Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Other concepts > Practice 2 > Flashcards

Practice 2 Flashcards

1
Q

AWS OpsWorks is a

A

configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Access Keys are used for

A

api calls and not for logging in to EC2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Canary:

A

Traffic is shifted in two increments. You can choose from predefined canary options that specify the percentage of traffic shifted to your updated Lambda function version in the first increment and the interval, in minutes, before the remaining traffic is shifted in the second increment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Linear:

A

Traffic is shifted in equal increments with an equal number of minutes between each increment. You can choose from predefined linear options that specify the percentage of traffic shifted in each increment and the number of minutes between each increment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

All-at-once

A

All traffic is shifted from the original Lambda function to the updated Lambda function version at once.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Instance metadata

A

the data about your instance that you can use to configure or manage the running instance. You can get the instance ID, public keys, public IP address and many other information from the instance metadata by firing a URL command in your instance to this URL:
http://169.254.169.254/latest/meta-data/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

The best way to implement a bastion host is to

A

create a small EC2 instance which should only have a security group from a particular IP address for maximum security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

AWS Certificate Manager (ACM) is a service that lets you

A

easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

AWS IoT Core is a

A

managed cloud service that lets connected devices easily and securely interact with cloud applications and other devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Steps to minimize backup time in Raid array

A
  1. Stop all applications from writing to the RAID array.
  2. Flush all caches to the disk.
  3. Confirm that the associated EC2 instance is no longer writing to the RAID array by taking actions such as freezing the file system, unmounting the RAID array, or even shutting down the EC2 instance.
  4. After taking steps to halt all disk-related activity to the RAID array, take a snapshot of each EBS volume in the array.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

principle of least privilege

A

means granting only the permissions required to perform a task

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

AWS services encrypts data at rest by default

A

AWS Storage Gateway

Amazon Glacier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Enabling encryption for Amazon RDS, ECS and Lambda

A

you still have to enable and configure them first with tools like AWS KMS to encrypt the data at rest. (not by default)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Perfect Forward Secrecy

A

feature that provides additional safeguards against the eavesdropping of encrypted data, through the use of a unique random session key. This prevents the decoding of captured data, even if the secret long-term key is compromised

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

two AWS services that supportPerfect Forward Secrecy

A

CloudFront and Elastic Load Balancing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

DynamoDB is a fully managed service which automatically scales its storage - T or F

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

shared responsibility model - AWS manages the security of the following assets

A

• -Facilities
• -Physical security of hardware
• -Network infrastructure
-Virtualization infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

shared responsibility model - Customer responsibility

A 
• -Amazon Machine Images (AMIs)
• -Operating systems
• -Applications
• -Data in transit
• -Data at rest
• -Data stores
• -Credentials
-Policies and configuration
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Classic Load Balancer supportServer Name Indication (SNI) - true or false

A

false; it does not support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Server Name Indication (SNI)

A

allows multiple domains to serve SSL traffic over the same IP address by including the hostname which the viewers are trying to connect to

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

2 services that allows you to decouple architecture in AWS

A

SQS and SWF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

ENI

A

Elastic Network Interface - logical networking component in a VPC that represents a virtual network card

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

You can attach a network interface to an EC2 instance in the following ways:

A
  1. When it’s running (hot attach)
  2. When it’s stopped (warm attach)
  3. When the instance is being launched (cold attach).
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Amazon S3 supports the following destinations where it can publish events:

A

SQS, SNS and Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

DynamoDB Time-to-Live (TTL) mechanism enables you to manage web sessions of your application easily - T or F

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Size Capacity for TB Snowball appliance

A

80 TB (72 usable)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Size capacity for TB Snowball edge

A

100 TB (83 usable)

28
Q

AWS Cognito to issue JSON Web Tokens (JWT)

A

used for user authentication and not for providing access to your AWS resources. AJSON Web Token (JWT) is meant to be used for user authentication and session management

29
Q

Amazon Data Lifecycle Manager (Amazon DLM)

A

used to automate the creation, retention, and deletion of snapshots taken to back up your Amazon EBS volumes

30
Q

In Auto Scaling, the following statements are correct regarding the cooldown period:

A
  1. It ensures that the Auto Scaling group does not launch or terminate additional EC2 instances before the previous scaling activity takes effect.
  2. Its default value is 300 seconds.
  3. It is a configurable setting for your Auto Scaling group.
31
Q

Max number of EC2 instance per region

A

20

32
Q

Can EBS tolerate an Availability Zone failure each and every time?

A

No, all EBS volumes are stored and replicated in a single AZ only.

33
Q

What needs to be configured outside of the VPC for you to have a successful site-to-site VPN connection?

A

An Internet-routable IP address (static) of the customer gateway’s external interface for the on-premises network

34
Q

having a secondary private IP address is only used within the VPC, not when connecting to the outside Internet - T or F

A

true

35
Q

Pilot Light

A

> quicker that Backup Restore because the core pieces of the system are already running and continually kept up to date (not as fast as Warm Standby)
describe a DR scenario in which a minimal version of an environment is always running in the cloud

36
Q

Warm standby

A

> faster in system restoration than performing Pilot Light but not as fast as Multi Site
method of redundancy in which the scaled-down secondary system runs in the background of the primary system (not cost effective since some of your services are always running in the background)

37
Q

Multi-site DR

A

> fastest in system restoration during a DR Event
one to one copy of your infrastructure that is located and running in another region or AZ (active-active configuration)

38
Q

Backup Restore DR

A

> slowest system restoration after a DR Event

39
Q

AWS Glue

A

fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics. It does not provide scalability or elasticity to your instances

40
Q

What would happen to RDS if the primary database instance fails in a multi-AZ deployment?

A

The canonical name record (CNAME) is switched from the primary to standby instance

41
Q

Security Groups usually control

A

the list of ports that are allowed to be used by your EC2 instances

42
Q

NACLs control

A

which network or list of IP addresses can connect to your whole VPC

43
Q

If you need flexible application management and TLS termination then we recommend that you use

A

Application Load Balancer

44
Q

If extreme performance and static IP is needed for your application then we recommend that you use

A

Network Load Balancer

45
Q

If your application is built within the EC2 Classic network then you should use

A

Classic Load Balancer

46
Q

Application Load Balancers support

A

TLS termination capabilities, path-based routing, host-based routing and support for containerized applications

47
Q

you can’t create a CNAME record at the zone apex - TRUE OR FALSE

A

TRUE

48
Q

You can create CNAME records only for

A

subdomains

49
Q

Cognito ID

A

> used to deliver temporary, limited-privilege credentials to your application so that your users can access AWS resources.
unique Amazon identity ID for your end user immediately if you’re allowing authenticated users or after you’ve set the login tokens in the credentials provider if you’re authenticating users

50
Q

AWS Step Functions service

A

lets you coordinate multiple AWS services into serverless workflows so you can build and update apps quickly

51
Q

Elastic Load Balancers distribute traffic among EC2 instances across multiple AvailabilityZones but not across AWS regions - T OR F

A

TRUE

52
Q

cloudFront geo-restriction feature is primarily used to

A

prevent users in specific geographic locations from accessing content that you’re distributing through a CloudFront web distribution.

53
Q

Cold HDD

A

throughput oriented storage for large volumes of data that is infrequently accessed

54
Q

Identity Providers can be managed in the IAM dashboard - true or false

A

true

55
Q

By default, all data stored by AWS Storage Gateway in S3 is encrypted server-side with Amazon S3-Managed Encryption Keys (SSE-S3) - T or F

A

true

56
Q

EBS volumes can be attached to any EC2 Instance in any Availability Zone. - true or false

A

false; you can attach it to any EC2 instance in THE SAME Availability Zone

57
Q

Can an EBS volume persist independently from the life of an instance - Yes or No?

A

Yes, An EBS volume is off-instance storage that can persist independently from the life of an instance

58
Q

Server Name Indication (SNI) is available in the CLB - true or false

A

Classic Load Balancer does not supportServer Name Indication (SNI). You have to use an Application Load Balancer instead or a CloudFront web distribution to allow the SNI feature

59
Q

What are the prerequisites when routing traffic using Amazon Route 53 to a website that is hosted in an Amazon S3 Bucket?

A
  1. The S3 bucket name must be the same as the domain name. (For example, if you want to use the subdomain portal.tutorialsdojo.com, the name of the bucket must be portal.tutorialsdojo.com)
  2. A registered domain name
60
Q

When you do you need to enable Cross-Origin Resource Sharing (CORS)?

A

when your client web application on one domain interacts with the resources in a different domain.

61
Q

CORS

A

Cross Origin Resource Sharing - one way the server at the other end (not the client code in the browser) can relax the same origin policy

62
Q

SQS - who is responsible for deleting the message from the queue?

A

Your application should delete it after processing

63
Q

Amazon S3 supports the following destinations where it can publish events:

A
  1. SQS
  2. SNS
  3. Lambda
64
Q

AJSON Web Token (JWT) is meant to be used for

A

user authentication and session management.

65
Q

Can you do an EBS-cycle policy in Amazon S3?

A

NO, there is no such thing as EBS-cycle policy in Amazon S3

66
Q

Default Network ACL allowsallinbound and outbound IPv4 traffic - true or false

A

true

67
Q

Inbound and Outbound behavior of Non Default NACL

A

Inbound - Deny; Outbound - Deny

Other concepts (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions