Cloud Computing Flashcards
1
Q
What are the problems solved by cloud Computing
FECHAS
A
Flexibility
Elasticity
Cost effectiveness
High availability
Agility
Scalability
2
Q
What are the types of cloud computing
A
Iaas. Infrastructure as a service
Paas platform as a service
Saas. Software as a service
3
Q
What is managed by AWS when using SAAS?
A
Everything including the application
Example: ELASTIC BEAN STALK
4
Q
Cloud pricing model data transfer out of the cloud is free or paid?
A
Paid
5
Q
Cloud pricing model data transfer in is free or paid
A
Free
6
Q
What criteria when choosing region
A
Compliance
Proximity to users
Available services
Pricing
7
Q
What is the minimum availability zones per region?
A
3
8
Q
What is the maximum availability zones per region?
A
6
9
Q
Define IAM credentials report
A
List all your accounts users, and the status of their credentials
10
Q
Define IAM access advisor
A
Shows the service permissions granted to a user, and when those services were last accessed
11
Q
What the cost savings % of EBS snapshot archive
A
75% cheaper
12
Q
How long does it take to restore an EBS snapshot from archive
A
24 to 72 hours
13
Q
What does EC2 image builder do?
A
Automates the creation, maintenance validation of EC2 AMI’s
14
Q
What happens if you stop an EC two instance with instant store attached
A
They will lose their data. They are ephemeral.
15
Q
With EFS what OS is supported
A
Linux only
16
Q
EFS infrequent access what are the cost savings?
A
Up to 92% lower cost as compared to EFS standard
17
Q
Describe predictive scaling in an auto scaling group
A
Uses machine learning to predict future traffic ahead of time
18
Q
For lambda, how many calls are free?
A
1 million
19
Q
What does AWS batch do?
A
Run computing jobs can launch EC2 instances
Provisions the right amount of CPU/MEM
20
Q
batch jobs run as?
A
As docker images on ECS
21
Q
What is Lightsale used for?
A
Simple applications for people with very little cloud experience
22
Q
Why would you use AWS CDK, when creating cloud formation templates
A
When you want to write your template in a programming, language and need CDK to translate it
23
Q
For elastic beanstalk, what are the three permissions needed to get
A
Web Tier
Worker Tier
Multi container,
Docker
24
Q
What does it mean when you say AWS code deploy is a hybrid service
A
It works on EC2 instances and on premises servers
25
What is AWS code commit
Code repository alternative to GitHub integrates with all AWS services
26
What is AWS Codebuild?
Compile source code
run test
produces artifact
27
What is code pipeline?
Orchestrates steps to push code to deployment. Think CI/CD
28
What is artifact management?
Storing in retrieving of dependencies for software packages
29
What is AWS codeArtifact
Artifact management service. Stores and retrieves software dependencies.
30
What is CodeStar?
Unified UI Dashboard to create and manage CodeCommit,Codepipeline,codebuild,
Codedeploy,ElasticBeanstalk +
31
What is cloudNine?
Cloud IDE-replaces traditional IDE. Allows simultaneous collaboration amongst developers.
32
Of these services, which is hybrid
Cloud formation
Beanstalk
Code deploy.
Systems manager
Code deploy
Systems manager
33
CodeStar can be used to monitor and check the health of environment true or false
False.
Elastic beanstalk is used for health monitoring
34
Why have a global application
Decreased latency
Disaster recovery
Attack prevention
35
Does cloud trail enable encryption on logs files by default!
Yes
36
Cloud service models define
Iaas
Paas
Saas
37
What services for IAAS?
Networking
Storage
Servers
Virtualization
38
What services covered for PAAS?
NSSVOMR
Network
Storage
Servers
Virtualization
O/s
Middleware
Runtime
39
list AWS support plans
Basic
Developer
Business
Enterprise on Ramp
Enterprise
40
What AWS support plan gives you access to TAM
Enterprise On-Ramp!!
Tam = Technical Account Manager
41
For enterprise support plan what is the response time for a business critical system down?
15 minutes
42
What support plan will have a dedicated TAM
Enterprise
43
What are the seven “R” of cloud migration?
Retire.
Retain.
Replatform
Repurchase
Refactor
Relocate
Rehost
44
What are the 6 perspectives of AWS CAF
BPSGOP
Business
People
Governance
Platform
Security
Operations
45
What is the foundational capability under the operations perspective from AWS CAF?
Performance and capacity management
46
Why is DynamoDB said to have a flexible schema capability?
Supports key value pair and Document data models = schema-less
47
What resources are supported by Compute Optimizer?
EC2
EBS
EC2 Auto Scale
Lambda
48
What services are global in scope?
CloudFront
IAM
49
Why is S3 considered not global in scope?
Buckets still regional
50
Which Amazon Simple Storage Service (Amazon S3) storage class offers the lowest availability
One Zone-Infrequent Access
51
Whis is minimum storage charge for S3 standard and one zone
30 Days
52
Whis is minimum storage charge for S3 glacial and glacial flexible?
90 Days
53
What is first byte latency with S3 Glacial intant retrieval?
Milliseconds
54
What are budget types for AWS Budgets?
Cost
Reservation
Usage
55
Is Amazon EFS is a regional service
YES
EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system across many Availability Zones (AZ), Regions and VPCs
56
Which AWS service can be used as an in-memory database with high-performance and low latency
Amazon ElastiCache
57
What is an in-memory data store?
Does not persist data
Ephemeral.
58
which AWS service would be used for in-memory data store
ElastiCache
59
AWS services have data encryption automatically enabled
Storage Gateway - inFlight
S3
60
What are the two types of Cost Allocation Tags
AWS Generated
User Defined
61
For Cost Allocation Report what must be done first?
Enable the tag(s)
62
What services whould be used to analyze Cost Allocation Report?
Athena
Redshift
QuickSight
63
What AWS tool will allow cost forcasting up to 12 months?
Cost Explorer
64
Can Cost explorer show savings plans to purchase?
YES
65
Cost Data Export - what formats are available?
CSV
Parquet
Athena
66
What are the 6 Trust Advisor categories for checks?
FOSSPC
Fault tolerance
Operational excellence
Security
Service limits
Performance
Cost Optimization
67
AWS Control Tower offers the easiest way to...
set up and govern a new, secure, multi-account AWS environment.
68
For each resource, each tag key must be unique, and each tag key can have only one value
TRUE
69
Compared to the on-demand instance prices, what is the highest possible discount percent offered for reserved instances (RI)
72%
70
What is AWS Knowledge Center
contains the most frequent & common questions and requests.
starting point of checking for a solution or troubleshooting an issue with AWS services
71
AWS is responsible for Security 'of' the Cloud
TRUE
72
Customer is responsible for Security 'in' the Cloud
TRUE
73
Configuration Management is the responsibility of the customer
FALSE - responsibility of both AWS and Customer
74
Which of the following are mandatory elements of an IAM policy?
Effect, Action
75
Which of the following are optional elements of an IAM policy?
SID
Principle - some cases
Resource - some cases
Condition
76
Is AWS Web Application Firewall (AWS WAF) regional in scope?
NO - Global in scope
77
Is AWS Lambda regional service?
YES
78
Is AWS Rekognition regional service?
YES
79
Is S3 a regional service?
Buckets are regional, however global namespace
80
What provides a guided path to help customers deploy, configure, and secure their new workloads while ensuring they are ready for on-going operations in the cloud
Cloud Foundations
81
Does EFS encrypt data automatically?
NO -
To turn on, replicate FS to new FS and turn on encryption.
82
Does AWS Storage Gateway encrypt data in transit automatically?
YES
83
Can Cost explorer be used to determine instances with low utilization?
Whats another service that can be used for this purpose?
YES
Trusted Advisor
84
What is VPC Interface Endpoint
elastic network interface (ENI) with a private IP address from the IP address range of your subnet that serves as an entry point for traffic destined to a supported service.
85
What is VPC Gateway Endpoint
gateway that you specify as a target for a route in your route table for traffic destined to a supported AWS service
86
What is AWS Artifact
central resource for compliance-related information that matters to your organization. It provides on-demand access to AWS’ security and compliance reports and select online agreements
87
True or false-
You can use both read replicas and multi-AZ deployment for disaster recovery
TRUE
88
What are the 6 pillars of AWS well-architected framework?
PROCSS
Performance Efficiency
Reliability
Operational Excellence
Cost Optimization
Sustainability
Security
89
Which (Amazon S3) storage classes do not charge any data retrieval fee?
S3 One Zone-IA
Intelligent-Tiering
90
Trusted Advisor can provide alerts on which common security misconfigurations?
When you don't turn on user activity logging (AWS CloudTrail)
When you allow public access to Amazon S3 buckets
91
Can EFS be used by on-prem servers?
YES - LINUX ONLY!
92
True or False -
Amazon S3 stores data in a flat non-hierarchical structure
TRUE
93
True or False -
AWS Budgets can be used to alert on low util for RI instances?
TRUE
94
Whats the difference between Pilot Light and Warm Standby DR strategy?
Pilot light requires you to first deploy infrastructure and then scale out resources before the workload can handle requests.
Warm standby strategy deploys a functional stack, but at reduced capacity.
95
With AWS Organizations, what benefit in terms of cost control?
Pricing benefits from aggregated usage,
Volume discounts for Amazon EC2 and Amazon S3.
Shared Reserved Instances
96
What is the name of a central repository to store structural and operational metadata for data assets in AWS Glue
Glue Data Catalog
97
What is AWS Lightsail
Simple alternative to EC2, RDS, ELB ect,
Meant for people with little cloud experience
Use for simple web applications
No AutoScale
98
What is AWS Batch
Batch job (start and end job) service.
Runs on ECS, docker images
Auto-scales
99
What is Elastic Beanstalk?
Developer tool,
deploys applications console interface.
PAAS model
Uses EC2, ALB, RDS under the scenes.
Includes Monitoring
100
What is AWS CodeDeploy?
deploys code to EC2 instance or on-prem
Hybrid service
Need to install CodeDeploy agent on machines
101
What is CodeBuild
Compiles and builds code from code repo and creates artifact to then deploy
102
What is CodePipeline?
Orchestrates CodeCommit>CodeBuild>CodeDeploy>ElasticBeanStalk
103
Systems Manager-
What does it enable?
What does it do primarily?
How does it help to manage instances?
Auto-patching
Runs command across instances.
View all your managed systems in one place
104
What is AWS outpost?
What benefits?
AWS servers installed on-prem that runs AWS services. Customer is now responsible for security of this server.
Easier migration to the cloud
Low latency access to on-prem systems
105
What differences between cloudfront and S3 cross region replication?
S3 replication need to setup for every region so is not global.
s3 replication read only
s3 good for dynamic content
CloudFront good for static content
106
What is AWS Global Accelerator
Users connect to applications via edge locations, cutting out many network hops and therefore decrease latency.
107
What are the differences between CloudFront and Global Accelerator?
Global Accelerator has no caching. CF does.
Global Accelerator has static IP
Global Accelerator good for HTTP requests.
CF good for images and videos ( static content)
Global Accelerator good for fast regional failover
108
What is AWS Wavelength?
Infrastructure deployments embedded in Communication Service Provider (CSP) network. Traffic does not leave CSP network.
use cases:
Smart City, Connected Vehicles, ML assisted diagnostics
109
What are local zones?
Extends AWS region to a zone to being lower latency to users close to that zone.
110
For a global application-
What is Multi-Region active/passive?
Users can read / write to active region but only read from passive region
111
For a global application-
Multi-Region active/passive has what drawback?
Global users will have higher latency for writes
112
For a global application-
What is Multi-Region active/active?
Users can read / write to either active regions
113
What is Kinesis Data Streams
Collect
process
ANALYZE
real-time streaming data
114
Which AWS service provides alerts and remediation guidance when AWS is experiencing events that may impact you
AWS Health Dashboard
115
What is CodeGuru?
developer tool that provides intelligent recommendations to improve code quality and identify an application’s most expensive lines of code
116
What is Inspector?
automated security assessment service for EC2
117
What is Rekognition?
Finds objects, people, text, scenes in images or video using ML
118
What is LEX?
automatic speech recognition (ASR) for converting speech to text
natural language understanding (NLU) **recognize intent of the text**
119
What is Directory Services/
setup and run directories in the AWS cloud, or connect your AWS resources with an existing on-premises Microsoft Active Directory
120
A company would like to centrally manage ACCESS to multiple AWS accounts and business applications. Which service can it use
IAM Identity center
121
What is AWS workspaces?
Desktop as a Service. Integrated with KMS
122
What is AppStream?
Stream an application to a users browser
123
What is IOT core?
Allows for connection of IOT devices into AWS
124
What is AppSync?
To sync application data across mobile and web applications in real-time
Uses GraphQL
125
What is Application Composer?
Visually design and build serverless applications. Uses CloudFormation
126
What is AWS device farm?
Allows to test mobile / web application across devices and browsers.
127
What is AWS DRS?
Disaster Recovery Services. Uses continuous block-level replication for on-prem physical or virtual servers into AWS
128
What is AWS DataSync?
Move large amounts of data from on-prem into AWS. Runs on schedule. Data copied incrementally after initial load.
129
What services does DataSync integrate with?
S3
EFS
FSx for Windows
130
What does Application Discovery Service do?
Helps to plan migration by discovering applications that reside on-prem
131
What is AWS Migration Hub
Centrally collect servers and inventory data to help plan and execute cloud migrations.
132
What is Pinpoint?
Scalable 2-way marketing communications service
133
AWS Trusted Advisor
provides real time guidance on resources following AWS best practices (Cost Optimization, Performance, Security, Fault Tolerance, and Service Limits).
134
What is AWS Well-Architected Tool
review the state of your workloads and compares them to the latest AWS architectural best practices.
based on the 6 pillars of the Well-Architected Framework
135
Performance Efficacy is what?
democratize advanced technologies,
go global in minutes,
use serverless architecture,
experiment more often,
mechanical sympathy.
136
AWS IQ is what?
Find experts to help with your AWS projects
137
AWS re:Post is what?
Q&A resource offering crowd sourced answers to your AWS technical questions.
Not intended for time sensitive questions.
138
What are principles of reliability?
Testing recovery procedures,
stopping guessing capacity
managing changes in automation
139
AWS services have data encryption automatically enabled
S3
Storage Gateway
140
Which AWS service can be used to subscribe to an RSS feed to be notified of the status of all AWS service interruptions
AWS Health Dashboard - Service Health
141
Can AWS Cost & Usage Report ID underutilized EC2 instances?
NO. Use Trusted Advisor or Cost Explorer.
142
True or False:
Configuration Management is the responsibility of the customer
Neither - It is shared for both AWS and Customer
143
What are benefits to using AWS Organizations?
Centrally manage policies across accounts.
Automate account creation
Consolidated billing
Use SCP's to govern access to resources
Configure services across multiple accounts, i.e SSO
144
What does AWS Cloud Adoption Framework do for businesses?
leverages AWS experience and best practices for business outcomes through innovative use of AWS
145
What is AWS Professional Services?
global team of experts that provides assistance through a collection of AWS CAF aligned offerings
146
What is AWS Partner Network (APN)
global community that leverages AWS technologies, programs, expertise, and tools to build solutions and services for customers
147
What is the difference between:
AWS Health - Service Health Dashboard
AND
AWS Health - Your Account Health Dashboard
AWS Health - Service Health Dashboard displays the general status of AWS services
AWS Health - Your Account Health Dashboard performance and availability of the AWS services underlying your AWS resources
148
What order are credits applied to AWS Account?
Soonest expiring
Least number of applicable products
Oldest credit
149
Common stakeholders for AWS CAF Platform Perspective?
CTO,
technology leaders,
architects
engineers
150
Common stakeholders for AWS CAF Security Perspective?
chief information security officer (CISO)
chief compliance officer (CCO),
internal audit leaders
security architects and engineers
151
Common stakeholdes for AWS CAF Operations Perspective?
infrastructure and operations leaders
site reliability engineers
information technology service managers.
152
Common stakeholders for AWS CAF Governance Perspective?
CIO, CTO, CFO,
chief data officer (CDO)
chief risk officer (CRO)
153
Define OSI layer 7
Application Layer - Users interact
154
Define OSI layer 6
Presentation Layer - Encryption occurs here.
155
Define OSI layer 5
Session - maintains connections
156
Define OSI layer 4
Transport - TCP and UDP
157
Define OSI layer 3
Network - decides what physical path.
158
Define OSI layer 2
Data Link - defines format of data
159
Define OSI layer 1
Physical - Transmits raw bit stream
160
There is a one-minute minimum charge for Linux based EC2 instances true or false?
TRUE
161
What the differences b/t Control Tower and Organizations?
Control Tower is a governance framework -
Organizations are meant to centrally manage multiple accounts
162
For account creation, what feature does Control Tower offer over Organizations?
Automated account creation
163
What additional monitoring does Control Tower do?
Continuous monitoring and automated remediation
164
What is a limitation of using RI in Organizations?
To get cost benefit, Instances would need to be launched in account B using the same AZ as account A
