Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Aye Dub S Ess AA Exam > AWS Fundamentals > Flashcards

AWS Fundamentals Flashcards

1
Q

What is the purpose of an Identity Access Management (IAM)?

A

You always want to create IAM users for admins that have specific needs or tasks in AWS as opposed to using the Root User login.

The Root User always has system-wide/un-restricted access to the AWS environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the different IAM types?

A

Users - user or app

Groups - collection of Users

Roles - assigned when you want to grant access to services but don’t have a definitive number of entities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do you connect to AWS via CLI?

A

Access Keys (instead of username/password in the GUI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What makes up an Access Key?

A

Access Key ID

Secret Access Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the 5 fundamentals of of Cloud Computing?

A
  1. on-demand self-service - dont need to notify vendor for resources
  2. broad network access - capabilities are available over the network and have standard access mechanisms (Ex. HTTP)
  3. resource pooling - location independence; multi-tenancy; economies of scale
  4. rapid elasticity - capability appears unlimited; can scale with demand
  5. measured service - usage is monitored, controlled, reported, and billed
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Public v Private v Multi-Cloud v Hybrid Cloud

A

Public - AWS, Azure, or GCP offer public cloud environments

Private - Outpost, Azure Stack, Anthos

Multi - AWS + Azure

Hybrid - mix of public and private clouds working together; same tools/components/methods are used for both

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a Unit of Consumption?

What are the UOC’s for IASS, PAAS, SAAS?

A

The part of the system that you pay for/consume. This denotes where your management responsibility begins.

You purchase an EC2 (IAAS), the UOC is the OS that runs the VMs.

PAAS UOC = Runtime
SAAS UOC = Application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the (3) Zones when talking about Public/Private Services in AWS?

A
  1. Public internet
  2. AWS public zone
  3. AWS private zone
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How many accounts & regions can a unique VPC be created in?

A

One and One.

VPCs are isolated by default - they can’t communicate with anything outside their own VPC unless it’s specified.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the 2 types of VPC that can be found in a CU environment?

A

Default VPC and Custom VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the CIDR Range of the Default VPC?

Does the Default VPC have a subnet in each AZ of the region?

A

It get’s the exact same range every time - 172.31.0.0./16.

Yes - The DEFAULT VPC is configured to have a subnet in every AZ in that specific region that it’s in (/20’s)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the rate for on-demand billing of an EC2?

A

By the second or by the hour depending on the resources that are being used.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the different states of an EC2?

A

Running - charged for everything (CPU/mem/disk/etc.)
Stopped - still being charged for Storage
Terminated - this is non-reversible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is an Amazon Machine Image (AMI)?

A

Contains the info required to boot an EC2 instance. You can boot multiple EC2s from a single AMI.

You must specify an AMI when launching an instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the 2 foundational pillars of S3?

As in what are the 2 things that S3 is comprised of?

A 
Objects = files stored in S3
Buckets = containers of Objects
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What kind of Storage solution is S3?

A

Object Storage; the files are stored in a FLAT structure i.e no folders.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is CloudFormation?

A

Service that lets you create/update/delete resources within AWS via templates in an automated fashion.

Templates are written in YAML or JSON

18
Q

What does a CloudFormation Template contain?

What does the list create?

A

All templates have a list of resources - at least one. This section tells CloudFormation what to do; resources section is the only MANDATORY part of the template. Without a list of resources, the template would do nothing.

The list of resources creates a “stack” of logical resources that the template instructs AWS to provision.

19
Q

What is CloudWatch?

A

Monitors the performance of the environment.

Service that collects and manages operational data on your behalf. Any data generated by the environment will be logged by the service.

20
Q

What are the categories of data captured by CloudWatch?

A

Metrics - data relating to AWS products, apps, and on-premise infra; publicly accessible

Logs - collection/monitoring/actions based on logging data (like web server or FW logs); anything that logs data can be ingested by CW.

Events - acts like an Event Hub - if a service does something, the event is logged.

21
Q

CloudWatch key terms:

Name Space?
Metric?
Dimension?
Alarms?

A

Name Space - container for monitoring data
Metric - collection of related data points
Dimension - separate data points for specific entities
Alarms - can take an acton based on a metric

E. We can look inside a specific Namespace (EC2), and then inside a specific Metric (CPU Utilization), and then at a specific Dimension for the data points coming from a particular instance. We can then trigger an alarm depending on what the output is.

22
Q

Shared Responsibility Model rule of thumb?

A

AWS protects the security OF the cloud, and the consumer protects the security IN the cloud.

23
Q

What is High Availability?

A

The system is designed to be online and providing services as long as possible. Failover is automated but minimal downtime might incur.

User disruption is OK.

24
Q

What is Fault Tolerance?

A

System that allows it to continue operating normally in the event that one or more of the components fail.

If there are faults present - the system should keep working through a failure without any impact.

Think of a life support network at a Hospital.

25
What is Disaster Recovery?
Policies/tools that enable the recovery or continuation of mission critical systems following a natural or human-induced disaster. DRS is all about pre-planning.
26
What is DNS?
DNS is how systems are discovered on the internet and within private networks. DNS translates machine into human and vise versa i.e IP to domain name.
27
DNS Client? DNS Resolver? DNS Zone?
DNS Client - laptop, phone, tablet, etc. The device that wants/needs the IP address for whatever web server that you're trying to reach. Typically a piece of SW running in the OS of the device DNS Resolver - SW on your device, or running on your Edge Router that queries the DNS system on your behalf DNS Zone - a part of the DNS namespace that is managed by a specific organization or administrator. EX --> .com, .net. .uk zones
28
REVIEW: Ultimately, DNS responsibility is to: Find the name server which hosts a particular zone file and then query that Name Server for a record that is in that Zone File.
The DNS resolver locates the correct name server for a given zone, queries the zone file on that particular name server(s), get's the info it needs, and passes it back to the DNS client
29
What are the 2 main functions of Route53?
1. Registers domain names. (has a relationship with all the main domain registries (.com, .uk, .edu, etc.) 2. Hosts Zones/Zone Files on AWS-managed NameServers.
30
REVIEW: When registering a domain, Route53 checks with the top-level domains to ensure that it is available. Once given the OK, it creates a Zone File for the domain being registered (Zone File is just a DB that contains all of the DNS information for a particular domain).
Route53 also allocates NameServers for this zone; servers that Route53 creates/manages that are distributed globally (usually 4). Takes the Zone File and puts it into 4 distributed NameServers, and then adds the NameServer records to the TOP-LEVEL domain registry (like .com) - this is recorded into the Zone File for the top-level domain.
31
What is a Hosted Zone?
A Hosted Zone is a container for records. Records contain information about how you want to route traffic for a specific domain, such as example.com, and it's subdomains (acme.example.com, zenith.example.com).
32
What is a NameServer Record?
NS Record indicates which DNS Name Server(s) is authoritative for that domain (which server contains the actual DNS records).
33
What are A-Records and/or AAAA Records? What is the difference?
Records that map host names to IP addresses. A-Records map "www.xxxx.com" to an IPv4 address AAAA-Records map the host name to an IPv6 address.
34
What are CNAME Records?
Lets you create DNS shortcuts. These records don't point to IP addresses but only other names. Ex. Instead of creating multiple A-Records for a server that handles FTP, mail, and www/web functions, you have a single A-Record pointing to an IP address and a CNAME record for each function pointing to the single A-Record. CNAME ftp, CNAME mail, CNAME www --> "A-Record" which then points to IP of mail server If a change needs to be made, only the A-Record needs to be changed and the CNAME Records will follow.
35
What are MX Records?
Mail Exchange Records Record that indicates what specific IP address emails need to be sent to i.e the server that finds the mail server. When you send an email to a certain domain (@cisco.com) the server sending the email on your behalf uses DNS to perform an MX lookup to know which email server to send the data to.
36
What are TXT Records?
TXT records are a type of (DNS) record that contains text information for sources outside of your domain. Allows you to add text to a created domain name.
37
What is the Time to Live (TTL) value within DNS? What effect does this TTL value have on a NameServer if it is HIGH or LOW?
DNS TTL (time to live) is a setting that tells the DNS Resolver how long to cache a query before requesting a new one from the Name Server. Low TTL values means your NameServer gets more queries against it, where as High TTL values means less queries but also gives you less control if you need to make any changes. When changing DNS records, it's always recommended to lower the TTL value in advance because it'll mean less caching of the old record/entry information ahead of cutting over to the new one.
38
DNS Root? Root Zone? Name Server? Zone File?
DNS Root - the starting point of DNS; similar to an upside down tree where the Root is the top of the stump. Root servers are DNS NameServers that operate in the root zone. Root Zone - top-level DNS zone in the hierarchical namespace of the Domain Name System (DNS) of the Internet. This is where the Root Servers operate. Name Server - server on the internet specialized in handling queries regarding the location of a domain name's various services. Zone File - a DB that contains all of the DNS information for a particular domain.
39
What (2) types of settings are NOT stored in an AMI?
○ Instance settings ○ Network settings Stores: - boot volume - data volume - AMI permissions - block device mapping
40
Which type of organization maintains the zones for a TLD (e.g .org or .com)
Registry
41
Which type of organization has relationships with the .org TLD zone manager allowing domain registration?
Registrar

Aye Dub S Ess AA Exam (16 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions