Architecting On AWS Certification Flashcards
7 cards from real Architecting on AWS Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Architecting On AWS Certification flashcards as text
If you wish to use an SSL protocol but don't want to terminate the connection on your load balancer, you can connect the client to your load balancer using a _________ protocol.
Answer: TCP
You can utilize a TCP protocol to connect from the client to your load balancer if you want to use the SSL protocol but do not want to break the connection on your load balancer. Install certificates on all the instances of your back-end application that handle requests, and use the SSL protocol to establish a connection from the load balancer to your back-end application.
If you have enabled _____, Amazon RDS will automatically transition to a backup replica in a different Availability Zone in the event of a scheduled or accidental outage of your primary DB instance.
Answer: Multiple Availability Zones
If you have enabled multi-Availability Zones, Amazon RDS will move to a backup replica in a different Availability Zone in the case of a planned or unforeseen outage of your primary DB instance.
Multiple data points with the dimensions Box=UAT, App = Document and Box=UAT, App = Notes have been created by a user for the CloudWatch metrics. What information would the user receive if he runs a CloudWatch query with the dimensions parameter set to Server=prod?
Answer: It will not return any data as the dimension for Box=UAT does not exist
A dimension is a key value pair that is used to uniquely identify a metric; the user cannot obtain CloudWatch metrics information unless he has defined the appropriate combination of dimensions. The dimension combination in this scenario is either Box=UAT, App=Document or Box=UAT, App=Notes.
On your Amazon VPC network, each EC2 instance has a default network interface that is assigned a primary private IP address. What do you call the extra network interfaces that can be established and attached to any Amazon EC2 instance in your VPC?
Answer: Elastic Network Interface
An Elastic Network Interface, also known as an ENI, is a virtual network interface that can be attached to an instance that is running inside of a virtual private cloud. An ENI might have a primary private IP address attached to it.
For what exactly is the API action string "create image" being used?
Answer: To create an Amazon EBS-backed AMI from an Amazon EBS-backed instance that is either running or has stopped.
It converts an operating or stopped Amazon EBS-backed instance into an Amazon EBS-backed AMI. The new AMI includes block device mapping data for any instance store volumes or EBS volumes that you added to your instance in addition to the root device volume.
When making API calls, creating IAM policies, or tagging Amazon Relational Database Service (Amazon RDS) objects, you must use a ___________ to uniquely identify an AWS resource.
Answer: Amazon Resource Names
In AWS, resources are identified by their respective Amazon Resource Names (ARNs). IAM policies, Amazon Relational Database Service (Amazon RDS) tags, and API calls all require an ARN to uniquely identify a resource across AWS.
To handle HTTP requests, an application hosted on EC2 instances communicates with the ELB. The X-Forwarded-For header of each request includes three IP addresses. Which of these IP addresses will be included in the header?
Answer: IP address of ELB
When using an HTTP/HTTPS load balancer, the X-Forwarded-For request header can be used to determine the client's IP address. Your server access logs will only show the IP address of the load balancer because it is what intercepts communication between clients and servers. The client's IP address is recorded in the X-Forwarded-For request header and forwarded to your server using Elastic Load Balancing.