⚡ IT Wisdom Zero trust security means I don't trust the network, the users, the endpoints, or the person who designed this architecture.
Skilled Practitioner
4249 XP 1751 to Expert

Manage Cards

Add manual cards or delete existing ones

All Cards
All DEVASC SPLUNK-CORE SAA-C03) AITECH EPT1
40 cards total
SAA-C03)
Design Cost-Optimized Architectures
10 cards  ·  5 basic · 5 cloze
Basic 5 cards
What is the primary cost advantage of using Amazon S3 Intelligent-Tiering for storage? claude
When should you use Spot Instances instead of On-Demand Instances to reduce EC2 costs? claude
What is the cost benefit of using an Amazon RDS Reserved Instance compared to an On-Demand RDS instance? claude
How does using Amazon CloudFront help reduce costs associated with serving content from an... claude
What is rightsizing in the context of AWS cost optimization, and which service provides... claude
Cloze 5 cards
AWS {{c1::Savings Plans}} offer up to 72% savings compared to On-Demand pricing in exchange for... claude
To reduce data transfer costs, you should use an {{c1::S3 Transfer Acceleration}} endpoint only... claude
AWS {{c1::Cost Explorer}} is a tool that enables you to visualize, understand, and manage your... claude
An {{c1::S3 Lifecycle}} policy can automatically transition objects to cheaper storage classes... claude
Using {{c1::AWS Lambda}} instead of always-on EC2 instances for infrequent or event-driven... claude
Design High-Performing Architectures
10 cards  ·  5 basic · 5 cloze
Basic 5 cards
What is the primary benefit of using Amazon ElastiCache in front of an RDS database? claude
When should you choose Provisioned IOPS SSD (io1/io2) over General Purpose SSD (gp3) for an EBS volume? claude
What is the difference between horizontal scaling and vertical scaling in AWS architectures? claude
How does Amazon CloudFront improve the performance of a globally distributed web application? claude
What is the purpose of Amazon SQS in a high-performing architecture? claude
Cloze 5 cards
Amazon S3 {{c1::Transfer Acceleration}} uses CloudFront edge locations to speed up uploads to S3... claude
An Application Load Balancer operates at Layer {{c1::7}} of the OSI model, enabling... claude
Amazon {{c1::Aurora}} is a MySQL and PostgreSQL-compatible relational database that delivers up... claude
AWS {{c1::Global Accelerator}} improves availability and performance by routing user traffic... claude
Amazon DynamoDB {{c1::DAX}} is an in-memory cache that provides microsecond read latency for... claude
Design Resilient Architectures
10 cards  ·  5 basic · 5 cloze
Basic 5 cards
What is the difference between RTO and RPO in disaster recovery planning? claude
What is the purpose of an Amazon S3 Cross-Region Replication (CRR) rule? claude
What is the Pilot Light disaster recovery strategy in AWS? claude
How does Amazon Route 53 health checking contribute to a resilient architecture? claude
What is the purpose of using multiple Availability Zones when designing a resilient AWS architecture? claude
Cloze 5 cards
An Amazon RDS deployment that automatically creates a standby replica in a second Availability... claude
AWS {{c1::Elastic Load Balancing}} distributes incoming application traffic across multiple... claude
An Auto Scaling group uses a {{c1::launch template}} to define the instance configuration,... claude
The AWS disaster recovery strategy with the lowest RTO and RPO, which keeps a fully operational... claude
Amazon SQS can be used to {{c1::decouple}} application components so that a failure in one... claude
Design Secure Architectures
10 cards  ·  5 basic · 5 cloze
Basic 5 cards
What is the purpose of AWS IAM roles compared to IAM users? claude
What is the difference between a Security Group and a Network ACL in AWS? claude
What is the principle of least privilege and how is it applied in AWS? claude
How does AWS Secrets Manager differ from AWS Systems Manager Parameter Store for storing sensitive data? claude
What is AWS CloudTrail and why is it important for security? claude
Cloze 5 cards
To enforce that all objects uploaded to an S3 bucket are encrypted at rest, you should use an S3... claude
AWS {{c1::Macie}} is a fully managed data security service that uses machine learning to... claude
AWS {{c1::Shield Advanced}} provides enhanced DDoS protection, including 24/7 access to the AWS... claude
In a VPC, a {{c1::NAT Gateway}} allows instances in a private subnet to initiate outbound... claude
AWS {{c1::GuardDuty}} is a threat detection service that continuously monitors for malicious... claude
Add Card
Back to Queue