AWS Fundamentals Flashcards

1
Q

AWS Public Service

A

Accessed using public endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AWS Private Service

A

runs within a VPC only things in the VPC or what is connected to the VPC can access the service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AWS Regions Capabilities

A

full compute , storage Data base , AI and Analytics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Aws Edge Location

A

local distribution point storing data is main use

mainly for fast data transfer closer= faster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

AWS Region

A
  • geographic separation - isolated fault domain
  • Geopolitical separation - Different governance
  • Location control - Performance
  • services can be placed in multiple availability zones to make them resilient
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Globally Resilient

A

service operates globally it’s one single product and it’s data is replicated across multiple regions(IAM & Route53)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Region Resilient

A

operates in a single region with one set of data per region. replicates data in multiple AZs in that region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

AZ resilient

A

services that are run in a single availability zone prodded to failure if there are problems in that AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How many Default VPC can you have per region?

A

one per region - can be removed and re-created

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Default VPC CIDR for AWS

A

default VPC CIDR is always 172.31.0.0/16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How is the network default VPC divided between the regions?

A

/20 subnet in each AZ in the region

subnet assign public IPv4 addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How is traffic control in the Default VPC?

A
  • Internet Gateway(IGW), security group(SG) and NACL
  • subnet assign public IPv4 addresses
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Elastic Compute Cloud (EC2)

A
  • IAAS -provides Virtual machines → instances
  • private service by default - use VPC networking
  • AZ resilient - instance fail if AZ fails
  • Different instance sizes and capabilities
  • on-Demand Billing - per second
  • Local on-host storage or Elastic block store (EBS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Virtual Private Clouds(VPC)

A
  • Virtual network inside AWS
  • A VPC is within account 1 and 1 region
  • Private and isolated unless you decide otherwise
  • you can only have 1 default VPC per region (configured by AWS by default)
  • you can have many custom VPC per region
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Virtual Private Clouds(VPC)

A
  • Virtual network inside AWS
  • A VPC is within account 1 and 1 region
  • Private and isolated unless you decide otherwise
  • you can only have 1 default VPC per region (configured by AWS by default)
  • you can have many custom VPC per region
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Virtual Private Clouds(VPC)

A
  • Virtual network inside AWS
  • A VPC is within account 1 and 1 region
  • Private and isolated unless you decide otherwise
  • you can only have 1 default VPC per region (configured by AWS by default)
  • you can have many custom VPC per region
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Running EC2 instance Charges

A
  1. CPU
  2. Memory
  3. Disk
  4. Networking
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Stopped EC2 instance Charge

A
  1. disk (via EBS storage)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Terminated EC2 instance

A

your not charged for anying

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Amazon Machines Image (AMI)

A

Ami’s can be create from an EC2 instance or can be user to create a EC2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the 3 things that make up an AMI ?

A
  1. permissions
  2. Root volume
  3. Block Device Mapping
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

EC2 Block Device mapping

A

Links the volumes to determine if it’s a boot volume and which is a data volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Root Volume

A

Drives the OS

24
Q

What comprises a status check?

A

System check

checks if the ec2 instance is reachable by traffic

Instance check

The instance operating system is health and ready for traffic

25
Q

What’s considered a heathy EC2 instance ?

A

An instance that passes 2/2 checks

26
Q

S3 Basics

A
  • global storage platform - reginal based/resilient
  • public service, unlimited data &multi-user
  • Moves, Audio, Photos, Text, and Large data sets
  • economically and accessed via UI/CLI/API/HTTP
    *
27
Q

Buckets

A

containers for objects in s3

28
Q

Bucket Naming

A

names have to be unique across All Aws regions(globally unique)

29
Q

S3 Structure

A

storage is at the root it has a flat structure not like a file system

folder structures are emulated using prefixes

30
Q

What are some limitations of s3 ?

A

you can’t mount an s3 bucket as (k:\ or /images)

S3 is an object store not a file or block storage

31
Q

What are some advantages of S3?

A

Great for large scale data storage, distribution or upload

great for “offload”

input and or output to many AWS products

32
Q

S3 Objects

A

key : value pair

33
Q

What does an S3 object contain ?

A

version ID

Meta data

access control

sub resources

34
Q

Aws shared responsibility Model

A

customer responsible for security in the cloud

AWS responsible for security of the cloud

35
Q

High Availability (HA)

A

aims to ensure an agreed level of operation performance usually uptime for a higher than normal period

all about maximizing system online time

36
Q

Fault Tolerance (FT)

A

a property that enables a system to continue operating properly in the even of failure of some of it’s components

37
Q

Disaster Recovery (DR)

A

as set of policies, tool and procedures to enable the recovery of continuation of vital technologies infrastructure and systems following a natural or human-induced disaster

38
Q

Cloud Formation

A

Tool that lets you create update and delete infrastructure in AWS using templates

39
Q

Cloud Formation Resources

A

tell the template what to do if resources are add and then cloud formation create resources if resources are removed then the cloud formation removes resources

40
Q

What happens if you delete a Cloud formation stack ?

A

The resources associated with the stack are also deleted

41
Q

What is DNS?

A
  • DNS is a discovery service
  • Translates machines into human readable addresses and vice-versa
  • it is huge so it has to be distributed
  • has to accommodate IPv4 and IPv6 address space
42
Q

DNS Client

A

your laptop, phone, or PC

43
Q

Resolver

A

software on your device or a server which queries DNS on your behalf

44
Q

Zone

A

a part of the DNS database(e.g.amazon.com)

45
Q

Zonefile

A

physical database for a zone

46
Q

NameServer

A

where zonefiles are hosted

47
Q

Root Hints

A

configuration that points at the root server IPs and addresses

48
Q

Root Server

A

Hosts the DNS root Zone

49
Q

Root Zone

A

points at top level domain authoritative servers

50
Q

GTLD

A

generic top level domain(.com.org)

51
Q

CCTLD

A

Country-code top level domain( .uk .eu etc.)

52
Q

Route53 and key features

A
  • register domains
  • Host Zones managed nameservers
  • global service single database
  • Globally resilience
53
Q

What’s the process like for registering a domain ?

A
  1. creates a zone file ex: animals4life.org
  2. creating a number of managed name serves ex: usually a cluster of 4 servers per/ns
  3. put zone files on servers
  4. lesion with top level domains to get names address to the top level domain zone that point back at servers
54
Q

AWS Hosted Zones

A

zone files in AWS are host on 4 managed name server. Can be public or private linked to VPC(s). Stores records.

55
Q

What are Text Records used for ?

A

prove domain ownership and fight spam

56
Q

DNS TTL(Time to Live)

A

a numeric value telling others how long records can be cached for.

57
Q

Virtual Private Clouds(VPC)

A
  • Virtual network inside AWS
  • A VPC is within account 1 and 1 region
  • Private and isolated unless you decide otherwise
  • you can only have 1 default VPC per region (configured by AWS by default)
  • you can have many custom VPC per region