AWS General Practitioner Flashcards

1
Q

What are the EC2 instance types? (5 total)

A
General Purpose
Compute Optimized
Memory Optimized
Accelerated Computing
Storage Optimized
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which EC2 type is best for “[providing] a balance of compute, memory and networking resources, and can be used for a variety of diverse workloads”?

A

General Purpose

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which EC2 instance is best for batch processing workloads?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which EC2 instance is best for media transcoding?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which EC2 instance is best for high performance web servers?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which EC2 instance is best for High Performance Computing?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which EC2 instance is best for scientific modeling?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which EC2 instance is best for dedicated gaming servers?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which EC2 instance is best for machine learning inference?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which EC2 instance is best for workloads that process large data sets in memory?

A

Memory Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which EC2 instance is best for floating point number calculations?

A

Accelerated Computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which EC2 instance is best for graphics processing?

A

Accelerated Computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which EC2 instance is best for data pattern matching?

A

Accelerated Computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which EC2 instance uses hardware accelerators or co-processors?

A

Accelerated Computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which EC2 instance uses GPUs?

A

Accelerated Computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which EC2 instance is best for workloads that require high, sequential read and write access to very large data sets on local storage?

A

Storage Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which EC2 instance is best for optimizing tens of thousands of low-latency, random I/o operations per second?

A

Storage Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What AWS feature would I use to put resources like Compute and Storage in locations closer to end users?

A

Local Zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is “a site that CloudFront uses to cache copies of your content for faster delivery to users at any location.”

A

Edge Location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What feature is used for visibility in resource performance and availability of AWS services and accounts

A

AWS Health

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What service is used to monitor and block/allow web requests forwarded to edge locations?

A

Amazon WAF - Web Application Firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How many elastic IP addresses are enabled to your AWS account?

A

Five

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

If you want different regions to communicate with each other using privateIP addresses without gateways or VPNs, what would you use?

A

VPC Peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What Amazon Database instance would be best for content management, catalogs, or user profiles?

A

DocumentDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How many security groups can you assign to an instance in a VPC?

A

5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

In the Shared Responsibility model, whose responsibility is it to secure customer data? The customer or AWS?

A

Customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

In the Shared Responsibility model, whose responsibility is it to manage platform, applications, and IAM?

A

Customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

In the Shared Responsibility model, whose responsibility is it to maintain the operating system, network, and firewall configuration?

A

Customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

In the Shared Responsibility model, whose responsibility is it to employ client-side data encryption?

A

Customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

In the Shared Responsibility model, whose responsibility is it to do server-side encryption?

A

Customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

In the Shared Responsibility model, whose responsibility is it to protect the network traffic with encryption, integrity, and identity?

A

Customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

In the Shared Responsibility model, whose responsibility is it to manage the physical hardware?

A

AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are the three types of elastic load balancers?

A

Application Load Balancer
Network Load Balancer
Classic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What Elastic Load Balancer (ELB) would make routing decisions at the application layer?

A

Application Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

hat Elastic Load Balancer (ELB) would support path-based routing?

A

Application Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

hat Elastic Load Balancer (ELB) can route requests to one or more ports on each container instance in your cluster?

A

Application Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What Elastic Load Balancer makes routing decisions at the transport layer?

A

Network Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What Elastic Load Balancer can handle millions of requests per second?

A

Network Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What Elastic Load Balancer makes routing decisions at either the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS)?

A

Classic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What are the 4 values of the AWS Value Proposition?

A

Agility
Elasticity
Flexibility
Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Which value in the AWS value proposition does Speed of Implementation of services go under?

A

Agility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Which value in the AWS value proposition does “Experimentation” go under?

A

Agility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Which value in the AWS value proposition does “Innovation” fall under?

A

Agility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Which value in the AWS value proposition does “Scale on demand” go under?

A

Elasticity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Which value in the AWS value proposition does “Eliminate wasted capacity” go under?

A

Elasticity

46
Q

Which value in the AWS value proposition does “Broad set of products” go under?

A

Flexibility

47
Q

Which value in the AWS value proposition does “Low to no cost to entry” go under?

A

Flexibility

48
Q

Which value in the AWS value proposition does “Amazon has acquired many certifications” go under?

A

Security

49
Q

Which value in the AWS value proposition does “Shared Responsibility Model” go under?

A

Security

50
Q

What are the events where an EC2 instance store will lose its data?

A

stop
hibernate
termination

51
Q

What are the events where an EC2 store will not dump its instance store?

A

reboot

52
Q

What are the 3 route tables associated with VPCs?

A

Subnet
Gateway
Local Gateway

53
Q

What are the 6 pillars of the Well-Architected Framework?

A
Operational Excellence
Security
Reliability
Performance Efficiency
Cost Optimization
Sustainability
54
Q

Which pillar of Well-Architected AWS frameworks has attribute “perform operations as code”?

A

Operational Excellence

55
Q

Which pillar of Well-Architected AWS frameworks has attribute “Make frequent, small, reversible changes”?

A

Operational Excellence

56
Q

Which pillar of Well-Architected AWS frameworks has attribute “Refine Operations Procedures Frequently”?

A

Operational Excellence

57
Q

Which pillar of Well-Architected AWS frameworks has attribute “Anticipate Failure”

A

Operational Excellence

58
Q

Which pillar of Well-Architected AWS frameworks has attribute “Learn from all operational failures”?

A

Operational Excellence

59
Q

Which aspect of the Well-Architected framework involves “collecting metrics that are used to measure the achievement of desired business outcomes”?

A

Operational Excellence

60
Q

Which pillar of Well-Architected AWS frameworks has attribute “Enable Traceability”?

A

Security

61
Q

Which pillar of Well-Architected AWS frameworks has attribute “Keep people away from data”?

A

Security

62
Q

Which pillar of Well-Architected AWS frameworks has attribute “Implement a strong identity foundation”?

A

Security

63
Q

Which pillar of Well-Architected AWS frameworks has attribute “Automatically recover from failure”?

A

Reliability

64
Q

Which pillar of Well-Architected AWS frameworks has attribute “Test recovery procedures”?

A

Reliability

65
Q

Which pillar of Well-Architected AWS frameworks has attribute “Scale horizontally to increase aggregate workload availability”?

A

Reliability

66
Q

Which pillar of Well-Architected AWS frameworks has attribute “Stop guessing capacity”?

A

Reliability

67
Q

Which pillar of Well-Architected AWS frameworks has attribute “Manage change in automation”?

A

Reliability

68
Q

Which pillar of Well-Architected AWS frameworks has attribute “Democratize advanced technologies”?

A

Performance Efficiency

69
Q

Which pillar of Well-Architected AWS frameworks has attribute “Go global in minutes”

A

Performance Efficiency

70
Q

Which pillar of Well-Architected AWS frameworks has attribute “Use serverless architectures”?

A

Performance Efficiency

71
Q

Which pillar of Well-Architected AWS frameworks has attribute “Experiment more often”?

A

Performance Efficiency

72
Q

Which pillar of Well-Architected AWS frameworks has attribute “Consider mechanical sympathy”

A

Performance efficiency

73
Q

Which pillar of Well-Architected AWS frameworks has attribute “implement cloud financial management”?

A

Cost optimization

74
Q

Which pillar of Well-Architected AWS frameworks has attribute “understand your impact”?

A

Sustainability

75
Q

Which pillar of Well-Architected AWS frameworks has attribute “maximize utilization”?

A

Sustainability

76
Q

Which pillar of Well-Architected AWS frameworks has attribute “use managed services”?

A

Sustainability

77
Q

Which pillar of Well-Architected AWS frameworks has attribute “Implement software and architecture patterns to perform load smoothing and maintain consistent high utilization of deployed resources”?

A

Sustainability

78
Q

What AWS feature “allocates resources automatically allowing an organization to quickly deploy applications”?

A

Beanstalk

79
Q

What AWS feature “enables requests for temporary, limited-privilege credentials for AWS IAM users”?

A

AWS Security Token Service (STS)

80
Q

What are 3 AWS features built on EC2?

A

Redshift
Elasticache
ElasticSearch

81
Q

What AWS tool would you use to find EC2 instances with low utilization?

A

Cost Explorer

82
Q

What are the 4 key strategic benefits critical to implementing an optimal security posture?

A

Prevent
Detect
Respond
Remediate

83
Q

Which key strategic benefit does this file under?

“Define user permissions and identities, infrastructure protection and data protection measures for a smooth and planned AWS adoption strategy.”

A

Prevent

84
Q

Which key strategic benefit does this file under?

“Gain visibility into your organization’s security posture with logging and monitoring services. Ingest this information into a scalable platform for event management, testing, and auditing.”

A

Detect

85
Q

Which key strategic benefit does this file under?

“Automated incident response and recovery to help shift the primary focus of security teams from response to analyzing root cause.”

A

Respond

86
Q

Which key strategic benefit does this file under?

“Leverage event driven automation to quickly remediate and secure your AWS environment in near real-time.”

A

Remediate

87
Q

What AWS service is used to replace Microsoft Active Directory?

A

AWS Directory Service

88
Q

What are the 6 AWS Security, Identity, and Compliance service categories?

A
Identity & access management
Detection
Infrastructure Protection
Data Protection
Incidence Response
Compliance
89
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Cloud single-sign-on (SSO) service”

A

Identity and Access Management

AWS Single Sign-On

90
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Manage user access and encryption keys”

A

Identity and Access Management

AWS Identity & Access Management (IAM)

91
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Identity management for your apps”

A

Identity and Access Management

Amazon Cognito

92
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Simple, secure service to share AWS resources”

A

Identity and Access Management

AWS Resource Access Manager

93
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Central governance and management across AWS accounts”

A

Identity and Access Management

AWS Organizations

94
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Unified Security and Compliance Center”

A

Detection

AWS Security Hub

95
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Managed threat detection service”

A

Detection

Amazon GuardDuty

96
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Analyze application security”

A

Detection

Amazon Inspector

97
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

“Record and evaluate configurations of your AWS resources”

A

Detection

AWS Config

98
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Track user activity and API usage

A

Detection

AWS CloudTrail

99
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Security management for IoT devices

A

Detection

AWS IoT Device Defender

100
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Network security

A

Infrastructure Protection

AWS Network Firewall

101
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

DDoS protection

A

Infrastructure Protection

AWS Shield

102
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Filter malicious web traffic

A

Infrastructure Protection

AWS Web Application Firewall (WAF)

103
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Central management of firewall rules

A

Infrastructure Protection

AWS Firewall Manager

104
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Discover and protect your sensitive data at scale

A

Data Protection

Amazon Macie

105
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Key storage and management

A

Data Protection

AWS Key Management Service (KMS)

106
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Hardware based key storage for regulatory compliance

A

Data Protection

AWS CloudHSM

107
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Provision, manage, and deploy public and private SSL/TLS certificates

A

Data Protection

AWS Certificate Manager

108
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Rotate, manage and retrieve secrets

A

Data Protection

AWS Secrets Manager

109
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Investigate potential security issues

A

Incidence Response

Amazon Detective

110
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Fast, automated, cost- effective disaster recovery

A

Incidence Response

CloudEndure Disaster Recovery

111
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

No cost, self-service portal for on-demand access to AWS’ compliance reports

A

Compliance

AWS Artifact

112
Q

Which AWS Security, Identity, and Compliance service does the following statement fall under?

Continuously audit your AWS usage to simplify how you assess risk and compliance

A

Compliance

AWS Audit Manager