TD Exam 4 - Short review Flashcards

1
Q

Does SNS prevent duplication, loss and maintain order by default?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Can SNS handle thousands of messages a day

A

Maybe not

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Is Kinesis Data Stream appropriate for thousands of messages a day that need to be sent to EMR

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Does Kinesis Data Stream prevent duplication, loss and maintain order by default?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Can you configure RAID for instance store volumes

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can you configure RAID for EBS volumes

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is RAID 0

A

Use data stripping to have better performance
Distributes I/O across volumes in a tripe
If you add a volume, you get straight addition of throughput and IOPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can an instance have multiple instance stores

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is RAID 1

A

It is used for data mirroring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is ACID

A

Provides consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is BASE

A

Provides HA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which replication type in RDS supports ACID

A

REad-replica can support it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Amazon Elastic MapReduce

A

Amazon EMR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is needed to ensure all objects uploaded to an S3 bucket can read publicly all over the internet

A

Configure S3 bucket policy to set all objects to public read
Grant public read access to the object when uploading it using S3 Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does CORS do in an S3 bucket

A

Allows objects from one domain to be loaded and accessible ro a different domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Can you configure an S3 bucket policy to set all objects to public read

A

Yes, or set permission during upload for a specific object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Where is instance type configured for an auto-scaling group

A

In launch template

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Do you need to create a new version of a launch template to change instance type

A

Yes, templates can’t be modified unless you create a new version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Are you restricted to us-east-1 when requesting public certificates with ACM

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is Redshift spectrum

A

It allows you to directly run SQL queries against unstructured data in S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

When do instances have associated DNS hostnames

A

When DNS resolution and DNS hostname are enabled in VPC configuration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Glacier Vault

A

A container for storing archives
There is such a thing as Vault Policies and Vault Lock for WORM compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Does AWS SSO require SAML compatibility

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is Requester Pays

A

Requester of S3 pays for access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Does Requester Pays disable anonymous access

A

Yes, automatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the enhanced monitoring metrics in RDS

A

Includes RDS processes
OS processes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What does RDS enhanced monitoring do

A

Add an agent on the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is freeable memory in RDS

A

How much ram is available on the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What are some metrics available by default with RDS

A

CPU Utilization
Database Connections
Freeable memory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is queue length for Provisioned IOPS volumes

A

Length of waiting operations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the maximum ratio of IOPS to requested volume size

A

50:1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is the max IOPS for provisioned IOPS io1

A

64k iops

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is the maximum IO size for io1 volume at 32k IOPS

A

256 kiB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What impact does volume size have on IOPS queue length and value

A

More GB = Better IOPS = lower queue length

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is IOPS volume queue

A

number of pending IO requests for a device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What queue length should you want for a latency-sensitive app

A

Low queue length

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is Amazon Application Discovery

A

Used to track the migration status of your applications from the Migration Hub console

38
Q

What is the best way to do VM lift and shift

A

AWS Application Migration Service

39
Q

What is the order or a resource dclaraiton in CloudFormation

A

region:account:service:service id

40
Q

Can you automate promotion of an RDS read replica (automatic failover)

A

No

41
Q

How can you ensure Redshift has continuity even if there is a region-wide failure

A

Enable Cross-Region snapshots in the cluster

42
Q

What kind of resilience does redshift have by default

A

AZ, but can have multi-AZ deployment

43
Q

What is an advantage of taking a snapshot and terminating an RDS instance vs stopping it

A

A stopped RDS instance still incurs cost of its storage

44
Q

Can Cloudwatch alarms restart EC2 instances by themselves

A

Yes, using cloudwatch alarm actions

45
Q

What are Flow logs

A

They are used in VPCs

46
Q

What is Kubernetes Cluster Autoscaler

A

It automatically asjusts the number of nodes in a cluster. It utilizes Auto Scaling Groups

47
Q

What is a Kubernetes Cluster Autoscaler alternative

A

Karpenter

48
Q

Is there such a thing as Spot storage in EBS

A

No

49
Q

What is ElastiCache

A

In-memory database, memcached or redis

50
Q

Is there a managed config rule to check IAM user access key rotation

A

Yes

51
Q

If you add a new domain to an ALB and want to redirect http traffic to https for that traffic only, do you need to create a new listener or a new ALB

A

No, there can only be one listener on a specific port per ALB

52
Q

Where can you get information about upcoming AWS events

A

AWS Personal Health Dashbord

53
Q

What is the metadata endpoint for EC2 instances

A

http://169.254.169.254/latest/meta-data/

54
Q

What is user data vs metadata at 169.254.169.254

A

Metadata is information about the instance
User data is specified by user at isntance launch

55
Q

How does AWS License Manager work

A

Makes it easier to centrally manage licenases from vendors

56
Q

How can you force encryption for objects in an S3 bucket

A

Yes, by requiring the appropriate header

57
Q

Can you enforce header rules on S3 bucket policies

A

Yes, that is how you enforce encryption

58
Q

What algorithm is used when using S3 SSE

A

AES-256

59
Q

Does KMS use AES 256 for S3

A

No

60
Q

What are the different types of instances (in terms of optimized)

A
61
Q

Is Comprehend Medical a thing

A

Yes, t is made specifically for Medical information from unstructured text

62
Q

Is Textract Medical a thing

A

Yes, but it is not enoughto identif PHI in pdfs

63
Q

Textract vs Comprehend

A

Textract : extract text from pdf and such
Comprehend: analyze text

64
Q

Does Textract have PII redaction

A

Yes, but it is not suitable for PHI

65
Q

What is Well-Architected tool

A

Automatically monitor workload status, conduct architectural reviews and check for AWS best practices

66
Q

What is Elastic Fabric Adapter

A

A network device you attach to your EC2 instance to accelerate HPC

67
Q

What is Elastic Network Adapter

A

It does not have os-bypass capacity like EFA

68
Q

How do you grant access to CF to S3 bucket that is not public

A

Origin Access Identity

69
Q

Does AWS SSO require SAML 2.0

A

Yes

70
Q

What should you do if your identity store is not compatible with SAML 2.0

A

Build a custom identity broker and use STS

71
Q

Where are 2 places you can upload an HTTPs certificate you got from a 3rd party

A

ACM and IAM Certificate Store

72
Q

Is S3 suitable to upload a certificate

A

No

73
Q

What is IAM certificate store

A

Lets you upload a certificate, but ACM is recommended

74
Q

What is the primary recommended service for Lift and Shift

A

AWS Application Migration Service

75
Q

What is the first step for lift and shift

A

Install AWS Replication agent on source servers

76
Q

What are some characteristics of FIFO SQS queues

A

High throughput (not unlimited)
Exactly-once processing
FIFO delivery

77
Q

Are step functions an alternative to SQS

A

YEs

78
Q

What are some guarantees provided by Step Functions

A

Task is never duplicated and is assigned only once

79
Q

Is there such a thing as predictive scaling

A

Yes, it uses AI to predict load

80
Q

What does predictive scaling do

A

It uses machine learning to predict capacity requirements based on historical data from CloudWatch

81
Q

What EBS is the cheapest

A

Magnetic volumes

82
Q

What EBS provides storage with consistent and low-latency performance

A

Provisioned IOPS

83
Q

What EBS volumes support multi-attach

A

Provisioned IOPS io2 and io1

84
Q

What OS doesnt support OS-bypasss capavility of EFA

A

Windows

85
Q

What happens if you attach EFA to windows instance

A

It acts like an Elastic Network Interface, no OS bypass feature

86
Q

What is ENA

A

Provides traditional IP networking features

87
Q

What is AWS Compute Optimizer

A

Helps you identify optimal resource configuration, like Lmambda memory size, EC2 instance type, etc

88
Q

What is the only way to have automatic failover with RDS

A

Multi-AZ deployment

89
Q

Can you enforce license limits in AWS Licnse Manager

A

Yes

90
Q
A