AWS Certified Solutions Architect Design Resilient Architectures Flashcards

24 sample cards from the Design Resilient Architectures deck

Sampled from the end of the deck, so these are different cards from the ones shown on the syllabus page.

1. What is the difference between an EBS snapshot's first snapshot and subsequent snapshots?

   EBS snapshots are incremental: the first snapshot copies all written blocks, and each subsequent snapshot saves only blocks changed since the last snapshot. Snapshots are stored in S3 (managed) and are Region-scoped but can be copied across Regions.

2. How do you replicate an S3 object to another Region, and what feature enables it?

   Use Cross-Region Replication (CRR), part of S3 Replication. It requires versioning enabled on both source and destination buckets and an IAM role. CRR asynchronously copies objects to a bucket in a different Region for DR/latency. Same-Region uses SRR.

3. What is Amazon Aurora Global Database and what RPO/RTO does it target?

   Aurora Global Database replicates a primary Region's database to up to 5 secondary Regions with typical replication lag under 1 second. It targets RPO of ~1 second and RTO under 1 minute via cross-Region failover, used for low-latency global reads and DR.

4. What is DynamoDB Global Tables?

   A multi-Region, multi-active replication feature where DynamoDB tables are automatically replicated across chosen Regions with last-writer-wins conflict resolution, enabling local low-latency reads/writes and Regional failover (near-zero RTO/RPO).

5. What is Amazon Route 53 health checking, and how does it enable failover?

   Route 53 monitors endpoint health (HTTP/HTTPS/TCP) and, with Failover routing policy, returns the primary record while healthy and automatically switches DNS responses to a secondary (standby) endpoint when the primary fails.

6. Name three Route 53 routing policies useful for resilience and what each does.

   Failover (active-passive switch on health check failure), Latency-based (route to lowest-latency Region), and Weighted (split traffic by assigned weights, useful for blue/green and gradual cutover). (Also Geolocation and Multivalue answer.)

7. What does Route 53 Multivalue Answer routing provide?

   It returns up to 8 healthy records selected at random in response to DNS queries, with health checks, giving simple client-side load distribution and improved availability without a load balancer.

8. What is AWS Elastic Disaster Recovery (DRS) used for?

   AWS Elastic Disaster Recovery continuously replicates on-premises or cloud servers (block-level) into a low-cost staging area in AWS, enabling fast, automated failover and failback with minimal RPO (seconds) and RTO (minutes) for full-server recovery.

9. How does automated failover work in an Auto Scaling group across AZs?

   If an instance or an entire AZ fails, the ASG's health checks mark instances unhealthy, terminate them, and launch replacements in healthy AZs to maintain desired capacity, automatically rebalancing across AZs—self-healing without manual intervention.

10. What CloudWatch construct triggers automated scaling or recovery actions?

    A CloudWatch Alarm. It watches a metric against a threshold over defined periods and triggers actions such as Auto Scaling policies, SNS notifications, or EC2 actions (reboot/recover/stop/terminate) for automated failover/remediation.

11. What does EC2 Auto Recovery (the recover action) do?

    For supported instances, a CloudWatch alarm on a system-status-check failure can automatically recover the instance—restarting it on new underlying hardware while preserving instance ID, private/Elastic IP, and EBS volumes.

12. What is the durability guarantee of Amazon S3 Standard storage?

    S3 is designed for 99.999999999% (11 nines) durability of objects over a given year, achieved by automatically storing data redundantly across multiple devices in a minimum of three Availability Zones.

13. How many AZs does S3 store data across, and which storage class is the exception?

    Most S3 storage classes (Standard, Standard-IA, Intelligent-Tiering, Glacier) store data redundantly across at least three AZs. S3 One Zone-IA is the exception—it stores data in a single AZ (lower cost, lower resilience).

14. What type of storage is Amazon EBS, and what is its key resilience characteristic?

    EBS provides persistent block storage volumes attached to a single EC2 instance. Each volume is automatically replicated within its Availability Zone to protect against component failure; it is AZ-scoped (not multi-AZ) and durable independent of instance life.

15. Compare EBS gp3 vs io2 Block Express volume types.

    gp3 is general-purpose SSD with baseline 3,000 IOPS / 125 MB/s (independently scalable up to 16,000 IOPS). io2 Block Express is provisioned-IOPS SSD for the highest performance (up to 256,000 IOPS, sub-millisecond latency, 99.999% durability) for critical databases.

16. Can an EBS volume be attached to multiple EC2 instances, and how?

    By default an EBS volume attaches to one instance in the same AZ. With EBS Multi-Attach (io1/io2), a single volume can be attached to up to 16 Nitro-based instances in the same AZ concurrently (requires a cluster-aware filesystem).

17. What is the difference between block storage (EBS), object storage (S3), and file storage (EFS)?

    Block storage (EBS) presents raw volumes for a single instance—low latency, like a disk. Object storage (S3) stores objects with metadata, accessed via API, infinitely scalable. File storage (EFS) provides a shared POSIX file system mountable by many instances concurrently.

18. What is Amazon EFS and what makes it suited to shared/resilient access?

    EFS is a fully managed, elastic NFS (NFSv4) file system that can be mounted concurrently by thousands of EC2/containers/Lambda across multiple AZs in a Region. It grows/shrinks automatically and (Standard class) stores data redundantly across multiple AZs.

19. Compare EFS Standard storage class with EFS One Zone.

    EFS Standard stores data across multiple AZs for highest availability/durability. EFS One Zone stores data in a single AZ at lower cost, suitable for non-critical or easily reproducible data. Both support lifecycle management to Infrequent Access tiers.

20. What is Amazon FSx and name two of its file-system flavors.

    FSx provides fully managed third-party file systems. Examples: FSx for Windows File Server (SMB, Active Directory integration), FSx for Lustre (high-performance computing), FSx for NetApp ONTAP, and FSx for OpenZFS. Multi-AZ deployment options provide HA.

21. What is an S3 Lifecycle policy used for?

    It automates moving objects between storage classes (transition actions, e.g., Standard -> Standard-IA -> Glacier) and deleting them (expiration actions) based on object age, optimizing cost over the data's lifecycle.

22. What is S3 Versioning and how does it support data integrity/resilience?

    Versioning keeps multiple versions of an object in a bucket. It protects against accidental overwrites and deletions (a delete adds a delete marker, prior versions remain recoverable) and is a prerequisite for replication and MFA Delete.

23. How does S3 verify data integrity during upload and at rest?

    S3 validates uploads using checksums (e.g., MD5 via Content-MD5/ETag, or stronger algorithms like SHA-256/CRC32 with the additional checksum feature). At rest it continuously verifies and self-heals data using checksums across redundant copies.

24. What is S3 Object Lock and which DR/compliance need does it serve?

    S3 Object Lock enforces write-once-read-many (WORM) protection, preventing object versions from being deleted or overwritten for a retention period or under a legal hold. It supports compliance and protects backups against ransomware/accidental deletion (immutability).

What this deck covers

Design Resilient Architectures flashcards FAQ