AWS Flashcards

1
Q

Summarize the benefits of AWS

A
  1. Scalability: Allows users to scale resources up or down based on demand
  2. Cost Efficiency: Uses a pay as you go model which eliminates the need for costly upfront hardware investments
  3. Global Reach: Operates in multiple regions worldwide, providing low latency access and high availability
  4. Security: Including data encryption, access control, and compliance with industry standards.
  5. Reliability: Designed for high availability with multiple data centers and redundancy built into its services.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is on-demand delivery?

A

Service where products or goods are delivered to customers quickly, within hours or minutes, based on real time requests.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are cloud deployments?

A

Provisioning and configuring AWS resources (compute, storage, networking, ect) to run applications and services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are 4 types of Cloud Deployments?

A
  1. Public Cloud: AWS manages shared resources for multiple customers
  2. Private Cloud: Dedicated AWS resources for a single organization
  3. Hybrid Cloud: Combines on-premises and AWS resources
  4. Multi-Cloud: Uses multiple cloud provider (e.g…AWS + Azure)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Summarize the pay as you go pricing model

A

Customers pay only for the resources they use, with no upfront costs or long-term commitments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a client-server model?

A

A network architecture where a client (requester) sends requests for services or resources to a server (provider), which processes and responds.

The client typically interacts with the user, while the server manages and delivers data or services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is cloud computing?

A

The delivery of computing services over the internet, allowing users to access and use resources on demand without managing physical infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the three cloud computing deployment models?

A
  1. Cloud-Based: Runs all parts of the application in the cloud. Migrates existing and designs new applications to the cloud.
  2. On-Premises: Private cloud deployment where resources are deployed using virtualization and resource management tools.
  3. Hybrid: Cloud based resources are connected to on premises infrastructure.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is cloud computing?

A

On-demand delivery of IT resources and applications through the internet with pay as you go pricing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is another name for on-premises deployment?

A

Private cloud deployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How does the scale of cloud computing help you to save costs?

A

The aggregated cloud usage from a large number of customers results in lower pay as you go prices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the benefits of EC2 at a basic level?

A

Scalability, Cost effective, flexibility, high availability, and customizable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are different types of AWS EC2 instance types?

A
  1. General Purpose: Balanced for diverse workloads
  2. Compute Optimized: high performance compute needs
  3. Memory Optimized: For memory-intensive tasks
  4. Storage Optimized: For high disk throughput
  5. Accelerated Computing: GPU/FPGA-based tasks
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the benefits of EC2 Auto Scaling?

A
  1. Improved Availability: Automatically replaces unhealthy instances to maintain application health
  2. Cost efficiency: Scales instances up or down based on demand, reducing unnecessary costs
  3. Flexibility: Adapts to varying workload patterns

Reliability: Ensures consistent performance by maintaining the right instance count.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which EC2 instance type is suitable for data warehousing applications?

A

Storage Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which Amazon EC2 instance type balances compute, memory, and networking resources?

A

General purpose

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which EC2 instance type is ideal for high performance databases?

A

Memory optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which EC2 instance type offers high performance processors?

A

Compute optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the 5 EC2 pricing categories?

A
  1. On-Demand: Pay for instances by the second or hour, with no upfront commitment
  2. Reserved: Commit to 1 or 3 years for significant discounts; options include standard, convertible, and scheduled.
  3. Spot: Bid for unused capacity at reduced rates
  4. Dedicated Hosts: Pay for a physical server for regulatory or licensing requirements
  5. Savings Plans: Commit to consistent usage for 1 or 3 years, offering flexibility and cost savings
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which amazon EC2 pricing option provides a discount when you specify a number of EC2 instances to run a specific OS, instance family and size, and tenancy in one Region?

A

Standard Reserved Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which Amazon EC2 pricing option provides a discount when you make an hourly spend commitment to an instance family and Region for a 1year or 3 year term?

A

EC2 Instance Savings Plans

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the microservices approach?

A

Application components are loosely couple. If a single component fails, the other components continue to work because they are communicating with each other. The loose coupling prevents the entire application from failing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Amazon Simple Notification Service?

A

A publish/subscribe service where a publisher publishes a message to subscribers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is Amazon Simple Queue Service?

A

Service where you can send, store, and receive messages between software components, without losing messages or requiring other services to be available.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which AWS service is the best choice for publishing messages to subscribers?

A

Amazon Simple Notification Service (SNS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does the term “Serverless” mean?

A

Your code runs on servers, but you do not need to provision or manage these servers. You can focus on innovating new products instead of maintaining servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is AWS Lambda?

A

A service that lets you run code without needing to provision or manage servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

How does AWS Lamda Work?

A
  1. You upload your code to Lambda
  2. You set your code to trigger from an event source, such as AWS services, mobile applications, or HTTP endpoints
  3. Lambda runs your code only when triggered
  4. You pay for the compute time that you use.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are containers?

A

A standard way to package your application’s code and dependencies into a single object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is Amazon Elastic Container Service (ECS)?

A

A highly scalable, high performance container management system that enables you to run and scale containerized applications on AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is Amazon Elastic Kubernetes Service (EKS)?

A

A fully managed service that you can use to run Kubernetes on AWS. Enables you to deploy and manage containerized applications at scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

You want to use an Amazon EC2 instance for a batch processing workload. What would be the best Amazon EC2 instance type to use?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

You have a workload that will run for a total of 6 months and can withstand interruptions. What would be the most cost efficient EC2 purchasing option?

A

Spot Instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Ensuring that no single Amazon EC2 instance has to carry the full workload on its own is an example of what?

A

Elastic Load Balancing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is an Availability Zone?

A

A single data center or group of data centers within a Region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What are Edge Locations?

A

Sites that Amazon Cloudfront uses to store cached copies of your content closer to your customers for faster delivery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is AWS Elastic Beanstalk?

A

You provide code and configuration settings, and the Elastic Beanstalk deploys the resources necessary to perform tasks such as adjust capacity, load balancing, automatic scaling, and application health monitoring.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is AWS CloudFormation?

A

Where your infrastructure is treated as code. You can build an environment by writing lines of code instead of using AWS Management console to individually provision resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is the role of Amazon Virtual Private Cloud (VPC)?

A

A VPC allows you to create a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What are subnets in a VPC?

A

Subnets are ranges of IP addressed in a VPC, divided into public subnets and private subnets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

How does a public subnet different from a private subnet in a VPC?

A

a public subnet allows internet facing resources to communicate with the internet, while a private subnet is used for backend services without internet access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is a subnet in Amazon VPC?

A

A subnet is a section of a VPC that contains resources such as Amazon EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is an internet gateway in Amazon VPC?

A

A connection between a VPC and the internet, allowing public traffic to access VPC resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What happens if there is no internet gateway in a VPC?

A

No public traffic can access the resources within the VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is a virtual private gateway?

A

A component that enables a secure connection between a VPC and a private network, such as an on-premises date center, using a virtual private network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

How does a virtual private gateway work?

A

It encrypts internet traffic, adding a protection as it travels from the private network to the VPC, allowing only approved network traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is AWS Direct Connect?

A

A service that establishes a dedicated private connection between your data center and a VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What are network ACLs?

A

A virtual firewall that controls the inbound and outbound traffic at the subnet level. They perform STATELESS packet filtering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What are sercurity groups?

A

A virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance. They perform STATEFUL packet filtering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Briefly explain the steps of the Domain Name System (DNS)

A
  1. Enter the domain name into the browser, this request is sent to a customer DNS resolver.
  2. The customer DNS resolver asks the company DNs server for the IP address that corresponds to the company’s website.
  3. The company DNS server responds by providing the IP address for the company’s website, 192.0.2.0
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What is Amazon Route 53?

A

A DNS web service that gives developers and businesses a reliable way to route end users to internet applications hosted in AWS.

51
Q

What feature allows you to register new domain names and manage their DNS records?

A

Amazon Route 53

52
Q

Which component can be used to establish a private dedicated connection between your company’s data center and AWS?

A

AWS Direct Connect

53
Q

They are stateful and allow all inbound traffic by default.

A

Security Groups

54
Q

Which component is used to connect a VPC to the internet?

A

Internet gateway

55
Q

What do Block Level Storage Volumes behave like?

A

Physical hard drives

56
Q

What does an Instance Store do?

A

Provides temporary block level storage for an Amazon EC2 instance

57
Q

What happens to an Instance Store when an instance is terminated?

A

You lose any date in the instance store

58
Q

What is Amazon Elastic Block Store (EBS)?

A

A service that provides block level storage volumes that you can use with Amazon EC2 instances. If you stop or terminate an EC2 instance, all the data on the attached EBS volume remains available.

59
Q

What is an EBS snapshot?

A

An incremental backup. The first backup taken of a volume copies all the data. For subsequent backups, only the blocks of data that have changed since the most recent snapshot are saved.

60
Q

What are two characterizes of the Amazon EBS service?

A

Best for data that requires retention

Separate drives from the host computer of an EC2 instance

61
Q

In object storage, what does each object consist of?

A

Data
Metadata
A Key

62
Q

What is Amazon Simple Storage Service (S3)?

A

A service that provides object level storage

63
Q

How does Amazon S3 store its data?

A

As objects in buckets

64
Q

What is the maximum file size for an object in Amazon S3?

A

5 TB

65
Q

You want to store data that is infrequently accessed but must be immediately available when needed. Which Amazon S3 storage class should you use?

A

S3 Standard-IA

66
Q

What is the ideal use case for file storage?

A

When a large number of services and resources need to access the same data at the same time

67
Q

What is Amazon Elastic File System (EFS)?

A

A scalable file system used with AWS Cloud Services and on premises resources. It scales automatically as you add or remove files

68
Q

How many Availability Zones does an Amazon EBS Volume store data in?

A

One.

69
Q

To attach an Amazon EC2 instance to an EBS volume, where must they reside?

A

In the same Availability Zone.

70
Q

Amazon EFS stores its data in how many Availability zones?

A

Multiple. It is a regional service.

71
Q

How is data stored in a relational database?

A

Data is stored in a way that relates it to other peices of data

72
Q

Amazon RDS is available on what six database engines?

A
  1. Amazon Aurora
  2. PostgreSQL:
  3. MySQL
  4. MariaDB
  5. Oracle Database
  6. Microsoft SQL Server
73
Q

What databases is Amazon Aurora compatible with?

A

MySQL (5 times faster) and PostgreSQL (3 times faster)

74
Q

How does Amazon Aurora help to reduce database costs?

A

It reduces unnecessary input/output (I/O) operations, while ensuring your database resources remain reliable and available.

75
Q

What kind of schemas do non relational databases have?

A

Simple schemas

76
Q

What are some key points about DynamoDB?

A
  1. Non-relational NoSQL database
  2. Purpose Built
  3. Millisecond response time
  4. Fully managed
  5. Highly Scalable
77
Q

Why are nonrelational databases sometimes referred to as “NoSQL databases”?

A

They use structures other than rows and columns to organize data. (e.g. key value pairs)

78
Q

What is Amazon DynamoDB?

A

It is a key-value database service.
It delivers a single digit millisecond performance at any scale.
It is serverless and has automatic scaling

79
Q

What are differences between Amazon RDS and Amazon DynamoDB

A

Amazon RDS has automatic high availability and customer ownership of data, schema, and network.

Amazon DynamoDB has Key-value, massive throughput capabilities, PB size potential, and granular API access

80
Q

Name two scenarios where you should use Amazon RDS?

A

Using SQL to organize data

Storing data in an Amazon Aurora Database

81
Q

What does AWS Database Migration Service (DMS) enable you to do?

A

Enables you to migrate relational databases, nonrelational database, and other types of data stores.

You move data between a source database and a target database of same or different types.

82
Q

What is Amazon DocumentDB?

A

A document database service that supports MongoDB workloads

83
Q

What is Amazon Neptune?

A

A graph database service. works with highly connected datasets, such as recommendation engines, fraud detection, and knowledge graphs.

84
Q

What is Amazon Quantum Ledger Database (QLDB)?

A

A ledger database service that reviews a complete history of all the changes that have been made to your application data.

85
Q

What is Amazon Managed Blockchain?

A

A service that you can use to create and manage blockchain networks with open-source frameworks. Blockchains are a distributed ledger system that lets multiple parties run transactions and share data without a central authority.

86
Q

What is Amazon ElastiCache?

A

A service that adds caching layers on top of your database to help improve the read times of common requests. It supports two types of data stores: Redis and Memcached.

87
Q

What is Amazon DynamoDB Accelerator?

A

An in-memory cache for DynamoDB. It helps improve response times from single digit milliseconds to microseconds.

88
Q

Which Amazon S3 Storage classes are optimized for archival data? (2)

A

Amazon S3 Glacier Flexible Retrieval

Amazon S3 Glacier Deep Archive

Objects can be retrieved within a few minutes to a few hours.

89
Q

Which AWS service is best for storing data in an object storage service?

A

Amazon Simple Storage Service (S3)

90
Q

This statement best describes which Amazon Service? “A serverless key-value database service”

A

Amazon DynamoDB

91
Q

Which service is used to query and analyze data across a data warehouse?

A

Amazon Redshift

It collects data from many sources to help you understand relationships and trends across your data.

92
Q

Explain the AWS shared responsibility model in simple terms.

A

AWS controls security of the cloud. You control security in the cloud.

93
Q

When creating an IAM user how many permissions do they have by default?

A

0

94
Q

What is the Least Privilege Principle?

A

A user is granted access only to what they need. Be default they do not have access to anything.

95
Q

What is an IAM policy?

A

The way you grant or deny users permission utilizing JSON. It describes what API calls a user can or cannot make.

96
Q

What are the options for the “Effect” key for IAM policy?

A

Allow or deny

97
Q

What does the “Action” key do for IAM policies?

A

You can list any AWS API call.

98
Q

What does the “Resource” key do in IAM policies?

A

You can list which AWS resource the specific API call is for

99
Q

What are IAM Groups?

A

An easy way to provide access for multiple users.

100
Q

Explain AWS IAM roles.

A

Associated permissions that allow or deny access. They are assumed for temporary amounts of time.

101
Q

What is the root user?

A

The user that has complete access to all AWS services and resources in the account

102
Q

In AWS Organizations, where can you centrally control permissions for the accounts in your organization?

A

Service Control Policies (SCPs)

103
Q

What two identities and resources can be applied to Service control Policies in AWS Organizations?

A

An Individual Member Account

An Organizational Unit (OU)

104
Q

What is AWS Artifact?

A

A service that provides on-demand access to AWS security and compliance reports and select online agreements.

105
Q

What tasks can you complete in AWS Artifact?

A

Access AWS compliance reports on-demand

Review, accept, and manage agreements with AWS

106
Q

What is Distributed Denial of Service (DDoS)

A

A deliberate attempt from multiple sources to make a website or application unavailable to users.

107
Q

What is AWS Sheild?

A

A service that protects applications against DDoS attacks.

108
Q

What are the three parts of Amazon Inspector?

A

Network configuration reachability piece

Amazon agent

Security assessment service

109
Q

What does AWS Key Management Service (KMS) enable?

A

Enables you to perform encryption operations through the use of cryptographic keys: a random string of digits used for encrypting/decrypting data

110
Q

What is AWS WAF?

A

A web application firewall that lets you monitor network requests that come into your web applications. It uses web access control list (ACL) to block or allow traffic.

111
Q

What is a document that grants or denies permissions to AWS services and resources?

A

IAM policy

112
Q

An employee requires temporary access to create several Amazon S3 buckets. What service would be the best choice for this task?

A

IAM Role

113
Q

Granting only the permissions that are needed to perform specific tasks best describes what?

A

The Principle of Least Privilege

114
Q

Which service helps protect your applications against distributed denial of service (DDoS) attacks?

A

AWS Shield

115
Q

Which task can AWS Key Management Service (KMS) perform?

A

Create cryptographic keys

116
Q

What is Amazon CloudWatch?

A

A web service that enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics.

117
Q

What are CloudWatch Alarms?

A

They automatically perform actions if the value of your metric has gone above or below a predefined threshold.

118
Q

Whta is AWS CloudTrail?

A

It records API calls for your account such as identity of the API caller, the time of the API call, and the source IP address of the API caller.

119
Q

What are two tasks you can perform using AWS CloudTrail?

A

Track user activities and API requests throughout your AWS infrastructure

Filter logs to assist with operational analysis and troubleshooting

120
Q

What is AWS Trusted Advisor?

A

A web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices

121
Q

What two actions can you perform using Amazon CloudWatch?

A

Monitor your resources’ utilization and performance

Access metrics from a single dashboard

122
Q

Which service enables you to review the security of your amazon S3 buckets by checking for open access permissions?

A

AWS Trusted Advisor

123
Q

What are two categories included in the AWS Trusted Advisor Dashboard?

A

Performance

Fault Tolerance

(Others include cost optimization, security and service limits)

124
Q

What are the 6 pillars of AWS Well Architected Framework?

A

Operational Excellence
Security
Reliability
Performance Efficiency
Cost Optimization
Sustainability

125
Q
A