Certified Cloud Practitioner Exam (CLF-C01) Flashcards

1
Q

Amazon EC2 Instance Type:

Provides balance of compute, memory, and networking resources. Flexible workloads.

A

Amazon EC2 Instance - General Purpose Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Amazon EC2 Instance Type:

Ideal for compute-bound applications that benefit from high-performance processors

A

Amazon EC2 Instance - Compute Optimized Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Amazon EC2 Instance Type:

Delivers fast performance for workloads that process large datasets in memory

A

Amazon EC2 Instance - Memory Optimized Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Amazon EC2 Instance Type:

Use hardware accelerators, or coprocessors, to perform some functions more efficiently than is possible in software running on CPUs.

A

Amazon EC2 Instance - Accelerated Computing Instances

Examples of these functions include floating-point number calculations, graphics processing, and data pattern matching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Amazon EC2 Instance Type:

Designed for workloads that require high, sequential read and write access to large datasets on local storage.

A

Amazon EC2 Instance - Storage Optimized Instances

Examples of workloads suitable for storage optimized instances include distributed file systems, data warehousing applications, and high-frequency online transaction processing (OLTP) systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Amazon EC2 Pricing - OnDemand

A

Ideal for short-term, irregular workloads that cannot be interrupted. No upfront costs or minimum contracts apply. The instances run continuously until you stop them, and you pay for only the compute time you use.

Sample use cases for On-Demand Instances include developing and testing applications and running applications that have unpredictable usage patterns.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Amazon EC2 Pricing - EC2 Savings Plan

A

Enables you to reduce your compute costs by committing to a consistent amount of compute usage for a 1-year or 3-year term.

Note: Discount based off of committed amount spent.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Amazon EC2 Pricing - Reserved Instances

A

Billing discount applied to the use of On-Demand Instances in your account.

Two types: Standard Reserve Instances, convertible reserve instances. Terms of 1 or 3 years.

Note: Based off or upfront payment towards an instance, as opposed to a commitment to spend a certain amount (as in the savings plan)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Amazon EC2 Pricing - Spot Instances

A

Ideal for workloads with flexible start and end times, or that can withstand interruptions.

Spot Instances use unused Amazon EC2 computing capacity and offer you cost savings at up to 90% off of On-Demand prices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Amazon EC2 Pricing - Dedicated Hosts

A

Physical servers with Amazon EC2 instance capacity that is fully dedicated to your use.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

EC2 Autoscaling

A

Enables you to automatically add or remove Amazon EC2 instances in response to changing application demand.

Predictive Scaling - Automatically schedules right number of Amazon EC2 instances based on predicted demand.

Dynamic scaling - Responds to changing demand.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Elastic Load Balancing

A

The AWS service that automatically distributes incoming application traffic across multiple resources, such as Amazon EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Messaging + Queuing

A

Queue is essentially a waitlist for messages being sent from one application to another. Makes sure messages are not lost if one application is down.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

AWS Lambda

A

AWS Lambda is a service that lets you run code without needing to provision or manage servers.

While using AWS Lambda, you pay only for the compute time that you consume. Charges apply only when your code is running. You can also run code for virtually any type of application or backend service, all with zero administration.

For example, a simple Lambda function might involve automatically resizing uploaded images to the AWS Cloud.

In this case, the function triggers when uploading a new image.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Containers

A

Provide you with a standard way to package your application’s code and dependencies into a single object.

You can also use containers for processes and workflows in which there are essential requirements for security, reliability, and scalability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Amazon Elastic Container Service

A

Highly scalable, high-performance container management system that enables you to run and scale containerized applications on AWS.

Amazon ECS supports Docker containers. Docker is a software platform that enables you to build, test, and deploy applications quickly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Amazon Elastic Kubernetes Service (Amazon EKS)

A

Fully managed service that you can use to run Kubernetes on AWS.

Kubernetes is open-source software that enables you to deploy and manage containerized applications at scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Amazon Fargate

A

Serverless compute engine for containers. It works with both Amazon ECS and Amazon EKS.

When using AWS Fargate, you do not need to provision or manage servers. AWS Fargate manages your server infrastructure for you. You can focus more on innovating and developing your applications, and you pay only for the resources that are required to run your containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Amazon Elastic Cloud Compute (Amazon EC2)

A

Provides secure, resizable compute capacity in the cloud as Amazon EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

List all Amazon EC2 Instance Types

A

General purpose
Compute optimized
Memory optimized
Accelerated computing
Storage Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Availability Zones

A

A single data center or group or data centers with a Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Edge Location

A

A site that Amazon CloudFront uses to store cached copies of your content closer to your customers for faster delivery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Ways to Interact and Deploy AWS Services

A

AWS Management Console
AWS Command Line Interface
Software Development Kits
AWS Elastic Beanstalk
AWS Cloudformation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

AWS Elastic Beanstalk

A

A mechanism to interact and deploy AWS resources.

With AWS Elastic Beanstalk, you provide code and configuration settings, and Elastic Beanstalk deploys the resources necessary to allocate resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
AWS CloudFormation
A mechanism to interact and deploy AWS resources. With AWS CloudFormation, you can treat your infrastructure as code. This means that you can build an environment by writing lines of code instead of using the AWS Management Console to individually provision resources.
26
Amazon Cloudfront
Amazon CloudFront is a content delivery service. It uses a network of edge locations to cache content and deliver content to customers all over the world. When content is cached, it is stored locally as a copy.
27
AWS Outposts
Extends AWS infrastructure and services to your on-premises data center
28
Amazon Virtual Private Cloud (VPC)
A networking service that you can use to establish boundaries around your AWS resources is Amazon Virtual Private Cloud (Amazon VPC). Amazon VPC enables you to provision an isolated section of the AWS Cloud. In this isolated section, you can launch resources in a virtual network that you define. Within a virtual private cloud (VPC), you can organize your resources into subnets. A subnet is a section of a VPC that can contain resources such as Amazon EC2 instances. Access your VPC via an internet gateway
29
Amazon VPC Sub-topic: Subnet
A subnet is a section of a VPC that can contain resources such as Amazon EC2 instances
30
Virtual Private Gateway
The virtual private gateway is the component that allows protected internet traffic to enter into the VPC.
31
AWS Direct Connect
AWS Direct Connect is a service that enables you to establish a dedicated private connection between your data center and a VPC
32
Amazon VPC Sub-topic: Packet
Unit of data sent over the internet or network
33
Amazon VPC Sub-topic: Network Access Control Lists (ACLs)
A network access control list (ACL) is a virtual firewall that controls inbound and outbound traffic (packets) at the subnet level. Default network access control list allows all inbound and outbound traffic.
34
Stateless Vs. Stateful Packet Filtering
Stateless packets filtering remember nothing and check packets that cross the subnet border each way: inbound and outbound. Stateful packets filtering remember previous decisions made for incoming packets.
35
AWS account’s default network access control list Stateless vs. Stateful? Allow inbound / outbound traffic?
It is stateless and allows all inbound and outbound traffic.
36
Amazon VPC Sub-topic: Security Groups
A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance. By default, denies all inbound traffic and allows all outbound traffic.
37
Domain Name System (DNS)
A system that translates a domain name provided by a person to an IP address.
38
Amazon Route 53
A DNS web service that allows for a reliable way to route end users to internet applications hosted on AWS
39
Amazon Instance Store
Provided temporary block-level storage for an Amazon EC2 instance. When instance is terminated, you lost data in the instance store.
40
Amazon Elastic Block Store (EBS) Resides in how many availability zones?
Service that provides block-level storage volumes that you can use with Amazon EC2 instances. Terminating instance will not delete data. Resides within single Availability Zone. To attach to EC2 instance both EBS and EC2 must be in same zone
41
AWS Simple Storage Service (S3)
Service that provides object-level storage (images, videos, txt files, etc…).
42
Class of AWS S3: Amazon S3 Standard Stored in how many availability zones?
Designed for frequently accessed data. Stores data in minimum of three availability zones.
43
Class of AWS S3: Amazon S3 Standard Infrequent Access
Ideal for infrequently accessed data. Similar to S3 Standard but with lower storage price and higher retrieval price.
44
Class of AWS S3: Amazon S3 One Zone Infrequent Access
Lower storage price than Amazon S3 Standard-IA
45
Class of AWS S3: Amazon S3 Intelligent-Tiering
Ideal for data with unknown or changing access patterns. Requires small monthly monitoring and automation fee per object.
46
Class of AWS S3: Amazon S3 Glacier Instant Retrieval
Works well for archived data that requires immediate access (retrieval within a few milliseconds)
47
Class of AWS S3: Amazon S3 Glacier Flexible Retrieval
Low-cost storage designed for data archiving. Able to retrieve objects within few minutes to hours.
48
Class of AWS S3: Amazon S3 Glacier Deep Dive
Lowest-cost object storage class ideal for archiving (retrieval within 12 hours)
49
Amazon S3 Outposts
Created S3 buckets on Amazon S3 outposts. Makes it easier to retrieve, store, and access data on AWS outposts.
50
Amazon Elastic File System (Amazon EFS)
A scalable file system used with AWS Cloud services and on-premises resources. As you add and remove files, Amazon EFS grows and shrinks automatically. It can scale on demand to petabytes without disrupting applications. It stores data in and across multiple Availability Zones.
51
Amazon Relational Database Service (Amazon RDS)
It is a service that enables you to run relational databases in the AWS Cloud. Amazon RDS is a managed service that automates tasks such as hardware provisioning, database setup, patching, and backups. With these capabilities, you can spend less time completing administrative tasks and more time using data to innovate your applications. Supported Amazon RDS Database Engines include: Amazon Aurora PostgreSQL MySQL MariaDB Oracle Database Microsoft SQL Server
52
Amazon Aurora How many data copies? Availability zones?
Amazon Aurora is an enterprise-class relational database. It is compatible with MySQL and PostgreSQL relational databases. It is up to five times faster than standard MySQL databases and up to three times faster than standard PostgreSQL databases. Amazon Aurora helps to reduce your database costs by reducing unnecessary input/output (I/O) operations, while ensuring that your database resources remain reliable and available. Consider Amazon Aurora if your workloads require high availability. It replicates six copies of your data across three Availability Zones and continuously backs up your data to Amazon S3.
53
Amazon DynamoDB
A key-value database service. It delivers single-digit millisecond performance at any scale. Serverless and automatic scaling.
54
Amazon Redshift
A data warehousing service that you can use for big data analytics. It offers the ability to collect data from many sources and helps you to understand relationships and trends across your data.
55
AWS Database Migration Service (AWS DMS)
Enables you to migrate relational databases, nonrelational databases, and other types of data stores. With AWS DMS, you move data between a source database and a target database. The source and target databases can be of the same type or different types. During the migration, your source database remains operational, reducing downtime for any applications that rely on the database.
56
AWS Identity and Access Management (IAM)
Enables you to manage access to AWS services and resources securely. IAM gives you the flexibility to configure access based on your company’s specific operational and security needs.
57
AWS Organizations
Used to consolidate and manage multiple AWS accounts within a central location.
58
AWS Artifact
A service that provides on-demand access to AWS security and compliance reports and select online agreements. AWS Artifact consists of two main sections: AWS Artifact Agreements and AWS Artifact Reports. In AWS Artifact Agreements, you can review, accept, and manage agreements for an individual account and for all your accounts in AWS Organizations. Different types of agreements are offered to address the needs of customers who are subject to specific regulations, such as the Health Insurance Portability and Accountability Act (HIPAA). AWS Artifact Reports provide compliance reports from third-party auditors. These auditors have tested and verified that AWS is compliant with a variety of global, regional, and industry-specific security standards and regulations. AWS Artifact Reports remains up to date with the latest reports released.
59
denial-of-service (DoS) attack
A deliberate attempt to make a website or application unavailable to users.
60
AWS Shield Standard / Advanced
AWS Shield is a service that protects applications against DDoS attacks. AWS Shield provides two levels of protection: Standard and Advanced. AWS Shield Standard automatically protects all AWS customers at no cost. It protects your AWS resources from the most common, frequently occurring types of DDoS attacks. AWS Shield Advanced is a paid service that provides detailed attack diagnostics and the ability to detect and mitigate sophisticated DDoS attacks.
61
AWS Key Management Service (AWS KMS)
Enables you to perform encryption operations through the use of cryptographic keys. A cryptographic key is a random string of digits used for locking (encrypting) and unlocking (decrypting) data. You can use AWS KMS to create, manage, and use cryptographic keys. You can also control the use of keys across a wide range of services and in your applications.
62
Amazon Machine Images (AMI)
Supported and maintained image provided by AWS that provides the information required to launch an instance
63
Standard Reserve Instance (Pricing Option)
Pricing option discount when you specify a number if EC2 instances to run a specific OS, instance family and size, region, and tenancy
64
Convertible Reserved Instances
Pricing discount where you don’t need to specify instance types or availability zone.
65
Amazon Simple Queue Service (SQS)
A message queuing service that allows you to send, store, and receive messages between software components without losing messages or requiring components to be available.
66
Amazon Simple Notification Service
A publisher/subsribe service. Allows a publisher to publish messages to subscriber.
67
AWS Regions
Separate geographic areas consisting of multiple physically separated and isolated availability zones that are connected with low latency, high throughput, and highly redundant networking Contain at least 3 availability zones
68
Amazon DocumentDB
Document database service that supports MongoDB workloads.
69
Amazon Neptune
A graph database service. Good for highly connected datasets.
70
Amazon Quantum Ledger Database
A ledger database service. You can review a complete history of all the changes that have been made to your application data.
71
Amazon Managed Blockchain
Service that you can use to create and manage blockchain networks with open source frameworks. Blockchain is a distributed ledger technology that lets multiple parties run transactions and share data without a central authority.
72
Amazon Elasticache
Service that adds caching layers on top of your databases to improve the read times of common requests.
73
Amazon DynamoDB Accelerator
An in-memory cache for DynamoDB. Improved response times from single digit milliseconds to microseconds.
74
AWS WAF
Web application firewall that’s lets you monitor requests that come into your web applications.
75
Amazon Inspector
Improves security and compliance of applications by running automated security assessments.
76
Amazon Guard Duty
Service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continuously monitoring the network activity and account behavior within your AWS environment
77
AWS Cloudwatch
Web service that enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics. AWS sends metrics to Cloudwatch which then creates graphs automatically that show performance. Can also set custom alarms.
78
AWS Cloudtrail
Records API calls for your account. Also has option to enable Cloudtrail Insights
79
AWS Trusted Advisor
Web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices
80
AWS Trusted Advisor provides best practice recommendations across the following five categories:
Cost optimization, performance, security, fault tolerance, and service limits
81
List AWS 6 Strategies for Migration
Rehosting Replatforming Refactoring / re-architecting Repurchasing Retaining Retiring
82
AWS 6 Strategies for Migration: Rehosting
Known as “lift and shift” involves moving apps without changes
83
AWS 6 Strategies for Migration Replatforming
Known as “lift, tinker, and shift”, involved making a few cloud optimizations to realize a tangible benefit
84
AWS 6 Strategies for Migration Refactoring
Involves reimagining how an application is architecture and developed using cloud-native features. Driven by a strong business need to add features, scale, or performance that would otherwise be difficult in the applications existing environment.
85
AWS 6 Strategies for Migration Repurchasing
Involves moving from a traditional license to a software as a service model.
86
AWS 6 Strategies for Migration Retaining
Consists of keeping applications that are critical for business in the source environment.
87
AWS 6 Strategies for Migration Retiring
Process of removing apps that are no longer needed.
88
AWS Snowcone
A small, rugged, and secure edge computing a data transfer service. Features 2CPUS, 4GB of memory, and up to 14TB of usable storage.
89
AWS Snowball
Two types of devices: Snowball Edge Storage Optimized and Snowball Edge Compute Optimized
90
AWS Snowmobile
Exabyte scale data transfer device used to move large amounts of data to AWS Storage capacity of 100PB
91
Six AWS Well Architected Framework Pillars
Operational excellence Security Reliability Performance Efficiency Cost Optimization Sustainability
92
AWS Cost Explorer
Allows businesses to create custom reports to analyze their AWS cost and usage data
93
AWS Sagemaker
A managed service that provides tools to build, train, and deploy ML models.
94
AWS NAT Gateway
An AWS managed that is used to connect private subnet instances to the AWS services or the internet.