Practice 3 Flashcards

1
Q

AWS AppSync

A

> simplifies application development by letting you create a flexible API to securely access, manipulate, and combine data from one or more data sources.
managed service that uses GraphQL to make it easy for applications to get exactly the data they need.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

workflow in SWF

A

defines all the activities in the workflow.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

purpose of a decision task

A

tells the decider the state of the workflow execution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

activity task

A

tells the worker to perform a function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

SWF task

A

represents a single task in the workflow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Kinesis data stream stores records from(duration)

A

24 hours by defaultto a maximum of 168 hours.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Server-Side Encryption

A

You request Amazon S3 to encrypt your object before saving it on disks in its data centers and decrypt it when you download the objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Client-Side Encryption

A

You can encrypt data client-side and upload the encrypted data to Amazon S3. In this case, you manage the encryption process, the encryption keys, and related tools.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

2 Client-Side Encryptions

A
  1. Client-Side Encryption with AWS KMS–Managed Customer Master Key (CMK)
  2. Client-Side Encryption Using a Client-Side Master Key
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

CloudFront Origin Access Identity

A

feature which ensures that only CloudFront can serve S3 content

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Glacier retrieval options

A
  1. Standard - 3 - 5 hours
  2. Expedited - 1 - 5 mins
  3. Bulk - 5 - 12 hours
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Glacier Select

A

you can run queries and custom analytics on your data that is stored in Glacier, without having to restore your data to a hotter tier like Amazon S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Glacier Provisioned Capacity

A

> ensures that your retrieval capacity for expedited retrievals is available when you need it.
Each unit of capacity provides that at least three expedited retrievals can be performed every five minutes and provides up to 150 MB/s of retrieval throughput.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Why purchase Glacier Provisioned Capacity

A

You should purchase provisioned retrieval capacity if your workload requires highly reliable and predictable access to a subset of your data in minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Ranged Archive Retrievals

A

retrieve an archive from Glacier, you can optionally specify a range, or portion, of the archive to retrieve:
> Manage your data downloads
> Retrieve a targeted part of a large archive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Amazon S3 now provides increased performance to support at least ? requests per second to add data and ? requests per second to retrieve data

A

at least 3,500 requests per second to add data and 5,500 requests per second to retrieve data

17
Q

Lambda automatically monitors functions on your behalf and reports metrics through Amazon CloudWatch:

A
  1. Duration – The average, minimum, and maximum execution times.
  2. Invocations – The number of times that the function was invoked in each 5-minute period.
  3. Error count and success rate (%) – The number of errors and the percentage of executions that completed without error.
  4. DeadLetterErrors – The number of events that Lambda attempted to write to a dead-letter queue, but failed.
  5. IteratorAge – For stream event sources, the age of the last item in the batch when Lambda received it and invoked the function.
  6. Throttles – The number of times that execution failed due to concurrency limits.
18
Q

The following VPC peering connection configurations are not supported.

A
  1. Overlapping CIDR Blocks
  2. Transitive Peering
  3. Edge to Edge Routing Through a Gateway or Private Connection
19
Q

Therevoke-security-group-ingresscommand

A

removes one or more ingress rules from a security group

20
Q

revoke-security-group-egress

A

Removes one or more egress rules from a security group

21
Q

When connecting to your EC2 instance via SSH, you need to ensure that

A

port 22 is allowed on the security group of your EC2 instance.

22
Q

Network ACL is much suitable to control the traffic that goes in and out of your entire VPC and not just on one EC2 instance.- T or F

A

true

23
Q

You can modify a launch configuration after creating it - T or F

A

false; you can’t modify

24
Q

When you create a launch configuration, you specify information for the instances such as the:

A
  1. block device mapping.
  2. Amazon Machine Image (AMI) ID
  3. key pair,
  4. instance type,
  5. Security groups
25
Q

Active-Active Failover

A

Use this failover configuration when you want all of your resources to be available the majority of the time. When a resource becomes unavailable, Route 53 can detect that it’s unhealthy and stop including it when responding to queries.

26
Q

Active-Passive Failover

A

Use an active-passive failover configuration when you want a primary resource or group of resources to be available the majority of the time and you want a secondary resource or group of resources to be on standby in case all the primary resources become unavailable. When responding to queries, Route 53 includes only the healthy primary resources. If all the primary resources are unhealthy, Route 53 begins to include only the healthy secondary resources in response to DNS queries.

27
Q

How does Amazon ElastiCache improve database performance?

A

By caching database query results.

28
Q

Lambda error EC2ThrottledException

A
  1. You only specified one subnet in your Lambda function configuration. That single subnet runs out of available IP addresses and there is no other subnet or Availability Zone which can handle the peak load.
  2. Your VPC does not have sufficient subnet ENIs or subnet IPs.
29
Q

allowed block size in VPC is between

A

a /16 netmask (65,536 IP addresses) and /28 netmask (16 IP addresses) and not/27 netmask

30
Q

Billed EC2 instance states

A
  1. running
  2. stopping - billed if preparing to hibernate
  3. terminated - reserved instances are billed until the end of their term according to their payment option
31
Q

Unbilled Ec2 instance states

A
  1. Pending
  2. stopping - if preparing to stop
  3. stopped
  4. shutting down
  5. terminated
32
Q

The presigned URLs are useful if

A

you want your user/customer to be able to upload a specific object to your bucket, but you don’t require them to have AWS security credentials or permissions.

33
Q

origin access identity (OAI)

A

prevents users from viewing your s3 files by simply using the direct URL for the file..instead they would need to access it using a cloudfront URL

34
Q

Signed URLS vs signed cookies

A

Signed URLS:
1. RMTP distribution (streaming) - signed cookies aren’t supported for RMTP
2. Restrict access to individual files (ex: installation download for your application)
3. client using custom HTTP that don’t support cookies
signed cookies:
1. provide access to multiple restricted files
2. you don’t want to change current urls