TD Exam 2 - Short Review Flashcards
1
Q
What Load Balancer should you use if you want unbroken encryption
A
NLB
2
Q
Which Load Balancer should you use if you want Static IP for whitelisting
A
NLB
3
Q
Which Load Balancer should you use if you want the fastest performance (millions of rps)
A
NLB
4
Q
Which Load Balancer should you use if you want to use a protocol other than HTTP or HTTPS
A
NLB
5
Q
Which Load Balancer should you use if you need Private Link
A
NLB
6
Q
Which Load Balancer should you use if you need to use Layer 7 information
A
ALB
7
Q
Which Load Balancer should you use for a gRPC app
A
ALB
8
Q
Can you assign an Elastic IP to an ALB
A
No
9
Q
Can you assign an Elastic IP to a NLB
A
Yes
10
Q
What are the protocol versions for ALB
A
HTTP1
HTTP2
gRPC
11
Q
Do NLBs support gRPC
A
No
12
Q
What are some use cases for Lambda@Edge
A
A/B Testing
Migration between S3 origins
Different Objects Based on Device
Content by Country
Overriding a response header
Redirect unauthenticated users to a sign-in page
Normalize query string params for better cache hits
13
Q
What should you used if you want to do A/B testing with CloudFront
A
Lambda@Edge on the viewer request
14
Q
What should you used if you want to do migration between S3 origins with CloudFront
A
Lambda@Edge on the Origin request
15
Q
What should you used if you want to do different objects based on device with CloudFront
A
Lambda@Edge on the Origin request
16
Q
What should you use if you want to do different content by country with CloudFront
A
Lambda@Edge on the Origin request
17
Q
What do CloudFront Header Policies do
A
They tell which HTTP headers should be included or excluded in the responses sent by CloudFront
18
Q
Which service should you use for transferring large sets of data to aws?
A
DataSync, not storage gateway
19
Q
When should you use DataSync
A
When you need reliable transfer of large amounts of data
20
Q
What is Amazon EMR
A
A managed cluster platform that simplifies running big data frameworks, like Apache Hadoop and Apache Spark
21
Q
What can you use Amazon EMR for
A
To process data, to transform and move large amounts of data in and out of AWS data stores and databases
22
Q
What is Amazon Redshift
A
A cloud data warehouse
23
Q
What does Redshift do
A
It makes it fast, simple and cost-effective to analyze all your data using standard SQL and existing BI tools
24
Q
What is AWS Network Firewall
A
A stateful, managed network firewall and intrusion detection and prevention service for VPC
25
Where do you create an AWS Network Firewall
In your VPC
26
Where do AWS Network Firewalls filter traffic
At the perimeter of the VPC
27
At which level do Security Gorups provide protection
Instance level
28
At what level do NACLs provide protection
Subnet level
29
At what level foes WAF provide protection
Endpoint level
30
What is needed if you set up AWS Network Firewall
Reroute VPC network traffic through the firewall endpoint
31
How do you ensure 2 instances in different subnets can communicate
NACLs to allow traffic between subnets
SGs to allow instance to instance communication
32
Do you launch Aurora in subnets
yes
33
What is the default value for ASGs cooldown
300
34
What does cooldown do in ASGs
It ensures that auto-0scaling does not terminate or launch instances before the previous scaling activity has taken effect
35
Are cooldowns in ASGs configurable
Yes
36
When would you use RDS Proxy
If you have a too many connections error
If you're using Lambda
When you need long-running connections
When resilience to db failure is important
37
What do you pay for in API Gateway
Per API call and for data transferred out
38
Which APIs are supported by API Gateway
REST, HTTP, WebSockets
39
What does AWS Config do
It enables you to assess, audit and evaluate the configurations of AWS resources
40
What does AWS Inspector do
It scans EC2 instances and its OS (also containers) for vulnerabilities and deviations against best practices
Can do networking assessment
41
What does GuardDuty do
It generates findings of suspicious activities using AI. It is used with data sources and can be cross-account
42
How does failover occur in RDS multi-AZ
CNAME is switched from primary to standby instance
43
Can DMS work with DynamoDB
Yes
44
Can you use S3 as a target for DMS
Yes, and it will write data as CSV by default
Can also use parquet format if you want something more compact with faster queries
45
How can you encrypt DMS connections
Use SSL by assigning a certificate to a DMS endpoint
46
Do you need to set up SSL for Redshift data transfer
No, it's endpoint already uses SSL, no need to set it up in DMS
47
What is Landing Zone
It allows you to set up a well-architected multi-account environment with rules for security, operations and internal compliance
48
How can you allow Organizational Units to launch new accounts with preapproved configurations
Use AWS Control Tower with guardrails to enfore policies or detect violations
49
What is Control Tower GuardRails
It provides governance controls by preventing the creation of resources that don
50
What other AWS services are used by Control Tower Guardrails
CloudFormation to establish a baseline
AWS Organization Service Control POlicies to prevent configuration changes
AWS Config rules to continuously detect non-complicance
51
How do you specify a role for an ECS task
Declare the IAM Role in the taskRoleArn section of the task definition
52
What is a service that is very suitable for batch jobs
ECS
53
How can you use an existing Directory for AWS sign in
Use IAM Identity center (Federation)
54
What do SCPs do
They say what permissions can be granted to identities in accounts in an organization
55
Is the directory service intended to be used for multi-account auth purposes
No, not directly from AWS Organization, you still need IAM Identity center
56
How do you use an existing directory service for user authentication
Configure IAM Identity center and integrate it using the Active Directory Connector
57
Is there an option to use an external authentication on AWS Organizations
No
58
Can you create VPC peering between onprem network and VPC
No
59
Do peered VPCs support edge-to-edge routing
No
60
Can VPC peering transmit a VPN connection
No
61
Can VPC peering transmit a Direct Connect connection
No
62
Can VPC peering transmit an internet connection from an Internet Gateway
No
63
What are some services you can use to create a decoupled architecture for apps onprem and in AWS
SQS and SWF (Simple Workflow Service)
64
Where can workers from SWF be
On cloud or onprem
65
What is Amazon SWF
A web service that makes it easy to coordinate work across distributed application components
66
What are the 2 main concepts in SWF
Tasks: invocation of logical steps in applications
Workers: programs that interact with SWF to get tasks, process them and return their results
67
Can subnets span AZs
No
68
For VPCs, are IPv4 CIDR ranges required
Yes
69
For VPCs, are IPv6 CIDR ranges required
No
70
Can you disable IPv4 for a VPC
No
71
What do you need to attach to your VPC to have a VPN
Virtual Provate Gateway
72
What are the steps to implement a VPN to a VPC
Attach a virtual private gateway to the VPC
Create a custom route table
Update security group rules
Create an AWS-managed VPN connection
73
What does a customer gateway resource fo in AWS
It provies information to AWS about your customer gateway device
74
Do Customer Gateways need a publicly routable static IP
Yes
75
Do you need to attach an elastic IP to a Virtual Private Gateway
No
76
Do you need a NAT instance to create a VPN connection
No
77
What does geoproximity routing do
It gives the CLOSEST record
78
Is EBS off-instance
Yes
79
Can EBS volumes be attached to any EC2 instance in any AZ
No, it is only in one AZ
80
Do EBS volumes support live configuration changes while in production
Yes, you can modify volume type, volume size and IOPS capacity without service interuption
81
Can you modify EBS volume size without interruption
Yes
82
Can you modify EBS volume type without interruption
Yes
83
Can you modify EBS IOPS capacity without interruption
Yes
84
Does EBS automatically replicate to another AZ
No
85
Does EBS do automatic replication
Yes, within an AZ
86
What types of EBS and EC2 instance types allow multi-instance connection
Provisioned IOPS SSD (io1) attached to multiple Nitro-based instances using EBS Multi-Attach
87
What kind of VPC endpoint can be used with DynamoDB
Gateway endpoint
88
What do you specify when you create a DynamoDB Gateway endpoint
Specify the VPC where it will be deployed and the route table that will be associated with the endpoint
89
How can you implement department-by-department cost-tracking
Tag resources with the department name and enable cost allocation tags
90
What is a tag in AWS
A label you associate to an AWS resource
COnsists of a key and a value
Each tag key must be unique
Each tag key can only have one value
91
What are tags used for in AWS
To organize resources
92
What are cost allocation tags used for in AWS
to track costs on a detailed level
93
What does AWS Budget do
It allows you to be alerted and run custom actions if budget thresholds are exceeded
94
Where do you need to activate tags to enable cost-tracking
In Billing and Cost management console
95
What is Amazon EMR
A managed cluster that simplifies running big data frameworks on AWS to process and analyze vast amounts of data. It can do ETL
96
What service should you associate with the phrase "big data processing frameworks"
EMR
97
What service should you associate with the phrase "access data using various business intelligence tools and standard SQL queries"
Amazon Redshift
98
Can you use big data frameworks effectively with Glue
No, use EMR
99
What service allows you to do SQL queries in S3
Athena
100
What does S3 select feature do
Allows you to run simple SQL queries against a subset of data from a specific S3 object
101
What does Amazon Managed Service for Apache Flink studio do
Process streaming data
102
What should you do to convert csv files to Parquet
Scheduled ETL job in AWS Glue, use crawler to automatically discover raw data
103
What is a fanout scenario
SNS topic used to push to multiple places (multiple SQS queues subscribed to the topic)
104
How can you limit what an SNS subscriber gets
SNS message filtering; by default, they receive everything
105
Can you specify failover for Route 53
Yes
106
What happens when you enable failover in route 53
It points to secondary when primary is unhealthy
107
What do you need to host a static website on S3
An S3 bucket with the same name as the domain or subdomain configured to host a static website
Registered domain name
Route 53 as the DNS service for the domain
108
Does the S3 bucket need to be in the same region as the R53 hosted zone for a static website
No
109
What is a Bastion host
EC2 in public subnet with public or elastic IP with sufficient RDP or SSH access. Users log into it to manage other hosts in private subnets
110
What protocol do you use with a Windows Bastion host
RDP
111
What is Amazon Data Lifecycle Manager used for
Can use it to automate the creation, retention and deletion of snapshots taken to back up EBS
112
Is there such a thing as EBS lifecycle policy
No
113
