Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Cloud Architect, 8/16/21 > AWS Quest 1 Level 2 > Flashcards

AWS Quest 1 Level 2 Flashcards

1
Q

what is a “Root User”?

A

a single sign-in identity that has complete access to all AWS services and resource in an account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what are some Root User powers?

A 
change your account settings
restore IAM user permissions
activate IAM access to the Billing and Cost Management console
view tax invoices
close your AWS account
change your AWS Support plan
cancel your AWS Support plan
see IAM for AWS Support
register as a seller
configure an Amazon S2 bucket Multi-Factor Authentication Delete
edit or delete an Amazon S3 bucket policy
sign up for GovCLoud
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

should you use the Root User as the main account?

A

no

create an IAM user for yourself, give yourself admin rights, and don’t touch Root User for routine tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

can you create rotate, disable or delete access keys for your AWS account Root User?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

how long is an Access Key?

A

20 digits, and it is alphanumeric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

how many Access Keys can you have for each IAM user?

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

what does IAM stand for?

A

Identity and Access Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

how many Access Keys can you assign to each Root User?

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

how should you handle security for your IAM accounts?

A

assign permissions to groups and then assign users to groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what level of security should each user have?

A

the lowest level of security necessary to accomplish the task

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what kind of policies are designed to provide permissions for many common use cases?

A

AWS Managed Policies
they are created and administered by AWS
they have their own Amazon Resource Name (ARN) that includes the policy name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

who updates AWS Managed Policies?

A

only AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

who updates Custom Managed Policies?

A

you do, through your AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

what is an Inline Policy?

A

it’s a policy that is stuck to, or embedded into, an IAM identity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

name the 5 AWS Managed Policy features

A
  1. reusable: use it on any user, group, or role
  2. central change management: a change on the policy will update the permission of everyone who has the policy
  3. versioning and rolling back: changing a Custom Managed Policy changes the whole thing. It is not overwritten, the whole policy changes in one swipe
  4. delegating permissions management: you can create admins to manage your policies, and limited admins to manage other policies
  5. automatic updates for AWS Managed Policies: updates are automatically made and applied for you
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

what is a feature of an Inline Policy?

A

you control the policies down to the person and the line. but if you had such a special permission, when you delete something, it goes away forever

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

how can you grant permissions in AWS?

A

you can assign them individually or by groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

how do groups receive permission?

A

by attaching a policy document

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

what script are policies written in?

A

JSON JavaScript Object Notation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

what is a Role?

A

it is a job identifier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

what is an AWS Service Role?

A

it is a role that a service assumes to perform actions in your account on your behalf

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

what is an AWS service role for an Elastic Cloud Computing (EC2) instance?

A

it is a role for an instance running on ECS, and the instance performs certain tasks in your account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

what is an AWS service-linked role?

A

a unique type of service role that is linked directly to an AWS service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what does Role Chaining allow?

A

Role Chaining allows you to grant additional roles for up to one hour at a time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

how long is the permission granted for AssuemRole?

A

12 hours

26
Q

how do you grant permissions to users in a different account?

A

Delegate a role to a trusted account,

be careful, delegated users drop all their permissions while they are in the delegated role

27
Q

what is Federation?

A

it is the creation of a trust relationship between an external identity provider and AWS, like Facebook. You can link identity login to a trusted site

28
Q

how can you simplify your billing into a single payment method?

A

organize your accounts under one Root Account

29
Q

name 4 benefits of organizing accounts into Organizational Units

A
  1. administer all accounts as a single unit
  2. you can organize everything into a tree-like structure
  3. an Organizational Unit can control other Organizational Units
  4. you can set policies for parent OUs and the policy will enact on all of the child OUs
30
Q

what kind of account do you use to create the organization?

A

Management Account

31
Q

what kind of account is responsible for paying all charges that are accrued by the member accounts?

A

Management Account

32
Q

name 6 things you can do with a Management Account

A
  1. create accounts in the organization
  2. invite other existing accounts to the organization
  3. remove accounts from the organization
  4. manage invitations
  5. apply policies to entities within the organization
  6. enable integration with supported AWS services to provide functionality across all of the accounts in the organization
33
Q

the process of asking another account to join your organization is called what?

A

Invitation

34
Q

what kind of account can issue an invitation?

A

Management Account

35
Q

what kind of policy specifies the services and actions that users and roles can use within accounts?

A

Service Control Policies (SCP)

36
Q

do Permissions overstep Service Control Policies (SCPs)?

A

no

37
Q

how does an Allow List work?

A

an Allow List assumes that all actions are denied except actions specified on the Allow List

38
Q

how does a Deny List work?

A

a Deny List assumes that all actions are allowed except actions specified on the Deny List

39
Q

what policy do you opt-out from in order to not share customer content with AWS

A

Artificial Intelligence (AI) services opt-out

40
Q

what policy do you use to configure and deploy backup plans for your resources?

A

Backup Policy

41
Q

what type of policy helps you standardize tags across resources across all of the accounts in your organization?

A

Tag Policy

42
Q

name 4 benefits from using the Consolidated Billing Feature

A
  1. one bill for multiple accounts
  2. easy tracking: track the charges across multiple accounts and download the combined cost and usage data
  3. combined usage: combine the usage of all accounts in order to receive volume pricing discounts
  4. no extra fee: Consolidated Billing is free to use
43
Q

what has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time?

A

AWS Cost Explorer

44
Q

name 4 ways to manage your costs with AWS Budgets.

A
  1. set an alert to notify you when you meet a fixed spending target, or if you are forecasted to meet a spending target. this can be set to help you stay within a free tier of AWS services
  2. set a monthly budget with a variable spending target
  3. set a monthly cost budget across your entire account
  4. set a daily utilization or coverage budget to track your Reserved Instances or Savings Plans
45
Q

how many times a day is AWS Budgets updated?

A

up to 3 times a day

46
Q

name 6 types of AWS Budgets

A
  1. Cost budgets
  2. Usage budgets
  3. RI utilization budgets
  4. RU coverage budgets
  5. Savings Plans utilization budgets
  6. Savings Plans coverage budgets
47
Q

which budget plans how much you want to spend on a service?

A

Cost budget

48
Q

which budget plans how much you want to use on one or more services?

A

Usage budget

49
Q

which budget lets you define a usage threshold and receive alerts when the usage falls below that threshold?

A

RI utilization budgets or

Savings Plans utilization budgets

50
Q

which budget lets you receive alerts when the number of instance hours falls below a certain threshold?

A

RI coverage budgets or

Savings Plans coverage budgets

51
Q

can you disable data collection after you enable billing alerts?

A

no, but you can delete any billing alarms that you created

52
Q

what is the name of a fully managed messaging service for both application-to-application (A2A) and application-to-person (A2P) communication?

A

Amazon Simple Notification Service (SNS)

53
Q

what are 4 benefits of using Amazon SNS?

A
  1. send messages to millions of users
  2. messages are sent and re-sent for multiple, geographically separated servers and data centers
  3. SNS uses Amazon Cloud, so messages scale with you
  4. messages will always be sent in the correct order
54
Q

how much does SNS cost?

A
  1. $0.50 per 1 million SNS requests
  2. $0.06 per 100,000 notification deliveries over HTTP
  3. $2.00 per 100,000 notification deliveries over email
55
Q

what is the billing cycle for SNS?

A

the first day to the last day of the month

56
Q

do SNS prices include taxes?

A

no

57
Q

in what order are SNS messages delivered?

A

in the order they were published, unless there is a network issue

58
Q

can SNS messages be deleted?

A

no

59
Q

what can you use to explore AWS services and create an estimate for the cost of your use cases on AWS?

A

AWS Pricing Calculator

60
Q

what are 5 common oversights that customers make that can drive up their Cloud spending?

A
  1. orphaned resources. These forgotten instances just keep running in the background and consume resources
  2. misconfigured storage resources. Holding on to data that is useless, or putting data in the wrong type of storage (putting a low-use data into SSD instead of Glacier)
  3. over-provisioned resources. Resourced do not need over-provisioning since AWS can scale with your growth
  4. incorrect pricing plans. are you using a pricing plan that best aligns with your usage?
  5. overlooking newer technologies. New technologies are made to improve efficiency and productivity. It is good practice to seek new, efficient tools to reduce Total Cost of Ownership (TCO)

AWS Cloud Architect, 8/16/21 (18 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions