TJ - Review mode set 3 Flashcards
What type of EC2 can be stopped and restarted?
EBS-backed EC2’s
What happens when you stop an EBS-backed EC2 instance, that also has an instance store?
the EBS volume is preserved, but the data in any attached instance store volume will be erased
T or F: can an EBS-backed EC2 instance have attached Instance Store volumes?
True
What happens to an ENI and the EIP when an instance is stopped?
ENI stays attached to the EC2, EIP remains associated with the instance as well.
What queries are used for each Aurora endpoint?
1. Cluster endpoint
(Current Primary instance)
2. Reader endpoint
3. custom endpoint
4. Instance endpoint
(a Specific DB instance)
- to perform DDL/write statements
- perform queries, read
- used with clusters with DB instances of different capacities or configurations
- for more direct control over connections to the DB
What scenario does AWS limit the # of EC2s you can create?
There is a vCPU-based On-Demand Instance limit per region. To fix - submit the increase form to AWS and retry the failed requests once approved.
How do you ensure that users of AWS accounts are prevented from removing or modifying any rules in AWS Config?
Add the AWS account(s) to an organization unit (OU). Attach a service control policy (SCP) to the OU that restricts access to AWS Config.
What is AWS control tower? And can this service restrict access from invoking an action to a specific resource, such as AWS Config, in your AWS account?
AWS Control Tower service is commonly used to set up and govern a secure multi-account AWS environment.
No, Control tower cannot restrict access in your aws account.
In a Network ACL, how are rules evaluated ?
Rules are evaluated starting with the lowest numbered rule. As soon as a rule matches traffic, it’s applied immediately regardless of any higher-numbered rule that may contradict it.
How many route tables can be associated with one subnet?
How many subnets can be associated with one route table?
One route table per subnet.
Multiple subnets per route table (if needed).
When should a customer consider using Multipart Upload to S3 feature?
For objects larger than 100 megabytes
What is Select S3? And what do you need to perform an S3 Select operation?
S3 Select enables applications to retrieve only a subset of data from an object by using simple SQL expressions.
Both the bucket’s name and the object key are needed to successfully perform an S3 Select operation.
What is needed to create a Launch Template?
-ID of the AMI
-Instance type
-a key pair
-security group
-a block device mapping
T or F:
You can’t modify a launch template after you’ve created it
True
How do you create “a hub and spoke design for connecting VPCs and on-premises networks”?
AWS Transit Gateway
True or False: . VPC peering is supported by using transitive peering relationships.
False
Does DX connections support VPC peering?
No
What is Expedited retrievals in S3?
allows you to quickly access your data when occasional urgent requests for a subset of archives are required.
Data under 250MB will be retrieved within 1-5 minutes.
what is Provisioned capacity in S3?
ensures that your retrieval capacity for expedited retrievals is available when you need it. use case —> workload requires highly reliable and predictable access to a subset of your data in minutes.
Provides up to 150/MB of retrieval throughput.
What is Amazon Glacier Select?
Used to perform filtering operations using simple Structured Query Language (SQL) statements directly on your data archive in Glacier.
Key word: SELECT (SQL operation)
T or F: RDS automated snapshots are able to be exported to S3 automatically?
False.
automated snapshots must be exported manually to S3.
Give definitions for each EC2 placement strategies:
-Cluster
-Partition
-Spread
Cluster – packs instances close together inside an Availability Zone. This strategy enables workloads to achieve the low-latency network performance necessary for tightly-coupled node-to-node communication that is typical of HPC applications.
Partition – spreads your instances across logical partitions such that groups of instances in one partition do not share the underlying hardware with groups of instances in different partitions. This strategy is typically used by large distributed and replicated workloads, such as Hadoop, Cassandra, and Kafka.
Spread – strictly places a small group of instances across distinct underlying hardware to reduce correlated failures.
By default, who is the owner of an S3 object?
The account that uploaded the object.
How do you make a subnet into a “public subnet”?
Attach it to an internet gateway
