TD Exam 3 - Long review Flashcards
1
Q
What are the 2 modes for ECS
A
EC2 and Fargate
2
Q
What is a container definition used in ECS
A
Tells where the image is, and which ports are exposed
3
Q
What is a task defintion
A
Represents the app as a whole, can have multiple containers. Has everything except what is in container definition
4
Q
Where is Task role defined for ECS
A
In Task definition
5
Q
What is a service definition in ECS
A
Defines a service
6
Q
What is a service in ECS
A
Defines how Tasks scale, how to distribute load, etc
7
Q
What is in a Container definition in ECS
A
Image and ports
8
Q
What is in a Task definition in ECS
A
Security (Task role), Container(s) and resources
9
Q
What is a Task role in ECS
A
IAM Role which the task assumes
10
Q
What is in a service in ECS
A
How many copies, HA, restarts
11
Q
What is DMS
A
A managed Database Migration Service
12
Q
What does DMS use
A
A replication instance
13
Q
Can the destination of DMS be onprem?
A
Yes, either the destination or source needs to be in AWS
14
Q
What do you define on a replication instance in DMS
A
Replication task
15
Q
What are the different states of EC2 instance
A
Pending
Running
Rebooting
Shutting down
Terminated
Stopping
Stopped
16
Q
To what state can an instance transtion from pending
A
Running
17
Q
To what states can an instance transition from running
A
Rebooting
Shutting down
stopping
18
Q
To what state can an instance transition to from Shutting down
A
Terminated
19
Q
To what state can an instance transition from terminated
A
None; It is terminated
20
Q
To what state can an instance transition from stopping
A
Stopped
21
Q
To what states can an instance transition from stopped
A
Pending
Terminated
22
Q
What is the pending state
A
The instance is preparing to enter a running state
23
Q
When will you be billed when an instance is stopping
A
If it is preparing to hibernate
24
Q
What are the 2 types of backup functionality in RDS
A
Automated Backups
Snapshots
25
Where are backups from RDS stored
AWS-Managed S3 buckets
26
Where are RDS backups taken from
Standby instance if you are in multi-AZ mode
Otherwise from primary, so might have performance issues
27
Are RDS snapshots automatic
No
28
What are RDS snapshots and backups taken of
An instance, so all the databases within it
29
Do RDS snapshots expire
No, you have to clean them up yourself, manual or external process to delete
30
What is a difference between RDS snapshots and backups
Backups are automated
Also backups have transaction logs written every 5 minutes
31
What is the possible range of values for RDS backups retention
0 to 35 days
32
Can you keep RDS backups after deleting a db
Yes, but they still expire
33
Can RDS snapshots and transaction logs be replicated to another region
Yes, but has to be explicitly configured; it is not the default
34
What happens when you restore an RDS snapshot
A new RDS instance is created; with a new address
35
Is restoring a backup in RDS fast
No, it restores the backup then replays the transactions from transaction log
36
What is AWS backup
A fully-managed data-protection service
37
What is an advantage of AWS backup
IT allows you to consolidate management in one place, across accounts and regions
38
What are some things supported by AWS Backup
Compute
Block storage
File storage
DBs
Object storage
39
What is a central component of AWS backup
Backup plans
40
What can you configure with lifecycles in AWS Backups
When a backup transitions into cold storage and when it expires
41
What is a vault in AWS Backup
Backup destination - assign KMS key for encryption
42
What is specified in an AWS Backup backup plan
Frequency
Window
Lifecycle
Vault
Region copy
43
What is vault lock in AWS backup
Write-once, read-many (lock); you get 72h to delete, then you can't
Can still have lifecycle to make it expire
44
Can you do on-demand backup in AWS backup
Yes
45
Can you do Point-In-Time-Recovery for AWS backup
Yes, for supported product
46
What is S3 select
Ways to retrieve part of an object instead of the whole object
47
What is a disadvantage of filtering a large object on the client side
Still use the whole object size of data transfer
48
What does S3 select and Glacier Select do
Allows you to use SQL-like segments to select part of the object
49
What is an advantage of S3 select
S3 pre-filters an object, only sends the result
50
What are some file formats supported by S3 select
CSV, json, parquet, BZIP2 compression for csv and json
51
What do S3 access points do
Simplify managing access to S3 buckets and objects
52
What do S3 access points allow you to do
Rather than one bucket with one bucket policy, you create many access points with different policies
Each access point has its own endpoint address
an have different network access control
53
What is a way of making S3 bucket accessible via VPC
Access point with VPC origin
54
What types of records are supported with failover routing
primary and secondary
55
What is the use case for failover routing
Active-passive failover
56
What is a VPC router
HA, runs in all AZs the VPC is in, each vpc has a vpc router
57
What is the address of the VPC router
network + 1of the subnet
58
What does a VPC router do by default
Route traffic between subnets
59
What is the main route table of a vpc
The route table used by default by a subnet
60
What happens if many routes match traffic
Higher prefix takes priority
61
What are possible targets for a route table
Gateway or route table
62
Can you update local routes in route tables
No
63
What kind of resilience does an internet gateway have
Region resilient
64
Can you attach an internet gateway to more than one vpc
no
65
Can you attach a vpc to more than one internet gateway
no
66
What are the actions you need to take to make a subnet public
Create IGW
Attah IGW to VPC
Create custom route table
Associate route table
Make the default route the internet gateway
Configure subnet to allocate IPv4 addresses
67
What happens when you allocate a public IP in a subnet
A record is created in the IGW to associate the instance private ip to the public ip
68
Is an EC2 instance ever aware of it's public IPv4 address
No
69
Is an EC2 instance ever aware of it's public IPv6 address
Yes
70
What is a jumpbox
Bastion host
71
What is Parameter store
Storage for configuration and secrets
72
What are the 3 parameter types you can store in parameter store
String, StringList and SecureString
73
What are some features of parameter store
It supports hierarchies and versioning
74
What are the formats of data that can be store in parameter store
Plaintext and Ciphertext (integrates with KMS)
75
What are Parameter Store public parameters
Parameters made available by aws, per region (eg latest AMI per region)
76
Is parameter store public or private
Public
77
What can permissions be associated with in parameter store
Tree hierarchy or specific parameters
78
How does Parameter store handle encryption
KMS
79
What can parameter store changes generate
Events
80
What is Secrets Manager usable from
Console, CLI, API or SDK
81
Which supports secret automatic rotation, Secrets Manager or PArameter store
Secrets Manager
82
How does secret automatic location work in Secrets Manager
Using Lambda
83
What are some features of Secrets Manager vs Parameter store
Secrets Manager is designed for secrets
It also directly integrates with some AWS products (RDS)
84
What is EC2 on-demand
Multiple customers share hardware
85
How are you billed for EC2 on-demand
Per second that the instance is running
86
Do you have priority with on-demand
No, in case of big demand (major failure), people with reserved get priority
87
What is spot pricing
AWS sells unused capacity at big discount, up to 90% discount
AWS sets price, customers set max they are willing to pay
88
Should you use spot instances if your workload cannot tolerate interruptions
No
89
Are you still billed for your unused reservation
Yes
90
What are EC2 reservations defined by
Type of instance and AZ or region
91
What happens if you lock an instance reservation to an AZ
You reserve capacity, but you can only take advantage in that AZ
92
If you lock an EC2 reservation to a region, does it reserve capacity?
No
93
What are the term lengths for reservation
1 or 3 year
94
What is a dedicated host
You get a whole host
Hosts are designed for a famility of instances
Capacity management is required
95
What is dedicated instances
You don't own or share the host, but you have dedicated hardware
You don't manage the host
96
What are the limitations in terms of number of EC2 instances
- On-demand: vCPU-based limit per region
- Purchasing 20 reserved instances per region
- Dynamic Spot limit per region for Spot instance requests
97
What is AWS Nitro
The underlying platform for next generation of EC2 instances
Uses dedicated hardware for the hyervisors
98
What instance types for general purpose
t-type
m-type
99
Can you stop an Instance store-backed instance
No, you can only terminate it
100
How do you give a static IPv4 address to an instance
Elastic IP addresses
101
What OS are supported for instance hibernation
Amazon Linux
Ubuntu 18.04 LTS
102
What is a requirement for hibernation
Encrypted EBS-backed instance
103
What happens when an instance hibernates
Writes in-memory state to a file in root EBS
104
What do you pay for in an hibernating instance
EBS Volumes and Elastic IPs
105
What happens to attached EBS volume when an instance is terminated
Preserved by default
106
How can you prevent accidental instance termination
Enable termination protection
107
Is there such a thing as instance stop protection
Yes
108
What can you do to a stopped instance
Modify properties, size, or update kernel
109
What is included in an AMI
Template for root volume
Launch permissions
Block device mapping
110
What are EC2 placement groups
They determine how instances are placed on underlying hardware
111
What are the 3 options for placement groups
Cluster
Spread
Partition
112
What is cluster placement group
It clusters instances into a low-latency group in a single AZ
113
What is Spread placement group
Spreads instances across underlying hardware
Can span multiple AZs
114
What is the max number of instance per AZ per group for cluster group
7
115
What is partition placement group
Spread across logical partitions
Different partitions do not share hardware
116
What is a use case for cluster placement group
Performance, fast speeds, low latency
117
What is a use case for spread placement group
Small number of critical instances that need to be kept separated from each other
118
What is the maximum number of EC2 partitions per AZ
7
119
What is partition group great for
Topology-aware apps
120
What is Elastic inference accelerators
Enable to attach low-cost GPU powered acceleration to EC2, Sagemaker instances and other resources
121
Does ENI stay attached when stopping an instance
Yes
122
Does Elastic IP detach after stopping instance
No
123
Can underlying host change when stopping an restarting instance
Yes
124
What are the 3 components of AWS Glue
Central Metadate Repository
ETL Engine
Flexible Scheduler
125
What is the AWS Glue Data Catalog
Perisitent metadata store
126
What is the crawler used for in AWS GLue
Populate AWS Glue Data Catalog with tables
127
How does the crawler work in AWS Glue
Determine format, schema of raw data
Group data into tables or partitions
Write metadata to AWS Glue Data Catalog
128
What is needed to use DynamoDB accelerator
Install DAX SDK on instance
129
Does DAX change how apps interact with DynamoDB from the apps perspective
No
130
How is DAX accessed
Via an endpoint
It load balances
131
What is the architecture of DAX
Primary instance with replica in other AZs
Primary supports Write
Replicas support read
132
Does DAX support write-through
Yes, on primary node
133
Is DAX HA
Yes, if primary fails, we have a failover
134
What kinds of scaling does DAX do
Up AND Out
135
Is DAX a public service
No, it is deployed within a VPC
136
Do you have to set autoscaling for Dynamodb
Yes
137
What is capacity in DynamoDB
Speed
138
What is on-demand mode for DynamoDB
You only pay for the operations
139
What do you set when you use provisioned DynamoDB
RCU and WCU, they are KB per second of read or write
140
What does Autoscaling do with DynamoDB
Dynamically adjusts the provisioned throughput capacity
141
What is DynamoDB Global Tables
Multi-master cross-region replication
142
Who wins conflict resolution with DynamoDB Global Tables
Last writer
143
What is the speed of replicaiton for Global DynamoDB
GEnerally sub-second
144
What is AWS Transit Gateway
A Network Transit Hub to connect VPCs to onprem networks
145
What does Transit Gateway use
site-to-site vpns and DX
146
What attachments are supported for AWS Transit Gateway
VPC
Site-to-Site VPN
Direct Connect Gateway
147
How many VPN tunnels do you need from a Customer Gateway to a Transit Gateway to have HA
2
148
Where do you configure VPC attachments for a Transit Gateway
One to a subnet in each AZ where service is required
149
How can you connect to VPCs in another account or region with Transit Gateway
Peer to other transit gateway that belongs to another account or region
150
When you peer Transit Gateways, where does traffic transit by
AWS Global Network, not public internet
151
Does Transit Gateway support transitive routing
Yes
As long as appropriate routing is in place
152
How can you share Transit Gateways between AWS accounts
Using RAM
153
What does Transit Gateway do with regards to Multicast
It enables customers to have fine-grain control on who can consume and produce multicast traffic
Can maange multicast groups
154
What are the 3 modes of storage gateway
Volume
-Cache
-Stored
Tape
File
155
What is Storage Gateway Volume stored mode
It only uses AWS for backups
156
What does AWS Storage gateway file mode do
It presents a file-based interface to S3
157
How does Storage Gateway volume mode work
Uses volumes that have S3 snapshots
158
What is Amazon DocumentDB
Fully managed document database
COmpatible with MongoDB
159
If you can't change the code and must use MongoDB, what should you use
DocumentDB
160
What is Amazon Neptune
Graph database
161
What is the Cluster endpoint in Aurora
AKA writer endpoint
Points to primary
162
What is Aurora Parallel Query
Enables Aurora to push down and distribute computational load of a single query across thousands of CPUs in Aurora storage layer
163
What are the 4 types of endpoints for Aurora
Cluster
Reader
Custom
Instance
164
What is a custom endpoint in Aurora
It reprensts a set of instances you choose, and does load-balancing
165
What is an instance endpoint in Aurora
Connects to a specific instance
166
What can wildcard certificates handle
Syb-domains
167
When should you use dedicaeed IP custom ssl
For browsers that do not support SNI
168
