Set3(1-34)

Question 1

Q1: Cloud Trail data events

Answer 1

CloudTrail Data Events is a feature of AWS CloudTrail that allows you to track and log detailed information about the data plane operations performed on your AWS resources.

Question 2

Q1:cloud trail management events

Answer 2

CloudTrail Management Events refer to the logging and tracking of actions related to the management of your AWS resources. While CloudTrail Data Events focus on the data plane operations within resources, Management Events capture activities related to the control plane, such as API calls for creating, modifying, or deleting AWS resources and services.

Question 3

Q3: RDS encrypted backups

Answer 3

The backups are encrypted only if the database is encrypted

Question 4

Q5: could we create cross-region Multi-AZ RDS instance

Answer 4

NO!! , Amazon RDS does not support cross-region Multi-AZ deployments. Multi-AZ deployments in Amazon RDS are designed to provide high availability within a single AWS region, ensuring automatic failover to a standby replica in the same region in case of a primary database failure.

Question 5

Q10: AWS Key Management Service (KMS) Managed Keys

Answer 5

AWS Key Management Service (KMS) Managed Keys, also known as AWS Managed Keys, are encryption keys provided and managed by AWS Key Management Service. These keys are designed to simplify the process of encrypting and decrypting data within AWS services and integrated applications.

Question 6

Q15: Redis

Answer 6

Supports clustering and data replication

Question 7

Q16: NACL & Security Groups diffs

Answer 7

1. NACL:
   * supports both allow and deny rules
   * stateless

2 . Security Groups
* supports allow
* stateful

Question 8

Q26:aws virtual private gateway

Answer 8

The Virtual Private Gateway provides connectivity options for establishing secure and encrypted communication between your on-premises network and your VPC. It enables you to extend your on-premises network to AWS and access AWS services.

The VGW also integrates with AWS Direct Connect, which is a dedicated network connection between your on-premises network and AWS.

Question 9

Q28: Types of SQS queues

Answer 9

• standard
• FIFO

Question 10

Q28:SQS Standard queue

Answer 10

• Decouple live user requests from intensive background work: let users upload media while resizing or encoding it.
• Allocate tasks to multiple worker nodes: process a high number of credit card validation requests.
• Batch messages for future processing: schedule multiple entries to be added to a database.

Question 11

Q28:SQS FIFO queue

Answer 11

• Make sure that user-entered commands are run in the right order.
• Display the correct product price by sending price modifications in the right order.
• Prevent a student from enrolling in a course before registering for an account.

Question 12

Q33:kinesis data stream shards

Answer 12

When you create a Kinesis Data Stream, you specify the number of shards you want to use. The number of shards determines the maximum capacity and throughput of the stream. Each shard has a specific limit on the maximum amount of data it can ingest per second

The data stored in a shard is called a record.

Question 13

Q33:Kinesis Data Stream Records

Answer 13

Data is written to a Kinesis Data Stream as a record.

Question 14

Q33:kinesis data stream records components

Answer 14

A record in a Kinesis data stream consists of:

• a sequence number
• a partition key
• a data blob.

Question 15

4Q33:Kinesis Data Firehose

Answer 15

Kinesis Data Firehose is a fully managed service that is used to deliver streaming data to a destination in near real-time.
It groups incoming streaming data, optionally compressing and/or transforming them with AWS Lambda functions, and then puts the data into a sink which is usually an AWS service like S3, Redshift, or Elasticsearch.