Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SA > TJ - Review mode set 3 > Flashcards

TJ - Review mode set 3 Flashcards

1
Q

What type of EC2 can be stopped and restarted?

A

EBS-backed EC2’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What happens when you stop an EBS-backed EC2 instance, that also has an instance store?

A

the EBS volume is preserved, but the data in any attached instance store volume will be erased

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

T or F: can an EBS-backed EC2 instance have attached Instance Store volumes?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What happens to an ENI and the EIP when an instance is stopped?

A

ENI stays attached to the EC2, EIP remains associated with the instance as well.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What queries are used for each Aurora endpoint?
1. Cluster endpoint
(Current Primary instance)
2. Reader endpoint
3. custom endpoint
4. Instance endpoint
(a Specific DB instance)

A
  1. to perform DDL/write statements
  2. perform queries, read
  3. used with clusters with DB instances of different capacities or configurations
  4. for more direct control over connections to the DB
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What scenario does AWS limit the # of EC2s you can create?

A

There is a vCPU-based On-Demand Instance limit per region. To fix - submit the increase form to AWS and retry the failed requests once approved.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How do you ensure that users of AWS accounts are prevented from removing or modifying any rules in AWS Config?

A

Add the AWS account(s) to an organization unit (OU). Attach a service control policy (SCP) to the OU that restricts access to AWS Config.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is AWS control tower? And can this service restrict access from invoking an action to a specific resource, such as AWS Config, in your AWS account?

A

AWS Control Tower service is commonly used to set up and govern a secure multi-account AWS environment.

No, Control tower cannot restrict access in your aws account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

In a Network ACL, how are rules evaluated ?

A

Rules are evaluated starting with the lowest numbered rule. As soon as a rule matches traffic, it’s applied immediately regardless of any higher-numbered rule that may contradict it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How many route tables can be associated with one subnet?
How many subnets can be associated with one route table?

A

One route table per subnet.
Multiple subnets per route table (if needed).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

When should a customer consider using Multipart Upload to S3 feature?

A

For objects larger than 100 megabytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Select S3? And what do you need to perform an S3 Select operation?

A

S3 Select enables applications to retrieve only a subset of data from an object by using simple SQL expressions.

Both the bucket’s name and the object key are needed to successfully perform an S3 Select operation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is needed to create a Launch Template?

A

-ID of the AMI
-Instance type
-a key pair
-security group
-a block device mapping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

T or F:
You can’t modify a launch template after you’ve created it

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How do you create “a hub and spoke design for connecting VPCs and on-premises networks”?

A

AWS Transit Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

True or False: . VPC peering is supported by using transitive peering relationships.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Does DX connections support VPC peering?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Expedited retrievals in S3?

A

allows you to quickly access your data when occasional urgent requests for a subset of archives are required.

Data under 250MB will be retrieved within 1-5 minutes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

what is Provisioned capacity in S3?

A

ensures that your retrieval capacity for expedited retrievals is available when you need it. use case —> workload requires highly reliable and predictable access to a subset of your data in minutes.

Provides up to 150/MB of retrieval throughput.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is Amazon Glacier Select?

A

Used to perform filtering operations using simple Structured Query Language (SQL) statements directly on your data archive in Glacier.

Key word: SELECT (SQL operation)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

T or F: RDS automated snapshots are able to be exported to S3 automatically?

A

False.

automated snapshots must be exported manually to S3.

22
Q

Give definitions for each EC2 placement strategies:
-Cluster
-Partition
-Spread

A

Cluster – packs instances close together inside an Availability Zone. This strategy enables workloads to achieve the low-latency network performance necessary for tightly-coupled node-to-node communication that is typical of HPC applications.

Partition – spreads your instances across logical partitions such that groups of instances in one partition do not share the underlying hardware with groups of instances in different partitions. This strategy is typically used by large distributed and replicated workloads, such as Hadoop, Cassandra, and Kafka.

Spread – strictly places a small group of instances across distinct underlying hardware to reduce correlated failures.

23
Q

By default, who is the owner of an S3 object?

A

The account that uploaded the object.

24
Q

How do you make a subnet into a “public subnet”?

A

Attach it to an internet gateway

25
Q

what is a gateway endpoint?

A

a gateway that you specify in your route table to access Amazon S3 from your VPC over the AWS network

26
Q

What is a Interface endpoint?

A

A gateway endpoint with the extended functionality of using private IP addresses to route requests to Amazon S3 from within your VPC, on-premises, or from a different AWS Region.

27
Q

What is the best DB solution for frequent schema changes?

A

DynamoDB

28
Q

what is AppSync?

A

Serverless service used to build collaborative apps that keep shared data updated in real-time. Interacts with multiple data sources (SQL, NoSQL, REST, microservices, etc.)

29
Q

How long is the default record storage retention for KDS?

A

24 hours.

30
Q

Can you enable hibernation mode on an EC2 once it has been launched?

A

No.

To enable hibernation on your application you need to migrate it to a hibernation enabled EC2

31
Q

What do you do if you need to have hibernation mode on an application on EC2 that is already running?

A

Migrate the application to an EC2 instance with hibernation enabled

32
Q

Is auto scaling enabled by default in DDB?

A

In AWS CLI - No.
In the console - yes.

33
Q

What is the default behavior of EBS root device volumes upon termination of EC2s?

A

root volumes are automatically deleted when the instance terminates

34
Q

An EC2 has an instance store attached and an Elastic IP. What happens when the EC2 is stopped and started?

A

-The underlying host for the instance is possibly changed
-All data on the attached instance-store devices will be lost.

35
Q

What happens if you stop an EBS-backed EC2 instance with a instance store volume?

A

The EBS volume is preserved, but the data in any attached instance store volume will be erased.

36
Q

Why would a request for 50 EC2s to be created fail after 20 EC2s were successfully created?

A

There is a vCPU-based On-Demand Instance limit per region which is why subsequent requests failed. Just submit the limit increase form to AWS and retry the failed requests once approved.

37
Q

An AWS account is set up through AWS organizations. The account will have AWS Config rules set on it. How do you ensure that the account admin is prevented from modifying rules in AWS config?

A

Add the AWS account to an organization unit (OU). Attach a service control policy (SCP) to the OU that restricts access to AWS Config.

You cannot have an SCP without an OU (inside of AWS Organizations)

38
Q

What are SCPs in AWS?

A

Service control policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization.

First, enable an OU in AWS Organizations. Then add your account to an OU. And then create and add an SCP to the OU.

39
Q

What happens while your On-Demand EC2 instance is preparing to hibernate with a stopping state?

A

You will still be billed as this EC2 is preparing to hibernate

**You will not billed if it is preparing to stop

40
Q

How does billing work for a reserved instance?

A

You will be billed for the entirety of the term of your contract. Even if the instance is terminated or stopped.

41
Q

For S3 event notifications, what is the API (JSON) notation needed to notify when a new object is added to a bucket?

A

s3:ObjectCreated:*

42
Q

For S3 event notifications, what is the API (JSON) notation needed to notify when a versioned object is permanently deleted OR an object is removed from a bucket?

A

s3:ObjectRemoved:Delete

43
Q

What type of setup in AWS will allow multiple domains to serve SSL traffic without the need to reauthenticate and re provision your certificate everytime you add a new domain?

A

Upload all SSL certificates of the domains in the ALB using the console and bind multiple certificates to the same secure listener on your load balancer. ALB will automatically choose the optimal TLS certificate for each client using Server Name Indication (SNI).

44
Q

What is SNI?

A

An extension of the Transport Layer Security protocol, which allows multiple domains to serve SSL traffic over the same IP address by including the hostname which the viewers are trying to connect to.

45
Q

What is a wildcard certificate?

A

A wildcard certificate is a digital certificate that is applied to one main domain and all its subdomains.

46
Q

How do you improve the overall performance of DynamoDB and make it more scalable while keeping the costs low?

A
  • Enable DynamoDB Accelerator (DAX) and ensure that the Auto Scaling is enabled and increase the maximum provisioned read and write capacity.
  • Use API Gateway in conjunction with Lambda and turn on the caching on frequently accessed data and enable DynamoDB global replication.
47
Q

What is AWS Database Migration Service?

A

Migrate your databases to AWS with virtually no downtime.

Continuous Replication to the target, allowing the source database to be fully operational during the migration process.

48
Q

What is a way to ensure users only access content from cloudfront and not the origin (S3)?

A

-Require that your users access your private content by using special CloudFront signed URLs or signed cookies.
-Restrict access to files in the origin by creating an origin access identity (OAI) and give it permission to read the files in the bucket.

49
Q

When storing application values or parameters, what is most cost effective solution - Secrets manager or AWS Systems Manager Parameter Store?

A

AWS Systems Manager Parameter Store, specifically by using the SecureString type parameters feature.

Secrets manager also works but there is a COST. So for questions regarding cost, Systems Manager is best.

50
Q
A
51
Q
A

AWS SA (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions