Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Cloud Practitioner Essentials > Cloud Practitioner > Flashcards

Cloud Practitioner Flashcards

Study guide to AWS Certification

1
Q

define what the AWS cloud is.

A

on demand delivery of IT resources and applications via the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the benefits of Cloud services?

A

Reduce risk, scalablility, agile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How does Cloud computing reduce risks?

A

Being Agile and being able to learn and adapt quickly to change

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How do you reduce your security risks?

A

Test often, patch quickly, and respond to incidences at lightning speeds.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does scalablity mean in AWS terms?

A

Resize your resources as necessary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does scalablity mean in AWS terms?

A

Resize your resources as necessary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does Cloud computing increase agility?

A

3 main factors in agility: increasing speed, ease of experimentation, cultivating culture of innovation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Where are aws buildings

A

all over the world

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does elasticity mean in AWS terms?

A

ability to scale up or down resources easily. Quickly deploy application or shut down.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does reliablity mean in AWS terms?

A

Ability to recover from infrastructure or service failures. Mitigate disrubtions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to make your resources maintain reliability?

A

Store your instances in multiple different aws availability zones instead of only one zone where if disaster occurred then all your resources are also down.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does fault tolerance mean?

A

means a system can remain functional even if some of its components fail. built in redundancy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is AWS data security

A

users have complete ownership of their own data.. and also how you handle encryption and who holds the encryption keys. and regional data compliance requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Why is AWS security world class?

A

electronic surveillance,
multi-factor access controls, 24/7 security guards, access strictly regulated. minimize disruptions to systems, availability zones allow users to remain resilient.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What cloud based products does AWS offer?

A

Compute, Storage, Databases, Analytics, Networking, Mobile, Developer tools, Management tools, IOT (internet of things), security, and enterprise applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How does the AWS products help users?

A

Mover faster, Lower IT costs, and scale

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

list 6 aws core services

A 
Amazon Elastic Cloud Compute (EC2),
Amazon Elastic Block Store (EBS),
Amazon Simple Storage Service (S3), 
AWS Global Infrastructure,
Amazon Virtural Private Cloud (VPC),
Security Groups.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is EC2?

A

Elastic Compute Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does Compute refer to in EC2?

A

represents the servers, ie, application servers, Web servers, database servers, game servers, mail servers, media servers, catalog servers, file server, computing server, proxy server, ect.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does Cloud refer to in EC2?

A

the fact that these are cloud hosted services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does Elastic refer to in EC2?

A

the scalablity if properly configured, and it will do so automatically depending on the needs at the moment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

what are the “servers “ AWS provides reffered to as?

A

Amazon EC2 Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are instances?

A

They are pay as you go, have a broad selection of HW/SW, available global hosting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the steps to build and configure and EC2 instance?

A 
Login in to AWS, Console,
Choose a region,
Launch EC2 Wizard,
Select AMI (SW),
Select instance type, (HW)
Configure network,
Configure storage,
Configure Key pairs,
Then finally launch and connect to it.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What kinda choices do you have for AMIs?

A

Stands for Amazon Machine Image.

Options are pre-made images (basics linux, windows, ect), OR third party images, OR install ur own images as SW

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is a DHCP address?

A

Dynamic Host Configuration Protocol (DHCP) is a network protocol that enables a server to automatically assign an IP address to a computer from a defined range of numbers (that is, a scope) configured for a given network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What does EBS stand for?

A

Elastic Block Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What can EBS be used for?

A

Storage for ur EC2 instances, usually used whenever your needing disk space for ur instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Why is EBS more durable then typical HDD or SDD?

A

The block level replication. so you can use something basic for ur OS, but something faster like SDD for your seconday storage for Database so it may perform faster.
Lastly Snapshot feature allows you to save different versions of what you are running in different periods of time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Can you encrypt your data that goes between your EC2 and EBS?

A

Yes using Encryption capabilities that amazon provides.

Encryption occurs on the EC2 side.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

to connect an EC2 instance to an EBS what must one make sure of ?

A

that the instance and the block are in the same Availability Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

what is the command to tell what EBS blocks that are attached to your instance?

A

lsblk will show the disks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

how do you create a file system on the newly attached EBS?

A

sudo mke2fs /location/storagename

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

how do you mount the new created folder into the machine?

A

sudo mount /loc/mountpoint /folder.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

what are the steps to attach and EBS to an EC2 instance?

A

Create, Attach, Format

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

How do your remove an EBS from an EC2 instance?

A

give the command unmount /folder.
Then go back to AWS console, click on EC2 dashboard, click volumes, select the volume and detach the volume from the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Why are tags important?

A

they help identify where your usage and costs are coming from when analyzing your ASW bill

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What are the benefits of using EC2 instances compared to physical servers

A

Pay as you go,

Ability to have different storage requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What does Amazon S3 stand for?

A

Simple storage service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Describe amazon S3

A

its a already managed cloud storage service, that doesn’t require you to add infrastructure.
Unlimited # of objects able to be stored.
Any objects types allowed.
Any time access.
Security controls.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

For putting objects in storage in S3, what is a common practice to write the keys?

A

with a name that resembles a file path

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

which amazon service automatically backs up your data in storage faculties in the same region?

A

Amazon S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

how would you create a url to access data from anywhere using S3?

A

https://bucket_name/S3_region-specific_endpoint/object_key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

what are two requirements for bucket names in S3?

A

Globally unique,

and DNS compliant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

what are some usecases for S3?

A

Storing Application Assets,
Static Web Hosting,
Backup & Disaster Recovery,
Staging area for Big Data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

how would you copy data over to your S3 in the AWS CLI?

A

aws s3 cp thingcopied.txt s3://bucket_name/object_name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

how would you copy data over to your S3 in the AWS CLI?

A

aws s3 cp thingcopied.txt s3://bucket_name/key_name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

how would you sync data over to your S3 in the AWS CLI?

A

aws s3 sync somefolder s3://bucket_name/key_name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What are the 3 topics The AWS global infustructure can be broken down into?

A

AWS regions,
Availability Zones,
Edge Locations

50
Q

What are AWS regions?

A

they are geographic areas that store 2 or more Availability zones

51
Q

When choosing a region what should you consider?

A

which regions help optimize latency while minimizing costs, and adhering to regulatory requirements (GDPR, HIPAA, PCI DSS)

52
Q

What are Availability zones?

A

they are a collection of data centers in a specific region . Each centers are completely separate from each other but connected by a low latency network

53
Q

What are AWS edge locations?

A

they host a content delivery network (cdn) called “Amazon Cloud Front”.
It is used to deliver content to ur customers.

54
Q

Describe Amazon VPC

A

virtual private cloud is designed to meet ur networking requirements. same concepts as an on premise network. complete control of configuration. control over traffic

55
Q

which services does VPC integrate well with?

A

EC2, Relational database service, ect

56
Q

what are some features of VPC?

A 
Bulits upon high availablity of AWS regions and Availability zones,
Subnets,
Route Tables,
Internet Gateway (IGW),
NAT Gateway,
Network Access Control Lists (NACL)
57
Q

What are security groups?

A

they act like a built in firewall , control accessibility to instances

58
Q

what port is http?

A

port 80

59
Q

what is port https?

A

port 443

60
Q

what source would you use to accept traffic from anywhere on the internet?

A

0.0.0.0/0

61
Q

what ways can you edit your security group rules?

A

by traffic type, protocols, port ranges, and source

62
Q

what is best practice for traffic rules?

A

to know what traffic is needed to access data and to limit traffic to only those channels

63
Q

What is the application load balancer?

A

the second type of load balancer, introduced as part of the Elastic load balancing service. Enhanced Features include: supported protocols, Cloudwatch metrics, access logs, health checks

64
Q

why use the application load balancer?

A

1) use a container to host ur microservices and route to those applications from a single load balancer.
app load balancer allows you to route different requests to the same instances But differ the path based on the port

65
Q

With application load balancers what are Listeners?

A

is a process that checks for connection requests using the protocal and port that you configure. the rules that you define for a listener determine how the load balancer routes requests to the targets in one or more target groups.

66
Q

With application load balancers what are Targets?

A

is a destination for traffic based on the established listener rules.

67
Q

With application load balancers what are target groups?

A

Each target group routes requests to one or more registered targets using the protocol and port # specified. A target can be registered with multiple target groups. health checks can be configured on a per target group basis.

68
Q

what steps are needed to use an application load balancer?

A

Launching the application load balancer.
Configuring routing.
Registering targets.
Verifying operation of the Application Load balancer.

69
Q

what are the challenges of a stand alone relational database?

A 
Server maintenance and energy footprint.
Software install and patches.
Database backups and high availability.
Limits on scalability.
Data security.
OS install and patches.
70
Q

what does Amazon RDS manage? what do you manage?

A 
you manage: application optimization.
AWS manages: 
OS installation and patches.
Database software install and patches.
Database backups.
High availability.
Scaling.
Power and rack & stack.
Server maintenance.
71
Q

In RDS what is a database instance?

A

an isolated database environment that can contain multiple user created Databases and can be access by the usual ways.

72
Q

What is RDS best used for?

A

web/mobile apps: high throughput, massive storage scalability, and high availability.
E-commerce Application: Low-cost database, Data security, Fully managed solution.
Mobile/online games: rapid grow capacity, automatic scaling, database monitoring.

73
Q

What is AWS lambda?

A

a compute service that lets you run code without per-visioning or managing service. Executed ur code only when needed and scales automatically to thousands of requests per sec.

74
Q

what are the key benefits to AWS lambda?

A

No servers to manage. Only pay when needed. Continuous scaling. Subsecond Metering

75
Q

What programming languages does AWS lambda support?

A

Nodejs
Javascript
C#
Python

76
Q

How can we use AWS Lambda?

A

For event driven computing.
respond to http request using amazon gateway.
Envoke API calls using AWS SDKs

77
Q

what are some use cases for AWS lambda?

A 
automated backups.
processing objects uploaded to S3.
Event driven log analysis.
Event driven transformation.
IOT.
Operating serverless websites.
78
Q

What is Elastic Beanstalk

A

It is a platform as a service.
Allow quick deployment of your applications.
Reduce management complexity.
keep control in ur hands (choose instance type, choose database, set and adjust auto scaling).
supports a large range of platforms (packer builder, containers, go, java, .net, node.js, php, python, ruby)

79
Q

What is Cloudwatch?

A

monitors your AWS resources and the applications you run on AWS in real time

80
Q

What are some Cloudwatch features?

A

Collect and track metrics.
Collect and monitor log files.
Set alarms.
Automatically react to changes.

81
Q

What are use cases for Cloudwatch?

A

Respond to state changes in ur AWS resources.
Automatically invoke an AWS lambda function to update DNS entries when an event notifies that EC2 instance enters the Running state.
Direct specific API records from the cloudtrail to a kinesis stream for detailed analysis of potential security or availability risks.
Take a snapshot of an EBS volume on a schedule.
Log S3 Object Level Operations using Cloudwatch Events.

82
Q

What are some components of Cloudwatch?

A 
Metrics,
Alarms,
Events,
Logs,
Dashboards
83
Q

What is Cloudfront?

A

Uses edge locations for content delivery. Can cache the content. CDN: contant delivery network

84
Q

What are some use cases for cloudfront?

A 
Static Asset Caching.
Live and On-Demand Video Streaming.
Security and DDoS protection.
Dynamic and Customized Content.
API Acceleration.
Software Distribution.
85
Q

What is cloudformation?

A

simplifies the task of repeatedly and predictably creating groups of related resources that power your applications.
Fully-managed service.
Create, update, and delete resources in stacks

86
Q

What are 3 ways of interacting with AWS services

A

call APIs such as:
AWS Management Console.
AWS CLI.
AWS SDK/API

87
Q

What are Cloudformation Templates?

A

Resources to provision.
Text file.
JSON or YAML format.
Self-documenting environment

88
Q

What are Cloudformation Stacks?

A 
Resources generated.
Unit of deployment.
Create stack.
Update stack.
Delete stack.
89
Q

What is the AWS well-architected framework there for?

A

Assess and improve architectures.
Understand how design decisions impact business.
Learn the five pillars and design principles.

90
Q

what are the 5 pillars in well-architected framework?

A 
Security.
Reliability.
Performance efficiency.
Cost optimization.
Operational excellence.
91
Q

what are the design principles for Security?

A 
Identity and access management (IAM).
Detective controls.
Infrastructure protection.
Data protection.
Incident response.
Implement security at all layers.
Enable tractability.
Apply principles of least privilege.
Focus on securing your system.
Automate.
92
Q

What are the design principles for Reliability?

A

Recover from issues/failures.
Apply best practices in: foundations, change management, failure management.
Anticipate, respond, and prevent failures.

Test recovery procedures.
Automatically recover.
Scale horizontally.
Stop guessing capacity.
Manage change in automation.
93
Q

What are the design principles for performance efficiency?

A

Select customizable solutions.
Review to continually innovate.
Monitor AWS services.
Consider the trade-offs.

Democratize advanced technologies.
Go global in minutes.
Use a serverless architectures.
Experiment more often.
Have mechanical sympathy.
94
Q

What are the design principles for cost optimization?

A

Use cost-effective resources.
Matching supply with demand.
Increase expenditure awareness.
Optimize over time.

Adopt a consumption model.
Measure overall efficiency.
Reduce spending on data center operations.
Analyze and attribute expenditure.
Use managed services.
95
Q

What are the design principles for operational excellence?

A

manage and automate changes.
Respond to events.
Define the standards.

96
Q

Define Fault Tolerance?

A

Ability of a system to remain operational.

Built-in redundancy of an application’s components.

97
Q

Define High Availability?

A

Systems are generally functioning and accessible.
Downtime is minimized.
Minimal human intervention is required.
Minimal up-front financial investment.

98
Q

List some high availability service tools.

A 
Elastic load balancers.
Elastic IP addresses.
Amazon Route 53.
Auto Scaling.
Amazon CloudWatch
99
Q

What are Elastic IP addresses?

A

Are static IP addresses.
Mask failures.
Continues to access applications if an instance fails.

100
Q

What is Amazon Route 53?

A

Authoritative DNS service (translates domain names to IP addresses).
Supports (simple routing, latency-based routing, health checks, DNS failovers, Geo-location routing)

101
Q

What is auto scaling?

A

Terminates and launches instances.
Assists with adjusting or modifying capacity.
Creates new resources on demand.

102
Q

List some Fault Tolerant Service Tools.

A

Amazon Simple Queue Service.
Amazon Simple Storage Service (S3).
Amazon Relational Database Service (RDS).

103
Q

list some core AWS security features.

A

Identity and access management.
Amazon inspector.
AWS Shield.

104
Q 
The aws stack is made up of 
User data,
Application,
Guest OS,
Hypervisor,
Network,
Physical.
What does AWS take care of and what does the user?
A

AWS: physical, network, hypervisor,

If u are running EC2 then u take care of the rest, guest OS, Application, User Data.

105
Q

What is a user in IAM pov.

IAM: Identity and Access Management

A

A permanent named operator.

106
Q

What is a Group in IAM pov.

A

A collection of users.

107
Q

What is a Role in IAM pov.

A

an authentication method.

a role is an operator (human or machine) the credentials are temporary.

108
Q

What is a policy document in IAM pov.

A

a JSON document that attaches to the user or to the group, or can be attached directly to a role.
policy doc list an api, what restrictions do we want to implement for that specific role, user, or group.

109
Q

what is Amazon Inspector?

A

Automated security assessment service that helps maintain the security and compliance of applications deployed on AWS.

110
Q

how can you access the Amazon Inspector?

A

Amazon inspector Console,
AWS software development kits (SDKs),
Amazon Inspector HTTPS API,
AWS command line tools

111
Q

What does Amazon Inspector enable you to do?

A

Quickly and easily access ur AWS resources,
Offload security assessments,
Gain deeper understanding of ur AWS resources.

112
Q

What is AWS shield?

A

is a managed Distributed Denial of Service (DDoS)

protection service that safegaurds applications running on AWS.

113
Q

how do ppl defend against DDoS application layer attacks?

A

use web application firewalls (wafs)

block attacks/requests before they reach the web server infrastructure.

114
Q

What is AWS shield standard?

A

Automatic protections available for all AWS customers, at no extra cost

115
Q

What is AWS Shield Advanced?

A

Paid service for higher levels of protection, features, and benefits.

116
Q

What are the features of AWS Shield Standard?

A

Automatic protection.
Quick detection.
Inline attack mitigation.
Self services (AWS support does not need to step in)

117
Q

What features does AWS Shield Advance have?

A 
All the features of Shield Standard.
Specialized support.
Advanced attack mitigation.
Visibility and attack notification.
Always-on monitoring.
Enhanced detection.
DDoS cost protection.
118
Q

list the 3 components AWS complicance looks at.

A

Risk management.
Control Environment.
Information Security.

119
Q

What things does the customer (us) have to do for customer compliance?

A

Review trusted info and doc compliance req.
Design and implement control objectives that meet compliance req.
identify and document controls owned my outside parties.
Verify all control objectives are met and all key controls are designed and operating effectively

120
Q

What are the 3 fundamental cost you pay for in aws?

A

Compute Capacity
Storage
Outbound data transfer

121
Q

List the cost factors.

A 
clock-hour billing: resources incur charges when running.
Database characteristics: Engine, size, memory class impacts cost.
DB purchase type.
Provisionded storage: no charge for backup storage of up to 100% of DB storage.
Additional storage: back up storage in addition to provisioned storage billed at GB/Month

AWS Cloud Practitioner Essentials (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions