Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Training > CCP > Flashcards

CCP Flashcards

1
Q

Abbreviation : IAM

A

Identity and Access Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Define : IAM

A

IAM is a Global Service that allows you to create users and groups to access your AWS environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What can IAM groups consist of

A

IAM groups can only contain users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

IAM Users

A

Mapped to a physical user, has a password for AWS Console access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

IAM Policies

A

JSON documents that outline permissions for users or groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Where can you apply IAM policies

A

Policies can be applied to users, groups, and roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What type of policy is applied directly to a user

A

An inline policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

IAM Roles

A

Allows you to create permissions so services can perform tasks in AWS. Common roles are
EC2 instance, Lambda function, and CloudFormation roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

AWS CloudShell

A

Browser-based shell that gives command-line access to your AWS resources in the selected AWS region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Three MFA options

A
  • Virtual MFA Device
  • Universal 2nd Factor (U2F) Security Key
  • Other hardware MFA device
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Three ways to access AWS

A
  • AWS Management Console
  • AWS Command Line Interface
  • AWS Software Developer Kit
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

IAM Credentials Report

A

A report that lists all your account’s users and the status of their various credentials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

IAM Access Advisor

A

Access Advisor shows the service permissions granted to a user and when those services were last accessed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Abbreviation : EC2

A

Elastic Compute Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Abbreviation : AMI

A

Amazon Machine Image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Port : 22

A

SSH (Secure Shell)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Port : 21

A

FTP (File Transfer Protocol)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Port : 22

A

SFTP (Secure File Transfer Protocol)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Port : 80

A

HTTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Port : 443

A

HTTPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Port : 3389

A

RDP (Remote Desktop Protocol)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

EC2 configuration options

A
  • OS : Linux, Windows, Mac OS
  • CPU/RAM
  • How much storage space
  • Network Card : Speed of the card, Public IP address
  • Firewall rules : Security group
  • Bootstrap script (configure at first launch) : EC2 User Data
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

EC2 User Data

A

-Using a EC2 User Data Script we can bootstrap our machines
-That script is only ran once at the instance first start
-EC2 user data is used to automate boot tasks such as
-Installing updates
-Installing software
-Downloading common files from the internet
-Anything you can think of
The EC2 User Data Script runs with the root user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is an AMI

A

Amazon Machine Image (AMI) : An AMI is a template that contains the software configuration (operating system, application server, and applications) required to launch your instance. You can select an AMI provided by AWS, our user community, or the AWS Marketplace; or you can select one of your own AMIs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

EC2 Instance Types

A
  • General Purpose
  • Compute Optimized
  • Memory Optimized
  • Accelerated Computing
  • Storage Optimized
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

EC2 General Purpose

A

General purpose instances provide a balance of compute, memory and networking resources, and can be used for a variety of diverse workloads. These instances are ideal for applications that use these resources in equal proportions such as web servers and code repositories.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

EC2 Compute Optimized

A

Compute Optimized instances are ideal for compute bound applications that benefit from high performance processors. Instances belonging to this family are well suited for batch processing workloads, media transcoding, high performance web servers, high performance computing (HPC), scientific modeling, dedicated gaming servers and ad server engines, machine learning inference and other compute intensive applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

EC2 Memory Optimized

A

Memory optimized instances are designed to deliver fast performance for workloads that process large data sets in memory.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

EC2 Accelerated Computing

A

Accelerated computing instances use hardware accelerators, or co-processors, to perform functions, such as floating point number calculations, graphics processing, or data pattern matching, more efficiently than is possible in software running on CPUs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

EC2 Storage Optimized

A

Storage optimized instances are designed for workloads that require high, sequential read and write access to very large data sets on local storage. They are optimized to deliver tens of thousands of low-latency, random I/O operations per second (IOPS) to applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is a Security Group

A
  • Security groups act as a ‘firewall’ on EC2 instance
  • The control access ports, authorized IP ranges, and control inbound and outbound networks
  • Only contain allow rules
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

EC2 Instance Connect

A

Substitute for logging into your instance though a terminal. Launches a web-based SSH connection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

EC2 Purchasing Options

A
  • On-Demand Instance : short workload, predictable pricing
  • Reserved : (min 1 year) long workloads
  • Convertible Reserved Instance : Long and flexible workload
  • Spot Instance : short workload, cheap, can lost instance
  • Dedicated Hosts : book entire physical server
  • Dedicated Instance : has hardware dedicated to that instance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

EC2 Instance Role

A

A Role applied to an instance that links to an IAM role allowing the EC2 instance to connect to IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Abbreviation : EBS Volume

A

Elastic Block Store Volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is an EBS Volume

A
  • Network drive you can attach to your instance while they run
  • Can only be mounted to one instance
  • Locked to AZ
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is a EBS Snapshot

A

Backup of an EBS volume at a point in time. Can be copied across AZ or Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is EC2 Image Builder

A

A tool used to create custom AMIs for use in your AWS environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What is EC2 Instance Store

A

EC2 Instance Store is a physical hard drive attached to your EC2 instance for increased performance over an EBS volume. EC2 Instance Store lose their storage if they’re stopped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Abbreviation : EFS

A

Elastic File System

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is EFS

A

A managed network file system that can be mounted on 100s of EC2s. EFS works with Linux instances in multi-AZ only.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is EFS-IA

A

EFS Infrequent Access is used to save on files that are not often accessed. EFS can move files automatically based off a Lifecycle Policy into EFS-IA. Transparent to the applications accessing EFS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is Amazon FSx

A

A fully managed, highly reliable, and scalable native shared file system for Windows File Server, Lustre, and NetApp. Can be integrated into you on-premises.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is elasticity mean in AWS

A

Once a system is scalable, elasticity means that there will be some ‘auto-scaling’ so that the system can scale based on the load. This is ‘cloud-friendly’ : pay-per-use, match demand, optimize costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is scalability in AWS

A

Ability to accommodate a larger load by making the hardware stronger (scale up), or by adding nodes (scale out)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is HA in AWS

A

Run instances for the same application across multi AZ for redundancy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Abbreviation : ELB

A

Elastic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is ELB

A

A managed load balancer that forward internet traffic to multiple servers downstream.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Three types of load balancers offered by AWS

A
  • Application Load Balancer (HTTP/HTTPS only)
  • Network Load Balancer (TCP)
  • Classic Load Balancer (slowly retiring)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Abbreviation : ASG

A

Auto Scaling Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is an ASG

A

An ASG allows us to spin up or down instances to meet demand based on pre-defined thresholds. Also provides health checks on instances and replaces bad instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Abbreviation : S3

A

Simple Storage Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What is Amazon S3

A

S3 allows people to store objects (files) in buckets (directories).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What are some S3 security options

A
  • IAM policy to restrict what type of access an IAM user has
  • Encryption of the S3 bucket
  • Resource based policies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What is an S3 Website

A

S3 can host static websites and have them accessible on the www

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What is S3 Versioning

A

It will allow you to create versions for your files in the S3 bucket. Allowing you to roll back to previous versions and even deletion. This is not a retroactive setting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What is S3 Access Logs

A

A log that tracks all access to an S3 bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What is S3 Replication CRR

A

Cross Region Replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What is S3 Replication SRR

A

Same Region Replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What is S3 Replication

A

A replication of object in an S3 bucket to another bucket, asynchronous. Can be used to replicate information across accounts with the proper permissions. Not retroactive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What are the six S3 Storage Classes

A
  • Standard
  • Standard IA
  • One Zone-IA
  • Intelligent Tiering
  • Glacier
  • Glacier Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

What is an S3 Object Lock

A

It blocks an object version deletion for a specified amount of time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What is Glacier Vault Lock

A

A policy that is locked from editing for data compliance and retention.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What is the AWS Snow Family

A

Offline devices to perform data migrations. If it takes more than a week to transfer over the network, use Snowball devices. Highly-secure, portable devices to collect and process data at the edge, and migrate data into and out of AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

What are some Data Migration Tools

A

Snowcone
Snowball Edge
Snowmobile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

What are some Edge Computing Tools

A

Snowcone

SnowMobile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

What is a AWS SnowBall Edge

A

Physical data transport solution, moves TBs or PVs of data in or out of AWS. Comes in Storage and Compute optimized versions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What is AWS Snowcone

A

Small, portable computing device, very durable. 8TB of storage. Used for edge computing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

What is AWS Snowmobile

A

A truck used to move EBs and PBs of information to and from AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

What is AWS OpsHub

A

OpsHub is an agent that help you manage your Snow Family devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

What is AWS Storage Gateway

A

A bridge between on-premise data and cloud data in S3 and EBS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Abbreviation : RDS

A

Relational Database Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

What is AWS RDS

A
  • Relational Database / OLTP

- Managed DB service for DBs that use SQL language

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

What is Aurora

A
  • Relational Database
  • Cloud optimized
  • PostgreSQL and MySQL both supported
  • Proprietary tech
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

What is ElasticCache

A
  • In-Memory database
  • Helps reduce load off databases for read intensive workloads
  • Managed service
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What is DynamoDB

A

-Key/Value Database
-Low latency
-NoSQL/not a relational database
Serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

What is DynamoDB Accelerator (DAX)

A

-Similar to ElastiCache, but specific to DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What is Redshift

A
  • Warehouse OLAP (online analytical processing (analytics and date warehousing)
  • Data stored in Columns
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

Abbreviation : EMR

A

Elastic MayReduce

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

What is EMR

A

EMR helps creating Hadoop clusters (Big Data) to analyze and process vast amounts of data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

What is Athena

A

Serverless query service to perform analytics against S3 objects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

What is QuickSight

A

Serverless machine learning-powered business intelligence service to create interactive dashboards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

What is DocumentDB

A

‘Aurora for MondoDB’ (JSON - NoSQL database)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

What is Neptune

A

Fully managed graph database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

Abbreviation : QLDB

A

Quantum Ledger Database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

What is QLDB

A

Financial Transaction Ledger (immutable journal, cryptographically verifiable)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

What is Amazon Managed Blockchain

A

Managed Hyperledger Fabric & Ethereum blockchains

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

Abbreviation : DMS

A

Database Migration Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

What is DMS

A

Quickly and securely migrate databases to AWS, resilient, self-healing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

What is AWS Glue

A

Managed ETL (Extract Transform Load) and Stat Catalog service used to prepare and load data for analytics

91
Q

Abbreviation : ECS

A

Elastic Container Service

92
Q

What is ECS

A

Runs Docker containers of EC2 instances

93
Q

What is Fargate

A

Run Docker containers without provisioning the infrastructure. Serverless offering (no EC2 instance)

94
Q

Abbreviation : ECR

A

Elastic Container Registry

95
Q

What is ECR

A

This is where you store your personalized Docker images so they can be run by ECS or Fargate

96
Q

What is Lambda

A

An on-demand Virtual Function service. Run tasks like creating and moving thumbnails from images uploaded into an S3 bucket. Goes across whole AWS suite

97
Q

What is Amazon API Gateway

A

Fully managed service for developers to easily create, publish, maintain, monitor, and secure APIs in the cloud. Serverless.

98
Q

What is AWS Batch

A

Runs batch jobs on AWS across managed EC2 instances. Defined as Docker images

99
Q

What is Amazon Lightsail

A

Service providing VMs, storage, DBs, and networking. Similar to EC2, ELB, Route 53, etc.. Meant for people with little cloud experience. Usually distractor on test.

100
Q

What is Code Commit

A

store code in private git repository (version controlled)

101
Q

What is CodeBuild

A

Build & test code in AWS

102
Q

What is CodeDeploy

A

Deploy code onto servers

Update any application onto servers

103
Q

What is CodePipeline

A

Orchestration of pipeline (from code to build to deploy)

104
Q

What is CodeArtifact

A

Store software packages / dependencies on AWS

105
Q

What is CodeStar

A

Unified view for allowing developers to do CICD and code

106
Q

What is Cloud9

A

Cloud IDE with collab

107
Q

What is AWS CDK

A

Define your cloud infrastructure using a programming language

108
Q

Abbreviation : CDK

A

Cloud Development Kit

109
Q

What is CloudFormation

A

Create Infrastructure as Code, works with almost all of AWS resources.

110
Q

What is AWS Elastic Beanstalk

A

Elastic Beanstalk is a developer centric view of deploying an application on AWS. All in one view and easy to make sense of.

111
Q

What is AWS System Manager (SSM)

A

Helps mange your EC2 and On-Premises systems at scale. Patching automation for enhanced compliance and runs commands across an entire fleet of servers.

112
Q

What is AWS OpsWorks

A

Managed Chef and Puppet in AWS

113
Q

What is a Region in AWS

A

Each AWS Region is designed to be isolated from the other AWS Regions. This design achieves the greatest possible fault tolerance and stability.
When you view your resources, you see only the resources that are tied to the AWS Region that you specified. This is because AWS Regions are isolated from each other, and we don’t automatically replicate resources across AWS Regions.
Exp: us-west-1

114
Q

What is an AZ in AWS

A

Availability Zones are multiple, isolated locations within each Region.
Exp: us-west-1a and us-west-1b

115
Q

What is a Local Zone in AWS

A

A Local Zone is an extension of an AWS Region that is geographically close to your users. You can extend any VPC from the parent AWS Region into Local Zones by creating a new subnet and assigning it to the AWS Local Zone
Exp: us-west-2-lax-1a

116
Q

What is an Edge Location in AWS

A

Edge locations are AWS data centers designed to deliver services with the lowest latency possible. Amazon has dozens of these data centers spread across the world. They’re closer to users than Regions or Availability Zones, often in major cities, so responses can be fast.
Used for content delivery as close as possible to users

117
Q

What is Route 53

A

Global DNS service. Great to route users to the closest deployment with least latency. Great for disaster recovery strategies.

118
Q

Abbreviation : CDN

A

Content Delivery Network

119
Q

What is CloudFront

A

Service that replicates part of your application to AWS Edge Locations - decrease latency.
Caches common requests - Improves user experience and decrease latency

120
Q

What is S3 Transfer Acceleration

A

Accelerate global uploads & downloads into S3

121
Q

What is AWS Global Accelerator

A

Improves global application availability and performance using the AWS global network

122
Q

What is an AWS Outpost

A

Outposts are AWS server racks that are deployed into and on-premises network extending AWS services into your data center

123
Q

What is AWS WaveLength

A

This service bring AWS services to the edge of the 5G network. Used for ultra-low latency applications

124
Q

What is Amazon SQS

A

Amazon Simple Queue Service is one of the oldest AWS offerings. Used to decouple applications by providing a queue where messages are kept up to 14 days. Multiple Consumers share the read and delete messages when done

125
Q

Abbreviation : SQS

A

Simple Queue Service

126
Q

Abbreviation : SNS

A

Simple Notification Service

127
Q

What is Amazon SNS

A

Amazon Simple Queue Service is a notification service with no message retention.

128
Q

What is Amazon Kinesis

A

A managed service to collect, process, and analyze real-time streaming data at any scale. For exam Kinesis = real-time big data streaming

129
Q

What is Amazon MQ

A

When migrating to the cloud, instead of re-engineering an applications queue/notification service we can use Amazon MQ instead of SQS and SNS.
Amazon MQ = managed Apache ActiveMQ

130
Q

What is Amazon CloudWatch

A

it is a reporting tool in AWS.

  • Metrics : monitor the performance of AWS services and billing metrics
  • Alarms : automate notification, perform EC2 action, notify to SNS based on metric
  • Logs : collect log files from EC2 instances, servers, Lambda functions…
  • Events (or EventBridge) : react to events in AWS, or trigger a rule on a schedule
131
Q

What is Amazon EventBridge

A

EventBridge is the next evolution of CloudWatch Events. For exam its the same as CloudWatch Events

132
Q

What is AWS CloudTrail

A

audit events / API calls made within your AWS account

133
Q

What is AWS CloudTrail Insights

A

Automated analysis of your Cloud Trail Events to detect unusual activity

134
Q

What is AWS X-Ray

A

AWS X-Ray helps developers analyze and debug production, distributed applications

135
Q

What is the Service Health Dashboard

A

It provides the status of all AWS services across all regions

136
Q

What is the Personal Health Dashboard

A

It is a dashboard that provides status of AWS events that impact your infrastructure

137
Q

What is Amazon CodeGuru

A

Amazon CodeGuru is a developer tool that provides intelligent recommendations to improve code quality and identify an application’s most expensive lines of code.

138
Q

Abbreviation : VPC

A

Virtual Private Cloud

139
Q

What is a VPC

A

A VPC is a private network to deploy your AWS resources in. This is a regional resource

140
Q

What is a subnet in AWS

A

Subnets allow you to partition your network inside you VPC. Subnets are ties to an AZ.

141
Q

What is a Internet Gateway

A

The IGW helps our VPC instances connect with the internet.

142
Q

Difference between NAT Gateway and NAT Instances

A

NAT Gateways (AWS managed) & NAT Instances (self-managed) allow your instance in your Private Subnets to access the internet while remaining private

143
Q

What is a Network ACL (NACL)

A

Stateless, subnet rules for inbound and outbound traffic. A firewall that can have allow and deny rules.

144
Q

What is a Security Group

A

Stateful, operate at the EC2 instance level or ENI. A firewall that controls traffic to and from. Only Allow rules

145
Q

What is VPC Peering

A

Connects two VPC with non-overlapping IP ranges, nontransitive

146
Q

What is a VPC Endpoint

A

Endpoints allow you to connect to AWS Services using a private network instead of the public www network.

147
Q

What is a VPC Flow Log

A

Network traffic logs

148
Q

What is a Site to Site VPN

A

VPN over public internet between on-premises DC and AWS.

149
Q

What is Direct Connect

A

This is a direct private connection to AWS which take at least a month to establish to local data center.

150
Q

What is a Transit Gateway

A

Connects thousands of VPC and on-premises networks together.

151
Q

What is AWS Shield

A

Free Automatic DDoS protection / 24/7 support for advanced

152
Q

What is AWS WAF

A

Layer 7 (HTTP) firewall that protects your web applications from common web exploits. Filters incoming requests based on rules

153
Q

Abbreviation : WAF

A

Web Application Firewall

154
Q

Abbreviation : KMS

A

Key Management Service

155
Q

What is AWS KMS

A

An encryption key managed by AWS. If you see encryption on test is is most likely this.

156
Q

What is CloudHSM

A

AWS CloudHSM is a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys on the AWS Cloud.

157
Q

What is AWS Certificate Manager

A

WS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources

158
Q

What is AWS Artifact

A

Portal that provides customers with on-demand access to AWS compliance documentation and AWS agreements

159
Q

What is Amazon GuardDuty

A

Find malicious behavior with VPC, DNS & CloudTrail Logs

160
Q

What is Amazon Inspector

A

For EC2 only, install agent and find vulnerabilities

161
Q

What is AWS Config

A

Track config changes and compliance against rules

162
Q

What is Amazon Macie

A

Amazon Macie is a fully managed data security and data privacy service that users machine learning and pattern matching to discover and protect your sensitive data in AWS

163
Q

What is AWS Security Hub

A

Central security tool to manage security across several AWS accounts and automate security checks

164
Q

What is Amazon Detective

A

Used to find the root cause of security issues or suspicious activities

165
Q

What is AWS Abuse

A

Report AWS resources used for abusive or illegal purposes

166
Q

What are some Root user permissions

A
  • Change account settings
  • Clouse your AWD account
  • Change or cancel your AWS support plan
  • Register as a seller in the Reserved Instance Marketplace
167
Q

What is Amazon Rekognition

A

face detection, labeling, celebrity recognition

168
Q

What is Amazon Transcribe

A

audio to text

169
Q

What is Amazon Polly

A

text to audio

170
Q

What is Amazon Translate

A

translations

171
Q

What is Amazon Lex

A

build conversational bots - chatbots

172
Q

What is Amazon Connect

A

cloud contact center

173
Q

What is Amazon Comprehend

A

natural language processing

174
Q

What is Amazon SageMaker

A

machine learning for every developer and data scientist

175
Q

What is Amazon Forcast

A

build highly accurate forecasts

176
Q

What is Amazon Kendra

A

ML-powered search engine

177
Q

What is Amazon Personalize

A

real-time personalized recommendations

178
Q

What is AWS Organizations

A

This is a global service that allows you to manage multiple AWS accounts. This provides the benefit of consolidating billing across all accounts.

179
Q

Abbreviation : SCP

A

Service Control Policies

180
Q

What is SCP

A

These policies are applied at the OU or Account level and do not apply to the Master account. These policies allow you to whitelist/blacklist IAM actions additional accounts/users have in the organization

181
Q

What is AWS Control Tower

A

This is a management dashboard that allows you to quickly and easily manage your organization

182
Q

Why use Tags & Cost Allocation Tags

A

These will make management and billing easier

183
Q

What are some IAM guidelines

A

Setup MFA
Provide users with least-privilege
Create a password policy
Rotate passwords

184
Q

What is AWS Trusted Advisor

A

It is a service that provides a high level account assessment based on Cost Optimizations, Performance, Security, Fault tolerance, and Service Limits. Recommends a support plan.

185
Q

Where are good places to send log files

A

Into an S3 bucket or CloudWatch Logs

186
Q

What should you do if your account is compromised

A

Change the root password
Delete and rotate all passwords/keys
Contact AWS Support

187
Q

What are the 4 AWS Support Plans

A
  1. AWS Basic Support Plan
  2. AWS Developer Support Plan
  3. AWS Business Support Plan
  4. AWS Enterprise Support Plan
188
Q

What is the Compute Optimizer used for

A

It recommends resources’ configurations to reduce cost

189
Q

What is the TCO Calculator used for

A

Used to calculate your on-premises data center cost of ownership and what it would cost to host it in AWS.

190
Q

What is the Simple Monthly Calculator/Pricing Calculator used for

A

To calculate the cost of services on AWS

191
Q

What is the Billing Dashboard used for

A

It provides a high level overview of billing and the free-tier

192
Q

What is Cost Allocation Tags used for

A

They tag resources to create detailed reports

193
Q

What is Cost and Usage Reports used for

A

They are the most comprehensive billing dataset

194
Q

What is the Cost Explorer used for

A

View current usage (detailed) and forecast usage

195
Q

What are Billing Alarms used for

A

They are alarms that notify you based on overall and per-service billing

196
Q

What is Budget used for

A

More advanced track usage, costs, RI, and get alerts

197
Q

What is the Savings Plan used for

A

This is an easy way to saved based on long-term usage of AWS

198
Q

Abbreviation : STS

A

Security Token Service

199
Q

What is a STS

A

The Security Token Service is used to provide temporary, limited-privilege credentials to access AWS resources

200
Q

What is Amazon Cognito

A

It creates a database of users to allow access control to your web and mobile apps quickly and easily. Used for potentially millions of users.

201
Q

What is AWS Directory Services

A

This is a integrated Microsoft AD in AWS that can establish trusts to local AD environments.

202
Q

What is AWS SSO

A

This SSO provides one login for multiple AWS accounts & applications

203
Q

What is Amazon WorkSpace

A
  • Managed Desktop as a Service (DaaS) solution to easily provision Windows or Linux desktops
  • Great to eliminate management of on-premise VDI (Virtual Desktop Infrastructure)
  • Fast and quickly scalable to thousands of users
  • Secure data : integrates with KMS
  • Pay-as-you-go service with monthly or hourly rates
  • To minimize latency deploy the WorkSpaces close to the users Region.
204
Q

What is Amazon AppStream 2.0

A
  • Desktop Application Streaming Service
  • Deliver to any computer, without acquiring, provisioning infrastructure
  • The application is delivered from within a web browser
205
Q

What is Amazon Sumerian

A
  • Create and run virtual reality (VR), augmented reality (AR), and 3D applications
  • Can be used to quickly create 3D models with animations
  • Ready-to-use templates and assets : no programming or 3D expertise required
  • Accessible via a web-browser URLs or on popular hardware for AR/V
206
Q

What is AWS IoT Core

A
  • IoT stands for ‘Internet of Things’ : the network of internet-connected devices that are able to collect and transfer data
  • AWS IoT Core allows you to easily connect IoT devices to the AWS Cloud
  • Serverless, secure & scalable to billions of devices and trillions of messages
  • Your applications can communicate with your devices even when they aren’t connected
  • Integrates with a lot of AWS services (Lambda, S3, SageMaker, etc.)
207
Q

What is Amazon Elastic Transcoder

A

Elastic Transcoder is used to convert media files stored in S3 into media files in the formats required by consumer playback devices (phones etc..)

208
Q

What is AWS Device Farm

A
  • Fully-managed service that tests your web and mobile apps against desktop browsers, real mobile devices, and tablets
  • Run tests concurrently on multiple devices (speed up execution)
  • Ability to configure device settings (GPS, language, Wi-Fi, Bluetooth,…)
209
Q

What is AWS Backup

A
  • Fully-managed service to centrally manage and automate backups across AWS services
  • On-demand and scheduled backups
  • Supports PITR (Point-in-time-Recovery)
  • Retention Periods, Lifecycle Management, Backup Policies,..
  • Cross-Region Backup
  • Cross-Account Backup (Using AWS Organizations)
210
Q

What are some Disaster Recovery Strategies

A
  • Backup and Restore
    • Cheapest
  • Pilot Light
  • Warm Standby
  • Multi-Site / Hot-Site
    - Most Expensive
211
Q

What is CloudEndure Disaster Recovery

A
  • Quickly and easily recover your physical, virtual, and cloud-based servers into AWS
  • Example : protect your most critical databases (including Oracle, MySQL, and SQL Server), enterprise apps (SAP), protect your data from ransomware attacks,…
  • Continuous block-level replication for your servers
212
Q

What is AWS DataSync

A
  • Move large amount of data from on-premises to AWS
  • Can synchronize to : Amazon S3 (any storage classes - including Glacier), Amazon EFS, Amazon FSx for Windows
  • Replication tasks can be scheduled hourly, daily, weekly
  • The replication tasks are incremental after the first full load
213
Q

What is AWS Fault Injector Simulator (FIS)

A
  • A fully managed service for running fault injection experiments on AWS workloads
  • Based on Chaos Engineering : stressing an application by creating disruptive events (e.g., sudden increase in CPU or memory), observing how the system responds, and implementing improvements
  • Helps you uncover hidden bugs and performance bottlenecks
  • Supports the following AWS services : EC2, ECS, EKS, RDS…
  • Use pre-built templates that generate the desired disruptions
214
Q

What are Amazons Well Architected Framework 5 Pillars

A

1) Operational Excellence
2) Security
3) Reliability
4) Performance Efficiency
5) Cost Optimizations
They are not something to balance, or trade-offs, they’re a synergy

215
Q

What are some AWS Security Principles

A
  • Implement a strong identity foundation
  • Enable traceability
  • Apply security at all layers
  • Automate security best practices
  • Protect data in transit and at rest
  • Keep people away from data
  • Prepare for security events
216
Q

What is the AWS Well-Architected Tool

A

Free tool to review your architectures against the 5 pillars framework and adopt architectural best practices

217
Q

What is the AWS Marketplace

A

It is a digital catalog with thousands of software listings from independent software vendors

218
Q

What are some AWS Training options

A
  • AWS Digital (online) and classroom training (in-person & digital)
  • AWS Private Training (for org)
  • Training and Cert for the US Gov
  • Training and Cert for Enterprise
  • AWS Academy : helps universities teach AWS
  • And your favorite online teacher teaching you all about AWS certs
219
Q

Abbreviation : APN

A

AWS Partner Network

220
Q

What is a APN Technology Partner

A

providing hardware, connectivity, and software

221
Q

What is a APN Consulting Partner

A

professional services firm to help build on AWS

222
Q

What is a APN Training Patner

A

find who can help you learn AWS

223
Q

What is the AWS Competency Program

A

AWS Competencies are granted to APN Partners who have demonstrated technical proficiency and proved customer success in specialized solution areas

224
Q

What is the AWS Navigate Program

A

help partners become better partners

AWS Training (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions