Cloud Practitioner Flashcards

(104 cards)

1
Q

What are the 5 EC2 instance family types?

A
General Purpose
Compute Optimized
Memory Optimized
Accelerated Computing
Storage Optimized
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a General Purpose instance and what is it good for?

A

Balance of compute, memory and networking
Application servers
Gaming servers
Backend servers for enterprise applications
Small-medium databases

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a Compute Optimized instance and what is it good for?

A
High-performance processors for compute heavy work
Application servers
Gaming servers
Backend servers
Batch-processing
But when they require a lot more compute
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a Memory Optimized instance and what is it good?

A

Processing large datasets in memory
Compute tasks that require a lot of data to be held in memory
Real-time processing of lots of unstructured datasets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is an Accelerated Computing instance and what is it good for?

A

Make use of hardware accelerators or coprocessors to perform compute more efficiently
Floating-point number calculations
Graphic processing (game streaming)
Data pattern matching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a Storage Optimized instance and what is it good for?

A

Instance designed for tasks that need a high volume of read/write tasks
Any instance that has a high IOPS (input/output per second requirement)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the five EC2 billing options and what do they offer?

A

On-Demand - per-hour or per-second, but the most expensive
Savings Plan - Lower costs but with a minimum use requirement
Reserved Instances - Used for steady-state workloads
Spot Instances - Cheap, spare capacity instances that can be taken away with 2 minutes notice
Dedicated Hosts - dedicated to you, no one else can use them (policy reasons)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the maximum savings from the EC2 Savings Plan?

A

72%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the maximum savings from the EC2 Spot Instances?

A

90%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the three types of Reserved Instances and their available contract times?

A

Standard Reserved - 1 or 3 years
Scheduled Reserved - 1 year
Convertible Reserved - 1 or 3 years

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What AWS service would you use for automatic compute scaling and which direction does it scale?

A

Amazon EC2 Auto Scaling

Horizontally

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the two types of scaling?

A

Dynamic scaling - responds to changing demand

Predictive scaling - automatically scheduled instances based on predicted demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the three configurations of EC2 Auto Scaling?

A

Minimum capacity - the smallest number of running instances
Desired capacity - Ideal number of instances
Maximum capacity - Maximum number of running instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a Load Balancer?

A

Responsible for distributing requests across back-end instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Amazon Elastic Load Balancer?

A

Works with Auto Scaling to distribute work-loads to maximize compute resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the difference between a monolithic application and microservices?

A

Monolithic are tightly coupled, where if one component fails then they all will.

Conversely, a microservice is loosely coupled so one component failure does not impact the others

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Amazon Simple Notification Service (SNS)?

A

A publish/subscribe service, i.e. publishes messages to subscribes. These could be web services, e-mail addresses, Lambda functions etc..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Amazon Simple Queue Service (SQS) and what is it’s benefit?

A

Used to send, store and receive messages between components. This means services are not reliant on others to be open to receive a message.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does “serverless” mean? What is the benefit?

A

When your code is running on a server but you do not manage/have access to them.

Main benefit is automatic scaling.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is AWS Lambda and what is the recommended maximum compute time?

A

A serverless service, upload code, set a trigger and you are only charged for the compute time taken.

Recommended for code that takes <15 minutes to run

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is a container?

A

A way to package your code and environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Amazon Elastic Container Service (ECS)?

A

A container management service used to host Docker images

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is Amazon Kubernetes Service (EKS)?

A

A container management service used to host Kurbenetes containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is Fargate and what are the three benefits?

A

A serverless compute engine for containers that works with ECS and EKS

No time spent managing infrastructure
Flexible
Secure by isolation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What four considerations need to be made when choosing a region?
Compliance Customer Proximity Available services Pricing
26
What is the difference between an Availability Zone and a Region?
An Availability Zone is a single or group of data centres within a region
27
What is an Edge Location?
A site used by Amazon CloudFront to store cached copies of content, to improve the speed to reach further away customers
28
What are the four ways of interacting with AWS services?
Management Console Command Line Interface (CLI) Software Development Kits (SDK) Amazon manage tools like Elastic Beanstalk or CloudFormation
29
What is Elastic Beanstalk and what are the 4 main tasks?
Provides configuration settings to manage resources Adjust capacity Load balancing Automatic scaling Health monitoring
30
What is AWS CloudFormation and what are the two main benefits?
Manages infrastructure as code through a CloudFormation template Fully automated Minimum risk of human error
31
What is AWS CloudFront?
A global content delivery service, i.e. a network of edge locations
32
What is AWS Outpost?
Extending the AWS infrastructure & services to on premise data centers
33
What is the difference between a public and private subnet?
Public subnets can interact publicly, i.e. over the internet - private subnets can't.
34
What is a Virtual Private Cloud (VPC)?
Allows you to isolate sections of the AWS Cloud in a defined virtual network
35
What is an Internet Gateway?
A way to connect the public internet to a VPC
36
What is a Virtual Private Gateway?
A way to restrict internet access to your VPC (like a VPN)
37
What is AWS Direct Connect?
A dedicated, isolated and private connection between your data centre and a VPC
38
What is a Network Access Control List (Network ACL)?
Checks packets from the internet have the correct permissions to leave/exit the subnet.
39
What is a Security Group?
Rules applied to a collection of EC2s
40
Is Network ACL Stateful or Stateless and what is the difference? How about Security Groups?
Stateless, always checks the packet regardless of circumstance Security Groups are Stateful, remembers who to let in
41
What is the default rule for a network ACL?
Allow all inbound and outbound traffic
42
What is the default for a Security Group?
Deny all inbound traffic, allow all outbound traffic
43
What is the default for a Security Group?
Deny all inbound traffic, allow all outbound traffic
44
What is Amazon Route 53?
A DNS webservice, routes users to internet applications hosted in AWS
45
What is DNS and what's it's purpose?
Domain Name System, translates public site address to an IP address
46
What is an instance store?
Block-level storage attached to the EC2 instance, all data is lost once the instance is terminated
47
What is Amazon EBS?
Amazon Block Storage Block storage you can attach to an EC2 instance, but persists if the instance is shutdown
48
How do you back-up an Amazon EBS volume?
Snapshots
49
What three things does every storage object have?
Data, metadata & key (unique identifier)
50
What is Amazon S3 and what is the maximum file size?
Simple Storage Service | 5TB
51
What are the 6 types of S3 storage?
``` Standard Standard-Infrequent Access One Zone-Infrequent Access Intelligent-Tiering Glacier Glacier Deep Archive ```
52
How many Availability Zones is S3 Standard data stored in?
A minimum of 3
53
What is S3 Standard used for?
High availability objects that are frequently accessed
54
What is S3 Standard-Infrequent Access?
Ideal for storing infrequently accessed data, similar to Standard except cheaper storage and more expensive retrieval price
55
What is S3 One Zone-Infrequent Access?
Ideal for storing infrequently accessed data, similar to Standard except cheaper storage and more expensive retrieval price Data is also only stored in one Availability Zone, again making it cheaper but less reliable Good for when data is easily replicated
56
What is S3 Intelligent-Tiering?
Automatically moves the data from S3 Standard to S3 Standard-Infrequent Access Good for data where retrieval frequency will change Comes with a monitoring & automation fee per object
57
What is S3 Glacier?
Low-cost storage, designed for long term archiving
58
What is S3 Glacier Deep Archive?
Lowest-cost storage but slower (within 12 hours) and more expensive retrieval
59
What is Amazon EFS and what are its 4 main benefits?
Elastic File System Automatically scales Can be shared by EC2 instances Can be used by any Availability Zone in the Region Can be connected to directly through Direct Connect
60
What is Amazon RDS and what's its main benefit?
Amazon Relational Database Service Automates relational database tasks such as hardware provisioning, database set-up, patching & backups
61
What is Amazon Aurora, what are its benefits?
Enterprise-class relational database, good for high availability workloads Fast (3x MySQL, 5x PostgreSQL) Cheaper (1/10th) Reliable (6 copies across 3 AZs)
62
What is Amazon DynamoDB & what are the benefits?
A non-relational, NoSQL database Performance (single-digit millisecond) Scalability Serverless (do not need to provision, patch or manage servers)
63
When do you pick DynamoDB over RDS?
When you don't require table joins
64
What is Amazon Redshift and when would you need it?
A data warehousing service Big data analytics that uses historic data
65
What is Amazon DMS and what is it primarily used for and what are three other use cases?
Database Migration Service Service to migrate databases/datastores from source to target (i.e. on-prem to cloud) Development & test DB migration DB consolidation Continuous replication
66
What are the 6 additional (and niche) DB services offered and what do they do?
DocumentDB - Supports MongoDB, a document DB program Neptune - Graph database service Quantum Ledger Database - Immutable ledger DB Managed Blockchain - create and manage blockchain networks ElastiCache - adds caching layer on frequent requests for faster access DynamoDB Accelerator (DAX) - in-memory cache for DynamoDB for microsecond response time
67
What is the shared responsibility model?
AWS are responsible for protecting the global infrastructure of the Cloud, the customer is responsible for everything they put in it
68
What is AWS IAM?
Identity and Access Management How you manage access to AWS services & resources
69
What is the AWS root user?
The owner of the account, has all permissions
70
What is an IAM user?
An identity created by the root user which can be assigned various permissions
71
What are IAM policies?
A document that defines the permissions to certain services and resources
72
What are IAM groups?
A set of IAM users, which can all be set the same policies
73
What are IAM roles?
A specific role that has specific permissions which can be assumed temporarily by a user
74
What are AWS Organizations?
A service to manage multiple AWS accounts which can be controlled through SCPs
75
What is an SCP?
Service Control Policy, enables you to place restrictions on services, resources & API actions that users and roles within each Organization account can use
76
What are Organizational Units?
Group AWS accounts into OUs to apply policies/SCPs to all accounts.
77
What is AWS Artifact?
A service that provides on-demand access to security and compliance reports
78
What is Customer Compliance Center?
Knowledge hub for AWS compliance
79
What is AWS Shield?
A service to protect applications from DDoS attacks
80
What is AWS Shield Standard?
An automatic and free service that protects against common DDoS attacks
81
What is AWS Shield Advanced?
Paid for service that protects against sophisticated attacks and provide attack diagnostics
82
What is AWS WAF?
Web Application Firewall: monitors network requests and controls access using the web access control list (ACL)
83
What is Amazon Inspector?
Runs automated security assessments to see what improvements could be made
84
What is Amazon GuardDuty?
Intelligent threat detector that continuously monitors network activity
85
What is Amazon CloudWatch?
Service to monitor and manage metrics and configure alarms
86
What is a CloudWatch alarm?
An alarm that is triggered if a metric goes above/beyond a certain amount for a certain amount of time
87
What is AWS CloudTrail?
An auditing tool to review traffic
88
What is CloudTrail Insights?
A feature that can be enabled within CloudTrail to automatically detect unsual API activity
89
What is AWS Trusted Advisor?
Service that automatically inspects AWS environment and provides real-time recommendations
90
What are the AWS Trusted Advisor 5 pillars?
``` Cost Performance Security Fault Tolerance Service Limits ```
91
How many requests can you make to AWS Lambda for free?
Up to 1 million requests & 3.2 million seconds of compute
92
How can you save on AWS Lambda?
Compute Savings Plan of 1 or 3 years, requires a minimum compute cost
93
What are the four AWS Support plans?
Basic Developer Business Enterprise
94
What is included in the Developer Support plan?
Free plan + Best practice guidance Client-side diagnostic tools Building-block architecture support
95
What is included in the Business Support plan?
Dev plan + Use-case guidance All AWS Trusted Advisor checks Some support for third-party software (i.e. operating systems)
96
What is included in the Enterprise Support plan?
Bus plan + Application architecture guidance Infrastructure event management Technical Account Manager (TAM)
97
What is AWS Marketplace?
Amazon digital catalogue to find, test & buy software
98
What is the AWS Cloud Adoption Framework?
A set of guidance to help with migration to the cloud
99
What are the 6 perspectives of the AWS Cloud Adoption Framework?
``` Business (managers/stakeholders) People (HR/staffing) Governance (Risk/Performance) Platform (IT) Security Operations (IT support) ```
100
What are the 6 strategies of migration?
``` Rehosting Replatforming Retire Retain Repurchasing Refactoring ```
101
What is the AWS Snow Family?
Physical devices used to transport large volumes of data
102
What are the four devices in the Snow Family and what are their maximum storage amounts?
Snowcone - small device that can contain up to 8TB of data Snowball (Storage) - larger device with 80TB of disk space Snowball (Compute) - 42TB of storage and 52 vCPUs with 208GB of memory Snowmobile - Shipping container that can contain up to 100 petabytes of data
103
What are the five pillars of a Well-Architected Framework?
``` Operational Excellence Security Reliability Performance efficiency Cost optimization ```
104
What is the Well-Architected Tool?
A tool to analyse your AWS infrastructure against the five "well-architected" pillars