Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SAA03 > AWS Part 3 (201-250) > Flashcards

AWS Part 3 (201-250) Flashcards

1
Q

What happens when EC2 instance is halted or ended?

A
  • Shutdown is performed typical way
  • EBS volumes can stay joined and begin again
  • Occurence hours are NOT charged when ceased state
    deleteontermination is set to false
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the mainstream DevOps devices?

6 devices mentioned - J. G. N. S. D. PCA.

A
  • Jenkins ~ Continuous Integration tool
  • Git ~ Version Control System tool
  • Nagios ~ Continuous Monitoring tool
  • Selenium ~ Continuous Testing tool
  • Docker ~ Containerization tool
  • Puppet, Chef, Ansible ~ Deployment & Configuration Admin tools
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are IAM Roles and Policies? What is difference between IAM Roles, and Policies?

A

Roles: for AWS Services, assign permissions of some AWS service to another service
- Example - Give S3 permission to EC2 to access buckets

Policies: for users and groups, assign perimmissions to users and groups
- Example - Give permission to user to access S3 buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the default services we get when we create AWS VPC?

3 main services offered… R. N. S.

A
  • Route Table
  • Network ACL (NACL)
  • Security Group
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is difference between Public Subnet and Private Subnet?

A

Public: will have IGW attached to route table, private will NOT have IGW attached

Causing no internet for private subnet…

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How do you access EC2 with Private IP in a Private Subnet?

A

Using VPN, if configured to that VPC
Can access using other EC2 with public access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

We have custom VPC configured and MySQL DB server which is on Private Subnet. Need to update MySQL DB server, what are the options to do so?

A

Using NAT Gateway in the VPC
. or Launch NAT instance EC2 config
. or Attach NAT Gateway in Public Subnet and attach it to the Route Table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the difference between Security Groups and NACLs?

4 main things - Attached to ? Stateful or Stateless? Block IP? Rules?

A

Security Groups:
- Attached to EC2 instance
- Stateful for incoming/outgoing rules
- Blocking IP address can’t be done
- Allow rules only, by default rules are denied

NACL:
- Attached to Subnet
- Stateless - Incoming rules only
- IP address can be blocked
- Allow and Deny can be used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are differences between Route53 and ELB?

A

Route53 handles DNS servers with web interface

Elastic Load Balancing auto scales depending on the demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which engines can be used in AWS RDS?

5 main engines mentioned here

A
  • MariaDB
  • MySQL DB
  • MS SQL DB
  • Postgre DB
  • Oracle DB
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are Status Checks in EC2?

Can you list 9 types of check?

A

Look for issues with instances for the following:
1. Network
2. Power
3. Software
4. Hardware
5. Instance
6. Memory
7. Files
8. Kernels
9. Failed checks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

To establish peering between 2 VPC’s, what conditions must be met?

Discuss about CIDR and locations

A
  • CIDR block should NOT overlap between VPC settings for peering.
  • Peering connection is allowed within a region, across region, across different accounts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Troubleshoot with EC2 instances

2 examples and 2 potential solutions

A
  • If instance state is (0/2) then there may be hardware issue
  • If instance state is (1/2) then there may be issue with OS

Workaround - Restart, or if no resolutio then check logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How can EC2 instances be resized?

A

Can scale UP or DOWN based on requirement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is EBS?

A

Block-level storage volume which can be used after mounting EC2 instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Difference between EBS, EFS, and S3?

A

EBS: Can be accessed ONLY after is mounted with instance

EFS: Can be shared with multiple instances

S3: Can be access without mounting with instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Max number of buckets that can be created in AWS?

A

You can creat up to 100 buckets per AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Max number of EC2 instances that can be created in VPC?

A

You can create up to 20 reserved instances and request Spot as per demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How can EBS be accessed?

A

After mounting to EC2 instance, it can be accessed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is process to mount EBS to EC2 instance?

A

Coding ahead:
- Df-k
- mkfs.ext4/dev/xvdf
- Fdisk -|
- Mkdir /my5gbdata
- Mount /dev/xvdf /my5gbdata

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How to add volume permanently with instance?

A

Each restart unmounts volume from image, so to keep:

Cd /etc/fstab
/dev/xvdf /data ext4 defaults 0
0 < edit the file system name accordingly

22
Q

What is difference between Service Role and SAML Federated Role?

A

Service Role: Meant for usage of AWS services based on policies attached to it
- Ex. In case of automation we can create a service role and attach to it

Federated Role: Meant for User access and getting access to AWS as per designed role
- Ex. We can have fed role created for office emp and then that group will be created in the AD and user added to it

23
Q

How many policies can be attached to a role?

A

10 is soft limit, 20 is max limit

24
Q

What are different ways to access AWS?

3 different ways:

A
  • Console
  • CLI
  • AWS SDK
25
Q

How is a root user different than an IAM user?

A

Root user is master of all in the AWS accounts, IAM users can be limited or act as Admin via policies

26
Q

What do you mean by principal of least privilege in terms of IAM?

A

To provide the same or equivalent permission to user/role

27
Q

What is the meaning of non-explicit deny for IAM user?

A

When IAM user is created and it is not having any policy attached to it

28
Q

What is the precedence level between explicit allow and explicit deny?

A

Explicit Deny will always override Explicit Allow

29
Q

What is the benefit of creating group in IAM?

A
  • Makes user management process much simpler
  • Adding policy to group(s) instead of each user
30
Q

What is the difference between the Admin Access and Power User access in terms of pre-build policy?

A

Admin access has full permissions to all things, while Power Users have Admin access but no user/group management.

31
Q

What is the purpose of Identity Provider?

A

Helps in building trust between AWS and corporate AD environment, while creating Federated roles.

32
Q

What are the benefits of STS?

What is STS?

A

Helps in securing AWS environment
- Do not need to embed or distribute creds
- Do not need to rotate or revoke tokens

33
Q

What is the benefit of creating the AWS Organization?

A

Helps in
- managing IAM policies
- creating AWS accounts programmatically
- managing the paymeny and billing methods

34
Q

What is max file length in S3?

A

UTF-8 1024 bytes

35
Q

Which activity cannot be done using autoscaling?

A

Maintain fixed running of EC2

36
Q

How will you secure data at rest in EBS?

A

EBS data is ALWAYS secure

37
Q

What is max size of S3 bucket?

A

5TB

38
Q

Can objects in S3 be delivered through Amazon CloudFront?

A

Yes

39
Q

Which service is used to distribute content to end users using global network EDGE LOCATION?

A

VPC

Virtual Private Cloud

40
Q

What is “Ephemaral”?

A

Temporary

41
Q

What are SHARDS in kinesis services?

A

Shards are used to store data in Kenesis

42
Q

Where can you find Ephemeral storage?

A

In the Instance Store service

43
Q

I have some private servers on my premises and distributed some of my workload to public cloud.

What is this architecture called?

A

VPC

Virtual Private Cloud

44
Q

Route 53 can be used to route users to infrastructure outside of AWS.

True or False?

A

False!

45
Q

Is Simple Workflow Service one of the valid SNS Subscribers?

A

No

46
Q

Which cloud model do devs and orgs all around the workd leverage extensively?

A

IAAS

Infrastructure as a Service

47
Q

Can CloudFront serve content from a non AWS origin server?

A

No

48
Q

Is EFS a centralised storage service in AWS?

A

Yes

49
Q

Which AWS service will you use to collect and process ecommerce data for real-time analysis?

A

Both Dynamo DB & Redshift

50
Q

High demand of IOPS performance is expected around 15000.

Whic EBS volume type would you recommend?

A

Provisioned IOPS

AWS SAA03 (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions