IMPORT FlashCards

Question 1

AUDIT AWS RESOURCES

Answer 1

AWS CONFIG

Question 2

API MONITORING SERVICES

Answer 2

AWS CLOUD TRAIL

Question 3

EVERY TIME A RESOURCE A CHANGED, WHERE DOES CONFIG RECORD THE CHANGE?

Answer 3

S3 BUCKET

Question 4

LOGGING SERVICE THAT RECORDS ALL API CALLS TO ANY AWS SERVICE

Answer 4

AWS CLOUD TRAIL

Question 5

RECORDS DETAILS OF A CALL, LIKE WHICH USER OR APPLICATION MADE THE CALL, WHEN IT WAS MADE AND WHAT IP ADDRESS IT WAS MADE FROM

Answer 5

AWS CLOUD TRAIL

Question 6

REPORTS ON WHAT HAS CHANGED

Answer 6

AWS CONFIG

Question 7

REPORTS ON WHO MADE THE CHANGE, WHEN AND FROM WHICH LOCATION

Answer 7

AWS CLOUD TRAIL

Question 8

[TERM LINK] RESOURCE AUDIT

Answer 8

CLOUDTRAIL

Question 9

[TERM LINK] API CALL AUDIT

Answer 9

CLOUDWATCH

Question 10

TYPICALLY USED FOR AUDITING AND COMPLIANCE PURPOSES ACROSS ORGANIZATIONS

Answer 10

AWS CONFIG

Question 11

WHAT ARE THE TWO DELETEONTERMINATION VALUES?

Answer 11

TRUE/FALSE

Question 12

IF A DELETEONTERMINATION IS SET TO FALSE, WHAT HAPPENS WHEN AN INSTANCE IS TERMINATED?

Answer 12

IT PRESERVES THE ROOT VOLUME AND ENSURES IT REMAINS INTACT

Question 13

YOUR DB INSTANCE MUST BE IN THE ______ STATE FOR AUTOMATED BACKUPS TO OCCUR

Answer 13

ACTIVE STATE

Question 14

YOU CREATE A SNAPSHOT AND THEN YOU HAVE TO

Answer 14

COPY IT TO ANOTHER REGION

Question 15

SNS TOPICS ARE USED FOR

Answer 15

NOTIFICATION PURPOSES

Question 16

UNDERLYING STORAGE FOR A DB INSTANCE, AUTOMATED BACKUPS, READ REPLICAS, AND SNAPSHOTS ARE ALL ….

Answer 16

DATA THAT IS ENCRYPTED AT REST

Question 17

_____ CAN BE CONFIGURED TO USE SERVICE AUTO SCALING TO ADJUST ITS DESIRED COUNT UP OR DOWN IN RESPONSE TO CLOUDWATCH ALARMS

Answer 17

AMAZON ECS

Question 18

_______ FOR LAMBDA FUNCTIONS ENABLE YOU TO DYNAMICALLY PASS SETTINGS TO YOUR FUNCTION CODE AND LIBRARIES, WITHOUT MAKING CHANGES TO YOUR CODE

Answer 18

ENVIRONMENT VARIABLES

Question 19

YOU CAN USE _____ TO HELP LIBRARIES KNOW WHAT DIRECTORY TO INSTALL FILES IN, WHERE TO STORE OUTPUTS, STORE CONNECTION AND LOGGING SETTINGS, AND MORE

Answer 19

ENVIRONMENT VARIABLES

Question 20

______POWERED BY AWS PRIVATELINK, AN AWS TECHNOLOGY THAT ENABLES PRIVATE COMMUNICATION BETWEEN AWS SERVICES USING AN ELASTIC NETWORK

Answer 20

VPC ENDPOINTS

Question 21

WHEN YOU CREATE A TRAIL THAT APPLIES TO ____ _____ CLOUDTRAIL RECORDS EVENTS IN EACH REGIION AND DELIVERS THE CLOUDTRAIL EVENT LOG FILES TO AN S3 BUCKET THAT YOU SPECIFY

Answer 21

ALL REGIONS

Question 22

IF A REGION IS ADDED AFTER YOU CREATE A TRAIL THAT APPLIES TO ALL REGIONS, THAT NEW REGION IS _____

Answer 22

AUTOMATICALLY INCLUDED AND EVENTS IN THAT REGION IS LOGGED

Question 23

YOU CAN CONFIGURE AMAZON REDSHIFT TO AUTOMATICALLY _____

Answer 23

COPY SNAPSHOTS TO ANOTHER REGION

Question 24

BASTION HOSTS NEED TO BE IN A _____ SUBNET

Answer 24

PUBLIC

Question 25

BASTION HOST PURPOSE IS TO

Answer 25

PROVIDE ACCESS TO A PRIVATE NETWORK FROM AN EXTERNAL NETWORK

Question 26

VPC ENDPOINT INTERFACES HAVE TO BE

Answer 26

IN THE SAME REGION

Question 27

______ IS A CLOUD SERVICE SOLUTION THAT MAKES IT EASY TO ESTABLISH A DEDICATED NETWORK CONNECTION FROM YOUR PREMISES TO AWS

Answer 27

AWS DIRECT CONNECT

Question 28

____ IS A WEB SERVICE THAT YOU CAN USE TO AUTOMATE THE MOVEMENT AND TRANSFORMATION OF DATA

Answer 28

AWS DATA PIPELINE

Question 29

COMMONLY USED TO TAKE METADATA AND STORE THE METADATA IN DYNAMODB

Answer 29

AWS LAMBDA

Question 30

YOU CAN USE _____ TO DELEGATE ACCESS TO USERS, APPLICATIONS, OR SERVICES THAT DON'T NORMALLY HAVE ACCESS TO YOUR AWS RESOURCES

Answer 30

IAM ROLES

Question 31

DATA IN DYNAMODB IS STORED IN _____ FORMAT

Answer 31

JSON

Question 32

WHEN AN EC2-CLASSIC INSTANCE IS STOPPED, AWS ______ ANY ELASTIC IP ADDRESS THATS ASSOCIATED WITH INSTANCE

Answer 32

DISASSOCIATES

Question 33

WHEN AN EC2-CLASSIC INSTANCE IS STOPPED, AWS RELEASES THE

Answer 33

PUBLIC AND PRIVATE IPV4 ADDRESSES

Question 34

IF YOU USE PuTTY TO CONNECT TO YOUR INSTANCE VIA SSH YOU NEED TO VERIFY THAT YOUR PRIVATE KEY (.pem) HAS BEEN CORRECTLY CONVERTED TO

Answer 34

.ppk (PuTTY FORMAT)

Question 35

EC2 BASIC DATA AVAILABLE AFTER

Answer 35

5 MINS

Question 36

EC2 DETAILED MONITORING DATA AVAILABLE AFTER

Answer 36

1 MIN

Question 37

_____ LAUNCHES A NUMBER OF EC2 INSTANCES FOR ITS HADOOP DATA PROCESSING ENGINE, IS MANAGED BY THE CUSTOMER AND IS USED TO PROCESS VAST AMOUNTS OF DATA

Answer 37

EMR

Question 38

AVAILABLE AMAZON EC2 METRICS

Answer 38

CPU UTILIZATION, NETWORK UTILIZATION, DISK PERFORMANCE AND DISK READ/WRITES

Question 39

[TERM LINK] OBJECT BASED

Answer 39

S3

Question 40

S3 FILE SIZE

Answer 40

0 BT - 5 TB

Question 41

minimal replical lag, usually less than 100 millisecods

Answer 41

AWS AURORA

Question 42

___ ____ component can be used to create web server environments and work environments

Answer 42

ELASTIC BEANSTALK

Question 43

_____ provides scalable file storage

Answer 43

EFS

Question 44

[TERM LINK] | EPHEMERAL

Answer 44

INSTANCE STORES

Question 45

_______ HELPS TO ENSURE THAT YOUR AUTO SCALING GROUP DOESN'T LAUNCH OR TERMINATE ADDITIONAL INSTANCES BEFORE THE PREVIOUS SCALING ACTIVITY TAKES EFFECT

Answer 45

AWS SCALING COOLING PERIOD

Question 46

IAM ROLES IS USED TO DELEGATE ACCESS TO..

Answer 46

USERS, APPLICATIONS OR SERVICES

Question 47

USED FOR ISSUING TOKENS WHILE USING THE API GATEWAY FOR TRAFFIC IN TRANSIT

Answer 47

API GATEWAY WITH STS

Question 48

REDSHIFT WILL NOT BE ABLE TO ACCESS THE S3 VPC ENDPOINTS WITHOUT

Answer 48

ENHANCED VPC ROUTING

Question 49

IF LANGUAGE IS SPECIFIED IN THE QUERY STRING PARAMETERS THEN

Answer 49

CLOUDFRONT SHOULD BE CONFIGURED

Question 50

AWS KINESES DATA FIREHOSE CAN CAPTURE, TRANSFORM AND LOAD STREAMING DATA INTO

Answer 50

* AMAZON REDSHIFT (NOT REDSHIFT SPECTRUM) * AMAZON ELASTICSEARCH SERVICE * SPLUNK

Question 51

AN INSTANCE STORE-BACKED INSTANCE IS EITHER

Answer 51

RUNNING OR TERMINATED , CAN NOT BE STOPPED !

Question 52

AWS REDSHIFT USES TWO FORMS OF ENCRYPTION

Answer 52

AWS KMS OR AWS HSM

Question 53

ON PREMISE ----> AWS RESOURCES

Answer 53

VPN CONNECTION

Question 54

PRIVATE RESOURCES REQUIRED TO ACCESS THE INTERNET?

Answer 54

UTILIZE NAT INSTANCE OR NAT GATEWAY

Question 55

BOTTLENECK

Answer 55

NAT INSTANCE

Question 56

ONCE YOU CONVERT FROM NAT INSTANCE TO NAT GATEWAY YOUR NEXT STEP IS TO

Answer 56

MOVE NAT GATEWAY TO PUBLIC SUBNET

Question 57

SERVICE WHERE YOU ONLY PAY FOR THE TIME THE FUNCTION RUNS AND NOT THE INFRASTRUCTURE, ALSO SAME SERVICE WHEN THE CUSTOMER HAS OWNERSHIP OF THE API

Answer 57

AWS LAMBDA

Question 58

MONITOR API ACTIVITY

Answer 58

CLOUD TRAIL

Question 59

CLOUD TRAIL MONITORS _____ ACTIVITY

Answer 59

API

Question 60

[TERM LINK] API ACTIVITY

Answer 60

CLOUD TRAIL

Question 61

[TERM LINK] CLOUD TRAIL

Answer 61

MONITOR API ACTIVITY

Question 62

YOU CAN TURN ON A _____ACROSS ALL REGIONS

Answer 62

CLOUD TRAIL

Question 63

CLOUDTRAIL DELIVERS LOG FILES TO

Answer 63

S3 BUCKET AND OPTIONAL CLOUDWATCH LOG FILES

Question 64

OFFLOAD DATABASE READS

Answer 64

READ REPLICAS

Question 65

READ REPLICAS

Answer 65

OFFLOAD DB READS

Question 66

HIGH AVAILABILITY

Answer 66

MULTI AZ

Question 67

MULTI AZ MEANS

Answer 67

HIGH AVAILABILITY

Question 68

RDS HIGH AVAILABILITY

Answer 68

MULTI AZ

Question 69

RDS READ REPLICAS

Answer 69

OFFLOAD DB READS

Question 70

BATCH PROCESSING

Answer 70

SPOT INSTANCES

Question 71

SPOT INSTANCES

Answer 71

BATCH PROCESSING

Question 72

AMIS ARE NOT ______ AT REST

Answer 72

ENCRYPTED AT REST

Question 73

ROUTE 53 ROUTES USER TRAFFIC TO RANDOM WEB SERVERS

Answer 73

MULTIVALUE ANSWER

Question 74

MULTIVALUE ANSWER

Answer 74

ROUTE 53 ROUTES USER TRAFFIC TO RANDOM WEB SERVERS

Question 75

RANDOM WEB SERVERS

Answer 75

MULTIVALUE ANSWER

Question 76

INCREASE WRITE PERFORMANCE OF DB HOSTED ON EC2

Answer 76

INCREASE EC2 INSTANCE AND OR USE STANDARD RAID CONFIGURATION

Question 77

NO COST FOR TRANSFERRING DATA FROM

Answer 77

EC2 INSTANCE TO AN S3 BUCKET

Question 78

____ PROVIDES MULTIPLE WAYS TO USE AMAZON CLOUD DIRECTORY AND MICROSOFT ACTIVE DIRECTORY

Answer 78

AWS DIRECTORY SERVICE

Question 79

AWS DIRECTORY SERVICE

Answer 79

LINK BETWEEN CLOUD DIRECTORY AND MICROSOFT AD

Question 80

SNS SENDS NOTIFICATIONS OVER

Answer 80

HTTP, HTTPS, EMAIL, EMAIL-JSON, SQS AND SMS

Question 81

HTTP, HTTPS, EMAIL, EMAIL-JSON, SQS AND SMS

Answer 81

WHAT IS SENT OVER FROM SNS

Question 82

STORE SESSION DATA ON BOTH

Answer 82

DYNAMO DB AND ELASTICACHE

Question 83

IF AN INSTANCE IS STOPPED

Answer 83

DATA IS DELETED

Question 84

DATA IS DELETED WHEN

Answer 84

AN INSTANCE IS STOPPED

Question 85

TO IMPLEMENT STICKY SESSION YOU NEED TWO THINGS

Answer 85

* HTTP/HTTPS LOAD BALANCER | * AT LEAST ONE HEALTHY INSTANCE

Question 86

instance metadata provides

Answer 86

instance ID, public keys, public IP address

Question 87

how to you find instance meta data

Answer 87

fire a URL command

Question 88

S3 Standard IA storage class is designed for

Answer 88

data that is accessed less frequently, but requires rapid access when needed

Question 89

managed cloud service that lets devices (IoT) easily and securely interact with cloud applications and other devices

Answer 89

AWS IoT Core

Question 90

perfect forward secrecy is provided to two aws services

Answer 90

CLOUDFRONT AND ELB

Question 91

AWS MANAGES SECURITY OF:

Answer 91

* FACILITIES * PHYSICAL SECURITY OF HARDWARE * NETWORK INFRASTRUCTURE * VIRTUALIZATION INFRASTRUCTURE

Question 92

THE DATA IN_____ IS STORED IN JSON FORMAT FOR

Answer 92

DYNAMODB

Question 93

DYNAMODB STORES DATA IN _____ FORMAT

Answer 93

JSON

Question 94

SINCE DYNAMODB WORKS WITH IoTs, gaming, ad tech and mobile applications IT IS USED TO STORE

Answer 94

SESSION DATA

Question 95

THIS AWS FEATURE IS REALLY GOOD BECAUSE IT IS DURABLE, ACID COMPLIANT AND ALLOWS SCHEMA CHANGES

Answer 95

AURORA

Question 96

REDSHIFT CLUSTER DISASTER RECOVERY ???

Answer 96

CROSS-REGION SNAPSHOT

Question 97

REDSHIFT HAS TWO FORMS OF ENCRYPTION

Answer 97

AWS KMS AND HSM

Question 98

IN ORDER TO HOST A STATIC WEBSITE IN S3 YOU NEED TO NEED TO ____________ IN THE DOMAIN REGRISTAR

Answer 98

ENTER THE NS RECORDS

Question 99

CLOUD TRAIL MONITORS

Answer 99

API ACTIVITY