SA Pro - Whizlabs Flashcards
In AWS, the CIDR of a VPC can or cannot be modified after its creation?
CAN be modified by adding a secondary IPv4 IP range (CIDR) to your VPC.
Gateway-Cached volumes can support volumes of _____ TB in size, where as Gateway-stored volume supports volumes of _____ TB in size.
1,024 TB; 512 TB
Application Load Balancers have support for ______ which allows the handling of multiple/separate SSL certificates.
SNI (Server Name Indicator)
What lifecycle events are available in OpsWorks?
Setup
Deploy
Shutdown
What is the default base configuration of Redshift?
One node of 160GB
Elasticache can or cannot be used to store session state.
CAN
A customer trying to achieve a low RPO for a multi-region RDS instance setup should implement synchronous or asynchronous replication?
Asynchronous… Sync would have too much overhead for cross region replication.
When defining DynamoDB primary keys, you should always use the _________ principal.
Many to few
You can only use intrinsic functions in which part of a CloudFormation template?
Resource Properties
Metadata Attributes
Update Policy Attributes
CloudTrails are configured on a _______ basis and a region can include ______ services.
Per Region; Global
Public VIFs required what?
Public CIDR Block range
That the service has a public VIF - I.E. Dynamo
An AWS Direct Connect location only provides access to the AWS ______ associated with it.
Region
How you create a multi-region design with a more reliable network connection without Direct Connect?
1) Create a public VIF to the remote regions public endpoints
2) Use VPN over the public VIF to protect the data
With Elastic Transcoder, the resulting S3 bucket that receives the transcoded file is a prime example of when you can use what type of storage because the transcoded files are easily reproduced?
Reduced Redundancy Storage
What does HDFS stand for?
Hadoop Distributed File System
An EMR cluster is made up of what components?
Master Node
Core Node
Task Node
EMRFS
The EMR Master node does what?
Manages data distribution to core/slave nodes
The EMR Code node does what?
Store data on HDFS from tasks run on the nodes and are managed by the master nodes
The EMR Task nodes do what?
Perform data tasks and send the results back to the core nodes for storage
You can’t export from ___ directly into Redshift, but you can export from _______ or _______ to a new or existing redshift table.
RDS; DynamoDB or S3
What are the two ways you could back up a DynamoDB table to another region?
Data Pipeline
DynamoDB Streams
Can you enable encryption of an RDS instance while it is running?
No
When an RDS is created, how can you securely connect to it?
Every RDS instance has an SSL endpoint.
What can you use to backup your on-prem Oracle db to AWS?
RMAN
What three HTTP methods can Cloudfront cache?
GET
HEAD
OPTIONS
Doe SQS guarantee message delivery?
Yes
What 5 lifecycle events does OpsWorks support?
Setup Configure Deploy Undeploy Shutdown
What are your two common rollout options for OpsWorks?
Rollout - Update one at a time
Separate stacks - Blue/Green deployment
AWS KMS supports two kinds of keys - ____ keys and ____ keys. The ________ keys can be used to directly encrypt up to 4 kilobytes of data can also be used to protect the ______ keys.
Master; Data;
Master; Data
The most likely reason for a placement group “Capacity Error” is that the underlying hardware may not have the capacity to launch any additional instances on it. If the instances are _____ and ________, AWS may move the instances to a hardware that has capacity for all the requested instances.
Stopped; Restarted
A custom SSL certificate or third party certificate (can/cannot) be be configured in Route53.
cannot
To reduce TTL with caching using Cloudfront you should enable or disable query string forward?
Enable
How many Virtual Private Gateways (VPGs) can you have associated with a single VPC?
One
A /28 subnet has how many addresses and how many actually available?
16 addresses with 11 available.
How do you figure out how many addresses a /27 subnet has if you know that a /28 has 16?
Double it to find the total addresses and subtract 5 to figure out the actual number available on AWS.
Which IP addresses of a given subnet are not available due to AWS reservations of those IP addresses for networking purposes?
The first 4 and last 1
Which CloudFront report can help find the most popular requested object?
Popular Object
Can you change the region of a stack with OpsWork?
No
