AWS Flashcards
You have a mission-critical application which must be globally available at all times. If this is the case, which deployment mechanisms would you employ
Deployment to Multiple Regions
Services that can be used to protect against DDoS attacks.
AWS Shield Advanced
AWS Shield
Principles when designing cloud-based systems.
Build loosely-coupled components
Assume everything will fail
A company does not want to manage their database. Which of the following services is a fully managed NoSQL database provided by AWS
DynamoDB (DynamoDB is a fully managed NoSQL database offering provided by AWS. It is now available in most regions for users to consume.)
AWS service allows for distribution of incoming application traffic across multiple EC2 instances?
AWS ELB (Elastic Load Balancing)
Concepts used when you want to manage the bills for multiple accounts under one master account
Consolidating billing
_________ is the amount of storage that can be stored in the Simple Storage service?
Virtually unlimited storage
What service from AWS can help manage the costs for all resources in AWS?
Cost Explorer (Cost Explorer is a free tool that you can use to view your costs)
What is the service provided by AWS that lets you host Domain Name systems?
Route 53
What service helps you to aggregate logs from your EC2 instance?
Cloudwatch Logs ( Logs to monitor, store, and access your log files from Amazon Elastic Compute Cloud (Amazon EC2) instances, AWS CloudTrail, and other sources. You can then retrieve the associated log data from CloudWatch Logs)
What is a serverless compute offering from AWS?
AWS Lambda (compute service that lets you run code without provisioning or managing servers. AWS Lambda executes your code only when needed and scales automatically, from a few requests per day to thousands per second.)
What does Amazon EC2 provide?
Virtual servers in the Cloud.
What is a storage mechanism that can be used to store messages effectively which can be used across distributed systems.
Amazon SQS (Amazon Simple Queue Service (Amazon SQS) offers a reliable, highly-scalable hosted queue for storing messages as they travel between applications or microservices. It moves data between distributed application components and helps you decouple these components)
When working on the costing for on-demand EC2 instances, which are the following are attributes which determine the costing of the EC2 Instance.
- AMI Type
- Instance Type
- Region
- Edge location
- AMI Type
- Instance Type
- Region
Services that help provide a connection from on-premises infrastructure to resources hosted in the AWS Cloud.
AWS VPN (AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon Virtual Private Cloud (Amazon VPC). AWS Client VPN enables you to securely connect users to AWS or on-premises networks.)
AWS Direct Connect (Direct Connect makes it easy to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.)
In order to predict the cost of moving resources from on-premise to the cloud, which services should be used?
AWS TCO (Total cost of ownership)
AWS Trusted Advisor
There is a requirement to host a set of servers in the Cloud for a short period of 3 months. Which of the following launch types for AWS EC2 instances should be chosen to be the most cost-effective?
On-Demand, Since the requirement is just for 3 months, then the most cost-effective option is to use On-Demand Instances.
What is a document that provides a formal statement of one or more permissions?
Policy- A policy is a JSON document that specifies what a user can do on AWS.
You are planning to serve a web application on the AWS Platform by using EC2 Instances. What principles would you adopt to ensure that even if some of the EC2 Instances crashes, you still have a working application
Using a fault-tolerant system
Security feature that is associated with a Subnet in a VPC to protect against Incoming traffic requests.
NACL (A-network access control list (ACL)-is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets)
AWS provides a storage option known as Amazon Glacier. What is this AWS service designed for?
Infrequently accessed data
Data archives
What is the concept of an AWS region?
It is a geographical area divided into Availability Zones
Which one of the following features is normally present in all of AWS Support plans
- A dedicated support person
- 24*7 access to Customer Service
- Access to all features in the Trusted Advisor
- A technical Account Manager
24*7 access to Customer Service
AWS services allows you to build a data warehouse on the cloud?
AWS Redshift (Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud. You can start with just a few hundred gigabytes of data and scale to a petabyte or more.)
What IAM identities allow an application deployed on an EC2 instance to write data to S3 in a secure manner
AWS IAM Roles (An IAM role is similar to a user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS.)
When using On-Demand instances in AWS, which of the following is a false statement when it comes to the costing for the Instance.
- You pay for much you use.
- You have to pay the termination fees if you terminate the instance
- You are charged per second based on the hourly rate
- You pay no upfront costs for the instance
You have to pay the termination fees if you terminate the instance