Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Solutions Architect Certification - Associate > Practice Test #1 > Flashcards

Practice Test #1 Flashcards

1
Q

For EFS on an EC2 instance, how many days since last access do you do you choose for your lifecycle policy to automatically move files to IA storage?

A

7 days since last access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

After cloud migration from on-prem, which are fully managed AWS services?

A

DynamoDB & RDS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What would you use to provide a library of metabolism assessment functions to developers to share?

A

Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Company in NY needs S3 bucket in SF that is same of current prod S3 bucket. What 2 things should you configure?

A

S3 Bucket Versioning, Cross-Region Replication (requires the versioning!)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does Amazon S3 Glacier Vault Lock guarantee?

A

Non-rewriteable && non-erasable format (Write-Once-Read-Many)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What service do you use to ensure that users in Europe are directed to this website. www.poopbutthole.com ?

A

Route53 - Geolocation routing allows you to use the location of users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What two services does AWS Instance Scheduler help with?

A

RDS and EC2 Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Need a highly available de-coupled web application. What 3 services should you use?

A

SQS, EC2, and Elastic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

In Change Controls, for S3 Eventual Consistency, what does updating ‘DelaySeconds’ attribute mean?

A

DelaySeconds = new message is added to a SQS queue, it will be hidden from consumers instances for fixed period.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When are the messages hidden for a VisibilityTimeout in a SQS queue?

A

After it is consumed from the queue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the minimum size of an S3 Object?

A

0 bytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What type of routing policy allows for multiple servers to be sent traffic randomly?

A

Multivalue Routing (basically Simple Routing - multiplied)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Of RDS, DynamoDB, EC2, and S3, which ones need you to design redundancy into them?

A

EC2 & RDS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is RAID 0 vs RAID 1?

A

RAID is a configuration to use with a traditional bare metal server for EBS.
RAID 0 = for greater I/O performance with a single volume
RAID 1 = on-instance redundancy, mirror 2 volumes together
DO NOT BOOT FROM RAID VOLUME

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Is Elastic Load Balancer stateful?

A

YES BITCH

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What do you need to create a second copy of prod env in US-EAST-1 and copy needs to be in US-EAST-2 ?

A

Route53 Private Hosted Zone records, VPC, Security Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Confidential data in S3 but need it available in different geographical location?

A

Enable Cross-Region Replication for the S3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Oracle software license?

A

Dedicated Hosts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A Multi-AZ RDS deployment will automatically fail-over as a result of what?

A

Loss of availability in primary AZ & Loss of network connectivity to Primary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Is S3 Transfer Acceleration a HIPAA compliant program?

A

YES mam, also S3 TA won’t take more than a week

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is proactive event-based scaling vs. cyclic scaling?

A

Cyclic scaling - occurs at a fixed interval

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is supported by the Basic Support plan?

A

Service Limit Increase, Account and Billing Support (other is Technical Support only higher levels)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What service allows you to store files as objects in Amazon S3?

A

AWS Storage Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How can you avoid error of max object size exceeded when uploading a HD video to S3 bucket?

A

Use Multipart Upload API to copy to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What service enables on-prem to use AWS storage?

A

AWS Storage Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What service is serverless interactive query service to analyze data in S3?

A

Amazon Athena

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Which port does Amazon EC2 throttle traffic to all EC2 instances?

A

Port 25

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Which layers of DDoS attacks does AWS automatically address?

A

Layer 3 & Layer 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What 2 things do you need to deploy code to the CLl?

A

Access Key and Secret Access Key in CLI config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

If you don’t want to use or maintain client-side encryption library, what S3 encryption option can you use to secure data at rest?

A

SSE-C - Customer controlled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What can you use to bypass existing web server for uploads to avoid increasing load on server?

A

Use Pre-Signed URLs to upload images

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Requirement for applications to be separate on cloud, but need to exchange data and communicate with the on-prem data centers. What should you use?

A

Individual VPCs for each app with peering connections between them.
Shared VPC with Direct Connect to the on-prem

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Application’s load balancer will need to always be on same IP Address. Which config do you use for your Load Balancer?

A

Network Load Balancer in public subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What are the 3 types of server-side encryption for S3?

A

SSE-S3, SS3-C, SSE-KMS, or a client library like S3 Encryption Client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What can you use to connect your cloud resources to your own IPSec VPN connections?

A

VPC ya dumb bitch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Name the 4 types of EBS volumes and what you should use them for.

A

gp2 - General Purpose SSD - most workloads
io1 - Provisioned IOPS SSD - Databases
st1 - Throughput Optimized HDD - Big Data & Data Warehouses
sc1 - Cold HDD - File Servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

How many Read Replicas of a DB can you have?

A

5, and each RR will have its own DNS endpoint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What kind of storage and how many AZ does a DynamoDB have?

A

SSD storage && 3 geographically distinct data centers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What is an Eventually Consistent Read (DynamoDB)?

A

Default, consistency usually within a second! Best Read Performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What is an Strongly Consistent Read (DynamoDB)?

A

Takes < 1 second

Returns result that reflects all writes that received a successful response prior to read

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Explain ElastiCache for Memcached and ElastiCache for Redis.

A

Memecached - scales horziontally, multi-threaded

Redis - Advanced data types, pub/sub/ sorting, Multi-AZ & restore abilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

How is Multivalue Policy different than Simple Routing Policy in Route53?

A

Multivalue - puts health checks on each record set

Simple Routing - one record with multiple iP addresses - random order

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

If you have a question on Route53 and it mentions subdomain, which Policy do you use?

A

C-name, but usually use Alias!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Explain the difference between Security Groups and Network ACLs.

A

Network ACLs - stateless - can block IP addresses (allow and deny rules)
Security Groups = stateful

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What do you use to access a private subnet from a public subnet?

A

A Bastion host - SSH into the private subnet from the public subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is the largest and smallest subnet Amazon allows in VPC?

A 
Largest = /16
Smallest = /28
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What comes with the default VPC?

A
  • All subnets are internet accessible
  • each EC2 instance has both public and private IP addresses
  • get a NACL, Security Groups & Route Table
48
Q

What is VPC peering?

A

using private IP addresses to connect VPCs together

49
Q

Is there 1 subnet per 1 Availability Zone?

A

Yes, only 1 subnet for 1 AZ, but you can have multiple subnets in the same AZ

50
Q

How many IP addresses are actually available in IPv4?

A

Only 251, Amazon reserves 5 IP addresses

51
Q

Is there 1 Internet Gateway attached to one VPC?

A

Yes

52
Q

What does a NAT Instance help you do & what is it always behind?

A

NAT Instance enables you to install software to a private subnet

  • NEED to Disable Source/ Destination Check on Instance
  • ALWAYS behind a Security Group
  • If bottleneck, go up in size
53
Q

What is a NAT Gateway and when do you use it?

A

NAT Gateway - NAT instance but redundant (scales automatically)

  • use for Enterprise
  • NO Security Group
  • Spread across EC2 instances
54
Q

NACLs are evaluated before Security Groups. True or False bish?

A

TRUE BISH

55
Q

How many subnets do you need to provision an Elastic Load Balancer?

A

At least 2 public subnets

56
Q

What do VPC Flow Logs do?

A
  • capture information on the IP traffic going in and out of network interfaces on VPC
  • can be stored in CloudWatch Logs
  • can be created at VPC, Subnet, or Network Interface Level
57
Q

What is a VPC Endpoint?

A
  • Connects VPC to AWS services powered by PrivateLink (virtual devices)
  • Traffic doesn’t leave Amazon network
  • Interface and Gateway endpoints
58
Q

What are the two types of VPC Endpoints and what do they do?

A

ENI = Interface Endpoints - attach to an EC2 - work with private IP address to act as entry point for traffic

Gateway Endpoints - just like a NAT Gateway - supports S3 and DynamoDB

59
Q

What is Egress-Only Internet Gateway?

A

Allows IPv6 within a VPC to access internet

60
Q

Which Layers do Application, Network and Classic Load Balancers work on, respectively?

A

Application Load Balancer = works on Layer 7 & application aware
Network Load Balancer - extreme performance - Layer 4
Classic - Layer 7-specific features, x-forwarded, sticky sessions + Strict Layer 4

61
Q

What does a X-forwarded-for header get? (Classic Load Balancer)

A

A user’s public IPv4 address

62
Q

How are instances monitored by ELBs reported as?

A

InService/OutOfService

63
Q

What do you use for Disaster Recovery and for Performance?

A 
Multi-AZ - DR
Read Replicas (Caching) - Performance
64
Q

What are the JSON files that CloudFormation is based off of?

A

STACKS BITCH

65
Q

What is AWS Quick Start?

A

Quick Start is a bunch of CloudFormation templates already built to create complex environments quickly

66
Q

Can you use the secondary database as an independent read node if you have deployed an RDS database into Multi-AZ?

A

NO YA BOOB

67
Q

Describe SQS vs SNS.

A

SQS - pull based - polling, messaging queue for web service - DECOUPLING
SNS - push-based, notifications to subscribers

68
Q

How long can messages in a SQS queue be kept?

A

1 minute - 14 days, default retention is 4 days

69
Q

In terms of SQS, what is the visibility timeout?

A

Time a message is invisible in the queue to the instance

  • if message is processed before this amount, its deleted
  • if you get duplicate messages, increase this time limit
  • max value is 12 hours
70
Q

For SWF (Simple Workflow Service), can a task be duplicated?

A

No, a task is assigned only once and is never duplicated

  • SWF = coordination of tasks
  • may have human component
  • Actors, starters, deciders, activity workers
71
Q

API Gateway is…

A

fully managed service to publish and manage API to scale access data or functionality from back-end services

  • think LAMBDA
  • FRONT DOOR to aws
72
Q

What does CORS do?

A
  • enables the browser to request a resource outside of the domain of the first resource
  • use when js/ajax
  • enable on Api Gateway
73
Q

What do you enable if you see “Origin policy cannot be read at the remote resource.”

A

CORS on the API Gateway

74
Q

What is Amazon Kinesis?

A

helps you continuously stream media

- can use Kinesis Analytics on both types of Kinesis flows

75
Q

Explain Kinesis Streams

A
  • Streams persistently store data 24hrs - 7 days

- uses Shards to save data

76
Q

Explain Kinesis Firehouse

A
  • analyzes data immediately as it comes in
  • no persistent storage
  • best for Transforming and loading data into S3, data stores
77
Q

What is always recommended for mobile apps in terms of sign up and sign in?

A

AWS Cognito, a Web Identity Federation Service

- sign in/up w Facebook, google, etc via token exchange

78
Q

What are the two different types of Cognito Pools?

A

Cognito User Pools = user directory - manages username, passwords and actual user sign in via JWT
Cognito Identity Pools = gives AWS credentials to services themselves (S3 or DynamoDB)

79
Q

How does Lambda scale?

A

One request to one lambda function

80
Q

What 2 factors does Lambda pricing depend on?

A
  1. Amount of memory - Number of requests (first million are free)
  2. Duration - how long function runs
81
Q

Which service is an asynchronous (non-direct) trigger for Lambda and which cannot trigger Lambda?

A

Non-direct = S3

Can’t use trigger Lambda = RDS

82
Q

What can you use to identity a Lambda?

A

ARN id

83
Q

Name 3 services that super hyper-threading on one or more virtual CPUs.

A

EC2, ECS, Lambda

84
Q

What is Amazon Lightsail?

A

Creates virtual private servers on the cloud

85
Q

Are IAM Roles and Route53 global across a console?

A

Ya betch ur ass

86
Q

DynamoDB uses parallel processing to have predictable performance and does so by utilizing these two things:

A
  • SSD storage

- partitioned across multiple nodes

87
Q

Name 2 things that AWS provide when you are launching a new instance from a copied AMI

A
  • Launch permissions
  • user-defined tags
  • S3 bucket permissions from source AMI to new AMI
88
Q

What metric does CloudWatch NOT have? (What metric do you need to make custom to track with CloudWatch)

A

Memory Usage

89
Q

Explain Virtual Style, Path Style, Legacy Global, and Static Hosting Style Path naming conventions.

A

Virtual = bucketname.s3.region
Path = s3-bucket_name.region
Global - no region
Static = given DNS name.s3.region

90
Q

What are the default rates for logging metrics in CloudWatch for an EC2 instance?

A

every 5 minutes default,

every 1 minute detailed

91
Q

Do you need to make DynamoDB MultiAZ (no the answer is no, its regional)

A

No its Regional service (better for stateless)

92
Q

Which Storage Gateway Configuration would you use to store files on AWS with low-latency?

A
  • File Gateways

- Gateway-Cached

93
Q

What is Amazon Workspaces?

A

Serves virtual cloud-based desktop sessions to your desktop/laptop users (windows or linux)

  • Browser can be used from WorkSpaces to access web servers & use a NAT Gateway because traffic is initiated from the laptop itself
  • provides creating an authentication directory and an ENI for each session inherently
94
Q

Which two services allows you root-level access to underling OS?

A

EMR and EC2 (hEE heEEE)

- can SSH to access the OS

95
Q

Can you enable hibernation on an existing instance? Ex. to re-use it later?

A

NO, Hibernation can be enabled only at instance launch and not when running or stopped

96
Q

Is encrypting an existing RDS DB instance currently supported? Will an outage be required?

A

NO! You have to create a new DB instance with encryption enabled and manually migrate your data into.
And yes, an outage will be required

97
Q

How do you reduce the number of empty responses in terms of SQS ?

A

Use long polling by setting “RecieveMessageWaitTimeSeconds” > 0

98
Q

What should you use to upload files that are greater than 100 Mb ?

A

Multipart Upload! Its required for files 5 GB and larger

99
Q

List the two ways RDS provides to back up and restore DB instances:

A
  1. Automatic Backups

2. database snapshots

100
Q

How do you encrypt data on S3 at rest?

A
  • Enable Server Side Encryption on bucket - automatically apply AES-256 encryption
  • Encrypt data locally using encryption keys and transfer encrypted data to S3
101
Q

What 2 fucking things do you need to SSH into the EC2 instance?

A

Access Key and Secret Access Key in the CLI configuration

102
Q

What is AWS Firewall Manager?

A

Service to mange firewall rules across accounts in AWS Organizations. Manager must be Administrator account

103
Q

Can you peer two VPCs with overlapping CIDR ranges assigned?

A

Absu-fucking-lootly not ya ASS HOLE

104
Q

Does Route53 support DNSSEC or DNSKEY? Hmm hmn does it?

A

NO YOU FUCKING IDIOT

105
Q

How many Elastic IP addresses can you have in a region?

A

5

106
Q

What happens when an EC2 instance with an Elastic IP is stope and restarted?

A
  1. Lose all instance store data

2. underlying host for the instance may be changed

107
Q

Elastic IP Addresses CANNOT be used with ELB, ALB or RDS. True or False

A

TRUE RTURURUUEUUEE

108
Q

Perfect Forward Secrecy is used to offer SSL/TLS cipher suites for which 2 services?

A

CloudFront and Elastic Load Balancing

109
Q

Using Classic Load Balancer, you need to secure application to allow many domains to serve SSL traffic on same IP address.

A
  1. Make SSL certificate in AWS Certificate manager
  2. Create CloudFront web distribution
  3. Link certificate to distribution and enable SNI (Server Name Indication)
110
Q

What events will make an Multi-AZ RDS automatically failover to the standby replica?

A

Loss of availability in primary AZ && Storage failure on primary DB

111
Q

What happens when all primary resources are unhealthy?

A

Route53 will include only healthy secondary resources in response to DNS queries

112
Q

What types of data would you want to store in EFS storage?

A

Big Data analytics, enterprise applications, database backups, developer tools, container storage

113
Q

What 2 requirements must be met to integrate an standard S3 bucket and web domain name registered with Route53?

A

S3 bucket name must == domain name

Registered domain name

114
Q

What do you need to log into an EC2 instance?

A

Key pairs

115
Q

Which EBS storage class for large, sequential I/O operations?

A

sc1 = Cold HDD

116
Q

What is the unique Amazon Cognito Identifier that ti returns as a temporary, limited-privilege credential?

A

Cognito ID

117
Q

What are the 3 services that are destinations for S3 to publish events when enabling notifications?

A

Lambda, SQS, SNS

AWS Solutions Architect Certification - Associate (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions