Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SA > Timed Mode Set 7 – AWS Certified Solutions Architect Associate > Flashcards

Timed Mode Set 7 – AWS Certified Solutions Architect Associate Flashcards

1
Q

What hardware device service comes installed with AWS DataSync?

A

Snowcone comes pre-installed with DataSync agent.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What service can be used with Glue Data Catalog to store and retrieve table metadata for the Amazon S3 data in your AWS account.

A

Athena.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a service you can used to visualize Athena SQL queries ?

A

Amazon QuickSight

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is an online tool that provides you with REAL-TIME GUIDANCE to help you provision your resources following AWS best practices?

A

AWS Trusted Advisor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

EMR runs on different instance types for different tasks, what are the best instances for each of the types below:

-Primary (Master) node
-Core nodes
-Task nodes

A

-Primary (Master) node = On-Demand
-Core nodes = On-Demand OR instance-fleet mix
-Task nodes = Spot OR instance-fleet mix

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the best way to automate the creation, retention, and deletion of EBS snapshots?

A

Amazon Data Lifecycle Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the best way to deploy any serverless or container-based application with increased efficiency, consistency, and control?

Specifically the app is managed by AWS and its Dev friendly.

A

AWS Proton.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Whats the best way to rehost (Lift-and-Shift) an application with the data and OS info from On-Prem to AWS?

Must not interrupt normal business ops.

A

AWS Application Migration Service (MGN).

This is great for lift and shift (rehost), moving the workload from on prem.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a requirement for using a Prometheus agent with EKS?

A

To use Prometheus with EKS you MUST first integrate it with a CloudWatch agent.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the best way to collect metrics and logs for your EKS cluster?

A

CloudWatch Container Insights.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What AWS services does CW Container Insights support?

A

-ECS
-EKS
-K8s on EC2
-Fargate (ECS and EKS both)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the AWS best practice way of automatically starting and stopping an EC2 and/or DB instances based on a predetermined schedule?

A

AWS Lambda function is the best way to start and stop EC2 and RDS DB instances … With low overhead and cost considerations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What AWS service is best for triggering a Lambda function at specific times or intervals?

A

EventBridge (CloudWatch Events).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What Linux service is more comparable to EventBridge?

A

Cron. Cronjobs.

Eventbridge uses cron format.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the difference between FSx Lustre with Persistent mode and
Scratch mode?

A

Persistent is best for sustained throughput
Scratch is designed for temporary storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is best to protect DynamoDB tables from accidental write or delete operations?

A

Enable Point-In-Time Recovery (PITR) in DynamoDB.

PITR is continuous backups, restore. 35 day retention period

17
Q

*Review question 8 on subnets

A

do it

18
Q

What is a dedicated instance ?

A

A Dedicated instance runs in a VPC on hardware that’s dedicated to a single customer.

19
Q

Can both Reserved Instance types - Standard AND Convertible - be resold at the RI Marketplace?

A

Only Standard, NOT Convertible!!!!

20
Q

For an SFTP solution needing high IOPS performance, should you use S3 or EFS?

A

EFS.

Better IOPS than S3

21
Q

For compliance, what needs to be done to identify if a Log file has been tampered with in CloudTrail?

A

Enable the CloudTrail Log File Validation feature on all trails.

22
Q

What is the difference between Lambda functions RESOURCE policy and EXECUTION role?

A

Resource based policy - allows an AWS service to invoke Lambda.

Execution Roles - Allows Lambda access to other AWS services.

23
Q

For S3 lifecycle storage class transitions, how long must objects be stored in the current storage class before they can be transitioned?

(from standard –> IA or OneZone IA, for Example)

A

objects must be stored in current class for 30 DAYS before moving to 1ZIA or IA.

24
Q

What is best way to centrally manage security group rules across an organization to allow new CIDR ranges and remove old CIDR ranges as needed?

A

VPC customer-managed prefix list .

Provision a VPC customer-managed prefix list using the AWS CLI or the Amazon VPC console and add the CIDR blocks to be included in the list.

25
Q

How can you securely access one AWS service to another for compliance reasons?

A

Interface VPC endpoints.

Allows private connection between your VPC and other AWS service endpoints. Powered by AWS PrivateLink.

26
Q

How can an S3 bucket restrict access from specific endpoints, VPCs, IP address ranges, and AWS accounts?

A

S3 Bucket policy.

27
Q

What AWS service is used to detect software vulnerabilities and unintended network exposure along your AWS workloads ?

A

Amazon Inspector.

28
Q

How can you ensure that newly created EBS volumes are encrypted?

A

an IAM policy can be created with condition keys, mandating that any request to create an EBS volume MUST be encrypted.

29
Q

What service can help to remediate noncompliant resources in your environment (ex., non encrypted EBS volumes)?

A

AWS Config allows you to remediate noncompliant resources that are evaluated by Config rules.

30
Q

What service works with AWS Config to apply remediation on non compliant resources?

A

AWS Systems Manager.

Uses Automation Documents.

31
Q

What do Automation Documents do?

A

Automation Documents define the actions to be performed on noncompliant AWS resources evaluated by AWS Config Rules.

32
Q

What AWS service/feature deploys resources closer to a large population in order to deliver applications that require single-digit millisecond latency to end-users?

A

AWS Local Zones

33
Q

Which AWS Backup Vault mode is best for preventing deletion of backups for a specified period?

Governance or Compliance?

And Why?

A

Compliance.

Compliance prevents deletion, while governance allows certain users to modify or remove backups.

34
Q

What is Amazon Neptune?

A

fully-managed graph database service.

35
Q

What are some descriptions of a graph type database that can help to identify a graph type service (Amazon Neptune) on an exam?

A

complex, relationship-rich data.

“intricate relationships”

36
Q

What is the best service to process large streams of data specifically for GRAPH data?

Neptune Streams or Kinesis Data Streams?

A

Neptune Streams.

Neptune is designed for Graph data

37
Q
A

AWS SA (32 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions