aws_cloud_prac_prep20201114 Flashcards

Question

by default, what is the maximum number of linked accounts per paying account under consolidated billing

Answer 1

You need to apply a policy to that group. Policies consist of json. These are referred to as key value pairs. You have your key, such as name and then the value eg: {"name" : "AWSomeChicks"}

Answer 2

On-Demand and Reserve

Answer 3

CloudFront

Answer 4

Capital Expenditure which is what you pay upfront and is a fixed sunk cost Operational Expenditure

Answer 5

- -an interactive query service - -allows you to query Data in S3 using standard SQL - -serverless - -commonly used to analyze log Data stored in S3

Answer 6

CloudWatch

Answer 7

for Business intelligence or data warehousing

Answer 8

1. Trade capital expense for variable expense 2. Benefit from massive economics of scale 3. Stop guessing about capacity 4. Increase speed and agility 5. Stop spending money running and maintaining data centers 6. Go global in minutes

Answer 9

``` Snowball Snowball Edge Storage Gateway CodeDeploy Opsworks IoT Greengrass ```

Answer 10

Availability is 99.99% | Durability is 99,.999999999 (eleven 9s)

Answer 11

Tape Gateway - Backup and restore (virtual tape) File Gateway - For hybrid cloud workloads Volume Gateway - Disaster Recovery on AWS

Answer 12

All buckets and objects are set to be private

Answer 13

CloudTrail

Answer 14

No. You can use S3 to host STATIC websites (such as .html). Websites that require database connections such as Wordpress etc. cannot be hosted on S3

Answer 15

CloudFormation

Answer 16

It is a way of deploying environments quickly, using CloudFormation templates built by AWS Solution Architects who are experts in that particular technology

Answer 17

RDS - Aurora Redshift (data warehouse, business intelligence)

Answer 18

- -S3 is object-based--i.e. allows you to upload files. - -Files can be from 0 Bytes to 5 TB - -Unlimited storage - -Files are stored in Buckets - -Universal namespace (can't have repeat bucket names)

Answer 19

- Basic (Free) - Developer ($29 per month) - Business ($200 per month) - Enterprise ($15 000 per month and TAM)

Answer 20

AWS Direct Connect

Answer 21

Cloud Computing is the on-demand delivery of compute, database, storage, application, and other IT resources.

Answer 22

AWS - Physical and Environmental Controls | Customer - Service and Comms Protection/Zone Security

Answer 23

Roles are more secure than using access key id's and secret access keys and are easier to manage.

Answer 24

- -allows you to get volume discounts - -unused reserved instances of Savings Plans for EC2 are applied across the group - -CloudTrail is on a per account and per region basis, but can be aggregated into a single bucket belonging to the paying account

Answer 25

Trusted Advisor

Answer 26

using bucket policies

Answer 27

CloudWatch

Answer 28

a service that helps you model and set up your AWS resources so that you can spend less time managing those resources. You create a template that describes all the AWS resources that you want and AWS CloudFormation takes care of provisioning and configuring those resources.

Answer 29

CloudFront Route 53 Virtual Private Cloud (VPC)

Answer 30

1. AWS Simple Monthly Calculator 2. AWS Cost Explorer 3. Total Cost of Ownership Calculator (TCO)

Answer 31

it is free but the resources if provisions is not

Answer 32

- -always enable multifactor authentication on root account - -always use a strong and complex password on root account - -paying account should be used for billing purposes only. Do not deploy resource into the paying account

Answer 33

Multi-AZ for disaster recovery Read Replicas for performance

Answer 34

AWS Inspector is used for inspecting EC2 instances for vulnerabilities AWS Trusted Advisor inspects your AWS accounts as a whole, not just EC2. It does more that just security inspections; e.g. cost optimization, performance, and fault tolerance

Answer 35

1. Software as a service (SaaS) - Completed product ran and managed by a service provider (Gmail) 2. Infrastructure as a Service (IaaS) - Building blocks for cloud IT (Physical server) 3. Platform as a Service (PaaS) - Deploy and manage apps without worrying about hardware infrastructure (Godaddy, Shopify)

Answer 36

- Cloud Migration- Disaster Recover- Data Centre Decom- Content Distribution

Answer 37

Application Load Balancers --Layer7 (make Intelligence Decisions) Network Load Balancers --Extreme Performance/Static IP addresses Classics Load Balancers --Test and Dev, Keep Cost Low

Answer 38

- -Trade capital expense for variable expense - -benefit from massive economies of scale - -stop guessing about capacity - -increase speed and agility - -stop spending money running and maintaining Data centers - -go global in minutes

Answer 39

- Basic (Free) - Developer ($29 per month) - Business ($100 per month) - Enterprise ($15 000 per month and TAM)

Answer 40

- via the Console - programmatically using the Command Line - using the Software Developers Kit (SDK)

Answer 41

- Detective Controls - Identity and Access Management - Infrastructure Protection - Data Protection - Incident Response

Answer 42

``` IAM Route53 CloudFront SNS SES (simple Email Service) ```

Answer 43

Monitor configuration of you AWS resources It provides a detailed view of the configuration of AWS resources in your AWS account Including how the resources are related to each other and how they were configured in the past. You can see how configurations and relationships change over time

Answer 44

a web application designed to stop hackers it is a web application firewall that helps protect your web applications from common web exploits that you affect application availability, compromise security, or consume excessive resources

Answer 45

Interactive query service for data in S# - -uses standard SQL - -serverless, nothing to provision, pay per quest/per TB scanned - -no need to set up complex ETL processes - -works directly with data stored in S3

Answer 46

``` Amazon VPC Elastic Beanstalk CloudFormation Identity Access Management (IAM) Auto Scaling Opsworks Consolidated Billing ```

Answer 47

A web application firewire designed to DDoS It is a managed Distributed Denial of Service DDoS protection service for web Applications It provide always-on detection and automatic inline mitigations and minimize application downtime and latency--there is not need to engage AWS support to benefit from DDoS protection. two levels --standard and advanced

Answer 48

- -can be used to manage fleets of EC2 instances and VM - -a piece of Software is installed on each VM - -can be both inside AWS and on premise - -run Command is used to install, patch, uninstall Software - -integrates with CloudWatch to give you a dashboard of all you estate

Answer 49

``` EBS - Elastic Block Storage Elastic File System S3 - Simple Storage Solution Snowball (Data migration) Storage Gateway (Connects on-prem to cloud) ```

Answer 50

Elastic Load Balance (ELB)

Answer 51

Elastic Beanstalk is limited in what it can provision and is not programable CloudFormation can provision almost any AWS service and is completely programable Both are free but the resources they provision are not

Answer 52

AWS manages security of the cloud, security in the cloud is the responsivity of the customer. Customers retain control of the security they choose to implement to protect their own content, platform, applications, systems and networks, no differently that they would in an on-site datacenter

Answer 53

Amazon EBS allows you to create storage volumes and attach them to Amazon EC2 instances. Once attached, you can create a file system on top of these volumes, run a database, or use them in any other way you would use a block device. Amazon EBS volumes are place in a specific availability zone, where they are automatically replicated to protect you from the failure of a single component.

Answer 54

you are likely responsible - -if you can do the action yourself in AWS console or in EC2. examples are - -Security groups - -Patching EC2 operating systems - -patching datasets running on the EC2 --encryption is a shared responsibility - -AWS is likely responsible for - -management of data center, security camera, cabling - -patching RDS operation systems

Answer 55

AWS Shield

Answer 56

AWS is responsible for security OF the cloud Software- Compute, Storage, Database, NetworkingHardware and Global Infrastructure- Regions, Availability Zones, Edge Locations

Answer 57

monitory cost of account - -when monitory is enabled on the paying account, the billing data for linked accounts is included - -you can still create billing alerts per individual account

Answer 58

Correct: Additional Storage Clock hours of server time number of requests Incorrect: data transfer in standby time

Answer 59

--an online resource to help you reduce cost, increase performance, and improve security by optimizing you AWS environment --it is real-time guidance to help you provision resources following AWS best practices. --it will advise you on cost Optimization, performance, security, Fault Tolerance

Answer 60

It increases visibility into your user and resource activity by recording AWS Management Console actions and API calls. It allows you to identify which users and accounts called AWS, the source IP from which the calls were made, and when the calls happened

Answer 61

CDN is a system of distributed servers that deliver webpages and other web content to a user based on the geographic locations of the user, the origin of the webpage, and a content delivery server.

Answer 62

Amazon Snowball A physical device is mailed to you, once you've transferred the data you ship it back and the data will be transferred into S3

Answer 63

Edge location--This is the location where content will be cached. Origin--This is the origin of all the files that the CDN will distribute. This can be an S3 bucket, and EC2 instance, an Elastic Load Balancer, or Route53 Distribution--This is the name given the CDN which consists of a collection of Edge Locations Web Distribution --Typically used for websites RTMP-Used for media streaming

Answer 64

a group is a place to store you users. Your users will inherit all permissions that the group has. Examples of groups might be developers, system admin, human resources, finance, etc.

Answer 65

they are virtual firewalls in the cloud. You need to open ports in order to use the. Popular ports are SSH(22), HTTP(80), HTTPS(443), RDP (3389)

Answer 66

CloudTrail

Answer 67

S3 - Simple Storage Solution

Answer 68

It can compare costs of running your infrastructure on premise vs in the AWS Cloud It will generate reports that you can give to your C-level execs to make a business case to move to the cloud.

Answer 69

Trusted Advisor

Answer 70

Lots of data but no links between the data DynamoDB (No SQL)

Answer 71

- Read After Write Consistency for PUTS of new Objects | - Eventual Consistency for overwrite PUTS and deletes (can take some time to propagate)

Answer 72

AWS is responsible for security OF the cloud. The customer is responsible for security IN the cloud.

Answer 73

``` C - Cost Optimization R - Reliability O - Operational Excellence P - Performance S - Security ```

Answer 74

It is a solution that helps customers more quickly set up secure, multi-account AWS environments based on AWS best practices

Answer 75

- -you can apply automation to resources tagged with specific tags - -in combination with AWS systems manager, y you can control and execute automation against entire fleets of EC2 instances, all at the push of a button

Answer 76

you can replicate the contents of one bucket to another bucket automatically by using cross region replication

Answer 77

1. Cloud - Fully deployed on the Cloud 2. Hybrid - Mix of cloud and on-prem 3. On-Premises - Own data center

Answer 78

- Certificates and Attestations - Laws, Regulations, Privacy - Alignments and Frameworks

Answer 79

to speed up performance of existing databases (frequent identical queries)

Answer 80

a collection of resources that share one or more tags (or portions of tags)

Answer 81

It is used to calculated your running costs on AWS on a per month basis. It is not a comparison tool.

Answer 82

- Snowball (50 TB / 80 TB) - Snowball Edge (100 TB) - Snowmobile (100 PB) - truck

Answer 83

Correct A simple bill is issued containing the changes for all AWS accounts Multiple standalone accounts are combined and may reduce you overall bill account charges can be tracked individually Incorrect Charging is based per VPC

Answer 84

- -Infrastructure as a service: IAAS or IAAS - -Platform as a service: PaaS of PaaS - -Software as a service: SaaS or SaaS

Answer 85

For redundancy, you can have contents replicated automatically

Answer 86

it is free but the resources if provisions is not

Answer 87

IAM - Identity and Access Management

Answer 88

- -budgets is used to budget or predict cost before that happen - -cost explorer is used to explore of understand cost After they have happened

Answer 89

AWS DNS service Global You can use it to direct traffic, sell around the world, and to register domain names

Answer 90

AWS IoT Greengrass is an Internet of Things (IoT) open source edge runtime and cloud service that helps you build, deploy, and manage device software. Customers use AWS IoT Greengrass for their IoT applications on millions of devices in homes, factories, vehicles, and businesses.

aws_cloud_prac_prep20201114 Flashcards

(125 cards)