Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Solutions Architect - Associate (SAA-C02) Mar-2022 > SAA-C02 > Flashcards

SAA-C02 Flashcards

1
Q

EC2

A

ENI Cold Attach = while instance is being launched
ENI Warm Attach = while instance is stopped
ENI Hot Attach = while instance is running

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

ALB - Application Load Balancer

A

path-based routing = forward requests based on the URL in the request
host-based routing = forward requests based on the host field in the HTTP header
Failed health check event = ALB stops sending traffic to the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

RDS

A

Multi-AZ DB Failover = CNAME is switched from the primary db instance to the secondary
Multi-AZ DB Failover RTO = 1 minute

Multi-AZ DB = Amazon RDS automatically creates a primary DB Instance and synchronously replicates the data to a standby instance in a different Availability Zone (AZ)

Keywords: multi-region = cross-region read replica not Multi-AZ option

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Security groups

A

stateful
specify allow rules, but not deny rules
act at the instance level, not the subnet level
can specify separate rules for inbound and outbound traffic
default includes an outbound rule that allows all outbound traffic
You can change the security groups for an instance when the instance is in the running or stopped state.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

EKS

A

Open source

On-premise and in cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

DynamoDB

A

Storing metadata for S3 objects

Managing web session data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

ECS

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Fargate

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

NACL

A

stateless
default configuration of the default NACL is Allow
default configuration of a custom NACL is Deny
NACL rules are evaluated by rule number from lowest to highest and executed immediately when a matching rule is found.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

CloudTrail

A

Does not optimize resource utilization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Spot

A

Flexible start and end times

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

EBS Volume

A

Not encrypted by default
Automatically scales the volume size based on usage
volumes will always be in same AZ as EC2
can be used normally while the snapshot is in progress
point-in-time snapshots = back up the data to Amazon S3 + available on short notice

Types:
	SSD
		For exam: general purpose = boot OS data
		(gp2) = general purpose, 3 IOPS per GiB up to max of 16,000 IOPS per volume
		(gp3) = general purpose = 4x faster than gp2
		(io1) = faster performance up to 64k IOPS (large database OLTP, latency sensitive)
		(io2) = io2 is same price as io1 + higher durability than io1 (database) (OLTP)
	 HDD (Magnetic storage)
		Low-cost HDD volume
		(st1) "Throughput Optimized" Cannot be used to boot (big data, data warehouses, ETL)
		(sc1) Cold hard disk, lowest cost option (cold data fewer scans and low performance. Static images) Cannot be used to boot
If talking about big data, warehouses = Throughput = st1 If talking about transactions/transactional DB = (gp2) for lower cost, performance = (io2)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

SNS

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

CloudWatch/EventBridge

A

automate monitoring and repair - The reboot alarm action is recommended for Instance Health Check failures
When you reboot an instance, it remains on the same physical host, so your instance keeps its public DNS name, private IP address, and any data on its instance store volumes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Trusted Advisor

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

NLB

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

EFS

A

Keywords:
Concurrent read/write
Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Subnets

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

CloudFormation

A

Templates have version control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Elastic Beanstalk

A

Easy mode

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

DAX

A

DynamoDB cache

DynamoDB milliseconds to microseconds

22
Q

SQS

A

Pull model

Standard = Best effort ordering and you might get a message twice
FIFO = max 300 messages per second, no duplicates
FIFO costs more
FIFO is only option for message ordering or message duplication

Keywords:
lengthy processing time = Measure using SQS queue depth metric
backlog per instance metric

Events:
visibility timeout on a message in an SQS queue expires = message will again be available in the queue for processing

Links:

https: //docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html
https: //docs.aws.amazon.com/autoscaling/ec2/userguide/as-using-sqs-queue.html

23
Q

SNS

A

Push model

No visibility timeouts
No timings
Uses Topics for who and where it goes to
Subscribers = Kinesis Data Firehose, SQS, Lambda, email, HTTPS, SMS (fanout), platform application endpoints
Message size limit = 256 KB
Dead letter queue support, only HTTP get retried
FIFO or Standard
	Only SQS subscriber supports FIFO
Encryption at rest is option
Access Policies support

Keyword: Multiple things need to see events = Add Topic + subscription in the topic

24
Q

ASG - Auto Scaling groups

A

On-Demand Instance limits
Lifecycle hooks = run lambda on (startup, before termination, scale out, scale in events)
Scheduled scaling

Events:
Scale in = Selects the Availability Zone with two instances, and terminates the instance that was launched from the oldest launch template or launch configuration

default health checks for an Auto Scaling group are EC2 status checks only. If an instance fails these status checks, the Auto Scaling group considers the instance unhealthy and replaces

Links:

https: //docs.aws.amazon.com/autoscaling/ec2/userguide/lifecycle-hooks.html
https: //docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-scheduled-scaling.html

25
Q

Reshift

A 
Peta data
BI
RDS
complex analytic queries
structured data
parallel query execution
26
Q

STS - Security Token Service

A

temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users

27
Q

Cognito

A

Mobile authentication

28
Q

S3

A

Supports S3 notifications for restore operations from Glacier

Restricting Access for a time window

  1. CloudFront user called an origin access identity (OAI)
  2. Configure your S3 bucket permissions so that CloudFront can use the OAI to access the files in your bucket and serve them to your users

Glacier Storage class or tier Expedited Standard Bulk
S3 Glacier Flexible Retrieval or S3 Intelligent-Tiering Archive Access 1–5 minutes 3–5 hours 5–12 hours
S3 Glacier Deep Archive or S3 Intelligent-Tiering Deep Archive Access Not available <=12 hours <=48 hours

Links:

https: //aws.amazon.com/s3/storage-classes/
https: //docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-transition-general-considerations.html
https: //docs.aws.amazon.com/AmazonS3/latest/userguide/restoring-objects-retrieval-options.html
https: //docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

29
Q

Kensis Data Streams

A

real-time data

30
Q

Reserved

A

scheduled reserved = Recurring daily, weekly, or monthly, with a specified start time and duration, for a one-year term

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-scheduled-instances.html

31
Q

Budgets

A

Keywords: budget

32
Q

http://169.254.169.254/latest/meta-data/

A

instance ID, public keys, and public IP address

33
Q

EMR - Elastic Map Reduce = ETL

A

Spawns EC2 instance cluster of opensource tools of Spark, Hive, Hbase, Flink, Hudi and Presto that lives inside the VPC

EMR supports:
• Jupyter to analyze data interactively with live code, narrative text, visualizations, and more. Create and attach notebooks to Amazon EMR clusters running Hadoop, Spark, and Livy. Notebooks run free of charge and are saved in Amazon S3 independently of clusters.
• https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-managed-notebooks.html

Git repositories such as GitHub, GitLab, or Bitbucket to provide version control for notebook code.

34
Q

Multipart upload

A

API to upload large objects in parts

35
Q

Instance Store Volume

A

Data persists only during the lifetime of its associated instance
Max performance IO file storage

Data loss events:
The underlying disk drive fails
The instance stops
The instance terminates
Instance is terminated
Hardware disk failure

Data retained events:
Reboot

36
Q

VPN Connection

A

connection between an on-premises network and a VPC, using a secure and private connection with IPsec and TLS

37
Q

Storage Gateway - Data Migration

A

Allows on-prem resources to be merged with AWS (lift and shift, or long term pairing)
Backs up data to S3

3 Types of Gateways

  1. File Gateway = NFS or SMB mount (keep a local copy of recently backed up files.)
  2. Volume Gateway = iSCSI mount (cached or stored mode + create EBS snapshots)
  3. Tape Gateway = Physicaly tape provider

Keywords:
Hybrid solution, on-prem
On-prem storage low = cached File Gateway (Storage Gateway)
Cached local data

38
Q

DataSync - Data Migration

A

Scenario: lift and shift = DataSync
DataSync is agent based
DataSync can sent to S3, EFS, and FS

Keywords:
    Automated
    Accelerated
    One-time migration
    Lift and shift
39
Q

Multi-site

A

active-active architecture pattern
Highest cost but the quickest failover

Keywords:
very aggressive RTO
cost not being a major factor

40
Q

ElastiCache - DB Data Caching

A

Memcached or Redis or both = AWS ElastiCache
Internal to AWS

Memcached
    Simple database caching solution
    Not a database
    No failover or Multi-AZ support
    No backups
Redis
    No-SQL / Non-relational DB
    Can functions as a standalone database
    Failover and Multi-AZ support
    Supports backups
41
Q

Snowmobile

A

Don’t use Snowmobile unless peta bytes are mentioned.

It is ok to order multiple Snowballs to cover 80+ Terabytes.

42
Q

Route 53

A

Geolocation routing
Route traffic based on location of users

Geoproximity routing
Route traffic based on location of users and resources
Shift traffic to different resources

Weighted routing policy
Route to multiple resources in proportions that you specify

Links:
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

43
Q

CloudFront

A

CloudFront geographic restrictions
Allow your users to access your content only if they’re in one of the approved countries on your allow list.
Prevent your users from accessing your content if they’re in one of the banned countries on your block list.

Caching = CDN to edge locations to reduce costs for hosting S3 static content

Links:
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html

44
Q

WAF

A

Keywords:
ALB
Restrict country access

Links:
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-awswaf.html

45
Q

Aurora

A

Does not support SQL Server DB migration

46
Q

FSx

A

Keyrwords:
Hybrid on-prem migration
SMB
Windows

47
Q

Spot Fleet

A

Variable workloads

MOST cost-effective solution

48
Q

Placement Group

A

Reducing network latency in an application
Tight coupling

3 strategies:
Cluster - Grouping of instances within single AZ. Applications that need low latency
Spread - Group of instances on distinct hardware. Critical instances that should be separate.
Partition - Each instance has its own network and powersource. They don’t share the same rack.
Partition is a logic amazon word for dedicate powersource and network.

Links:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html#placement-groups-cluster

49
Q

IAM Policy

A

By default, all requests are implicitly denied except root account.

50
Q

Global Accelerator

A

Network service to increase performance and deals with IP caching in front of ELB
Global accelerator has weighted groups and pools
Endpoint group = where you add load balancers ( where you can do blue green deployments)
Routes users based on physical location to closest resources

AWS Certified Solutions Architect - Associate (SAA-C02) Mar-2022 (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions