Missed Questions Flashcards

(34 cards)

1
Q

What options exist for accidental deletion in S3?

A

Versioning on deletions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a predefined security policy?

A

Determine protocols and ciphers used between load balancer and client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What resource allows creation of subnets, modify IP address ranges, change network configurations, etc?

A

Virtual Private Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the best solution for multiple new employees that need different access?

A

Use AWS Organizations and service control policies to manage actions and services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What’s the best option for EC2 only needed for 9 months?

A

Partial Upfront Reserved Instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What storage class when unsure of access patterns of your data objects?

A

S3 Intelligent-Tiering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What automatic monitoring is available in 5-minute increments for EC2?

A

Basic (free and collects metrics at 5-minute intervals)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How to get a CPU dashboard of metrics at 1-minute intervals?

A

Detailed Monitoring for EC2 instances and CloudWatch for the dashboard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

CloudWatch vs CloudTrail

A

CloudTrail is for logging via API; CloudWatch is for viewing metrics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Linux OS on EC2 - how is it classified and who is responsible for patching?

A

Guest Operating System; Customer’s Responsibility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What tools to migrate MySQL DB to Amazon RDS?

A

AWS DMS and MySQL tools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What instances would an Auto Scaling group use?

A

Spot Instances and On-Demand Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are S3 Bucket Name limitiations?

A

No uppercase, no underscores, no name duplications anywhere

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What component can allow private subnet to connect to internet and make connections highly available?

A

NAT Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What regional storage option gives ability to store and manage files?

A

Amazon EFS (Elastic File System)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What pillar is effective running workloads and gaining insight into operations and process improvements for business value?

A

Operational Excellence

17
Q

What piller is a workload functioning correctly and consistently?

18
Q

What piller is efficient usage of resources and maintaining efficiency as demands and tech chnages?

A

Performance Efficiency

19
Q

What pillar is ensuring security and asset protection?

20
Q

What pillar is operating systems in a way that delivers business value in most economical way?

A

Cost Optimization

21
Q

What service can create hierarchical estimate of costs grouped by sections of the organization’s architecture?

A

AWS Pricing Calculator

22
Q

When does DynamoDB encrypt data at rest?

A

Only when creating a new table structure

23
Q

Which component allows keeping up with employees, project listings, and tech resources over time?

A

Entity Lifecycle Tracking

24
Q

What VPC endpoint focuses only on DynamoDB and Amazon S3?

A

Gateway type endpoint

25
Who is responsible for encrypting data at rest for a file sharing server?
The customer
26
How can you connect VPCs so devices can communicate?
VPC Peering
27
What is the AWS-provided firewall and who configures it?
It's a Security Group (acts as a firewall) and the customer configures it
28
What is an Elastic IP?
Public, static IPv4 address allocated to your account until you release it. It can be rapidly remapped to another instance, but is only for 1 Region. It incurs a cost whether it is used or not, until released.
29
What is a key benefit of S3 related to data durability?
Data is automatically distributed across 3 Availability Zones within a Region
30
Which caching solution routes traffic within AWS resources and also outside AWS using cloud DNS?
Route 53
31
What compute resources option for a CONSISTENT level of resource usage for 3 years?
Savings Plan model - up to 72% savings compared to On-Demand. Anything beyond the committed amount is processed as On-Demand
32
What S3 bucket policy can limit access to a specific object?
IP Address Range, Custom Prefix, and AWS Account
33
What instance type allows changing resource type during the term?
Convertible Reserved Instances - but only when changing to higher or equal value to original instance
34
What's the first thing to do when logging in as root user for the first time?
Turn on Mult-factor authentication