Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SA > TJ - Review mode set 4 > Flashcards

TJ - Review mode set 4 Flashcards

1
Q

You pay for all bandwidth in/out of S3, except for 3 cases. List the 3 cases where you do NOT pay for bandwidth in/out of S3.

A

– Data transferred in from the Internet.

– Data transferred out to an Amazon EC2 instance, when the instance is in the same AWS Region as the S3 bucket (including to a different account in the same AWS region).

– Data transferred out to Amazon CloudFront.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Lambda@Edge?

A

a feature of Amazon CloudFront that lets you run code closer to users of your application, which improves performance and reduces latency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is AWS Health?

A

provides ongoing visibility into your resource performance and the availability of your AWS services and accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

In AWS Health, What is the difference between AWS PERSONAL Health Dashboard and AWS SERVICE Health Dashboard?

A

-Personal health is tailored to a specific AWS account.
-Service health provides a high-level overview of the health and status of AWS services across all regions. Has nothing to do with a specific AWS customer but alerts to anyone in the affected region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What service is most “tightly coupled” with AWS Health?

A

AWS EventBridge

Health calls out issues, EventBridge acts on them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Eventbridge?

A

EventBridge is a versatile event bus service designed to integrate with numerous AWS services, such as Lambda, Step Functions, SNS, SQS, and more (cloudwatch, AWS health)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

In S3, how do you protect data in a bucket from an AZ wide or region wide failure?

A

Enable cross-region replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the charge for a stopped On-Demand EC2 instance?

A

there is no charge for a stopped EC2 instance that you have shut down.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the behavior of EBS volumes on a stopped instance?

A

Information is saved and you are still billed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

which SSE provides an audit trail that shows when your key was used and by whom?

-Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3)
-Server-Side Encryption with Customer Master Keys (CMKs) Stored in AWS Key Management Service (SSE-KMS)

A
  • Server-Side Encryption with Customer Master Keys (CMKs) Stored in AWS Key Management Service (SSE-KMS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How do you collect logs from your Amazon EC2 instances and on-premises servers into CloudWatch?

A

unified CloudWatch agent, or the old CloudWatch Logs agent.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what is the difference in SSM Agent and cloudwatch agent?

A

The SSM Agent is used for securely managing and configuring AWS resources, whereas the CloudWatch Agent is used for collecting and tracking metrics and logs from AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the behavior for standard SQS queues (The default) ?

A

SQS Standard Queues do not guarantee message order and may deliver duplicates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the behavior for FIFO SQS queues?

A

SQS FIFO Queues guarantee message order and ensure no duplicates are sent, making them suitable for scenarios where the order of processing and exactly-once delivery are crucial.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

List Example Use Cases for FIFO SQS:

A

-Order processing systems where the order of transactions must be preserved.
-Financial transactions that require exactly-once processing without duplicates.
-Task queues where tasks must be executed in the order they are received.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

List Example Use Cases for KDS:

A

-Real-time log and event data collection and analysis.
-Real-time data processing for analytics dashboards.
-Streaming data ingestion for IoT devices.
-AI training involving processing large volumes of data in real-time and requires high-throughput data ingestion

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

If you need an RDS db for certain times only (ex. testing twice a week),
what is the best way to save money by running it only when needed?

A

Run the database (jobs, testing, etc), and then take a snapshot of the DB. Then terminate it. Restore the DB when needed again.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Does a stopped RDS DB incur costs?

A

Yes, stopped RDS dbs will incur costs on provisioned storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Does a stopped On-Demand EC2 instance incur costs?
What about EBS volumes attached to a stopped EC2?

A

No, there is no charge for a stopped EC2 instance.
Yes, EBS volumes attached to a stopped EC2 will incur costs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

For S3 encryption where you need an audit trail (who used a key and when), what is the best encryption option?

A

Server-Side Encryption with KMS Key Stored in AWS Key Management Service

(SSE-KMS) will provide necessary audit capabilities for keys.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

what is the cheaper but less durable option for S3 storage,
S3-One Zone IA or S3-IA?

A

S3-One Zone IA is cheaper than S3-IA but less “durable” as it only stores data copies in one AZ.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the best way to collect logs from your Amazon EC2 instances and on-premises servers into CloudWatch Logs?

A

Install the unified CloudWatch Logs agent in each instance which will automatically collect and push data to CloudWatch Logs. Analyze the log data with CloudWatch Logs Insights.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

When would you choose KDS over SQS?

A

When data needs to be delivered in sequence of arrival and ensure no duplicates are produced.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what is Amazon Forecast?

A

Amazon Forecast is a time-series forecasting service based on machine learning (ML) and built for business metrics analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What do you need to do to monitor CPU memory on an EC2?

A

Install Cloudwatch agent in your EC2 and create a custom metric for memory usage.

26
Q

Which type of EBS volume is ideal for infrequently used data, lowest storage cost? ($ per GB)

A

Magnetic volumes

27
Q

Which EBS type is best for consistent, low-latency performance, and I/O intensive apps (such as NoSQL)?

A

Provisioned IOPS volumes

28
Q

What are the three types of EBS volumes?

A

-General Purpose (SSD)
-Provisioned IOPS (SSD)
-Magnetic

29
Q

For an app hosted on EC2s that is having high load on the site (latency and slow response for users), what are some ways to improve performance?

A
  • Use Amazon CloudFront with website as the custom origin.
  • Use Amazon ElastiCache for the website’s in-memory data store or cache, as most of the data is read-only.
30
Q

What is the best way to deal with slow performance, latency with a DynamoDB table? Specifically for peak times.

A

Use DynamoDB Auto Scaling to automatically adjust provisioned throughput capacity.

31
Q

How do you create triggers in DynamoDB that will automatically create lambda events?

A

Enable DynamoDB Streams to capture table activity and automatically trigger the Lambda function.

32
Q

What is the primary migration service recommended for lift-and-shift migrations to AWS?

A

AWS Application Migration Service (AWS MGN).

33
Q

What service would be best to check if IAM user access keys are not rotated within a certain time frame?

A

Use the AWS Config managed rule to check if the IAM user access keys are not rotated

34
Q

what is Amazon Elastic MapReduce (EMR)?

A

managed cluster platform, processes vast amounts of data

35
Q

what service can be used to automatically stop terminate or recover, reboot an EC2?

A

Cloudwatch Alarm actions.

36
Q

What AWS service has flow logs?

A

VPC.

37
Q

What is the best way to get an EC2s general information for a shell script? Including the instance public and private IPs?

A

Use Curl or Get Command to get the latest metadata information from http://169.254.169.254/latest/meta-data/

38
Q

To ensure High availability for an S3 bucket that is fault tolerant beyond an AZ AND region, what should be done?

A

Enable Cross-Region Replication

39
Q

How do you protect your DDB table against Regional failure?

A

Create a global table in a secondary region. Use R53 DNS failover.

40
Q

How do you protect your EC2s (In an autoscaling group) that is behind an ALB, from a regional failure?

A

Replicate the auto-scaling group and application load balancer in a secondary region. Then use R53 DNS failover to route traffic to these resources in the Secondary region.

41
Q

What are the enhanced monitoring metrics that Amazon CloudWatch gathers from Amazon RDS DB?

A

RDS child processes and OS processes.

42
Q

What are some REGULAR items provided by RDS in Cloudwatch?

A

CPU Utilization, Database Connections, and Freeable Memory.

43
Q

What is a DR plan for a Redshift Cluster in the event of an AWS region outage?

A

Enable Cross-Region Snapshots Copy

44
Q

If you need to scale EC2s based on regular patterns of traffic increases and applications that take a long time to initialize, what method is best to solve this issue?

A

Predictive scaling can help you scale faster by launching capacity in advance of forecasted load.

45
Q

What is the difference between Predictive and dynamic scaling?

A

Predictive scaling can launch EC2s in advance of a forecasted load. Predictive scaling is proactive.

Dynamic scaling takes action AFTER the load occurs. Dynamic scaling is reactive.

46
Q

What is the difference between AWS Personal Health Dashboard and AWS Service Health Dashboard?

A

Personal will indicate actions that will effect specific services related to you.

Service will indicate changes made to all services on AWS affecting all users.

47
Q

What is the DNS policy for new EC2s launched into the DEFAULT VPC?

A

Assigned public and private DNS hostnames. corresponding to IPV4,IPv6

48
Q

What is the DNS policy for new EC2s launched into a non-default VPC?

A

New EC2s launched into a non-default VPC will get a private DNS hostname ONLY.

49
Q

How do you ensure that EC2s launched into a non-default VPC are provided a public DNS hostname?

A

DNS resolution and DNS hostname of the VPC configuration should be enabled

50
Q

What is AWS License Manager?

A

AWS License Manager is a service that makes it easier for you to manage your software licenses from software vendors (for example, Microsoft, SAP, Oracle, and IBM) centrally across AWS and your on-premises environments.

51
Q

What service and feature is best to prevent EC2s being launched when the license limit is exceeded ?

A

AWS License Manager and enable the “Enforce license limit” option. SNS can then send an alert or notification

52
Q

How do you ensure that an object uploaded to an S3 bucket MUST use AES-256 encryption?

A

Create an S3 bucket policy that denies permissions to upload an object unless the request includes the below header:

s3:x-amz-server-side-encryption”: “AES256”

53
Q

For S3, what is a way for keys to automatically rotated every year with the LEAST operational overhead?

A

SSE-S3.

Enable server-side encryption with Amazon S3-managed encryption keys and rely on the built-in key rotation feature of the SSE-S3 encryption keys.

54
Q

Within an AWS environment, how would you set up SSLs for many EC2s in multiple AZs that have their own FQDNs AND the applications must use a publicly trusted SSL cert … with the LEAST operational overhead?

A

Use the AWS Certificate Manager (ACM) to generate a public SSL/TLS certificate. Associate the new SSL/TLS certificate on the HTTPS listener of the ALBs.

55
Q

What must be done to ensure that all objects of an S3 bucket can be publicly read over the internet?

A

-Grant public read access to the object when uploading it using the S3 Console.
- Configure the S3 bucket policy to set all objects to public read.

56
Q

If you need to incorporate LDAP in AWS and the current identity store is NOT compatible with SAML, what action needs to be taken?

A

Develop an on-premises custom identity broker application and use STS to issue short-lived AWS credentials.

57
Q

What is the best aws service to extract text from a PDF file?

A

Amazon Textract.

58
Q

What AWS service helps to identify and process PHI?

A

Amazon Comprehend Medical.

59
Q

How would you automatically check if a password is in compliance on a policy in IAM?

A

Configure AWS Config to trigger an evaluation that will check the compliance for a user’s password periodically.

60
Q
A

AWS SA (32 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions