Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Solution Arch Assoc. Cert > Solution Arch - Associate Prep > Flashcards

Solution Arch - Associate Prep Flashcards

1
Q

AWS Shield

A

Distributed Denial of Service (DDoS) protection service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AWS Global Accelerator

A

Networking service. Sends your user’s traffic Through Amazon Web Service’s global network infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Amazon SNS

A

Simple Notification Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

AWS Storage Gateway

A

On premises access to cloud storage. File gateway includes Server Message Block (SMB), Network File Share (NFS) interfaces to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

AWS Private Link

A

Connect AWS services directly to each other without accessing the public internet. Gateway endpoints for S3, Dynamo DB. Interface endpoints for …

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How many 9’s of durability does S3 provide?

A

11 9’s of durability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How can I encrypt an unencrypted Elastic Block Storage (EBS) volume?

A
  1. Take a snapshot of the unencrypted volume you want to encrypt
  2. Create a copy of the snapshot
  3. Adjust the encryption options during the copy of the snapshot
  4. Create a volume from the snapshot (encryption can also be enabled here instead of during the snapshot copy)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How can I move an Elastic Block Storage (EBS) volume from one availability zone (AZ) to another?

A
  1. Take a snapshot of the volume
  2. Create an Azure Machine Image (AMI) from the snapshot
  3. Launch a new EC2 instance in the desired AZ
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How can I move an Elastic Block Storage (EBS) volume from one region to another?

A
  1. Take a snapshot of the volume
  2. Create an Azure Machine Image (AMI) from the snapshot
  3. Copy the AMI to another region
  4. Launch a new EC2 instance from the copied AMI
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

ECS

A

Elastic Container Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Ephemeral

A

Lasting for a very short time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

EC2 Status

A

NA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the difference between a NAT gateway and instance?

A

NAT gateway is a managed service which launches in a redundant way within an AZ. You can only have 1 NAT gateway inside 1 availability zone

NAT instances are individual EC2 instances launched via. community AMIs on on a EC2 instance you must manage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

DNS (Route 53) record types

A

Address Records (A Records). A records converts the name of a domain directly into an IP address.

Canonical Names Records (CNAME Records) - Resolve one domain name to another. Example Chris.com to www.Chris.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Is encryption on all EBS volume types supported?

A

All EBS volume type support encryption. Not all EC2 instance types support encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the differences between ElastiCache Memcached and ElastiCache Redis (w + w/o cluster mode enabled)

A

See image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Is data between an instance and an encrypted volume also encrypted?

A

Yes it is

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is AWS SAM (Serverless Application Model)?

A

SAM is an extension of AWS CloudFormation. It is used to package, test and deploy serverless applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What / when would you use a Network Address Translation (NAT)?

A

If you have a private network and you need to help gain outbound access to the internet you would need to use a NAT gateway to remap the private IP addresses. For this use the NAT would need to be launched in a public subnet.

If you have two networks which have conflicting network addresses you can use a NAT to make the addresses more agreeable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the RDS engine types offered as part of Amazon RDS?

A
  1. Amazon Aurora
  2. MySQL
  3. MariaDB
  4. PostgreSQL
  5. Oracle
  6. Microsoft SQL Server
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Do all RDS engine types support encryption?

A

Yes. Encryption at rest can be turned on for all RDS engine. Encryption is handled using AWS KMS. Turning on encryption will also encrypt automated backups, snapshots and read replicas.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What back up options are available for RDS?

A
  • Automated backups and manual snapshots.
  • For automated backups you choose a retention period between 1 - 35 days. transaction logs are stored S3
  • Manual snapshot are manually taken by a user
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

When you restore a RDS back up will it over write the existing database?

A

No. Restoring to a point in time never restores over top of an existing database. When you restore a new RDS instance it will be created with a new DNS endpoint.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Explain the architecture of Multi-AZ deployment for RDS?

A
  • RDS makes an exact copy of the data base in another AZ
  • Data is automatically and synchronizes replicated to the data base in the other AZ
  • If the AZ of the primary goes down fail over will occur (automatic fail over protection). The stand by slave data base will be promoted to the master.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is a launch configuration?

A

Launch configurations are used with the auto scaling groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is a EC2 launch template?

A
  • Allows you to launch an EC2 instance from a template. You can create launch templates from the EC2 section of the AWS console.
  • Launch templates are version controlled. If you make some changes it will be a new version.
27
Q

What is Data Lifecycle Manager (DLM)?

A
  • An EC2 feature to manage the creation and deletion of EBS snapshots
  • Policies can be set for a specific EBS volume or EC2 instance (all volumes attached to the instance) or for all volumes or instances with a specific tag(s)
28
Q

Where are EBS instance snapshots stored?

A

They are stored in S3. However the are not accessible via. S3 to a user ie. via. normal methods of access S3 …

29
Q

What is the max IOPS of general purpose SSD?

A

16,000. Also general purpose SSD provides 3 IOPS per GB up to 16,000 IOPS. Volume size ranges from 1 GB to 16 TB

30
Q

What is the max IOPS of provisioned IOPS SSD?

A

64,000. Also provisioned IOPS SSD can provide up to 50 IOPS per GB up to 64,000. Volume size ranges from 4 GB to 16TB

31
Q

What are the differences between a Simple Queue Service (SQS) standard and FIFO queue?

A

FIFO - First in first out. Maintains order, exactly once processing, up to 3000 messages per second. When order is critical and duplicates can’t be tolerated.

Standard - At least once delivery, best effort ordering. Supports nearly unlimited number of messages. Occasionally more than one copy of a message id delivered. Common example is let user upload media for resizing …

32
Q

How many EC2 instances can a EBS volume be attached to at once?

A

1

33
Q

Can you attached an EBS volume in to a EC2 instance in a different AZ?

A

No

34
Q

What may be a good way from an IAM perspective to control access for a Development, Test and Production resources?

A

Tag the resources as development, test or production. Create a IAM policy that grants access based on the tags

35
Q

Can you attach the same EFS to multiple EC2 instances?

A

Yes. Given they are in the same VPC. Which AZ they are in does not matter.

36
Q

What protocol does EFS use?

A

NFSv4.1

37
Q

How does EFS allow for connection from EC2 instances in different AZs?

A

EFS creates multiple mount targets. 1 in each subnet in your VPC

38
Q

What is Dynamo DB Accelerate (DAX)?

A

Fully managed, highly available in memory cache for Dynamo DB

39
Q

For S3 what is the difference between bucket policies and access control lists (ACLs)

A

ACLs are legacy and provide simpler controls. Bucket Policies allow for complex rules and are the preferred method

40
Q

You have an S3 bucket with folders. Under a folder you have sub folders. 1 per username. How can you control access so users can only work with the folder created for them?

A
  1. Create an IAM policy that applies folder-level permissions. In the IAM policy you will have to use the {aws:username} variable.
  2. Attach the policy to an AWS user or group
41
Q

Which CIDR block size only has a single IP address?

A

/32

42
Q

Which CIDR block is equivalent to all of the internet?

A

0.0.0.0/0

43
Q

What is a Virtual Private Gateway (VPG)?

A

To create a site to site VPN. Common example being on premises to an AWS VPC a customer and target gateway are required. VPG functions as a target gateway associated with a VPC

44
Q

What are the types of EC2 placement groups?

A

Clustered - packs instances close to each other inside an availability zone. Minimizes latency often required by HPC. Also for HPC in the configuration enabling enhanced networking or elastic fabric adapter is recommended

Partition - spared instances across different partitions. Each partition is isolated from another (different racks). Commons for Hadoop, Cassandra, Kafka)

Spread - strictly place a group of instances across distinct underlying hardware to reduce correlated failures. Up to 7 instances per AZ per group

45
Q

What is enhanced networking?

A

It is a feature of EC2 instances. It can be enabled to provide higher bandwidth, higher packet-per-second (PPS) performance and lower inter-instance latencies

46
Q

What is AWS DataSync?

A

Uploads data to AWS (S3, FSx for Windows File Server, EFS) via an on premises agent. Upload tasks can be scheduled.

47
Q

What is an EC2 auto scaling cool down?

A

Scaling cool down helps prevent an auto scaling group from launching or terminating additional instances before the effects of a previous activity are visible

48
Q

When an auto scaling group adds a new instance is it preferred for the the new instance to be created from an EC2 launch template or configuration?

A

Launch template. Launch templates have versioning. Also the latest features of auto scaling groups support launch templates.

From the doc “If you plan to continue to use launch configurations with Amazon EC2 Auto Scaling, be aware that not all Auto Scaling group features are available”

49
Q

What is an EC2 auto scaling cool down?

A

Scaling cool down helps prevent an auto scaling group from launching or terminating additional instances before the effects of a previous activity are visible. Temporary suspends the scaling activity. Default cool down period is 300 seconds (5 min)

50
Q

What are the retrieval options and duration for S3 Glacier?

A

Expedited (usually 1 - 5 min) Standard (usually 3 - 5 hours), Bulk (5 - 12 hours)

51
Q

What are the retrieval options and duration for S3 Glacier deep archive?

A

Generally data can be restored in 12 hours or less bulk retrieval it can take 48 hours

52
Q

What is the minimum storage duration for S3 Glacier deep archive?

A

180 days

53
Q

What is the difference between an IAM policy and a SCP?

A

SCP is a service control policy. IAM policies allow or deny access to AWS services or API actions. They can be applied to IAM identities (users, groups, roles). To allow or deny access to AWS services for organizational unites (including the root user) or more broadly SCPs can be used.

Use SCPs to apply allow / denies more broadly. As an example to an organizational unit.

54
Q

What is AWS inspector?

A

Automated security assessment service. AWS inspector is used to automate security assessments. Not secure the deployment … of applications.

55
Q

What origin options are there for CloudFront?

A

S3OriginConfig - S3 bucket (not configured for static web hosting)

CustomOriginConfig - S3 bucket configured for static web hosting, elastic load balancing load balancer, AWS Elemental MediaPackage endpoint or container, HTTP server running on an EC2 instance or other kind of host

56
Q

What is an elastic fabric adapter?

A

An elastic fabric adapter (EFA) is an Elastic Network Adapter (ENA) with additional capacity

57
Q

In the OSI application model what layer is layer 7?

A

Layer 7 is the application layer

58
Q

In the OSI application model what layer is layer 4?

A

Layer 4 is the Transport layer

59
Q

What is viability time out for SQS?

A

Viability timeout is the amount of time a message is invisible in the queue after a reader picks up the message. This means that messages are not deleted as soon as they are picked up … instead they go invisible for a specified period of time.

If during the visibility timeout a job processes the message it will be deleted. If a job is not processed within the visibility timeout the message will become visible again. This could result in delivering the message twice.

The maximum visibility timeout is 12 hours. The default is 30 seconds

60
Q

What is the default state of a custom security group that is created in an Amazon VPC?

A
  • remember security groups don’t have deny rules this is a question of which allow rules are there or not *
  • Inbound rule(s) - NO INBOUND RULES. Traffic will be implicitly denied
  • Outbound rule(s) - AN RULE that allows all traffic to all IP addresses
61
Q

What is the state of the default security group that is created in an Amazon VPC?

A
  • Inbound rules(s) - AN RULE that allow rule that allows traffic from within the group
  • Outbound rule(s) - AN RULE that allows all traffic to all IP addresses
62
Q

What default permissions are provided to a newly created IAM user?

A

None. IAM users start with no permissions

63
Q

What can you associate an AWS Direct Connect Gateway with?

A
  • A virtual private gateway

- A transit gateway (if you have multiple VPCs in the same region)

AWS Solution Arch Assoc. Cert (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions