Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Solutions Architect - Professional Exam Review > Continuous Improvement for Existing Solutions > Flashcards

Continuous Improvement for Existing Solutions Flashcards

1
Q

What to use for shared persistent storage for ECS Fargate containers

A

EFS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is AWS Transfer Family used for?

A

FTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What types of EC2 operating systems are supported by EFS

A

Linux only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which costs more: On-Demand Instances or Spot Instances?

A

On-Demand Instances cost way more. Spot Instances have more than a 90% discount compared to On-Demand.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which service is a simple document repository

A

AWS Artifact

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the 3 types of scaling for AWS OpWorks Stacks

A

24/7, time-based, and load-based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What might cause users to get “access denied” messages while trying to launch a Service Catalog product?

A
  1. The product does not have a launch constraint assigned.
  2. The launch constraint does not have permissions to CloudFormation.
  3. The user launching the product does not have required permissions to launch the product.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

A client’s RDS instance has “Available” listed in the Maintenance column. They don’t want to update until they can have a chance to review the changes. What do you advise?

A

Delay the update until they’re comfortable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which service assess applications for vulnerabilities or deviations from best practices.

A

Amazon Inspector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What two methods can be used to restore access to EC2 instances if you lose your private SSH key?

A

Stop the instance, detach its root volume, and attach the root volume to another instance. Use that instance to edit the authorized_keys file.

OR

AWS Systems Manager Automation with the AWSSupport-ResetAccess

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You’re setting up Elasticsearch for your Aurora database. While using Database Migration Service to load the indexes from Aurora, it terminates with an Elasticsearch return code of 429 and a message stating ‘Too many requests’. What must be done to fix this?

A

Set the number of queue slots as a product of the number of indexes, shards, and replicas

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A new policy requires use of encryption at rest for all data. Some existing EC2 instances were created without encryption for their root EBS volume. How do you fix this?

A

Stop the instances, create AMIs, and redeploy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A client is migrating Linux servers with RAID1 disk configuration to EC2 and intends to keep the same disk configuration. How should you advise them?

A

Carefully evaluate whether or not RAID on EBS is the correct choice

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

For petabyte-scale amounts of data that needs to be processed over a few days once per quarter, is it better to use S3 Standard or S3 Standard-IA

A

S3 Standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What port/s does a server use to respond to an HTTP request

A

Ephemeral ports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What do you need to do in order to validate the checksum of S3 objects that were uploaded with Multipart Upload?

A

Use a custom metadata parameter instead of the entity tag checksum.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You have a Network Load Balancer with an Autoscaling Group running EC2 instances. You notice that instances in one AZ have a lot of traffic while instances in another AZ have very little. What is the most likely reason for this?

A

Network Load Balancers cannot handle cross-zone load balancing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How to avoid connection issues with Amazon RDS Multi-AZ instances after failover?

A

Ensure that the subnets have the same routing rules.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How do you include manual evidence in AWS Audit Manager?

A

First upload it to an S3 bucket, then import it into AWS Audit Manager

20
Q

Which service detects confidential data in applications

A

AWS Macie

21
Q

Where can you find official documents for AWS on PCI compliance, HIPPA, compliance, etc.

A

AWS Artifact

22
Q

Your SSH private key for an EC2 instance has been compromised. Other than deleting the key pair in Amazon EC2 management console, what do you need to do?

A

Stop and terminate the instance immediately, then launch it with a new key pair

23
Q

Which has less maintenance? ECS on EC2 or AWS Fargate?

A

AWS Fargate

24
Q

Lower costs for S3 object encryption?

A

Configure S3 bucket keys for SSE-KMS

25
Q

Tool to allow a CloudFormation template to make an external API call

A

Lambda

26
Q

What do you have to do to enable an EC2 instance to be accessible via AWS Session Manager in Systems Manager?

A

The System Manager agent must be installed for Session Manager.

27
Q

What does an account need in order to access an Amazon Managed Blockchain?

A

Create a VPC PrivateLink endpoint in the account

28
Q

How to lower the stress on EC2 instances that have high CPU Utilization due handling TLS encryption and decryption?

A

Configure the TLS listener on a Network Load Balancer instead.

29
Q

A client with a WordPress application hosted on EC2 instances is having poor performance reading from Aurora due to a lot of product catalog lookups. How to fix?

A

Use ElastiCache Memcached as a caching layer and install a plugin to allow WordPress to use ElastiCache.

30
Q

An application pulling messages from SQS is getting a lot of empty ReceiveMessageResponse responses. What needs to be done to lessen this?

A

Increase the visibility time out

31
Q

How to enable communication between instances in two different Wavelength Zones?

A

Transit Gateway

32
Q

How would you use AWS OpWorks Stacks to handle spikes that occur at consistent times of day?

A

Time-based instances

33
Q

How to replicate existing databases to different regions to serve as backups and provide quick recovery?

A

Enable cross-region automated backup replication on the DB instance to create snapshots in other regions.

34
Q

How to ensure that you have capacity for auto scaling in a heavily used region

A

Zonal Reserved Instances

35
Q

In API Gateway, change 403 Forbidden responses to return 404 Not Found instead

A

In the Gateway Responses pane of the API, choose “Missing Authentication Token” and modify the status code from 403 to 404.

36
Q

When a custom domain for Amazon Cognito is created, what resource does it create and associate with its ACM certifiate?

A

A CloudFront distribution

37
Q

Your client is using TLS certificates from ACM. What should they do instead in order to protect the certificates from being stolen by spoofers?

A

Nothing.

38
Q

Run ECS Containers on-premises

A

Amazon ECS Anywhere

39
Q

Can you use Spot Instances for autoscaling at peak usage times?

A

Only if you’re using a Spot Fleet

40
Q

What do you need to do to let instances on a VPC in one account use the private hosted zone Route53 DNS resolution on a VPC in another account?

A

Associate the VPC with the hosted zone

41
Q

What type of interface do you need to establish an encrypted VPN on a DirectConnect connection?

A

A public virtual interface

42
Q

What resources can AWS WAF protect?

A

CloudFront, Application Load Balancer, API Gateway, AWS AppSync

43
Q

Where can Amazon Macie be used to scan for sensitive data?

A

S3 only

44
Q

Allow EC2 instances to send logs to CloudWatch

A

Install the CloudWatch Logs Agent

45
Q
A

AWS Certified Solutions Architect - Professional Exam Review (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions