Set2(21-30)

Question 1

Q21: AWS Transit Gateway

Answer 1

Connects VPCs and on-premises networks through a central hub. it helps to quickly add VPCs, AWS accounts, VPNs, or AWS direct connect gateways.

Question 2

Q22: AWS direct connect with multiple DX locations

Answer 2

If you have multiple on-premises locations, you can connect each location to AWS Direct Connect and create multiple virtual interfaces to enable connectivity to resources in different AWS Regions. You can also connect to multiple AWS Direct Connect locations in the same AWS Region or in different AWS Regions to increase redundancy(resieliency) and improve network performance.

https://d11wkw82a69pyn.cloudfront.net/storm-reply/siteassets/images/aws-direct.png

Question 3

Q23: CloudFront OAI

Answer 3

When using CloudFront to distribute content from an Amazon S3 bucket or custom origin server, it is important to restrict access to the original source of the content to only be accessed via CloudFront. This can be achieved by creating a CloudFront OAI, which is a special user identity that is used to grant CloudFront permission to access the origin server or S3 bucket.

Question 4

Q27: Route 53 Alias Record

Answer 4

One of the main benefits of using alias records in Amazon Route 53 is that they provide faster and more reliable DNS resolution. Because alias records map directly to AWS resources, they can take advantage of features such as automatic failover, which can help ensure that your application remains available even if one of your AWS resources becomes unavailable. Additionally, because alias records are created and managed within Amazon Route 53, they can be easily updated and scaled along with your application as it grows and changes over time.

Question 5

Q27: DNS CNAME Record

Answer 5

A CNAME record is a type of DNS record used to create an alias or alternate name for a host in the Domain Name System (DNS).

When a DNS alias record is created, it allows a domain name to point to another domain name instead of an IP address. This means that when a user tries to access the original domain name, they will be redirected to the new domain name specified in the CNAME record.

A: URL to IPv4
AAAA: URL to IPv6
CNAME: URL to URL
Alias: URL to AWS resource

Question 6

Q28: storage-gateway

Answer 6

it is an on-premise solution

Question 7

Q28: EBS on EC2

Answer 7

you can multi attach an EBS volume to ec2 instance but they should be in the same region

Question 8

Q29: WAF

Answer 8

WAF can be used with ALB

Question 9

Q29: AWS Shield

Answer 9

useful against DDOS

Question 10

Q30: the classic scenario

Answer 10

8 instances in one Zone can be distributed between 2 zones , 4 by 4