Deck 1 Flashcards by Robert Lindgren

Which database service is designed for graphs (like social media)?

Neptune

How well did you know this?

Not at all

Perfectly

What is the fastest way to set up streaming from S3 to Kinesis Data Streams?

AWS Data Migration Service can bridge S3 and KDS without adding any code.

How well did you know this?

Not at all

Perfectly

What two services are needed for a heterogenous database migration (from Oracle to Aurora, for example)?

Database Migration Service (used for any migration) and Schema Conversion Tool (to convert from one database type to another).

How well did you know this?

Not at all

Perfectly

What tool is used for analyzing API calls within an AWS account?

CloudTrail

How well did you know this?

Not at all

Perfectly

What has cheaper data transfer pricing, AWS Direct Connect or sending over the internet?

Direct Connect

How well did you know this?

Not at all

Perfectly

Fully managed petabyte-scale cloud based data warehouse product designed for large scale data set storage and analysis

Amazon Redshift

How well did you know this?

Not at all

Perfectly

How does Redshift Spectrum save cost on compute intensive data tasks?

Spectrums lives on dedicated spectrum servers, so it doesn’t use your cluster for computation. It can also efficiently query and retrieve structured and semi structured data from S3 without loading it into your Redshift tables.

How well did you know this?

Not at all

Perfectly

If you specify the targets of a Network Load Balancer with instance IDs, what is used to route traffic to the correct instance?

The primary private IP address specified in the primary network interface for the instance.

How well did you know this?

Not at all

Perfectly

On an EC2 instance, do scripts entered as User Data have root user privileges for executing by default?

Yes. By default, scripts entered as user data are executed as root, so they don’t require the SUDO command.

How well did you know this?

Not at all

Perfectly

On an EC2 instance, when are scripts entered as User Data run by default?

Only during the boot cycle.

How well did you know this?

Not at all

Perfectly

What is the purpose of an Aurora Replica?

An Aurora Replica is a replica of the original Aurora database that only supports read operations, allowing you to offload these from the primary instance.

How well did you know this?

Not at all

Perfectly

What is CloudFront?

CloudFront is a web service that distributes your content to edge locations. Then it routes requests to the nearest edge location, improving latency.

How well did you know this?

Not at all

Perfectly

What is AWS Global Accelerator?

Global Accelerator allows you to create standard or custom accelerators.

A standard accelerator routes traffic to the optimal regional endpoint to increase availability of your app.

Custom accelerators let you map users to specific destinations.

How well did you know this?

Not at all

Perfectly

What suffix is required in the name of an SQS FIFO queue?

*.fifo

How well did you know this?

Not at all

Perfectly

How many messages per second can SQS FIFO queues support with and without batching?

3000 with, 300 without

How well did you know this?

Not at all

Perfectly

What is AWS Certificate Manager?

A service that lets you provision, manage ,and deploy public and private SSL/TLS certificates for use with your AWS services and connected resources.

How well did you know this?

Not at all

Perfectly

How can you use AWS Config to check for expiring SSL/TLS certificates?

Managed rules, which let you automatically evaluate whether your resources comply with best practices.

How well did you know this?

Not at all

Perfectly

What is Transit Gateway?

It connects your VPCs and on-premises networks through a central hub, eliminating complex peering relationships.

How well did you know this?

Not at all

Perfectly

What are the advantages of the AWS S3 sync bucket command?

Lists source and target buckets to identify objects that need to be copied, identified objects with a different “last modified” date in source and target, and only copies the current version of each object.

How well did you know this?

Not at all

Perfectly

What is S3 Batch Replication?

Replication on demand (rather than live for new objects).

How well did you know this?

Not at all

Perfectly

How can Global Accelerator be used for blue/green deployments?

With endpoints weights, which determine the proportion of traffic that is directed to endpoints within an endpoint group, and traffic dials, which control the percent of traffic directed to each endpoint group.

How well did you know this?

Not at all

Perfectly

What supports security groups, NAT instance or NAT Gateway?

Instance

How well did you know this?

Not at all

Perfectly

What supports port forwarding, NAT Instance or NAT Gateway?

Instance

How well did you know this?

Not at all

Perfectly

Which can be used as a bastion server, NAT gateway or NAT instance?

Instance

How well did you know this?

Not at all

Perfectly

What is a bastion server?

A special server instance designed to be the primary access point from the internet and acts as a proxy to other EC2 instances.

What do Lambda functions have access to by default?

Any public Internet address, including public AWS APIs.

What does VPC-Enabling a Lambda function do?

Gives it access to the private resources INSIDE that VPC.

What should you do if you plan to reuse code in more than one Lambda function?

Create a Lambda Layer, a ZIP archive of libraries, custom runtimes, and other dependencies. Your function will be able to draw on this for that reusable code.

What is Guard Duty?

A threat detection service that looks for malicious or unauthorized activity.

What data sources can be used by Guard Duty?

VPC Flow Logs, Domain Name System (DNS), and CloudTrail events

The AWS S3 sync bucket command will copy which version of an object?

Only the current version

What two services can be used for creating decoupled applications?

AWS SQS (Simple Queue Service) and AWS SWF (Simple Workflow Service)

What is SWF (Simple Workflow Service)?

A service for coordinating work across distributed application components.

What is the visibility timeout for SQS?

A period in which SQS prevents consuming components from receiving or processing a message.

What does SQS do with messages that have been in the queue longer than the maximum message retention period?

Delete!

Can you assign priority to some messages in SQS?

What kind of objects can S3 Batch Replication replicate?

It lets you replicate objects that existed before replication config was in place, objects that have been previously replicated, and objects that failed replication.

What is Lambda SnapStart?

With SnapStart, Lambda initializes functions as new versions are published, takes a firecracker microVM snapshot of memory and disk, encrypts the snapshot, and caches it for low latency access

What is the CloudFormation Instance Scheduler template?

This allows you to set start and stop times for your EC2 and RDS instances, matching your application’s operating hours.

Is DynamoDB compatible with mySQL?

Is Aurora compatible with MySQL?

Yes

How can you detect unusual spending patterns in your infrastructure?

AWS Cost Anomaly Detection on the AWS Billing and Cost Management console

What is AWS Control Tower?

Service for setting up and governing an AWS multi account environment.

What is DynamoDB Accelerator (DAX)?

DAX is an in-memory cache purpose-built for Dynamo to serve more balanced or read-heavy workloads.

What is Fargate?

A serverless computer engine for containers that works with ECS and EKS (elastic kubernetes)

Can ALBs route requests based on URL?

Yes!

Should a bastion host be deployed in a public or private subnet?

Public

What is Microsoft Active Directory?

A directory service for windows networks.

What is SAML?

Security Assertion Markup Language, an open federation standard that allows an identity provider (IdP) to authenticate users and pass identity and security information about them to a service provider (SP).

What is Amazon FSx for Windows File Server?

Provides fully managed Windows file servers backed by a native Windows file system. Makes it easy to lift and shift enterprise apps to AWS Cloud.

What is client side encryption?

Encrypting data BEFORE sending it to an S3 bucket.

What is a client-side master key?

An encryption key that is never shared with AWS

What is AWS Elastic Beanstalk?

AWS Elastic Beanstalk is a service for deploying and scaling web applications and services. It automatically handles the deployment—from capacity provisioning, load balancing, and auto scaling to application health monitoring.

What is the difference between Spot and On-Demand EC2 instances?

The only differences are that Spot instances can be interrupted at any time with a two minute notification and they are dramatically cheaper. Because they can be interrupted, they should only be used to run applications that can tolerate interruption.

What does an On-Demand Capacity Reservation let you do?

Reserve computer capacity for EC2 instances in a specific Availability zone for any duration

Out of this list, which EC2 metrics are NOT readily available in CloudWatch and require being set up with a CloudWatch Monitoring Script? CPU utilization Disk Reads Activity Memory utilization Outbound Network Packets

Memory utilization

What is an egress only internet gateway?

A scalable, redundant, highly available VPC component that allows outbound communications over IPv6

What is AWS Network Firewall?

As managed service for deploying network protections for VPCs

Can you assign an IAM role to an EC2 instance?

Yes!

What limits the number of running On-Demand instance you can have in a region?

vCPU-based On-Demand instance limit

What is a launch template?

A template that an Auto Scaling group uses to launch EC2 instances

What is the default termination behavior for an Auto Scaling group of EC2 instances that has to “scale-in”?

In order of the priority: 1) terminate an instance from the AZ with the most instances 2) the instance with the oldest launch template 3) instance closest to the next billing hour 4) random

Can an Elastic Load Balancer run in multiple regions?

No! Only one

In an Auto Scaling group of EC2s, what is the default cooldown period?

300 seconds

What is step scaling (for Auto Scaling groups)?

When you choose scaling metrics and threshold values for the CloudWatch alarms that trigger the scaling process

What is a global table (re: AWS DynamoDB)?

A fully managed, serverless, multi-region, and multi-active database

What is a multi-active database?

Allows users to read and write to any replica table

What does DynamoDB Streams allow you to do?

With Streams enabled, any new or updated record will appear in the stream, which is polled by a Lambda. This allows you to use the Lambda to process any new or updated records.

What is a DynamoDB table’s partition key?

It’s part of the table primary key and determines the logical partitions in which data is stored.