is used to retrieve only specified attributes of the item?)

A

GetItem

(ProjectionExpression)

75
Q

To retrieve a list of items from a DynamoDB table based on conditions, which API call is used?

Which parameter uses comparison operators on the partition and sort keys?

Which parameter allows additional filtering on non-key attributes after retrieval but before delivery?

A

Query

(KeyConditionExpression)

(FilterExpression)

76
Q

When querying a DynamoDB table…

Which expression uses comparison operators on the partition and sort keys?

Which expression allows additional filtering on non-key attributes after retrieval but before delivery?

A

KeyConditionExpression

FilterExpression

77
Q

To retrieve all items from a DynamoDB table, which API call is used?

A

Scan

78
Q

To delete an item in a DynamoDB table, which API call is used?

A

DeleteItem

79
Q

To delete an entire DynamoDB table, which API call is used?

A

DeleteTable

80
Q

Which 2 DynamoDB API calls are used for batch operations?

(Bonus points: which two standard DynamoDB API calls does BatchWriteItem use?)

A

BatchWriteItem

BatchGetItem

(PutItem and DeleteItem)

81
Q

In DynamoDB streams you can choose the scope of information that will be written to the stream by using one of 4 options. List the 4 options.

A

KEYS_ONLY

NEW_IMAGE

OLD_IMAGE

NEW_AND_OLD_IMAGES

82
Q

Which 2 DynamoDB CLI options/flags are good to know for the exam?

(Bonus points: what 3 general AWS CLI pagination options/flags are good to know for the exam?)

A

–filter-expression

–projection-expression

( –page-size

–max-items

–starting-token )

83
Q

To filter DynamoDB items before they are returned to you, which AWS CLI option/flag is used?

A

–filter-expression

84
Q

To only return specified attributes of an item from a DynamoDB table, which AWS CLI option/flag is used?

A

–projection-expression

85
Q

List 3 AWS CLI pagination options/flags and their effect

A

–page-size retrieve items in more API calls

–max-items set the max number of items to show in the CLI (returns NextToken)

–starting-token specify the last NextToken to retrieve the next set of items

86
Q

To specify that the AWS CLI retrieves the full list of items (from DynamoDB, S3, etc.), but with a larger number of API calls, which CLI option/flag is used?

A

–page-size

87
Q

To specify the max number of items to show in the CLI, what CLI option/flag is used?

(Bonus points: what’s the name of the variable returned, used to retrieve the next page of items?)

A

–max-items

( NextToken )

88
Q

To specify the previous NextToken (generated from a CLI command with the –max-items option/flag) to retrieve the next set of items, which CLI option/flag is used?

A

–starting-token

89
Q

Which 2 DynamoDB API calls are part of DynamoDB Transactions?

(Bonus points: what API calls fall under their umbrella?)

A

TransactGetItems

TransactWriteItems

( 1+ GetItem operations

1+ PutItem, UpdateItem, DeleteItem operations )

90
Q

TransactGetItems performs which standard DynamoDB API call?

A

GetItem

91
Q

TransactWriteItems performs which 3 standard DynamoDB API calls?

A

PutItem, UpdateItem, DeleteItem

92
Q

To limit DynamoDB access for users to row-level access based on the primary key, which IAM policy key is used?

(Bonus points: what is the syntax?

“Condition”: {

KEY1: {

KEY2: [STRING]

}

)

A

LeadingKeys

( “Condition”: {

“ForAllValues:StringEquals”: {

“dynamodb:LeadingKeys”: [”${cognito-identity.amazonaws.com::sub}”]

}

)

93
Q

For a client to invalidate an API gateway cache, what should be included in the header?

A

Cache-Control: max-age=0

94
Q

List 7 API GateWay CloudWatch Metrics:

A

CacheHitCount, CacheMissCount

Count

IntegrationLatency

Latency

4XX error, 5xx error

95
Q

To observe the efficiency of your API gateway cache, which 2 CloudWatch metrics are used?

A

CacheHitCount, CacheMissCount

96
Q

To measure the total number of API requests to your API Gateway in a given period, which CloudWatch metric is used?

A

Count

97
Q

To measure the time between when API Gateway relays a request to the backend and when it received a response from the backend, which CloudWatch metric is used?

A

IntegrationLatency

98
Q

To measure the total time from when API Gateway receives a request and when it returns a response, which CloudWatch metric is used?

A

Latency

99
Q

An API Gateway returning 4XX (400) and 5XX (500) http response status codes indicates what?

A

4XX: client-side error

5XX: server-side error

100
Q

Which 4XX http response status code indicates throttling?

(Bonus points: how should this error be handled by the client?)

A

429 Too Many Requests

(Retry with exponential backoff)

101
Q

Http response status codes 400, 403, and 429 indicate what?

A

400: bad request
403: unauthorized
429: throttling

102
Q

Http status response codes 502, 503, and 504 indicate what?

A

502: Bad Gateway Exception (bad response or heavy loads)
503: Service Unavailable Exception
504: Integration Failure (Ex: Lambda timeout after 29 seconds)

103
Q

The OPTIONS pre-flight request for CORS must contain which 3 headers?

A

Access-Control-Allow-Methods

Access-Control-Allow-Headers

Access-Control-Allow-Origin

104
Q

To package a SAM template, which 2 interchangeable CLI commands are used?

A

aws cloudformation package

sam package

105
Q

To deploy a SAM template, which 2 interchangeable CLI commands are used?

A

aws cloudformation deploy

sam deploy

106
Q

To indicate a YAML template is a SAM template, what header should be included?

A

Transform : ‘AWS::Serverless-2016-10-31’

(mnemonic: Uncle SAM → Trump Elected in 2016 → Scary like Halloween

Trump Halloween)

107
Q

List the 3 SAM resource types as written in the YAML template:

A

AWS::Serverless::Function

AWS::Serverless::Api

AWS::Serverless::SimpleTable

108
Q

To give read only permissions to objects in S3, which SAM policy template is used?

A

S3ReadPolicy

109
Q

To allow polling of an SQS queue, which SAM resource policy is used?

A

SQSPollerPolicy

110
Q

To allow CRUD operations in DynamoDB, which SAM policy template is used?

A

DynamoDBCrudPolicy

111
Q

List the 6 AWS Step Functions states:

A

Choice State

Fail or Succeed State

Pass State

Wait State

Map State

Parallel State

112
Q

Step Functions error handling uses which 2 logic phrases?

A

Retry and Catch

113
Q

List the 4 step functions SLS (State Language Spec) Retry keys:

“Retry”: [{key1:val, key2:val, etc}]

A

ErrorEquals

IntervalSeconds

BackoffRate

MaxAttempts

114
Q

To match a specific kind of Step Function error, which SLS (State Language Spec) key is used?

A

ErrorEquals

115
Q

To specify a Step Function initial delay before retrying an error, which SLS (State Language Spec) Retry key is used?

A

IntervalSeconds

116
Q

To multiply Step Functions delays after each error retry, which SLS (State Language Spec) Retry key is used?

A

BackoffRate

117
Q

To specify the maximum number of attempts for Step Functions error retries, which SLS (State Language Spec) Retry key is used?

(Bonus points: what is the default value?)

A

MaxAttempts

(default 3 max attempts)

118
Q

List the 3 Step Functions SLS (State Language Spec) Catch keys:

A

ErrorEquals

Next

ResultPath

119
Q

To match a specific kind of Step Function error, which SLS (State Language Spec) Catch Key is used?

A

ErrorEquals

120
Q

To send a Step Function to another state after an error is caught, which SLS (State Language Spec) Catch Key is used?

A

Next

121
Q

To determine what input is sent to the state specified in the Next field of a Step Function after an error is caught, which SLS (State Language Spec) Catch Key is used?

A

ResultPath

122
Q

List the 4 ways you can authorize applications to interact with your AWS AppSync GraphQL API:

A

API_KEY

AWS_IAM

OPENID_CONNECT

AMAZON_COGNITO_USER_POOLS

123
Q

List the 7 AWS STS API Calls needed for the exam:

(3/3/1)

A

AssumeRole

AssumeRoleWithSAML

AssumeRoleWithWebIdentity

GetSessionToken

GetFederationToken

GetCallerIdentity

DecodeAuthorizationMessage

124
Q

To assume roles within your account or cross account, which STS API call is used?

A

AssumeRole

125
Q

To return credentials for users logged in with SAML, which STS API call is used?

A

AssumeRoleWithSAML

126
Q

To return credentials for a user logged in with an IdP, which STS API call is used?

(Note: AWS recommends AWS Identity Pools instead)

A

AssumeRoleWithWebIdentity

127
Q

Which STS API call is used for MFA login from a user or AWS account root user?

A

GetSessionToken

128
Q

To obtain temporary credentials for a federated user, which STS API call is used?

A

GetFederationToken

129
Q

To return details about the IAM user or role used in the API call, which STS API call is used?

A

GetCallerIdentity

130
Q

To decode an error message when an AWS API call is denied, which STS API call is used?

A

DecodeAuthorizationMessage

131
Q

To enforce MFA, which “Condition”: { “Bool”: { key:val } } key-value pair should be present in the IAM policy?

A

“aws:MultiFactorAuthPresent”: “true”

132
Q

To grant a user permission to pass a role to an AWS service, which IAM permission do you need?

A

iam:PassRole

(i.e. “Action”: “iam:PassRole”)

133
Q

Which hashing algorithm is used for symmetric encryption in KMS?

A

AES-256

134
Q

Which hashing algorithms are used for asymmetric encryption in KMS?

A

RSA & ECC key pairs

135
Q

To encrypt anything over 4KB, which KMS API call is used?

A

GenerateDataKey

136
Q

List 5 KMS Symmetric APIs:

A

Encrypt

GenerateDataKey

GenerateDataKeyWithoutPlaintext

Decrypt

GenerateRandom

137
Q

To encrypt up to 4KB of data, which KMS API call is used?

A

Encrypt

138
Q

To generate a unique symmetric data key (DEK) and return both a plaintext copy and encrypted copy of the key, which KMS API call is used?

A

GenerateDataKey

139
Q

To generate a unique symmetric data key (DEK) and return only an encrypted copy of the key, which KMS API call is used?

(Note: this is generally only for later use)

A

GenerateDataKeyWithoutPlaintext

140
Q

To decrypt up to 4KB of data (including data encryption keys, or DEK), which KMS API call is used?

A

Decrypt

141
Q

To return a random byte string, which KMS API call is used?

A

GenerateRandom

142
Q

When you exceed a KMS request quota, which exception is thrown?

(Bonus points: how should you address and resolve this exception?)

A

ThrottlingException

(exponential backoff)

143
Q

SSE-KMS uses which 2 KMS API calls?

A

GenerateDataKey and Decrypt

144
Q

To force SSL in an S3 bucket policy, which effect and key-value pair should be present in the bucket policy?

i.e. “Effect“: EFFECT, Condition”: { “Bool”: { KEY:VAL} }

A

“Effect”: “Deny”

“Bool”: { “aws:SecureTransport”: “false” }

145
Q

When using CloudWatch logs API via CLI, one of two flags regarding log groups must be present in the call. List those two flags:

(Bonus points: when would you use one vs the other?)

A

associate-kms-key (if the log group already exists)

create-log-group (if the log group doesn’t exist yet)

AWS DVA-C01 2022 Stephane Marek (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions