Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS > SA - Associate - Exam prep > Flashcards

SA - Associate - Exam prep Flashcards

1
Q

Which RDS databases support IAM auth?

A

MySQL, Postgres, Aurora

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the default and enhanced aggregation times in CW for EC2?

A

5 minutes and 1 minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What metrics are not supported for CW/EC2 by default?

A

Disk space and memory utilisation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the most specific IP range you can bring to AWS?

A

/24

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the steps for bringing IP address ranges to AWS?

A

Create an ROA (route origin authorization) through your RIR (regional internet registry)

Publish self-signed X.509 cert in the RDAP remarks for the address range, so AWS can validate that it’s you

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Summarise the data transfer charges

A

Data in is free

Data out between regions or services costs

Data out to internet costs

Data out to another AZ in same region is charged (but at a lower cost compared to regional transfers)

Data transfer inter-AZ, but using a private IP address, is free

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does AWS AD Connector do?

A

Redirects AD requests to an on-prem AD, without storing any directory information in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the default retention period for RDS enhanced monitoring?

A

30 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the two default query queues created in RDS?

A

Superuser queue (for system tasks, e.g. cancelling a user’s long-running query)

Default user queue (concurrency = 5)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is POSIX?

A

Portable operating system interface - family of standards for maintaining compatibility between OSs. EFS is POSIX compliant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the difference between WAF and Shield?

A

Shield is for DDoS attack protection, WAF is for stuff like SQL injection protection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the difference between S3 Select and Athena?

A

S3 select allows apps to use simple SQL-like queries to filter data in S3.

Athena is very similar - perhaps more powerful - and it’s interactive.

Select is probably more intended for app use

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Redshift enhanced routing

A

Redshift enhanced routing: forces all COPY and UNLOAD between your cluster and data repositories through your VPC, meaning you can use features like security groups (COPY puts data in, UNLOAD gets the result of a query)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Describe Aurora endpoints

A

Aurora abstracts connections to DB cluster with endpoints. Can configure custom endpoints to go to primary instance (handles all DDL queries), or to specific subnets of instances (including specific instances). Can also direct traffic to the reader endpoint and Aurora will automatically load balance across read-only replicas

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is special about port 25 for EC2?

A

EC2 throttles all traffic to port 25 (SMTP) by default - you can request for this to be removed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the default resources you get when creating a new VPC?

A

Security group

Routing table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Where can S3 events be published?

A

SNS, SQS and Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the default ASG cooldown period?

A

300 seconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the snowball capacities?

A

Snowball - 50TB

Snowball edge - 80TB

Snowmobile - 100PB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Do application and classic LBs support SNI?

A

ALB does, classic doesn’t

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Summarise the AWS storage gateway options

A

File gateway - on-prem adapter for NFS and SMB access to S3

Volume gateway - ISCSI access to S3

(Cached - frequently accessed data stored locally
Stored - all data locally, async snapshots sent to S3)

Tape gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

In DR, what is RPO and RTO?

A

Recovery point objective - point in time in past to which you will recover

Recovery time objective - point in time in future when recovery is complete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Describe SQS retention periods

A

1 minute to 14 days.

Default: 4 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Describe the SWF components

A

Domains contain workflows that can interact

SWF informs decider of workflow history and state of workflow

Decider coordinates workflow

Activity worker does stuff

Deciders and activity workers work on tasks

Actors - anything that interacts with SWF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is heartbeat timeout in EC2?

A

Timeout before unhealthy instances are terminated so you have time to troubleshoot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Other than manually doing it, when are elastic IP addresses dissociated from EC2 instances?

A

On termination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is Amazon Glacier Select?

A

Similar to S3 Select

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are the GET/PUT limits of S3?

A

GET: 5,500 per second
PUT: 3,500 per second

29
Q

What are the lambda metrics?

A

Invocations

Duration

Error count

Dead letter errors

Throttles

Iterator age (stream-based invocations only - DynamoDB and Kinesis). Age of last record for each batch of records processed

Concurrent executions (for functions that have a concurrency limit defined)

Unreserved concurrent executions (for functions that don’t have a concurrency limit defined)

30
Q

Describe API Gateway caching

A

This can be enabled with a TTL. Max is 3600, default is 300, 0 means caching is disabled

Just over 1MB of data can be cached

31
Q

How many subnets can a network ACL apply to?

A

Many

32
Q

What are the VPC CIDR ranges?

A
  1. 168/16
  2. 16/12

10/8

33
Q

SWF vs step functions

A

Prefer step functions over SWF. The only advantage with SWF is that you can write decider logic in any language, whereas step functions takes a declarative JSON file, so you have less control with step functions.

34
Q

What is RedShift Spectrum?

A

Allows use of redshift on data in S3 (data is queried in-place)

35
Q

What is the maximum size ratio for provisioned IOPS?

A

50:1

36
Q

Describe the properties of general purpose SSDs (ST1)

A

General purpose SSDs (ST1) have a baseline performance tied to volume size (base + 3 IOPS per gb). They can burst to 3000 IOPS (based on a credit system). Once disks get to a particular size, they have a greater performance baseline than the burst anyway

37
Q

Describe the properties of cold HDDs (SC1)

A

HDD cold (SC1) has a similar model to general purpose SSDs. There’s a maximum burst of 250 mb/s, and the baseline scales linearly at 6 mb/s per 0.5tb. Burst is always greater than baseline, unlike the general purpose SSDs

38
Q

What is AWS SSM agent?

A

Installed on machines (EC2 or on-prem) to allow systems manager to manage/update them

39
Q

What is AWS inspector agent?

A

Gathers information to assess the security of EC2 instances

40
Q

Is Kinesis FIFO?

A

Yes - all messages have a sequence number

41
Q

AWS Glue vs AWS Data Pipeline

A

AWS glue is a managed service that runs using Apache Spark. You can only use a couple of languages (Scala or Python) and it takes a data first approach

AWS data pipeline is a managed orchestration service that launches compute resources in your AWS account. Use this if you need more control and direct access to the compute resources handling the data

42
Q

What extra stats does RDS enhanced monitoring give you?

A

Memory, disk IO, and database and OS processes

43
Q

Certificate manager vs IAM

A

You can upload certificates to either AWS Certificate Manager or IAM. Certificate manager is recommended, but if it doesn’t support the algorithms or key lengths of the certificate you can use IAM. Some services can use certificates in IAM (e.g. elastic beanstalk and cloudfront)

44
Q

What are the pricing properties of spot instances?

A

Instances are billed to the nearest second

If AWS terminates the spot instance in the first hour, it’s free

If AWS terminates in any subsequent hour, you pay to the nearest second

If you terminate it at any point, you pay to the nearest second

For Windows, you’ll pay for the whole hour if you terminate it

45
Q

Describe the support plans

A

Basic - everyone gets this. Forums, whitepapers etc. 2 trusted advisor checks

Developer - As above, and business hours email support, <24h response time for general and <12h for system impaired, one person can open cases

Business - As above, but 24h email, <1h down, <4h prod impaired, <12 system impaired, <24h general guidance

Enterprise - As above, but dedicated TAM, and <15m down prod, <1h down sys, <4h prod impaired, <12h system impaired, <24h general guidance

46
Q

AWS Config vs EC2Config

A

AWS Config - monitoring and auditing of resource configuration. You can see resource histories etc.

EC2 config and EC2 launch are used on older/newer versions of windows server to process some systems manager commands

47
Q

SQS visibility timeout min/max/default

A

0 seconds - 12 hours

Default is 30 seconds

48
Q

What is SQS RecieveMessagesWaitTime?

A

Used to configure long/short polling. Can be set for 0-20s - the amount of time a request will wait for a message to arrive (0 is short polling)

49
Q

Delay queues vs message timers in SQS

A

Delay queues allow 0-15m delay before ALL new messages available on queue

Message timers allow 0-15m delay for individual messages

50
Q

How can you connect to AWS services without traversing the internet?

A

Interface - for services with gateways powered by PrivateLink (interface as in ENI - you connect to a private IP address to access some AWS service)

Gateway - you configure a route in the route table to direct traffic going to a particular IP address to an AWS Service

For S3 and DynamoDB, you use a gateway endpoint, NOT an interface endpoint. These are not yet supported by PrivateLink

51
Q

Describe route53 aliases

A

Any record type can be an alias

For zone apex (naked domain), have to use A record

52
Q

How to Aurora failovers work?

A

If you have a replica instance, it’ll flip the CNAME record

If not (single instance), it will attempt to recreate in same AZ, or if it can’t, in another AZ

53
Q

Do private IP addresses change on EC2 restart?

A

For classic EC2, it can change every time as you just get one from the pool.

For EC2-VPC (where the instance is in the default VPC or a custom one) you get a static private IP

54
Q

RDS MySQL - which engine should be used?

A

For MySQL, it’s recommended that the InnoDB engine is used instead of MyISAM (which you can use, but should only do so if you require intense, full-text search capability)

55
Q

Can ALBs handle multiple SSL certs?

A

Yes

56
Q

What else needs to be enabled to use CRR?

A

Versioning, in both source and destination

57
Q

What route table rule allows subnets to communicate?

A

CIDR block -> local (routes to VPC)

58
Q

How can multicast networking be done in a VPC?

A

Create an overlay network at the OS level. This works as it’s actually using unicast IP routing (supported in the VPC)

59
Q

How can CloudFront retention be configured?

A

To control how long files remain in a CloudFront cache, you can set min/max/default TTL settings. For individual files, you can also set “Cache-control: max-age: 5” header on the file from the origin

60
Q

Describe partition groups

A

Spread - spread all instances so they don’t share underlying hardware (can use multiple AZs) - fewest instances

Cluster - pack close together in a single AZ

Partition - spread across non-overlapping logical partitions that don’t share underlying hardware (can use multiple AZs)

61
Q

What is the conflict resolution model of DynamoDB global tables?

A

Last writer wins

62
Q

Which RDS instances DON’T support read replicas?

A

Oracle and SQL Server

63
Q

What is the maximum provisioned IOPS in RDS?

A

40k, apart from SQL Server that has 32k

64
Q

What is the max storage in RDS?

A

32TB, apart from SQL server that has 16TB

65
Q

What are the 3 DB instance types in RDS?

A

Standard
Memory optimized
Burstable performance

66
Q

When can’t you stop RDS instances?

A

SQL server using multi-AZ (uses SQL mirroring instead of Amazon tech)

Instances that have or are read replicas

67
Q

What is the retention period range for RDS snapshots?

A

1-7 days

68
Q

What instance states are billed in RDS?

A

All apart from creating, deleting and failed. Stopping and stopped only billed for storage.

AWS (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions