AWS Components Flashcards

1
Q

What is a Region?

A

A geographic location with a cluster of data centers
(31 Regions as of June 2023)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is an Availability Zone?

A

one or more data centers with redundant power, networking, and connectivity in an AWS Region.
Multiple AZs exist in each Region.
(99 Availability Zones as of June 2023)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Describe the pieces of the name ‘us-east-2a’

A

‘us-east-2’ -> Region name
‘us-east-2a’ -> Availability Zone Name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is an AWS Local Zone?

A

Infrastructure deployment placing select AWS services close to large population and industry centers.
An extension of a Region for faster communication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a Wavelength Zone?

A

Infrastructure deployment embedding AWS services within 5G networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a Point of Presence?

A

Global infrastructure outside of AWS Regions.
Used by specific services to deliver content as quickly as possible.
Edge Locations and Regional Edge Caches

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is an Edge Location

A

A node in a global Content Delivery Network
Utilized by CloudFront and Route 53
(400+ as of June 2023)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a Regional Edge Cache?

A

A type of Edge Location with larger cache that sits between the origin webserver and the edge locations to offer closer cache of popular objects.
Reduces the need for CloudFront (CDN) to go back to the origin server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the Cost Explorer?

A

UI for exploring your AWS costs
Can breakdown by service or by cost tag
Can view top cost consuming services
Predicts next 3 months
Gives recommendations for cost optimization
Accessible by API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is AWS Pricing Calculator?

A

In-depth analysis of cost of utilizing multiple AWS services
Used for estimating future workloads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are AWS Resource Tags?

A

Metadata assigned to specific AWS resources as a key-value pair (such as Department, Environment, Project, etc)
Allows for Cost Allocation reporting in AWS Cost Explorer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is AWS Organizations?

A

Allows managing multiple accounts under a single master account
Allows Consolidated Billing for all accounts
Enables centralized logging and security standards across accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is AWS Support?

A

Different tiers of support from AWS resources
Includes tools for automated answers and recommendations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is AWS Personal Health Dashboard?

A

Alerts and remediation guidance when AWS is experiencing events that may impact you

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is AWS Trusted Advisor?

A

Automated tool to check your AWS usage against best practices
Different checks depending on the AWS Support plan tier
All AWS customers get 7 core checks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the categories of AWS Trusted Advisor recommendations?

A
  • Cost Optimization
  • Performance
  • Security
  • Fault Tolerance
  • Service Quotas
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the AWS Support plan tier differences?

A
  • Communication Method
  • Response Time
  • Cost
  • Type of Guidance Offered
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is provided in AWS Basic Support plan tier?

A

For all AWS customers
- Trusted Advisor 7 core checks
- 24x7 access to customer service, documentation, forums, whitepapers
- Access to AWS Personal Health Dashboard
- No monthly cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is provided in AWS Developer Support plan tier?

A

All Basic Support features plus:
- Business hours email access to support engineers
- 1 primary contact
- <24 hr response for guidance, <12 hr response for system impaired
- $29 per month or 3% AWS usage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is provided in AWS Business Support plan tier?

A

All Developer Support features plus:
- Full set of Trusted Advisor checks
- 24x7 phone, email, chat access to support engineers
- Unlimited contacts
- 3rd party software support
- <4 hr response for production system impaired, <1 hr response for production system down
- $100 per month or variable percentage of AWS usage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is provided in AWS Enterprise Support plan tier?

A

All Business Support features plus:
- Technical Account Manager (TAM)
- concierge support team
- <15 minute response for critical system down
- $15,000 per month or variable percentage of AWS usage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What assistance does AWS offer for cloud workloads?

A
  • AWS Quick Starts (step-by-step deployment instructions)
  • AWS Partner Consulting Partners (3rd party consultants)
  • AWS Professional Services (AWS employees as consultants)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How do you interact with AWS services?

A
  • Console (web and mobile access)
  • CLI (requires access key, good for scheduled jobs)
  • SDK (many common languages such as Java, .NET, Node.js, JavaScript, PHP, Python, etc)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the EC2 Purchase Types?

A
  • On-demand (pay per second)
  • Reserved (pay in advance - All/Partial/No Upfront)
  • Savings Plans (commit to level of usage)
  • Spot (leverage unused capacity in region)
  • Dedicated (dedicated physical server)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are the S3 Storage Classes?

A
  • Standard (default for frequently used data)
  • Intelligent-Tiering (move to correct storage based on usage)
  • Standard - IA (infrequently accessed data)
  • One Zone Infrequent (infrequently accessed data in one Availability Zone)
  • Glacier (archive storage at different tiers:
    • Instant Retrieval (ie. Medical images or news media)
    • Flexible Retrieval (ie. backup and DR needs)
    • Deep Archive (ie. long-term storage for compliance))
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is S3 Transfer Acceleration?

A

A per bucket feature to optimize uploading of data using AWS Edge Locations as part of CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the Shared Responsibility Model?

A

Security and Compliance is a shared responsibility between AWS and the customer
- AWS handles data centers and underlying network
- Customer handles data security, system/network/firewall configuration, and code

28
Q

What is AWS Artifact?

A

Portal that provides self-service access to compliance reports

29
Q

What is Amazon GuardDuty?

A

Intelligent threat detection

30
Q

What is AWS IAM?

A

Identity and Access Management
Policies can enforce data encryption at rest

31
Q

What is an User Identity?

A

Account for single individual in IAM

32
Q

What is a Group Identity?

A

Allows management of permissions for a group of IAM users

33
Q

What is a Role Identity?

A

Enables a user or AWS service to assume permissions for a task in IAM

34
Q

What is Amazon Cognito?

A

Supports identity providers: Google, Amazon, Facebook, Microsoft AD, SAML 2.0 Providers

35
Q

What are the Disaster Recovery options?

A

From Slow & Cheaper to Faster & Expensive:
- Backup & Restore
- Pilot Light (few key servers up and running but smaller size)
- Warm Standby
- Multi-site

36
Q

What is Recovery Time Objective (RTO)?

A

The time it takes to get your systems back up and running to the ideal business state after a disaster recovery event

37
Q

What is Recovery Point Objective (RPO)?

A

The amount of data loss (in terms of time) for a production system during a disaster recovery event

38
Q

How can you control Access to EC2?

A
  • EC2 Security group (firewall-like controls for resources)
  • Network Access Control Lists - ACL (inbound/outbound traffic for subnets)
  • AWS VPN (encrypted tunnel for VPC)
39
Q

What is AWS Service Catalog?

A

Targeted to serve as an organizational service catalog for the cloud

40
Q

What is AWS Marketplace?

A

Enables third-party ISV’s to offer configurations for the cloud that can be launched in your account

41
Q

What is AWS CodeCommit?

A

Fully managed source control service using Git

42
Q

What is AWS CodeBuild?

A

Fully managed build and continuous integration service on AWS

43
Q

What is AWS CodeDeploy?

A

Fully managed deployment service for applications running on Amazon EC2, AWS Fargate, AWS Lambda, and on-premise servers

44
Q

What is AWS CodePipeline?

A

Fully managed continuous delivery service on AWS for automating building, deploying, and testing. Integrates with other developer services

45
Q

What is AWS CodeStar?

A

Workflow tool for automatic creation of a continuous delivery pipeline for a custom application using the other developer services

46
Q

What is the size of a new default subnet in the VPC?

A

/20 IPv4 CIDR block in the next available contiguous space

47
Q

What data flows incur high and low charges?

A

No charges: inbound flows to your services; outbound flows between services
Has charges: Flows outbound from S3; Flows outbound from your services

48
Q

What is included in AWS Free Tier?

A

EC2, S3, Auto Scaling
NOT Web Application Firewall

49
Q

What is an Auto-Scaling group?
How do you configure a unique number of instances?

A

Uses Instances classified as On-Demand or Spot
“Maintain current level” configures a unique number of instances

50
Q

What is a key capability of Amazon S3 Data Lake?

A

Utilize broad perspective of data science, data analytics, and machine learning

51
Q

What is AWS Polly?

A

Text-to-speech software

52
Q

What is the default number of VPCs in a Region?

A

5

53
Q

What is X-Ray?

A

Provides detailed data on requests that are served by your application and the responses

54
Q

What is Cloud9?

A

Cloud-based Integrated Development Environment (IDE)

55
Q

How can you integrate several VPCs into a larger network?

A

AWS Transit gateway
Software Site-to-Site VPN
VPC Peering
AWS Managed VPN
AWS PrivateLink

56
Q

Where can you get expert guidance on meeting security and compliance requirements while migrating to the cloud?

A

AWS Security Competency Partners

57
Q

What are some EC2 instance types and classifications

A

r4.large: memory-intensive applications
t2.nano: general-purpose
c4.large: compute-optimized
d2.xlarge: storage-optimized

58
Q

What Elastic Block Storage storage type is best for infrequently accessed data?

A

Magnetic volumes

59
Q

What is a decider’s responsibility in Amazon’s Simple Workflow Service (SWF)?

A

Schedule activity tasks and provide input data to activity workers

60
Q

What is AWS Pricing API?

A

Allows running programs to automatically retrieve key costs related to AWS services

61
Q

How many Internet gateways can be attached to a VPC?

A

1

62
Q

From the Management Console, what support cases can you create in AWS Support?

A

Service limit increase
Account and billing
Technical support (if > Basic Support plan)

63
Q

What is the purpose behind configuring dynamic architectures for growth and elasticity?

A

AWS usage should be focused on building applications spread across multiple Availability Zones and Regions

64
Q

What is Amazon Augmented AI (A2I)?

A

Allows you to build workflows for performing human reviews of predictions made by Machine Learning

65
Q

What is SageMaker?

A

Managed service to build, train, and deploy Machine Learning models

66
Q

What is AWS Key Management Service (KMS)?

A

Allows encryption at rest using cryptographic keys
Manages those keys