Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AWS Certifications > SA Professional Exam > Flashcards

SA Professional Exam Flashcards

(97 cards)

Start Studying
1
Q

How long does it take to get data out of Glacier?

A

It can take AT LEAST 3 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What storage type provides the ability to create point-in-time snapshots of data volumes?

A

EBs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which three services have automated backups?

A

RDS
Elasticache (Redis only)
Redshift

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which service does not have automated backups?

A

EC2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

In Read Replicas vs Multi-AZ;

Which is used for scaling?

A

Read Replicas

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

In Read Replicas vs Multi-AZ;

Which is used for DR/MultiAZ?

A

Multi-AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How many read replicas can you have?

A

Up to 5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can you have read replicas in different regions?

A

Yes - With the exception of SQL Server and Oracle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Are read replicas synchronous or asynchronous?

A

Asynchronous

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

[T/F] Read Replicas can be made off of Multi-AZ’s database

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

[T/F] Read Replicas can be in Multi-AZ.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can you have a read replica of a read replica? Will this increase latency?

A

Yes, but only for MySQL and this will increase latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

DB Snapshots and Automated backups [can/cannot] be taken of read replicas.

A

Can - but are not enabled by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

If you application does not require transaction support, Atomicity, Consistency, Isolation, Durability (ACID) compliance, joins & SQL… What should you consider using instead of RDS?

A

DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the 4 different Storage Gateway Types?

A

File Gateway
Gateway-Cached Volumes
Gateway-Stored Volumes
Gateway-Virtual Tape Library

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How long does it take to access virtual tapes in your virtual tape library?

A

Instantaneous

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How long does it take to access your virtual tapes from your virtual tape shelf?

A

It can take 24 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How is Storage Gateway encrypted?

A

Encrypted using SSL for transit

Encrypted at rest in S3 using AES-256

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How are Gateway-Stored Volumes stored?

A

Stored data as Amazon EBS Snapshots in S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Gateway Storage snapshots [can/cannot] be scheduled.

A

Gateway Storage Volumes can be scheduled.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Gateway Storage bandwidth [can/cannot] be throttled.

A

Gateway storage can be throttled - which is great for remote sites

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

AWS Snowball _______ and _________ from S3.

A

Import; Export

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

AWS Import Export can only _______ to S3.

A

Import

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

_______ make it easy to group your resources using the tags that are assigned to them. You can group resources that share one or more tags.

A

Resource groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
_________ allows you to get volume discounts on all your accounts.
Consolidated billing
26
With consolidated billing, _____ is on a per account and per region basis but can be aggregated into a single bucket in the paying account.
CloudTrail
27
The contract length for Reserved Instances is between __ and __ years.
1 & 3
28
What are the 3 types of RIs?
Standard, Convertible, Scheduled
29
Which of the RIs offers the largest discount?
All Upfront RIs
30
Standard RIs for EC2 can be modified, but only if they are in the same _______ and only if the ______ factors are equal and only for the Linux operating system.
Family; Normalization;
31
You can switch EC2 RIs between ______, but not between ______.
AZs; Regions
32
EC2 RIs [can/cannot] be sold on the marketplace.
can
33
Can you have reserved RDS instances?
Yes
34
With RDS reserved instances, you can move ______ but not _______.
AZ's but not regions.
35
Elastic Beanstalk [can/cannot] provision RDS instances.
can
36
Elastic Beanstalk [does/does not] support IAM.
does
37
You have ___ access to the resources under Elastic Beanstalk.
full
38
Elastic Beanstalk code is stored in ___.
S3
39
With Elastic Beanstalk, ________ environments are allowed to support version control.
multiple
40
Elastic Beanstalk [can/cannot] roll back changes.
can
41
With Elastic Beanstalk, ______ the changes from ____ repositories are replicated.
Only the changes from Git repositories
42
Amazon Elastic Beanstalk supports which AMIs?
Linux AMI & Windows 2012 R2
43
OpsWork consists of ________ and ________.
Stacks; Layers
44
OpsWorks runs on _____.
Chef
45
In OpsWork, layers contain AWS resources such as...
EC2 ELB RDS
46
In OpsWork, layers are like _____, ______, and _______ layer.
Web; Application; Database
47
In OpsWork, each stack will have how many layers?
1 or more
48
What happens to any EC2 instance added outside of the OpsWork stack in ELB?
OpsWork will remove
49
CloudFormation uses ________ to resolve dependency between resource creation.
wait condition
50
What is mandatory for a CloudFormation template?
Resources
51
With CloudFormation, you can create multiple ____ inside of one template.
VPCs
52
If you wanted to connect VPCs in your CloudFormation template. You can enable _____________ using CloudFormation, but only within the same AWS account.
VPC Peering
53
CloudFormation supports _____, ________, and _____ scripts.
Chef; Puppet; Bootstrap
54
With CloudFormation, you can use ________ to output data.
Fn:GetAtt
55
By default, the _______________ feature is enabled in CloudFormation.
"automatic rollback on error"
56
CloudFormation itself costs what?
Nothing
57
_______ is completely supported with CloudFormation. This includes creating new hosted zones or updating existing ones.
Route53
58
If you are accessing services using HTTPs endpoints (think DynamoDB, S3) use public ____.
VIFs
59
If you are accessing VPCs using private IP address ranges, use private ______.
VIFs
60
In the US, you need ___ direct connect connection(s) to connect to all 4 US regions.
1
61
Does data transferred between regions go over public internet?
No
62
Layer 2 connections [are/are not] supported by direct connect.
Are not
63
What is the difference between a Customer Gateway and a Virtual Private Gateway?
Customer Gateway - Customer side | Virtual Private Gateway - AWS Side
64
Which ports does EC2-VPC ELB support?
1-65536
65
What ports does the EC2-Class ELB support?
``` 25 80/443 465 587 1024-65535 ```
66
Can you assign an Elastic IP to an Elastic Load Balancer?
No
67
You can load balance to the _________ of your domain name with ELBs.
Zone Apex
68
If you have multiple SSL certifications you should use ________ Elastic Load Balancers, unless you have a wildcard certificate.
Multiple
69
A placement group [can/cannot] span availability zones but it [can/cannot] span subnets, provided that they are in the same VPC.
cannot; can
70
You [can/cannot] move existing instances to placement groups.
cannot
71
How can you reduce bottlenecks with NATs?
Scale up and Scale out; | If you scale out, add an additional NAT & subnet and migrate half your workload to the new subnet.
72
Can you peer VPCs from different regions?
Nope
73
If you peer two VPCs, what needs to be updated?
Security groups & make sure that a route table has been created in both VPCs to allow traffic.
74
If your application is more oriented toward indexing and querying data, it may be better to use this Amazon DB for your needs.
DyanmoDB
75
If your application has number BLOB data (binary large objects) then what would be a good choice for storage?
S3
76
If you need fully automated scaling, which DB is best?
DynamoDB
77
If you're looking to scale your database up you should use ________, if you're looking to scale out use ________.
RDS; DynamoDB
78
Databases that require Joins and/or complex transactions should look to utilize what database options with AWS?
Amazon RDS or Amazon EC2 with self-managed database
79
If you plan to store very large amounts of data that are infrequently accessed (Low I/O rates) where should you store that data?
S3
80
Use _______ to optimize both GETs & PUTs with S3.
Parallelization
81
S3 stores data in __________ order so you have to __________ the data.
Lexicographical; randomize
82
You can secure S3 by doing what 3 things?
- Using Bucket policies - Using MFA Delete - Backing your Bucket Up to Another S3 Bucket Owned by a separate account
83
CloudHSM is _____ tenanted.
Single Tenanted (1 physical device, for you only)
84
CloudHSM must be used in _____.
a VPC
85
You can use ___________ to connect o a CloudHSM from another VPC.
VPC Peering
86
IF you need fault tolerance with your CloudHSM, you need to build a ________.
Cluster
87
CloudHSM can integrate with the following databases & warehouses:
RDS (Oracle & SQL) | Redshift
88
You monitor CloudHSM via ______.
Syslog
89
The two types of directory services are ____ and ________.
AD Connector; Simple AD
90
By default, CloudWatch Logs will store your log data for how long?
Indefinitely
91
The default CloudWatch Alarm History is only how many days?
14
92
Step 1 of 3 for developing an Identity Broker is:
Develop an Identity Broker to communicate with LDAP & AWS STS
93
Step 2 of 3 for developing an Identity Broker is:
Identity Broker always communicates with LDAP first, THEN with AWS STS
94
Step 3 of 3 for developing an Identity Broker is:
Application then gets temporary access to AWS resources.
95
AWS Security Token Service returns which four values upon request for a federated token?
A Token A Secret Access Key Access Key ID A Duration
96
True or False: To minimize the attack surface area, servers can be placed behind a bastion host, through which all traffic must pass.
False
97
If you want Intrusion Prevention AND Intrusion Detection you should use what?
A IPS tool

AWS Certifications (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions