Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Autumn 2024 > Cloud computing > Flashcards

Cloud computing Flashcards

1
Q

What is Virtualisation

A

It is an abstraction of computing resources, a middle layer decoupling the underlying hardware from the software layer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a hypervisor

A

Software that allows virtualisation by managing the resource capabilities from the hardware to the virtual machine.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the types of hypervisors

A

Bare metal - Hypervisor runs over the physical device hardware (ESX, Microsoft Hyper V)

Hosted Hypervisor - The hypervisor is run over the OS of the host system, and guest Virtual machines on top of the hypervisor. (VMware workstation, Microsoft VPC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the benefits of cloud computing

A

Economies of scale - more user, less money
Cost effective
Increase speed and agility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the main features of cloud security

A

Design for failure (availability), redundancy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the types of databases

A

Relational, non relational

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is an advantage of automatic scaling and monitoring

A

No need to predict resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What components does AMI have?

A

Root volume, launch permissions and what block volumes to attach

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the AWS EC2

A

Elastic Cloud Compute - it is a compute resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How is security implemented in your VPC

A

Security groups, Network Access Control Lists (ACLs), Access and identity management, Key Pairs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What OS can you create an EC2 instance for?

A

Linux and Windows

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When launching an EC2 instance from an AMI you can

A

Launch multiple instances of the same type

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What can you configure in a VPC

A

IP range selection
Subnet creation
Route table configurations
Network gateways

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does Amazon S3 store data as

A

Objects, within resources called buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does Elastic Beanstalk do?

A

Deploys, manages and scales web applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does Amazon EC2 do?

A

Virtual Machines in the cloud. Gives you complete control over resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Define types of cloud computing models

A

Hybrid, On site and cloud computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why is AWS more economical than traditional data centers for applications with varying compute workloads?

A

The resource based pay as you go service provided by AWS makes it more economical as services can be to scale and on demand, and it is billed monthly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the AWS drivers of cost, and how are they billed?

A

Compute (Per second or hour)
Data transfer (per gb)
Storage (per gb)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How do you pay for AWS?

A

Pay for what you use
Pay less when you reserve
Pay less as you use more

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the reserved instance types?

A

Reserved capacity saves 75% over on demand capacity.
NURI - no upfront payment reserved instance
PURI - partial upfront payment reserved instance
AURI - all upfront payment reserved instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What services can reserved instances be used for?

A

Amazon EC2 and RDS (relational database service)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are some free AWS services and what are they used for?

A

AWS IAM (Identity access management) allows you to control user access to services and resources

Amazon VPC (virtual private cloud) allows you to create a virtual network to deploy and run your applications in isolation

Elastic Beanstalk (deploy and manage applications)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the differences between on premises vs cloud costs

A

Fixed costs in on premises are constant with the maintenance and space to have physical equipment

Cloud has pay as you go, scalability and no upfront expense

Things to think about are Server, storage, network and labour costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does the AWS Pricing calculator do?

A

It estimates monthly costs of use cases, opportunities to reduce them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What does AWS Organisations do?

A

Groups AWS accounts into a centrally managed organisation with consolidated billing. The account management can be group based, policy based and automated with APIs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the structure of a root AWS Organisation

A

Organisation has organisational units. Units have accounts. Service Control Policies are attached to either units or individual accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What do IAM policies control access to?

A

AWS Services, individual resources, API actions - to IAM groups, users or roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is the difference between AWS Organisation service control policies and IAM policies?

A

Organisation SCPs control access to services and specify the MAXIMUM permissions for an organisation, whereas IAM Policies control access to AWS services, individual resources and API Actions to users, groups and roles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What are the ways of accessing AWS resources

A

GUI or AWS Management console
AWS CLI or Command Line Interface
Software Development Kits
HTTP Query APIs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the AWS Cost management service and what are its tools?

A

AWS Billing and Cost Managemen - AWS Cost and usage report, Budgets, and cost explorer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What are the three AWS Support tools?

