Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

My AWS Cloud Practitioner > AWS Security - Pluralisight > Flashcards

AWS Security - Pluralisight Flashcards

Part 3 to pass the AWS Cloud Pracitioner Exam

1
Q

Name 3 core concepts of Security

A
  1. Acceptable Use
  2. Shared Responsibility Model
  3. Identity Management
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Shared Responsibility Model

A

AWS is responsible for the security of the cloud

Customer is responsible for security in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AWS Responsibility Details

A

x access control
x training for their employees
x global datacenters and the underlying network
x Global AWS Infrastructure
x those different availability zones and those regions and making sure that all of the connectivity exists between those
x hardware for global infrastructure
x replacing servers and switches and all the other bits of networking gear that they have
x configuration management for the infrastructure
x determining how bits of data get from one location to another
x patching of the cloud infrastructure and services
the core servers, the bare metal servers that are actually running some of your virtual servers or the servers that are running many of the services you use on AWS
x patching those bits of cloud infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

.

A

.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Customer Responsibility

A
  1. Individual access to cloud resources and training
  2. Data security and encryption (in transit and at rest)
  3. Operating system, network, and firewall configuration
  4. All the code deployed onto the cloud infrastructure
  5. Guest OS and custom applications
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

AWS Well Architected Framework - what is it and what are the 5 pillars?

A

Collection of Best Practices across 5 pillars

  1. Operational Excellence
  2. Security
  3. Reliability
  4. Performance Efficiency
  5. Cost Optimizations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Where to learn more about the WAF?

A

microsite - aws.amazon.com/architecture/well-architected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Reliabilty features - what are the two sides of this? Best attitude?

A
  1. High availabilty
  2. Fault tolerance
    Attitude - Assume everything fails all the time
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Explain Fault Tolerance

A

Able to support the failure of components within your architecture

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Explain High Avaiability

A

Keeping your entire system up and running in the expected manner despite issues that may occur

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Building systems - S3 and EC2

A
  1. S3 - High availability out of the box - diff availability zones
  2. EC2 - fault tolerance must be architected
  3. Use multiple availability zones
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Fault Tolerance - 2 examples

A

Simple Queue Service

Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Compliance Standards

A 
PCI DSS - credit card processing
HIPPA - healthcare
SOC1, SOC2, SOC3 - data center compliance
FEDRAMP - us govt re datacenters
ISO27018 - standard for handling PII
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Compliance Services

A

AWS Config - conformance packs for standards
AWS Artifact - Self service access to reports
Amazon GuardDuty - intelligent threat detection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Explain Least Privilege Access

A

grant the minimum permissions to complete their task

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is AWS IAM

A

AWS IAM - identity and access management -service that controls access to AWS resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Details about IAM - name 3 capabilities

A

Authentication
Authorization
Identity federation through SAML - using external identity management

18
Q

Main AWS Identities - name the 3 main types

A

User
Group - cluster users into a group
Role - user or AWS service to assume permissions for a task

19
Q

What is a policy in AWS IAM? Who manages it?

A
  1. A json document that defines permissions for an AWS IAM identity/principal
    - what services the identity can access and the tasks it can do
  2. Customer managed or managed by AWS
20
Q

AWS IAM Best Practices - examples

A

Multifactor Authentication

Least Privilege Access

21
Q

What is Amazon Cognito? What are four capabilities?

A

User directory service for your custom applications

  1. Out of the box UI controls for various devices
  2. Security capabilities to control access
  3. Controlled access to AWS resources
  4. Works with social and enterprise identity providers
22
Q

On premise data integration - 2 solutions

A
  1. AWS Storage Gateway - hybrid of your & AWS

2. AWS DataSync - Transfer data (not Snowball)

23
Q

AWS Storage Gateway - 3 gateways

A
  1. Tape gateway
  2. Volume gateway
  3. File gateway
24
Q

AWS Storage Gateway - 2 aspects

A
  1. VM or specific hardware device

2. Integrates with EBS and S3

25
Q

AWS DataSync - 3 aspects

A
  1. Integrates with S3, EFS, and FSx
  2. High speed transfers
  3. Charged per gb of transfer
26
Q

What is AWS Glue?

A

ETL processing for these transfers. Supports RDS, DynamoDB, Redshift, and S3. Supports serverless approach.

27
Q

What is Amazon EMR?

A

Elastic Map Reduce - Big data processing on S3 and EC2.

28
Q

What is AWS Data Pipeline?

A

Data workflow orchestration across AWS Services

29
Q

Name 6 Services supported by Amazon EMR.

A 
Apache Spark
Apache Flink
Apache Hive
Apache Hudi
Apache HBase
Presto.
30
Q

What is Amazon Athena

A

Tool for searching S3

31
Q

Name 3 Data analysis tools

A
  1. Athena - Searches on S3 content
32
Q

Name 3 Data analysis tools

A
  1. Athena - Searches on S3 content
  2. Quicksight - BI - create Dashboards
  3. CloudSearch - Search for custom applications
33
Q

Name 3 AI Learning Services

A
  1. Rekognition - Vision service from machine learning
  2. Translate - Text translation from machine learning
  3. Transcribe - Speach to text from machine learning
34
Q

Named 4 Infrastructure Scenarios

A
  1. Backup and Restore
  2. Pilot light
  3. Warm Standby
  4. Multi Site
    Top to Bottom Cost and Complexity increasing
    Top to Bottom Recovery Time decreasing
35
Q

Two factors for Disaster Recovery

A
  1. Recovery Point Objective

2. Recovery Time Objective

36
Q

EC2 Scaling - 2 approaches

A
  1. Vertical scaling - Bigger server instances

2. Horizontal scaling - More server instances

37
Q

Name 3 specific Security Services available

A
  1. AWS Shield - protection against DDOS attacks
  2. AWS Macie - machine learning to protect PII and intellectual property on S3 - has dashboards and alerts.
    3.
38
Q

Name 3 specific Security Services available

A
  1. AWS Shield - protection against DDOS attacks
  2. AWS Macie - machine learning to protect PII and intellectual property on S3 - has dashboards and alerts.
  3. Amazon Inspector - scans EC2 - charged per instance per assessment run.
39
Q

Two types of Rules packages for Amazon Inspector

A
  1. Network Reachability Assessment

2. Host Assessment - patches and checks for config errors.

40
Q

Named 2 types of Predefined Service Deployments

A
  1. AWS Service Catalog - in-house

2. AWS Marketplace - 3rd party services

41
Q

Name 3 Developer Tools

A
  1. AWS CodeCommit
  2. AWS CodeBuild
  3. AWS CodeDeploy
  4. AWS CodePipeline
  5. AWS CodeStar

My AWS Cloud Practitioner (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions