AWS Cloud Practitioner Essentials Flashcards

1
Q

Is Amazon Elastic Compute Cloud (Amazon EC2) a physical server, or Virtual

A

Virtual

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is is a highly scalable, fast, container management service that you can use to run, stop, and manage Docker containers on a cluster of EC2 instances.

A

Amazon Elastic Container Service (Amazon ECS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The process of converting data into a standard format that a service such as Amazon S3 can recognize.

A

Canonicalization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Covered over a 1-year or 3-year term

A

EC2 instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Type of instances are more well suited for batch processing workloads than general purpose instances.

A

Compute optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Instances that are more ideal for workloads that process large datasets in memory, such as high-performance databases.

A

Memory optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

EC2 instances in different Availability Zones or different instance types

A

Convertible Reserved Instances:

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Suppose that you have an application with tightly coupled components. These components might include databases, servers, the user interface, business logic, and so on. This type of architecture can be considered a

A

monolithic application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

publish/subscribe service&raquo_space; Message board

A

Amazon Simple Notification Service (Amazon SNS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

An application sends messages into a queue. A user or service retrieves a message from the queue, processes it, and then deletes it from the queue.

A

Amazon Simple Queue Service (Amazon SQS).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS service that automatically distributes incoming application traffic across multiple resources, such as Amazon EC2 instances.

A

Elastic Load Balancing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

is a service that lets you run code without needing to provision or manage servers.

A

AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

open-source software that enables you to deploy and manage containerized applications at scale.

A

Kubernetes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

fully managed service that you can use to run Kubernetes on AWS.

A

Amazon Elastic Kubernetes Service (Amazon EKS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

a fully isolated portion of the AWS global infrastructure

A

Availability Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

is a geographical area that contains AWS resources.

A

Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

consists of three or more Availability Zones.

A

Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

a data center that an AWS service uses to perform service-specific operations.

A

edge location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

uses to store cached copies of your content closer to your customers for faster delivery.

A

Amazon CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

a service that you can use to run AWS infrastructure, services, and tools in your own on-premises data center in a hybrid approach.

A

AWS Outposts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

is a web-based interface; great for learning and visual, not great for automation

A

AWS Management Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

enables you to control multiple AWS services directly from the command line; automate actions for AWS services and applications through scripts.

A

AWS Command Line Interface (AWS CLI).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

make it easier for you to use AWS services through an API designed for your programming language or platform.

A

SDKs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

you provide code and configuration settings, and this deploys the resources necessary to perform tasks

A

AWS Elastic Beanstalk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Treat your infrastructure as code.

A

AWS CloudFormation; Template&raquo_space; API&raquo_space; automated processes for global deploy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

A networking service that you can use to establish boundaries around your AWS resources

A

Amazon Virtual Private Cloud (Amazon VPC)(opens in a new tab)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

a section of a VPC that can contain resources such as Amazon EC2 instances, and control access permissions

A

Subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

a connection between a VPC and the internet

A

Internet Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

To access private resources in a VPC, you can use a

A

virtual private gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Customer website is an example of …

A

Public subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Isolate PII Databases are an example of …

A

Private subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Create a VPN connection between the VPC and the internal corporate network.

A

Virtual private gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

These remember nothing and check packets that cross the subnet border each way: inbound and outbound

A

stateless packet filtering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Stateless packet filtering always

A

checks lists

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Security groups perform _____ packet filtering.

A

Stateful

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Does not have to check lists - and deny all inbound traffic by default.

A

stateful packet filtering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

a DNS web service. It gives developers and businesses a reliable way to route end users to internet applications hosted in AWS.

A

Amazon Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

register new domain names directly in

A

Amazon Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

storage volumes that behave like physical hard drives.

A

Block-level storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

provides temporary block-level storage for an Amazon EC2 instance.

A

instance store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

a service that provides block-level storage volumes that you can use with Amazon EC2 instances.

A

Amazon Elastic Block Store (Amazon EBS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

a service that provides object-level storage in buckets

A

Amazon A3S

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

an incremental backup

A

EBS snapshot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Designed for frequently accessed data, but requires high availability when needed

A
  • S3 Standard: provides high availability for objects.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

o infrequently accessed data
o has a lower storage price and higher retrieval price

A
  • S3 Standard-IA
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

o You want to save costs on storage.
o Can easily reproduce your data in the event of an Availability Zone failure

A
  • S3 One Zone-IA: stores data in a single Availability Zone.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

o monitors objects’ access patterns.
o deal for data with unknown or changing access patterns
o Requires a small monthly monitoring and automation fee per object

A
  • S3 Intelligent-Tiering
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

o Can retrieve archived data within a few milliseconds

A

S3 Glacier Instant: works well for archived data that requires immediate access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

o Low-cost storage designed for data archiving
o Rretrieve objects within a few minutes to hours

A
  • S3 Glacier Flexible Retrieval
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

supports long-term retention and digital preservation for data that might be accessed once or twice in a year.

A
  • S3 Deep Archive - 12 to 48 hours
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

o requirements that must satisfy demanding performance needs by keeping data close to on-premises applications.

A
  • Amazon S3 Outposts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

individual small files

A

Object Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Smaller chunks, large files

A

Block Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

A scalable file system used with AWS Cloud services and on-premises resources.

A

Amazon Elastic File System

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

use structured query language (SQL) to store and query data.

A

Relational databases

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

is available on six database engines, which optimize for memory, performance, or input/output (I/O)

A

Amazon Relational Database Service (Amazon RDS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

a service that enables you to run relational databases in the AWS Cloud.

A

Amazon Relational Database Service (Amazon RDS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

an enterprise-class relational database

A

Amazon Aurora

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

a key-value database service

A

Amazon DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

a data warehousing service that you can use for big data analytics. understand relationships and trends across your data.

A

Amazon Redshift

61
Q

enables you to migrate relational databases, nonrelational databases, and other types of data stores.

A

AWS Database Migration Service (AWS DMS)

62
Q

is a document database service that supports MongoDB workloads.

A

Amazon DocumentDB

63
Q

a service that adds caching layers on top of your databases to help improve the read times of common requests

A

Amazon ElastiCache

64
Q

build and run applications that work with highly connected datasets, such as recommendation engines, fraud detection, and knowledge graphs.

A

Amazon Neptune, a graph database service.

65
Q

enables you to manage access to AWS services and resources securely.

A

AWS Identity and Access Management (IAM)

66
Q

Makes it easier to manage accounts with similar business or security requirements

A

group accounts into organizational units (OUs)

67
Q

affects all IAM users, groups, and roles within an account, including the AWS account root user.

A

service control policies (SCPs)

68
Q

is a service that provides on-demand access to AWS security and compliance reports and select online agreements.

A

AWS Artifact

69
Q

enables you to perform encryption operations through the use of cryptographic keys. A cryptographic key is a random string of digits used for locking (encrypting) and unlocking (decrypting) data.

A

AWS Key Management Service (AWS KMS)

70
Q

lets you monitor network requests that come into your web applications.

A

AWS WAF - a web application firewall

71
Q

is a service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continuously monitoring the network activity and account behavior within your AWS environment

A

Amazon GuardDuty

72
Q

checks applications for security vulnerabilities and deviations from security best practices, such as open access to Amazon EC2 instances and installations of vulnerable software versions.

A

Amazon Inspector

73
Q

a web service that enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics.

A

Amazon CloudWatch

74
Q
  • Monitor your resources’ utilization and performance
  • Access metrics from a single dashboard
A

CloudWatch dashboard

75
Q
  • Track user activities and API requests throughout your AWS infrastructure
  • Filter logs to assist with operational analysis and troubleshooting
  • Not Real time – 15 minute availability
  • Automatically detecting unusual account activity
A

AWS CloudTrail records API calls for your account. Auditing Tool

Page 9…

76
Q

Allows for planning what ceiling will be for spending on a particular service

A

Cost Budgets

77
Q

Allows for planning how much actual usage of a particular service you want to use

A

Usage Budgets

78
Q

Track usage of saving plans based on utilization and trigger alerts when falling under the thresold

A

Savings Plans Utilization Budgets

79
Q

Metadata assigned to AWS resources in the form of a key and value

A

Cost Allocation Tags

80
Q

How does cloud computing help companies focus on innovation?

A

Cloud provider handles routine IT Tasks

81
Q

AWS service that provides alerts about upcoming maintenance activities

A

AWS Personal Health Dashboard

82
Q

AWS DAAS - Desktop as a Service

A

WorkSpaces

83
Q

Structured in FAQ format and organized by AWS

A

Knowledge Center

84
Q

Customer or AWS responsibility? Network Infrastructure

A

AWS

85
Q

Customer or AWS responsibility? Physical Security of hardware

A

AWS

86
Q

Customer or AWS responsibility? Virtualization Infrastructure

A

AWS

87
Q

Customer or AWS responsibility? AMI - Amazon Machine Image

A

Customer

88
Q

Customer or AWS responsibility? Applications in EC2 Instances

A

Customer

89
Q

Provides storage for hybrid cloud services for access to on-prem resources.

A

AWS Storage Gateway

90
Q

What two functions can subscribe to SNS

A

Email and AWS Lambda

91
Q

AWS Program that helps the company design, build, and manage system

A

AWS Partner Network Consulting Partners

92
Q

Ability of a cloud environment to function while some portions are unavailable

A

Resiliency

93
Q

Pertains to the overall system being up of down

A

Availability

94
Q

AZs automatically replicate data across zones - T|F

A

False - distributes resources, but users must configure replication and redundancy

95
Q

AZ are connected by low-latency networks - T|F

A

True

96
Q

Service that tracks SSL and cert renewals

A

AWS Certificate Manager

97
Q

AWS tool best for integrating features into the application

A

AWS SDK

98
Q

IAAS reduces need for DC space T|F

A

True

99
Q

IAAS eliminates infra costs T|F

A

False

100
Q

Fully Managed Services reduces operational overhead and reduced capital expenses - T|F

A

True - does not automate code or backups

101
Q

Relational DB? DynamoDB

A

No

102
Q

Relational DB? MariaDB

A

Yes, RDS

103
Q

Relational DB? Oracle

A

Yes, RDS

104
Q

Relational DB? PostgreSQL

A

Yes, RDS

105
Q

Global in Nature (not region based)

A

CloudFront and IAM

106
Q

Cloud Based Data warehouse solution

A

RedShift

107
Q

Allows replacing hardcoding authentication information in code with an API call

A

AWS Secrets Manager

108
Q

Name two benefits of deploying a relational DB on Amazon RDS

A

Provides automatic backups and software patching

109
Q

How do you restrict access to the application for different users?

A

Configure ENIs aka multiple network interfaces with separate IP addresses and security groups

110
Q

Customer or AWS responsibility? Encryption on S3 bucket

A

Customer

111
Q

It is best practice to use service accounts and grant least privilage to manage access (T|F)

A

True

112
Q

Bucket names must be globally unique and can only exist in one region (T|F)

A

True

113
Q

A developer is planning to build a two-tier web application that has a MySQL database layer. Which of the following AWS database services would provide automated backups for the application?
A. A MySQL database installed on an EC2 instance.
B. Amazon Aurora.
C. Amazon DynamoDB.
D. Amazon Neptune.

A

Amazon Aurora

114
Q

helps a customer view the Amazon EC2 billing activity for the past month?

A

AWS Cost & Usage Reports.

115
Q

A company is deploying a new two-tier web application in AWS. Where should the most frequently accessed data be stored so that the application’s response time is optimal?

A

Amazon ElastiCache.

116
Q

You want to run a questionnaire application for only one day (without interruption), which Amazon EC2 purchase option should you use?

A

On-demand instances.

117
Q

What can be described as a global content delivery network (CDN) service?

A

Amazon CloudFront.

118
Q

Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?

A

Amazon Macie

119
Q

service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continuously monitoring the network activity and account behavior within your AWS environment.

A

Amazon GuardDuty

120
Q

automatically perform actions if the value of your metric has gone above or below a predefined threshold.

A

Alarms

121
Q

feature enables you to access all the metrics for your resources from a single location.

A

CloudWatch dashboard

122
Q

a web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices.

A

AWS Trusted Advisor

123
Q

predicted AWS usage will incur by the end of the month

A

AWS Budgets - updates three times a day

124
Q

a tool that lets you visualize, understand, and manage your AWS costs and usage over time.
- 12 months historical spending

A

AWS Cost Explorer

125
Q

Support plans include all AWS Trusted Advisor

A

Business, Enterprise On-Ramp, and Enterprise Support. Developer does not.

126
Q

Organizes guidance into six areas of focus, called Perspectives. Each Perspective addresses distinct responsibilities.

A

AWS Cloud Adoption Framework (AWS CAF) In general, the Business, People, and Governance Perspectives focus on business capabilities, whereas the Platform, Security, and Operations Perspectives focus on technical capabilities.

127
Q

helps you to move from a model that separates business and IT strategies into a business model that integrates IT strategy.

A

Business Perspective

128
Q

helps Human Resources (HR) employees prepare their teams for cloud adoption by updating organizational processes and staff skills to include cloud-based competencies.

A

People Perspective

129
Q

focuses on the skills and processes to align IT strategy with business strategy. This ensures that you maximize the business value and minimize risks.

A

Governance Perspective

130
Q

includes principles and patterns for implementing new solutions on the cloud, and migrating on-premises workloads to the cloud.

A

Platform Perspective

131
Q

ensures that the organization meets security objectives for visibility, auditability, control, and agility.

A

Security Perspective

132
Q

focuses on operating and recovering IT workloads to meet the requirements of your business stakeholders

A

Operations Perspective

133
Q

Name the 6 Rs of migration strategies

A
  • Rehosting – Lift and Shift
  • Replatforming - Or lift, tinker, and shift.
  • Refactoring/re-architecting - Now, you’re writing new code. This is driven by a strong business need to add features or performance that might not be possible on prem, but now are within your reach.
  • Repurchasing – This is common for companies looking to abandon legacy software vendors and get a fresh start as part of migration. – AKA moving to a different product
  • Retaining – Some applications are about to be deprecated but maybe not just yet.
  • Retiring - - Sometimes you just have to turn off the lights.
134
Q

a small, rugged, and secure edge computing and data transfer device.

A

AWS Snowcone - It features 2 CPUs, 4 GB of memory, and up to 14 TB of usable storage.

135
Q

You can transfer up to 100 petabytes of data per _______, a 45-foot long ruggedized shipping container, pulled by a semi trailer truck.

A

Snowmobile

136
Q

Quickly build, train, and deploy machine learning models at scale.

A

SageMaker - You do not need to follow the traditional process of manually bringing together separate tools and workflows.

137
Q

service that enables you to build conversational interfaces using voice and text.

A
  • Amazon Lex, the heart of Alexa.
138
Q

machine learning service that automatically extracts text and data from scanned documents.

A
  • Amazon Textract
139
Q

Amazon Q Developer is a machine learning-powered code generator that …

A

provides you with code recommendations in real time. analyzes your code and comments as you write code in your integrated development environment (IDE).

140
Q

helps you understand how to design and operate reliable, secure, efficient, and cost-effective systems in the AWS Cloud. It provides a way for you to consistently measure your architecture against best practices and design principles and identify areas for improvement.

A

AWS Well-Architected Framework

141
Q

Name the six pillars of AWS Well-Architected Framework

A
  • Operational excellence: The Operational Excellence pillar includes the ability to run workloads effectively, gain insights into their operations, and continuously improve supporting processes to deliver business value.
  • Security - The Security pillar includes protecting data, systems, and assets, and using cloud technologies to improve the security of your workloads.
  • Reliability - focuses on the ability of a workload to consistently and correctly perform its intended functions
  • Performance efficiency - The Performance Efficiency pillar focuses on using computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve.
  • Cost optimization
  • Sustainability
142
Q

Six advantages of cloud computing:

A
  • Trade upfront expense for variable expense.
  • Benefit from massive economies of scale.
  • Stop guessing capacity.
  • Increase speed and agility.
  • Stop spending money running and maintaining data centers.
  • Go global in minutes.
143
Q

Six Pillars - includes checks that review permissions and identify which AWS security features to enable.

A

Security category

144
Q

Six Pillars -includes checks for unused or idle resources that could be eliminated and provide cost savings.

A

Cost Optimization

145
Q

Six Pillars -includes checks to help improve an application’s availability and redundancy.

A

Fault Tolerance

146
Q

Six Pillars -focuses on using computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve.

A

Performance Efficiency

146
Q

Six Pillars - includes the ability to run workloads effectively, gain insights into their operations, and continuously improve supporting processes to deliver business value.

A

Operational Excellence

147
Q

Six Pillars - focuses on protecting data, systems, and assets. It also focuses on using cloud technologies to improve the security of your workloads.

A

Security pillar

148
Q

Six Pillars -

A

Reliability pillar