Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS > AWS Cloud Practitioner > Flashcards

AWS Cloud Practitioner Flashcards

1
Q

What are the 6 advantages of cloud computing?

A

Trade capital expense for variable expense

Benefit from massive economies of scale

Stop guessing about capacity

Increase speed and agility

Stop spending money running and maintaining DCs

Go global in minutes - near infinite scale

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the types of cloud computing?

A

IAAS - manage server and OS, e.g. EC2

PAAS - someone else manages underlying OS and machine, e.g. Elastic beanstalk

SAAS - you only use the software and how to use it, e.g. gmail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the types of cloud computing deployments/

A

Public cloud - AWS, Azure, GCP

Hybrid cloud - mixture of public and private

Private cloud (on prem) - in your datacentre using Openstack or Vmware

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What’s the difference between AZs, regions and edge locations?

A

Availability zone - data centre (potentially a few near each other) - each have redundant power, networking etc.

Region - a geographical area - consists of 2 or more availability zones

Edge locations - endpoints for AWS which are used for caching content (e.g. for CloudFront CDN). Currently there are over 150 edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the 4 types of support plan?

A

Basic, Developer, Business and Enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the IAM user access types?

A

Programmatic and console access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the 3 different ways to access the AWS platform?

A

Console
Programmatically
SDK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is best practice when creating a root account?

A

Secure password, enable MFA, create individual IAM users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the structure of a policy?

A

JSON document that defines effect (allow/deny), resource and actions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is S3?

A

Simple Storage Service

Object based, as opposed to block-based (which is more appropriate for OS files, DB engine etc.)

Objects are stored as key/value pairs: key of the object (name) and value is the bytes (data)

Data is spread across multiple devices and facilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the maximum object size in S3?

A

Storage is unlimited (max object size of 5TiB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Do bucket names have to be unique?

A

Bucket name must be unique as DNS entry is created for the bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the data consistency characteristics of S3?

A

Read after write consistency for PUTs of new objects

Eventual consistency for overwrite PUTs and DELETEs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the percentage guarantees of S3 for availability and durability?

A

Built for 99.99% availability

99.9% availability guaranteed

Durability guaranteed to 99.99999999999% (11x9s) - very unlikely you will lose any data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the storage classes of S3?

A

Standard - 99.99% availability and 99.99999999999% durability. Stored redundantly across multiple devices in multiple facilities - designed to sustain the loss of 2 facilities concurrently

IA (Infrequently accessed) - for data that is accessed less frequently, but requires rapid access when needed. Lower fee than S3, but changed a retrieval fee

One Zone IA - lower cost than IA, where multiple availability zone data resilience is not required

Intelligent Tiering - uses ML to automatically move data to most cost-effective access tier without performance impact or operational overhead
Glacier - for data archiving. Cheap, and retrieval time can be configured from minutes to hours

Glacier deep archive - lowest-cost storage class where a retrieval time of 12h is acceptable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Are buckets global or per region?

A

When you view buckets, you view them globally, but you can have buckets in individual regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Is the storage class of S3 per-bucket or per-object/

A

When changing storage class, this is done per object in a bucket (I suppose this allows lifecycle rules to work easily)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the charges for S3?

A

Storage

Requests

Storage Management Pricing

Data Transfer Pricing

Transfer Acceleration (fast, easy and secure file transfers over long distances - takes advantage of CloudFront edge locations. Data arrives at edge location and is routed to Amazon S3 over an optimized network path. There is a tool that will tell you have much faster it is to various locations from where you are)

Cross Region Replication Pricing (automatic replication of objects from a primary bucket into a secondary bucket in another region)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the URL format for statically hosted S3 websites?

A

URL format: .s3-website-.amazonaws.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Does S3 scale automatically?

A

Yes.

S3 will scale automatically with demand - great for static sites where there will be a large number of requests (e.g. movie preview)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is CloudFront?

A

Cloudfront is a CDN (content delivery network). A CDN is a system of distributed servers (network) that deliver web content to a user based on the geographic locations of the user, the origin of the webpage, and a content delivery server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the types of CloudFront distribution?

A

Web Distribution - typically used for websites

RTMP - used for media streaming (adobe flash media protocol)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is a CloudFront edge?

A

Edge - location where content is cached (separate from AWS region or availability zone)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is a CloudFront origin?

A

Origin - the origin of all files that the CDN will distribute (can be S3 bucket, EC2 instance, elastic load balancer or Route53)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is a CloudFront distribution?

A

Distribution - name given to the CDN which consists of a collection of edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Are edge locations readonly?

A

No, edge locations are not just readonly - you can write to them, too (e.g. S3 transfer acceleration)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Is there a charge for purging CloudFront caches?

A

Cached objects can be cleared, but there’s a charge for each purge request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is EC2?

A

Elastic Compute Cloud.

Virtual servers in the cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What are the pricing models for EC2?

A

On Demand

Reserved

Spot

Dedicated Host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is on-demand EC2 pricing? What workloads is it suitable for?

A

Payed by the hour (or second for linux).

No up-front payment.

Great for apps with short-term, spiky or unpredictable workloads that cannot be interrupted (e.g. dev/test)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is reserved EC2 pricing? What workloads is it suitable for?

A

provides you with a capacity reservation, but offers a significant discount on the hourly charge for an instance. Contract terms a 1 year or 3 year terms. More paid up front, more discount you get (max discount is if all is paid up-front).

Great for apps with steady state or predictable usage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What are the 3 types of reserved EC2 pricing models?

A

Standard reserved instances - offer upto 75% off on demand instances. More you pay up front and the longer the contract, the greater the discount. Issue is that you can’t change product family (e.g. go from high performance compute to high performance memory)

Convertible reserved instances - offer upto 54% off on-demand capability to change the attributes of the RI as long as the exchange results in the creation of reserved instances of equal or greater value

Scheduled reserved instances - available to launch within time windows you reserve. Allows you to match your capacity reservation to a predictable recurring schedule that requires a fraction of a day/week/month

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is spot EC2 pricing? What workloads is it suitable for?

A

Spot - enables you to bid whatever price you want for instance capacity - great savings if your apps have flexible start/end times (instance provisioned when spot price met, and will be lost when price exceeds your spot price)

Good for apps with flexible start/end times

Good for apps that are only feasible at very low compute prices, e.g. genomics that can be done at night

Good for users with urgent compute needs who need a large amount of additional capacity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Does a customer pay for an hour of EC2 spot instance if the instance is interrupted?

A

If you don’t get a full hour of compute because the price goes up, you won’t be charged for a partial hour.

But if you terminate the instance, you will be charged

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is dedicated host EC2 pricing? What workloads is it suitable for?

A

Dedicated hosts - physical dedicated servers - help reduce costs by allowing you to use your existing server-bound software licences (quite rare - often used when some software being used requires a dedicated host)

Useful for regulatory requirements that may not support multi-tenant virtualization

Great for licensing that doesn’t support multi-tenancy or cloud deployments

Can be purchased on-demand (hourly) or as a reservation for upto 70% off the on-demand price

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What are the EC2 instance types?

A

Spell out FIGHT-DR-MC-PXZ

F - FPGA
I - IOPS (I/O per second)
G - Graphics
H - High disk throughput
T - Cheap general purpose (e.g. T2 Micro)
D - Density
R - RAM
M - Main choice (general purpose)
C - Compute
P - Graphics (think pics)
X - Extreme memory
Z - Extreme memory and CPU
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is AWS EBS?

A

Elastic Block Store.

Used for VHDDs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What are the types of volume available on EBS?

A

SSD:
General purpose SSD (GP2) - balances price and performance
Provisioned IOPS SSD (IO1) - highest-performance SSD (low latency or high throughout workloads)

Magnetic:
Throughput Optimised HDD (ST1) - low cost HDD volume designed for frequently accessed, throughout-intensive workloads
Cold HDD (SC1) - lowest cost, designed for less frequently accessed workloads (file servers)
Magnetic - previous generation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Do EBS volumes need to be in the same AZ as an attached EC2 instance?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Do EBS volumes auto-replicate?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

If you use a private key to SSH to an EC2 box, which user do you login with?

A

ec2-user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What are security groups?

A

Firewalls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Are roles more secure than id/key pairs? Why

A

Yes - don’t need to put credentials on the EC2 instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

How long to EC2 role changes take to become effective?

A

Role changes are effective immediately

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Is IAM per region?

A

No, it is universal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is AWS ELB?

A

Elastic Load Balancer?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What are the 3 types of ELB?

A

Application load balancer - can make decisions based off application state (can see into layer 7)

Network load balancer - when you need ultra-high performance and static IP addresses

Classic - previous generation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is the OSI model?

A

Open Systems Interconnection - defines 7 layers of computational communication.

1 is physical layer, 7 is application layer.

4 is transport layer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Which DBs are available on RDS?

A 
SQL Server
Oracle
MySQL Server
PostgreSQL
Aurora (invented by Amazon) - compatible with MySQL - 6 copies of DB across availability zones
MariaDB
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

How many copies of data are created for Aurora?

A

6 across different AZs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What are the two key features of RDS?

A

Multi-AZ (for disaster recovery) - apps use DNS name, not IP addresses of specific instances

Read Replicas (for performance) - replicates primary DB to read replicas. They’re NOT for failover - without Multi-AZ your DB would be down. The read-replicas have their own DNS names so things can be scaled out. Can have upto 5 copies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What is Amazon DynamoDB?

A

NoSQL DB as a service. Can scale automatically.

An questions around being able to auto-scale but the type of DB isn’t mentioned - go with DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What is Amazon Redshift?

A

Fully managed, petabyte-scale data warehouse service in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

How many GB in a Petabyte?

A

1,000,000 GBs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What are the four main differences of cloud computing?

A

IT assets become programmable resources - no more procurement and racking/stacking servers. TIME TO MARKET MUCH QUICKER

Global, available, and unlimited capacity - can deploy around the world, don’t need to arrange in other countries

Higher level managed services - e.g. ML - don’t need to hire an ML specialist

Security build in - firewalls, DDoS protection, can security audit quickly in test environments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What are the 11 design principles of AWS architecture best practice?

A 
Scalability (up and out)
Disposable resources instead of fixed servers
Automation
Loose Coupling
Services, Not Servers
Databases
Managing Increasing Volumes of Data
Removing single points of failure
Optimize for cost
Caching
Security
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What is AWS EMR?

A

Elastic MapReduce

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What is AWS SQS?

A

Simple Queue Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What is the minimum number of AZs in a region?

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What is the AWS pricing philosophy?

A

AWS philosophy on pricing: pay for what you used at the end of each month, start/stop using a product at any time, no long term contracts required

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What is the AWS free tier?

A

Free tier - to get started in the cloud Can run a free EC2 micro instance for a year + other free allowances in S3, EBS, ELB, data transfer and other services

62
Q

What are the 5 AWS pricing policies?

A

Apply across all services:

Pay as you go (for EC2, linux is by the second, windows is by the hour)

Pay less when you reserve (e.g. EC2 have 12 and 36 month contracts)

Pay even less per unit by using more (e.g. for S3, price drops depending on amount stored)

Pay even less as AWS grows
Custom pricing (for enterprises spending a lot)
63
Q

What are some examples of free AWS services?

A

VPC
Elastic beanstalk (services it provisions aren’t free)
CloudFormation
IAM
Autoscaling
Opsworks
Consolidated billing (combine multiple accounts into one bill)

64
Q

What are the 3 fundamental charges in AWS?

A

Compute

Storage

Data out (NOT in)

65
Q

Is data IN typically charged for in AWS?

A

No.

66
Q

What determines the price of an EC2 instance?

A

Clock hours of server time

Machine config (about of memory and CPU)

Machine purchase type (instance types)

Number of instances

Load balancing

Detailed monitoring (monitoring by the minute instead of every 5 minutes)

Autoscaling (more instances)

Elastic IP addresses

OSs and software packages

67
Q

What determines price in S3?

A

Storage class (standard or IA)

Storage amount

Requests (GET, PUT, COPY)

Data transfer out

68
Q

What determines price in RDS?

A

Clock hours of server time

Database characteristics (e.g. multi-AZ, read-replica, licencing)

DB purchase type (instance size)

Number of DB instances

Provisioned storage

Additional storage

Requests

Deployment type (multi-AZ, read-replicas)

Data transfer out

69
Q

What determines price in CloudFront?

A

Traffic distribution

Requests

Data transfer out

70
Q

What is a tag?

A

Key/value pairs attached to AWS resources

Metadata (data about data)

71
Q

Can tags be inherited?

A

Yes - tags can sometimes be inherited (services that create other resources, e.g. autoscaling, cloudformation, elastic beanstalk)

72
Q

What is a resource group?

A

Resource groups allow easy grouping of resources using tags that are assigned to then. Can group resources that share one or more tags. Resource groups contain information such as:

Region
Name
Health checks
For EC2 - public and private IP addresses
For ELB - port configurations
For RDS - DB engine etc.
73
Q

What is AWS Organisations?

A

Account management service that enables consolidation of multiple AWS accounts into an organization that you create and centrally manage

74
Q

What are the two feature sets of AWS Organisations?

A

Consolidated billing (no policy-based features - just consolidated billing)

All features (includes policy-based features as well as consolidated billing)

75
Q

What is an OU in AWS Organisations?

A

Can apply policies to organisational units (OUs) - a root account can have many OUs and and OU can have many accounts

76
Q

Does a root account have access to the resources of other linked accounts?

A

Paying account (root account) doesn’t have access to resources of other accounts, and all linked accounts are independent of each other.

77
Q

What is the maximum number of linked accounts?

Can more be requested?

A

20.

Yes, more can be requested.

78
Q

What are the advantages of consolidated billing using AWS Organisations/

A

One bill per AWS account
Very easy to track charges and allocate costs
Volume pricing discount (e.g. aggregate amount in S3 is considered to find per GB price). Reserved instances that aren’t being used in one account can be used in another instead of on-demand

79
Q

What are the best practices for setting up AWS organisations?

A

Always enable multi-factor authentication of root account

Always use a strong and complex password on root account

Paying account should be using billing purposes only. Do not deploy resources into paying account

80
Q

Can billing alerts be configured for all linked accounts in aggregate?

A

Yes

81
Q

Is CloudTrail per account or can it be centralised?

A

CloudTrail is on a per account and per region basis but can be aggregated into a single bucket in the paying account (auditing of AWS activity)

82
Q

What is AWS QuickStart?

A

Pre-build cloud formation templates built by solution architects using AWS best practices for architecture and security

E.g. deploy Puppet, Jira, SQL Server etc.

83
Q

What are the two available calculators for AWS?

A

Simple monthly calculator

Total cost of ownership (TCO) calculator - takes into account all costs if you owned all the infrastructure, including IT labor costs (useful for comparing to the cloud)

84
Q

What are the 3 sections of AWS compliance?

A

Certifications/attestations (e.g. ISO 27001, PCI DSS level 1, SOC 1/2/3)
Laws, regulations and privacy (HIPAA (USA healthcare), GDPR)
Alignments/frameworks (G-Cloud UK - for uk gov to host in cloud)

85
Q

What is SOC 1/2/3?

A

SOC is Service Organization Control - making sure systems are set up so they assure security, availability, processing integrity, confidentiality, and privacy of customer data.

86
Q

What is the name of the US regulation for storing personal healthcare information?

A

HIPAA

87
Q

What is the shared responsibility model of security in AWS?

A

AWS manages security of the cloud - e.g. patching OSs that customers can’t access (like those for RDS), physical security at datacentres etc.

Security IN the cloud is responsibility of the customer - they chose to implement security measures to protect their own content, platform, apps, system, networks etc. no differently than they would on-premise

Essentially - if the customer has control over it, they are responsible for it

Good analogy: cloud is your house. AWS is responsible for the walls, doors, floors etc. But it’s up to you to lock the front door and look after everything you put in the house

88
Q

What is WAF?

A

WAF (web application firewall) helps protect web apps from common web exploits that could affect app availability, compromise security, or consume excessive resources.

ELBs and security groups operate at layer 4 - let in this particular port. But we have no idea what data is being transmitted. This wouldn’t defend an exploit like SQL injection.

This could be mitigated by implementing WAF - this operates at layer 7, so it can read the actual data of the request. It will prevent dangerous traffic from reaching its destination

89
Q

What is AWS Shield?

A

AWS Shield is a DDoS protection service for apps running on AWS. It provides always-on detection and automatic inline mitigations that minimize apps downtime and latency (so no need to engage AWS support to benefit from DDoS protection). There are two tiers:

Standard - free - get this automatically

Advanced - around $3,000 per month

90
Q

What is AWS inspector?

A

AWS Inspector is an automated security assessment service that helps improve the security and compliance of apps deployed on AWS. It automatically assesses apps for vulnerabilities or deviations from best practices.
After performing an assessment, it produces a detailed list of security findings prioritized by level of severity. These findings can be reviewed directly or as part of detailed assessment reports which are available via the Amazon Inspector console or API.

It’s essentially an agent installed on EC2 instances that reports back.

91
Q

What is AWS trusted advisor?

A

AWS Trusted Advisor is an online resource to help reduce cost, increase performance, and improve security by optimizing your AWS environment. It provides real-time guidance to help you provision your resources following AWS best practices. It will advise on cost optimization, performance, security and fault tolerance (e.g. multi-AZ).

So, it’s not just a security advisor, and isn’t only for EC2 (like inspector).

Two types:
Core checks and recommendations: free, everyone gets this
Full Trusted Advisor - business and enterprise customers only

92
Q

What are the two levels of AWS Trusted Advisor?

A

Core checks and recommendations: free, everyone gets this

Full Trusted Advisor - business and enterprise customers only

93
Q

Which native AWS service will act as a file system mounted on an S3 bucket?

A

AWS Storage Gateway.

94
Q

What is EFS?

A

EFS (Elastic File System) is mountable file storage for EC2

95
Q

What is EBS?

A

EBS is block level storage for EC2

96
Q

Which AWS services should you use if you’d like to be notified when you have crossed a billing threshold?

A

CloudWatch and AWS Budget

97
Q

What’s a good way to assign permissions to IAM users?

A

Via groups

98
Q

True or False: There are more Regions than there are Availability Zones.

A

False

99
Q

Which of the following AWS Support levels offers the assistance of a Technical Account Manager?

A

Enterprise

100
Q

What is the definition of availability zones?

A

Distinct locations from within an AWS region that are engineered to be isolated from failures.

101
Q

What is the definition of a region?

A

A distinct location within a geographic area designed to provide high availability to a specific geography.

102
Q

What are the possible CloudFront Origins?

A

S3 bucket
EC2 instance
Elastic Load Balancer
Route53

103
Q

Where is CloudFront content cached?

A

Edge Locations

104
Q

What is elasticity?

A

Being able to change capacity easily

105
Q

What is a CloudFront Distribution?

A

A series of edge locations that make up a CDN

106
Q

Is IAM a global service?

A

Yes

107
Q

How can you restrict access to an entire S3 bucket and an individual object in the bucket

A

Whole thing - bucket policies

Individual objects - Access Control Lists (ACLs)

108
Q

Which data archival service is extremely inexpensive, but has a several hour data-retrieval window?

A

Glacier

109
Q

Which AWS Support levels offers 24x7 support via phone or chat?

A

Business and Enterprise

110
Q

What is Amazon Lightsail, and what type of cloud computing is it?

A

You can get preconfigured virtual private server plans that include everything to easily deploy and manage your application. Lightsail is best suited to projects that require a few virtual private servers and users who prefer a simple management interface. Common use cases for Lightsail include running websites, web applications, blogs, e-commerce sites, simple software, and more.

It’s PaaS.

111
Q

How does S3 Transfer Acceleration work?

A

It uses Amazon’s network of edge locations to allow users to upload/download files from a nearby location, and then send the file across Amazon’s private optimized network.

112
Q

Which of the following support plans features a < 4-hour response time in the event of an impaired production system?

A

Business and enterprise

113
Q

Which of the following support plans features a < 15-minute response time in the event of a down business-critical system?

A

Enterprise

114
Q

Is VPC free?

A

Yes, but the resources in it might not be

115
Q

What’s the difference between AWS Organisations and Consolidated Billing?

A

Consolidated Billing is a feature of AWS Organisations.

116
Q

What is a resource group?

A

A resource group is a collection of resources that share one or more tags (or portions of tags.)

117
Q

Is “Options” a valid CloudFormation template section?

A

In total there are 9 valid sections allowed within a CloudFormation template. In the answers above, only “Parameters”, “Resources” and “Outputs” are considered valid. “Options” is not a template section.

118
Q

Which Route 53 policies allow you to a) route data to a second resource if the first is unhealthy, and b) route data to resources that have better performance?

A

Failover Routing and Latency-based Routing are the only two correct options, as they consider routing data based on whether the resource is healthy or whether one set of resources is more performant than another. Any answer containing location based routing (Geoproximity and Geolocation) cannot be correct in this case, as these types only consider where the client or resources are located before routing the data. They do not take into account whether a resource is online or slow. Simple Routing can also be discounted as it does not take into account the state of the resources.

119
Q

Which support plans features access to AWS Support during business hours via email?

A

The Developer support plan features access to AWS support explicitly during business hours via email. With the AWS exams you need to be careful of wording. Business and Enterprise offer 24x7 access not just business hours. If you were asked to provide three answers those might be included, but with only 1 answer, you must chose the most precise answer.

120
Q

What is AWS’ managed DDoS protection service?

A

AWS Shield

121
Q

You need to use an AWS service to assess the security and compliance of your EC2 instances. Which service should you use?

A

AWS Inspector

122
Q

Which service will help you optimize your entire AWS environment in real time following AWS best practices?

A

AWS Trusted Advisor

123
Q

True or False: Security in the cloud is the responsibility of AWS.

A

False

124
Q

True or False: The Standard version of AWS Shield offers automated application (layer 7) traffic monitoring.

A

False - Only AWS Shield Advanced offers automated application layer monitoring.

Standard does give basic DDoS protection.

125
Q

Which service can help you assess the fault-tolerance of your AWS environment?

A

AWS Trusted Advisor

126
Q

The AWS Web Application Firewall can go down to which OSI layer?

A

7

127
Q

You have a project that will require 90 hours of computing time. There is no deadline, and the work can be stopped and restarted without adverse effect. Which computing option offers the most cost-effective solution?

A

Spot instances would be the most cost-effective solution.

128
Q

Which AWS service should you use to migrate an existing database to AWS?

A

The AWS Database Migrations Service is the best choice for conventional data migrations.

129
Q

How much faster is Aurora than traditional MySQL?

A

x5 faster

130
Q

You have a mission-critical application which must be globally available at all times. Which deployment strategy should you follow?

A

Multi-region

131
Q

Which AWS service is specifically designed to assist you in processing large data sets?

A

EMR (Elastic MapReduce)

132
Q

What is AWS’ Data Warehousing service?

A

Redshift

133
Q

Which native AWS service will act as a file system mounted on an S3 bucket?

A

The Storage Gateway service is primarily used for attaching infrastructure located in a Data centre to the AWS Storage infrastructure. The AWS documentation states that; “You can think of a file gateway as a file system mount on S3.” Amazon Elastic File System (EFS) is a mountable file storage service for EC2, but has no connection to S3 which is an object storage service. Amazon Elastic Block Store (EBS) is a block level storage service for use with Amazon EC2 and again has no connection to S3.

134
Q

Which support service do all accounts receive as standard?

A

Billing support

135
Q

Which support plans features unlimited (customer-side) contacts and unlimited support cases?

A

Business and Enterprise

136
Q

What is FPGA?

A

Field programmable gate array

137
Q

What are the 5 pillars of the AWS well architected framework?

A

Security

Reliability

Performance efficiency

Cost optimisation

Operational excellence

138
Q

AWS framework: what are the 4 areas of security to consider?

A

Data Protection

Privilege Management

Infrastructure Protection

Detective Controls

139
Q

AWS framework: what are the 3 areas of reliability to consider?

A

Foundations (e.g. bandwidth)

Change Management

Failure Management

140
Q

AWS framework: what are the 4 areas of performance efficiency to consider?

A

Compute

Storage

Database

Space-time tradeoff

141
Q

AWS framework: what are the 4 areas of cost optimization to consider?

A

Matched supply and demand

Cost-effective resources

Expenditure Awareness

Optimizing over time

142
Q

AWS framework: what are the 3 areas of operational excellence to consider?

A

Preparation

Operation

Response

143
Q

In EC2, what is the difference between EBS-backed and instance-backed storage?

A

EBS backed volumes are persistent (can be detached and attached to another instance). When instance is stopped, data will persist.

Instance store backed volumes are ephemeral (so can’t attach to another EC2 instance - it’s only there for life of instance). When instance is stopped, data is wiped

EBS = long term storage

Instance storage - shouldn’t be used for long-term data storage

144
Q

What is OpsWorks?

A

Orchestration service that uses Chef and Puppet

A way of using infrastructure as code to ensure desired state across resources

Contains “recipes” to maintain a consistent state

Look for terms chef, recipes or “cook books” and think OpsWorks

145
Q

In EC2, what is the difference between EBS-backed and instance-backed storage?

A

EBS backed volumes are persistent (can be detached and attached to another instance). When instance is stopped, data will persist.

Instance store backed volumes are ephemeral (so can’t attach to another EC2 instance - it’s only there for life of instance). When instance is stopped, data is wiped

EBS = long term storage

Instance storage - shouldn’t be used for long-term data storage

146
Q

What is OpsWorks?

A

Orchestration service that uses Chef and Puppet

A way of using infrastructure as code to ensure desired state across resources

Contains “recipes” to maintain a consistent state

Look for terms chef, recipes or “cook books” and think OpsWorks

147
Q

What are the two main feature sets of AWS Organisations?

A

Consolidated billing (just having a single payer and consolidated bill)

All features (consolidated billing features AND policy-based controls and hierarchical management of accounts)

148
Q

What is an Organisational Unit?

A

A way in AWS Organisations to group accounts together

149
Q

What is the default maximum limit for linked accounts for consolidated billing?

A

20 accounts

150
Q

How does volume discounting work with AWS linked accounts?

A

You will get volume discount based on the usage across all accounts

151
Q

How do reserved instances work with AWS linked accounts?

A

If one linked account is not using an RI, another account can use it

152
Q

Can you consolidate CloudTrail logs?

A

CloudTrail is per AWS account and enabled per region, but you can consolidate using an S3 bucket:

  1. Turn on CloudTrail in paying account
  2. Create bucket policy that allows cross-account access
  3. Turn on CloudTrail in other accounts and use bucket in paying account

AWS (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions