TD Exam 6 Flashcards

1
Q

Can SQS accept http requests directly

A

No, No, not from outside AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is on-demand capacity reservation

A

It enables you to reserve compute capacity in a specific AZ for any duration.
No commitment
Capacity available immeditaly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Is reserved capacity automatically used by running instances

A

yes, if they match

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Does on-demand capacity reservation count with discounts fro regional reservation and SAvings plans

A

Yes if instance attributes match

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Can you reserve capacity with Regional Reserved instances

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Do you need commitment when doing on-demand capacity reservation

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Does capacity reservation provide a discount

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How much do on-demand capacity reservation cost

A

Equivalent of on-demand whether you run instances or not

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Whatg do you pay for when you run an instance that matches attributes of an on-demand reservation

A

Pay only for the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can scheduled reserved instance reserve capacity

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the term for scheduled instance reservations

A

One year

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is AWS Elastic Disaster Recovery service (DRS)

A

Provides continuous block-level replication, recovery orchestration and automated server conversion capability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What kin of RPO and RTO can you expect from DRS

A

RPO of seconds, RTO of 5-20 mins

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the max number of instances for spread placement group

A

21, 7 per AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Is there a limit for number of instances cluster placement group

A

Only the normal limit of instances in your account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is recommended when using cluster placement group

A

Launch them all in a single request and use same instance type (size deos not matter)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What should you do if capacity error when launching new instance in cluster placement group

A

Stop and restart the instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What type of replication do you get when you have Aurora Read replica in other region

A

Asynchronous less than one second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What type of replication do you get when you have RDS MySQL Read replica in other region

A

Asynchronous, more than one second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What should you use if you need read replica with asynchronous replication that is less than one second

A

Aurora read replica

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Does Elastic Beanstalk support containers

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What should you use if you want something that automatically handles load balancing, auto-scaling, monitoring, placing containers, etc

A

Elastic Beanstalk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the most efficient way to copy data with database

A

Aurora Cloning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Does Aurora serverless support cloning

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Does Aurora serverless support IAM db auth

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Does Aurora serverless support Native functions

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Does scaing support metrics like CPU Utilization for ALB

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Can you use a lambda url directly as a webhook

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is ECR

A

Alternative to docker hub

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is in a container definition

A

Image
Ports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is a task in ECS

A

An app, can have multiple containers
Permissions is in task definition (task role)
Also if EC2 or Fargate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is ECS service

A

Define how a task should scale
Can have load balancer in front of it
Configure scaling and HA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is in a task definition in ECS

A

Security, container(s), resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is in a service in ECS

A

How many copies, HA, Restarts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

How are CloudWatch Events turned into actions

A

Using Amazon EventBridge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is generated for ACM certificates that are eligible for renewal

A

AWS Health events

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Can you schedule CloudWatch event rules to run

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

How can you force ssl for Microsoft SQL server

A

rds.force_ssl parameter and reboot instance
No work required by client app
Download Amazon RDS Root cert and import it to servers then configure app

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What engines is IAM DB auth available with

A

Postgres and MySQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What is Transparent Data Encryption (TDE) used for

A

Usually for data at rest, not in transit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Does AWS Global Accelerator provide static IPs

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is endpoint group in Global Accelertator

A

Associated with a region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What are Unicast IP addresses

A

Multiple devices, route to device in closest location

44
Q

Can global accelerator be used with non-http

A

Yes

45
Q

Can cloudfront be used with non-http

A

No

46
Q

What does Global accelerator do in terms of IP

A

2 static unicast IPs that it assigns to you

47
Q

Do local zones support DX

A

Yes

48
Q

How does VPC work with local zones

A

Create subnets in local zones

49
Q

Where is S3 with local zones

A

In parent zone

50
Q

What is CloudFront cache control max-age directive

A

How long objects stay in cache

51
Q

Can you set 2 primary origins in cloudfront

A

No

52
Q

What is minimum cache time in cloudfront

A

0 for web distributions
3600 for rtmp (this is streaming??)

53
Q

What can an origin group contain

A

A primary and a secondary origin

54
Q

Can you use an autoscaling group as origin for CloudFront

A

No, you need a load balancer in front

55
Q

What type of operation is resharding in Kinesis

A

Pair-wise, divide in 2 or merge 2 shards

56
Q

How do you increase capacity of a Kinesis stream

A

More shards, more exp too tho

57
Q

Is there such a thing as Kinesis Video streams

A

Yes

58
Q

How long does Kinesis stream store by default

A

24h

59
Q

What is the max time of storage of data in Kinesis

A

365 days

60
Q

What is Appflow

A

Service, fully-managed, to integrat apps

61
Q

What is OpenSearch

A

Open source search engine

62
Q

Which elasticache config supports multithread by deaulft

A

Memcached

63
Q

Whcih elasticache engine supports advanced data structures

A

Redis

64
Q

Which elasticache engine supports replication

A

Redis

65
Q

Which elasticache engine supports backups

A

Redis

66
Q

Which elasticache engine supports transactions (multiple operations as one)

A

Reds

67
Q

Which elasticache engine supports multithreading

A

Memcached

68
Q

Which elasticache engine supports sharding

A

Memcached

69
Q

Which elasticache engine supports autodiscovery

A

Memcached

70
Q

Is Redis in elasticache able to detect and replace failed nodes automatically

A

No

71
Q

What are the adantages of memcached

A

Multithread
Node autodiscovery

72
Q

Is EFS storage capacity elastic

A

Yes

73
Q

What are the 2 performance modes for EFS

A

General purpose
Max IO

74
Q

What are the 2 throughput modes for EFS

A

Bursting
Provisioned

75
Q

What does cross-zone lone balancing do

A

Each load balancer node distributes traffic across registered targets in all AZs, if disabled, only same AZ as node

76
Q

Is cross-zone balancing enabled by default

A

Only on ALBs, not on NLBs

77
Q

What is the only required section in a CF template

A

Resources

78
Q

How do you control version with cloudfront

A

Invalidate files or give them versioned file names

79
Q

Advantages of CF object versions

A

Cheaper not to invalidate
Access logs speak better
Simplifies rolling forward and back

80
Q

Where are application files stores for Elastic Beanstalk

A

S3

81
Q

Where are log files stored for Elastic Beanstalk

A

S3 or CloudWatch logs

82
Q

What is ECS cluster auto-scaling

A

Allows ECS to manage scale-in and out of ASG

83
Q

Can you move assets directly to cloudfront

A

No

84
Q

Does file gateway have a local cache

A

Yes

85
Q

What does file gateway cache do

A

buffer for writes and cache for reads, cached read = immediate access

86
Q

Can Amazon pinpoint stream to Kinesis

A

Yes

87
Q

Is SNS suitable for multi-engagement SMS marketing campaign

A

No, use Pinpoint

88
Q

What does Amazon Connect do

A

Cloud customer contact center service (customer service)

89
Q

What does Amazon pinpoint do

A

Flexbile, scalable marketing communications service

90
Q

Can uploader set permissions for objects in S3

A

Yes

91
Q

Who owns an S3 object by deafult

A

Uploader account, not the bucket owner account

92
Q

How do you make sure the bucket owner has access to everything uploaded

A

Bucket policy requiring bucket-owner-full-control in object ACL

93
Q

What port is RDP

A

3389

94
Q

What protocol is RDP

A

TCP and UDP (I think), port 3389

95
Q

How do you get better permission with Athena

A

Convert to apache PArquet

96
Q

Advantages of parquet

A

Columnar storage
2x faster to upload
6x less storage
(In S3 compared to other text formats)

97
Q

What is a permission to read and write underlying data with access controlled by Lake Formation Permissions

A

IAM permission lakeformation:GetDataAccess

98
Q

What is a characteristic of EBS encryption by default

A

It is per region

99
Q

What happens to an unencryopted snapshot or volume when you set up encryption by default (EBS)

A

Resulting new volume or snapshot after will be encrypted

100
Q

Is there a direct way to encrypt existing snapshot or volume

A

No

101
Q

Does EBS encryption support asymmetric CMKs

A

No

102
Q

Can you change CMK associated with existing encrypted snapshot or volume (EBS)

A

No, but can associate different CMK during snapshot copy operation

103
Q

What are choices with auth when creating new IAM user by console

A

Console password or access keys, you need at least one
Not the case when created using CLI or API

104
Q

What are the 2 policies associated with a role

A

Trust policy (who can assume)
Permissions (what can it do)

105
Q
A