Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

SAA > What is ...? > Flashcards

What is ...? Flashcards

(120 cards)

Start Studying
1
Q

AWS Glue

A

AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics. You can create and run an ETL job with a few clicks in the AWS Management Console. You simply point AWS Glue to your data stored on AWS, and AWS Glue discovers your data and stores the associated metadata (e.g. table definition and schema) in the AWS Glue Data Catalog. Once cataloged, your data is immediately searchable, queryable, and available for ETL. AWS Glue generates the code to execute your data transformations and data loading processes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AWS Fargate

A

sorta like Elastic Beanstalk for containers, builds containers and deploys them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

ECS and its equivalent

A

highly scalable, high performance container management service that supports Docker containers and allows you to easily run applications on a managed cluster of Amazon EC2 instances. Amazon ECS makes it easy to use containers as a building block for your applications by eliminating the need for you to install, operate, and scale your own cluster management infrastructure. Amazon ECS lets you schedule long-running applications, services, and batch processes using Docker containers. Amazon ECS maintains application availability and allows you to scale your containers up or down to meet your application’s capacity requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

EKS and its equivalent

A

Kubernetes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Athena

A

an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. serverless. analyse log data in S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

FSx for Lustre

A

compute-intensive workloads. doesn’t support the Windows-based applications as well as FSx for Windows file servers. can store data on S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

FSx for Windows File Server

A
  • centralized storage for windows-based applications; SMB, sharepoint, sql server, workspaces, iis webserver, etc
  • needs vpn or direct connect
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

DataSync

A

provides a fast way to move large amounts of data online between on-premises storage and Amazon S3 or Amazon Elastic File System (Amazon EFS).

on prem will no longer be used.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

SQS long polling

A

Long polling helps reduce your cost of using Amazon SQS by reducing the number of empty responses when there are no messages available to return in reply to a ReceiveMessage request sent to an Amazon SQS queue and eliminating false empty responses when messages are available in the queue but aren’t included in the response.

  • Long polling reduces the number of empty responses by allowing Amazon SQS to wait until a message is available in the queue before sending a response. Unless the connection times out, the response to the ReceiveMessage request contains at least one of the available messages, up to the maximum number of messages specified in the ReceiveMessage action.
  • Long polling eliminates false empty responses by querying all (rather than a limited number) of the servers. Long polling returns messages as soon any message becomes available.

TLDR; short polling returns a response immediately, long polling doesnt return a response until a message arrives in the message queue, or the long poll times out.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

SQS short polling

A

The ReceiveMessageWaitTimeSeconds is the queue attribute that determines whether you are using Short or Long polling. By default, its value is zero which means it is using Short polling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

ParallelCluster

A

an AWS-supported open-source cluster management tool that makes it easy for you to deploy and manage High Performance Computing (HPC) clusters on AWS. It does not provide higher bandwidth, higher packet per second (PPS) performance, and lower inter-instance latencies, unlike ENA or EFA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Elastic Fabric Adapter (EFA)

A

simply an Elastic Network Adapter (ENA) with added capabilities. It provides all of the functionality of an ENA, with additional OS-bypass functionality. OS-bypass is an access model that allows HPC and machine learning applications to communicate directly with the network interface hardware to provide low-latency, reliable transport functionality.

The OS-bypass capabilities of EFAs are not supported on Windows instances. If you attach an EFA to a Windows instance, the instance functions as an Elastic Network Adapter, without the added EFA capabilities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Elastic Network Adapter (ENA)

A

supports network speeds from 10Gbps up to 100Gbps for supported instance types. Elastic Network Adapters (ENAs) provide traditional IP networking features that are required to support VPC networking.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

step scaling

A

Increase or decrease the current capacity of the group based on a set of scaling adjustments, known as step adjustments, that vary based on the size of the alarm breach.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

cheapest S3 teir

A

S3 glacier deep archive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

glacier deep archive retrieval time

A

12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

s3 encryption in transit

A

SSL/TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

S3 Encryption at rest

A
  • s3 managed keys - SSE-S3
  • aws key management service, managed keys - SSE-KMS
  • server side encryption with customer provided keys - SSE-C
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

glacier retrieval time

A

minutes to hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

least durable S3

A

One zone-IA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Service control policies (SCP)

A

enable/disable AWS services either on OU or individual accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

ways to share s3 buckets

A

-bucket policies & aim (entire bucket)
-bucket acl’s & iam (individual objects)
-cross-account iam roles (console access as well)
all methods programmatic access only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

cloudfront origin

A

origin of all files the CDN will distribute. can be s3, ec2, elb, route53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

cloudfront distribution

A

name given to the cdn which conists of a collection of edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
cloudfront edge locations
read and write, objects are cached for life of the TTL(time to live)
26
volume gateway - stored volumes
entire dataset stored on site and asynchronously backed up to S3
27
volume gateway - cached volumes
entire dataset stored on S3 and the most frequently accessed data is cached on site.
28
Macie
analyze data in S3 to identify PII. can analyse cloudtrail logs for suspicious api activity. good for PCI-DSS compliance and ID theft
29
blocking specific IP's
cannot block IP's with security groups, only network ACL's
30
move an ec2 volume
AZ move: take snapshot, create ami from snapshot, use ami to launch ec2 in new AZ region move: take snapshot, create ami, copy ami from one region to another, use copied ami to launch new ec2 instance.
31
ebs encryption specifics
- snapshots of encrypted volumes auto encrypted | - restored volumes of encrypted snapshots are encrypted
32
ways to encrypt ebs volumes
create snapshot of volume and select encrypt option, use snapshot to create ami, launch instance using ami
33
cloudwatch default and lowest monitoring intervals
5 min default and 1 minute with detailed monitoring.
34
ec2 meta data
get public ip, etc. traffic is not logged
35
Elastic File Store (EFS)
- linux and linux-based - supports network file system NFSv4, only pay for storage used. - scales up to petabytes. - thousands concurrent nfs connections. - multi-az - 1 vpc at a time - simple, scalable file storage for use with your Amazon ECS tasks.
36
block malicious IP addresses or range of IP's
network ACL's, layer 4
37
cross-site scripting and SQL injections
use WAF, layer 7
38
RDS (OLTP)
sql, mysql,postgreSQL, oracle, aurora, mariaDB.. not serverless except for aurora
39
noSQL
dynamoDB
40
OLAP
redshift
41
elasticache
db in-memory caching; memcached and redis. redis for multi-az, backups, and restores.
42
RDS backups
automated, db snapshots
43
RDS read replicas
increase read performance. can be multi-az and multi-region. backups must be turned on.
44
RDS Multi-AZ
only used for availability and Disaster recovery
45
RDS encryption
Uses AWS KMS. all components of RDS instance are encrypted including backups, read replicas, snapshots
46
redshift availability
1 AZ, automatic 1 day retention backups, max retention 35 days, will always attempt to keep 3 copies of data, backup in s3. can replicate to another region for DR
47
Aurora availability
2 copies of data in each AZ, a minimum of 3 az's. 6 copies total. snapshots can be shared. backups turned on by default.
48
Elastic Load Balancers (ELB)
have DNS name
49
Alias record
always choose over CNAME, alias for a record, not the actual record
50
CNAME
name for the record
51
simple routing policy
one record with multiple IP's, no health checks
52
default vpc comes with
route table, nacl, security group. no subnets no internet gateways. 5 IP's are reserved. 1 internet gateway per vpc
53
NAT gateways
- 5gbps to 45gbps - not associated with secruity groups - auto-assigned public ip - needs routing
54
default network ACL
stateless. allows all outbound and inbound traffic by default, assigned automatically if a subnet is not chosen by configurer. can block IP's, security groups cant
55
custom network ACL
stateless. denies all inbound and outbound traffic by default. can block IP's, security groups cant
56
unmonitored traffic
- instances when they contact amazon dns - traffic generated by windows instance - traffic to and from metadata port - dhcp - traffic to reserevd ip addresses for default vpc router
57
global accelerator
imrpoves availabilty and performance of application for local and global users. traffic traverses AWS backbone network.
58
vpc endpoints
privately connect vpc to supported aws services and endpoint services powered by privatelink without the use of any other devices or connections. no public IP requred. traffic doesnt leave amazon network. horizontally scaled, highly available, redundant.
59
vpc gateway endpoints
S3, dynamodb
60
private link
- peering vpc's to 10-1000 customer vpc's. no vpc peering; no route tables, nat gateways, igw's,etc - needs network load balancer on service/owner vpc and ENI on customer vpc
61
transit gateway
transitive peering between thousands of vpc's and on-premises data centers in hub-and-spoke model, regional, multi-account access with resource account manager(RAM). works with route tables, direct connect, and vpn. supports IP multicast.
62
cloudhub
link multiple real world locations with vpc and other real world locations
63
SQS message queue times
1 minute to 14 days. default retention is 4 days. 256kb size.
64
SQS visibility timeout
time that the message is hidden after it is picked picked up. message is deleted if job is processed, otherwise message becomes visible again.
65
SWF
- task-oriented API, workflow executions can last up to 1 year. - Actors: workflow starters, deciders, activity workers.
66
kinesis data firehose
analyze data in real-time, cannot send to S3 directly
67
kinesis streams
shards, persistence
68
kinesis data analytics
analyze data in both kinesis and data firehose
69
Cognito
Identity broker, handles interaction between applications and web ID provider. user authenticates with web id provider and receives an authentication token and exchanged for temporary credentials to assume an iam role.
70
X-Ray
debug serverless applications
71
lambda
- global | - maximum processing time of 15 minutes
72
Storage Gateway
replicate data, on-prem will still be used
73
Management Events
provide visibility into management operations that are performed on resources in your AWS account. These are also known as control plane operations. Management events can also include non-API events that occur in your account.
74
Data Events
provide visibility into the resource operations performed on or within a resource. These are also known as data plane operations. It allows granular control of data event logging with advanced event selectors. You can currently log data events on different resource types such as Amazon S3 object-level API activity (e.g. GetObject, DeleteObject, and PutObject API operations), AWS Lambda function execution activity (the Invoke API), DynamoDB Item actions, and many more.
75
is iam global?
yes but not every resource its attached to is
76
traffic difference between ALB NLB
alb blocks traffic at load balancer, nlb lets it pass.
77
cloudfront firewall
WAF
78
geo match
feature in cloudfront to block traffic from specific geo location
79
kms
- manages customer master keys(CMKs) - regional - ideal for s3 objects, database passwords, api keys stored in systems manager parameter store. - up to 4kb in size - audit using cloudtrail. - fips 140-2 level 2
80
moving encrypted objects between regions
decrypt, move, re-encrypt using key from new region
81
CloudHSM
- managed service - validated control for regulatory requirements of keys - fips 140-2 level 3 - pkcs#11, Java cryptography extensions(JCE), microsoft cryptoNG (CNG) - lost keys are irretreivable - no aws api's - operates in its own vpc
82
systems manager parameter store
- securely manages configuration and secrets, caching and distributing secrets - component of AWS Systems Manager(SSM) - serverless - good for: passwords, db connection strings, license codes, api keys - encrypted(KMS) or plaintext - store in hierarchies - track versions - can set TTL
83
secrets manager
manages configuration and secrets, more expensive at scale than systems manager parameter store but has features like: - automatically rotates secrets and apply them in RDS - can generate random secrets - shared across accounts - charged per secret and per 10k api calls
84
AWS Shield
protects against DDoS WAF or ALB comes with shield standard no cost: -L3 and L4 attacks: syn/udp floods, reflection attacks - shield advanced: 3k per month, enhanced protection for ec2, elb, cloudfront, global accelerator, route 53 - 24x7 business and enterprise support from DDoS response team (DRT) - DDoS cost protection
85
WAF
``` monitors http(s) requests to cloudfront, alb, or api gateway using filtering rules. filter by: -ip -query string parameters -sql injection ``` request options: - allow all - block all - count properties: - originating ip - originating country - request size - values in headers - strings in requests matching regex - cross-site scripting
86
can you boot from ebs hdd? ssd?
no, yes
87
throughput hdd
500 iops data warehousing log processing sequential
88
provisioned ssd
32,000 iops large database workloads random access
89
general ssd
10,000 iops general workloads random access
90
glacier automatically encrypts data?
yes
91
Elastic IP
- static IP that can be moved, allowing decoupling - An Elastic IP address doesn’t incur charges as long as the following conditions are true: - The Elastic IP address is associated with an Amazon EC2 instance. - The instance associated with the Elastic IP address is running. - The instance has only one Elastic IP address attached to it.
92
RTO
recovery time objective. time it takes for system to recover
93
RPO
recovery point objective. how much data is lost if system fails.
94
fault tolerance
0% interruption, failure is concealed. higher requirement than high availability, think overkill.. 4 servers necessary at all teams means 8, 4 in 2 AZ's
95
high availability
application will still perform, but may be slower. 4 servers necessary, 2 in 2 AZ's
96
where to store all static content?
S3
97
when not to use RDS
- massive read/writes - sharding - simple get/put requests and queries - RDBMS customization
98
AWS Config
tracks resources and verifies that new resources comply with configuration rules
99
VPC flow logs
log network traffic
100
Inspector
checks ec2 instances for security vulnerabilities
101
Trusted advisor
checks accounts for security, liability, performance, cost, and service limits
102
Which of the following is a custom metric in CloudWatch which you have to manually set up?
memory utilization
103
enhanced monitoring?
RDS not EC2
104
aws data pipeline
?
105
appstream
?
106
Posix
?
107
symmetric
?
108
asymetric
?
109
codecommit
managing a source-control service that hosts private Git repositories. You can store anything from code to binaries and work seamlessly with your existing Git-based tools. CodeCommit integrates with CodePipeline and CodeDeploy to streamline your development and release process.
110
codedeploy
deployment service that automates application deployments to Amazon EC2 instances, on-premises instances, or serverless Lambda functions. It allows you to rapidly release new features, update Lambda function versions, avoid downtime during application deployment, and handle the complexity of updating your applications, without many of the risks associated with error-prone manual deployments.
111
opsworks
?
112
cloudmap
cloud resource discovery service. With Cloud Map, you can define custom names for your application resources, and it maintains the updated location of these dynamically changing resources. This increases your application availability because your web service always discovers the most up-to-date locations of its resources.
113
automatic ebs encryption?
encryption by default
114
Aurora read replicas
- Aurora, MySQL, and postgreSQL - cross-region read replicas - asynchronous(milliseconds) - automated failover - up to 15 replicas
115
bucket-owner-full-control
bucket policy allowing ownership of bucket
116
egress-only Internet gateway
horizontally scaled, redundant, and highly available VPC component that allows outbound communication over IPv6 from instances in your VPC to the Internet, and prevents the Internet from initiating an IPv6 connection with your instances.
117
Elastic Beanstalk
automatic infrastructure building centered around given code. supports docker too
118
cloudformation template
- Format Version - Description - Metadata - Parameters - Mappings - Conditions - Transform - Resources (required) - Outputs
119
cross-zone load balancing
distribute incoming requests evenly to all EC2 instances across multiple Availability Zones
120
Inter-Region VPC Peering
is a thing

SAA (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions