Test 5 Flashcards
What 3 services can Kinesis save the data to?
- Dynamodb
- S3
- Redshift
What file permission will throw an “Unprotected Private Key File” error?
0777
What support plan provides:
- ) 24x7 access to customer service, documentation, whitepapers, and support forums.
- ) Access to full set of Trusted Advisor checks
Business
What is AWS Cognito?
It provides authentication, authorization, and user management for your web and mobile apps. Your users can sign in directly with a user name and password, or through a third party such as Facebook, Amazon, or Google
What is AWs WAF?
It is a web application firewall that helps protect your web applications from common web exploits.
What are 2 managed services by AWS (you dont have to worry about OS patches etc)?
- RDS
- Dynamodb
How do you ensure that employees who are responsible for the UAT instances don’t have the access to work on the production instances?
Define the tags on the UAT and Production servers and add a condition in the IAM Policy which allows access to those specific tags.
What could be the cause of 1 of multiple Availability Zones behind a load balancer are not receiving traffic?
The problem Availability Zone has not been properly added to the load balancer.
What can you use to configure a fleet of EC2 instances without having to shh into each instance?
Run command - AWS Systems Manager Run Command lets you remotely and securely manage the configuration of your managed instances
In the event of system failure on the primary database instance, what happens to Amazon Aurora during the failover?
- Aurora will first attempt to create a new DB instance in the same AZ as the original.
- If unsuccessful, Aurora will create a new DB instance in a different AZ
Which section of the Cloudformation template should you configure to get the Domain Name Server hostname of the ELB upon the creation of the AWS stack?
Outputs
What is the default setting for Cloudtrail log encryption?
CloudTrail event log files are encrypted using Amazon S3 server-side encryption (SSE).
How can you apply a group of database-specific settings to all of your Relational Database Instances?
Parameter Groups: You manage your DB engine configuration through the use of parameters in a DB parameter group.
How should you configure the public DNS zone apex record to point to the load balancer?
Create an A record aliased to the load balancer DNS name
How do you provide access to S3 data to another service without involving the internet?
Use a Gateway VPC Endpoint
In EBS encryption, what service does AWS use to secure the volume’s data at rest?
- By using your own keys in AWs Key Management Service (KMS)
- By using Amazon-managed keys in Amazon Key Management Service (KMS)
What is Amazon Cloud HSM?
It provides a secure key storage in tamper-resistant hardware in a single Availability Zone.
How do you capture the detailed information of all HTTP requests that went through their public-facing application load balancer every five minutes?
Enable Access Logs on the application load balancer
What services use VPC Gateway Endpoint?
- S3
- DynamoDB
What services do NOT use VPC Interface Endpoint?
- S3
- DynamoDB
What VPC Endpoint type do S3 and DynamoDB use?
VPC Gateway Endpoint