A

TAM (Technical Account Manager)
AWS Trusted Advisor
AWS Support Concierge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What does TAM or technical account manager do?

A

Proactive guidance to plan, deploy and optimize

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What does AWS Trusted Advisor do?

A

Best Practices to increase performance, security, cost optimization and fault tolerance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What are the four AWS Support plans?

A

Basic, Developer, Business (production), Enterprise (business and mission-critical)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What does AWS Support Concierge do?

A

Billing and Account expert

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Describe the AWS Cloud infrastructure

A

The AWS Cloud is built on 22 regions. Each region has multiple availability zones. Each availability zone has multiple data centers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What factors should be considered when selecting a region?

A

Proximity due to law, latency, cost and services available within region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What is recommended to do across Availability zones to improve resilience

A

Replicate data and resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

How are Availability zones connected?

A

High bandwidth, low latency network with redundant fiber

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

How are data centers secure?

A

Redundant design, backup of critical systems across zones, secret locations, monitored servicing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What do points of presence consist of

A

Edge locations, regional edge caches to find the best way to route requests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What are regional edge caches used for?

A

Infrequently accessed content

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is Amazon CloudFront?

A

Content Delivery Network used to send data to customers with low latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is Amazon Route 53

A

DNS service (Domain name System) to route end users to internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What are the main features of AWS Infrastructure?

A

Elasticity and Scalability
Fault Tolerance
High Availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Name the Amazon Storage Services

A

Amazon S3, EBS, EFS, S3 Glacier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is Amazon S3?

A

Amazon Simple Storage Service - persistent object storage with scalability, data availability, security, and performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is Amazon EBS?

A

Elastic block store - High-performance storage with intensive workloads, used with Amazon EC2.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What is Amazon EFS?

A

Elastic File System - Scalable Network File system to use with Cloud services and on premises resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is Amazon Simple Storage Glacier?

A

Secure, durable low cost S3 cloud storage. For long term data backup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Name a few compute services

A

EC2, EC2 Auto Scaling, ECS, Elastic Beanstalk, AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What does Amazon EC2 Auto Scaling do?

A

Auto add or remove EC2 instances according to defined conditions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What does Amazon Elastic Container Service do?

A

High performance container management for Docker containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What does Amazon elastic container registry do?

A

Fully managed Docker registry to store, manage and deploy Docker containers

56
Q

What does AWS Lambda do?

A

Allows running code without provisioning or maintaining servers

57
Q

Name the AWS Database services

A

Amazon RDS (Relational Database), Amazon Aurora, Amazon Redshift, Amazon DynamoDB

58
Q

What does Amazon RDS do?

A

Set up, scale and operate a relational database in the cloud.

59
Q

What does Amazon Aurora do?

A

MySQL and PostgreSQL compatible relational database.

60
Q

What does Amazon Redshift do?

A

Runs analytic queries against data stored locally in Redshift or S3

61
Q

What does Amazon DynamoDB do?

A

NoSQL High-speed non relational database service - items in the same table can have different attributes

62
Q

List the networking and content delivery services

A

Amazon VPC, Elastic Load Balancing, Amazon CloudFront, Amazon Route 53, AWS VPN

63
Q

What does Amazon Elastic Load Balancing do?

A

Automatically distributes traffic across multiple targets (EC2 instances, IP addresses, containers etc)

64
Q

What does AWS VPN do?

A

Provides a secure private tunnel from your network to AWS global network

65
Q

List the security, identity and compliance services.

A

AWS IAM, AWS Organisations, Amazon Cognito, AWS KMS, AWS Shield.

66
Q

What does Amazon Cognito do?

A

You can add user sign up, sign in and access control to web applications

67
Q

What does Amazon KMS do?

A

Amazon Key Management Service creates and manages keys to control encryption across services and application

68
Q

What does AWS Shield do?

A

Managed DDoS protection service to safeguard applications.

69
Q

List the management and governance services

A

CloudWatch, AWS Management Console, AWS Auto Scaling, AWS CLI, AWS CloudTrail

70
Q

What does AWS Config do?

A

track resource inventory and changes in configurations.

71
Q

What does Amazon CloudWatch do?

A

monitor resources and applications through metrics, perform ec2 actions,

72
Q

What does Amazon Cloudtrail do?

A

Tracks user activity and API usage for 90 days or 3 months

73
Q

What are the Amazon Service categories?

A

Computing, database, storage, security, network, cost management, management and governance

74
Q

What are the main purposes of Amazon Shared responsibility?

A

Relieves the customer’s operational burden, and gives the customer flexibility and control over resources

75
Q

Who is responsible security OF the cloud - for protecting infrastructure (hardware, software, networking)

A

AWS

76
Q

Who is responsible for security IN the cloud - encryption of data in rest and transit, security groups, configuration of OS.

A

Customer

77
Q

What are some services managed by the customer?

A

IaaS services like EC2, EBS (Elastic Block Storage), Amazon VPC

78
Q

What are some services managed by AWS

A

PaaS Services - Lambda, Amazon RDS, Elastic Beanstalk

79
Q

What are the types of services offered in IT?

A

IaaS, PaaS, SaaS - Infrastructure, Platform, Software

80
Q

What are some SaaS in AWS?

A

AWS CloudWatch, AWS Shield, Trusted Advisor, Redshift

81
Q

What is an IAM user?

A

Person or application with access to an AWS Account

82
Q

What is an IAM group?

A

Collection of IAM users with the same permissions

83
Q

What is an IAM policy

A

Document that governs user/group authorisation to use resources and specific actions within resources

84
Q

What is an IAM role?

A

IAM identity with specific permissions, assumable by a user, application or service

85
Q

What are the types of accesses for IAM users?

A

Management console access - username, password, account ID
Programmatic access - Access key ID, secret access key

86
Q

What is IAM MFA?

A

Increased security - unique authentication code apart from username and password.

87
Q

What is authorisation?

A

What actions are permitted through an IAM policy

88
Q

What are the principles of authorisation in IAM?

A

Principle of least privilege
All permissions are implicitly denied by default

89
Q

What are the two types of IAM policies?

A

Identity based - attached to entity and resource based - attached to resource

90
Q

What are the two types of identity based policies?

A

Inline policy - Embedded directly into a single user or role
Managed policy - standalone policies that can be attached to an entity

91
Q

Discuss the account root access vs IAM access

A

Best practice is to never use root user except when necessary as it has full access to all resources

IAM access has integration with all services and secure application access

92
Q

What are the steps to secure a new AWS Account

A
  1. Stop using the root user account
  2. Enable Multi Factor Authorisation
  3. Use AWS CloudTrail
  4. Enable a billing report (AWS cost and usage report)
93
Q

How is security of data in rest managed?

A

By KMS with secret keys

94
Q

How is security of data in transit managed?

A

TLS or Transport Layer Security protocol.

95
Q

What are the AWS Compliance categories?

A

Certificates and Attestations
Laws, regulations and privacy
Alignments and frameworks

96
Q

How are VPCs and Subnets related?

A

A VPC has a range of network addresses, which can be divided into subnets in each availability zone. Subnets can be public or private

97
Q

What are the largest and smallest CIDR Blocks?

A

classless inter domain route
/16 and /28 that a VPC is assigned to

98
Q

How many addresses are available to use in each subnet and what are the reserved addresses?

A

251, as .0, and .255 ar used for network and broadcast, and 1,2,3 are used for internal communication, DNS and future use.

99
Q

What are the public address IP types?

A

Public address and elastic IPv4 address - can be reallocated at any time

100
Q

What is an elastic network interface?

A

A virtual network interface that an address can be attached to and configured. They can be attached or detached to instances to direct network traffic

101
Q

What is a route table?

A

Specifies destination (a vpc cidr block) and target to direct network traffic

102
Q

What is an internet gateway?

A

Scalable, redundant VPC component to facilitate VPC instance communication with the internet and perform NAT

103
Q

What does VPC sharing do?

A

Enables customers to share subnets with other accounts in the same organisations. Multiple accounts can create their application resources into centrally managed VPCs.

104
Q

What are the benefits of VPC sharing

A

Duty seperation
Ownership
Security groups
Efficiency
Optimisation
Fewer, larger centrally managed VPCs

105
Q

What is VPC peering?

A

A connection between two VPCs to privately route traffic

106
Q

How does site-to-site VPN work?

A

Subnet -> route table -> Virtual gateway -> internet site to site connection -> customer gateway -> data center

107
Q

What does a VPC endpoint do?

A

Virtual device that connects VPC to supported resources privately

108
Q

What does AWS TransitGateway do?

A

Simplifies the networking model by making a single connection from the gateway to each VPC

109
Q

What is a security group in a VPC?

A

A virtual firewall for an instance to control inbound and outbound traffic

110
Q

What is a Access Control List in a VPC?

A

Security layer for a subnet to control traffic

111
Q

How does Amazon Route 53 ensure availability?

A

Configures backup and failover for applications
Enables multi region architectures
Creates health checks

112
Q

What are the benefits of CloudFront?

A

High speed
Cost effective
Highly programmable

113
Q

What are some example uses of EC2?

A

Traditional on-premises server uses like App and web servers, Game server, Database server

114
Q

What are some characteristics of EC2 instances?

A

Can be any size in any availability zone
Launched from AMIs (VM templates)
Launched in minutes
Traffic can be controlled to and from

115
Q

What is an AMI?

A

A template of a VM, with either Windows or Linux OS and some preinstalled software

116
Q

What do instance types comprise of?

A

CPU, memory, storage and networking capacities

117
Q

Provide a breakdown of how instance types are named eg t2.micro

A

t2.micro - T is the family, number is the generation and micro is the size

118
Q

What are the different instance types useful for?

A

T3 is general purpose, C5 is compute intensive workloads and R5 are memory-intensive.

119
Q

What can user data do?

A

Automate installation and configuration at launch

120
Q

What are the Amazon EC2 storage options?

A

Elastic Block Storage (EBS) - durable block storage

EC2 Instance store - Ephemeral storage

121
Q

How can an instance in EC2 be created?

A

Through the Management console or the AWS CLI

122
Q

What are the four pillars of cost optimization?

A

Size, Elasticity, Optimal pricing, Optimal storage

123
Q

What is a container?

A

Method of OS virtualisation - repeatable, sandboxed and fast

124
Q

What is docker?

A

Software platform to build, test and deploy applications quickly

125
Q

What is the difference between containers and virtual machines

A

VMs need one instance of EC2 for each system, while containers only need one.

126
Q

What is the difference between block and object storage

A

Block storage is faster and data can be managed within each block, whereas object storage needs to be fully updated

127
Q

What are EBS features?

A

Snapshots, encryption, Elasticity

128
Q

What are lifecycle policies

A

Enable you to delete or move objects based on age (standard - infrequent access - glacier)

129
Q

What database types can be used with RDS

A

MariaDB, PostgreSQL, mySQL, Microsoft SQLServer and Oracle

130
Q

What is the AWS well architected framework?

A

Guide for designing secure, high performance, resilient and efficient cloud infrastructure

131
Q

What are the six pillars of the well architected framework

A

Operational excellence - automate changes, responding and defining daily operations
Security - protect confidentiality, system, aaa
Reliability - recovery planning, distributed systems
Performance Efficiency - meet system requirements, monitor performance, make informed decisions
Cost Optimisation - Avoid unnecessary cost, select resources, control spending
Sustainability
Fault tolerance - Not one singular point of failure

132
Q

What are the design principles of the well architected framework?

A

Each pillar includes its own set of design principles

133
Q

What is the importance of reliability and high availability?

A

Reliability is providing functionality when desired: Mean time between failures
High availability is the property of the system withstanding failure while still being available, minimal downtime

134
Q

What are factors that affect availability

A

Fault tolerance, scaling, recoverability

135
Q

What is design for failure?

A

Fault Tolerance

Autumn 2024 (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions