Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AWS practice > O'Reilly Missed Questions > Flashcards

O'Reilly Missed Questions Flashcards

1
Q

Security Group

A

Stateful firewall. By default, allows all outbound traffic. Always permissive. Designed for EC2 Instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Network Access Control Lists (NACLs)

A

Stateless firewall. By default, allows all inbound and outbound. Can permit or deny. Designed for entire subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Transit Gateway

A

Connect individual VPCs together via the gateway in a hub-and-spoke model. Simplifies peering networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Glacier standard retrieval

A

3-5 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Glacier expedited retrieval

A

1-5 minutes (up to 250mb)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Glacier bulk retrieval

A

5-12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Glacier deep standard retrieval

A

12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Glacier deep bulk retrieval

A

48 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Macie

A

Uses machine learning and pattern matching techniques to detect and alert you to any sensitive data, such as PII, stored in Amazon S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

WAF

A

Protects your content from common web exploits and bots. Control using Web ACLs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

CloudHSM

A

Dedicated hardware security module that allows you to generate and manage keys in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

KMS

A

Create and manage customer master keys (CMKs), which are stored and used to encrypt and decrypt your AWS data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

SQS standard queue

A

Supports a nearly unlimited number of API calls per second, and are designed for messages to be delivered at least once

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

SQS FIFO queue

A

Supports up to 300 API calls designed to preserve the order of your messages, as well as ensuring only one-time delivery with no duplicates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

IaaS

A

A service that gives you access to configure underlying virtual compute, storage, and network resources to host your application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

PaaS

A

A service that abstracts the underlying infrastructure, allowing you to focus on your application code deployment process

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

SaaS

A

A service that hosts and delivers a complete application via a public network, with no access to any underlying infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Application load balancer

A

Acts as a single point of entry for the incoming requests and distributes the traffic among targets in a target group. Can also route based on listener rules. 7th OSI layer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Network load balancer

A

Low latency, TCP or UDP, cannot see content, preserves IP address. Can handle millions of requests per second. 4th OSI layer

20
Q

Gateway load balancer

A

Used for firewalls and security. 3rd OSI layer,

21
Q

Classic load balancer

A

Less featured than ALB, less throughput than NLB. Useful for EC2 classic networks. OSI 4 and 7

22
Q

EBS volume gp2

A

SSD, 1GB - 16TB, baseline 3 IOPS/GB, suitable for general workloads, boot volumes, low latency operations. Default volume.

23
Q

EBS volume gp3

A

SSD, 1GB - 16TB, baseline 3000 IOPS, suitable for databases and boot volumes. Higher throughput than gp2

24
Q

EBS volume io1

A

SSD, 4GB - 16TB, max 64000 IOPS, 1000mb/s throughput, suitable for critical database and application workloads. EC2 must be AWS Nitro for peak performance.

25
EBS volume io2
SSD, 4GB - 16TB, max 64000 IOPS, 1000MB/s throughput, suitable for critical database and application workloads. EC2 must be AWS Nitro for peak performance. Higher IOPS/storage ratio than IO1
26
EBS volume io2 block express
SSD, 4GB - 64TB, max 256000 IOPS, 4000MB/s throughput, suitable for critical database and application workloads. EC2 must be AWS Nitro for peak performance. Higher IOPS/storage ratio than IO1
27
EBS volume st1
HDD, 125GB - 16TB, max 500 IOPS, 500mb/s throughput, ideal for frequently accessed, throughput-intensive workloads and capable of working with large datasets and large I/O sizes. Cannot be used as a boot volume
28
EBS volume sc1
HDD, 125GB - 16TB, max 250 IOPS, 250mb/s throughput, ideal for less frequently accessed workloads with large, cold datasets. Sometimes called cold HDD. Cannot be used as a boot volume
29
Basic support plan
Service limit and basic security trusted advisor checks. No technical support. 24/7 customer service.
30
Developer support plan
Aimed at testing. Service limit and limited security trusted advisor checks. Limited email-only technical support in business hours. 24 hours for general guidance, 12 hours for system impaired. 24/7 customer service.
31
Business support plan
Aimed at production workloads. All trusted advisor checks. Phone, email and chat technical support in business hours. 24 hours for general guidance, 12 hours for system impaired, 4 hours for production system impaired, 1 hour for production system down. 24/7 customer service. Includes contextual support for interoperability and 3rd-party software. Access to Infrastructure Event Management, for support for product launch or migration tasks.
32
Enterprise support plan
Aimed at very large organisations. All trusted advisor checks. Phone, email and chat technical support in business hours. 24 hours for general guidance, 12 hours for system impaired, 4 hours for production system impaired, 1 hour for production system down, 15 minutes for business critical system down. 24/7 customer service. Includes contextual support for interoperability and 3rd-party software. Access to Infrastructure Event Management, for support for product launch or migration tasks. Dedicated technical account manager. Access to well-archictacted reviews.
33
Simple routing policy
Map a domain name to a single resource, such as a server or load balancer. No health checks
34
Failover routing policy
In the event of a primary resource failure, all traffic will be redirected to a secondary resource.
35
Geolocation routing policy
Route traffic based on the geographical location of your users.
36
Latency routing policy
Route your users' traffic to the Region that offers the lowest latency
37
Weighted routing policy
This routing policy enables you to route different ratios of your total traffic to different resources associated with a single domain. This is also particularly useful when you want to perform a gradual migration of your total traffic from one resource to another, such as a new version of your website.
38
S3 Lifecycle Management
Move or delete objects after set time periods
39
Elastic IP address
A static ipv4 address allocated to your account, yours until you release it. Charged if not allocated to an active EC2 instance
40
Landing Zone
Offers a baseline blueprint for a multi-account environment. Deprecated in favour of control tower.
41
Control Tower
Automates the setup of a new account landing zone using the latest recommended blueprints
42
Elasticsearch
Open source text search and analytics engine capable of storing, analyzing, and performing search functions against big volumes of data in near real time. AWS offering is fully managed and can index all types of data, even unstructured
43
Opsworks Chef
Creates a Chef server that is used to manage all your nodes and acts as a central repository for your Chef cookbooks. Chef cookbooks contain recipes that are authored using the Ruby programming language and enable you to define a collection of resources and their attributes that need to be configured.
44
Opsworks Puppet
A fully managed Puppet master server that is used to communicate with, configure, deploy, and manage your nodes – which could be EC2 instances or even on-premises servers. The service also takes care of handling tasks such as software and operating system configurations, package installations, database setups, and more.
45
SWF
Deciders initiate workers to complete tasks in the cloud over EC2. Less managed than step functions

AWS practice (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions