Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Practitioner > AWS Practitioner Notes > Flashcards

AWS Practitioner Notes Flashcards

1
Q

Describe the basic AWS Infrastructure

A

AWS is split into Regions (based on geography)
Regions are split into Availability Zones (2-6 per region, average 3)
Availability Zones have multiple Data Centers
In addition there are Edge Locations, Local Zones, and Outposts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are some factors in choosing a Region

A

Compliance Requirements
Latency
Available Services
Pricing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Shared Responsibility Matrix - AWS Responsibilities

A

Security OF the cloud
Hardware
Certain Software (offered as a service)
Certain OS (of serverless services)
Networking/Firewalls of serverless services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Shared Responsibility Matrix - Customer Responsibilities

A

Security IN the cloud
Customer Data
Platforms, applications, IAM, network/firewall of EC2 instances
OS of EC2 instances
Networking traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is IAM

A

IAM = Identity and Access Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Describe IAM Users

A

An IAM User should be a single physical user
Users can be assigned to groups, but don’t have to be

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe IAM Groups

A

An IAM Group is a collection of IAM Users
An IAM User can belong to multiple groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Describe IAM Policies

A

An IAM Policy can be assigned to a user or a group
An IAM Policy is used to control access to AWS resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is an Inline Policy

A

A policy that is assigned to a user directly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the Least Privilege Principle

A

Only giving a user the bare minimum access they require

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How is an IAM Policy Structured

A

It has a version number, an ID, and a Statement
A statement consists of an ID, Effect (Allow/Deny), Principal (account/user/role to which the statement applies), Action (list of actions the policy allows/denies), and Resources (list of AWS resources that the policy applies to)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

IAM Password Policy

A

Allows you to define the password requirements for all accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is MFA

A

Multi-factor Authentication - Using both a password and a security device
Can be physical (key or or keyfob that generates MFA codes)
Can be virtual

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Name three ways to access AWS

A

The AWS Management Console (requires password/MFA)
Command Line Interface (requires access keys)
Software Development Kit - SDK (requires access keys)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is AWS Cloudshell

A

It is an alternate way to access AWS - private CLI using the browser - does not require access keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are IAM Roles

A

IAM Roles are a way to assign permissions to AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Name two IAM security tools

A

IAM Credential Reports (account level)
IAM Access Advisor (user level)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are some IAM best practices

A

Don’t use the root account unless you absolutely have to - create accounts with administrative access instead
1 physical user = 1 AWS account
Assign Users to Groups, then assign permissions/policies to those groups
Use a strong password policy
Use/enforce MFA
Use roles when giving permissions to AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is EC2 stand for

A

Elastic Cloud Compute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Is EC2 IAAS, PAAS, SAAS?

A

It is IAAS - Infrastructure As A Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What can you customize in an EC2 instance

A

Operating System
Number of Cores
RAM
Storage Space
Network Card

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is EC2 User Data

A

A Bootstrap Script - runs once when the instance starts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the different EC2 types

A

General Purpose - Good for web servers or code repositories
Compute Optimized - Good for high performance processing
Memory Optimized - Good for processing large data sets in memory
Storage Optimized - Good for high sequential r/w access to local datasets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

EC2 naming convention - explain the different parts of: m5.2xlarge

A

m = instance class
5 = generation
2xlarge = size within the instance class

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is a security group

A

A set of permissions that allows traffic in or out of an EC2 instance
It only has ALLOW rules
Acts as firewall to an EC2 instance
Regulates access to ports, authorized IP ranges (IPV4 and IPV6)
Can be attached to multiple instances
Instances can have multiple security groups assigned to them
Locked to a Region/VPC combination
Lives outside the EC2 instance - if it blocks something, that something never reaches the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Describe Important Ports

A

21 = FTP
22 = SFTP and secure shell
80 = HTTP
443 = HTTPS
3389 = Remote Desktop Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is SSH

A

Secure Shell - used to log into Linux, MAC, and Windows (v10+) servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is Putty

A

Used to log into Windows (any version) servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Describe the EC2 purchasing option On Demand Instances

A

Good for short workloads
Pricing - Windows/Linux - Pay per second after the first minute
Pricing - Other - Pay per hour
Highest cost, no upfront payment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Describe the EC2 purchasing option Reserved Instances

A

Good for long workloads
Can reserve for 1 or 3 years
Save up to 72%
Reserve specific instance attributes
Can pay upfront, partially upfront, no upfront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Describe the EC2 purchasing option Savings Plans

A

Good for long workloads
Can be for 1 or 3 year commitment
Save up to 72%
Commit to specific usage (ex $10/hour) for 100 hours
Usage beyond that is at on demand prices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Describe the EC2 purchasing option Spot Instances

A

Good for short workloads that can be interrupted
Up to 90% discount
Can lose instance at any time
Use for workloads resistant to failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Describe the EC2 purchasing option Dedicated Host

A

Dedicated host - good for when have compliance requirements
Have all of a physical server reserved just for your use, control instance placement
Payment options are on demand or reserved - is very expensive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Describe the EC2 purchasing option Dedicated Instances

A

No other customer will share your hardware
Multiple instances from the same account may share the hardware

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Describe the EC2 purchasing option Capacity Reservations

A

Reserve an amount of capacity for a specific AZ for any duration
Always have access to the capacity whenever you need it, no time commitment, no billing discounts, can combine with Regional Reserve instances and Savings Plans, charged On Demand prices whether you run instances or not

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is EBS

A

Elastic Block Storage - network storage
Can be attached to a single instance
Multiple EBS can be attached to a single instance
Has provisioned capacity - can select size and speed when setting up
Billed for the provisioned capacity
Use limited to an AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is an EBS Snapshot

A

A backup image of an EBS volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is the EBS Snapshot Archive

A

75% cheaper storage tier
24-72 hours to restore from

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What is AMI

A

Amazon Machine Image
A defined configuration for an EC2 instance
Public AMI - provided by Amazon
Private AMI - make and maintain yourself
AWS Marketplace AMI - purchased off the Marketplace

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Define the process for building/using an AMI

A

Create EC2 instance and configure it
Stop the instance
Create the AMI from the stopped instance
Launch new instances from the AMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is an Instance Store

A

Physical storage attached to an EC2 instance
Data is lost if the EC2 instance is stopped
Backup and replication are customer’s responsibility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is EFS

A

Elastic File System - network storage that can be attached to multiple EC2 - can be used across AZ’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is EFS Infrequent Access

A

Storage tier up to 92% cheaper than EFS Standard
Files automatically moved to this tier and back to Standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is FSx for Windows

A

Fully managed file system built on Windows File Server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is FSx for Lustre

A

File system for high performance computing
Used for ML, analytics, video processing, and financial modeling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is ELB

A

Elastic Load Balancing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Describe the two types of scalability

A

Vertical Scalability - increase/decrease the size of an instance - scale up/down
Horizontal Scalability - increase/decrease the number of instances - scale out/in

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is High Availability

A

When you are running in multiple AZ’s or Regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is Elasticity

A

The ability to scale in/out to match demand and optimize costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What is ASG

A

Auto-Scaling Groups - a service that adds/removes instances automatically
Replaces unhealthy instances automatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What are 2 types of Load Balancers

A

ALB - Application Load Balancers - for HTTP/HTTPS traffic (external)
NLB - Network Load Balancers - for TLS/TCP traffic (internal)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What are 4 types of ASG Dynamic Scaling Strategies

A

Simple/Step Scaling - based on Cloudwatch alarms targeting capacity usage
Target Tracking Scaling - based on average CPU usage
Scheduled Scaling - based on known usage patterns over a period of time
Predictive Scaling - uses ML based on past traffic patterns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What is S3

A

Simple Storage Service
Create buckets to store objects/files
Regional Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

S3 Bucket Naming Conventions

A

Must be UNIQUE across all regions/accounts
No uppercase, no underscores
3-36 characters long
Not an IP
Must start with lowercase letter
Can’t start with “xn-“
Can’t end with “-s3alias”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What are characteristics of S3 objects

A

Object key = is full path and file name of object
Max size is 5TB, if greater than 5GB must upload in pieces
Metadata - key and value pairs
Can tag objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What are S3 Bucket Policies

A

Allows access to objects in a S3 bucket
Object Access Control List - Security Policy that details users that can access the object
Bucket Access Control List - Security Policy that details users that can access the bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What is the default Security Bucket Policy

A

As a default, an S3 bucket denies public access to its objects - overrides other specific policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What is Static Web Hosting

A

Where the code for a web site is stored in an S3 bucket
Must have public access turned on

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What is S3 Versioning

A

Where objects in S3 buckets are assigned file keys
Previous versions of objects are retained and can be restored
Deleted objects can be restored

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What is S3 Replication

A

Copying a S3 bucket
CRR - Cross Region Replication - copying to another Region
SRR - Same Region Replication - copying to the same Region
Copying is asynchronously

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What are the basic S3 Storage Classes

A

S3 - Standard - 99.99% Availability
S3 Infrequent Access - 99.9% Availability
S3 Zone Infrequent Access - 99.9% Availability - 1 AZ only
S3 Glacier Instant Retrieval - Millisecond retrieval
S3 Glacier Flexible Retrieval - Expedited 1-5 min, Standard 3-5 hr, Bulk 5-12 hr
S3 Glacier Deep Archive - Standard 12 hour, Bulk 48 hour

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

What is S3 Intelligent Tiering

A

Storage method where files are automatically moved from one tier to another
Frequent Access Tier (default)
Infrequent Access Tier - objects not accessed for 30 days
Archive Instant Access Tier - objects not accessed for 90 days
Archive Access Tier (optional) - objects not accessed for 90-700 days
Deep Archive Access Tier (optional) - objects not accessed for 180-700 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What are the S3 encryption options

A

None
Server side - is encrypted after server receives file
Client side - file is encrypted before being uploaded

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Name the 3 Snow Family Devices

A

Snowcone
Snowball Edge
Snowmobile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Describe Snowcone

A

Small box, up to 8 TB storage
Can use up to 15 at a time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Describe Snowball Edge

A

Large server, comes in 2 flavors
Storage optimized - 80 TB storage
Compute optimized - 43 TB storage, has more compute power

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Describe Snowmobile

A

Semitruck, 100 PB storage
High security, 24/7 video surveillance
Temperature controlled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What is AWS Opshub

A

Graphical interface that allows you to use Snow family devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

What is Hybrid Cloud Storage

A

Using on premises and cloud storage at same time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

What is AWS Gateway

A

bridge between on premise storage and AWS S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

Describe RDS

A

Relational Database Service
Fully Managed Relational Databases
Have to provision the EC2 instances
Postgres, MySQL, MariaDB, Oracle, Microsoft SQL Server, Aurora
Cannot SSH into database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

What is Aurora

A

Proprietary database software
Supports Postgres and MySQL
Cloud optimized - better than RDS but more expensive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

What are Read Replicas for RDS

A

Read only versions of your DBS - can have up to 5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

What is Multi-AZ for RDS

A

Where you backup your DB to a different AZ
If main DB fails, restore from backup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

What is Multi-Region for RDS

A

Where you have Read Only versions of your DB in different Regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What is Elasticache

A

In memory database with high performance, low latency
Helps reduce load off actual DB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

What is Dynamo DB

A

A noSQL DB managed by AWS
Is a key-value pair DB
Serverless service
Highly scalable - autoscaling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What is Dynamo DB DAX

A

In memory cache for Dynamo DB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

What are Dynamo DB Global Tables

A

Tables in multiple Regions
Read/write in any Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

What is Redshift

A

A Postgres DB that is used for Online Analytical Processing
Has SQL interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

What is EMR

A

Elastic Map Reduce - creates Hadoop cluster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

What is Athena

A

Serverless query service for objects in S3 buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

What is Quicksight

A

Serverless machine learning-powered business intelligence service to create interactive dashboards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

What is DocumentDB

A

Serverless implementation of MongoDB (noSQL)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

What is Neptune

A

Fully managed graph DB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

What is QLDB

A

Quantum Ledger DB
Records financial transactions
Data is immutable once entered

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

What is Managed Blockchain

A

Managed service to either join public blockchain networks or create your own blockchain network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

What is GLUE

A

Managed Extract/Transform/Load service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

What is DMS

A

Database Migration Service
Source DB remains available during migration
Can be to/from same type DB or different type DB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

What is ECS

A

Elastic Container Service - Docker containers
Customer must provision/maintain EC2 instances
ECS automatically starts/stops containers
Integrated with ELB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

What is EKS

A

Elastic Kubernetes Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

What is Fargate

A

Serverless service that launches Docker containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

What is the difference between ECS and Fargate

A

ECS requires customer to provision/maintain EC2 instances on which to run the containers, Fargate manages that for the client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

What is ECR

A

Elastic Container Registry
Where container images are stored and accessed by ECS and Fargate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

What is Lambda

A

Serverless compute service
Virtual functions
Usually execution triggered by event or scheduled
Cheap but powerful

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

What is an API Gateway

A

Serverless middleman between external clients and Lambda functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

What is AWS Batch

A

Fully managed batch processing service
Can be triggered by event or scheduled
Will dynamically launch EC2 instances
Batch jobs are defined as Docker images and run on ECS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

What is the difference between Lambda and Batch

A

Lambda functions have limited run time and resources and is serverless
Batch has no time limit, can have greater resources, is not serverless but servers are managed by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

What is Lightsail

A

Virtual servers, storage, databases, and networking
Simpler than other AWS services, but is very limited
Good for people with little cloud experience

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

What is Cloud Formation

A

A declarative method of outlining your AWS Infrastructure, for any resources
Define the services/infrastructure you want, then Cloud Formation creates them
Infrastructure as Code
Gives ability to create and destroy infrastructure on the fly
Can create templates, get templates from Web
Supports most AWS services
Uses JSON/YAML files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

What is CDK

A

AWS Cloud Development Kit
Use other languages
Allows you to deploy runtime code and infrastructure tool

102
Q

What is Elastic Beanstalk

A

Developer centric view of deploying infrastructure on the internet
Uses AWS components
Platform as a Service
Beanstalk is free, but pay for resources created
Fully Managed Service

103
Q

What is CloudDeploy

A

Hybrid service that deploys code

104
Q

What is CloudCommit

A

Equivalent of Github for AWS
Fully managed service

105
Q

What is CloudBuild

A

A service that compiles source code, runs tests, and produces packages ready to be deployed
Hybrid Service
Servers/EC2’s must have CloudDeploy agent installed

106
Q

What is Code Pipeline

A

Orchestrates the steps to move Code to production
CICD
Works with CloudDeploy, CloudCommit, and CodeBuild

107
Q

What is CodeArtifact

A

System for managing software package dependencies for software development

108
Q

What is CodeStar

A

Unified UI to manage software development activities in one place
Uses the Code* services behind the scenes

109
Q

What is Cloud9

A

A Virtual IDE used for collaberation

110
Q

What is SSM

A

Systems Manager
Hybrid service that works on both EC2 or on-premise server
Suite of 10+ programs to manage servers
Servers require SSM Agent to be installed

111
Q

What is SSM Sessions Manager

A

Secure Shell for SSM
No SSH access, bastion hosts, or SSH keys needed
Doesn’t use port 22, so is better security

112
Q

What is OpsWork

A

Managed Chef and Puppet service

113
Q

What is Route 53

A

AWS DNS service used to route to AWS infrastructure

114
Q

What are the 4 Route 53 routing policies

A

Simple Routing Policy - No health checks
Weighted Routing Policy - Routing based on defined ratios for various servers
Latency Routing Policy - Routing based on the lowest latency
Failover Routing Policy - Route to main server unless down, then route to backup server

115
Q

What is Cloudfront

A

Content Delivery Network
Data is cached at Edge Locations
Helps against DDoS attacks

116
Q

What is Cloudfront Origins S3 Basket

A

Used to distribute files and cache them at the Edge

117
Q

What is Cloudfront Origins Custom Origin

A

Connects to: Application Load Balancer, EC2, S3 Website, any HTTP backend

118
Q

Difference Between Cloudfront and S3 Cross Region Replication

A

Cloudfront uses Edge Locations to make content available for a short time
S3 CRR is set up for specific Regions, works for content only needed in a few Regions

119
Q

What is S3 Transfer Acceleration

A

S3 using Edge Locations and high speed internal network to speed up data transfer to/from S3 buckets

120
Q

What is AWS Global Accelerator

A

AWS’s fast private network and Edge Locations used to improve global availability and performance

121
Q

Compare Global Accelerator and Cloudfront

A

Both use AWS network and Edge Locations
Both integrate with AWS Shield
Cloudfront is a CDN, caching files at the Edge
Global Accelerator uses Edge Locations, but does not cache files

122
Q

What are AWS Outposts

A

Hybrid Cloud system where AWS servers are emplaced at a client location in addition to client owned servers
AWS sets up and manages the AWS servers
Client responsible for physical security of AWS servers

123
Q

What is AWS Wavelength

A

AWS Servers emplaced in telecommunications providers datacenters at the edge of 5G networks
Data stays within providers’ networks, never reaches AWS
Ultra low latency

124
Q

What are AWS Local Zones

A

Special AWS datacenters that place certain services closer to end users to reduce latency

125
Q

Describe 4 Global Application Architectures

A

Single Region, Single AZ
Single Region, Multiple AZ
Multiple Region, Active Passive (only 1 is read & write)
Multiple Region, Active Active (all are read & write)

126
Q

What is SQS

A

Simple Queue Service
Allows asynchronous communication
Producers send messages to SQS
Consumers read messages from SQS and then delete them
Fully managed, serverless
Messages retained 4-14 days, unlimited messages

127
Q

What is Kinesis

A

Real time big data streaming service
Managed service to collect, process, and analyze real time streaming data

128
Q

What is SNS

A

Simple Notification Service
Pubsub - Publishers send messages to SNS Topic, Subscribers are then sent those messages

129
Q

What is Amazon MQ

A

Amazon managed broker service for RabbitMQ and ActiveMQ (which are non-AWS software)

130
Q

What is CloudWatch Metrics

A

Service that provides metrics for every service in AWS
Can create custom metrics

131
Q

What is CloudWatch Alarms

A

Service that allows you to set up monitoring of CloudWatch Metrics which can trigger various responses: Autoscaling, EC2 actions (stop/restart/etc), SNS notifications

132
Q

What is CloudWatch Logs

A

Collects logs from various AWS services, enables real time monitoring

133
Q

What is CloudWatch Logs Agent

A

Software that can be installed on EC2’s or on-premise servers and feeds logs to CloudWatch Logs

134
Q

What is EventBridge

A

Service that allows you to schedule CRON jobs
Can respond to service event triggers

135
Q

What is CloudTrail

A

A history of events/API calls made within your AWS account
Source: CLI, console, CDK, AWS services
Good for compliance, governance, and audit
Logs can be sent to CloudWatch Logs

136
Q

What is X-Ray

A

Diagnostic tool that can be used to trace data flow
Good for troubleshooting and tracing

137
Q

What is CodeGuru

A

Machine learning enabled code reviewer
Also makes application performance and cost recommendations

138
Q

What is the Service Health Dashboard

A

Shows health of all services in all regions
Has a RSS feed you can subscribe to

139
Q

What is the Personal Health Dashboard

A

Dashboard that provides alerts and remediation advice for AWS services used by your account that are current having issues or have upcoming scheduled events

140
Q

Describe VPC

A

Virtual Private Cloud
Private network for deploying your AWS resources
VPC’s are contained within a Region

141
Q

What is a Subnet

A

A way of partitioning your network within a VPC
Associated within a single AZ
Public subnet - accessible to/from internet
Private subnet - not accessible to/from internet

142
Q

What is an Internet Gateway

A

Help VPC’s connect to the internet via a public subnet

143
Q

What is a NAT Gateway

A

NAT Gateway (AWS Managed) / NAT Instance (self managed) - allow private subnets to access the internet while remaining private

144
Q

What is NACL

A

Network Access Control List
Firewall that controls traffic to/from a subnet
Can have ALLOW and DENY rules
Rules only contain IP addresses
Operates at subnet level
Stateless: Return traffic must be explicitly allowed

145
Q

What is a Security Group

A

Firewall that controls traffic to/from an ENI (Elastic Network Interface) / an EC2 instance
Can only have ALLOW rules
Rules include IP addresses and other Security Groups
Operates at instance level
Stateful: Return traffic automatically allowed

146
Q

What are VPC Flow Logs

A

Logs of all IP traffic flowing your into your instances

147
Q

What is VPC Peering

A

Connect two VPC’s privately, using AWS’s network
Make them behave as if in the same network
Must not have overlapping CIDR (IP network range)
Is not Transitive - must be established between each pair individually

148
Q

What are VPC Endpoints

A

Allows you to connect to AWS Services using a private network instead of the public internet

149
Q

What is a VPC Endpoint Gateway

A

Allows you to connect to S3 or Dynamo DB (only)

150
Q

What is a VPC Endpoint Interface

A

Allows you to connect to any AWS service other than S3/Dynamo DB

151
Q

What is PrivateLink

A

Most secure and scalable way to expose a service to many VPC’s
Source VPC creates Network Load Balancer, target VPC creates Elastic Network Interface, then privately link the two

152
Q

What is Site to Site VPN

A

Connect on-premise servers to AWS
Uses public internet
Fast to set up
Customer end - uses Customer Gateway
AWS end - uses Virtual Private Gateway

153
Q

What is Direct Connect

A

Physical connection between on-premise servers and AWS
Expensive and takes long time to set up
Private, secure, fast

154
Q

What is AWS Client VPN

A

Connect on-premise servers to AWS using OpenVPN Client
Uses public internet

155
Q

What is a Transit Gateway

A

Transitive Peering between multiple AWS VPC’s and client VPC in a hub and spoke (star) pattern

156
Q

Security - Shared Responsibility Matrix - AWS

A

Security OF the Cloud
Protecting infrastructure that protects AWS services
Managed services like S3, Dynamo DB, etc

157
Q

Security - Shared Responsibility Matrix - Customer

A

Security IN the Cloud
EC2 OS patching and updates
Firewall and Network configurations
IAM
Encryption of application data

158
Q

What is AWS Shield Standard

A

Protection against DDoS attacks: SNY/UPD Floods, Reflection attacks, other layer 3/layer 4 attacks
Free

159
Q

What is AWS Shield Advanced

A

Optional DDoS protection
$3000/month
Protects against more sophisticated attacks on EC2, ELB, CloudFront, Global Accelerator, and Route 53
24/7 access to AWS DDoS response team during the attack
Protection against higher fees during usages spikes from DDoS

160
Q

What is WAF

A

Web Application Firewall
Protects your web applications from common web exploits (Layer 7 = HTTP)
Deploy on Application Load Balancer, API Gateway, CloudFront
Define Web ACL (Access Control List) - can include IP Addresses, HTTP Headers, HTTP Body, or URI Strings
Web ACL protects against common attack - SQL Injection, Cross site scripting, block geographies (countries)
Can limit the number of requests per user per time period

161
Q

What services can you perform penetration testing on without notice

A

EC2 Instances/NAT Gateways/ELB, RDS, CloudFront, Aurora, API Gateways, Lambda/Lambda Edge functions, Lightsail, Elastic Beanstalk

162
Q

What security tests are prohibited by AWS

A

DNS Zone Walking, DDoS, simulated DDoS, Port Flooding, Protocol Flooding, Request Flooding

163
Q

What is KMS

A

Key Management Service
Manages encryption keys

164
Q

What is CloudHSM

A

Dedicated hardware security module attached to FIPS validated hardware
Manage your encryption keys

165
Q

What is Customer Managed CMK (Customer Master Keys)

A

Keys created, managed, used by the customer
Can bring your own keys

166
Q

What is AWS Managed CMK (Customer Master Keys)

A

Keys managed by AWS and used on customers behalf by AWS
Used by AWS services

167
Q

What is AWS Owned CMK (Customer Master Keys)

A

Collections of CMK’s that an AWS service owns and manages in mulitple accounts
Used to protect customer resources, but customer doesn’t have access to them

168
Q

What is ACM

A

AWS Certification Manager
Allows customer to provision, manage, and deploy SSL/TLS Certificates
Used to provide inflight encryption for websites (HTTPS)
Supports both public and private TLS certificates (public are free)
Automatic TLS certificate renewal

169
Q

What is Secrets Manager

A

Store secrets, force rotation of secrets
Integrated with RDS
Secrets encrypted using KMS

170
Q

What is AWS Artifact

A

Portal that gives you access to AWS Compliance documentation and AWS agreements
Used to support internal audit or compliance

171
Q

What is GuardDuty

A

Uses machine learning algorithms, anomaly detection, 3rd party data to protect your account
Input data used - CloudTrail Event Logs, VPC Flow Logs, DNS Logs, Kubernetes Audit Logs
Can protect against CryptoCurrency attacks

172
Q

What is Inspector

A

Run automated security assessments
For EC2 instances, container images, Lambda Functions
Reporting and integration is with AWS Security Hub
Send findings into Amazon EventBridge

173
Q

What is Macie

A

Fully managed data security and data privacy service
Uses machine learning and pattern matching to discover and protect your sensitive data in AWS

174
Q

What is Detective

A

Analyzes, investigates, and identifies the root cause of security issues or suspicious activity (using machine learning and graphs)
Automatically collects and processes events from VPC Flow Logs, CloudTrail, GuardDuty, and creates a unified view

175
Q

Define AWS Abuse

A

Spam, port scanning, DDoS, Intrusion Attempts, Hosting objectional/copyrighted content, distributing malware
Contact the AWS Abuse Team if discovered

176
Q

Name 4 actions only the Root User account can do

A

Change account settings
Close the account
Change or cancel support plans
Register as a seller on the AWS Marketplace

177
Q

What is Rekognition

A

Service that finds people, objects or scenes in video

178
Q

What is Transcribe

A

Converts speech to text
Uses deep learning process: Automatic Speech Recognition

179
Q

What is Polly

A

Converts text to speech

180
Q

What is Translate

A

Converts text in one language to text in another language

181
Q

What is Lex

A

Lex is Automatic Speech Recognition
Used for Alexa

182
Q

What is Connect

A

Virtual Call Center

183
Q

What is Comprehend

A

Natural Language Processing

184
Q

What is Sagemaker

A

Fully managed service for developers / data scientists to build ML models

185
Q

What is Forecast

A

Fully managed service that uses ML to delivery highly accurate forecasts

186
Q

What is Kendra

A

Fully managed document search service
Extract answers from within a document

187
Q

What is Personalize

A

Fully manage ML service to build apps with real time personalized recommendations

188
Q

What is TexTract

A

Automatically extracts text, handwriting, data from any scanned documents using AI and ML

189
Q

What is AWS Organizations

A

Global service that allows you to create and manage all your accounts from a master account
Allows consolidated billing
Allows sharing Reserved Instances
Gives pricing benefits from aggregated usage

190
Q

What are Service Control Policies

A

Service that whitelists or blacklists IAM actions for accounts

191
Q

What is AWS Control Tower

A

Service that runs on top of AWS Organizations
It applies preventive and detective controls (guardrails) to help keep your organizations and accounts from divergence from best practices

192
Q

What are the 4 pricing models of the Cloud

A

Pay As You Go
Save When You Reserve
Save When You Use More
Pay Less as AWS Grows (economies of scale)

193
Q

Name some free services

A

IAM, VPC, Consolidated Billing, Elastic Beanstalk, CloudFormation, Auto Scaling Groups

194
Q

Describe pricing data traffic

A

Data transferred into AWS is free
Data transferred out of AWS is not free
Data transferred within AWS Region is free if using private IP
Data transferred between Regions is not free

195
Q

What is Compute Optimizer

A

Service that uses ML and CloudWatch Metrics to recommend optimal AWS resources for your workload to reduce costs and improve performance

196
Q

What is Pricing Calculator

A

Tool that estimates costs for your solution architecture

197
Q

What is the Billing Dashboard

A

Tool that shows you costs to date, forecasts for rest of month
Breaks down the costs

198
Q

What are Cost Allocation Tags

A

Tags attached to services and resources that allow you to track costs at a detailed level

199
Q

What are Cost and Usage Reports

A

Tool that contains most the comprehensive set of AWS cost and usage data available, including additional metadata about AWS services, pricing, reservations

200
Q

What is Cost Explorer

A

Tool to visualize, understand, and manage your AWS costs
Forecast up to 12 months based on previous usage

201
Q

What are Billing Alarms

A

Triggers that track your AWS spending and sends notifications
Billing data is stored in CloudWatch in us-east-1 only, aggregated for all Regions

202
Q

What are AWS Budgets

A

Tool that allows you to set up a budget for AWS services
Can trigger Billing Alarms
Types: Usage, Cost, Reservations

203
Q

What is Trusted Advisor

A

An assessment tool that analyzes resources in your account based on these categories: Cost Optimization, Performance, Security, Fault Tolerance, Service Limits

204
Q

What are the 7 core checks for Trusted Advisor

A

S3 Bucket Permissions
Security Groups - Ports check
IAM Use
MFA on root account
Presence of EBS public snapshots
Presence of RDS public snapshots
Service Limits

205
Q

Describe the Basic Support plan

A

It is free
Access to 24/7 customer service
Access to documentation, whitepapers, and support forums
Access to 7 core checks for Trusted Advisor
Access to Personal Health Dashboard

206
Q

Describe the Developer Support plan

A

Costs greater of $29 or 3% of monthly charges
Same as Basic Support plan
Business hours email access to Cloud Support Associates
Unlimited cases, 1 primary contact
General Guidance < 24 hours
System Impaired < 12 hours

207
Q

Describe the Business Support plan

A

Costs greater of $100 or sliding % of monthly costs
Same as Developer Support plan
Full Trusted Advisor checks
24/7 phone/email/chat access to Cloud Support Engineers
Unlimited Cases, Unlimited Contacts
Access to Infrastructure Event Management for additional fee
Production system impaired < 4 hours
Production System Down < 1 hour

208
Q

Describe the Enterprise Onramp Support plan

A

Costs greater of $5,500 or 10% of monthly charges
Same as Business Support plan
Access to a pool of Technical Account Managers (TAM)
Concierge Support Team (for account and billing best practices)
Infrastructure Event Management, Well Architected and Operations Review
Business-critical system down < 30 minutes

209
Q

Describe the Enterprise Support plan

A

Costs greater of $15,000 or sliding % of monthly costs
Same as Enterprise Onramp Support plan
Access to a designated TAM
Business-critical system down < 15 minutes

210
Q

What is STS

A

Security Token Service
Enables you to create temporary limited-privileges credentials to access your AWS resources

211
Q

What is Cognito

A

Identity for Web/Mobile application users
Don’t create individual IAM users, create users in Cognito instead

212
Q

What is AWS Directory Services

A

AWS’s version of Microsoft Active Directory

213
Q

What is Workspaces

A

Virtual Desktop as a Service (DaaS)
Windows or Linux desktops

214
Q

What is AppStream 2.0

A

Desktop Application Streaming Service delivered via web browser

215
Q

What is Sumerian

A

Service that allows you to create and run VR, AR, and 3D applications

216
Q

What is IoT

A

Internet of Things
Allows you to easily connect IoT devices to the AWS Cloud

217
Q

What is Elastic Transcorder

A

Convert media files stored in S3 into media file formats required by consumer playback devices

218
Q

What is AppSync

A

Store and sync data across mobile and web applications in real time
Uses GraphQL (Facebook mobile technology)

219
Q

What is Amplify

A

Set of tools and services that allow you to develop and deploy scalable full stack web and mobile applications
Like Elastic Beanstalk for mobile and web applications

220
Q

What is Device Farm

A

Fully managed service that tests your web and mobile apps against desktop browsers, real mobile devices, and tablets
Real devices, not emulators

221
Q

What is AWS Backup

A

Fully managed service to centrally manage and automate backups across AWS services

222
Q

Describe 4 Disaster Recovery Strategies

A

Backup and Restore (Cheapest)
Pilot Light (Core Functions of the App, ready to scale)
Warm Standby (Full version of the app, but at minimum size)
Multi-site/Hot Site (Full version of the app, full size)

223
Q

What is AWS Datasync

A

Move large amount of data from on-premise to AWS
Replication tasks can be scheduled
Incremental backup after initial backup

224
Q

What is Application Discovery Service

A

Scan on-premise servers to get information for migration
Agentless Discovery (AWS Agentless Discovery Connector)
Agent Based Discovery (AWS Application Discovery Agent)

225
Q

What is Application Migration Service (MGM)

A

Lift and shift (rehost) data/applications
Then at some point cut over

226
Q

What is FIS

A

Fault Injector Service
Fully managed service to run fault injection experiments on AWS workloads
Based on Chaos Engineering

227
Q

What are Step Functions

A

Build a serverless visual workflow to orchestrate your Lambda functions
Can integrate with EC2, ECS, on-premise servers, API Gateway, SQS Queues
Features: sequence, parallel, conditions, timeouts, error handling

228
Q

What is Ground Station

A

Fully managed service that allows you to control satellite communications, process data, and scale your satellite operations

229
Q

What is AWS Pinpoint

A

Scalable 2-way outbound/inbound marketing communications service
Supports email, SMS, push, voice, and in-app messaging
Is the next evolution of SNS or SES

230
Q

What are the good architecture guiding principles

A

Stop guessing your capacity needs
Test systems at production scale
Automate to make architectural experimentation easier
Allow for evolutionary architectures
Drive architectures using data
Improve through game days (peak usage)

231
Q

Name the Well Architected Frameworks 6 pillars

A

Operational Excellence
Security
Reliability
Performance Efficiency
Cost Optimization
Sustainability

232
Q

Describe Operational Excellence (pillar 1)

A

Ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures

233
Q

Describe Security (pillar 2)

A

Ability to protect information, systems, and assets, while delivering business value, through risk assessments and mitigation strategies

234
Q

Describe Reliability (pillar 3)

A

Ability of a system to recover from infrastructure or service disruptions, dynamically acquiring computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues

235
Q

Describe Performance Efficiency (pillar 4)

A

Ability to use computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve

236
Q

Describe Cost Optimization (pillar 5)

A

Ability to run systems to deliver business value at the lowest price point

237
Q

Describe Sustainability (pillar 6)

A

Focuses on minimizing environmental impact of running cloud workloads

238
Q

What is AWS Well Architected Tool

A

Free tool to review your architectures against the 6 pillars
You select your workload and answer questions, then get advice

239
Q

What is Right Sizing

A

Right sizing is process of matching instance types/sizes to your workload performance and capacity requirements at the lowest possible price

240
Q

Describe the AWS Marketplace

A

Independent software vendors - buy/sell custom AMI, CloudFormation templates, Software as a Service, Containers

241
Q

What is AWS Training

A

Digital or classroom training, private training, training/certification for US government, training/certification for enterprises, AWS Academy for universities

242
Q

What is AWS Professional Services and Partner Network

A

Global team of networks - APN (AWS Partner Network)

243
Q

Describe APN Technology Partners

A

Third parties that provide hardware, connectivity, and software

244
Q

Describe APN Consulting Partners

A

Third parties that provide consulting services to help you build in AWS

245
Q

Describe APN Training Partners

A

Third parties that provide AWS training

246
Q

What is AWS Competency Program

A

Certification for APN Partners who have demonstrated technical proficiency and proven customer success in specialized solution areas

247
Q

What is AWS Navigate Program

A

Service that helps AWS Partners become better partners

248
Q

What is AWS Knowledge Center

A

Knowledge base of more frequent and common questions and requests

249
Q

What is AWS IQ

A

Tool to find AWS Certified professional help (contractors) for AWS projects

250
Q

What is AWS re:Post

A

AWS Managed Q&A service - offers cloud sourced, expert reviewed answers to your technical questions about AWS
Free unless purchase Premium Support (customers that don’t get a response from the community are passed on to AWS Support Engineers)

AWS Practitioner (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions