Practice 6 Flashcards

1
Q

The recommended storage engine for MySQL is

A

InnoDB and notMyISAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

InnoDB instances can be migrated to Aurora, while MyISAM instances can’t be migrated - T or F

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Example of ALB path based routing:

A

URL of /api/android

URL of /api/android

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is host based routing:

A

host-based routing defines rules that forward requests to different target groups based on the host name in the host header instead of the URL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Example of ALB host based routing:

A

allows you to send a request for api.example.com and for web.example.com to the same endpoint with the certainty it will be delivered to the correct back-end application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Storage optimized instances are designed for

A

workloads that require high, sequential read and write access to very large data sets on local storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Memory optimized instances are designed to

A

deliver fast performance for workloads that process large data sets in memory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Compute optimized instances are ideal for

A

compute-bound applications that benefit from high-performance processors, such as batch processing workloads and media transcoding.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

General purpose instances are the

A

most basic type of instances. They provide a balance of compute, memory, and networking resources, and can be used for a variety of workloads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

To prevent your Lambda function from running indefinitely, you specify atimeout - t or F

A

true (default is 3 sec; max 900 sec/15 mins)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

if AWS Lambda total concurrent executions limit is exceeded, the function will be ?

A

throttled but not terminated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Recursive code in your Lambda function directly result to an abrupt termination of the function execution - T or F

A

FALSE;

recursive code in your Lambda function does not directly result to an abrupt termination of the function execution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

if a user assumes a role, temporary security credentials are created dynamically and provided to the user - T or F

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

The ping utility uses the ? protocol

A

ICMP protocol, so this needs to be set in the Inbound Rules of your security group to ensure that the ping packets can be routed to the EC2 instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

An Elastic IP address doesn’t incur charges as long as the following conditions are true:

A
  1. The Elastic IP address is associated with an Amazon EC2 instance.
  2. The instance associated with the Elastic IP address is running.
  3. The instance has only one Elastic IP address attached to it.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

IAM database authentication works with which databases:

A

MySQL and PostgreSQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

IAM database authentication provides the following benefits:

A
  1. Network traffic to and from the database is encrypted using Secure Sockets Layer (SSL).
  2. You can use IAM to centrally manage access to your database resources, instead of managing access individually on each DBinstance.
  3. For applications running on Amazon EC2, you can use profile credentials specific to your EC2 instance to access your database instead of a password, for greater security
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Database Backtrack feature

A

simply “rewinds” the DB cluster to the time you specify.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

–ssl-caparameter

A

can provide SSL connection to your database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Multicast?

A

network capability that allows one-to-many distribution of data. With multicasting, one or more sources can transmit network packets to subscribers that typically reside within a multicast group

21
Q

Amazon VPC support multicast or broadcast networking - True or False

A

false; Amazon VPC does not support multicast or broadcast networking

22
Q

overlay multicast is a method of

A

building IP level multicast across a network fabric supporting unicast IP routing, such as Amazon Virtual Private Cloud (Amazon VPC).

23
Q

TheCache-Control max-agedirective

A

lets you specify how long (in seconds) you want an object to remain in the cache before CloudFront gets the object again from the origin server

24
Q

The?? control how long objects stay in the cache

A

Cache-ControlandExpiresheaders

25
Q

Cache-Control minimum expiration time

A

0 seconds for web

3600 seconds for RMTP/1 hr

26
Q

Public Datasets will not cost anything - T or F

A

true

27
Q

Elastic Beanstalk vs ECS in terms of Docker container deployment

A

Both can do the same thing except that Beanstalk AUTOMATICALLY handles the details of capacity provisioning, load balancing, scaling, and application health monitoring while ECS will have to be manually configured to do all these.

28
Q

Port for Remote Desktop connection

A

TCP port 3389 and UDP port 3389

29
Q

AWS recommends that you primarily use file versioning for the following reasons:

A
  • Versioning enables you to control which file a request returns even when the user has a version cached either locally or behind a corporate caching proxy. If you invalidate the file, the user might continue to see the old version until it expires from those caches.
  • CloudFront access logs include the names of your files, so versioning makes it easier to analyze the results of file changes.
  • Versioning provides a way to serve different versions of files to different users.
  • Versioning simplifies rolling forward and back between file revisions.
  • Versioning is less expensive. You still have to pay for CloudFront to transfer new versions of your files to edge locations, but you don’t have to pay for invalidating files.
30
Q

CodeDeploy is a

A

deployment service that automates application deployments to Amazon EC2 instances, on-premises instances, or serverless Lambda functions.

31
Q

In Elastic Beanstalk, where does it store the application files and server log files?

A

Application files are stored in S3. The server log files can be stored in :

  1. EBS and
  2. optionally stored in S3 or in CloudWatch Logs
32
Q

cross-account access

A

You can use an IAM role to delegate access to resources that are in different AWS accounts that you own. You share resources in one account with users in a different account. By setting up cross-account access in this way, you don’t need to create individual IAM users in each account

33
Q

Database Hash Joins are mainly used

A

if you need to join a large amount of data by using an equijoin and not for improving availability.

34
Q

Databsase Asynchronous Key Prefetch is mainly used

A

to improve the performance of queries that join tables across indexes

35
Q

Blue/Green Deployment

A

Blue is the current prod; Green is the new environment where the changes are being deployed

36
Q

For decoupling services, you should use IAM user or role?

A

IAM role not an IAMuser credential

37
Q

How to fix ‘insufficient capacity error’ while adding new instances to a new placement group?

A

Stop and restart the instances in the Placement Group and then try the launch again.

38
Q

Why do we get ‘insufficient capacity error’ when launching new instances to a new placement group?

A

If you try to add more instances to the placement group later, or if you try to launch more than one instance type in the placement group, you increase your chances of getting an insufficient capacity error

39
Q

Do we have a limit in the number of instances in a Placement Group?

A

No

40
Q

Enhanced networking advantages:

A
  1. provides higher bandwidth,
  2. higher packet per second (PPS) performance, and
  3. consistently lower inter-instance latencies.
41
Q

There is an additional charge for using enhanced networking. True or False

A

false; There is no additional charge for using enhanced networking.

42
Q

Can you create a volume out of an EBS snapshot?

A

Yes, you can create a snapshot of the EBS volume first then create a volume using the snapshot in the other Availability Zone if necessary

43
Q

URLs to provide for the IAM user to be able to access the AWS Console?

A

https://YOU.signin.aws.amazon.com/console

44
Q

By DEFAULT, records of a stream in Amazon Kinesis are accessible for up to

A

24 hours from the time they are added to the stream. You can raise this limit to up to 7 days by enabling extended data retention

45
Q

DNSSEC (Domain Name System Security Extensions)

A

Amazon Route 53’s DNS services does not support DNSSEC at this time

46
Q

Amazon Route 53 currently supports the following DNS record types:

A
  • -A (address record)
  • -AAAA (IPv6 address record)
  • -CNAME (canonical name record)
  • -CAA (certification authority authorization)
  • -MX (mail exchange record)
  • -NAPTR (name authority pointer record)
  • -NS (name server record)
  • -PTR (pointer record)
  • -SOA (start of authority record)
  • -SPF (sender policy framework)
  • -SRV (service locator)
  • -TXT (text record)
47
Q

In cloudformation, what section is required?

A

Resources

48
Q

For Microsoft SQL Server, how to implement security of your in-flight data between your web servers and RDS?

A
  1. Force all connections to your DB instance to use SSL by setting therds.force_sslparameter to true. Once done, reboot your DB instance.
  2. Download the Amazon RDS Root CA certificate. Import the certificate to your servers and configure your application to use SSL to encrypt the connection to RDS.
49
Q

RDS running on Microsoft SQL Server: transparent data encryption (TDE) is primarily used to

A

encrypt stored data on your DB instances running Microsoft SQL Server, and not the data that is in-transit.