Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Data Engineer Associate > Security > Flashcards

Security Flashcards

1
Q

What is Salting?

A

Appending or prepending a random value to a piece of data before hashing it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are rainbow table attacks?

A

They use pregenerated hashes of commonly used passwords.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What kind of KMS keys do AWS integrated services use?

A

symmetric keys. You don’t have access to the key.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Can you automatically rotate secrets in Secrets Manager?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Can secrets in Secrets Manager be replicated?

A

Yes from region to region. Good for BC / DR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can AWS WAF be added to an NLB?

A

No. Only and ALB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the most secure and scalable way to expose a service to 1000s of VPCs

A

AWS Private Link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the requirements for Private Link?

A

A network load balancer (service VPC) and ENI (Customer VPC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do you bypass TTL in CloudFront?

A

CloudFront Invalidation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

CloudWatchMetrics belong to?

A

NameSpaces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a CloudWatch Dimension?

A

An attribute of a metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can you send cloudwatch logs to Kinesis Data streams / firehose?

A

Yes. You can also filter them using a metric filter. This will allow you to send the metrics to third parties.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Where do you query CloudWatch Logs natively?

A

CloudWatch Logs Insight

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a CloudWatch Logs Subscription?

A

It allows you to get a real-time stream of log events for processing and analysis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How could you aggregate cloudwatch logs from multiple accounts?

A

Have them all send to a single kinesis data stream. You can filter them using a subscription filter. Kinesis data firehose would store the result in S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does CloudTrail insights do?

A

It detects unusual activity in your account. Service limits, IAM action bursts, etc..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How long are events in Cloudtrail stored by default?

A

90 days

18
Q

What is CloudTrail lake?

A

It is a managed data lake for cloudTrail events. Events are converted to ORC format.

19
Q

How do you Query CloudTrail Lake?

A

Using SQL and you can visualize events in the dashboard.

20
Q

How are custom AWS Config rules created?

A

AWS Lambda

21
Q

Can you automate remediation of AWS Config violations?

A

Yes, using SSM Documents.

22
Q

What is SageMaker?

A

It is a fully managed service to build ML models.

23
Q

What is the SageMaker feature store?

A

It allows you to import your data and organize it.

24
Q

What Modes does SageMaker Feature Store support?

A

Streaming or Batch (S3, Athena, Etc..).

25
Q

What does SageMaker ML Lineage Tracking do?

A

It keeps a running history of your models for tracking and audit compliance.

26
Q

What is SageMaker Data Wrangler?

A

It is a built-in ETL pipeline for SageMaker. Tailored for ML projects.

27
Q

What is AWS CLoud9

A

It is a cloud-based integrated development environment, IDE. Works from your browser.

28
Q

What is the AWS Cloud Development Kit CDK?

A

It allows you to define your cloud infrastructure using a familiar language. .NEt , JavaScript, etc..

29
Q

What should you use if you want an alarm sent when costs exceed the budget allocated?

A

You would use AWS Budgets

30
Q

Can API Gateway connect to Kinesis Data Streams?

A

Yes

31
Q

What are the three API Gateway endpoints

A

Edge-Optimized

Regional - All in the same region.

Private - VPC access only

32
Q

Does API Gateway support cognito?

A

Yes

33
Q

In SQS, does the visibility timeout remove the message from the queue?

A

No

34
Q

Should you ever use Data Wrangler with PII

A

NO. Use Glue instead

35
Q

Can Redshift UNLOAD data to S3 Glacier Instant Retrieval?

A

No

36
Q

Can you use IAM database authentication with MS SQL

A

No.

37
Q

What does a high iterator age mean in Kinesis?

A

That the last record in the stream is aging which means data is not processed fast enough.

38
Q

How many lambda functions are executed per shard in Kinesis?

A

one per shard

39
Q

What does the parallelization factor do in Kinesis

A

a feature that allows you to process one shard of a Kinesis or DynamoDB data stream with more than one Lambda invocation simultaneously.

40
Q
A

Data Engineer Associate (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions