AWS Sections 1 through 6 Flashcards
Review concepts from sections 1 through 6 of Stephane Maarek's AWS Certified Developer Associated DVA C01 course (Section 1: Course Intro, Section 2: Code & Slides Download, Section 3: Getting started with AWS, Section 4: IAM & AWS CLI, Section 5: EC2 Fundamentals, and Section 6: EC2 Instance Storage). Most of these sentences are (or are basically) Stephane's exact words.
What is a proper definition of an IAM Role?
An IAM entity that defines a set of permissions for making requests to AWS services, and will be used by an AWS service
Some AWS services need to perform actions on your behalf. To do so, you assign permissions to AWS services with IAM Roles.
Which of the following is an IAM Security Tool?
- IAM Credentials Report
- IAM Root Account Manager
- IAM Services Report
- IAM Security Advisor
IAM Credentials Report
IAM Credentials report lists all your AWS Account’s IAM Users and the status of their various credentials.
Which answer is INCORRECT regarding IAM Users?
IAM Users access AWS services using root account credentials
IAM Users access AWS services using their own credentials (username & password or Access Keys).
Which of the following is an IAM best practice?
Don’t use the user account
Use the root account only to create your first IAM User and a few account/service management tasks. For everyday tasks, use an IAM User.
What are IAM Policies?
JSON documents that define a set of permissions fo rmaking requests to AWS services, and can be used by IAM Users, User Groups, and IAM Roles
no footnote
Which principle should you apply regarding IAM Permissions?
Grant Least Privilege
That’s right! Don’t give more permissions than the user needs.
What should you do to increase your root account security?
Enable Multi Factor Authentication
When you enable MFA, this adds another layer of security. Even if your password is stolen, lost, or hacked your account is not compromised.
IAM User Groups can contain IAM Users and other User Groups.
True or False
False
IAM User Groups can contain only IAM Users.
An IAM policy consists of one or more statements. A statement in an IAM Policy consists of the following, EXCEPT:
Version
A statement in an IAM Policy consists of Sid, Effect, Principal, Action, Resource, and Condition. Version is part of the IAM Policy itself, not the statement.
According to the AWS Shared Responsibility Model, which of the following is AWS responsibility?
AWS Infrastructure
no footnote
Which instance/initial letter pair naming convention:
in the course, we use the t2.micro
General Purpose. No set initial letter! (T, M, and A currently seen)
Describe ec2 instance naming convention
m5.2xlarge
EC2 Instance Types
not entirely sure the exam asks questions like this one
Which EC2 Instance type has the following characteristics?
Options: General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, Instance Features, Measuring Instance Performance
General Purpose
Which EC2 Instance type has the following characteristics?
Options: General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, Instance Features, Measuring Instance Performance
Compute Optimized
Which EC2 Instance type has the following characteristics?
r6g
Options: General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, Instance Features, Measuring Instance Performance
Memory Optimized
Which EC2 Instance type has the following characteristics?
Options: General Purpose, Compute Optimized, Memory Optimized, Accelerated Computing, Storage Optimized, Instance Features, Measuring Instance Performance
Storage Optimized
What are the associated port numnbers?
22, 21, 22, 80, 443, 3389
What are the associated usages of the following port numbers?
22, 21, 22, 80, 443, 3389
What are we looking at here?
Also, read what’s in the picture!
EC2 Instances Purchasing Options
What type of EC2 Instance Purchase option is this?
discount numbers illustrative and changing
Options:
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
EC2 On Demand
What type of ec2 instance purchase option is this?
discount numbers illustrative and changing
Options:
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
EC2 Reserved Instance
What type of ec2 instance purchase option is this?
discount numbers illustrative and changing
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
ec2 Savings Plan
what type of ec2 instance purchase option is this?
discount numbers illustrative and changing
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
ec2 Spot Instance
What type of ec2 instance purchase option is this?
discount numbers illustrative and changing
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
ec2 Dedicated Hosts
What type of ec2 instance purchase option is this?
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
EC2 Dedicated Instance
What type of ec2 instance purchase option is this?
On Demand Instances; Reserved (Reserved Instances; Convertible Reserved Instances); Savings Plans; Spot Instances; Dedicated Hosts; Dedicated Instances; Capacity Reserverations
EC2 Capacity Reservations
Which EC2 Purchasing option matches up with which resort analogy?
* coming in and staying in resort whenever we like, we pay the full price
* like planning ahead and if we plan to stay for a long time, we may get a good discount
* pay a certain amount per hour for certain period and stay in any room type (e.g., King, Suite, Sea View…)
* the hotel allows people to bid for the empty rooms and the highest bidder keeps the rooms. you can get kicked out at any time if someone else comes up with a higher bid
* we book an entire building of the resort
* you book a room for a period with full price even if you don’t stay in it
Options: savings plans; on demand; capacity reservations; reserved; spot instances; savings plans; dedicated hosts
on demand; reserved; savings plans; spot instances; dedicated hosts; capacity reservations
Which EC2 Purchasing Option can provide you the biggest discount, but it is not suitable for critical jobs or databases?
* Convertible Reserved Instances
* dedicated Hosts
* Spot Instances
Spot Instances!
Spot Instances are good for short workloads and this is the cheapest EC2 Purchasing Option. But, they are less reliable because you can lose your EC2 instance.
What should you use to control traffic in and out of EC2 instances?
* Network Access Control List (NACL)
* Security Groups
* IAM Policies
Security Groups!
Security Groups operate at the EC2 instance level and can control traffic.
How long can you reserve an EC2 Reserved Instance?
* 1 or 3 years
* 2 or 4 years
* 6 months or 1 year
* Anytime between 1 and 3 years
1 or 3 years!
EC2 Reserved Instances can be reserved for 1 or 3 years only.
You would like to deploy a High-Performance Computing (HPC) application on EC2 instances. Which EC2 instance type should you choose?
* Storage Optimized
* Memory Optimized
* Compute Optimized
* General Purpose
Compute Optimized!
Compute Optimized EC2 instances are great for compute-intensive workloads requiring high-performance processors (e.g., batch processing, media transcoding, high-performance computing, scientific modeling & machine learning, and dedicated gaming servers).
Which EC2 Purchasing Option should you use for an application you plan to run on a server continuously for 1 year?
* On-Demand Instances
* Spot Instances
* Reserved Instances
Reserved Instances!
Reserved Instances are good for long workloads. You can reserve EC2 instances for 1 or 3 years.
You are preparing to launch an application that will be hosted on a set of EC2 instances. This application needs some software installation and some OS packages need to be updated during the first launch. What is the best way to achieve this when you launch the EC2 instances?
* Connect to each EC2 instance using SSH, then install the required software and update your OS packages manually
* Write a bash script that installs the required software and updates to your OS, then use this script in EC2 User Data when you launch your EC2 instances
* Write a bash script that installs the required software and updates to your OS, then contact AWS SUuport and proved them with the script. They will run it on your EC2 instances at launch
Write a bash script that installs the required software and updates to your OS, then use this script in EC2 User Data when you launch your EC2 instances
EC2 User Data is used to bootstrap your EC2 instances using a bash script. This script can contain commands such as installing software/packages, download files from the Internet, or anything you want.
Which EC2 Instance Type should you choose for a critical application that uses an in-memory database?
* Compute Optimized
* Storage Optimized
* Memory Optimized
* General Purpose
EC2 Fundamentals Quiz
Memory Optimized!
Memory Optimized EC2 instances are great for workloads requiring large data sets in memory.
You have an e-commerce application with an OLTP database hosted on-premises. This application has popularity which results in its database has thousands of requests per second. You want to migrate the database to an EC2 instance. Which EC2 Instance Type should you choose to handle this high-frequency OLTP database?
* Compute Optimized
* Storage Optimized
* Memory Optimized
* General Purpose
EC2 Fundamentals Quiz
Storage Optimized
Storage Optimized EC2 instances are great for workloads requiring high, sequential read/write access to large data sets on local storage.
Security Groups can be attached to only one EC2 instance.
* True
* False
EC2 Fundamentals Quiz
False
Security Groups can be attached to multiple EC2 instances within the same AWS Region/VPC.
You’re planning to migrate on-premises applications to AWS. Your company has strict compliance requirements that require your applications to run on dedicated servers. You also need to use your own server-bound software license to reduce costs. Which EC2 Purchasing Option is suitable for you?
* Convertible Reserved Instances
* Dedicated Hosts
* Spot Instances
EC2 Fundamentals Quiz
Dedicated Hosts!
Dedicated Hosts are good for companies with strong compliance needs or for software that have complicated licensing models. This is the most expensive EC2 Purchasing Option available.