Test 4 Flashcards

1
Q

What does the Server Access Logging feature in S3 provide?

A

requestor, bucket name, request time, request action, response status, and error code information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What service can coordinate multiple AWS services into serverless workflows?

A

AWS Step Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What 2 steps will you take to automatically restart EC2 instances whenever a simple restart will resolve an error?

A
  • First, look at the existing Cloudwatch logs for keywords matching the error to create a custom metric.
  • Second, create a Cloudwatch alarm for that metric which invokes a restart action
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What would you use to uniquely identify all of your AWS resources that will allow them to specify a resource unambiguously across all of AWS, such as in IAM policies, Amazon Relational Database Service (Amazon RDS) tags, and API calls.

A

Amazon Resource Name (ARN)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the maximum ratio of provisioned IOPS to requested volume size in Gibibyte?

A

50:1 so for 10 GiB volume, request 500 iops

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

If you need to provide high availability and fault tolerance to an app that has a ALB and 2 tiers (app and db) that cannot be in the same subnet, how many subnets will you need?

A
6:
- ALB is in a public subnet
- App serubnetsver is in a priavte subnet
- DB is in a private subnet
3x2 (Availability zones) = 6 subnets
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How do you handle disaster recovery in a Redshift Cluster?

A

Enable Cross Region Snapshots Copy in your cluster.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the most efficient way to collect and analyze logs from the instances with minimal effort?

A

Install the unified Cloudwatch logs agent in each instance which will automatically collect and push logs to Cloudwatch. You can then analyze the logs with Cloudwatch Insights.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What solution can be easily implemented to alert a Lambda function of new entries in a DynamoDB while requiring minimal configuration change to your architecture?

A

Enable DynamoDB Streams to capture table activity and automatically trigger the Lambda function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What service allows you to deploy a custom shell script to all of your instances?

A

User data for passing in scripts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the 2 enhanced monitoring metrics that Amazon CloudWatch provides for Amazon RDS DB instances?

A
  • RDS child processes

- OS Processes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where can you safely import the SSL/TLS certificate of your application?

A
  • AWS Certificate Manager

- IAM Certificate Store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What website URL will be assigned to the S3 bucket named johnmac81?

A

johnmac81.s3-website–amazonaws.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What service would you use to trace and analyze user requests as they travel through your Amazon API Gateway APIs to the underlying services.

A

AWS X-Ray

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What service would you use if you require a durable storage service that is able to handle future increases in storage capacity and can provide the lowest-latency access to data.

A

EBS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Why would a new EC@ instance in a new VPC, not have an associated DNS hostname?

A

The DNS resolution and DNS hostname of the VPC should be enabled

17
Q

What is the best way to configure a fault-tolerant NAT instance in your VPC?

A

Launch 2 Nat Instances in 2 separate public subnets and add a route from the private subnet to each Nat Instance

18
Q

What is Classic Load Balancer Connection Draining?

A

This enables the load balancer to complete in-flight requests made to instances that are de-registering or unhealthy