wrong answers Flashcards
How to control traffic between EC2 network interface and Transit Gateway
Apply NACL rules between instances in the subnets and Transit gateway associations to control traffic
When creating site-to-site VPN connections in AWS console, which of the following can you configure for the tunnels?
The encryption algorithms used by the tunnels
How can you grant access to files in a bucket that are not owned by the user that created the bucket policy?
An object access control list
What aws services require Gateway VPC endpoints
S3 and DynamoDB
How to make REST APIs private
use the aws:SourceVpce condition in your api gateway resource policy to restrict acces to only your vpc endpoint
what is needed to access internet after putting instance in public subnet
internet gateway and routes for 0.0.0.0/0
What saves more, compute savings plan or EC2 savings plan
EC2 savings plan (can save up to 72%)
computer saving plan maximum reduction is 66%
What services require Interface VPC endpoint (not gateway)
everything except S3 and DynamoDB
what is the maximum time automated snapshots are stored?
35 days
What is retrieval time of s3 glacier deep archive
12 hours
What is retrieval time of s3 glacier
minutes to hours (few hours)
what is retrieval time of s3 glacier expedited retrieval
1-5 minutes
How does glacier select to selective retrieval?
filtering directly against glacier object using standard SQL statements for CSV JSON or Parquet files. (only CVS and JSON for GZIP or BZIP2 objects)
What AWS Kinesis feature can upload data to AWS redshift?
AWS Kinesis Firehose
What is AWS redshift?
AWS redshift is a managed cloud data warehouse product.
Are very diverse partition keys good or bad for DynamoDB preformance
Good
Does AWS Storage Gateway cached volume provide low latency to entire dataset?
No. Storage Gateway Stored volume does
What does AWS fargate do?
serverless docker containers
What kind of consistency does s3 have?
strong read after write for puts and deletes
What does long polling do for SQS queue
it waits for a message to be avalible before sending a response to the polling. This cuts down requests a bit
Does IAM “profile” exist
No
What do cross account IAM roles do?
securely grant resources to third party, like APN partner
What performance mode for EFS is best for serving content to users with low latency?
General purpose performance mode
