Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS 102 > AWS Exam Questions > Flashcards

AWS Exam Questions Flashcards

1
Q

I want to be able to give my manager a billing report, how can I do this with AWS?

A

You can use a ‘Cost and Usage report’, you can set this resort up to deliver to S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

I have a Java application and a MongoDB NoSQL database to store app customer data. It is currently on-prem and I am migrating to AWS, I what the application to be highly available, have traced, what options do I have?

A
  • For Java use beanstalk or autoscaled EC2 or Kubernetes, this meets autoscaling requirement.
  • Use DynamoDB for scalable and highly available backend
  • Use Xray for tracing.
  • Use CloudWatch logs for log visibility
  • Use CloudWatch metrics for performance visibility.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

I want to run a batch script at 8pm to collect stats and generate a report, what options do I have?

A

I can use CloudWatch Events to trigger an event to run lambda functions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When using CloudWatch events, is this the correct cron expression, “00 08**?”” ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

I have a legacy application that used a traditional load balancer, my application used a certificated a that is used between the calling application and the LB, what options do I have?

A

Select to use a network load balancer as an application load balancer is not suitable. The network load balancer will allow traffic straight through to the application without touching it. The application will see traffic as coming from the application, not the LB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

I have a legacy application that used a traditional load balancer, my application used a certificated a that is used between the calling application and the LB, also the application uses TLS, what type of LB and protocols should I select to use on the lB?

A

TLS

Network LB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

I have to trigger a build of application code at 2 PM each day and also send an email to dev team how can I trigger this build and send an email?

A

You can use CloudWatch Events to trigger the build by setting a schedule cron expression and creating two triggers, one for the code build and one for the SNS email.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the two conditions you must meet when switching role to another account, are the following true or false? User must not be a root user to switch rile? Does the user need to be granted permissions to assume the role?

A

Both are true.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

I am using glue, pick what is true form the following, a) Glue contains a crawler that can connect to s3 and create metadata tables in a data catalogue b) can automatically generate Java code to extract data from the source and transform the data to a scheme c) has a central metadata repository and can be analyzed straight away.

A

A and C are true B is incorrect.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

I have an s3 bucket and an application that writes user file to the s3 bucket, I want to keep track how much storage a user is using and send a notification email, how can I do this? a) Itirirate over files using a lambda function triggered on notifications b) write the size of the how much each user has used to dynnamodb?

A

b) is correct as you do not want to initiate over large amounts of data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You have been taking frequent snapshots and you want to perform a restore of 10 files form the volume, how can you do this?

A

Using the snapshots you will create a new volume from the snapshot, mount the volume to the existing instance, navigate to where the files are on the disk and select the 10 files and copy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

I am collecting thermostat information at a rage of 1K ever min and I have 5.5M thermostats in the USA, how bets can I collect this type of data, could I have S3 and it is a good choice?

A

S3 is not the best choice here, it is possible but a better choice would be Kinesis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

I have 999 users and I want to set up an ActiveDirectory for use with a new AWS app, I want to be able to use existing on-prem ActiveDirectory with this new ActiveDirectory?

A

You need a compatible AD so SimpeAD is not a choice here, AWS Directory for Microsoft Active Directory is a possible option where you can set up a trust relationship with on-prem. AD Connector is probably bets options, it connects with on-prem.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

I have two groups using RedShift and I want to ensure that the group’s queries do not what to wat on each other, how can I ensure this?

A

You can use two different RedShift management groups/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

I have a mobile application that writes data to RedShift tables, I want to set up how the app will access the table, how can I do this?

A

Set up a role to allow web-based identity federation using OAuth.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

I have a MySQL DB in EU, ASIA and head Q in the US, I run an hourly report where I need the data to form all regions, how bets can I do this? I am using RDS.

A

You can set up an RDS Master in each region and replicas in the HQ in the USA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

I have licences tied to MAC address of the Instance, how can you ensure the MAC address will not change?

A

Create ENI and assign it to the instance, the MAC will not change.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

We have a customer that uses AWS and we want to share our service running in a VPC with the customer so they can do some work, how can we share the server?

A

Use VPC peering to share the VPC and server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

I have a number of EC2 instances, I wnat to check the logs form both the OS and Apache( IIS) for security issues, how can I do this in real-time?

A
  • Install the cloudwatch logs agent

- Configure a lambda with the trigger on the cloudwatch log group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

I have an autoscaling group using 3 availability zones, once zone currently has issues and no instances are running in it, all instances are across other zones. The error zones come back online, what will happen?

A

An AZRebalance will take place and new instances will be created in the error zone and then once all instances are up and working, the other instances will be terminated from the other two zones until there is equal numbers in all zones.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

I am using autoscaling, from cloud watch I see the autoscaling group launching more instance then the max and then terminating to instances to bring the overall number back to the Max

A

This happens when the autoscaling group is AZRebalancing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Why does the Autoscaling group create new instance before terminating old one in an AZRebalance?

A

To ensure your capacity is kept and your application does not get capacity issues.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

An International company has deployed a multi-tier web application that relies on DynamoDB in a single region. For regulatory reasons they need disaster recovery capability in a separate region with a Recovery Time Objective of 2 hours and a Recovery Point Objective of 24 hours. They should synchronize their data on a regular basis and be able to provision the web application rapidly using CloudFormation. The objective is to minimize changes to the existing web application, control the throughput of DynamoDB used for the synchronization of data and synchronize only the modified elements. Which design would you choose to meet these requirements?

A

Use EMR and write a custom script to retrieve data from DynamoDB in the current region using a SCAN operation and push it to DynamoDB in the second region. (No Schedule and throughput control)
Use AWS data Pipeline to schedule an export of the DynamoDB table to S3 in the current region once a day then schedule another task immediately after it that will import data from S3 to DynamoDB in the other region. (With AWS Data pipeline the data can be copied directly to other DynamoDB table)
Send each item into an SQS queue in the second region; use an auto-scaling group behind the SQS queue to replay the write in the second region. (Not Automated to replay the write)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

I am a SAAS provider a and my clients are already on AWS, I wnat to share my service through my VPC, how cna I do this?

A

One could use VPC peering, but this is not correct as you have many customers an IP overlap is an issue. You will wnat to share your service through Privatelink so your customers will be able to create an endpoint in there VPC and access your service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Can you enable cost explorer is it enables by default?

A

By default cost explorer is disabled. The payer (master) account can enable Cost Explorer at a root level, automatically enabling all linked (member) accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

In relation to EC2 what should we be doing to ensure costs are managed?

A

We should be,

- Using autoscaling groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

I am architecting a solution and wnat to better understand the approx monthly cost of my solution for my customer, what is the best solution?

A

AWS Simple Monthly Calculator will enable you to calculate the approx monthly cost of your architecture.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Can I use AWS Simple Monthly Calculator to see my in production cost?

A

No! WS Simple Monthly Calculator only shows you what a configuration could be, like when you are architecting a solution. It does not show you the cost of current and running resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

I am using EMR, should I favour spot pricing over on-demand?

A

Yes for the core and task nodes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

For EBS Optimised volumes, is the throughput limited and how can you increase it if needed?

A

Yes, it is limited based in instance size, you can increase the instance size.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

If I change the size of the instance of an EBS optimized instances, what will happen?

A

The throughput and IOPS will change, in the larger instance have larger throughput and IOPS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Can I add a WAF ACL to an NLB ?

A

No, you can only add L7 to type device and the supported one are API Gw, CloudFront and ALB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

When creating a pre-signed URL, what must I ensure to ensure the users of the pre-sighed URL has read and write permissions?

A

Ensure the user creating the URL as read-write permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

A customer needs governance and cost control over a number of accounts, what are the best options?

A

Start to use AWS orgnizations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is the component (something) in Austoscaling that controles the scaling up or down?

A

It is the autoscaling group policy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

When I am working across accounts, what should I be aware of with regard to permissions?

A

You have to have permissions to take action in both accounts. For S3 this means the ability to copy in both account 11111 and 2222.

37
Q

Should I use a WAF for DDOS?

A

No, it more for targeted rules

38
Q

What should I be using for DDOS attacks?

A

Shield

39
Q

I wnat to use for L7 DDOS attacks?

A

Shield advanced

40
Q

What services does Shield Advance support?

A 
For higher levels of protection against attacks targeting Amazon Elastic Compute Cloud
Elastic Load Balancing (ELB)
Amazon CloudFront
Amazon Route 53 
AWS Global Accelerator
41
Q

How does ShieldAdvance protect you EIPs during a DDOS attack?

A

(Sup[er cool!!) Normally the ShieldAdvance ACL is in the dame region and when an attack is detected the ACL is promoted out to the AWS edge.

42
Q

I have ShieldAdvance, during a DDOS attack, what options do I have for support?

A

You have access to, 24x7 DDoS response team (DRT)

43
Q

What advance visibility do you get into a DDOS attack with a shield?

A

too advanced, real-time metrics and reports for extensive visibility into attacks on your AWS resource

44
Q

I am concerned about cost during an attack, is there anything I can do?

A

AWS ShieldAdvance give yoThis cost protection is provided for your Elastic Load Balancing load balancers, Amazon CloudFront distributions, Amazon Route 53 hosted zones, Amazon Elastic Compute Cloud instances, and your AWS Global Accelerator accelerators

45
Q

Is there a cost toA WSShieldAdvance or is it free?

A

It is 3000 a month

46
Q

I have a L4 application, should I choose to use ShieldAdvance?

A

No, ShieldAdvance is only good for L7 applications.

47
Q

Will and instance IP changes when it fails and is recovered by AWS?

A

NO, all the instance attributes say the same.

48
Q

How can I be informed when an EC2 instance fails?

A

The CheckStatusFailed_system is triggered.

49
Q

Depending on the speed of connection ot the internet, when should consider doing snowball or import/export

A 
T1 (1.544Mbps)	- 82 days -	100GB or more
10Mbp - s	13 days -	600GB or more
T3 (44.736Mbps) - 	3 days -	2TB or more
100Mbps	1 to 2 days - 	5TB or more
1000Mbps -	Less than 1 day -	60TB or more
50
Q

Should I use tags for cost management?

A

This will come upon exam, tags are imported and cost allocation tags are supported important.

51
Q

Can I create a central VPC and have other VPC transit through it?

A

No, you can not transit through VPCs

52
Q

What is the limit on the number of peered connections on a VPC?

A

125

53
Q

Explain what a EC2 dedicated host is?

A

This is a server allocated by AWS your use only, you can run many EC2 instances on the server. The server is allocated to your account and you cna place your EC2 instance on it. You cna control the placement of EC2 instances using License Manager, LM enables you to control the placement of instances for licence purpose.

54
Q

Dose fargate support auto-scaling?

A

Yes 100%, you can have it so the number of tasks are scaled as needed.

55
Q

When using ECS, if I set up auto-scaling, what am i doing?

A

You are setting up auto-scaling on the tasks, so the number of tasks will increase or decrease as needed.

56
Q

What is pilot light, backup & restore, warm standby, multi-light?

A
  • poliet light is when we just keep something like the DB but have to recreate the rest of the infrastructure.
  • B & R is when we have to recreate everything
  • Warm stand is a scaled-down version of your environment
  • Multisite is when everything is ready to go
57
Q

What is required by two accounts for delegation?

A
  • Create a cross acc role in account A with account B been the trusted account.
  • Create a user in account B with permissions to call AssumeRole API.
  • Share the sign-in link.
58
Q

What identity providers dose AWS IAM support?

A
  • OpenID

- SAML

59
Q

A photo-sharing service stores pictures in Amazon Simple Storage Service (S3) and allows application sign-in using an OpenID Connect-compatible identity provider. Which AWS Security Token Service approach to temporary access should you use for the Amazon S3 operation?

A

Web identity federation

60
Q

What is an auto-scaling group?

A

It is a group of 1 or more EC2 instances thet is under control of the AutoScaling group configuration. This means the group can,

  • Increase or decrease the number of EC2 instances
  • Increasing or decreasing the instances is based on for example CPU, Traffic, ELB transactions
61
Q

Dose data firehose store data in real-time?

A

There is a 60sec latency

62
Q

I am using kinesis and I wnat analyze the data in real-time using SQL, what is my best option?

A

Your best option is Kinesis Analytics, you can execute SQL again the incoming stream.

63
Q

I am wan using kinesis and I want to run queries over my incoming streamed data in real-time, how cna I do this, should I used RedShift?

A

You should use Kinesis analytics, it is streaming analytics, RedShift is a datawherehouse where the data has to be stored to disk before SQL could be run.

64
Q

What is an ELB sandwich?

A

It is where you wnat ot use a non-AWS managed WAF and you put an ELB on from and back of it.

65
Q

Can I put a static IP on an NLB?

A

Yes

66
Q

When using an NLB with TLS termination is the proxy protocol required to preserve the source IP?

A

No, the source IP is preserved.

67
Q

When using an NLB for TCP is the proxy protocol required to preserve the source IP?

A

No, the source IP is preserved as it is an L4 LB and this means the data packets are untouched.

68
Q

What is s2n?

A

It is amazons implementation of the TLS protocol, the striped out the junk.

69
Q

On an NLB can you have HTTP and HTTPs network health checks?

A

Yes, 100%, this is supported in addition to a network-level check where ea socket is opened.

70
Q

Is redshift a multi-AZ cluster?

A

No, a single AZ

71
Q

What is an instance profile?

A

An instance profile is a container for an IAM role that you can use to pass role information to an EC2 instance when the instance start

72
Q

What are the migration option for a system/app?

A
  • Re-host (lift and shift)
  • Re-platform ( lift thinker shift) (change to say RDS and the elastic beanstalk)
  • Refractor/ rearchitect
73
Q

When using an ALB is the source IP forwared to the client?

A

No, No, !!!!!. The ALB is an L7 device and as such the source IP is not transferred to the destination

74
Q

When using an ALB how can you find out the client IP?

A

X-Forwarded-For, the ALB will place the client ip in this HTTP header.

75
Q

When using an ALB how can you find out the client IP and port?

A

X-Forwarded-Port

76
Q

What will this policy do?

{
    "Version": "2012-10-17",
    "Statement": [{
        "Effect": "Deny",
        "NotPrincipal": {"AWS": [
            "arn:aws:iam::444455556666:user/Bob"
        ]},
        "Action": "s3:*",
        "Resource": [
            "arn:aws:s3:::dog",
            "arn:aws:s3:::dog/*"
        ]
    }]
}
A

It will explicitly deny all users except bob form accessing the bucket dog and the bucket objects.

77
Q

I have an application and tomorrow we know there will be a large increase in the number of the customer using our application, the app is located on-prem, what cna I do quickly to decrease workload?

A

You could create CloudFront and as CF can deal with dynamic content it can help in the following ways,

  • Cache dynamic content
  • Deal with the connection between client and edge
78
Q

Can you have RAC Oracal in an RDS instance?

A

No, RAC requires shared disk array, shared disk array is not supported by AWS so RAC is not supported on AWS. Oracle DB is supported on RDS but Oracle DB is not RAC.

79
Q

What is VM Import/Export?

A

It is a CLI thet enables you to import and export VM from EC2 using an S3 bucket.

80
Q

What formats are supported by VM import/export?

A

OVF, VMDK, VHD

81
Q

I wnat to use requester pays, do i use cross-account roles or bucket policies?

A

Buckey polices

82
Q

Do NAT GW have EIP?

A

Yes

83
Q

How cna I take scheduled snapshots of EBS volumes?

A

You can use EBS DLM (data life cycle manager), this enables you to set up a schedule and use it to take snapshots of any volume that has a matching tag.

84
Q

I am using DLM and the number of snapshots are growing, what cna I do this trim down the number of snapshots?

A

DLM has an option of the life cycle for the snapshots, so snapshots will be deleted.

85
Q

I IAM how can I get a list of users?

A

You cna get this list by downloading the user report from the console or through the CLI

86
Q

What permission has a root user?

A

Full

87
Q

What permission has a non-root user

A

None

88
Q

Dose the ALLOW in a policy override a DENY?

A

No, they DENU overrides that deny

AWS 102 (90 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions