AWS Overall

 0    51 schede    pablojakub
Scarica mp3 Stampa Gioca Testa il tuo livello
 
Domanda Risposta
3 types of computing options in AWS
inizia ad imparare
virtual machines, serverless, container services
What is AWS VPC?
inizia ad imparare
This is virtual private cloud. Isolated network.
What do you need to configure to make resources from VPC available from internet?
inizia ad imparare
internet gateway
What can you use to connect your on premises data center with VPC?
inizia ad imparare
AWS Direct Connect
How many VPC you can have in one region
inizia ad imparare
Many, but you cannot have one per two regions
T/F If you create VPC AWS creates main route table that enables flow between subnets
inizia ad imparare
True
What two security measures you have within VPC
inizia ad imparare
network ACL (access control list), security groups
By default security groups on EC2 instance
inizia ad imparare
blocks all inbound traffic and allow outbound traffic
T/F active-active systems are good for stateful application
inizia ad imparare
False, There will be issue if the session for example is not available on both servers
What is needed to create in order to set up Load Balancer?
inizia ad imparare
Target group
what are components of load balancer?
inizia ad imparare
Rules, listeners and target groups
What are 3 components to make EC2 autoscalling
inizia ad imparare
Launch template, Scaling groups and Scaling policies
ACL are (specify 3)
inizia ad imparare
stateless, one-way routing rule, allow all by default
What is the difference between Spot Instance and on-demand instance?
EC2
inizia ad imparare
Spot instance doesn't guarantee it will be running long enough to finish workloads
which seevice allows you to create update or delete stacks across multiple accounts and regions
inizia ad imparare
AWS CloudFormation StackSets
Jaka jest główna różnica międzmiędzy CloudForm Function i Lambda Edge?
inizia ad imparare
CloudFront Function jest do lekkich rzeczy jak podstawowa autoryzacja, Czy manipulacja nagłówkami lambda edge jest do bardziej złożonych operacji i bardziej dużo wyższa latency
Wymień trzy wymagane pola dla ECS w sekcji Resources w CodeDeploy.
inizia ad imparare
Container name, container port, task definition
Do czego służy Cluster Query Language?
inizia ad imparare
It is used to group container instances by attributes.
Jakie dwa rodzaje deploymentu wspiera CodeDeploy?
inizia ad imparare
Blue/green and in place.
Jeśli mamy SSE-KMS Encryption, to jakie nagłówki powinniśmy dać z wartościami?
inizia ad imparare
x-amz-server-side-encryption: aws: kms
How many concurrent execution will Lambda have from Kinesis stream?
inizia ad imparare
The same number as the amount of shards.
What two requirements should be met in order to enable cross-region replication for S3?
inizia ad imparare
The running should be enabled and S3 buckets should have proper privileges.
Which feature enables you write once, read many pattern in S3?
inizia ad imparare
Amazon S3 Object Lock
Which header allows you to cache S3 response for preflight options?
inizia ad imparare
MaxAgeSeconds
Jakie rodzaje integracji oferuje API Gateway wymień 4
inizia ad imparare
lambda Proxy, lambda custom, http Proxy, http
jaka jest różnica między vpc link i vpc endpoint
inizia ad imparare
VPC link directs from clients TO VPC. VPC endpoint direct from VPC TO OUTBOUND
jakie mamy dwa rodzaje w VPC endpoint
inizia ad imparare
interfaces endpoint and Gateway endpoint
do jakich serwisów łączy się Gateway endpoint
inizia ad imparare
S3 i DynamoDB
T/F interfejs and point jest darmowy a Gateway and point jest płatny
inizia ad imparare
false the other way around
Jak połączyć ze sobą dwie prywatne podsieci
inizia ad imparare
through VPC peering
t/f lambda domyślnie znajduje się w twojej prywatnej podsieci
inizia ad imparare
false lambda is within w VPC created by AWS
T/F. Elastic Beanstalk ma kanary jako deployment type.
inizia ad imparare
False.
Co robi AWS Appsync?
inizia ad imparare
Real-time data synchronization with conflict resolution between devices.
Can Amazon RDS scale seamlessly?
inizia ad imparare
Now for this purpose DynamoDB is goto.
Jakie są dwie przyczyny, dla których możesz mieć zduplikowane rekordy aplikacji z Kinesis Data Stream?
inizia ad imparare
Producer retries or consumer retries
Jakie dwa tryby (capacity mode) ma Kinesis Data Stream?
inizia ad imparare
Provision mode when you declare the number of shards and on-demand mode where AWS manages scalability and the default value at the beginning is 4 shards.
True or False, AmazonDataFireHose Retains data for 24 hours.
inizia ad imparare
False. This is true for Kinesis data stream. FireHose deletes data as soon as it's delivered.
Jakie mamy dwie opcje konfiguracji Amazon Kinesis DataStream?
inizia ad imparare
Standard-pull based and enhanced fanout which is push based and more expensive.
Co oznacza model architektoniczny FUNOUT?
inizia ad imparare
One sender and many receivers.
True or false, all Kinesis services is an At least once delivery service
inizia ad imparare
True
Co jest niezbędnym "tłumaczem" w pliku SAM, bez którego CloudFormation nie zrozumie skróconych definicji takich jak AWS: Serverless: Function?
inizia ad imparare
Transform section
Wartość: AWS: Serverless-2016-10-31. Gdzie: Zawsze na samej górze szablonu. Efekt: Zamienia (expanduje) zasoby SAM na pełne definicje CloudFormation.
Co się stanie, jeśli w typie użyję AWS: Lambda: Function zamiast AWS: Serverless: Function?
inizia ad imparare
There will be no sum validation.
True or false, if stack B imports value from stack A, AWS will let you delete stack A
inizia ad imparare
False. You need to first delete stack B.
Jaka jest różnica między NAT Gateway a Internet Gateway?
inizia ad imparare
NetGateway ma kierunek jednokierunkowy, tylko atbound. Internet Gateway ma dwukierunkowy. NetGateway jest zarządzany przez AWS. Internet ma wysoką dostępność. NAT jest płatny
Ile wynosi limit operacji API kms: encrypt
inizia ad imparare
4KB
KMS: Szyfrowanie kopertowe – tryb natychmiastowy
inizia ad imparare
GenerateDataKey
Zastosowanie: Twoja aplikacja chce od razu zaszyfrować plik.
KMS: Szyfrowanie kopertowe – separacja uprawnień / odroczone szyfrowanie
inizia ad imparare
GenerateDataKeyWithoutPlainText
Zastosowanie: Komponent A tworzy klucz dla Komponentu B (B musi go sam odszyfrować przed użyciem). Kluczowe słowo: "Security best practice" (minimalizacja przesyłania jawnego klucza przez sieć).
what to use if you want to have additional data and more flexible data about events
inizia ad imparare
destination event
normally you would use dead letter queue
czym są ephemeral data storage dla EC2
inizia ad imparare
instance store they are Ultra fast but lost after stopping instance
co musisz zrobić jeśli chcesz połączyć appi Gateway z DynamoDB
inizia ad imparare
you need to specify AWS integration service inside API Gateway
Jak się nazywa język dla mapping template
inizia ad imparare
velocity template language

Devi essere accedere per pubblicare un commento.