Compute EC2 Flashcards
What is the difference between NAT Instance and NAT Gateway?
NAT Gateway is Managed by ____, which adds ____ ____________, and _________
NAT Instance is Managed by ____ and ____ _____ of those things
NAT Gateway is Managed by AWS, which adds High Availability, and Autoscale
NAT Instance is Managed by you and does none of those things
Amazon EC2 Spot Instances offers Low prices for unused capacity, up to a 90% discount. The downside is that it can be __________ at any time
It is best used for workloads with flexible ______ and ____ times
Amazon EC2 Spot Instances offers Low prices for unused capacity, up to a 90% discount. The downside is that it can be terminated at any time
It is best used for workloads with flexible start and end times
What are 2 key facts about EC2 Elastic IP address:
- _______ ______ IP address
- Associated with a ______ IP address on the instance
- Static Public IP address
- Associated with a private IP address on the instance
Is AMI a regional service?
You can only launch an AMI in the region it is stored in
For Linux AMIs, what is the function of the private key file?
It allows you to securely SSH (secure shell) into your intstance
Amazon EC2 Reserved gives up to a 75% discount; when you commit for 1 or 3 years; and its use cases are ______-_____ __________ workloads, and ________ capacity
Amazon EC2 Reserved gives up to a 75% discount; when you commit for 1 or 3 years; and its use cases are steady-state predictable workloads, and reserved capacity
A benefit of using AWS Roles is that you don’t have to ____-____ your long-term ________ and protect your instances against ____________ access.
A benefit of using AWS Roles is that you don’t have to hard-code your long-term credentials and protect your instances against unauthorized access.
Memory-optimized EC2 instances are designed to deliver fast performance for workloads that process
large data sets in memory.
What happens if you lose your secret access key for AWS CLI? How would you create a new one?
You’ll have to delete it and regenerate a new one
You will need to run AWS configure
What are the 2 Storage options that can be attached to EC2?
Elastic Block Store (persistent) Instance Store (non-persistent)
What type of control do you have with EC2 instances/
Full root/admin access
An Elastic Fabric Adapter (EFA) is a _________ device that you can attach to your Amazon EC2 instance to accelerate ____-__________ Computing and _______ ________ applications
An Elastic Fabric Adapter (EFA) is a network device that you can attach to your Amazon EC2 instance to accelerate High-Performance Computing (HPC) and Machine Learning applications
EC2 Placement Groups: Cluster packs instances close together inside an ___________ _____
EC2 Placement Groups: Cluster packs instances close together inside an Availability Zone
Groups of instances in one partition do not share __________ _______ with groups of different ________
Groups of instances in one partition do not share underlying hardware with groups of different partitions
EC2 _________ Placement Groups enable workloads to achieve low-latency network performance necessary for _____-________ node-to-node communication that is typical of ___ applications
EC2 Cluster Placement Groups enable workloads to achieve low-latency network performance necessary for tightly-coupled-coupled node-to-node communication that is typical of HPC applications
While plenty of AWS services offer the ability to scale automatically what is the only service that Auto Scaling Groups apply to?
EC2
EC2 Elastic IP address can be moved between ________ and Elastic _______ Adaptors
EC2 Elastic IP address can be moved between instances and Elastic Network Adaptors
Once terminated an EC2 Instance cannot be __________
By default root, EBS volumes are _______ when you __________ an EC2 Instances
Once terminated an EC2 Instance cannot be recovered
By default root, EBS volumes are deleted when you terminate an EC2 Instances
Instance metadata is data about your instance that you can use to ________ or ________ the running instance.
Instance metadata is data about your instance that you can use to configure or manage the running instance.
A Bootstrap Script allows you to install applications like Web ______, and _________ along with running ________ _______
A Bootstrap Script allows you to install applications like Web Servers, and Databases along with running software updates
AWS Roles allow you to provide ______ without the use of ______ ___ IDs and secret ______ ___
AWS Roles allow you to provide access without the use of access key IDs and secret access keys
Hibernating EC2 instances only applies to __-________ or ________ _________ instances
Hibernating EC2 instances only applies to on-demand or reserved Linux instances
For Windows AMIs, what is the function of the private key file?
It is required to obtain the password used to log into your instance.
If you make a change to a policy that’s attached to a role how long will it take for the change to be seen?
Immediate
Benefits of Amazon EC2 Security is that it’s fully integrated with ______ ___ and ________ features
Benefit of Amazon EC2 Security is that it’s fully integrated with Amazon VPC and security features
Between AWS and the customer who is responsible for the Public & Private AWS Keys?
AWS stores a Public key
Customer Stores the Private key file
What are the three ways to copy an AMI to a different region?
The Console, CLI, or API
Partition Placement Group are typically used with large ________ and ________ workloads, such as ________, ________, and Kafka
Partition Placement Group are typically used with large distributed and replicated workloads, such as Hadoop, Cassandra, and Kafka
Storage Optimized EC2 instances provide ___ _______ and very high ___ ___________
Storage Optimized EC2 instances provide low latency and very high I/O performance
What happens if you have an Elastic IP address and fail to use it?
You will still be charged even if not being used
What is the name of the feature to stop a Spot instance from being terminated?
Spot Block
What happens to the IP addresses when you Stop an EC2 instance with an EBS volume attached to it?
- The Private IPv4 addresses and IPv6 addresses are ________ ; public IPv4 addresses ________
- The Associated Elastic IPs ________
- The Private IPv4 addresses and IPv6 addresses are retained; public IPv4 addresses released
- The Associated Elastic IPs retained
A bootstrap script is a script that only ____ when the EC2 instance first _______
A script that only runs when the EC2 instance first launches
Key pairs are used to securely connect to which AWS service?
EC2 instances
User data is data supplied by the user at _________ ______ in form of a _____
User data is data supplied by the user at instance launch in form of a script
EC2 Partition Placement Groups spreads your instances across _______ _______
logical partitions
Which type of EC2 instances can be placed into a placement group? (4)
- Compute-optimized
- Memory-optimized
- Storage-optimized
- & GPU
What is the IP address for Metadata & Instance user data?
- 254.169.254/latest/meta-data/
- 254.169.254/latest/user-data
EC2 Spread Placement Groups place a small group of instances across distinct underlying ________ to reduce correlated ________.
EC2 Spread Placement Groups place a small group of instances across distinct underlying hardware to reduce correlated failures.
Compute-optimized EC2 instances are ideal for applications that benefit from
high-performance processors.
Private IP address:
Retained when the_______ is ______
Used in ______ and _______ _______
- Retained when the instance is stopped
- Used in Public and Private Subnets
If an instance fails these status checks, it is marked unhealthy and is _________ while Amazon EC2 Auto Scaling ______ a new _______.
If an instance fails these status checks, it is marked unhealthy and is terminated while Amazon EC2 Auto Scaling launches a new instance.
An Amazon Machine Image (AMI) contains the following (3)
- A template for the ____ volume
- Launch _______
- A block device _______ the volumes to attach
- A template for the root volume
- Launch Permissions
- A block device mapping the volumes to attach
Placement groups cannot be ______
Placement groups cannot be Merged
AWS Nitro System is the ___________ platform for the next generation of ___ _________
AWS Nitro System is the underlying platform for the next generation of EC2 instances
What are 3 key facts about EC2 Public IP addresses?
- __ ______
- Lost when the instance is ________
- Used in _______ Subnets
- No charge
- Lost when the instance is stopped
- Used in Public Subnets
Amazon EC2 On-Demand Pricing offers standard pricing - no discount; no commitments; and its use cases are (2)
Short-term ___________ or ____ environments
____________ workloads
Short-term Development or Test environments
Unpredictable workloads
What are the steps to move an existing instance into a placement group? (3)
- Stop the instance
- & Move using CLI or SDK
- But it cannot be done via Console
Security group rules for Inbound traffic is _______ by default
Security group rules for Inbound traffic are blocked by default
Is user data and metadata encrypted?
No
Between Spread, Cluster, and Partition, which of these placement groups can span more than one AZ?
Spread and Partition
When starting an EC2 Instance that was in a hibernated state, all the processes previously running on the instance are _______ and previously attached ____ _______ are __________
When starting an EC2 Instance that was in a hibernated state, all the processes previously running on the instance are resumed and previously attached data volumes are reattached
You should attach an Enhanced Networking Interface to an EC2 Instance if you need speeds between __ Gbps and ___ Gbps.
You should attach an Enhanced Networking Interface to an EC2 Instance if you need speeds between 10 Gbps and 100 Gbps.
You should attach an Enhanced Networking Interface to an EC2 Instance if having reliable ____ ___________ is a concern of yours
You should attach an Enhanced Networking Interface to an EC2 Instance if having reliable High Throughput is a concern of yours
Security group rules for Outbound traffic it’s _______ by default
Security group rules for Outbound traffic, it’s allowed by default