SAA - Udemy Review Flashcards

1
Q

What are Application Load Balancers good for?

A

Micro Services & Container-based applications like Docker and Amazon ECS

The port mapping features helps to redirect to dynamic ports in ECS. If Classic Load Balancer was used, we’d need one per application so ALB is a better choice.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the port for FTP?

A

21

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the port for SSH?

A

22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the port for SFTP?

A

22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the port for HTTP?

A

80

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the port for HTTPS?

A

443

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the database ports?

A
PostgreSQL: 5432
MySQL: 3306
Oracle RDS: 1521
MSSQL Server: 1433
MariaDB: 3306
AuroraPostgreSQL: 5432
AuroraMySQL: 3306
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which RDS feature when used does not require you to change SQL connection string regardless of which database is up?

A

Multi-AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

If you don’t want to enable sticky sessions on your ALB in fear that it will overload some EC2 instances and you have an Auto Scaling Group behind an ALB with a fleet of EC2 instances, what should you do?

A

Store session data in ElastiCache to ensure different EC2 instances can retrieve user state if needed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What allows you to have a replica of your database in a different AWS region in case of a disaster?

A

Aurora Global Database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How can you enhance security of ElastiCache Redis cluster by forcing users to enter a password when they connect?

A

Use Redis Auth

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In case of a regional outage for RDS PostgreSQL database so that DB is made available for both read and write workloads in another AWS region where the DR is highly available, what do you recommend?

A

Create a read replica in a different region and enable Multi-AZ on the read replica.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which uses sync and async replication between RDS Read Replicas and Multi-AZ?

A

RR uses Async replication and Multi-AZ uses Sync replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How many read replicas can you have for your RDS database?

A

5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which RDS db does not support IAM db auth?

A

Oracle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How many Aurora read replicas can you have in a single Aurora DB cluster?

A

15

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Aurora supports which DBs?

A

PostgreSQL and MySQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is an effective and highly available solution for a gaming leaderboard that is ranked in real-time?

A

ElastiCache for Redis - Sorted Sets

19
Q

What is the A R53 recrod tyep?

A

maps host name to IPv4

20
Q

What is AAAA?

A

maps host name to IPV6

21
Q

What does CNAME do?

A

Map hostname to another hostname with an A or AAAA record

22
Q

What is NS?

A

Name servers for hosted zone that controls traffic

23
Q

What are the 3 types of health checks via route 53?

A

Monitor an endpoint (app, server, other AWS resource)
Monitor other health checks (calculated health checks)
Monitor CloudWatch alarms (full control) and is useful for private resources

24
Q

How do monitoring endpoint healthchecks look?

A

15 health checkers
3 healthy/unhealthy threshold as default
30 second interval
Supporting HTTP and HTTPs and TCP protocols
If >18% it’s healthy, otherwise unhealthy
Can pass based on status code
Pass based on text in first 51020 bytes of response
Need to configure router/firewall to allow incoming requests

25
Q

What are calculated health checks?

A

Can combine child healthchecks with OR, AND, NOT
Monitor up to 256 child health checks
Specify how many need to pass for this “parent” healthcheck to pass

26
Q

What are thalth checks for private hosted zones?

A

R53 lives outside of VPC generally and can’t access private endpoints
However, if a cloudwatch metric and cloudwatch alarm is associated, then health check can check the alarm

27
Q

If purchasing domain on 3rd party registrar, how to use R53 through amazon?

A

Create a public hosted zone

Update the 3rd party registrar NS records (namespace)

28
Q

Can a healthcheck monitor an SQS queue for R53?

A

No it cannot

29
Q

How to instantiate EC2 instances quickly?

A

Create golden AMI with applications, OS dependencies, etc.
Add a few small things to user data
Mix golden AMI + user data to instantiate quickly

30
Q

How to instantiate RDS databases quickly?

A

Restore the database from a snapshot so all schemas and data are ready

31
Q

How to instantiate EBS volumes?

A

Restore from a snapshot so that the disk is formatted and has data

32
Q

What are the components of Beanstalk?

A

Aplications
Application Version
Environment with aws resources running an app version
Tiers: web server or worker environment

33
Q

What is the process for beanstalk?

A
Create application
Upload version
launch environment
manage environment
repeat when versions are updated
34
Q

What are web server tiers?

A

Traditional architecture with load balancer and ASG with multiple EC2 instances.

35
Q

What are worker environment tiers?

A

No client accessing EC2 instance, instead there is an SQS queue where the instances are workers that are pulling messages to process them. Can have the web environment push messages into the worker environment.

36
Q

What are the components of an S3 bucket policy?

A

Version and statement at the top level.

Within the statement:
SID
Effect
Principal
Action []
Resource []
37
Q

What are the block public access options?

A

New ACLs
Any ACLs
New public bucket or access point policies
ANY public bucket or access point policies

38
Q

Does an explicit deny in an IAM policy take precedence over an S3 bucket policy?

A

Yes

39
Q

What is the default port for HTTPS, HTTP?

A

443, 80

40
Q

What is the metadata URL?

A

http://169.254.169.254/latest/meta-data/

41
Q

What are the 3 retrieval options for Amazon Glacier?

A

Expedited - 1-5 minutes
Standard - 3-5 hours
Bulk - 5-12 hours

42
Q

What is the minimum storage duration for Amazon Glacier/DeepArchive?

A

90/180 days

43
Q

What are the retrieval options for Amazon Glacier Deep Archive?

A

Standard - 12 hours

Bulk - 48 hours