Final-FR

Question 1

Aurora

Answer 1

• Storage grows incrementally from 10GB to 128TB
• Pay per second
• Serverless
• Infrequent, intermittent or unpredictable workloads
• OLTP

Question 2

RDS

Answer 2

• Managed Service: No SSH
• Restore to a specific timestamp
• Backed by EBS
• OLTP

Question 3

Redshift

Answer 3

• OLAP
• Load Every Hour (MPP), massively parellel query Execution
• Pay as you go
• DataWarehousing
• Serverless

Question 4

DocumentDB

Answer 4

• MongoDB
• Replication across 3 AZs
• Storage grows incrementally in 10 GB

Question 5

DynamoDB

Answer 5

• Serverless database: No capacity planning, replication, sw patching or cluster scaling
• Low latency retreival
• Standard and IA access class

Question 6

DynamoDB Global Tables

Answer 6

• Active-Active replication

Question 7

AWS EMR

Answer 7

• Hadoop (Instance clusters) big data to analyse and process
• Integrated with spot instances
• Apache Spark

Question 8

AWS Glacier retreival times

Answer 8

• Flexible Retreival: 5-12 hours
• Deep Archive: Standard: 12 hrs and bulk: 48 hrs

Question 9

Cloudwatch

Answer 9

1. Metrics -> Timestamps
2. Alarms are triggered by metrics
3. Logs: EC2 logs need a cloudwatch logs agent to have it pushed to cloudwatch

Question 10

How does Cloudtrail work

Answer 10

• On by default
• SDK, CLI, AWS services, trails can be applied to all regions (default)

Question 11

EFS

Answer 11

• configure file systems quickly and easily

Question 12

Cloud HSM vs KMS

Answer 12

• Cloud HSM: Keys that require having full control
• KMS: Ease of use

Question 13

CloudFormation

Answer 13

• IaC
• Create and manage a collection of AWS resources
• provision and update them in an orderly predicatble fashion

Question 14

Elastic Beanstalk

Answer 14

• automatically provision resources
• its more about deploying and scaling
• PaaS

Question 15

IAM credentials report

Answer 15

• Account level
• A report that lists all your account’s users and the status of their credentials

Question 16

IAM Access Analyzer

Answer 16

• User level
• Service permission granted to a user
• When they were last accessed
• Use this to revise your policies

Question 17

AWS Config

Answer 17

• Audit and record compliance of AWS resources
• You can view configuration, compliance and changes over time
• Is there unrestricted SSH Access
• Do my buckets have public Access
• How had my ALB changed over time
• You can receive alerts for any change
• Per-region service
• Aggregate -> Across regions and accounts
• View cloudtrail API calls

Question 18

AWS Inspectors

Answer 18

• Only for EC2, Container Images and Lambda functions

Question 19

AWS X-Ray

Answer 19

• Troubleshoot performance (Bottlenecks)
• Understand dependencies
• Pinpoint issues
• Review request behavior
• Find errors and exceptions
• Are we meeting SLA

Question 20

Amazon Detective

Answer 20

• Analyze, investigate and identiy ROOT cause of security issues
• VPC Flow Logs, CloudTrail, GuardDuty