Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS > cloud practitioner > Flashcards

cloud practitioner Flashcards

1
Q

what are the types of certifications can you get?

A

1 - foundation cloud practitioner
2- associate solutions architect, sysops administrator, developer
3- professional solutions architect, devops engineer
speciality

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

how does web work?

A

we have a client and a server and they communicate with sending packets to one another using a network and to be able to do that the client and the server must have an ip address so that they can find each other

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what is a server composed of?

A 
cpu
ram
hard drive
database
network: router,dns server,switch
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what is a network?

A

cables, routers, and servers connected together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what is a router?

A

a networking device that forwards data packets between computer networks . they know where to send packets on the internet. they send it to a switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what is a switch?

A

takes a packet from the router and sends it to the correct server or client on your network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

what is cloud computing?

A

it’s an on-demand deliver of compute powers, storage, database and applications and it resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what are the types of clouds?

A

private: rackspace
public: azure, google cloud, aws
hybrid: a mix of private infrastructure and aws

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what are the types of cloud computing?

A

1 - infrastucture as a service Iaas
2 - platform as a service Paas
3 - software as a service Saas

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what is managed by on premises computing?

A 
1 - applications
2- data
3- runtime
4- middle ware
5- o/s
6-virtualization
7-servers
8-storage
9-networking
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is managed by Iaas?

A 
1- applications
2- data
3 - runtime
4 - middle ware
5 - o/s
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what is managed by Paas?

A

1 - applications

2 - data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what is managed by Saas?

A

nothing it’s all managed by aws

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

what are some services for each cloud computing type?

A

Iaas: aws EC2, digital ocean
Paas: elastic beanstalk aws, heroku,windows azure
Saas: gmail,dropbox,zoom

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what is the pricing of the cloud?

A 
pay as you go model:
compute: pay for compute time
storage: pay for data stored in cloud
data transfer out of cloud
data transfer in is free
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

what is aws global infrastructre?

A

regions
availability zones
data centers
points of presence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

what is an aws region?

A

regions are all around the world
names can be us-east
a regions is a cluster of data centers
most aws services are regions scoped meaning if we use a service in a region and try to use it in another region it will be like a new time of using the service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

what is aws availability zones?

A

each region has availability zones
min 2 max 6 usually 3
each availability zone has it’s own discrete one or more data center which are isolated from other availability zones to avoid disasters
they are connected with a network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

what are the points of presence in aws?

A

they help deliver to end users in low latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

do aws only has region based services?

A

no they also have global services like IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

what is the shared responsibility model?

A

customer is responsible for the security inside the cloud

aws is responsible for the security of the cloud and services themselves

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

what is IAM service?

A

it’s a global service that is used to create groups and users
identity and access management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

should you use the root user?

A

no you should not use it instead create a new group and a user to use using IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what does a group contain?

A

it contains users and cannot contain another group

25
Q

what is the config of a user belonging to a group?

A

a user can belong to multiple groups at once

a user can belong to no groups although it’s not recommended

26
Q

what are policies in IAM?

A

they are the permissions that we give to the user

users or groups can be assigned JSON documents called policies

27
Q

what is a principle we use with IAM

A

least privilege principle

28
Q

what is the least privilege principle?

A

don’t give more permissions than a user needs

29
Q

what is a password policy in IAM?

A

it’s a way to protect users accounts like requiring the user to have a minimum number of letters or alpha numeric characters in their password

30
Q

what is MFA in IAM?

A

multi factor authentication
password you know plus the device you own
even if the password is stolen the account is not compromised

31
Q

what are the types of MFA devices?

A

1 - virtual MFA device
a - google authenticator phone only
b - authy multiple deviced
supports multiple tokens on a single device
2 - U2F universal second factor security key (3 rd party)
a - yubikey
support for multiple users using a single security key
3 - hardware key fob mfa device
a - provided by gemalto 3rd party
4 - hardware key fob mfa device for aws govcloud US
a - provided by surepassid 3rd party

32
Q

what are the options that a user can access AWS?

A

1 - AWS management console protected by password and mfa
2 - AWS command line interface CLI protected by access keys
3 - AWS software developer kit SDK protected by access key

33
Q

how are access keys generated?

A

through AWS console

34
Q

what is an access key?

A

it’s just like a password
access key ID username
secret access key password

35
Q

what are IAM roles?

A

they are permissions assigned to a service as some services need to perform some actions on AWS on your behalf
1 - EC2 instance roles
2 - lambda function roles
3 - roles for cloud formations

36
Q

what are IAM security tools (Audit tools)?

A

1 - IAM credential report account level

2 - IAM access advisor user level

37
Q

what is IAM credential reports?

A

a report that lists all of your accounts users and the status of their various credentials

38
Q

what is IAM access advisor?

A

shows the service permissions granted to a user and when those services were last accessed and you can use this information to revise your policies

39
Q

how to control your spending in AWS?

A

by using a budget

40
Q

what is amazon’s EC2?

A

it’s one of the most popular services

elastic compute cloud = Iaas

41
Q

what does EC2 mainly consist of?

A

1 - renting virtual machines EC2
2 - storing data on virtual drives EBS
3 - distributing load across machines ELB
4 - scaling the services using an auto scaling group ASG

42
Q

what is EC2 sizing and configurations?

A

1 - o/s linux of windows
2 - cpu
3 - ram
4 - storage space (network attached EPS , EFS or hardware EC2 instance store)
5 - network card speed and ip addresss
6 - firewall rules: security group
7 - bootstrap script to configure at first launch: EC2 User data

43
Q

what is amazon machine image? AMI

A

it’s a template for creating EC2 instance

44
Q

what are security groups in EC2?

A

1 - they control how traffic is allowed in or out EC2 instance
2 - they only contain allow groups
3 - security groups can reference by IP or by security group
4 - they act as the firewall as they regulate
5 - access to ports
6 - authorised IP ranged
7 - control inbound network
8 - control outbound network

45
Q

what are some important ports?

A 
1 - SSH   22   log into linux instance
2 - FTP   21    upload files
3 - SFTP  22  upload files using SSH
4 - HTTP  80   access unsecured websites
5 - HTTPS  443  access secured websites
6 -  RDP     3389 remote desktop protocol   log into windows instance
46
Q

what should be the permission of your EC2 private key?

A

not 0644 but 0400

47
Q

what is EC2 instance connect?

A

another way to access SSH from the console of AWS

48
Q

why shouldn’t you run aws configure on EC2 instance connect?

A

because any other user that has access to EC2 instance connect will also have these permissions as it’s only one EC2 instance connect to all users but what we can do is give the instance a role to access IAM for instance

49
Q

what are EC2 purchasing options?

A

1 - on demand instances: short workload, predictable pricing
2 - Reserved: minimum one year
a - reserved instances: long workloads
b - convertible reserved instances: long workloads with flexible instances
c - scheduled reserved instances: every monday from 3 - 6 PM
3 - spot instances: short workloads, cheap, can lose instances (less reliable)
4 - dedicated hosts: book an entire physical server, control instance placement

50
Q

what is EC2 on demand purchase options?

A

1 - pay for what you use:
a- linux billing per second after first minute
b - all other operating systems billing per hour
2 - has the highest cost but no upfront payment
3 - no long-term commitment
4 - recommended for short-term and un-interrupted workloads, where you can’t predict how the application will behave

51
Q

what is EC2 reserved instance purchase options?

A

1 - up to 75% discount compared to on-demand
2 - reservation period: 1 year , 3 years and increase in discount per year
3 - purchase options: upfront , partial , no upfront
upfront is best discount
4 - reserve a specific instance type
5 - recommended for steady-state usage applications like database

52
Q

what is EC2 convertible reserved instance purchase options?

A

1 - can change the EC2 instance type

2 - up to 54% discount

53
Q

what is EC2 scheduled reserved instance purchase options?

A

1 - launch within the time window you reserve

2 - when you require a fraction of day / week / month

54
Q

what is EC2 spot instance purchase options?

A

1 - can get discount up to 90% compared to on demand
2 - instances that you can lose at any point of time if your max price is less than the current spot price
3 - the most cost-efficient instances in AWS

55
Q

what are useful workloads for EC2 spot instances?

A 
1 - batch jobs
2 - data analysis
3 - image processing
4 - any distributed workloads
5 - workloads with a flexible start and end time
56
Q

what workloads should you never do with EC2 spot instances?

A

critical jobs like database

57
Q

what is EC2 dedicated host?

A

it’s a physical server with EC2 instance capacity fully dedicated to your use. dedicated hosts can help address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses

it’s allocated for 3 years
more expensive
used for companies with complicated licensing model (BYOL - bring your own license)

58
Q

what is EC2 dedicated instance?

A

1 - instance running on hardware that is dedicated to you
2 - may share hardware with other instances in the same account
3 - no control over instance placement (can move hardware after stop or start)

AWS (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions