6 - Working with Your AWS Resources Flashcards
1
Q
What is the primary way to interact with AWS services?
A
AWS Management Console
A web-based application usable from any compatible web browser.
2
Q
What is the AWS Console Mobile Application used for?
A
To view and manage some AWS resources from Android or iOS devices.
3
Q
What does AWS CLI stand for?
A
AWS Command-Line Interface.
4
Q
What is the purpose of CloudWatch?
A
To monitor the performance of AWS resources, create alarms, and collect logs.
5
Q
What does CloudTrail do?
A
Keeps a detailed log of every action performed against AWS resources.
6
Q
What is the function of Cost Explorer?
A
To understand AWS service costs, spot usage trends, and get savings recommendations.
7
Q
Which browsers are compatible with the AWS Management Console?
A
- Apple Safari
- Google Chrome
- Microsoft Edge
- Microsoft Internet Explorer
- Mozilla Firefox
8
Q
What are the two ways to sign in to the AWS Management Console?
A
- As a root user
- As an IAM user
9
Q
What is the purpose of the account name menu in the AWS Management Console?
A
Displays the IAM user and account alias or ID, and provides options for account management.
10
Q
What are resource groups in AWS?
A
Collections of AWS resources in the same region that match a query.
11
Q
What is a resource tag?
A
Optional metadata assigned to AWS resources consisting of a key and an optional value.
12
Q
What is the maximum number of tags you can assign to a single AWS resource?
A
50.
13
Q
True or False: Tag keys and values are case-sensitive.
A
True.
14
Q
What are some examples of tagging strategies?
A
- Technical
- Automation
- Business
- Security
15
Q
What is the AWS Console Mobile Application dashboard used for?
A
To show key information about your AWS account and resources.
16
Q
Fill in the blank: You can create resource groups based on resource tags or from a _______.
A
CloudFormation stack.
17
Q
What feature allows you to pin frequently used services in the AWS Management Console?
A
Shortcuts.
18
Q
What happens to your session in the AWS Management Console after 12 hours?
A
It expires and logs you out.
19
Q
What is the Tag Editor used for in AWS?
A
To create, edit, and manage tags for AWS resources.
20
Q
What does the AWS Console Mobile Application dashboard show?
A
Key information about your AWS account and resources, including:
* Service Health
* CloudWatch Alarms
* Billing
21
Q
List some AWS resources you can manage with the AWS Console Mobile Application.
A
- CloudWatch Alarms
- EC2 security groups
- EC2 instances
- CloudFormation stacks
22
Q
True or False: The AWS Console Mobile Application supports all AWS services.
A
False
23
Q
What are the supported services of the AWS Console Mobile Application?
A
- AWS Billing and Cost Management
- AWS CloudFormation
- Amazon CloudWatch
- Amazon DynamoDB
- Amazon EC2
- AWS Elastic Beanstalk
- Elastic Load Balancing
- AWS OpsWorks
- AWS Personal Health Dashboard
- Amazon RDS
- Amazon Route 53
- Amazon S3
- Amazon VPC
24
Q
What operating systems does the AWS Console Mobile Application support?
A
Apple iOS and Android
25
Fill in the blank: You can authenticate to the AWS Console Mobile Application using _______.
[root account credentials, IAM username and password, access key ID and secret key]
26
What is the AWS Command-Line Interface (AWS CLI)?
A unified command-line tool for managing AWS resources.
27
What can you do with the AWS CLI?
* Manage AWS resources
* Perform repetitive tasks
* Automate tasks using scripts
28
What are the requirements for using the AWS CLI?
* Compatible with Windows, macOS, and Linux
* Outbound access to the Internet on TCP port 443
* IAM access key ID and secret key
29
How can you install the AWS CLI using Python?
Using the pip package manager.
30
What does the AWS CLI installation using the stand-alone installer require?
Python already installed, but not the pip package manager.
31
What is the purpose of AWS SDKs?
To simplify the use of AWS services in custom applications.
32
List some programming languages for which AWS offers SDKs.
* Java
* .NET
* Node.js
* PHP
* Python
* Ruby
* JavaScript
* Go
* C++
33
What is AWS Amplify?
An open-source framework to build mobile and web applications on AWS.
34
What are some use cases for Amazon CloudWatch?
* Infrastructure Monitoring and Troubleshooting
* Resource Optimization
* Application Monitoring
* Log Analytics
35
What is a CloudWatch alarm?
It watches over the value of a single metric and takes an action if the metric crosses a specified threshold.
36
What actions can a CloudWatch alarm trigger?
* Notification using SNS
* Auto Scaling Action
* EC2 Action
37
What is the purpose of CloudWatch dashboards?
To keep an eye on all important metrics in one place.
38
What does CloudWatch Logs do?
Collects and stores log files from AWS and non-AWS sources.
39
What is a log event in CloudWatch Logs?
It contains a timestamp and an event message, analogous to a line in a log file.
40
What is the purpose of CloudWatch Logs?
CloudWatch Logs collects and stores log files from AWS and non-AWS sources, allowing easy viewing, searching, and extraction of custom metrics.
41
What is a log event in CloudWatch Logs?
A log event is analogous to a line in a log file and contains a timestamp and an event message.
42
What are vended logs?
Vended logs are logs produced by AWS services, such as Route 53 DNS query logs, VPC flow logs, and CloudTrail logs.
43
How are log events organized in CloudWatch Logs?
Log events are organized by log streams, with events from the same source stored in a single log stream.
44
What is the function of a log group in CloudWatch Logs?
A log group organizes related log streams, allowing grouping of multiple log streams into a single log group.
45
What are the retention settings for CloudWatch Logs?
Retention settings range from 1 day to 10 years, and logs can be archived by exporting them to an S3 bucket.
46
What is a metric filter in CloudWatch?
A metric filter extracts data from log events in a log group and stores that data in a custom CloudWatch metric.
47
Give an example of using a metric filter.
A metric filter can be used to track the number of times a specific error code occurs in a log, such as a 403 Forbidden error.
48
What is the difference between CloudWatch Events and CloudWatch Alarms?
CloudWatch Events trigger immediately upon specific events occurring, while CloudWatch Alarms take action when a metric crosses a numeric threshold.
49
What types of targets can CloudWatch Events trigger?
* Lambda functions
* EC2 instances
* SQS queues
* SNS topics
* ECS tasks
50
What does CloudTrail log?
CloudTrail logs detailed event logs of every action against AWS resources, including service address, API action, region, and more.
51
What are the two types of actions logged by CloudTrail?
* API actions
* Non-API actions
52
What are management events in CloudTrail?
Management events are operations a principal attempts to execute against an AWS resource, including write-only and read-only events.
53
What distinguishes data events from management events in CloudTrail?
Data events consist of high-volume S3 object-level activity and Lambda function executions, treated separately from management events.
54
How long does CloudTrail store management events in event history?
CloudTrail stores 90 days of management events in the event history.
55
What is the purpose of a CloudTrail trail?
A trail customizes the types of events CloudTrail logs and can store events beyond 90 days in log files delivered to an S3 bucket.
56
What does log file integrity validation do in CloudTrail?
It provides assurance that no CloudTrail log files are modified or deleted by calculating and storing a cryptographic hash of the file.
57
What is AWS Cost Explorer?
AWS Cost Explorer is a feature that offers configurable reports and graphs to understand how AWS services impact monthly bills.
58
What are the three categories of reports available in AWS Cost Explorer?
* Cost and usage reports
* Reservation reports
* Reserved instance recommendations
59
What can cost and usage reports in Cost Explorer show?
They provide a graphical view of daily and monthly costs and usage over time, along with forecasts.
60
What does the Reserved Instances Utilization report indicate?
It shows the percentage of reserved instances used and the money saved or overspent by using reserved instances.
61
What is the purpose of Reserved Instances Coverage report?
It shows how many running instance hours are covered by reservations and the additional costs incurred from on-demand instances.
62
How does Cost Explorer provide reserved instance recommendations?
It analyzes on-demand instance usage and suggests the most cost-effective reserved instances for that usage.
63
What is AWS Billing Conductor?
AWS Billing Conductor allows enterprises to automatically generate customized bills for customers based on their AWS usage.
64
What does AWS Config track?
AWS Config tracks the configuration state of AWS resources at a given point in time.
65
What does AWS Config track?
The configuration state of your AWS resources at a given point in time.
66
How can AWS Config be compared to a time machine?
It allows you to see what a resource configuration looked like at some point in the past versus what it looks like now.
67
What are the objectives that AWS Config can help with?
* Security
* Easy Audit Reports
* Troubleshooting
* Change Management
68
What does the configuration recorder in AWS Config do?
It discovers existing resources, records their configurations, monitors for changes, and tracks those changes over time.
69
What is contained in a configuration item generated by AWS Config?
* Specific settings for the resource at a point in time
* Resource type
* ARN
* Creation time
* Relationships to other resources
70
What is a configuration history in AWS Config?
A collection of configuration items for a given resource over time.
71
What does a configuration snapshot provide?
A configuration backup for all monitored resources in your account.
72
What is the purpose of managed and custom rules in AWS Config?
To define the optimal baseline configuration for your resources and to verify compliance.
73
What is AWS Control Tower designed for?
To streamline the onboarding of new accounts and apply governance policies.
74
What does AWS License Manager help you manage?
Software licenses for both on-premises and cloud-based software.
75
What is the AWS Management Console primarily used for?
Interacting with AWS using a point-and-click interface.
76
What is the AWS Command-Line Interface (CLI) used for?
Managing AWS resources manually from the command line or using scripts.
77
What does CloudWatch collect?
Metrics from AWS services.
78
What is the purpose of CloudTrail?
To record events that occur against your AWS account.
79
What is the default retention period for CloudTrail event history logs?
90 days.
80
What do resource tags in AWS do?
Associate keys with your AWS resources, which can optionally contain a value.
81
What can you create using CloudWatch in response to metrics?
Alarms that trigger actions when a metric crosses a threshold.
82
True or False: AWS License Manager incurs additional costs for its use.
False
83
Fill in the blank: AWS Config delivers a configuration history file to an _______.
S3 bucket.
84
What is the main function of AWS Control Tower landing zones?
To impose security, compliance, and operations best practices over governed resources.
85
What can CloudWatch Events do?
Take actions in response to specific events that occur with your AWS resources.
86
What is a key feature of AWS SDKs?
They facilitate the development of applications that integrate with AWS services.
87
How can you ensure compliance with AWS Config?
By defining rules and flagging noncompliant resources.
