AWS Cloud Practitioner Essentials Flashcards
(149 cards)
1
Q
Is Amazon Elastic Compute Cloud (Amazon EC2) a physical server, or Virtual
A
Virtual
2
Q
What is is a highly scalable, fast, container management service that you can use to run, stop, and manage Docker containers on a cluster of EC2 instances.
A
Amazon Elastic Container Service (Amazon ECS)
3
Q
The process of converting data into a standard format that a service such as Amazon S3 can recognize.
A
Canonicalization
4
Q
Covered over a 1-year or 3-year term
A
EC2 instances
5
Q
Type of instances are more well suited for batch processing workloads than general purpose instances.
A
Compute optimized
6
Q
Instances that are more ideal for workloads that process large datasets in memory, such as high-performance databases.
A
Memory optimized
7
Q
EC2 instances in different Availability Zones or different instance types
A
Convertible Reserved Instances:
8
Q
Suppose that you have an application with tightly coupled components. These components might include databases, servers, the user interface, business logic, and so on. This type of architecture can be considered a
A
monolithic application
9
Q
publish/subscribe service»_space; Message board
A
Amazon Simple Notification Service (Amazon SNS)
10
Q
An application sends messages into a queue. A user or service retrieves a message from the queue, processes it, and then deletes it from the queue.
A
Amazon Simple Queue Service (Amazon SQS).
11
Q
AWS service that automatically distributes incoming application traffic across multiple resources, such as Amazon EC2 instances.
A
Elastic Load Balancing
12
Q
is a service that lets you run code without needing to provision or manage servers.
A
AWS Lambda
13
Q
open-source software that enables you to deploy and manage containerized applications at scale.
A
Kubernetes
14
Q
fully managed service that you can use to run Kubernetes on AWS.
A
Amazon Elastic Kubernetes Service (Amazon EKS)
15
Q
a fully isolated portion of the AWS global infrastructure
A
Availability Zone
16
Q
is a geographical area that contains AWS resources.
A
Region
17
Q
consists of three or more Availability Zones.
A
Region
18
Q
a data center that an AWS service uses to perform service-specific operations.
A
edge location
19
Q
uses to store cached copies of your content closer to your customers for faster delivery.
A
Amazon CloudFront
20
Q
a service that you can use to run AWS infrastructure, services, and tools in your own on-premises data center in a hybrid approach.
A
AWS Outposts
21
Q
is a web-based interface; great for learning and visual, not great for automation
A
AWS Management Console
22
Q
enables you to control multiple AWS services directly from the command line; automate actions for AWS services and applications through scripts.
A
AWS Command Line Interface (AWS CLI).
23
Q
make it easier for you to use AWS services through an API designed for your programming language or platform.
A
SDKs
24
Q
you provide code and configuration settings, and this deploys the resources necessary to perform tasks
A
AWS Elastic Beanstalk
25
Treat your infrastructure as code.
AWS CloudFormation; Template >> API >> automated processes for global deploy
26
A networking service that you can use to establish boundaries around your AWS resources
Amazon Virtual Private Cloud (Amazon VPC)(opens in a new tab)
27
a section of a VPC that can contain resources such as Amazon EC2 instances, and control access permissions
Subnet
28
a connection between a VPC and the internet
Internet Gateway
29
To access private resources in a VPC, you can use a
virtual private gateway
30
Customer website is an example of ...
Public subnet
31
Isolate PII Databases are an example of ...
Private subnet
32
Create a VPN connection between the VPC and the internal corporate network.
Virtual private gateway
33
These remember nothing and check packets that cross the subnet border each way: inbound and outbound
stateless packet filtering
34
Stateless packet filtering always
checks lists
35
Security groups perform _____ packet filtering.
Stateful
36
Does not have to check lists - and deny all inbound traffic by default.
stateful packet filtering
37
a DNS web service. It gives developers and businesses a reliable way to route end users to internet applications hosted in AWS.
Amazon Route 53
38
register new domain names directly in
Amazon Route 53
39
storage volumes that behave like physical hard drives.
Block-level storage
40
provides temporary block-level storage for an Amazon EC2 instance.
instance store
41
a service that provides block-level storage volumes that you can use with Amazon EC2 instances.
Amazon Elastic Block Store (Amazon EBS)
42
a service that provides object-level storage in buckets
Amazon A3S
43
an incremental backup
EBS snapshot
44
Designed for frequently accessed data, but requires high availability when needed
- S3 Standard: provides high availability for objects.
45
o infrequently accessed data
o has a lower storage price and higher retrieval price
- S3 Standard-IA
46
o You want to save costs on storage.
o Can easily reproduce your data in the event of an Availability Zone failure
- S3 One Zone-IA: stores data in a single Availability Zone.
47
o monitors objects’ access patterns.
o deal for data with unknown or changing access patterns
o Requires a small monthly monitoring and automation fee per object
- S3 Intelligent-Tiering
48
o Can retrieve archived data within a few milliseconds
S3 Glacier Instant: works well for archived data that requires immediate access
49
o Low-cost storage designed for data archiving
o Rretrieve objects within a few minutes to hours
- S3 Glacier Flexible Retrieval
50
supports long-term retention and digital preservation for data that might be accessed once or twice in a year.
- S3 Deep Archive - 12 to 48 hours
51
o requirements that must satisfy demanding performance needs by keeping data close to on-premises applications.
- Amazon S3 Outposts
52
individual small files
Object Storage
53
Smaller chunks, large files
Block Storage
54
A scalable file system used with AWS Cloud services and on-premises resources.
Amazon Elastic File System
55
use structured query language (SQL) to store and query data.
Relational databases
56
is available on six database engines, which optimize for memory, performance, or input/output (I/O)
Amazon Relational Database Service (Amazon RDS)
57
a service that enables you to run relational databases in the AWS Cloud.
Amazon Relational Database Service (Amazon RDS)
58
an enterprise-class relational database
Amazon Aurora
59
a key-value database service
Amazon DynamoDB
60
a data warehousing service that you can use for big data analytics. understand relationships and trends across your data.
Amazon Redshift
61
enables you to migrate relational databases, nonrelational databases, and other types of data stores.
AWS Database Migration Service (AWS DMS)
62
is a document database service that supports MongoDB workloads.
Amazon DocumentDB
63
a service that adds caching layers on top of your databases to help improve the read times of common requests
Amazon ElastiCache
64
build and run applications that work with highly connected datasets, such as recommendation engines, fraud detection, and knowledge graphs.
Amazon Neptune, a graph database service.
65
enables you to manage access to AWS services and resources securely.
AWS Identity and Access Management (IAM)
66
Makes it easier to manage accounts with similar business or security requirements
group accounts into organizational units (OUs)
67
affects all IAM users, groups, and roles within an account, including the AWS account root user.
service control policies (SCPs)
68
is a service that provides on-demand access to AWS security and compliance reports and select online agreements.
AWS Artifact
69
enables you to perform encryption operations through the use of cryptographic keys. A cryptographic key is a random string of digits used for locking (encrypting) and unlocking (decrypting) data.
AWS Key Management Service (AWS KMS)
70
lets you monitor network requests that come into your web applications.
AWS WAF - a web application firewall
71
is a service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continuously monitoring the network activity and account behavior within your AWS environment
Amazon GuardDuty
72
checks applications for security vulnerabilities and deviations from security best practices, such as open access to Amazon EC2 instances and installations of vulnerable software versions.
Amazon Inspector
73
a web service that enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics.
Amazon CloudWatch
74
* Monitor your resources’ utilization and performance
* Access metrics from a single dashboard
CloudWatch dashboard
75
* Track user activities and API requests throughout your AWS infrastructure
* Filter logs to assist with operational analysis and troubleshooting
* Not Real time – 15 minute availability
* Automatically detecting unusual account activity
AWS CloudTrail records API calls for your account. Auditing Tool
Page 9...
76
Allows for planning what ceiling will be for spending on a particular service
Cost Budgets
77
Allows for planning how much actual usage of a particular service you want to use
Usage Budgets
78
Track usage of saving plans based on utilization and trigger alerts when falling under the thresold
Savings Plans Utilization Budgets
79
Metadata assigned to AWS resources in the form of a key and value
Cost Allocation Tags
80
How does cloud computing help companies focus on innovation?
Cloud provider handles routine IT Tasks
81
AWS service that provides alerts about upcoming maintenance activities
AWS Personal Health Dashboard
82
AWS DAAS - Desktop as a Service
WorkSpaces
83
Structured in FAQ format and organized by AWS
Knowledge Center
84
Customer or AWS responsibility? Network Infrastructure
AWS
85
Customer or AWS responsibility? Physical Security of hardware
AWS
86
Customer or AWS responsibility? Virtualization Infrastructure
AWS
87
Customer or AWS responsibility? AMI - Amazon Machine Image
Customer
88
Customer or AWS responsibility? Applications in EC2 Instances
Customer
89
Provides storage for hybrid cloud services for access to on-prem resources.
AWS Storage Gateway
90
What two functions can subscribe to SNS
Email and AWS Lambda
91
AWS Program that helps the company design, build, and manage system
AWS Partner Network Consulting Partners
92
Ability of a cloud environment to function while some portions are unavailable
Resiliency
93
Pertains to the overall system being up of down
Availability
94
AZs automatically replicate data across zones - T|F
False - distributes resources, but users must configure replication and redundancy
95
AZ are connected by low-latency networks - T|F
True
96
Service that tracks SSL and cert renewals
AWS Certificate Manager
97
AWS tool best for integrating features into the application
AWS SDK
98
IAAS reduces need for DC space T|F
True
99
IAAS eliminates infra costs T|F
False
100
Fully Managed Services reduces operational overhead and reduced capital expenses - T|F
True - does not automate code or backups
101
Relational DB? DynamoDB
No
102
Relational DB? MariaDB
Yes, RDS
103
Relational DB? Oracle
Yes, RDS
104
Relational DB? PostgreSQL
Yes, RDS
105
Global in Nature (not region based)
CloudFront and IAM
106
Cloud Based Data warehouse solution
RedShift
107
Allows replacing hardcoding authentication information in code with an API call
AWS Secrets Manager
108
Name two benefits of deploying a relational DB on Amazon RDS
Provides automatic backups and software patching
109
How do you restrict access to the application for different users?
Configure ENIs aka multiple network interfaces with separate IP addresses and security groups
110
Customer or AWS responsibility? Encryption on S3 bucket
Customer
111
It is best practice to use service accounts and grant least privilage to manage access (T|F)
True
112
Bucket names must be globally unique and can only exist in one region (T|F)
True
113
A developer is planning to build a two-tier web application that has a MySQL database layer. Which of the following AWS database services would provide automated backups for the application?
A. A MySQL database installed on an EC2 instance.
B. Amazon Aurora.
C. Amazon DynamoDB.
D. Amazon Neptune.
Amazon Aurora
114
helps a customer view the Amazon EC2 billing activity for the past month?
AWS Cost & Usage Reports.
115
A company is deploying a new two-tier web application in AWS. Where should the most frequently accessed data be stored so that the application’s response time is optimal?
Amazon ElastiCache.
116
You want to run a questionnaire application for only one day (without interruption), which Amazon EC2 purchase option should you use?
On-demand instances.
117
What can be described as a global content delivery network (CDN) service?
Amazon CloudFront.
118
Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?
Amazon Macie
119
service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continuously monitoring the network activity and account behavior within your AWS environment.
Amazon GuardDuty
120
automatically perform actions if the value of your metric has gone above or below a predefined threshold.
Alarms
121
feature enables you to access all the metrics for your resources from a single location.
CloudWatch dashboard
122
a web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices.
AWS Trusted Advisor
123
predicted AWS usage will incur by the end of the month
AWS Budgets - updates three times a day
124
a tool that lets you visualize, understand, and manage your AWS costs and usage over time.
- 12 months historical spending
AWS Cost Explorer
125
Support plans include all AWS Trusted Advisor
Business, Enterprise On-Ramp, and Enterprise Support. Developer does not.
126
Organizes guidance into six areas of focus, called Perspectives. Each Perspective addresses distinct responsibilities.
AWS Cloud Adoption Framework (AWS CAF) In general, the Business, People, and Governance Perspectives focus on business capabilities, whereas the Platform, Security, and Operations Perspectives focus on technical capabilities.
127
helps you to move from a model that separates business and IT strategies into a business model that integrates IT strategy.
Business Perspective
128
helps Human Resources (HR) employees prepare their teams for cloud adoption by updating organizational processes and staff skills to include cloud-based competencies.
People Perspective
129
focuses on the skills and processes to align IT strategy with business strategy. This ensures that you maximize the business value and minimize risks.
Governance Perspective
130
includes principles and patterns for implementing new solutions on the cloud, and migrating on-premises workloads to the cloud.
Platform Perspective
131
ensures that the organization meets security objectives for visibility, auditability, control, and agility.
Security Perspective
132
focuses on operating and recovering IT workloads to meet the requirements of your business stakeholders
Operations Perspective
133
Name the 6 Rs of migration strategies
* Rehosting – Lift and Shift
* Replatforming - Or lift, tinker, and shift.
* Refactoring/re-architecting - Now, you're writing new code. This is driven by a strong business need to add features or performance that might not be possible on prem, but now are within your reach.
* Repurchasing -- This is common for companies looking to abandon legacy software vendors and get a fresh start as part of migration. – AKA moving to a different product
* Retaining -- Some applications are about to be deprecated but maybe not just yet.
* Retiring - - Sometimes you just have to turn off the lights.
134
a small, rugged, and secure edge computing and data transfer device.
AWS Snowcone - It features 2 CPUs, 4 GB of memory, and up to 14 TB of usable storage.
135
You can transfer up to 100 petabytes of data per _______, a 45-foot long ruggedized shipping container, pulled by a semi trailer truck.
Snowmobile
136
Quickly build, train, and deploy machine learning models at scale.
SageMaker - You do not need to follow the traditional process of manually bringing together separate tools and workflows.
137
service that enables you to build conversational interfaces using voice and text.
* Amazon Lex, the heart of Alexa.
138
machine learning service that automatically extracts text and data from scanned documents.
* Amazon Textract
139
Amazon Q Developer is a machine learning-powered code generator that ...
provides you with code recommendations in real time. analyzes your code and comments as you write code in your integrated development environment (IDE).
140
helps you understand how to design and operate reliable, secure, efficient, and cost-effective systems in the AWS Cloud. It provides a way for you to consistently measure your architecture against best practices and design principles and identify areas for improvement.
AWS Well-Architected Framework
141
Name the six pillars of AWS Well-Architected Framework
* Operational excellence: The Operational Excellence pillar includes the ability to run workloads effectively, gain insights into their operations, and continuously improve supporting processes to deliver business value.
* Security - The Security pillar includes protecting data, systems, and assets, and using cloud technologies to improve the security of your workloads.
* Reliability - focuses on the ability of a workload to consistently and correctly perform its intended functions
* Performance efficiency - The Performance Efficiency pillar focuses on using computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve.
* Cost optimization
* Sustainability
142
Six advantages of cloud computing:
* Trade upfront expense for variable expense.
* Benefit from massive economies of scale.
* Stop guessing capacity.
* Increase speed and agility.
* Stop spending money running and maintaining data centers.
* Go global in minutes.
143
Six Pillars - includes checks that review permissions and identify which AWS security features to enable.
Security category
144
Six Pillars -includes checks for unused or idle resources that could be eliminated and provide cost savings.
Cost Optimization
145
Six Pillars -includes checks to help improve an application's availability and redundancy.
Fault Tolerance
146
Six Pillars -focuses on using computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve.
Performance Efficiency
146
Six Pillars - includes the ability to run workloads effectively, gain insights into their operations, and continuously improve supporting processes to deliver business value.
Operational Excellence
147
Six Pillars - focuses on protecting data, systems, and assets. It also focuses on using cloud technologies to improve the security of your workloads.
Security pillar
148
Six Pillars -
Reliability pillar
