Aws Solutions Architect

Front 1

A logical group of instances within a single availability zone

Back 1

placement group

Front 2

RDS Database Types

Back 2

Aurora, PostgreSQL, mysql, mariadb,oracle, sqlserver

Front 3

A managed NoSQL database that offers extremely fast performance, seamless scalability and reliability, low cost and more.

Back 3

DynamoDB

Front 4

A managed in-memory cache cloud service

Back 4

ElastiCache

Front 5

A managed relational database service that offers , scale compute & storage, Multi-AZ availability, Read Replicas, and more.

Back 5

RDS

Front 6

A fast, highly scalable nonrelational database service

Back 6

DynamoDB

Front 7

A relational database service with minimal administration

Back 7

RDS

Front 8

An easy-to-operate in-memory cache

Back 8

ElastiCache

Front 9

A fast, petabyte-scale data warehousing service

Back 9

Amazon RedShift

Front 10

This service delivers fast query performance by using columnar storage technology to improve I/O efficiency and parallelizing queries across multiple nodes

Back 10

RedShift

Front 11

Provides developers with a highly scalable, flexible, and cost-effective capability to publish messages from an application and immediately deliver them to subscribers or other applications

Back 11

SNS

Simple Notification Service

Front 12

What protocols can SNS use? (7)

Back 12

HTTP/HTTPS

Email-JSON

Application

SMS

Lambda

Email

SQS

Front 13

Services to load and analyze streaming data, and also providing the ability for you to build custom streaming data applications for specialized needs.

Back 13

Kinesis

Front 14

AWS DB platform most suitable for OLTP

Back 14

RDS/Dynamo DB

Front 15

What happens to the I/O operations while you take a database snapshot

Back 15

I/O is suspended for the duration

Front 16

What are SWF Domains?

Back 16

All the components of a workflow

It is possible to have more than one workflow in a domain; however, workflows in different domains cannot interact with each other.

Front 17

S3 the durability of my files is

Back 17

99.99999999

Front 18

AWS Support Times

Back 18

Critical Urgent High Normal Low

Enterprise 15min 1 4 12 24

Business ---- 1 4 12 24

Developer ---- ------ ----- 12 24

Front 19

Custom VPC Default Communication external and internal

Back 19

By default, an instance in a nondefault VPC is not assigned a public IP address.

When you create new subnets within a custom VPC, by default they can communicate with each other, across availability zones.

Front 20

What HTTP code would indicate that the upload was successful?

Back 20

HTTP 200

Front 21

Which RDS database engines support Read Replicas?

Back 21

Oracle, Aurora, PostGreSql

Front 22

You require a custom Cloud Watch metric to monitor what?

Back 22

Memory Usage

Front 23

URL for the newly created bucket?

Back 23

NVA: http://s3.amazonaws.com/bucket

http://buket.s3.amazonaws.com

Other:
http://bucket.s3-aws-region.amazonaws.com
http://s3-aws-region.amazonaws.com/bucket

Front 24

In a 2-tier architecture what does the web-tier commonly represent in terms of the applications three logical components;

Back 24

UI and Business Intelligence (BI)

Front 25

Which DBs support Multi AZ deployment

Back 25

MySQL, Oracle, PostgreSQL, and Aurora

Front 26

Which DBs support Read Replica

Back 26

MySQL, PostgreSQL, and Aurora

Front 27

Which DBs are ideal for apps with low latency and predictable performance but don't need complex querying like joins or transactions?

Back 27

DynamoDB

Front 28

Which DBs support both document and key-value data models?

Back 28

DynamoDB

Front 29

What is memcached?

Back 29

Memory object caching system

Front 30

What is Redis?

Back 30

In-memory key-value store that supports sets and lists

Front 31

What is ElastiCache?

Back 31

Alternative to disk-based DB; provides fast managed in-memory cache with two engines: memcached and redis

Front 32

Use this instance when you know the amount of usage you will need

Back 32

Reserved Instance

Front 33

If you need an instance 100% of the time, purchase this type of instance

Back 33

Reserved Instance

Front 34

This type of instance is used only when you need an instance at the moment for as long as you need

Back 34

On-demand Instances

Front 35

Type of instance best for non-production instances

Back 35

Spot Instances

Front 36

S3 durability and availability

Back 36

11 9s durability 99.999999

99.99 availability

Front 37

Simple key-value store designed for unlimited object storage

Back 37

S3

Simple Storage Service

Front 38

Best storage choice for "easily reproducible data"

Back 38

RRS

Reduced Redundancy Storage

Front 39

Storage that connects local data center software appliances to AWS S3

Back 39

Amazon Storage Gateway

Front 40

How is data stored on Gateway-cached Volumes

Back 40

Data stored in amazon s3 and will cache frequently access data on-premise in the storage device

Cloud-based storage solution

Front 41

How is data stored in Gateway-Stored Volume

Back 41

Stores all data locally in volumes; takes snapshots of the data and stores them on S3

More of a backup or disaster recovery solution

Front 42

Whats the difference between the two Amazon Storage Gateway types

Back 42

Gateway-cached volumes are cloud-based storage; Gateway-stored volumes are more disaster recovery/backup solution

Front 43

A service to take large amounts of on-premise data and physically transfer it to AWS

Back 43

AWS Import/Export

Front 44

Cheaper alternative to MySQL with better performance

Back 44

Amazon Aurora

Front 45

Alternative to MongoDB

Back 45

Amazon DynamoDB

Front 46

Hadoop clustering tool for big-data analytics

Back 46

Elastic Map Reduce (EMR)

Front 47

Which service guarantees execution of workflows

Back 47

Simple Work Flow Service

(SWF)

Front 48

Which service is used to decouple infrastructure systems

Back 48

Simple Queue Service

(SQS)

Front 49

Which service coordinates and manages the delivery of messages

Back 49

Simple Notification Service

SNS

Front 50

Service to deploy complete application environments Automatically

Back 50

Elastic Beanstalk

Front 51

Service to allows you to "code" your infrastructure and deploy resources based off of pre-built templates

Back 51

CloudFormation

Front 52

What code does CloudFormation use

Back 52

JSON

Front 53

Used for monitoring logs

Back 53

CloudTrail

Front 54

Used for monitoring AWS services

Back 54

CloudWatch

Front 55

Allows the ability to connect on-premise Active Directory

Back 55

Directory Services

Front 56

How many IAM roles can an EC2 instance have?

Back 56

1

Front 57

How do you add/remove IAM roles on an instance?

Back 57

You can't

Front 58

What is the S3 file limit?

Back 58

Unlimited objects/storage, but the file limits are 0 Bytes to 5 TB

Front 59

When to use S3

Back 59

- hosting static files

- Origin for CloudFront CDN

- Hosting static websites

- File shares for networks

- Backup/Archiving (AWS Storage Gateway)

Front 60

Where are snapshots stored?

Back 60

S3

Front 61

Where can you view snapshots?

Back 61

EC2

Front 62

Public IP vs Elastic IP

Back 62

The public IP you get when an instance is created is ephemeral. If you stop that instance, when you start it up you'll get another random public IP; could be same, could be different.

Elastic IP is "permanent" in the sense that you own it and you associate it to a specific AWS instance ID.

Front 63

To get NAT to work on a NAT instance what must you disable?

Back 63

Source/Destination check must be disabled on NAT instance

Front 64

What is a DB Subnet Group in RDS

Back 64

When you add an RDS instance to VPC, you need a subnet group:

3 Subnets located in 3 different AZs

Front 65

DB Security Group

Back 65

Was used in RDS for EC2 Classic; now RDS just uses VPC Security groups

Front 66

How can you keep a CloudFormation resource from being deleted by default?

Back 66

Configure "Retain" deletion policy:

{ "AWSTemplateFormatVersion" : "2010-09-09", "Resources" : { "myS3Bucket" : { "Type" : "AWS::S3::Bucket", "DeletionPolicy" : "Retain" } }}

If a resource has no DeletionPolicy attribute, AWS CloudFormation deletes the resource by default.

Front 67

Configure linux Bastion Host

Back 67

Configure the security group on the bastion to allow SSH connections (TCP/22) only from known and trusted IP addresses.

Front 68

Connect via Bastion Host

Back 68

ssh -A user@BastionIPAddress

Then

ssh user@Instance

Front 69

Proactive Cycle Scaling

Back 69

Scaling that occurs at a fixed Interval

Front 70

Proactive Event-based Scaling

Back 70

Scaling that occurs in antiicpation of event

Front 71

Amazon Elastic Transcode

Back 71

Create a transcoding pipeline that specifies the input Amazon S3 bucket, the output Amazon S3 bucket, and an AWS IAM role

Create a transcoding job by specifying the input file, output files, and transcoding presets to use

Optionally, you can specify thumbnails and job specific transcoding parameters like frame rate and resolution.

Front 72

Route 53 Resource Types

Back 72

A SOA

AAAA SPF

CNAME SRV

MX TXT

NS

PTR

Front 73

Route 53 Conditional Routing Types

Back 73

Health Check, WRR (weighted round robin), LBR (latency-based routing) and Geolocation routing.

Front 74

What is GeoLocation

Back 74

Resource record for public hosted sites; set these attributes Location and Sublocation

Front 75

When should you use export/import?

Back 75

If data tx will take longer than one week.

Front 76

Can I monitor the network traffic in my VPC?

Back 76

You can use the Amazon VPC Flow Logs feature to monitor the network traffic in your VPC

Front 77

How do you create a peering connection to a VPC in a different Region?

Back 77

You can't; peering VPCs must be in the same region

Front 78

Health Check Protocols

Back 78

TCP, HTTP, HTTPS, and SSL

Front 79

Explain Simple Routing Policy

Back 79

Use a simple routing policy when you have a single resource that performs a given function for your domain,

Ex: one web server that serves content for the example.com website.

Front 80

Explain Weighted Routing Policy

Back 80

Use the weighted routing policy when you have multiple resources that perform the same function (for example, web servers that serve the same website) and you want Amazon Route 53 to route traffic to those resources in proportions that you specify

Front 81

Latency Routing Policy

Back 81

you have resources in multiple Amazon EC2 data centers that perform the same function and you want Amazon Route 53 to respond to DNS queries with the resources that provide the best latency.

(You can create latency resource record sets using any record type that Amazon Route 53 supports except NS or SOA.)

Front 82

Failover Routing Policy

Back 82

(Public Hosted Only)

Use the failover routing policy when you want to configure active-passive failover, in which one resource takes all traffic when it's available and the other resource takes all traffic when the first resource isn't available.

Front 83

Geolocation Routing Policy

Back 83

Use the geolocation routing policy when you want Amazon Route 53 to respond to DNS queries based on the location of your users.

You can specify geographic locations by continent, by country, or by state in the United States:

priority goes to the smallest geographic region

Front 84

DNS Active-Active Failover

Back 84

Use this failover configuration when you want all of your resources to be available the majority of the time. When a resource becomes unavailable, Amazon Route 53 can detect that it's unhealthy and stop including it when responding to queries.

Front 85

DNS Active-passive Failover

Back 85

Use this failover configuration when you want a primary group of resources to be available the majority of the time and you want a secondary group of resources to be on standby in case all of the primary resources become unavailable.

Front 86

Active-active-passive and other mixed configurations:

Back 86

You can combine alias and non-alias resource record sets to produce a variety of Amazon Route 53 behaviors.

Front 87

Route 53 Failover

Back 87

You create a group of resource record sets that all have the same name and type.

You then configure Amazon Route 53 to check the health of the corresponding resources. Amazon Route 53 responds to DNS queries based on the health of your resources.

Front 88

Cloudwatch monitoring

Back 88

Basic Data is available automatically in 5-minute periods at no charge.

Detailed Data is available in 1-minute periods at an additional cost

Front 89

Kenisis Firehose

Back 89

Amazon Kinesis Firehose is the easiest way to load streaming data into AWS.

It loads the Delivery Stream data into Amazon S3 and Amazon Redshift enabling real-time analytics

Front 90

Kenisis Streams

Back 90

Amazon Kinesis Streams allows for real-time data processing.

With Amazon Kinesis Streams, you can continuously collect data as it is generated and direct it towards EC2 instances

Front 91

What are the two types of Directory Services

Back 91

Simple AD

AWS Directory Service for Microsoft Active Directory (Enterprise Edition)

Front 92

When do you use Simple AD

Back 92

best choice if you have 5,000 or less users and don’t need the more advanced Microsoft Active Directory features.

Front 93

AWS Directory Service for Microsoft Active Directory (Enterprise Edition)

Back 93

Microsoft AD is your best choice if you have more than 5,000 users and need a trust relationship set up between an AWS hosted directory and your on-premises directories.

Front 94

What Record Type for

1 - CloudFront CDN

2 - ELB

3 - EC2 Instance

4 - Website in an S3 Bucket

5 - RDS Database

6 - Workmail

Back 94

1 - CloudFront CDN - ALIAS

2 - ELB - ALIAS

3 - EC2 Instance - A Record

4 - Website in an S3 Bucket - ALIAS

5 - RDS Database - CNAME

6 - Workmail- MX

Front 95

Route 53 Rules

Back 95

1) Do not CNAME your root domain.

2)Do not use A records for www.domain.com

3) Always redirect your naked domain.com to www.domain.com.

Front 96

What types of data are encrypted on an EBS volume

Back 96

Data at rest in the volume

All snapshots created from the volume

All disk I/O

Front 97

DynamoDB Client Side

Back 97

DynamoDB is available as a free, downloadable client-side application that you can run on your own computer.

This edition of DynamoDB lets you write applications that use the DynamoDB API, but without actually using the Amazon DynamoDB web service.

Front 98

Launch Configuration Rules

Back 98

- Singlelaunch configuration with Multiple Auto Scaling groups.

- Auto Scaling group can ONLY have 1 Launch Config Rule

-you CANT MODIFY a launch configuration after you'vecreated it.

Front 99

Launch Config items (5)

Back 99

- ID of the AmazonMachine Image (AMI)

- the instance type

- a key pair

- one or more security groups

- block devicemapping.

Front 100

Auto Scaling group items (4)

Back 100

- you must specify a name

- launch configuration

- minimum numberof instances

- maximum number of instances.

Front 101

What is an AD Connector

Back 101

AD Connector is a proxy service for connecting your on-premises Microsoft Active Directory to the AWS cloud without requiring complex directory synchronization or the cost and complexity of hosting a federation infrastructure.

Front 102

When should you use AD Connector

Back 102

When to useAD Connector is your best choice when you want to use your existing on-premises directory with AWS services.

Front 103

ENI behavior on termination. Diff between console created and cli created

Back 103

By default, elastic network interfaces that are automatically created and attached to instances using the console are set to terminate when the instance terminates.

However, network interfaces created using the command line interface aren't set to terminate when the instance terminates.

Front 104

What happens when an RDS runs out of storage?

Back 104

When an RDS DB instance reaches the STORAGE_FULL state, there is not enough space available for performing basic operations, eventually preventing you to make connections or restart the instance.

Front 105

Tag rule on RDS Resources

Back 105

If you add a tag to an Amazon RDS resource that has the same key as an existing tag on resource, the new value overwrites the old value.

A tag set can contain as many as ten tags, or it can be empty.

Front 106

RDS data charges between primary and standby

Back 106

Data transfer – You are not charged for the data transfer incurred in replicating data between your primary and standby.

Front 107

Amazon VPC provides three features that you can use to increase and monitor the security for your VPC:

Back 107

Security groups

Network access control lists (ACLs)

Flow logs