Old Cards Flashcards

1
Q

How many copies of Aurora for High AVailability

A

2 per AZ, 3 AZ minimum

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How many copies for Aurora’s databases can be lost before affecting: a) Write b) Read

A

a) 2
b) 3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How does Aurora know there’s a failure

A

Continuous scans for data block errors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

In Route53, what happens to a node with a failed health check

A

The node is removed until it becomes heathy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the retention window for Kinesis Streams

A

1 - 7 days; the default is 1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which can run in multi-AZ: Memcached or Redis

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

In Cognito, what are Identity Pools

A

A store of Identity data, providing temporary AWS credentials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Describe the Backup and Restore strategy of RDS

A

Full backup, with Transaction logs during the day, stored in S3
Restore specified day, along with Transaction logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What happens to RDS during backups

A

I/O may be suspended or there may be latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

In DNS, what is a PTR record

A

It is a reverse A record (ie: an IP address to a domain)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are 3 levels of Flow Logs

A

VPC
Subnet
Network Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are 4 types of S3 Encryption

A

SSE-S3
SSE-KMS
SSE-C
Client Library

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are 3 ways to add scale to a MySQL RDS instance

A

Add Read Replicas
Provision a larger EC2 instance
Use Elasticache for frequently read, static data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are 2 types of CloudWatch Dashboards

A

Global
Regional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are 3 types of Placement Groups

A

Clustered: Instances in a single AZ
Spread: Instances in multiple AZs
Partitioned: Instances spread across multiple partitions in each AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which scales Horizontally: Memcached or Redis

A

Memcached

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

In Cognito, what are User Portals

A

User Directories, allowing users to Sign Up and Log into apps using a JSON Web Token (JWT)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Do Elastic Load Balancers have an IP Address

A

No, they have a DNS Name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What Statuses do Instances have in an Elastic Load Balancer

A

In Service
Out of Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the Task/Message differences in SWF and SQS

A

SWF is Task-based
SQS is Message-based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the Assigned/Process differences in SWF and SQS

A

SWF Tasks are assigned only once and never duplicated
SQS Messages may be processed multiple times

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the Tracking differences in SWF and SQS

A

SWF tracks Tasks and Events
SQS doesn’t track anything

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Given the choice, should I use a CNAME or an Alias record

A

Always use an Alias; they are cheaper and can be used on an Elastic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

In SQS, what does the attribute DelaySeconds do

A

SQS will hide a new message for the specified time

25
Q

In SWF, what is the maximum time a Task can remain in a workflow

A

One year

26
Q

In Route53, what is MultiValue routing

A

Send traffic from a random set of healthy nodes to a single resource

27
Q

What three ways can you allow communication between a VPC and On-Premises

A

1) Configure a VPC subnet that doesn’t conflict with subnets on the On-Premises network
2) Add an Internet Gateway to the VPC for VPN connectivity
3) Configure Direct Connect

28
Q

What are the rules for AMI publication

A

1) Disable Services and Protocols that authenticate in cleartext (ie: FTP)
2) Don’t start unnecessary services (ie: only SSH and RDP)
3) Securely delete:
- AWS credentials
- Third party credentials
- Any certificates and keys
4) Ensure installed software doesn’t use default credentials

29
Q

What parts of the AWS Infrastructure does AWS secure

A

Data Centers
Hardware
MFA Appliances
24x7 Site Security
Least Access

30
Q

What are your responsibilities for securing AWS resources

A

Anything you put on or connect to the cloud

31
Q

What are 2 ways you can revert from Dedicated to Default hosting

A

Use the AWS CLI to change the VPC’s Tenancy
Use the AWS CLI to change the Instance Placement attribute

32
Q

What happens when a Spot instance’s Bid Price is exceeded

A

The Instance-Action variable is created
The Action variable is set to Terminate
The time value is set to 2 minutes in the future

33
Q

In SQS, what is the maximum Visibility Timeout

A

14 days

34
Q

In SQS, what does WaitTimeSeconds do

A

The amount of time to wait for messages

35
Q

Do you create Roles for Users, Groups or Services

A

Services

36
Q

Describe Disk and Memory security for instances

A

No access to raw disk
Virtual drives are auto-reset for all blocks
Memory is zero set before release

37
Q

What are the 3 Actors for SWF

A

Workflow Starter: app that initiates the workflow
Activity Workers: Carry out tasks (can be a human)
Decider: Controls the flow of Activity Workers

38
Q

What are the 5 areas checked by Trusted Advisor

A

Cost Optimization
Performance
Security
Fault Tolerance
Service Limits

39
Q

How long can a SQS message remain in the queue

A

1 - 14 days; default is 4 days

40
Q

What type of storage is used in RedShift

A

Columnar storage

41
Q

What type of compression is used in RedShift

A

Advanced Compression based upon data

42
Q

How does RedShift distribute processing

A

Massively Parallel Processing

43
Q

What are the 4 support options

A

Basic
Developer
Business
Enterprise

44
Q

What are the 4 parts of CloudWatch

A

1) Alarms: Notification when threshold is reached
2) Events: Respond to state changes (ie: EC2 start up)
3) Logs: Aggregate, Monitor and Store logs (requires EC2 Agent)
4) Dashboards: Customized display

45
Q

How do you make an EC2 instance publicly available when you’ve forgotten to assign a public IP Address

A

Create an Internet Gateway
Create an Elastic IP Address (EIP)
Associate the EIP to the instance

46
Q

You are creating a VPN to connect a customer network to a VPC.
What 3 things do you need to configure

A

An On-Premises Customer Gateway
A Virtual Private Gateway
A VPC with a hardware VPN

47
Q

In RDS, what are the attributes of Read Replicas

A

Asynchronous Replication
Must enable Automated Backups

48
Q

What RDS database engines support Multi-AZ with two readable standbys

A

MySQL and PostgreSQL

49
Q

In RDS, what are the attributes of Multi-AZ deployments

A

Automatic Failover
Synchronous Replication

50
Q

What are the 3 DynamoDB structures

A

Collection (table)
Document (record)
Key/Value Pair (field)

51
Q

In RDS, what are 2 types of backups

A

Automated
Snapshot

52
Q

In RDS, what happens when you restore

A

A new instance is created

53
Q

What is needed to create an Elastic Load Balancer (ELB)

A

At least 2 Public subnets in different AZs

54
Q

How many IP Addresses are reserved per subnet

A

The first 4 and the Last IP addresses

55
Q

For which S3 Events can you send notifications

A

Put
Post
Copy
Delete

56
Q

What are the 3 types of Glacier

A

Instant Retrieval: Archive data accessed once a quarter. Retrieval times in milliseconds, minimum of 90 days of storage

Flexible Retrieval: Archive data accessed 1-2 times per year. Minimum of 90 days of storage. Retrieval times:
- Expedited: 1 - 5 minutes
- Standard: 3 - 5 hours
- Bulk: 5 - 12 hours

Deep Archive: Long-lived archive data accessed less than once per year. Minimum of 180 days of storage. Retrieval times:
- Standard: Within 12 hours
- Bulk: Within 48 hours

57
Q

What are the 3 data formats supported by Athena

A

JSON
Apache Parquet
Apache ORC

58
Q

What are the 5 types of traffic not logged in a Flow Log

A

AWS DNS traffic
EC2 Windows License Activation
Instance Meta data on 169.254.169.254
DHCP traffic
VPC reserved IP Address traffic