Test 4 Flashcards Preview

AWS Solutions Architect > Test 4 > Flashcards

Flashcards in Test 4 Deck (18)
Loading flashcards...
1
Q

What does the Server Access Logging feature in S3 provide?

A

requestor, bucket name, request time, request action, response status, and error code information

2
Q

What service can coordinate multiple AWS services into serverless workflows?

A

AWS Step Functions

3
Q

What 2 steps will you take to automatically restart EC2 instances whenever a simple restart will resolve an error?

A
  • First, look at the existing Cloudwatch logs for keywords matching the error to create a custom metric.
  • Second, create a Cloudwatch alarm for that metric which invokes a restart action
4
Q

What would you use to uniquely identify all of your AWS resources that will allow them to specify a resource unambiguously across all of AWS, such as in IAM policies, Amazon Relational Database Service (Amazon RDS) tags, and API calls.

A

Amazon Resource Name (ARN)

5
Q

What is the maximum ratio of provisioned IOPS to requested volume size in Gibibyte?

A

50:1 so for 10 GiB volume, request 500 iops

6
Q

If you need to provide high availability and fault tolerance to an app that has a ALB and 2 tiers (app and db) that cannot be in the same subnet, how many subnets will you need?

A
6:
- ALB is in a public subnet
- App serubnetsver is in a priavte subnet
- DB is in a private subnet
3x2 (Availability zones) = 6 subnets
7
Q

How do you handle disaster recovery in a Redshift Cluster?

A

Enable Cross Region Snapshots Copy in your cluster.

8
Q

What is the most efficient way to collect and analyze logs from the instances with minimal effort?

A

Install the unified Cloudwatch logs agent in each instance which will automatically collect and push logs to Cloudwatch. You can then analyze the logs with Cloudwatch Insights.

9
Q

What solution can be easily implemented to alert a Lambda function of new entries in a DynamoDB while requiring minimal configuration change to your architecture?

A

Enable DynamoDB Streams to capture table activity and automatically trigger the Lambda function

10
Q

What service allows you to deploy a custom shell script to all of your instances?

A

User data for passing in scripts

11
Q

What are the 2 enhanced monitoring metrics that Amazon CloudWatch provides for Amazon RDS DB instances?

A
  • RDS child processes

- OS Processes

12
Q

Where can you safely import the SSL/TLS certificate of your application?

A
  • AWS Certificate Manager

- IAM Certificate Store

13
Q

What website URL will be assigned to the S3 bucket named johnmac81?

A

johnmac81.s3-website–amazonaws.com

14
Q

What service would you use to trace and analyze user requests as they travel through your Amazon API Gateway APIs to the underlying services.

A

AWS X-Ray

15
Q

What service would you use if you require a durable storage service that is able to handle future increases in storage capacity and can provide the lowest-latency access to data.

A

EBS

16
Q

Why would a new EC@ instance in a new VPC, not have an associated DNS hostname?

A

The DNS resolution and DNS hostname of the VPC should be enabled

17
Q

What is the best way to configure a fault-tolerant NAT instance in your VPC?

A

Launch 2 Nat Instances in 2 separate public subnets and add a route from the private subnet to each Nat Instance

18
Q

What is Classic Load Balancer Connection Draining?

A

This enables the load balancer to complete in-flight requests made to instances that are de-registering or unhealthy