Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

aws saa-c03 > TD Exam 3 - Long review > Flashcards

TD Exam 3 - Long review Flashcards

1
Q

What are the 2 modes for ECS

A

EC2 and Fargate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a container definition used in ECS

A

Tells where the image is, and which ports are exposed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a task defintion

A

Represents the app as a whole, can have multiple containers. Has everything except what is in container definition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Where is Task role defined for ECS

A

In Task definition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a service definition in ECS

A

Defines a service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a service in ECS

A

Defines how Tasks scale, how to distribute load, etc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is in a Container definition in ECS

A

Image and ports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is in a Task definition in ECS

A

Security (Task role), Container(s) and resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a Task role in ECS

A

IAM Role which the task assumes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is in a service in ECS

A

How many copies, HA, restarts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is DMS

A

A managed Database Migration Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does DMS use

A

A replication instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Can the destination of DMS be onprem?

A

Yes, either the destination or source needs to be in AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What do you define on a replication instance in DMS

A

Replication task

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the different states of EC2 instance

A

Pending
Running
Rebooting
Shutting down
Terminated
Stopping
Stopped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

To what state can an instance transtion from pending

A

Running

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

To what states can an instance transition from running

A

Rebooting
Shutting down
stopping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

To what state can an instance transition to from Shutting down

A

Terminated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

To what state can an instance transition from terminated

A

None; It is terminated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

To what state can an instance transition from stopping

A

Stopped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

To what states can an instance transition from stopped

A

Pending
Terminated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the pending state

A

The instance is preparing to enter a running state

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

When will you be billed when an instance is stopping

A

If it is preparing to hibernate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the 2 types of backup functionality in RDS

A

Automated Backups
Snapshots

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Where are backups from RDS stored

A

AWS-Managed S3 buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Where are RDS backups taken from

A

Standby instance if you are in multi-AZ mode
Otherwise from primary, so might have performance issues

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Are RDS snapshots automatic

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are RDS snapshots and backups taken of

A

An instance, so all the databases within it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Do RDS snapshots expire

A

No, you have to clean them up yourself, manual or external process to delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is a difference between RDS snapshots and backups

A

Backups are automated
Also backups have transaction logs written every 5 minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the possible range of values for RDS backups retention

A

0 to 35 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Can you keep RDS backups after deleting a db

A

Yes, but they still expire

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Can RDS snapshots and transaction logs be replicated to another region

A

Yes, but has to be explicitly configured; it is not the default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What happens when you restore an RDS snapshot

A

A new RDS instance is created; with a new address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Is restoring a backup in RDS fast

A

No, it restores the backup then replays the transactions from transaction log

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is AWS backup

A

A fully-managed data-protection service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is an advantage of AWS backup

A

IT allows you to consolidate management in one place, across accounts and regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What are some things supported by AWS Backup

A

Compute
Block storage
File storage
DBs
Object storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What is a central component of AWS backup

A

Backup plans

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What can you configure with lifecycles in AWS Backups

A

When a backup transitions into cold storage and when it expires

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is a vault in AWS Backup

A

Backup destination - assign KMS key for encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is specified in an AWS Backup backup plan

A

Frequency
Window
Lifecycle
Vault
Region copy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is vault lock in AWS backup

A

Write-once, read-many (lock); you get 72h to delete, then you can’t
Can still have lifecycle to make it expire

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Can you do on-demand backup in AWS backup

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Can you do Point-In-Time-Recovery for AWS backup

A

Yes, for supported product

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is S3 select

A

Ways to retrieve part of an object instead of the whole object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What is a disadvantage of filtering a large object on the client side

A

Still use the whole object size of data transfer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What does S3 select and Glacier Select do

A

Allows you to use SQL-like segments to select part of the object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is an advantage of S3 select

A

S3 pre-filters an object, only sends the result

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What are some file formats supported by S3 select

A

CSV, json, parquet, BZIP2 compression for csv and json

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What do S3 access points do

A

Simplify managing access to S3 buckets and objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What do S3 access points allow you to do

A

Rather than one bucket with one bucket policy, you create many access points with different policies
Each access point has its own endpoint address
an have different network access control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What is a way of making S3 bucket accessible via VPC

A

Access point with VPC origin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What types of records are supported with failover routing

A

primary and secondary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What is the use case for failover routing

A

Active-passive failover

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What is a VPC router

A

HA, runs in all AZs the VPC is in, each vpc has a vpc router

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What is the address of the VPC router

A

network + 1of the subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What does a VPC router do by default

A

Route traffic between subnets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What is the main route table of a vpc

A

The route table used by default by a subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What happens if many routes match traffic

A

Higher prefix takes priority

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What are possible targets for a route table

A

Gateway or route table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Can you update local routes in route tables

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What kind of resilience does an internet gateway have

A

Region resilient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Can you attach an internet gateway to more than one vpc

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Can you attach a vpc to more than one internet gateway

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

What are the actions you need to take to make a subnet public

A

Create IGW
Attah IGW to VPC
Create custom route table
Associate route table
Make the default route the internet gateway
Configure subnet to allocate IPv4 addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

What happens when you allocate a public IP in a subnet

A

A record is created in the IGW to associate the instance private ip to the public ip

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Is an EC2 instance ever aware of it’s public IPv4 address

A

No

69
Q

Is an EC2 instance ever aware of it’s public IPv6 address

A

Yes

70
Q

What is a jumpbox

A

Bastion host

71
Q

What is Parameter store

A

Storage for configuration and secrets

72
Q

What are the 3 parameter types you can store in parameter store

A

String, StringList and SecureString

73
Q

What are some features of parameter store

A

It supports hierarchies and versioning

74
Q

What are the formats of data that can be store in parameter store

A

Plaintext and Ciphertext (integrates with KMS)

75
Q

What are Parameter Store public parameters

A

Parameters made available by aws, per region (eg latest AMI per region)

76
Q

Is parameter store public or private

A

Public

77
Q

What can permissions be associated with in parameter store

A

Tree hierarchy or specific parameters

78
Q

How does Parameter store handle encryption

A

KMS

79
Q

What can parameter store changes generate

A

Events

80
Q

What is Secrets Manager usable from

A

Console, CLI, API or SDK

81
Q

Which supports secret automatic rotation, Secrets Manager or PArameter store

A

Secrets Manager

82
Q

How does secret automatic location work in Secrets Manager

A

Using Lambda

83
Q

What are some features of Secrets Manager vs Parameter store

A

Secrets Manager is designed for secrets
It also directly integrates with some AWS products (RDS)

84
Q

What is EC2 on-demand

A

Multiple customers share hardware

85
Q

How are you billed for EC2 on-demand

A

Per second that the instance is running

86
Q

Do you have priority with on-demand

A

No, in case of big demand (major failure), people with reserved get priority

87
Q

What is spot pricing

A

AWS sells unused capacity at big discount, up to 90% discount
AWS sets price, customers set max they are willing to pay

88
Q

Should you use spot instances if your workload cannot tolerate interruptions

A

No

89
Q

Are you still billed for your unused reservation

A

Yes

90
Q

What are EC2 reservations defined by

A

Type of instance and AZ or region

91
Q

What happens if you lock an instance reservation to an AZ

A

You reserve capacity, but you can only take advantage in that AZ

92
Q

If you lock an EC2 reservation to a region, does it reserve capacity?

A

No

93
Q

What are the term lengths for reservation

A

1 or 3 year

94
Q

What is a dedicated host

A

You get a whole host
Hosts are designed for a famility of instances
Capacity management is required

95
Q

What is dedicated instances

A

You don’t own or share the host, but you have dedicated hardware
You don’t manage the host

96
Q

What are the limitations in terms of number of EC2 instances

A
  • On-demand: vCPU-based limit per region
  • Purchasing 20 reserved instances per region
  • Dynamic Spot limit per region for Spot instance requests
97
Q

What is AWS Nitro

A

The underlying platform for next generation of EC2 instances
Uses dedicated hardware for the hyervisors

98
Q

What instance types for general purpose

A

t-type
m-type

99
Q

Can you stop an Instance store-backed instance

A

No, you can only terminate it

100
Q

How do you give a static IPv4 address to an instance

A

Elastic IP addresses

101
Q

What OS are supported for instance hibernation

A

Amazon Linux
Ubuntu 18.04 LTS

102
Q

What is a requirement for hibernation

A

Encrypted EBS-backed instance

103
Q

What happens when an instance hibernates

A

Writes in-memory state to a file in root EBS

104
Q

What do you pay for in an hibernating instance

A

EBS Volumes and Elastic IPs

105
Q

What happens to attached EBS volume when an instance is terminated

A

Preserved by default

106
Q

How can you prevent accidental instance termination

A

Enable termination protection

107
Q

Is there such a thing as instance stop protection

A

Yes

108
Q

What can you do to a stopped instance

A

Modify properties, size, or update kernel

109
Q

What is included in an AMI

A

Template for root volume
Launch permissions
Block device mapping

110
Q

What are EC2 placement groups

A

They determine how instances are placed on underlying hardware

111
Q

What are the 3 options for placement groups

A

Cluster
Spread
Partition

112
Q

What is cluster placement group

A

It clusters instances into a low-latency group in a single AZ

113
Q

What is Spread placement group

A

Spreads instances across underlying hardware
Can span multiple AZs

114
Q

What is the max number of instance per AZ per group for cluster group

A

7

115
Q

What is partition placement group

A

Spread across logical partitions
Different partitions do not share hardware

116
Q

What is a use case for cluster placement group

A

Performance, fast speeds, low latency

117
Q

What is a use case for spread placement group

A

Small number of critical instances that need to be kept separated from each other

118
Q

What is the maximum number of EC2 partitions per AZ

A

7

119
Q

What is partition group great for

A

Topology-aware apps

120
Q

What is Elastic inference accelerators

A

Enable to attach low-cost GPU powered acceleration to EC2, Sagemaker instances and other resources

121
Q

Does ENI stay attached when stopping an instance

A

Yes

122
Q

Does Elastic IP detach after stopping instance

A

No

123
Q

Can underlying host change when stopping an restarting instance

A

Yes

124
Q

What are the 3 components of AWS Glue

A

Central Metadate Repository
ETL Engine
Flexible Scheduler

125
Q

What is the AWS Glue Data Catalog

A

Perisitent metadata store

126
Q

What is the crawler used for in AWS GLue

A

Populate AWS Glue Data Catalog with tables

127
Q

How does the crawler work in AWS Glue

A

Determine format, schema of raw data
Group data into tables or partitions
Write metadata to AWS Glue Data Catalog

128
Q

What is needed to use DynamoDB accelerator

A

Install DAX SDK on instance

129
Q

Does DAX change how apps interact with DynamoDB from the apps perspective

A

No

130
Q

How is DAX accessed

A

Via an endpoint
It load balances

131
Q

What is the architecture of DAX

A

Primary instance with replica in other AZs
Primary supports Write
Replicas support read

132
Q

Does DAX support write-through

A

Yes, on primary node

133
Q

Is DAX HA

A

Yes, if primary fails, we have a failover

134
Q

What kinds of scaling does DAX do

A

Up AND Out

135
Q

Is DAX a public service

A

No, it is deployed within a VPC

136
Q

Do you have to set autoscaling for Dynamodb

A

Yes

137
Q

What is capacity in DynamoDB

A

Speed

138
Q

What is on-demand mode for DynamoDB

A

You only pay for the operations

139
Q

What do you set when you use provisioned DynamoDB

A

RCU and WCU, they are KB per second of read or write

140
Q

What does Autoscaling do with DynamoDB

A

Dynamically adjusts the provisioned throughput capacity

141
Q

What is DynamoDB Global Tables

A

Multi-master cross-region replication

142
Q

Who wins conflict resolution with DynamoDB Global Tables

A

Last writer

143
Q

What is the speed of replicaiton for Global DynamoDB

A

GEnerally sub-second

144
Q

What is AWS Transit Gateway

A

A Network Transit Hub to connect VPCs to onprem networks

145
Q

What does Transit Gateway use

A

site-to-site vpns and DX

146
Q

What attachments are supported for AWS Transit Gateway

A

VPC
Site-to-Site VPN
Direct Connect Gateway

147
Q

How many VPN tunnels do you need from a Customer Gateway to a Transit Gateway to have HA

A

2

148
Q

Where do you configure VPC attachments for a Transit Gateway

A

One to a subnet in each AZ where service is required

149
Q

How can you connect to VPCs in another account or region with Transit Gateway

A

Peer to other transit gateway that belongs to another account or region

150
Q

When you peer Transit Gateways, where does traffic transit by

A

AWS Global Network, not public internet

151
Q

Does Transit Gateway support transitive routing

A

Yes
As long as appropriate routing is in place

152
Q

How can you share Transit Gateways between AWS accounts

A

Using RAM

153
Q

What does Transit Gateway do with regards to Multicast

A

It enables customers to have fine-grain control on who can consume and produce multicast traffic
Can maange multicast groups

154
Q

What are the 3 modes of storage gateway

A

Volume
-Cache
-Stored
Tape
File

155
Q

What is Storage Gateway Volume stored mode

A

It only uses AWS for backups

156
Q

What does AWS Storage gateway file mode do

A

It presents a file-based interface to S3

157
Q

How does Storage Gateway volume mode work

A

Uses volumes that have S3 snapshots

158
Q

What is Amazon DocumentDB

A

Fully managed document database
COmpatible with MongoDB

159
Q

If you can’t change the code and must use MongoDB, what should you use

A

DocumentDB

160
Q

What is Amazon Neptune

A

Graph database

161
Q

What is the Cluster endpoint in Aurora

A

AKA writer endpoint
Points to primary

162
Q

What is Aurora Parallel Query

A

Enables Aurora to push down and distribute computational load of a single query across thousands of CPUs in Aurora storage layer

163
Q

What are the 4 types of endpoints for Aurora

A

Cluster
Reader
Custom
Instance

164
Q

What is a custom endpoint in Aurora

A

It reprensts a set of instances you choose, and does load-balancing

165
Q

What is an instance endpoint in Aurora

A

Connects to a specific instance

166
Q

What can wildcard certificates handle

A

Syb-domains

167
Q

When should you use dedicaeed IP custom ssl

A

For browsers that do not support SNI

168
Q
A

aws saa-c03 (18 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions