Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Cloud_AWS > aws cloud guru soln architect may 19 > Flashcards

aws cloud guru soln architect may 19 Flashcards

(113 cards)

Start Studying
1
Q

To which region does the IAM account apply?

A

it does not apply to any specific region at this time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

file zie range in s3

A

0-5 tb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what does an s3 ojcet consist of

A

key (object name), value (Object byte stream), version, metadata,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

s3 consistency model for new puts

A

read after write consistency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

s3 consistency for overwrite puts and delete

A

eventual consistency, i.e. when you access immediately sometimes the data may be stale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what is the difference between s3 glacier and deep archive?

A

s3 glacier has a few minutes s3 glacier archive has 12 hrs as retrieval time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

which s3 storage classes have a per GB retrieval fee?

A

all except s3 standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what storage class is ideal for data archiving?

A

s3 glacier and s3 glacier deep archive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what are two strategies for encrypting s3 data at rest

A

client side and server side

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what are 3 ways to encrypt data server side. for s3

A
  1. S3 managed keys (SSES3) - uses AES256
  2. AWS key management service (SSE-KMS) - jointly managed - aws and customer.
  3. Customer Keys (SSE-C) - managed purely by customer.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

while setting up cross-region replication on a bucket in s3 what happens to the existing objects in a bucket and what happens to a new object on the bucket?

A

The existing objects are not replicated and the new objects are

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what condition on versioning must be satisfied before cross region replication can be setup on s3 bucket

A

versioning must be setup on both the source and destination bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

are delete markers replicated automatically during cross region replication on s3

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

are deletions in s3 bucket automatically replicated cross-region?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what are the two dfferent types of cloudfront delivery methods?

A

web - for static and dunamic content and media using http and https, web forms
rtmp: speed up distribution of streaming media files using adobe flash player, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

what if you don’t want cloudfront to cache certian objects from the s3 bucket it is configured for?

A

you create an invalidation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

any activity on the IAM service is pertaining to which region?

A

global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

once a cloudfront distro is created hot do you access an s3 object named object?

A

cloudfrontname.cloudfront.net/object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

can multiple security groups be assigned to an ec2 instance?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

what region will the ebs volume associated with an ec2 instance be?

A

in the same region as the ec2 instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

when you create an image from an EBS snapshot, what virtualization type should you chose to ensure that it works on most ec2 platforms?

A

hardware-assisted virtualization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

when you terminate an ec2 instance, what happens to the root device volume as well as the others?

A

the root device volume is deleted but others remain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

where are volumes and snapshots stored?

A

snapshots are stored in s3 and volumes are stored on EBS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what are two ways to move an ec2 instance to a new region?

A

(option1) create snapshot-create ami-launch ami in new region
(option2) create snapshot - create ami - copy ami to new region - launch ec2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
if you loose the access key and secret access key or an iam user what do you do?
go into IAM - select that user - make the keys inactive and generate new ones
26
in what step do you mention bootstarp script for the ec2 instance?
step 3
27
what traffic is not monitored in a VPC flow logs?
traffic involving amazon DNS, VPC router, instance metadata, DHCP traffic, windows instance for license activation.
28
is RDS serverless?
no with the exception of aurora which is serverless
29
who's responsibility is it to patch RDS
amazon's, in fact you cant even ssh into an rds instance.
30
what are the two types of backups in rds?
automated and data snapshot
31
what is the retention period is the context of automated backups of rds?
this is the amount in time since the backup is taken during which the database can be restored to a second
32
what are the two parts of an automated backup?
a full daily snapshot and transaction logs during the day
33
where are automated backups from rds stored and what is the amount limit?
they are stored in s3 and size = size of your database
34
when are backups taken and what is the user experience during backups (in the context of rds)
they are taken during a defined window and any storage or IO may be suspended when data is being backed up
35
when you restore wither an automated or manual snapshot of the rds, does the DNS endpoint remain the same?
no, a new rds instance with a new endpoint is created
36
who initiates rds db snapshots?
they are initiated by the user
37
once encryption is turned on for rds, what all are encrypted?
data stored at rest, automated backups, read replicas and snapshots
38
what are the differences between multiu az and read replicas?
multi az, the backup can't be accessed until there is a failover
39
can read replicas be in the same region?
yes and they can also be in different region
40
what happens when read replicas are promoted to master?
they break the read replication.
41
is dynamo db serverless?
yes
42
what are the two read models of dyanmoDB?
eventual read consistency and strong read consistency
43
what kind of storage is dynamo db stored in?
SSD
44
How many geographical centers is dynamoDB spread across?
3
45
what are the two engines supported by elastic cache?
memcached and redis
46
which is the only serverless RDS service?
aurora
47
what must be turned on to enable read replicas in RDS?
autobackup
48
how do you force a failover from one RDS instance to another in a multi AZ setting?
by rebooting
49
which RDS services support encryption and using what?
using KMS - all 6 - aurora, sql server, oracle, mysql, postgresql
50
how many availability zones is redshift available in?
1
51
how many copies of your data does reshift maintain?
3 - original and replica on compute nodes and backup in s3
52
what can redshift do to aid disaster recovery?
asynchronously replicate your snapshot to s3 in another region.
53
what are the two types of replicas available with aurora and which one of them supports automated failover?
aurora replicas and mysql replicas. Automated backup supported only by aurora replicas
54
what dynamodb features are chargeable?
storage of data and read and write capacity
55
how many copies of data per AZ and across how many AZs is amazon aurora storing data in?
2 copies per AZ and 3 AZs
56
what are the two possible states of instances monitored by load balancers?
InService, OutOfService
57
how to delete all instances under an autoscaling group?
just delete the autoscaling group itself.
58
what is quick start
a bunch of cloudformation templates built by aws architects to allow you to build complex environments quickly
59
what programming languages does lambda support?
node.js, java, python, c#, go and powershell
60
what is pricing model for lambda?
based on the number of requests and duration
61
what aws service allow you to debug complex architectures?
aws x ray
62
can RDS trigger a lambda?
no
63
which aws service is appropriate for identity federation?
amazon cognito
64
what is the 4 step process Cognito works
1. facebook provides authentication token to cognito pool when user logs in. 2. cognito converts uthentication key to jwt token 3. user provides jwt token to cognito identitiy pool which responds with an IAM role to access specific AWS resource 4. user access spcific aws resource using theIAM role provided.
65
what does cognito use to synchronize user data across multiple devices?
push synchronization.
66
what is the difference between user pool and identity pool in the context of amazon Cognito?
user pool handle user registration, authentication and account recovery identity pool authorizes access to aws resources.
67
what is topic in the context of SNS
group of all devices which will receive a notification at the same time
68
what is the difference between SNS and SQS?
SNS is push based and SQS is poll based.
69
what are the two different types of queue in SQS?
standard and fifo queue
70
whats the different between a standard and fifo queue?
standrad queue - best effort usually in the same order as sent and messages can be delivered more than once. FIFO queue- strict ordering with no dups.
71
how long are messages kept in the queue?
1 minute to 14 days
72
what is the default retention period for SQS?
4 days
73
what is visibility timeout in the context of SQS?
Amount of time a message is invisible after a reader picks up message. If the message is not processed within visibility timeout (e.g. ec2 instance has to delete the message), it becomes visible again. There is a possibility that the same mesage can be processed more than once.
74
what is one way to save money pent during SQS polling?
use long polling.
75
what is kinesis
a platform for sending streaming data to
76
what are the three different types of kinesis?
streams, firehose,analytics
77
what is kinesis streams?
an aws service that stores data for a period of 24 hours to 7 days. Within this time a consumer (typically an ec2 instance) is supposed to read and process the data and put it into redshift, emr, etc.
78
what are shards in the context of kinesis streams?
data put into a kinesis stream is stored in shards.
79
what is maximum read rate for kinesis?
5 transaction per second; max of 2MB persecond per shard
80
what is the max write rate for kinesis?
1000 records per-second;max of 1 MB per second per shard
81
what is the difference between kinesis firehose and streams?
in firehose something needs to be done to the data immediately (by triggering a lambda function to store to s3 or redshift) whereas in a stream there is data persistence. Firehose, however, scales automatically whereas streams doesn't
82
what is kinesis analytics?
do analysis within Kinesis streams or firehose inside of kinesis service.
83
what is simple workflow service?
managing workflows involving both human and technology components. (e.g. placing order on amazon web site)
84
other than the human element what are some other differences between sqs and swf?
sqs has a retention period of 14 days and swf has a retention period of up to 1 iyear swf offers a task oriented api whereas sqs offers a message-oriented api swf task is not duplicated whereas sqs task can be duplicated and application must handle this.
85
what are three different types of actors in swf?
workflow starters, deciders, and activity workers
86
what are some services that can be there behind an API Gateway?
lambda, ec2 and dynamoDB
87
does api gateway enable caching?
yes
88
in the context of api gateway, when resources are requested from multiple sources, what do you need to enable so that this is supported?
enable CORS on the api gateway
89
if CORS is not enabled, what is the typical error message?
Origin policy cannot be read at the remote resource
90
what do you do to api gateways to prevent DoS attacks?
throttle
91
can ALB load balance across regions?
no
92
what is elastic transcoder service?
changes the source format of a video so it's compatible with different devices. (android, ios smartphone, etc)
93
can dynamodb trigger a lambda function?
yes
94
does lamda support hyperthreading?
yes
95
on what factors does lambda billing depend?
MB of ram served and execution duration in milliseconds
96
how to speed up uploads to s3?
use transfer acceleration
97
if you don't want to wait for TTL to expire before a new object from s3 shows up, what do you do?
you invalidate it on cloudfront
98
Can you move AMIs created from EBS volume snapshots across regions or only across availability zones?
across regions also
99
difference between s3 IA and one zone IA
one zone IA is less expensive but does not provide the same availability or durability as that of S3 IA
100
storage classes for infrequently accesed data (latency same as standard)
s3 IA and s3 one zone IA
101
whats the difference between memcache and redis?
redis has multi AZ, has more features and is more complex
102
how are EBS snapshots backed into s3?
incrementally
103
what is the underlying hypervisor for ec2?
xen and niro
104
how do you programatically figure out the public and private IP address of EC2 instance?
by querying the instance metadata at | http://169.254.169.254/latest/meta-data/
105
placement groups can be spread across what and not spread across what?
spread across AZs and not spread across regions
106
how many running instances can you have in a placement group?
7
107
can you take a snapshot of an EBS without stopping the ec2 instance it is attached to?
yes, but it can take some time.
108
What is the limit on the number of domain names that you can configure via DNS?
50, but you can contact AWS support and increase this.
109
what is allowed by default in a security group?
all outbound traffic.
110
what is created by default when you create VPC?
route table, security groups and access control lists
111
at what levels can VPC flow logs be created?
VPC level, subnet level and network interface level
112
how many VPCs are allowed in each AWS region?
5
113
what is the purpose of an egress only internet gateway?
allow only IPv6 based connections from inside and prevent IPv6 connections from outside.

Cloud_AWS (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions