AWS FAQs Flashcards

1
Q

EC2 - What monthly uptime is guaranteed?

A

99.99% (EC2 & EBS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

EC2 - What are A1 instances?

A

General purpose instane with AWS Graviton Processors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

EC2 - What are A1 instances used for?

A

ARM based instances, that deliver good performance, cost savings with a small available memory footprint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

EC2 - Use cases for M5 instances

A

Higher memory footsprint for intensive Web, mobile, gaming or analytics applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

EC2 - What is burstable performance?

A

Instance provides a baseline level of performance, but can scale up.
When going over the baseline it consumes CPU credits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

EC2 - What are High Memory instances usedd for?

A

Enterprise Software with large RAM use-cases, SAP e.g.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

EC2 - When should a memory-optimized instance be used?

A

All in-memory applications, like databse or analytics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

EBS - What happens to the data when the system terminates?

A

Unlike local instance storage, EBS storage is persisted and not lost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

EBS - What are the differences between the volumes types?

A

SSD: Transactional workloads based on high IOPS
HDD: Throughput based on MB/s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

EBS - Can volumes and snapshots be encrypted?

A

Yes, both for volumes and snapshots. This enables the user to meet security and compliance requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Elastic IP - Explain the limits of IP addresses and the use charges

A

IPv4 IPs are limited, therefore AWS is commited to keep the use efficiently.
So reserving and IP and not attaching it to an instance will be charged.
An public is not required for all instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

ELB - Difference between Classic and Application Load Balancer

A

Classic: simple load balacer to target EC2 instances
Application: adanced routing for container based architecture or microservices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Can API calls be tracked?

A

Yes, with CloudTrail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

EC2 - Why should an instance be hibernated?

A

Hibernated instances can be activated quickly.

Content from memory are peristed to an EBS volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

EC2 - How is EC2 billed?

A
  • Paid by use by the hour or second

- Billings starts and the boot sequence and ends on when the instance is terminated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

EC2 - How is traffic beteen AZs or regions billed?

A

1) Data out to another AWS region + 2) Data in from another region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

EC2 - How are AZs isolated from each other?

A

Physically dinstint with independent infrastructure.

Common points of failure (generator / cooling) is not shared across AZs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

EC2 - What are the five instance type families?

A

1) General Purpose
2) Compute Optimized
3) Memory Optimized
4) Storage Optimized
5) Accelerated Computing

19
Q

VPC - What is AWS VPC?

A

Virtual Networking environment, with IP adress ranges, subnets, route tables and network gateways.
COnfigured correctly provides public facing subnets facing the customer and private subnets protecting the data.

20
Q

VPC - What are the components of VPC?

A
  • Subnet: segment of ip ranges in isolated groups
  • Internet Gateway: connection to the internet
  • NAT Gateway: Access for private subnets to the internet
  • Virtual Private Gateway: internal VPN in AWS
  • Peering Connection: connectio between VPCs
  • VPC Endpoints: connects AWS services (S3 and Dynam DB)without VPN or gateways
21
Q

VPC - How can an EC2 instance be secured in a VPC?

A

Security Groups: Allows ports and IPs - per default everything is disallowed (only allow)
Access Control Lists: Handles network traffic for each subnet (has allow/deny rules)

22
Q

VPC - can network traffic be monitored?

A

Yes, with Amazon VPC Flow Logs

23
Q

VPC - Can regional VPCs be connected?

A

Interregional VPC peering is available (except with china)

24
Q

S3 - How much data can be stored?

A
  • Number is unlimited
  • Size between 0 bytes and 5 TB
  • SIngle PUT up to 5GB, recommended to upload >100mb files in multipart
25
Q

S3 - What storage classes are available?

A

1) Standard
2) Intelligent-Tier
3) Standard-Infrequent Access
4) One-Zone-Infrequent Access
5) Glacier
6) Glacier Deep Archive

26
Q

S3 - What is the availability is guaranteed?

A

Standard = 99.99
Standard IA = 99.9
One Zone IA = 99.5

27
Q

AWS - Reasons to choose a region

A
  • Location to customer
  • Remote from other hardware
  • Legal reasons
  • Reducing storage costs (lower cost regions)
28
Q

S3 - How durable is the data?

A

99.999999999% (9x9)

29
Q

S3 - How does versioning work?

A
  • PUT, POST, COPY, DELETE trigger a version creation
  • GET always fetches the latest version
  • Versions can be retrieved by a special request
30
Q

S3 - How can versions be secured at a maximum?

A
  • Enable versioning

- Enable Multi-Factor-Authentificaton

31
Q

S3 - Describe S3-Intelligent Tiering

A
  • Automatically stored in “frequent access”
  • If not used: moved to “infrequent access”
  • If accessed move to “frequent access” again
32
Q

S3 - Can objects in a bucket be in different storage classes?

A

Yes, for Standard, Intelligent-Tiering, IS and One-Zone IA

33
Q

EC2 - Can snapshots be created while a volume is attached?

A

Yes, no need to detach a volume

34
Q

Route 53 - Difference hosted zone and record name

A

amazon. de -> hosted zone

www. amazon.de -> record

35
Q

Route 53 - Pricing model

A

Charging based hosted zones, quieres, health check and domain names

36
Q

Route 53 - can a domain have multiple hosted zones?

A

yes, for example to distingiush between testing and production

37
Q

Route 53 - How can traffic be weighted?

A

Instances can get have numbers between 0 and 255.
The total of the numbers acts as the 100% mark.
Example:
Instance 1: 2 and Instance 2: 8
Instance 1 -> 20%

38
Q

Route 53 - How can instances be routed?

A

1) Simple Routing
2) Weighted
3) Latency based
4) Geolocation based

39
Q

Route 53 - What is Traffic Flow?

A

Connecting users to the best endpoint based on latency, geography and endpoint health.
Rules can be created in the console using a template editor

40
Q

Route 53 - What is DNS Failover?

A

Route 53 redirects traffic only to resources that are healty and reachable from the outside

41
Q

IAM - How does IAM create security?

A

AIM controls individual, system group access to AWS resources.

42
Q

IAM - What is a group?

A

A group is a colection of IAM users.

  • A user can belong to multiple groups
  • It is easier to set permissions to groups not individuals
43
Q

IAM - Difference between IAM role and IAM user?

A

A role cannot connect to AWS, but describes the permissions.