Cloud Architecture & Infrastructure Flashcards

Which service allows you to define and provision AWS infrastructure using declarative templates as code?

Answer: AWS CloudFormation

AWS CloudFormation provisions and manages infrastructure as code using declarative JSON or YAML templates.

A globally distributed application needs single-digit millisecond latency and seamless multi-Region replication. Which database fits?

Answer: Amazon DynamoDB Global Tables

DynamoDB Global Tables provide multi-Region, multi-active replication with low single-digit millisecond latency.

Which firewall service protects web applications from common exploits like SQL injection and cross-site scripting?

Answer: AWS WAF

AWS WAF filters and monitors HTTP/HTTPS requests to protect web apps from common exploits.

What is a key difference between a Security Group and a Network ACL in a VPC?

Answer: Security Groups are stateful; NACLs are stateless

Security Groups are stateful (return traffic auto-allowed), while NACLs are stateless and evaluate rules in both directions.

Which service provides managed, automatic DDoS protection for applications running on AWS?

Answer: AWS Shield

AWS Shield provides managed protection against DDoS attacks, with Standard included free and Advanced for enhanced coverage.

To improve global application performance by routing user traffic over the AWS backbone to the nearest endpoint, which service should you use?

Answer: AWS Global Accelerator

AWS Global Accelerator routes traffic over the AWS global network to optimal regional endpoints for better performance.

Which service centrally manages and automates backups across multiple AWS services?

Answer: AWS Backup

AWS Backup centralizes and automates data protection across services like EBS, RDS, DynamoDB, and EFS.