Certified Cloud Practitioner Exam (CLF-C01) Flashcards

1
Q

Amazon EC2 Instance Type:

Provides balance of compute, memory, and networking resources. Flexible workloads.

A

Amazon EC2 Instance - General Purpose Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Amazon EC2 Instance Type:

Ideal for compute-bound applications that benefit from high-performance processors

A

Amazon EC2 Instance - Compute Optimized Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Amazon EC2 Instance Type:

Delivers fast performance for workloads that process large datasets in memory

A

Amazon EC2 Instance - Memory Optimized Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Amazon EC2 Instance Type:

Use hardware accelerators, or coprocessors, to perform some functions more efficiently than is possible in software running on CPUs.

A

Amazon EC2 Instance - Accelerated Computing Instances

Examples of these functions include floating-point number calculations, graphics processing, and data pattern matching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Amazon EC2 Instance Type:

Designed for workloads that require high, sequential read and write access to large datasets on local storage.

A

Amazon EC2 Instance - Storage Optimized Instances

Examples of workloads suitable for storage optimized instances include distributed file systems, data warehousing applications, and high-frequency online transaction processing (OLTP) systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Amazon EC2 Pricing - OnDemand

A

Ideal for short-term, irregular workloads that cannot be interrupted. No upfront costs or minimum contracts apply. The instances run continuously until you stop them, and you pay for only the compute time you use.

Sample use cases for On-Demand Instances include developing and testing applications and running applications that have unpredictable usage patterns.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Amazon EC2 Pricing - EC2 Savings Plan

A

Enables you to reduce your compute costs by committing to a consistent amount of compute usage for a 1-year or 3-year term.

Note: Discount based off of committed amount spent.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Amazon EC2 Pricing - Reserved Instances

A

Billing discount applied to the use of On-Demand Instances in your account.

Two types: Standard Reserve Instances, convertible reserve instances. Terms of 1 or 3 years.

Note: Based off or upfront payment towards an instance, as opposed to a commitment to spend a certain amount (as in the savings plan)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Amazon EC2 Pricing - Spot Instances

A

Ideal for workloads with flexible start and end times, or that can withstand interruptions.

Spot Instances use unused Amazon EC2 computing capacity and offer you cost savings at up to 90% off of On-Demand prices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Amazon EC2 Pricing - Dedicated Hosts

A

Physical servers with Amazon EC2 instance capacity that is fully dedicated to your use.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

EC2 Autoscaling

A

Enables you to automatically add or remove Amazon EC2 instances in response to changing application demand.

Predictive Scaling - Automatically schedules right number of Amazon EC2 instances based on predicted demand.

Dynamic scaling - Responds to changing demand.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Elastic Load Balancing

A

The AWS service that automatically distributes incoming application traffic across multiple resources, such as Amazon EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Messaging + Queuing

A

Queue is essentially a waitlist for messages being sent from one application to another. Makes sure messages are not lost if one application is down.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

AWS Lambda

A

AWS Lambda is a service that lets you run code without needing to provision or manage servers.

While using AWS Lambda, you pay only for the compute time that you consume. Charges apply only when your code is running. You can also run code for virtually any type of application or backend service, all with zero administration.

For example, a simple Lambda function might involve automatically resizing uploaded images to the AWS Cloud.

In this case, the function triggers when uploading a new image.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Containers

A

Provide you with a standard way to package your application’s code and dependencies into a single object.

You can also use containers for processes and workflows in which there are essential requirements for security, reliability, and scalability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Amazon Elastic Container Service

A

Highly scalable, high-performance container management system that enables you to run and scale containerized applications on AWS.

Amazon ECS supports Docker containers. Docker is a software platform that enables you to build, test, and deploy applications quickly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Amazon Elastic Kubernetes Service (Amazon EKS)

A

Fully managed service that you can use to run Kubernetes on AWS.

Kubernetes is open-source software that enables you to deploy and manage containerized applications at scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Amazon Fargate

A

Serverless compute engine for containers. It works with both Amazon ECS and Amazon EKS.

When using AWS Fargate, you do not need to provision or manage servers. AWS Fargate manages your server infrastructure for you. You can focus more on innovating and developing your applications, and you pay only for the resources that are required to run your containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Amazon Elastic Cloud Compute (Amazon EC2)

A

Provides secure, resizable compute capacity in the cloud as Amazon EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

List all Amazon EC2 Instance Types

A

General purpose
Compute optimized
Memory optimized
Accelerated computing
Storage Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Availability Zones

A

A single data center or group or data centers with a Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Edge Location

A

A site that Amazon CloudFront uses to store cached copies of your content closer to your customers for faster delivery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Ways to Interact and Deploy AWS Services

A

AWS Management Console
AWS Command Line Interface
Software Development Kits
AWS Elastic Beanstalk
AWS Cloudformation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

AWS Elastic Beanstalk

A

A mechanism to interact and deploy AWS resources.

With AWS Elastic Beanstalk, you provide code and configuration settings, and Elastic Beanstalk deploys the resources necessary to allocate resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

AWS CloudFormation

A

A mechanism to interact and deploy AWS resources.

With AWS CloudFormation, you can treat your infrastructure as code. This means that you can build an environment by writing lines of code instead of using the AWS Management Console to individually provision resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Amazon Cloudfront

A

Amazon CloudFront is a content delivery service. It uses a network of edge locations to cache content and deliver content to customers all over the world. When content is cached, it is stored locally as a copy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

AWS Outposts

A

Extends AWS infrastructure and services to your on-premises data center

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Amazon Virtual Private Cloud (VPC)

A

A networking service that you can use to establish boundaries around your AWS resources is Amazon Virtual Private Cloud (Amazon VPC).

Amazon VPC enables you to provision an isolated section of the AWS Cloud. In this isolated section, you can launch resources in a virtual network that you define. Within a virtual private cloud (VPC), you can organize your resources into subnets. A subnet is a section of a VPC that can contain resources such as Amazon EC2 instances.

Access your VPC via an internet gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Amazon VPC Sub-topic:

Subnet

A

A subnet is a section of a VPC that can contain resources such as Amazon EC2 instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Virtual Private Gateway

A

The virtual private gateway is the component that allows protected internet traffic to enter into the VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

AWS Direct Connect

A

AWS Direct Connect is a service that enables you to establish a dedicated private connection between your data center and a VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Amazon VPC Sub-topic:

Packet

A

Unit of data sent over the internet or network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Amazon VPC Sub-topic:

Network Access Control Lists (ACLs)

A

A network access control list (ACL) is a virtual firewall that controls inbound and outbound traffic (packets) at the subnet level.

Default network access control list allows all inbound and outbound traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Stateless Vs. Stateful Packet Filtering

A

Stateless packets filtering remember nothing and check packets that cross the subnet border each way: inbound and outbound.

Stateful packets filtering remember previous decisions made for incoming packets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

AWS account’s default network access control list

Stateless vs. Stateful?
Allow inbound / outbound traffic?

A

It is stateless and allows all inbound and outbound traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Amazon VPC Sub-topic: Security Groups

A

A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.

By default, denies all inbound traffic and allows all outbound traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Domain Name System (DNS)

A

A system that translates a domain name provided by a person to an IP address.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Amazon Route 53

A

A DNS web service that allows for a reliable way to route end users to internet applications hosted on AWS

39
Q

Amazon Instance Store

A

Provided temporary block-level storage for an Amazon EC2 instance.

When instance is terminated, you lost data in the instance store.

40
Q

Amazon Elastic Block Store (EBS)

Resides in how many availability zones?

A

Service that provides block-level storage volumes that you can use with Amazon EC2 instances.

Terminating instance will not delete data.

Resides within single Availability Zone. To attach to EC2 instance both EBS and EC2 must be in same zone

41
Q

AWS Simple Storage Service (S3)

A

Service that provides object-level storage (images, videos, txt files, etc…).

42
Q

Class of AWS S3: Amazon S3 Standard

Stored in how many availability zones?

A

Designed for frequently accessed data.

Stores data in minimum of three availability zones.

43
Q

Class of AWS S3: Amazon S3 Standard Infrequent Access

A

Ideal for infrequently accessed data.

Similar to S3 Standard but with lower storage price and higher retrieval price.

44
Q

Class of AWS S3: Amazon S3 One Zone Infrequent Access

A

Lower storage price than Amazon S3 Standard-IA

45
Q

Class of AWS S3: Amazon S3 Intelligent-Tiering

A

Ideal for data with unknown or changing access patterns.

Requires small monthly monitoring and automation fee per object.

46
Q

Class of AWS S3: Amazon S3 Glacier Instant Retrieval

A

Works well for archived data that requires immediate access (retrieval within a few milliseconds)

47
Q

Class of AWS S3: Amazon S3 Glacier Flexible Retrieval

A

Low-cost storage designed for data archiving.

Able to retrieve objects within few minutes to hours.

48
Q

Class of AWS S3: Amazon S3 Glacier Deep Dive

A

Lowest-cost object storage class ideal for archiving (retrieval within 12 hours)

49
Q

Amazon S3 Outposts

A

Created S3 buckets on Amazon S3 outposts.

Makes it easier to retrieve, store, and access data on AWS outposts.

50
Q

Amazon Elastic File System (Amazon EFS)

A

A scalable file system used with AWS Cloud services and on-premises resources. As you add and remove files, Amazon EFS grows and shrinks automatically. It can scale on demand to petabytes without disrupting applications.

It stores data in and across multiple Availability Zones.

51
Q

Amazon Relational Database Service (Amazon RDS)

A

It is a service that enables you to run relational databases in the AWS Cloud.

Amazon RDS is a managed service that automates tasks such as hardware provisioning, database setup, patching, and backups. With these capabilities, you can spend less time completing administrative tasks and more time using data to innovate your applications.

Supported Amazon RDS Database Engines include:

Amazon Aurora
PostgreSQL
MySQL
MariaDB
Oracle Database
Microsoft SQL Server

52
Q

Amazon Aurora

How many data copies? Availability zones?

A

Amazon Aurora is an enterprise-class relational database. It is compatible with MySQL and PostgreSQL relational databases. It is up to five times faster than standard MySQL databases and up to three times faster than standard PostgreSQL databases.

Amazon Aurora helps to reduce your database costs by reducing unnecessary input/output (I/O) operations, while ensuring that your database resources remain reliable and available.

Consider Amazon Aurora if your workloads require high availability. It replicates six copies of your data across three Availability Zones and continuously backs up your data to Amazon S3.

53
Q

Amazon DynamoDB

A

A key-value database service. It delivers single-digit millisecond performance at any scale. Serverless and automatic scaling.

54
Q

Amazon Redshift

A

A data warehousing service that you can use for big data analytics. It offers the ability to collect data from many sources and helps you to understand relationships and trends across your data.

55
Q

AWS Database Migration Service (AWS DMS)

A

Enables you to migrate relational databases, nonrelational databases, and other types of data stores.

With AWS DMS, you move data between a source database and a target database. The source and target databases can be of the same type or different types. During the migration, your source database remains operational, reducing downtime for any applications that rely on the database.

56
Q

AWS Identity and Access Management (IAM)

A

Enables you to manage access to AWS services and resources securely.

IAM gives you the flexibility to configure access based on your company’s specific operational and security needs.

57
Q

AWS Organizations

A

Used to consolidate and manage multiple AWS accounts within a central location.

58
Q

AWS Artifact

A

A service that provides on-demand access to AWS security and compliance reports and select online agreements. AWS Artifact consists of two main sections: AWS Artifact Agreements and AWS Artifact Reports.

In AWS Artifact Agreements, you can review, accept, and manage agreements for an individual account and for all your accounts in AWS Organizations. Different types of agreements are offered to address the needs of customers who are subject to specific regulations, such as the Health Insurance Portability and Accountability Act (HIPAA).

AWS Artifact Reports provide compliance reports from third-party auditors. These auditors have tested and verified that AWS is compliant with a variety of global, regional, and industry-specific security standards and regulations. AWS Artifact Reports remains up to date with the latest reports released.

59
Q

denial-of-service (DoS) attack

A

A deliberate attempt to make a website or application unavailable to users.

60
Q

AWS Shield Standard / Advanced

A

AWS Shield is a service that protects applications against DDoS attacks. AWS Shield provides two levels of protection: Standard and Advanced.

AWS Shield Standard automatically protects all AWS customers at no cost. It protects your AWS resources from the most common, frequently occurring types of DDoS attacks.

AWS Shield Advanced is a paid service that provides detailed attack diagnostics and the ability to detect and mitigate sophisticated DDoS attacks.

61
Q

AWS Key Management Service (AWS KMS)

A

Enables you to perform encryption operations through the use of cryptographic keys. A cryptographic key is a random string of digits used for locking (encrypting) and unlocking (decrypting) data. You can use AWS KMS to create, manage, and use cryptographic keys. You can also control the use of keys across a wide range of services and in your applications.

62
Q

Amazon Machine Images (AMI)

A

Supported and maintained image provided by AWS that provides the information required to launch an instance

63
Q

Standard Reserve Instance (Pricing Option)

A

Pricing option discount when you specify a number if EC2 instances to run a specific OS, instance family and size, region, and tenancy

64
Q

Convertible Reserved Instances

A

Pricing discount where you don’t need to specify instance types or availability zone.

65
Q

Amazon Simple Queue Service (SQS)

A

A message queuing service that allows you to send, store, and receive messages between software components without losing messages or requiring components to be available.

66
Q

Amazon Simple Notification Service

A

A publisher/subsribe service. Allows a publisher to publish messages to subscriber.

67
Q

AWS Regions

A

Separate geographic areas consisting of multiple physically separated and isolated availability zones that are connected with low latency, high throughput, and highly redundant networking

Contain at least 3 availability zones

68
Q

Amazon DocumentDB

A

Document database service that supports MongoDB workloads.

69
Q

Amazon Neptune

A

A graph database service. Good for highly connected datasets.

70
Q

Amazon Quantum Ledger Database

A

A ledger database service. You can review a complete history of all the changes that have been made to your application data.

71
Q

Amazon Managed Blockchain

A

Service that you can use to create and manage blockchain networks with open source frameworks.

Blockchain is a distributed ledger technology that lets multiple parties run transactions and share data without a central authority.

72
Q

Amazon Elasticache

A

Service that adds caching layers on top of your databases to improve the read times of common requests.

73
Q

Amazon DynamoDB Accelerator

A

An in-memory cache for DynamoDB. Improved response times from single digit milliseconds to microseconds.

74
Q

AWS WAF

A

Web application firewall that’s lets you monitor requests that come into your web applications.

75
Q

Amazon Inspector

A

Improves security and compliance of applications by running automated security assessments.

76
Q

Amazon Guard Duty

A

Service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continuously monitoring the network activity and account behavior within your AWS environment

77
Q

AWS Cloudwatch

A

Web service that enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics.

AWS sends metrics to Cloudwatch which then creates graphs automatically that show performance.

Can also set custom alarms.

78
Q

AWS Cloudtrail

A

Records API calls for your account. Also has option to enable Cloudtrail Insights

79
Q

AWS Trusted Advisor

A

Web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices

80
Q

AWS Trusted Advisor provides best practice recommendations across the following five categories:

A

Cost optimization, performance, security, fault tolerance, and service limits

81
Q

List AWS 6 Strategies for Migration

A

Rehosting
Replatforming
Refactoring / re-architecting
Repurchasing
Retaining
Retiring

82
Q

AWS 6 Strategies for Migration:

Rehosting

A

Known as “lift and shift” involves moving apps without changes

83
Q

AWS 6 Strategies for Migration

Replatforming

A

Known as “lift, tinker, and shift”, involved making a few cloud optimizations to realize a tangible benefit

84
Q

AWS 6 Strategies for Migration

Refactoring

A

Involves reimagining how an application is architecture and developed using cloud-native features.

Driven by a strong business need to add features, scale, or performance that would otherwise be difficult in the applications existing environment.

85
Q

AWS 6 Strategies for Migration

Repurchasing

A

Involves moving from a traditional license to a software as a service model.

86
Q

AWS 6 Strategies for Migration

Retaining

A

Consists of keeping applications that are critical for business in the source environment.

87
Q

AWS 6 Strategies for Migration

Retiring

A

Process of removing apps that are no longer needed.

88
Q

AWS Snowcone

A

A small, rugged, and secure edge computing a data transfer service.

Features 2CPUS, 4GB of memory, and up to 14TB of usable storage.

89
Q

AWS Snowball

A

Two types of devices: Snowball Edge Storage Optimized and Snowball Edge Compute Optimized

90
Q

AWS Snowmobile

A

Exabyte scale data transfer device used to move large amounts of data to AWS

Storage capacity of 100PB

91
Q

Six AWS Well Architected Framework Pillars

A

Operational excellence
Security
Reliability
Performance Efficiency
Cost Optimization
Sustainability

92
Q

AWS Cost Explorer

A

Allows businesses to create custom reports to analyze their AWS cost and usage data

93
Q

AWS Sagemaker

A

A managed service that provides tools to build, train, and deploy ML models.

94
Q

AWS NAT Gateway

A

An AWS managed that is used to connect private subnet instances to the AWS services or the internet.