SysOps Associate Exam Flashcards

(175 cards)

1
Q

What services can CloudWatch Monitor?

A
EC2 instances
EBS volumes
Elastic Load Balancers
Auto Scaling groups
EMR job flows
RDS DB instances
DynamoDB tables
ElastiCache clusters
RedShift clusters
OpsWorks stacks
Route 53 health checks
SNS topics
SQS queues
SWF workflows
Storage Gateways.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What EC2 Metrics can CloudWatch monitor by default?

A

CPU
Network
Disk
Status Check

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Can CloudWatch Monitor Ram (memory) by default?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the default monitoring interval of CloudWatch?

A

5 minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Enabling this level of monitoring allows CloudWatch to monitor every minute instead of the default 5.

A

Detailed Monitoring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When can CloudWatch Detailed Monitoring be turned on?

A

At launch or after the instance is running or stopped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

By default, how far back will CloudWatch show metrics in the console?

A

2 weeks after a metric is last ingested

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How can I get CloudWatch metric data older than 2 weeks?

A

Use GetMetricStatistics API call

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How long are EC2 and ELB metrics available after termination?

A

2 weeks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can CloudWatch default metrics be any less than 1 minute?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

List the two types of EC2 status checks

A

System Status Check

Instance Status Check

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How do you repair an EC2 System Status Check?

A

Stop and Start to resolve the issue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How do you repair an EC2 Instance Status Check?

A

Reboot the instance to resolve the issue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How many IOPS/GiB can an General Purpose SSD provide?

A

3 IOPS/GiB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the maximum volume size and IOPS of a General Purpose SSD?

A

16 TiB

10,000 IOPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

EBS volume can consume _% to __% of IOPS when attached for the first time to an instance.

A

5% to 50%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Do new EBS volumes need to be pre-warmed?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

(Outdated but potentially important)

How can you pre-warm a new EBS volume?

A

Write to all blocks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How can you pre-warm an existing EBS volume with data in it from S3?

A

Read all blocks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

EBS _____________ Metrics show how many read/write request in queue which can slow down performance.

A

volumeQueueLength

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

EBS Queue length should be ______if this is more, then upgrade to more ______.

A

Zero

IOPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the 4 EBS Volume status checks?

A

Ok
Warning
Impaired
Insufficient Data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

[EBS Volume Status Checks]

What does the EBS volume status ‘OK’ mean?

A

EBS Volume is normal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

[EBS Volume Status Checks]

What does the EBS volume status ‘Warning’ mean?

A

EBS Volume is Degraded or Severely Degraded

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
[EBS Volume Status Checks] | What does the EBS volume status 'Impaired' mean?
EBS Volume is Stalled/Not Available
26
[EBS Volume Status Checks] | What does the EBS volume status 'Insufficient Data' mean?
Insufficient Data on EBS Volume
27
What two ways can RDS metrics be monitored?
Cloudwatch | RDS Events
28
What are the 8 key RDS metrics?
``` DatabaseConnections DiskQueueDepth FreeStorageSpace ReplicaLog ReadIOPS WriteIOPS ReadLatency WriteLatency ```
29
How frequently does ELB report metrics by default?
Every minute
30
Does ELB report metrics if there is no traffic?
No
31
What are the two key ELB metrics?
SurgeQueueLength | SpillOverCount
32
What is the ELB metric SurgeQueueLength?
No. of requests pending for submission
33
What is the ELB metric SpillOverCount?
No. of requests that got rejected when queue was full
34
What are the two types of Elasticache?
Memcache | Reddis
35
Memcache is _________ and can handle a CPU load of up to __%.
Multithreaded | 90%
36
Reddis is _________ and can only handle a low CPU utilization of ___%
Not Multithreaded | (90/no. of nodes)%
37
Swap Usage is the amount of ______ file usage
Swap
38
Swap size = _____ size
RAM
39
Memcache swap use should be __ Mb but not more than __Mb
0; 50
40
If Memcache swap size is greater than 50Mb what API call should you check?
memchached_connections_overhead
41
Reddis uses _____ memory which means what?
Reserve memory; No swap usage metrics
42
General rule of Evictions in Elasticache says if a _____ item is added then an ____ item must be removed.
new item; old item;
43
To handle evictions for Memcache, how should you scale?
Scale up | Scale out
44
How do you decide you eviction threshold with Memcache?
Based on your application
45
To handle evictions for Reddis, how should you scale?
Scale Up
46
How do you decide you eviction threshold with Reddis?
There is no standard threshold
47
If there is a concurrent Connection issue with Memcache and/or Reddis, what does this indicate?
Large traffic spike or application is not releasing connection
48
Which services offer root access?
Elastic Beanstalk EMR EC2 Opswork
49
To handle a sudden spike in ELB, you need to contact AWS support with what details?
Timeline Requests/Second Request/Response Size
50
OpsWork consists of ________ and ________.
Stacks; Layers
51
OpsWorks runs on _____.
Chef
52
In OpsWork, layers contain AWS resources such as...
EC2 ELB RDS
53
In OpsWork, layers are like _____, ______, and _______ layer.
Web; Application; Database
54
In OpsWork, each stack will have how many layers?
1 or more
55
What are the preconfigured layers in OpsWork?
Application Database Load Balancers Caching
56
What happens to any EC2 instance added outside of the OpsWork stack in ELB?
OpsWork will remove
57
How can you simulate a CloudWatch Alarm?
Use the CLI to trigger an alarm
58
What are the three CloudWatch alarm states?
OK ALARM INSUFFICIENT_DATA
59
What does the CloudWatch Alarm state 'OK' mean?
Metrics is within threshold
60
What does the CloudWatch Alarm state 'ALARM' mean?
Metrics is outside of threshold
61
What does the CloudWatch Alarm state 'INSUFFICIENT_DATA' mean?
Not enough data available
62
What is the only way you can temporarily disable a CloudWatch Alarm?
Using the CLI
63
CloudWatch doesn't have Aggregate metrics available. Instead it has which five metrics?
``` average min max sum data samples ```
64
What do you need to enable first before you can setup a billing alarm on CloudWatch?
Billing Alert
65
What is the default timestamp in CloudWatch and how can you change it?
UTC; | Change it to local timezone in the console
66
CloudWatch detailed monitoring is not available for which services?
EMR and SNS
67
To send your own metrics to cloudwatch, use the ____________ command with __________ parameter.
put-metrics-data | statics-value
68
In CloudWatch, the size of HTTP GET request is __ and POST request is ____ and it is mandatory to pass what?
8KB 40KB Mandatory to pass namespace
69
[Review Question] | When sending metrics to Cloudwatch it can have ___ weeks past time stamp and ____ hours future time stamp.
2 week; 2 hours
70
If you are sending metrics to CloudWatch and there is no timestamp, what will CloudWatch mark the timestamp as?
In case of no timestamp , CloudWatch will mark timestamp as current timestamp
71
To find exact time data in CloudWatch, the user can use what to get an exact time range?
'Absolute' tab under CloudWatch
72
You can publish your own metrics in CloudWatch by using API or CLI by supplying what?
The file as an input command
73
How can you see more granular data in CloudWatch?
Select interval using the mouse
74
You can aggregate CPU utilization data in cloudwatch by....
AMD ID
75
What is the CloudWatch end point format for zone us-east-1?
monitoring.us-east-1.amazonaws.com
76
If you delete your ELB then what will happen to your registered EC2 instances?
They will keep running
77
What is the ELB connection draining default timeout?
300 seconds
78
What is the max ELB connection draining timeout?
3600 seconds (1 Hour)
79
What do you have enable for ELB in an auto scaling group so that autoscaling can terminate an unhealthy instance?
Health Check
80
What happens if you try to schedule two auto scaling processes at one?
It won't allow you to schedule the second and will throw a conflict error.
81
Autoscaling process will be suspend if it can not launch resource in ____ hours.
24 hours
82
If you suspend termination then Auto scaling can grow __% beyond max instance size due to AZ rebalance.
10%
83
In Auto Scaling, if AddToELB is suspended, what will happen if you add an EC2 instance?
Instance will not register with ELB and user have to register them manually after resume.
84
Which three services offer free detail monitoring?
Auto Scaling ELB Route 53
85
AutoScaling will ______ the unhealthy instance first and then ______ the new instance.
Terminate; Launch
86
You can add more subnets in ELB while it is running using what command?
elb-enable-availability-zone-for-load-balancer
87
To avoid new instance launch during reboot from Auto Scaling you need to use what auto scaling command to change the instance state to healthy?
set-instance-health
88
If detailed monitoring is disabled for an current auto-scaling group, how would you enable it?
The user will need to define new launch configuration group with detail monitoring enable and attach it to ASG.
89
ELB has _______________ check which will ensure if one region fails then hop request to another region.
evaluate target health
90
ELB's ____________ command can log client IP addresses so you can filter traffic using particular ip address if required .
x-forwarded-for
91
ELB creates __ security group by default for EC2-VPC however EC2-classic creates __ security group by default.
1; 2
92
What do you need to define during AMI creation?
You need AWS account ID X.509 certificate with private key AWS account access key id/secret access key.
93
During AMI creation you don't need to define the AMI _______.
AMI launch permission
94
For EC2-Classic, Elastic IP (EIP) gets _________ when you stop it.
disassociated
95
For EC2-VPC, what happens to the Elastic IP (EIP) when you stop the instance?
It remains attached
96
How many Elastic IPs can you have per region?
5
97
What happens if you connect to an EC2 instance but enter the wrong user id?
EC2 throws a "host key not found" error if you enter wrong user id.
98
If an EC2 instance gets terminated, where can you find the reason for the termination
Under "state transition reason" property in the console
99
[True or false] | Taking snapshot of a EBS volume can cause performance issue due to increase I/O.
True
100
A user can set which attribute to avoid accidental termination of EC2. instance?
DisableApiTermination
101
EC2 Optimized EBS instances are just instances with what?
A "dedicated" connection to EBS volumes
102
CloudFormation has capability to add bootstrap scripts to an EC2 instance while spinning up but you can not configure a ______ using it.
service
103
During an AMI copy AWS does not copy what?
launch permission user defined tags Amazon S3 bucket permissions
104
A windows based instance store backed AMI can or can't be converted to EBS backed AMI.
can't be converted to EBS backed AMI.
105
For a Windows instance, the instance console output displays how many of the last system events log errors.
3
106
S3 ACL permission [can/cannot] be provided to an individual IAM user
cannot
107
In S3, if you don't want to use the AWS provided AES-256 encryption then you need to send what with each API call?
You need to send encryption key and algorithm
108
Can you have different encryption for different versions of same object?
Yes
109
In S3, what can you use to see storage and access pattern to identify less frequent storage?
S3 storage analytics
110
S3 bucket policies will provide what level access to all objects in bucket by default?
bucket level access
111
How do you enable folder upload in S3?
Enable enhanced upload option from S3 console
112
Once you restore object from Glacier, will its object class change?
Object class always going to stay as Glacier and will not change to RRS or IA.
113
When creating event for RDS Snapshots, what event categories are available?
creation deletion notification restoration
114
[True/False] | You can enable/disable a event from console to stop notifications temporarily .
True
115
What is the default maintenance window for RDS if the user has not provided one?
30 minutes
116
What will AWS use default maintenance windows on RDS for?
Security patching and scale operation only
117
Can a PostgreSQL read replica be cross region?
No
118
Can a MySQL read replica be cross region?
Yes
119
Creating a read replica for RDA can impact minor performance due to suspension of what during snapshot creation?
IO
120
For MySQL always use _____ engine for better backup and restore.
InnoDB
121
______ for MySQL does not support reliable crash recovery mechanism.
MyISAM
122
The three RDS metrics in Cloudwatch are...
DiskQueueDepth (should be 0) Write Latency Replica log
123
How do you implement failover for hardcoded IP addresses inside of a VPC?
Create a secondary ENI and assign a secondary private IP address to primary ENI that can be move to failover instance.
124
CloudFormation uses ________ to resolve dependency between resource creation.
wait condition
125
Can you delete an SQS queue if it has a message in it?
Yes
126
What happens to the messages in an SQS queue if you delete the queue.
All message will get deleted automatically.
127
SQS queue sample URL is :
https://sqs.us-east-1.amazonaws.com/789211807855/myfirstqueue
128
In case of inactivity in SQS, AWS will delete it after __ days.
30
129
How many tags per resource are allowed?
50
130
What is the max value of a tag?
255 characters
131
Are key values case sensistive?
Yes
132
In a tag, what prefix is reserved?
aws:
133
How could a user setup his own billing management?
Setting up programmatic access to aws billing and parse that according to his need.
134
______ account send request to _____ account to make them part of consolidated billing.
Payee; link
135
You can add up to ___ DNS in DHCP along with domain name.
4
136
An account can have ___ groups.
100
137
An account can have ___ users.
500
138
An account can have ___ roles.
250
139
Does CloudWatch aggregate data across regions?
No, metrics are completely separate between regions.
140
If you manage resources in multiple regions, you can create a ___________ to view resources from different regions on the same screen.
resource group
141
Do you have to wait for a snapshot to finish before using it?
No
142
Which SSL protocols does AWS ELB support?
TLS 1.0 TLS 1.1 TLS 1.2
143
True or False: There is a surcharge when using Enhanced Networking with EC2.
False
144
True or False: New changes to IAM allow you associate an email address with any IAM user.
False
145
``` Which of the following are valid IAM access keys? Public Access Key Private Access Key Secret Access Key Access key ```
Secret Access Key | Access key
146
You have set CloudWatch billing alarms for your instances running in eu-west-2. However, when you try to access the billing information and alarms, no information is visible. Why might this be?
Billing and Alarm data can be accessed only from the us-east-1 region.
147
Which of the API call displays the details of a given CloudWatch dashboard?
GetDashboard
148
You're using CloudFormation to launch a stack that will host your application. However, you want to configure the application on your EC2 instance before CloudFormation spins-up your autoscaling group and your ELB. How can you accomplish this?
Associate a CreationPolicy with the AutoScaling Group and a WaitCondition with the load balancer, delaying their completion until after the EC2 instance has been configured.
149
There are issues with your RDS database, and you need to restore it to the way it was at 4:00 am yesterday. What RDS option would allow you to do so?
RDS Automated Backups
150
If you use an IAM user to copy an instance-store-backed AMI, the user must have which Amazon S3 permissions?
s3: PutObject s3: CreateBucket s3: GetObject
151
A member of the Operations team has done some analysis and discovered that at certain times of the day your cost per message processed jumps enormously. Which parameter would you suggest she change?
WaitTimeSeconds
152
What is the maximum S3 object size?
5TB
153
True or False: EBS encryption does not support boot volumes.
False
154
You're an ops manager, and you want one of your AWS accounts to receive the price breaks associated with Consolidated Billing for Organizations. What needs to happen for you to be included in the Organization and receive the discounted pricing?
The Master account must send you an invitation to join your account with theirs, and you must accept.
155
Which of the API call is used to return a subset of CloudWatch Log events?
FilterLogEvents
156
What is the default limit for the number of subnets you can have in a Region?
200
157
What is the CLI command used to remove a subnet from and Elastic Load Balancer?
detach-load-balancer-from-subnets
158
By default, what's the maximum number of launch configurations you may have per region?
100
159
What is the correct CloudWatch metrics namespace for CloudWatch Logs?
AWS/Logs
160
What are the two types of Elastic Load Balancer (Classic) sticky sessions?
Duration-based session stickiness and application-controlled session stickiness.
161
Is it possible to share an AMI across AWS Regions?
AMIs must be copied to another region. One cannot simply share them.
162
True or False: A CloudFormation template may use only the JSON format.
False. CloudFormation may use either a JSON or YAML-format.
163
True or False: Network ACLs are stateless.
True
164
True or False: Security Groups are stateless.
False
165
True or False: In a Multi-AZ RDS deployment, the Standby instance serves read operations and will be promoted to Primary in the event of a failure.
False You do not interact directly with the Standby instance (e.g. for read operations) at any point prior to its promotion to Primary.
166
True or False: You can use Paths to order IAM users hierarchically.
True
167
To register targets and correctly route requests, the Application Load Balancer's listeners need a rule that specifies a ________ .
Target Group
168
Following a multi-AZ RDS failover, which record is changed from the primary to the standby?
CNAME
169
What is the name of the document that tells Auto Scaling how to respond to events and alarms?
Policy
170
True or False: CloudWatch Logs cannot be used to monitor your applications and systems in real-time.
False
171
When creating an EBS volume, which parameters can be chosen from the AWS Console?
Size Encryption SnapshotID
172
True or False: S3 provides read-after-write consistency for POSTs of new objects.
False S3 provides read-after-write consistency for PUTs of new objects and eventual consistency of overwrite PUTs and DELETEs.
173
Which API call is used to describe the state of a specified instance with respect to the specified load balancer?
DescribeInstanceHealth
174
What are the valid EC2 Auto-Scaling instance health statuses?
Healthy | Unhealthy
175
What is the general limit for each AWS account for the maximum umber of EBS snapshots that can be created by default?
10,000