Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS > AWSS > Flashcards

AWSS Flashcards

1
Q

Dividing resources among regions allows you to do the following.

A
  1. Locate your infrastructure geographically closer to your users to allow access with lower possible latency.
  2. Meet regulatory compliance with legal and banking rules.
  3. Isolate groups of resources from each other and from larger networks to allow the greatest possible security.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Some AWS resources are not visibly tied to any one region. Here are examples of Global Services.

A
  1. AWS Identity & Access Management (IAM)
  2. Amazon CloudFront
  3. S3
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The service for managing the way access to your account resources is achieved by way of users and groups, roles and policies.

A

AWS Identity and Access Management (IAM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

The content delivery network you can use to lower access latency for your application users by storing cached versions of frequently requested data at AWS edge locations.

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

The block of IP addresses assigned for use within a single availability Zone.

A

Subnet. Private networks - typically use IPv4 protocol. Have have up to 200 subnets per AZ.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

One or more independently powered data centers running a wide range of hardware host types.

A

Availability Zone (AZ)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A resource running without a back up.

A

Single Point of Failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Provisioning two or more instances of whatever your workload requires rather than just one. The only effective protection against failures.

A

Redundancy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is used to prevent application failure.

A

Autoscaling and Load Balancing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

A site where AWS deploys physical server infrastructure to provide low latency user access to Amazon-based data. Front line resource for directing the kind of network traffic that can most benefit from speed.

A

Edge Location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Best Known tenant of edge locations.

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Amazon’s Domain Name System (DNS) administration tool for managing domain name registration and traffic routing

A

Amazon Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A manage service for countering the threat of distributed denial of service (DDoS) attacks against your AWS-based infrastructure.

A

AWS Shield

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A managed service for protecting web applications from web-based threats.

A

AWS Web Application Firewall (WAF)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A tool designed to use the serverless power that customize CloudFront behavior,

A

Lambda@Edge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Handle less popular content. Currently 9 worldwide

A

Regional Edge Cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

AWS Shared Responsibility Model

A

AWS Responsible for: The security of the cloud & patching underlying virtualization software running in AWS data centers.

You: Security of what’s in the cloud and patching OSs running on EC2 instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Hides all or some of the underlying configurations and administration work to keep things running. Your responsible for patching , updates and all the regular care. Ex: Elastic Bean–hides all the complexity of it’s runtime environment, leaving you to do beyond uploading your application code.

A

Managed Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Your expected to care for the operating system and everything that’s running on it. If you can edit it, you own it. EX: Ec2,

A

Unmanaged Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Any service outages that could affect the performance of anyone’s workload will appear here. First place you check when troubleshooting a failing application.

A

Service Health Dashboard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Makes it abundantly clear that it does not permit the use of it’s infrastructure in any illegal, harmful, or offensive way.

A

AWS Acceptable Use Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

True or False: AWS Regions connect atleast 2 availability zones located within a single geographic area into a low latency network.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

A group of 1 or more independent (and fault-protected) data centers located within a single geographic region.

A

Availability Zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are global resources whose use isn’t restricted to any one region.

A

IAM, CloudFront, S3, Route 53

25
Q

Can be used to make your infrastructure more resilient and reliable by launching parallel redundant instances in multiple Availability Zones.

A

Principal of Availability

26
Q

Globally distributed data servers that can store cached copies of AWS based data from which –CloudFront service —they can be efficiently served to end users.

A

AWS Edge Locations

27
Q

You can automate the process of increasing or decreasing the scale of a deployment based on need. Availability. To ensure that a predefined service level is maintained regardless of external demand or instance failure.

A

Auto Scaling

28
Q

You can automatically redirect incoming requests away from a nonfunctioning instance and to a backup replacement. Driving force

A

Load Balancing

29
Q
  • Data centers running uniform host types
  • Data centers within a broad geographic area
  • Not restricted to a single data center
A
  • Edge Location
  • AWS Region
  • Availability Zones
30
Q

What is the primary benefit of using CloudFront distribution.

A

Reduced latency access to your content no matter where your end users live.

31
Q

What are the two most significant architectural benefits of the way AWS designed its regions.

A
  • It can make applications available to end users with lower latency.
  • It can make applications more compliant with local regulations.
32
Q

What is the most effective approach for improving the resilience of your EC2 web server.

A

Launch parallel load-balanced instances in multiple availability zones within a single AWS region.

33
Q

The block of IP addresses assigned for use within a single Availability zone.

A

Subnet

34
Q

What is the primary goal of autoscaling.

A

To ensure that a pre-defined service level is maintained regardless of external demand or instance failures.

35
Q

What AWS services benefit from Amazon Edge Locations.

A

EC2 Load Balancers

CloudFront.

36
Q

What are the primary benefit of using CloudFront distribution.

A

Reduced latency access to your content no matter where your end users live.

37
Q

Controls which people and processes get past the wall guarding your resources (authentication) and what they are allowed to do (authoritization)

A

Identity and Access Management (IAM) service

38
Q

The user identity that was generated when you first created your AWS account. They have the permission to perform any task on your account. To protect, created a complex password and multifactor authentication.

A

root user

39
Q

Adds a second layer of security to your logins. A temporary digital token

A

Multi-Factor authentication (MFA)

40
Q

Tool to use to safely encrypt remote login sessions

A

Secure Shell (SSH) Key Pairs

41
Q

Create users to whom you can assign only the permissions needed for a specific set of tasks.

A

Principle of least privilege

42
Q

Use this to administrate the permissions associated with multiple users in batches.

A

User Groups

43
Q

Defines the limits for what can be done within your AWS account. For the most part, used by applications and services rather then people.

A

IAM roles

44
Q

SS0

A

AWS Single Sign On Service

45
Q

Credential Reports provide information on what.

A
  • State of your account security
  • listing of all current IAM users
  • When they last logged in
  • whether MFA enabled
  • whether they have access keys
46
Q

The data file used to control an object’s cryptographic transformation. Are mostly managed on AWS by the AWS Key Management Service (KMS)

A

Encryption Keys

47
Q

How do you encrypt S3 buckets.

A

Can encrypt before or after creation of S3 buckets. You select S3 managed service-side encryption keys (SSE-S3) or KMS managed services (SSE-KMS)

48
Q

Prevents wrong people from being able to read your objects living in your S3 buckets.

A

Server side Encryption

49
Q

Prevents the wrong people from intercepting those objects while in transit from your local infrastructure.

A

Client side Encryption
-Before uploading data into S3, you need to encrypt your data using KMS managed customer master key or a client side master key.

50
Q

a set of links to documents describing various regulatory standards and how AWS meets them.

A

AWS Architect

51
Q

Programmatic and command-line access to resources is authenticated using security credentials consisting of what.

A

Access Key ID

Secret Access Key

52
Q

Primarily focused on helping you control access to your AWS resources

A

Identity and Access Management (IAM)

53
Q

This handles access keys.

A

KMS (Key Management Service)

54
Q

This managed SSH Key Pairs

A

EC2

55
Q

What text format does the credential report use.

A

CSV

56
Q

What AWS resources can be encrypted using KMS.

A

-RDS database, S3 Buckets and DynamoDB database.

57
Q

What does KMS use to encrypt objects stored on your AWS account.

A

Customer Master Key

58
Q

What is the purpose of the Service Organization Controls (SOC) reports found on AWS Artifact

A

They attest to the AWS infrastructure compliance with data accountability standards like Sarbanes-Oxley.

59
Q

What roles can the documents provided by AWS Artifact play in your application planning.

A
  • They can help you confirm that your deployment infrastructure is compliant with regulatory standards.
  • They can provide insight into various regulatory and industry standards that represent best practices.

AWS (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions