TD Exam 3 - Short review Flashcards

1
Q

Does Fargate have ephemeral storage by default

A

Yes, 20 GiB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Can you use any docker image in Lambda

A

No, you have to refactor the code and build app from AWS-provided base image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Is there downtime when using AWS Database Migration Service

A

There is virtually none.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Are ongoing changes replicated when using Database Migration Service

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Does taking a snapshot to migrate a database entail downtime

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can you change an Aurora instance class to serverless

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Are you billed when your on-demand EC2 instance is preparing to hibernate with a “stopping” state

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Are you billed when your on-demand EC2 is in “pending” state

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Are you billed when your reserved instance is in “Terminated” state

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Are you billed when your Spot instance is preparing to stop with a “stopping” state

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Can you have a retention period of 90 days for RDS automated backups

A

No, max is 35 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can you configure RDS to automatically export a backup to S3 customer-managed bucket

A

No, this has to be done manually

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What should you use to have an RDS backup with 90 days retention policy

A

AWS Backup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is S3 Glacier expedited retrieval

A

Allows you to access Glacier data rapidly (1-5 mins for below 250 MB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is provisioned retrieval capacity for S3

A

It ensures that capacity for expedited retrieval is available when you need it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the capacity of an expedited retrieval unit

A

3 expedited retrieval every five minutes and 150 MB/s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the length of bulk retrieval

A

5-12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is active-passive failover

A

When you want the secondary to be on standby

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is active-active failover

A

When you want all of your resources to be available the majority of the time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Can you have active-active failover with one primary and one secondary

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Can you use healthchecks with R53 weighted routing

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What happens when you use Healthcheck with R53 weighted routing

A

If a selected record is unhealthy, the process of selection is repeated until a healthy record is selected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Is it true that EC2 instances in a private subnet can communicate with the internet only if they have an elastic IP

A

No, it can also have a public IP via a NAT instance or NAT gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is every subnet created automatically associated with

A

The main route table of the VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What makes a subnet public
If it's traffic is routed to an internet gateway
26
What is the allowed block sizes for a VPC
/16 (65536 IPs and /28 (16 IPs)
27
Which is more cost-effective, Parameter Store or Secrets Manager?
Parameter store
28
What should you use if you are storing mostly application parameters, Parameter Store or Secrets Manager?
Parameter Store
29
Are you still billed for a stopped reserved instance
Yes
30
What should you do to avoid being billed from a no-longer needed Reserved instance
Terminate it If it is still running after reservation term, you get charged on-demand If it is only stopped, it could be started up again Also, you would be charged if you had Elastic IP adresses
31
Can you sell EC2 reservations
Yes, using the AWS Reserved Instance Marketplace
32
What is AWS Glue job bookmarking
It is a mechanism that allows AWS Glue to keep track of where a job is left off in case it gets interrupted or fails for any reason
33
How does Glue Job bookmarking work
By storing the state of a job in a data store independant from the job itself
34
What is instance hibernation
Allows you to pause and resume instances, reduces startup time
35
What do you pay for when an instance is in hibernation
EBS volumes and Elastic IP
36
How do you enable hibernation for an existing ec2 instance
You have to migrate your app to a new EC2 instance
37
Can you enable or disable hibernation on an instance after it has been created
No
38
Why would requests fail when you use the EC2 API to launch 50 instances in an AZ
There is a vCPU-based on-demand instance limit per region
39
How do you increase the limit of EC2 instances you can launch in a region
Submit a limit increase form to AWS to increase the vCPU-based limit per region
40
What is Amazon DynamoDB Accelerator (DAX)
Fully managed, HA, in-memory cache for dynamodb that delivers up to 10x performance improvement
41
Is Auto-scaling enabled by default in DynamoDB
No
42
How do you increase performance of a serverless app based on Dynamodb, API Gateway and lambda
Turn on caching (API Gateway) Enable DynamoDB global replication Enable DynamoDB Accelerator (DAX) and ensure Auto Scaling is enabled and increase maximum provisioned reand and write capacity
43
What is AWS Transit Gateway
It provides a hub and spoke design for connecting VPCs and onprem networks
44
Can VPN provide consistent and dedicated access to onprem network
No
45
If a company has DX connection and wants its AWS accounts to have consistent and dedicated access to its network services, what should it do?
Create new DX Gateway and integrate it with existing DX Connection Set up Transit Gateway between AWS accounts and associate it with Direct Connect gateway
46
What is Firehose used for
Load streaming data into data stores and analytics tools
47
What is AppSync used for
It makes it easy to build collaborative apps that keep shared data updated in RT
48
What is CReationPOlicy used for in CloudFormation
Prevent a resource status from reaching create complete until success signals received (or timeout)
49
How do you send a success signal with CloudFormation
cfn-signal helper script
50
What do you do to ensure read requests are load balanced between read replicas in Aurora
Use built-in reader endpoint
51
Which is cheaper, interface endpoint or gateway endpoint
Gateway endpoint
52
What do you pay for when using a gateway endpoint
No additional charge, you still pay standard charges for data transfer and resource usage
53
What do you pay for when using interface endpoint
Hourly rate for every provisioned Interface endpoint + standard rates
54
What should you do to increase disk space without impacting performance in RDS
Modify db instance settings to enable storage autoscaling
55
Is there downtime when using RDS autoscaling
No
56
What is a potential downside of manually increasing allocated db instance storage for RDS
Might cause performance degradation during the change
57
How do you enforce different permissions to IAM users that do not have MFA
You can use an IAM policy
58
What happens to EBS root volumes by default when an instance is terminated
They are deleted
59
How can you prevent EBS root volume deletion on instance termination
Set DeleteOnTermination attribute of EBS volumes
60
What is SNI Custom SSL
Allows multiple domains to serve SSL over same IP
61
When can you use an IAM policy to allow access to KMS key
If key policy explicitly allows it
62
What is AWS Cost Explorer
Service that helps ou visualize, understand and analyze AWS costs and usage
63
What should you use if you want to programmatically query cost and usage data
Cost Explorer API
64
How long are data records kept for in Kinesis by default
24h
65
What is the maximum data retention period for kinesis
365 days
66
What is a limitation when running lambda inside a VPC
It will need an appropriate number of subnet IPs and ENIs
67
What kind of exception will you get if your lambda inside a subnet runs out of IP or ENI
EC2ThrottleException
68
What is an Elastic Fabric Adapter
Network device to accelerate HPC and machine learning applications
69