AWS Cloud Practitioner Flashcards
With the IaaS cloud model, the cloud service provider provides what service? While the customer manages what services?
The provider manages virtualization, servers, storage, and networking.The company manages applications, data, runtime, middleware, and operating systems.
With the PaaS cloud model, the cloud service provider provides what service? While the customer manages what services?
The provider manages runtime, middleware, operating systems, virtualization, servers, storage, and networking.The company manages applications and data.
With the SaaS cloud model, the cloud service provider provides what service? While the customer manages what services?
The provider manages applications, data, runtime, middleware, operating systems, virtualization, servers, storage, and networking.The company manages nothing.
Which access method provides packages that allow the developers to access AWS in a variety of popular programming languages and make it easy to use AWS in their existing applications?
AWS Software Development Kits (SDKs)
What tool can be used to create estimates for AWS use cases?
AWS Pricing Calculator
Cloud service providers like AWS can pass savings to their customers by aggregating usage from hundreds of thousands of customers in the cloud. What is this cloud computing advantage called?
Massive economies of sale
With cloud computing, a company stops guessing how much capacity it will need over time and starts scaling up and down as needed with only a few minute’s notice. What is this cloud computing advantage called?
Stop guessing capacity
Which AWS compute service enables a company to run code without managing or provisioning servers.
AWS Lambda
Which AWS service is a CDN (content deliver network) platform that securely delivers video, data, and applications to customers globally with low latency and high transfer speeds.
Amazon CloudFront
What AWS infrastructure is designed to deliver services with the lowest latency possible? They are closer to users than regions or availability zones, often in major cities, so responses can be fast.
Edge locations
What security measures are AWS responsible for in the cloud?
Physical security of data centers
Hardware and software infrastructure
Network Infrastructure
Virtualization infrastructure
What security measures are the Customer responsible for in the cloud?
Selecting and securing any instance operating systems
Securing the applications that are launched on AWS resources
Security group configurations
Firewall configurations
Network configurations
Account management
What tool allows you to control access to compute, storage, database, and application services in the AWS Cloud?
AWS Identity and Access Management (IAM)
What are the essential components of Identity and Access Management (IAM)?
IAM user
IAM group
IAM policy
IAM role
Which AWS service would allow a company to consolidate billing and payment for multiple AWS accounts?
AWS Organizations
How can a company ensure that provisioned accounts stay in the company’s access control guidelines?
Use a service control policy (SCP) to define the maximum available permissions for all the AWS accounts.
A service control policy (SCP) specifies the services and actions that users and roles can use in the accounts that the SCP affects. SCP offers central control over the maximum available permissions for all accounts in AWS Organizations.
Which AWS service can a company use if they use AWS Key Management Service (KMS) to protect its design data and must log all key usage?
AWS CloudTrail
AWS KMS integrates with AWS CloudTrail, which logs all the key usage.
What AWS service provides authentication, authorization, and user management for web and mobile apps, allowing users to sign in directly with a username and password, or through a third party such as Facebook, Amazon, Google, or Apple.
Amazon Cognito
Which AWS solution can a company use to protect its web application against infrastructure attacks?
AWS Shield
It is a managed distributed denial of service (DDoS) protection service that safeguards applications running on AWS.
A developer is testing a new application hosted within a custom VPC and wants only the workstation to access the application during the test.
192.0.2.0 /32
Every bit in a /32 IP address block is fixed, and none (zero) of the bits is flexible, which means 2^0 (or 1) IP address is available for the network. It represents a single IP address and a single host.
For better customer experience, a company needs a fixed IP address that will not change when it starts or stops the instance for updates. Which type of IP address is recommended for a small business to attach to its instance?
An Elastic IP address
When a company stops and restarts an EC2 instance associated with an elastic IP address, the EC2 instance retains its IP address after restarting. The existing application will not break because the application sees the (elastic) IP address it was expecting, even though the back-end EC2 instance has changed.
A cloud solutions architect is setting up a VPC to have an address space of 172.16.1.0/16. There is a requirement that all resources within the VPC must be able to talk locally to one another without any additional configuration.
What is the best destination CIDR block to route the network traffic to in the route table to meet this requirement?
172.16.1.0/16
Since the network traffic will travel local to the originating subnet, the destination CIDR block is the same as the originating 172.16.1.0/16 CIDR block.
A cloud solutions architect is setting up a custom VPC in the AWS cloud. The architect has assigned the VPC to an IPv4 classless inter-domain routing (CIDR) block size of 10.0.1.0/26 and created four equal-sized subnets.
How many IP addresses will be available for use by each subnet?
11
A /26 IP address block will have 26 (or 64) IP addresses available, which equates to 16 IP addresses for each subnet. But AWS reserves 5 IP addresses, which are not available for use, leaving only 11 IP addresses available for use per subnet.
How do you pay for AWS?
1) Pay for what you use
2) Pay less when you reserve
3) Pay less when you use more
4) Pay even less as AWS grows
For certain services like Amazon EC2 and Amazon RDS, you can invest in reserved capacity. What options are available for Reserved Instances?
1) All Upfront Reserved Instance (or AURI)
2) Partial Upfront Reserved Instance (or PURI)
3) No Upfront Payments Reserved Instance (or NURI)
Where can a customer go to get more details about Amazon EC2 billing activity that took place 3 months ago?
AWS Cost Explorer
True or False? To receive the discounted rate associated with Reserved Instances, you must make a full, upfront payment for the term of the agreement.
False
Which AWS service provides infrastructure security optimization recommendations?
AWS Trusted Advisor
Which of the following must be specified when launching a new Amazon EC2 Windows instance?
The Amazon EC2 instance type and Amazon Machine Image (AMI)
Amazon S3 replicates all objects…
in multiple availability zones within the same region.
Which of the following can be used as a storage class for an S3 object lifecycle policy?
1) S3 - Standard Access
2) S3 - Infrequent Access
3) Simple Storage Service Glacier
The name of an S3 bucket must be unique…
worldwide across all AWS accounts
What service can you use to implement storage for Amazon EC2 instances that multiple virtual machines can access at the same time?
Amazon Elastic File System (Amazon EFS)
Amazon Elastic Block Store (Amazon EBS) is recommended when data _____ and _____.
must be quickly accessible, requiring long-term persistence and requires an encryption solution.
What is a vault regarding Amazon S3 Glacier?
A container for storing archives
True or False? When you create a bucket in Amazon S3, it is associated with a specific AWS Region.
True