Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Solution Architect > All > Flashcards

All Flashcards

1
Q

S3 - How is a key defined?

A

A key acts as a file name.

It can include (back) slashes, dots or dashes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

S3 - What is the durability / accessibility of S3 Standard?

A
  1. 999999999% durability and

99. 99% availabiliy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

S3 - How is data consistency handled?

A

For PUT of new items AWS provides read-after write concistency.
For DELETE and PUT on existing objects eventual concistency (Because the files are stored across multiple data centers)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

S3 - Describe S3 Standard - Infrequent Access?

A

Same duability as Standard.
Storage costs are lower, but there is a retrieval fee.
Also the size min. is 128KB and the duration is set to a min. of 30 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

S3 - What is a typical object lifecycle?

A
  • Initially store in S3 Standard
  • After 30 days transition to S3 IA
  • After 90 days transition to Glacier
  • After 3 years delete the file
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

S3 - What is SSE-S3?

A

“Check-Box style” ecryption

AWS handles key management and key protection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

S3 - What is SSE-KMS?

A

Fully integrated solution, Amazon handles the users key management und protection, but the user manages the keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

S3 - What is SSE-C?

A

User maintains own encryption keys, but Amazon handles the library implementation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

S3 - What is Client-Side encryption?

A

Data is ecrypted on the client side before the data is sent to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

S3 - What is MFA Delete Protection?

A

For a delete request the authorization with a MFA device is needed alongside the normal user/password route

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

S3 - What are Pre-Signed URLs?

A

Private items be made “public” for a certain time duration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

S3 - What is cross-region replication?

A

For latency and performance reasons objects can be located in S3 buckets across different regions.
Required:
- IAM policy to enable S3 to sent the files to another region
- Versioning must be turned on

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

EC2 - What defines an instance type?

A
  1. Count of virtual CPUs
  2. Memory
  3. Storage in type and size
  4. Network performance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

EC2 - What is enhanced networking?

A

Reduces impact of the virtualization on the networking capabilities.
Results in lower latency, more packets and less jitter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

EC2 - What defines an AMI?

A
  • The operating system
  • The state of patches
  • The installed applications or other system software
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

EC2 - What are the typs of AMIs?

A
  • Published by AWS
  • Maketplace AMIs
  • AMIs from existing instances or backups
  • From AWS VM Import/Export
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

EC2 - How can you access an instance from the web?

A
  • Assign a public or elastic IP or use the DNS for the instance
  • Make sure that the route table, security group and NACL allow access
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

EC2 - Does an EC2 instance need a security group?

A

Yes, at least one security group must be attached to the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

EC2 - What kind of source/destinatons are allowed in a Security Group?

A

CIDR IP blocks or other security groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

EC2 - Can you export a VM and import it to AWS?

A

Yes, using AWS VM Import/Export.

Instances from AMIs cannot be exported (and used in another data center)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

EC2 - How can an instance be resized?

A

Stop the instance.

Change the type using the “Change Instance Type” setting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

EC2 - Can you change the Security Group on a running instance?

A

Yes, also rules in a security group can be changed and take effect immediately

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

EC2 - What is Termination Protection?

A

No instance can be terminated before this setting is manually deselected.
Does not prevent Spot Instances to be terminated.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

EC2 - How can an EC2 reserved instance be modified?

A
  • Switch the AZ in the same region

- Change the instance type in the same instance family

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

EC2 - Describe the tenancy options for instances

A

Shared Tenancy: Host has instances from all customers
Dedicated Instance: Instance (Server) is used by the custome
Dedicated Host: Entire rack is used by the customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

EC2 - What is Instance Store?

A

Storage located directly on the hadware (Not netwok storage like EBS)
Storage and usage costs are included in the instance costs.
Data will be lost if the instance goes down.
Instances can only be terminated, not sopped.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

EC2 - Are EBS volumes replicated on the Availability Zones?

A

They are replicated inside their AZ, but not across them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

EC2 - Can you use muliple EBS devices on a single instance?

A

Yes, they can also be combined using RAID.
But while one instance can have multiple volumes, a volume can only be attached to a single instance. (Use EFS for that case)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

EC2 - What is a magnetic EBS volume?

A

They are using magnetic hard disks, which are cost-effective and range from 1GB to 1TB.
By default it has (only) 100 IOPS, but can burst.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

EC2 - What is a magnetic EBS volume used for?

A
  • If data is accessed infrequently
  • For sequential reads
  • Low storage costs are required
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

EC2 - How are (max.) IOPS calculated for standard EBS volumes?

A

Based on the storage capacity, 3 IOPS are given to every GB (300 IOPS for 100GB e.g.)
But the IOPS are capped to 10.000.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

EC2 - How are EBS volumes billed?

A

Based on the allocated storage capacity (regardless what is really used)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

EC2 - What are the max. volume sizes and throughputs of the EBS volume types?

A

General: 1GB - 16TB/ 160MB
Provisioned: 4GB - 32TB / 320MB
Magnetic: 1GB - 1TB / 40-90MB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

EC2 - Where are EBS snaphots located?

A

In S3, but they are not visible to the customer in the buket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

EC2 - Can you use an EBS snapshot in another region?

A

No, they can only be attached to an instance in the same region.
But they can be copied and therefore transferred to another region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

EC2 - What does it mean that data is “lazily loaded”?

A

When a volume is restored the volume is accessible but the data might not be present, but is loaded on request.
Therefore on restoring all the blocks should called and therefore be present when customers are using it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

EC2 - How can you increase the size of a running EBS volume?

A
  1. Create a snaphot

2. Create another volume (if increased size) form that volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

EC2 - Are files on a EBS volume encrypted at rest?

A

Yes, using KMS.

The are also encrypted on transit between the instance and the volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

VPC - What is the smallest/largest IP range in a VPC?

A

/28 (16 IPs)

/16 (65.536 IPs)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

VPC - What are the core components of a VPC?

A
  • Subnets
  • Route Table
  • Security Groups
  • Network Control Access Lists
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

VPC - What is the difference between a public and private subnet?

A

Route table does / does not route traffic to/from the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

VPC - What is the “local” route in the route table?

A

It enables communication within the VPC.

The local route cannot be modified or removed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

VPC - What is the purpose of the Internet Gateway?

A

Handles requests form / to the internet from the Route Table.
It translates the internal IPs from services and instances to the public IPs (EC2 instances only know their internal IP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

VPC - How to create a public subnet with access to the internet with an IGW?

A
  • Attach the Internet Gateway
  • Create a route to/from 0.0.0.0/0
  • Configure NACL and Security Groups
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

VPC - Can you transfer an Elastic IP to anotther region?

A

No, they are locked to a region (used for local routing etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

VPC - What is the purpose of a VPC endpoint?

A

Enables a private connection for AWS Services without the need to access the internet or a NAT gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

VPC - What is the purpose of VPC Peering?

A

Connection with other VPC, in your own account or with someone else.
But is always limited to the same region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

VPC - What are the restrictions for VPC Peering?

A
  • There cannot be overlapping CIDR blocks
  • Must be in the same region
  • Transitive routing is not allowed
  • Only one connection from VPC to VPC
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

VPC - What are the default Security Group rules for in-/outbound traffic ?

A

Per default no inbound traffic is allowed

Outbound traffic is allowed, but can be changed.

50
Q

VPC - Can (per default) instances with the same Security Group talk to each other?

A

No, only if this is set up

51
Q

VPC - Will be changes to the Security Group have immediate effect?

A

Yes

52
Q

VPC - What are the differences between Security Groups and the NACL?

A

Instance Level / Subnet Level
Only allow rules / allow and deny rules
Stateful / Stateless
Evaluates all rules / Processes in ordered list

53
Q

VPC - What is a NAT instance?

A

EC2 Instance with a special AMI.
Allowed private instances to communicate to the internet (for updates e.g.)
The source/destination check needs to be disabled for the connection to work.

54
Q

VPC - How can you connect AWS to another data center?

A

Using a Virtual Private Gateway (VPG) or a Customer Gateway (CGW)

55
Q

CloudWatch - What are the two packages?

A

Basic: Free, data point every 5min, limited preselected metrics
Detailed: every minute, more and custom metrics, data aggregation

56
Q

ELB - Can you target more than one AZ?

A

Yes, but not regions (use Route53)

57
Q

ELB - What is Idle Connection Timeout?

A

When using the ELB, there is one connection to the client and one to the backend servers.
This connection will be automatically closed once there was no message after a certain time

58
Q

ELB - What is Cross-Zone Load Balancing?

A

Being enabled it is possible to handle all instances as if they would be in one AZ, meaning there could be 1 instance in one AZ and 5 in another.
It is still recommended that there should be an equal amount of instances in each AZ

59
Q

ELB - What is Connection Draining?

A

It stops sending requests to unhealthy instances, but does not cancel open connections

60
Q

ELB - What is a Proxy Protocol?

A

It sends anoter header with information about the request to the backend instance

61
Q

ELB - What are Sticky Sessions?

A

Binds the session to a specific instance, so the customer will always be directed to this instance.
ELB can use it’s own cookie or use a custom cookie

62
Q

ELB - What are Health Checks?

A

ELB checks if the instance is responding (InService) or not (OutOfService)
There are three types of checks: Ping, loading a page o opening a connection

63
Q

CloudWatch - Limits of Cloudwatch

A

5000 Alarms per Account

Metrics are retained for two weeks (can be stored in S3 to keep longer)

64
Q

Auto Scaling - What is scheduled scaling?

A

Scale up or down based on scheduled events, for example the release of a product or an end of the month event

65
Q

Auto Scaling - What are the basic components?

A

Launch configuration, Autoscaling Group and scaling policy (optional)

66
Q

Auto Scaling - What is the Launch Configuration?

A

Which AMI, what instance type, what security group and the key pair.

67
Q

Auto Scaling - What is needed for the Auto Scaling Group?

A

Required: Min. Size and max. capacity
Optional: Desired capacity

68
Q

Auto Scaling - What instance groups can be used?

A

On-Demand or Spot

69
Q

Auto Scaling - How does the scaling policy work?

A

The Auto Scaling is associated with CloudWatch to monitor the instances, when a certain threshold is reached it will scale in or out

70
Q

Auto Scaling - Why should be scaling in be slower than scaling out?

A
  • Instances are billed for one hour, so it does not make sense to waste that
  • Maybe there will be another spike in a short time, then another instance would be needed
71
Q

IAM - What is the best practice for the root account?

A

Only use it once to create individual IAM users and then store the root credentials safely away

72
Q

IAM - How does an EC2 instance communicate to S3?

A

EC2 assumes a role that has the adequate rights to use S3

73
Q

IAM - How can other accounts be granted access?

A

By assigning them with (temporary) roles for the services they need to communicate to

74
Q

IAM - What is Identity Federation?

A

Authentication is done by another service, like Facebook

75
Q

IAM - How can you authenticate to AWS?

A

With Username/Password, Access Key/AcessID, or Access Key/Session Token

76
Q

IAM - What is included in a policy?

A 
Effect (allow / deny)
Service
Resource
Action (Read, write e.g.)
Condition (schedule, IP range)
77
Q

DB - How are licences handled for oracle and MS SQL Server?

A

They can either be included in the instance, or brought in by the user

78
Q

DB - How is Aurora structured?

A

Aurora comes automatically with a cluster that has instances in multiple AZs.
There is one primary Instance (read/write) and up to 15 replicas (read)

79
Q

DB - What two options does RDS provide for backups?

A

Automated backups and manual snapshots

80
Q

DB - Why should you use Multi-AZ for snapshots?

A

Backups are taken from the standby, therefore not shorten the latency from the main

81
Q

DB - For which cases is Multi-AZ the failover?

A
  • AZ is not reachable
  • Network failure to the primary database
  • Compute unit failed
  • Storage unit failed
82
Q

DB - Can you perform a manual failover?

A

Yes

83
Q

DB - How can a running RDS instaced be scaled out?

A

Scheduling it with the next maintenance window or manually trigger it.
The database will be migrated with not much loss in performance

84
Q

DB - Describe a scenario for Read Replicas?

A

Blog with a lot of read, but not much write traffic

85
Q

DB - Is it possible to have Read Replicas in different Regions?

A

Yes

86
Q

DB - What is a Redshift cluster?

A

A cluster is composed of a leader node and multiple compute nodes.
Client Applications only interact with the leader node.

87
Q

DB - What happens when Redshift is resized?

A

Redshift creates a new cluster and migrates all the data to it

88
Q

DB - How to set up / change DynamoDB

A

User will define the read / write capacity, AWS will provide the right hardware.
Infrastructure will be added in runtime when the requirements change

89
Q

DB - How is Multi-AZ set up for DynamoDB?

A

It is automatically configured inside the region

90
Q

DB - In DynamoDB, what is a Eventually Consistent Read?

A

Since the data is replicated some of the written data might be inconsistent (1sec window)

91
Q

DB - In DynamoDB, what it a Strongly Consistent Read?

A

Before giving out data it makes sure all nodes have the same data

92
Q

SQS - Describe the message lifecyle in three steps

A

Message is send and distributed across multiple SQS Servers
Being taken and processed, it remains in the queue, but is not visible to be received again.
The “taker” sends a request to delete the message

93
Q

SQS - What is a Delay Queue?

A

A time where is message is in the queue, but invisible for the consumers

94
Q

SQS - How to trigger the deletion of the message

A

Send a request with the handle ID

95
Q

SQS - What is long polling?

A

If no message is in the queue wait a certain amount of time until breaking the connection.
This reduces CPU load.

96
Q

SQS - What is a dead letter queue?

A

If a service cannot process a message, for whatever reason, it can move the message to another queue, the “dead letter queue”

97
Q

SWF - What is SWF?

A

Is a task organiser for workloads with multiple tasks that cannot be done synchronously .

Tasks are assigned to workers, who do the task and return the info to the Decider

98
Q

Route53 - What is a host?

A

Individual computer or service accessed through a domain

99
Q

Route53 - What is a Name Server?

A

Computer designated to translate names into IP addresses

100
Q

Route53 - What three steps are taken for DNS resolution?

A
  1. Check host file
  2. Check DNS cache
  3. Contact DNS Server
101
Q

Route53 - What is A / AAAA?

A

Mapping of a host to a IPv4/IPv6 address

102
Q

Route53 - What is a CNAME?

A

Points subdomains to a domain

103
Q

Route53 - What is a Pointer (PTR)?

A

Maps IPs to DNS names

104
Q

Route53 - What is the Sender Policy Framework?

A

Ensures that mails are send from the server the DNS name is mapped to

105
Q

Route53 - What are the three main functions for Route53?

A

DNS Service
Domain registration
Health checks

106
Q

Route53 - What resources can Route53 route to?

A

CloudFront
ElasticLoadBalancers
S3
EC2

107
Q

Route53 - What are public/private Hosted Zones?

A

Private: Information about how to route traffic in the VPC
Public: How to route traffic on the Internet

108
Q

Route53 - What is a routing policy?

A

Determines how Route53 handles queries.

Can be simple, weighted, latency based, failover or geolocation based

109
Q

Route53 - What is Simple Routing?

A

Directly routes to one resource

110
Q

Route53 - What is Weighted Routing?

A

Multiple resources.

Every resource gets a value which determines their priority in the routing

111
Q

Route53 - What is Latency Based Routing?

A

Pings all resources, smallest value will be the target

112
Q

Route53 - What is Failover Routing?

A

Determines what happens if the main resource is not available

113
Q

Route53 - What is Geolocation Routing?

A

Based on the IP of the user.

Routes to Continents, Countries or even States

114
Q

Elasticache - What is the cache-aside pattern?

A

App checks the cache first, if no entry found the the value is taken from the database and then stores in the cache

115
Q

Elasticache - Difference Redis / Memcached?

A

Memcached is easier to set up and can scale very easily by using partitions.
Redis has more data types, can be persisted and uses read replicas

116
Q

Elasticache - How to vertically scale Elasticache

A

It is not possible to scale to runtime.
You need to create a new cluster.
For memcached that means losing the whole cache, for redis a snapshot can be used

117
Q

Elasticache - Is it possbile to create Multi-AZ in Elasticache?

A

Yes

118
Q

CloudFront - What is a CDN?

A

Distributed network of caching servers to speed up content delivery world wide

119
Q

CloudFront - What happens when a file is not in an edge location?

A

It will be retrieved from the origin server and then cached

120
Q

CloudFront - Explain Distribution, Origin and Cache Control

A

Distributions: Name under which the CDN can be accessed
Origins: Where the files come from
Cache Control: How long items should be in cache

Solution Architect (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions