Ends in
00
days
00
hrs
00
mins
00
secs
ENROLL NOW

🎁 Get 20% Off - Christmas Big Sale on All Practice Exams, Video Courses, and eBooks!

aws certification

Home » aws certification » Page 7

IP Blocking: Use AWS WAF or NACL?

2023-08-14T02:45:24+00:00

What should you do if you identified a series of malicious attacks on your application coming from a specific IP address? Will you use AWS WAF to block that IP address or create a rule in your Network Access Control List to deny traffic from that IP? It is true that AWS WAF can filter web requests based on IP addresses, HTTP headers, HTTP body, or URI strings, to block common attack patterns, such as SQL injection or cross-site scripting. NACL, on the other hand, acts like a firewall for controlling traffic in and out of your subnets. If the [...]

IP Blocking: Use AWS WAF or NACL?2023-08-14T02:45:24+00:00

Redis (cluster mode enabled vs disabled) vs Memcached

2023-04-10T05:29:45+00:00

  Redis (cluster mode enabled) Redis (cluster mode disabled) Memcached Data Types string, sets, sorted sets, lists, hashes, bitmaps, hyperloglog, geospatial indexes string, sets, sorted sets, lists, hashes, bitmaps, hyperloglog, geospatial indexes string, objects (like databases) Data Partitioning (distribute your data among multiple nodes) Supported Unsupported Supported Modifiable cluster Only versions 3.2.10 and later  Yes Yes Online resharding Only versions 3.2.10 and later  No No Encryption 3.2.6, 4.0.10 and later 3.2.6, 4.0.10 and later Unsupported Sub-millisecond latency Yes Yes Yes FedRAMP, PCI DSS and HIPAA compliant 3.2.6, 4.0.10 and later 3.2.6, 4.0.10 and later No Multi-threaded (make use of multiple [...]

Redis (cluster mode enabled vs disabled) vs Memcached2023-04-10T05:29:45+00:00

Latency Routing vs Geoproximity Routing vs Geolocation Routing

2023-04-10T03:27:57+00:00

  Latency Routing Geoproximity Routing Geolocation Routing Definition Lets Route 53 serve user requests from the AWS Region that provides the lowest latency. It does not, however, guarantee that users in the same geographic region will be served from the same location. Latency-based routing is based on latency measurements performed over a period of time, and the measurements reflect changes in network connectivity and routing. Lets Amazon Route 53 route traffic to your resources based on the geographic location of your users and your resources.  You can also optionally choose to route more traffic or less to a given resource [...]

Latency Routing vs Geoproximity Routing vs Geolocation Routing2023-04-10T03:27:57+00:00

Backup and Restore vs Pilot Light vs Warm Standby vs Multi-site

2023-04-10T06:17:02+00:00

You should select the most appropriate DR plan to meet your company RTO and RPO. Consider also your budget and which system elements are most critical for your business. Backup and Restore Pilot Light This DR plan provides the slowest system restoration after a DR event. You take frequent snapshots of your data such as those in Amazon EBS Volumes and Amazon RDS databases, and you store them in a durable and secure storage location such as Amazon S3. There are many ways for you to move data in and out of S3 Transfer over the network via S3 Transfer [...]

Backup and Restore vs Pilot Light vs Warm Standby vs Multi-site2023-04-10T06:17:02+00:00

Service Control Policies (SCP) vs IAM Policies

2023-04-12T00:38:41+00:00

Service Control Policies (SCP) IAM Policies SCPs are mainly used along with AWS Organizations organizational units (OUs). SCPs do not replace IAM Policies such that they do not provide actual permissions. To perform an action, you would still need to grant appropriate IAM Policy permissions. Even if a Principal is allowed to perform a certain action (granted through IAM Policies), an attached SCP will override that capability if it enforces a Deny on that action. SCP takes precedence over IAM Policies. SCPs can be applied to the root of an organization or to individual accounts in an OU. When you [...]

Service Control Policies (SCP) vs IAM Policies2023-04-12T00:38:41+00:00

S3 Transfer Acceleration vs Direct Connect vs VPN vs Snowball Edge vs Snowmobile

2024-01-18T07:05:33+00:00

S3 Transfer Acceleration (TA) AWS Direct Connect AWS VPN Amazon S3 Transfer Acceleration makes public Internet transfers to S3 faster, as it leverages Amazon CloudFront’s globally distributed AWS Edge Locations. There is no guarantee that you will experience increased transfer speeds. If S3 Transfer Acceleration is not likely to be faster than a regular S3 transfer of the same object to the same destination AWS Region, AWS will not charge for the use of S3 TA for that transfer. This is not the best transfer service to use if transfer disruption is not tolerable. S3 TA provides the same security [...]

S3 Transfer Acceleration vs Direct Connect vs VPN vs Snowball Edge vs Snowmobile2024-01-18T07:05:33+00:00

Application Load Balancer vs Network Load Balancer vs Gateway Load Balancer

2024-01-23T04:46:06+00:00

Application Load Balancer vs Network Load Balancer vs Gateway Load Balancer Feature Application Load Balancer Network Load Balancer Gateway Load Balancer Protocols HTTP, HTTPS, gRPC TCP, UDP, TLS IP Platforms VPC VPC VPC Health checks HTTP, HTTPS, gRPC TCP, HTTP, HTTPS TCP, HTTP, HTTPS Cloudwatch Metrics Yes Yes Yes Logging Yes Yes Yes Zonal Failover Yes Yes Yes Connection Draining (deregistration delay) Yes Yes Yes Load Balancing to multiple ports on the same instance Yes Yes Yes IP addresses as targets Yes Yes (TCP, TLS) Yes Load Balancer deletion protection Yes Yes Yes Configuration idle connection timeout Yes     [...]

Application Load Balancer vs Network Load Balancer vs Gateway Load Balancer2024-01-23T04:46:06+00:00

Elastic Beanstalk vs CloudFormation vs OpsWorks vs CodeDeploy

2024-12-17T08:06:00+00:00

AWS Elastic Beanstalk AWS CloudFormation AWS Elastic Beanstalk makes it even easier for developers to quickly deploy and manage applications in the AWS Cloud. Developers simply upload their application, and Elastic Beanstalk automatically handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring. This platform-as-a-service solution is typically for those who want to deploy and manage their applications within minutes in the AWS Cloud without worrying about the underlying infrastructure.  AWS Elastic Beanstalk supports the following languages and development stacks: Apache Tomcat for Java applications Apache HTTP Server for PHP applications Apache HTTP Server for Python [...]

Elastic Beanstalk vs CloudFormation vs OpsWorks vs CodeDeploy2024-12-17T08:06:00+00:00

Amazon Simple Workflow (SWF) vs AWS Step Functions vs Amazon SQS

2023-04-07T04:00:56+00:00

Amazon Simple Workflow (SWF) A web service that makes it easy to coordinate work across distributed application components. In Amazon SWF, tasks represent invocations of logical steps in applications. Tasks are processed by workers which are programs that interact with Amazon SWF to get tasks, process them, and return their results. The coordination of tasks involves managing execution dependencies, scheduling, and concurrency in accordance with the logical flow of the application. AWS Step Functions A fully managed service that makes it easy to coordinate the components of distributed applications and microservices using visual workflows. You define state machines that describe [...]

Amazon Simple Workflow (SWF) vs AWS Step Functions vs Amazon SQS2023-04-07T04:00:56+00:00

CloudWatch Agent vs SSM Agent vs Custom Daemon Scripts

2023-04-08T04:26:22+00:00

CloudWatch Agent SSM Agent (AWS Systems Manager) Custom Daemon Scripts CloudWatch agent allows you to collect more system-level metrics from your EC2 and on-premises servers than just the standard CloudWatch metrics. It also enables you to retrieve custom metrics from your applications or services using the StatsD and collectd protocols. StatsD is supported on both Linux servers and servers running Windows Server. collectd is supported only on Linux servers. You can use CloudWatch agent to collect logs from your servers and send them to CloudWatch Logs. Metrics collected by the CloudWatch agent are billed as custom metrics. You can install [...]

CloudWatch Agent vs SSM Agent vs Custom Daemon Scripts2023-04-08T04:26:22+00:00

AWS, Azure, and GCP Certifications are consistently among the top-paying IT certifications in the world, considering that most companies have now shifted to the cloud. Upskill and earn over $150,000 per year with an AWS, Azure, or GCP certification!

Follow us on LinkedIn, Facebook, or join our Slack study group. More importantly, answer as many practice exams as you can to help increase your chances of passing your certification exams on your first try!