Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

SAA-C02/SAA-C03 > Stuff I Forgot > Flashcards

Stuff I Forgot Flashcards

1
Q

Static Website with S3 has what two major requirements

A

Must have a registered domain name and the S3 bucket has to be same as the domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is an MX DNS record?

A

Mail server responsible for accepting eMail on behalf of domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In a static website, does the S3 bucket need to be in same region as trusted zone?

A

No.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

In what case is the CORS (Cross-Account Resource Sharing) option valid for S3 static websites?

A

Only if the web application interacts with resources in a different domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the function/purpose of Lambda@Edge?

A

Allows lambda functions to modify HTTP headers, generate dynamic responses and customize content based on user preference.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is AWS Glue?

A

Fully managed Extract, Transform, Load (ETL) service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What service is the Apache Parquet format associated with?

A

AWS Glue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What need does Amazon EMR serve?

A

Formerly Amazon Elastic MapReduce; big data frameworks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is geolocation routing?

A

Choose resources that serve traffic based on geographic location of users (meaning where the DNS query originates from).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is geoproximity routing?

A

Let Route 53 determine route based on location of user and resource. You can identify a bias which determines if more or less traffic is routed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Are you able to store access keys in ACM?

A

No.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is ACM and its purpose?

A

AWS Certificate Manager; let’s you provision, manage, and deploy pub/private SSL/TLS certs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are some examples of things stored in AWS Secrets Manager?

A

DB credentials, passwords, third-party API keys, or even text.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Does Systems Manager Parameter Store automatically rotate credentials?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

If a webservice client wanted to access only trusted IP address whitelisted, what service should be used?

A

Associate an EIP to an NLB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What layer of the OSI model does an NLB function at?

A

Fourth (TCP).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can you assign an EIP to an ALB?

A

No.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the retention period range for SQS and what is the default?

A

1 minute to 14 days. Default is 4 days.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the limit of inflight messages for a standard SQS queue?

A

120,000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the limit for a FIFO SQS queue?

A

20,000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

In what scenario for transferring data is an AWS Snowmobile reasonable?

A

Exabyte and/or petabytes of data from onprem to S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

If you needed to transfer < 100T from onprem to AWS, what is a reasonable solution?

A

AWS Snowball (Edge)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What would Kinesis Video Streams be used for?

A

Processing of video data streams at AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the purpose of AWS Rekognition?

A

To detect faces, scenes, text, and inappropriate content in videos.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is AWS Elastic Transcoder?

A

Convert Media Files from one format to another.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is AWS Kendra?

A

Intelligent Enterprise Search service (via Machine Learning)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

If you needed to search Text, PDF, HTML, Powerpoint, and other documents, what service might you leverage?

A

AWS Kendra

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Which AES encryption option does S3 offer?

A

AES-256

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

In Route 53 with Evaluate Target Health enabled, what functionality will this provide?

A

Route 53 will automatically route traffic to only healthy resources. If it is not available/down, secondary address is used.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Can weighted routing be used as a DR / failover configuration?

A

No. Should only be used to route traffic for load balancing and/or testing different software versions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Can CloudWatch events be used to monitor Route53 endpoints?

A

No; use a failover config in Route53 instead.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

If multi-AZ RDS primary fails, what happens to ensure connections get to the standby instance?

A

CNAME is switched from primary to secondary.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is the function of AWS WAF?

A

Web Application Firewall; for monitoring HTTP/HTTPS requests and blocking based on IP address or querys and you can return 403s or custom pages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is the purpose of GuardDuty?

A

Threat detection service that monitors for malicious activity and unauthorized behavior

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is the purpose of a gateway endpoint?

A

Provide connectivity to S3/DynamoDB without requiring internet gateway or a NAT.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

When would you want to use a gateway endpoint policy for S3 buckets?

A

When you want to trust several buckets instead of having to put a policy on each individual bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is the main function of Cognito?

A

Single Signon for Web/Mobile; or integrating with Social Media Identities (FB, Google, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is Amazon Macie?

A

Detect usage patterns on S3 data. Evaluate S3 for data patterns (e.g. PII) vi Machine Learning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What is Amazon Inspector?

A

Automated security assessment service for security/compliance of applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What is the correct header request required for server side encryption (SSE-S3)?

A

x-amz-server-side-encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

These headers fall into what category for encryption: x-amz-server-side-encryption-customer-algorithm, x-amz-server-side-encryption-customer-key, x-amz-server-side-encryption-customer-key-MD5?

A

SSE-C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

EFS only supports this type of locking:

A

File

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Which Amazon service is capable of locking objects and preventing them from deletion/being overwritten?

A

S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Which protocol is required on a VPC?

A

IPv4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is SageMaker?

A

AWS managed service to build ML models

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is AWS Detective?

A

Analyze, investigate, and identify security issues.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What is Monitron?

A

Detects abnormal condition in industrial equipment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

DynamoDB tables are ____________ resources.

A

Public

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

How can you secure a DynamoDB table so it won’t have exposure to public internet?

A

Via a gateway endpoint.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

DynamoDB does not support what time of endpoint?

A

Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is Timestream?

A

Time series DB service for use with IoT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

How can you ensure a specific message in an SNS topic gets to a designated SQS queue?

A

Create the topic, configure the queues to subscribe, set filter policies on the SNS to publish based on type.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What type of Database is Dynamo?

A

NoSQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Bastion hosts should reside where in the VPC

A

Public Subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What is a primary function of Redshift?

A

Data Warehousing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What is SWF?

A

Simple WorkFlow Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What are the two main services that are used to decouple applications in AWS?

A

SQS and SWF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What is a MEAN stack?

A

JavaScript-based framework for developing scalable web applications; MongoDB, Express, Angular, and Node

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What service(s) would be employed to stop/block DDoS attacks?

A

WAF and Shield

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

If you had a service that was processing SQS queues and you wanted something to process at a higher priority (e.g. premium); how should that be accomplished?

A

By creating two different SQS queues and configuring the processing to ensure the premium queue is emptied before doing the standard queue.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Can you set a processing priority on items in an SQS queue.

A

No.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

When would you want to use a Geoproximity routing in Route53

A

When you want a larger portion of traffic from specific geographic regions to go to a specific region in AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What differentiates Geoproximity from Geolocation?

A

Size of the area; Geolocation lets you choose instances based on location.

64
Q

Which loadbalancer type handles gRPC traffic?

65
Q

What layer OSI is gRPC?

66
Q

Which loadbalancer type functions at Layer 7 of the OSI model?

67
Q

Which loadbalancer type functions at Layer 3 of the OSI Model?

68
Q

If you are getting “Too Many Connections” connecting to a MySQL database, which is one way to handle that?

A

RDS proxy. This would handle connection pooling. NOTE: Another way would be to upgrade the DB/increase memory.

69
Q

What DB solution is associated with key-value store?

70
Q

Can you attach EBS volumes in any availability zone?

A

No, EBS must be in same zone as instance.

71
Q

What is the purpose of a placement group?

A

Low-latency network performance

72
Q

For API Gateway, what do you pay for?

A

API calls received and data transferred out

73
Q

What service provides a static anycast IP?

A

Global Accelerator

74
Q

What is the default autoscaling cooldown period?

A

300 seconds

75
Q

Is a NAT required to create a VPN connection?

76
Q

AWS Global Accelerator is appropriate for which protocols?

A

UDP, MQTT, VoIP, or HTTP with static IP

77
Q

Apache _____ is associated with big data frameworks.

78
Q

What service would you use to query an S3 bucket?

79
Q

Which is the correct field for a Task IAM role?

A

taskRoleArn

80
Q

What is the purpose of a rate-based WAF rule?

A

Stop requests from going over a limit in a five minute span.

81
Q

Can security groups be used to deny traffic?

82
Q

What are two main ways to prevent object deletion at S3?

A

MFA for delete; versioning

83
Q

File Gateway is used for what pupose?

A

To allow for outside resources to interface with S3 via NFS or SMB.

84
Q

What is necessary to connect a private subnet to connect to the internet?

A

A NAT gateway on a public subnet.

85
Q

If only single AZ, a scale-in policy is triggered on an ALB/ASG due to low number of incoming traffic, which instance is terminated?

A

The one with the oldest launch template.

86
Q

If there are multiple AZs in an ASG, which one is picked if a scale-in policy is triggered?

A

The one with the most number of instances

87
Q

What does the service AWS Transfer for SFTP provide?

A

Managed solution for SFTP that interfaces with identies and stores items in S3.

88
Q

What would be a method to have member-only access to S3 files?

A

Use Signed Cookies

89
Q

In what case would you use a signed URL?

A

For accessing individual files.

90
Q

What is the maximum days for an EFS lifecycle policy?

91
Q

What is the Aurora endpoint purpose?

A

To provide different points for different functions (e.g. reader/writer) and/or capacity directions (e.g. point production traffic to a specific endpoint

92
Q

What kind of file system is Amazon FSx for Lustre?

A

High-performance, parallel file system (hot data)

93
Q

Which AWS Service helps prevent against DDoS attacks

94
Q

Which service helps protect against SQL injection or cross-site scripting attacks?

95
Q

What is the default retention for RDS enhanced logs?

96
Q

What is the method to improve database performance on DynamoDB with provisioned throughput?

A

Partition keys with high-cardinality attributes (large number of distinct values)

97
Q

Does RDS events capture data-modifying events (INSERT, DELETE, UPDATE)?

A

No; it only captures operational events.

98
Q

Can S3 and WorkDocs be integrated?

99
Q

Does Lambda automatically encrypt environment variables?

100
Q

Since the KMS for Lambda is available to all, what is a way to better secure encrypted environment variables?

A

Create a new KMS key and enable encryption helpers.

101
Q

What would a reason for slow eMail processing in an SQS queue (e.g. get 5 messages and then in a few hours get 20)

A

Web application not deleting messages in SQS queue

102
Q

What would long polling in an SQS queue do?

A

Reduce empty responses.

103
Q

If you want to connect to an RDS via an authentication token, what should you do?

A

Enable IAM DB authentication

104
Q

What relational database mitigates multi-region failures and has RPO of 1 second and RTO of 1 minute?

105
Q

Which DB is associated with OLAP systems?

106
Q

Is Oracle RMAN (Recover Manager) supported in RDS?

107
Q

What solution could be provided for HTTP 504 errors and what is a 504?

A

Gateway Timeout. Use Lambda @ Edge & setup origin failover via cloudfront.

108
Q

What solution can be used when a web portal is expected to receive massive number of visitors?

A

API gateway throttling limits

109
Q

What is an HTTP 429

A

Too many requests

110
Q

How would you manage an EKS etcd key-value store?

A

Via Secrets Manager and a KMS key

111
Q

What is blue/green in a development structure?

A

Blue: existing; Green; updated

112
Q

What is the most cost effective way to release a new version of an API?

A

Canary release strategy

113
Q

Which service handles AWS compliance reporting?

114
Q

How long does it take for S3 cross-region replication to happen?

A

Roughly 15 minutes.

115
Q

What are the two retention modes provided by S3 Object Lock?

A

Governance and Compliance

116
Q

What is the difference between Governance and Compliance mode in S3

A

Compliance mode prevents protected objects from ANY user (including root) and the mode can’t be changed or shortened.

117
Q

Does a legal hold in S3 Object Lock have a time period?

118
Q

What option should be used if an EC2 instance needs to send data to S3/Dynamo that doesn’t pass through the internet?

A

VPC endpoints

119
Q

What function does DynamoDB Stream do and what might you use it for?

A

Tracks changes to DynamoDB tables. Could be used for a “follow” effect of a new user or something like that.

120
Q

What type of replication does an RDS read replica provide?

A

Asynchronous

121
Q

If using a CloudFormation template to build several related assets that have interdependencies, what is the attribute you can use to ensure success before moving on?

A

CreationPolicy / use cfn-signal helper

122
Q

If you are updating an AutoScaling group and you have a new AMI to launch a fleet of instances, what further step(s) must be taken?

A

Create a new launch template

123
Q

How much ephemeral storage is allocated to a Fargate task?

124
Q

Security groups are stateful, which means what?

A

When a rule is applied to an incoming rule, it is also automatically applied to the outgoing rule.

125
Q

What is the purpose of allowing ports 32768-65535 on an outbound NACL?

A

Ephemeral ports on outbound connections to a destination

126
Q

What does DynamoDB Accelerator supply?

A

In memory cache that changes response time from milliseconds to microseconds.

127
Q

Is DynamoDB compatible with CloudFront?

128
Q

Which type of RDS can tolerate frequent schema changes?

A

DynamoDB as tables are schemaless

129
Q

What does AppFlow provide?

A

Integration to transfer data between SaaS applications (Salesforce/SAP)

130
Q

What is Amazon MQ?

A

Message broker for Apache MQ/RabbitMQ

131
Q

What is the best option for an always available (24/7) Route 53 that stops routing to unhealthy targets?

A

Active-Active Failover with Weighted Routing

132
Q

If you are trying to change a Aurora instance from server to serverless, is it possible to just change the instance class?

133
Q

Is VPC peering supported with a Direct Connect connection?

134
Q

If you wanted to use KMS with Lambda; where should you put the kms:decrypt permissions

A

In the functions execution role and also the KMS key policy to allow the function to access it.

135
Q

Can you set Lambda as a destination for Kinesis Data Firehose?

136
Q

If a higher valued rule in a NACL DENY’s something that is already allowed, what happens?

A

It’s allowed. If higher number rules contradict it doesn’t matter because as soon as the rule matches traffic it is applied.

137
Q

What is expedited retrievals in regard to Glacier.

A

Allows retrievals faster (1-5 minutes)

138
Q

What is provisioned capacity in regard to glacier?

A

Allows for three expedited retrievals every five minutes and up to 150M of retrieval throughput.

139
Q

What type of IAM can be attached to a group?

A

IAM Policy

140
Q

Systems Manager Parameter store is a better fit when storing ___________ parameters.

A

Application

141
Q

Is it possible to change an EC2 instance to hibernation mode after it has been launched?

142
Q

Can AWS Config be used to detect non-compliant tags?

143
Q

What is the maximum retention period for automated backup on Aurora?

144
Q

What service could be used to create a 90-day retained backup for Aurora?

A

AWS Backup

145
Q

What service does Comprehend provide?

A

Natural language processing that can find meaning/insights from text (find sentiments [e.g. if someone liked or disliked something]

146
Q

What is AWS Neptune?

A

Fully managed graph database service; build and run applications with highly connected datasets.

147
Q

Are ELBs capable of routing traffic over different AZs?

148
Q

What is the default an maximum retention for a Kinesis data stream?

A

24h to 365days

149
Q

Will you be billed for a instance that is preparing to stop?

A

No; however you will be build if preparing to hibernate

150
Q

What solution can automatically scale storage capacity for RDS?

A

Storage Autoscaling

151
Q

Can Kinesis Data Firehose function as an ETL?

152
Q

True/False: Newly created subnets are automatically associated with main route table

153
Q

What is the block size for a VPC?

A

/16 and /28

154
Q

What is job bookmarking in relation to Glue?

A

Stores state of job’s progress in data store so it can resume where it failed or had problem.

155
Q

If you had various web domains but wanted them all to serve SSL traffic, how would that be done with an ALB?

A

Upload the SSL certs and bind multiple certs to the same listener. ALB chooses optimal TLS cert using Server Name Indication (SNI).

SAA-C02/SAA-C03 (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions