Practice Exam 2

Question 1

What does the IntegrationLatency corresponds to in API Gateway?

Answer 1

The time between when API Gateway relays a request to the backend and when it receives a response from the backend

Question 2

How do EB worker environments simplify the process of offloading long-running tasks from a web server?

Answer 2

It manages the SQS queue and run a daemon process on each instance that reads from que queue for you

Question 3

What are the three things you need to specify when you create CloudWatch Alarms?

Answer 3

Period
Evaluation Period
Datapoints to Alarm

Question 4

What does the Period represents when you create a CloudWatch alarm?

Answer 4

Length of time to evaluate the metric or expression to create each individual data point for an alarm

Question 5

What does the Evaluation Period represents when you create a CloudWatch alarm?

Answer 5

Number of the most recent periods, or data points, to evaluate when determining alarm state

Question 6

What does the Datapoints to Alarm represents when you create a CloudWatch alarm?

Answer 6

Number of data points within the evaluation period that must be breaching to cause the alarm to go to the ALARM state

Question 7

Do the breaching datapoints have to be consecutive in the evalution period in order to cause the ALARM state?

Answer 7

No

Question 8

What does the _X_AMZN_TRACE_ID environment variable contains?

Answer 8

The tracing header, which includes the sampling decision, trace ID, and parent segment ID

Question 9

When should you choose Memcached over Redis for your caching solution?

Answer 9

You need the simplest model possible
You need to run large nodes with MULTIPLE CORES OR THREADS
You need to cache objects

Question 10

Why does the put-bucket-policy does not help with limiting access to a certain object to only admins?

Answer 10

Because the put-bucket-policy command can only be used to apply policy at the bucket level, not on objects directly

Question 11

What logs can you enable directly in an RDS DB?

Answer 11

Audit Log
Error Log
General Log
Slow Query Log

Question 12

How to establish an end-to-end SSL connection between your origin and your end users when working with CloudFront?

Answer 12

Configure the Origin Protocol Policy

Configure the Viewer Protocol Policy

Question 13

What must you do in order to allow only certain clients to invalidate the cache of an API on API Gateway on every request?
What must the client provide with its request?

Answer 13

Tick the “Require Authorization” checkbox in the Cache Settings of your API via the console

The “Cache-Control: max-age: 0” header

Question 14

What are the three task placement strategies in ECS?

Answer 14

binpack (place tasks based on the least available amount of CPU or memory)
random (place tasks randomly)
spread (place tasks evenly based on the specified value)

Question 15

What are ad hoc requests?

Answer 15

They are requests that are created or done for a particular purpose as necessary

Question 16

What are the two response types associated with HTTP 504 error in API Gateway?

Answer 16

INTEGRATION_FAILURE

INTEGRATION_TIMEOUT

Question 17

What is the response type associated with requests that return HTTP 504 error from time to time (not always)

Answer 17

INTEGRATION_TIMEOUT

Question 18

What are the two deployment types which allow you to shift traffic GRADUALLY to the new version of your application/function?

Answer 18

Canary

Linear

Question 19

Are S3 buckets part of your VPC?

Answer 19

NO!!!

Question 20

What can you do if you have an INTERNAL application running only in private subnet(s) and you need access to an S3 bucket?

Answer 20

Create a VPC endpoint for your S3 bucket

Question 21

What will happen if you specify that you want your data to be SSE using kms (by passing the “x-amz-server-side-encryption” header) and you do NOT pass the “x-amz-server-side-encryption-aws-kms-key-id” header containing the AWS KMS CMK?

Answer 21

The default managed AWS KMS CMK will be used

Question 22

What is CloudWatch metric math used for?

Answer 22

Query multiple CloudWatch metrics or if you want to use math expressions to create new time series based on selected metrics

Question 23

What is the Russian doll caching strategy?

Answer 23

This strategy configures your cache to have nested records which are managed with their own cache keys, and then the top-level resource is a collection of those cache keys

Question 24

What are VPC flow logs?

Answer 24

A feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC

Question 25

What is the Service scheduler in ECS?

Answer 25

A feature of ECS which provides you the ability to run tasks manually (for batch jobs or single run tasks)

Question 26

What is the Container Agent included into?

Answer 26

Into the Amazon ECS-optimized AMIs

Question 27

What are Container Instances?

Answer 27

Amazon EC2 instances that are running the Amazon ECS container agent and have been registered into a cluster

Question 28

Why use Redis over Memcached for storing user session data?

Answer 28

Redis is more highly available