Architecture

Question 1

What are the differences between Kinesis Data Streams and Firehose

Answer 1

• Data Streams is a low latency streaming service in AWS Kinesis with the facility for ingesting at scale.
• Kinesis Firehose aims to serve as a data transfer service.
• Users must employ manual configuration for shards to ensure proper provisioning of KDS.
• Kinesis Data Firehose comes forward as a fully managed service.
• In the case of data streams, you can configure data storage for holding data from one to seven days.
• Firehose does not provide any facility for data storage.
• Kinesis Data Streams supports real-time processing.
• Kinesis Data Firehose features near real-time processing.

Question 2

In which frequency does Trusted Advisor evaluate your AWS environment?

Answer 2

Trusted Advisor continuously evaluates your AWS environment

Question 3

How does AWS Trusted Advisor help you?

Answer 3

• optimize costs,
• increase performance,
• improve security and resilience,
• operate at scale in the cloud.

Question 4

How can you Identify Amazon EC2 instances with low-utilization, and reduce cost by stopping or rightsizing?

Answer 4

Use AWS Cost Explorer Resource Optimization to get a report of Amazon EC2 instances that are either idle or have low utilization.

Question 5

How can AWS support your MQTT implementation?

Answer 5

AWS IoT Core is a fully managed service that lets you connect billions of IoT devices and route trillions of messages to AWS services.

Amazon MQ supports industry-standard messaging protocols like AMQP and MQTT.

Question 6

What is Amazon MQ

Answer 6

Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ.

Question 7

What are Amazon MQ use cases?

Answer 7

• Low-latency event messaging
• Migrate with flexible configurations
• Invoke AWS Lambda functions

Question 8

What is the AWS service recommended when you want to build an application that reacts to events from SaaS applications and/or AWS services.

Answer 8

Amazon EventBridge is recommended when you want to build an application that reacts to events from SaaS applications and/or AWS services.

Question 9

What is the main purpose of SNI?

Answer 9

The main purpose of SNI is to facilitate virtual hosting for secure connections (HTTPS). With SNI support AWS makes it easy to use more than one certificate with the same ALB.

Question 10

What is SNI?

Answer 10

SNI stands for Server Name Indication (SNI)

Question 11

The following are supported as CloudWatch alarm actions.

Answer 11

• SNS
• Lambda function.
• EC2 actions, such as stopping
• Auto Scaling group actions
• Create OpsItems in Systems Manager Ops Center or create incidents in AWS Systems Manager Incident Manager.

Question 12

Which performs best to migrate hundreds of terabytes AWS DataSync, File Gateway or S3TA?

Answer 12

1. AWS DataSync: DataSync is a data transfer service specifically designed for efficient large-scale data transfers. It utilizes parallel data transfer streams and employs optimizations such as bandwidth throttling and automatic recovery from failures, making it highly performant for large data migrations.
2. File Gateway is a part of the AWS Storage Gateway service, which enables on-premises applications to seamlessly use AWS cloud storage.
3. S3TA is a feature of Amazon S3 that optimizes data transfers over long distances or poor network conditions.

Question 13

By default, is cross-zone load balancing is enabled for Application Load Balancer and for Network Load Balancer?

Answer 13

By default, cross-zone load balancing is enabled for Application Load Balancer and
disabled for Network Load Balancer

Question 14

Which storage services on the cloud can be directly loaded from AWS Snowball Edge ?

Answer 14

• Amazon S3 (Simple Storage Service)

Question 15

What Account management tasks that require root credentials?

Answer 15

• Change your account settings.
• Restore IAM user permissions.
• Close your AWS account.

Question 16

What Billing Tasks that require root credentials?

Answer 16

• Activate IAM access to the Billing and Cost Management console.
• View certain tax invoices.

Question 17

What Amazon Simple Queue Service Task require root credentials?

Answer 17

• Edit or delete an Amazon SQS resource policy that denies all principals.

Question 17

What Amazon Simple Storage Service Tasks require root credentials?

Answer 17

• Configure an Amazon S3 bucket to enable MFA (multi-factor authentication).
• Edit or delete an Amazon S3 bucket policy that denies all principals.

Question 18

What are AWS Storage Gateway solutions?

Answer 18

File Gateway: NFS; SMB; 64TB local cache;
Volume Gateway (cached): iSCSI; 32 volumes; 32tb cache
Volume Gateway (stored): iSCSI; 32 volumes; 16tb cache;
Volume Gateway (tape): iSCSI; Glacier

Question 19

Whats are the services covered by AWS Firewall Manager​

Answer 19

• AWS WAF
• AWS Shield Advanced
• Amazon VPC security group
• Amazon VPC network ACL
• AWS Network Firewall
• DNS Firewall
• Palo Alto Networks Cloud Next Generation Firewall
• Fortigate CNF

Question 20

How do we choose Redis or memcached?

Answer 20

Redis
- Advanced data structures
- Snapshots
- Replication
- Pu/Sub
- Geospatial
- Lua support
Memcached
- Multithreaded architecture

Question 21

What are the default, minimum and maximum values for SQS visibility timeout?

Answer 21

Default: 30 seconds
Minimum: 0 seconds.
Maximum: 12 hours.

Question 22

Which service helps you save development time and deployment costs when using common message patterns such as request-response?

Answer 22

Temporary queues

Question 23

What are the ideal storage for Electronic Design Automation (EDA)?

Answer 23

• FSx for NetApp Ontap
• FSx for Lustre

Question 24

How CloudFront can help with resiliency?

Answer 24

Amazon CloudFront offers an origin failover feature to help support your data resiliency needs.

Question 25

Which service enables fast regional failover?

Answer 25

AWS Global Accelerator

Question 26

What are the SQS FIFO throughputs?

Answer 26

- up to 3,000 messages per second with batching - up to 300 messages per second without batching. - up to 70,000 messages per second without batching (high throughput mode)

Question 27

What are AWS Global Accelerator benefits?

Answer 27

- Improve network performance for your applications by up to 60%. - Protect your applications from DDoS attacks closer to the source. - Simplify allowlisting in enterprise firewalling and IoT use cases. - Route traffic to the nearest Region or achieve fast failover across Regions.

Question 28

Amazon S3 Transfer Acceleration can speed up content transfers to and from Amazon S3 by:

Answer 28

as much as 50-500% for long-distance transfer of larger objects.

Question 29

How should I choose between S3 Transfer Acceleration and Amazon CloudFront’s PUT/POST?

Answer 29

**CloudFront's PUT/POST** commands if: - Objects that are smaller than 1 GB or if - The data set is less than 1 GB in size

Question 30

Which one requires the LEAST operational overhead: Transit Gateway or Transit VPC?

Answer 30

Transit Gateway