Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Cloud Practitioner > Concepts > Flashcards

Concepts Flashcards

1
Q

What are the 5 things Trusted Advisors look at when analyzing a network

A 
Cost optimization
Performance
Security
Fault Tolerance
Service Limits
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the 5 pillars of a well-architected framework

A 
Operational Excellence
Security
Reliability
Performance Efficiency
Cost Optimization
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the design principles of the operational excellence pillar for a well-architected framework

A 
Perform operations as code
Annotate operations
Make frequent, small, reversible changes
Refine operations procedures frequently
Anticipate failure
Learn from all operational failures
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

AWS provides a ________ pricing model

A

pay as you go

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Benefits of cloud computing

A

Replace capital expenditures with low variable costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

The Network Access Control List provides access to ______

A

A Subnet of a VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

The Security Group provides access to ________

A

An EC2 Instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

The NACL is or is not required for a VPC

A

Is NOT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

A Security Group is or is not required for each EC2

A

IS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How does a VPC and subnet in a VPC connect to the internet

A

Through an Internet Gateway (to the internet)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

By default, all subnets within a VPC can or cannot communicate with one another

A

CAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the three types of ELB’s

A

Network, Classic, Application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

______ ELB has a listener to route application traffic

A

Application LB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

______ ELB is ideal for applications that require extreme performance and has a single IP address per AZ

A

Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

EC2 is a managed or unmanaged service

A

Unmanaged

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the cost of a VPC

A

It’s free

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

A VPC is needed to access ____ in AWS

A

EC2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which ELB operates at layer 7 (OSI Model)

A

Application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which ELB operates at layer 4 (OSI Model)

A

Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What allows the Application ELB to route traffic

A

Listeners and targets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the limit of EC2 instances per account per region

A

20

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the soft limit of VPCs per account per region

A

5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What service provides information to AutoScaling to increase or decrease instances

A

CloudWatch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What service adds or deletes instances to enabled flexibility

A

AutoScaler

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are two things with EC2 that influences price

A

Instances and AMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

EBS volumes are or are not automatically encrypted

A

are NOT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the maximum number of objects a customer can put in their S3 bucket?

A

it’s virtually unlimited; but there is a limit to the size of each of the objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

EBS cannot exist without …

A

EC2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

EBS is replicated within ___; S3 is replicated within ____

A

An AZ; a region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

4 ways to engage/interact with AWS

A

management console, CLI tools, SDK, directly with AWS API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Common use cases for S3

A

storing applications, static webhosting, back up and disaster recovery, staging area for big data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Is data on S3 publicly information by default

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

If you back up your EBS with a Snapshot, what other service does it use to store that Snapshot?

A

S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Is RDS a managed or unmanaged services?

A

Managed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

With RDS, if you use a multi-AZ instance is the data transfer synchronous?

A

YES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

With RDS, if you use read replicas is the data transfer synchronous?

A

NO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Which engines to not support RDS read replica?

A

Microsoft SQLServer, Oracle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Which service has virtually unlimited storage, no SQL database tables, low latency queries, and scalable read/write throughput

A

DynomoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

DynomoDB can have what types of keys?

A

Single and compound keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

If you need to conduct analysis in DynomoDB without using the partition or compound key, what do you use?

A

a SCAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Is DynomoDB a managed or unmanaged service?

A

Managed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is cloud computing

A

on-demand delivery of compute power, database storage, applications, and other IT resources through a cloud services platform via the Internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What are the 6 advantages of cloud computing

A

Trade capital expense for variable expense
Benefit from massive economies of scale
Stop guessing about capacity
Increase speed and agility
Stop spending money running and maintaining data centers
Go global in minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What are the 3 cloud computing models

A

Infrastructure as a Service
Platform as a Service
Software as a Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

This type of cloud computing model typically provides

customers access to networking features, computers (virtual or on dedicated hardware), and data storage space

A

IaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

This type of cloud computing model provides customers with the highest level of flexibility and management control over their IT resources

A

IaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

This type of cloud computing model removes the need for customers to manage the underlying infrastructure (usually hardware and operating systems) and allows them to focus on the deployment
and management of their applications

A

PaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

This type of cloud computing model provides customers with a completed product that is run and managed by the service provider; it is also known as ‘end user applications’

A

SaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What are the 3 types of cloud deployment models

A

Cloud, On-Premises, Hybrid

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

This type of cloud deployment model is a way to connect infrastructure and applications between cloud-based resources and existing resources that are not located in the cloud

A

Hybrid

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

_____ is is a physical location or geographic region in the world where we have two or more Availability Zones

A

Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What are the three factors of Agility

A

Speed, Experimentation, Culture of Innovation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

AWS’s Agility provides the customer the ability to increase experimentation. AWS enables this through ___________, safe experimentation, and __________

A

Operations as code, comparative testing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

The AWS infrastructure consists of _____, _____ and _____

A

Regions, Availability Zones, and Edge Locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Name the services that are located at the Edge Locations

A 
Route 53
CloudFront
AWS Shield Standard and Advanced
Web Application Firewall (WAF)
Lambda at the Edge
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

______ consist of one or more discrete data centers in the same location, each with redundant power, networking, and connectivity, housed in separate facilities

A

Availability Zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Regions are designed to be _________ from one another to enable _______ and _______

A

Isolated; Fault Tolerant and Stability

58
Q

______ have discrete uninterruptable power supply (UPS) and onsite backup generation facilities; they
are each fed via different grids from independent utilities to further reduce single points of failure.

A

Availability Zones

59
Q

VPCs can not cross Regions or Availability Zones

A

Regions; they can cross AZs

60
Q

This AWS services allows you to create templates to will allow customers to deploy copies of AWS services across Regions or within AZs

A

CloudFormation

61
Q

What is another name for a VPC

A

Network

62
Q

To meet the requirement of High Availability, customers should develop their VPC with at least ___ AZs.

A

2

63
Q

What type of load balancer would a customer use if they wanted to equally route traffic between two subnets

A

Classic ELB

64
Q

What type of load balancer would a customer use if they wanted to route traffic between subnets based on layer 7 or a URL

A

Application ELB

65
Q

What type of load balancer would a customer use if they wanted to route traffic between subnets based on a static IP

A

Network ELB

66
Q

The Network Address Translation (NAT) Gateways are attached to a ________ subnet and are associated/routed with ________ subnets.

A

public; private

67
Q

How do you provide internet access to private networks without making it public?

A

Associate/route it to a Network Address Translation (NAT) Gateway

68
Q

What is the difference between a public and private subnet?

A

The public subnet has access to the internet via an Internet Gateway

69
Q

AZs offer customers the ability to operate services which are more ________, _________, and ______ than would be possible with just one data center.

A

Highly available; fault tolerant; scaleable

70
Q

_____ is the power to scale up and down computing resources easily, while only paying for the actual resources used.

A

Elasticity

71
Q

_____ is the ability to remain operational (i.e. no downtime) even if some of the components of that system fail

A

Fault Tolerant

72
Q

_______ ensures that your systems are always functioning and accessible, and that downtime is minimized as much as possible WITHOUT the need of human intervention

A

High Availability

73
Q

Does S3 live in the VPC?

A

No

74
Q

Does EBS live in the VPC?

A

Yes - tied to EC2

75
Q

Does DynamoDB live in the VPC?

A

No

76
Q

Does Lambda live in the VPC?

A

No

77
Q

Does DynamoDB live in the Region?

A

Yes

78
Q

Does S3 live in the Region?

A

Yes

79
Q

Does Lambda live in the Region?

A

Yes

80
Q

Where are AMI’s stored?

A

In S3

81
Q

______ is different from a SnapShot, but is an image of an EC2 instance.

A

Amazon Machine Image (AMI)

82
Q

______ is the ability of a system to recover from infrastructure or service failures, and focuses on the ability to dynamically acquire computing resources to meet demand and mitigate disruptions.

A

Reliability

83
Q

What type of services at Edge Locations provides you refunds for instances that were scaled up due to DDOS attacks?

A

You must have AWS Advanced Shield

84
Q

What is the network security services at the subnet boundary?

A

NACL

85
Q

______ is a connection via fiber from a customer site into an AWS region without the use of a VPN; used for critical workloads, high capacity and speed connection needs.

A

Direct Connection

86
Q

______ are parts of the AWS infrastructure that are physically and logically distinct.

A

Availability Zones

87
Q

______ is the only service in the edge location that has a 100% SLA

A

Route 53

88
Q

_____ provides object storage vs. _____ which provides file storage.

A

S3; EBS

89
Q

The Availability Agreement for S3 Standard is _______

A

99.99%

90
Q

The Durability Agreement for S3 Standard is ________

A

99.999999999% (11x 9’s)

91
Q

The Availability Agreement for S3 Infrequent Access is _______

A

99.9%

92
Q

The Durability Agreement for S3 Infrequent Access is _______

A

99.999999999% (11x 9’s)

93
Q

To move storage between storage classes you must set up ________.

A

a Life Cycle Policy

94
Q

What is the cheapest storage class in S3

A

Infrequent Access, 1 Zone

95
Q

Glacier houses archives in ________, and they must be created by the customer in ______ prior to archiving.

A

vaults; AWS Console, CLI or SDK

96
Q

Data sent to Glacier is / is not encrypted by default

A

is

97
Q

Data retrieval from Glacier takes at a minimum of ____ to begin downloading, unless you expedite it and it takes _______ to begin to download (extra cost)

A

3-5 hours; 3-4 min

98
Q

How do you download from Glacier?

A

CLI and SDK

99
Q

Which two storage options allow you unlimited access to the data?

A

S3 Standard, Reduce Redundancy Storage

100
Q

Does S3 Standard or RRS have higher redundancy rates?

A

S3 Standard

101
Q

________ is a cloud delivery network that is hosted on Edge Locations and is used to deliver content to your customers faster.

A

Cloud Front

102
Q

What search engines support RDS Data Replication

A

MySQL, MariaDB, Oracle, Aurora, Microsoft SQL Server, PostgreSQL

103
Q

Does the customer have to do anything if the primary DB goes down with Data Replication in RDS

A

No - because this is a managed service and auto-failure takes over to make the secondary DB the primary DB

104
Q

What are the benefits of managed services

A

Inherited controls
Shared controls
Customer specific

105
Q

If you have heavy traffic on your DB within RDS, what type of set up can you use?

A

Read Replicas

106
Q

What is service that is MySQL compatible service that is 5x faster than standard RDS.

A

Aurora

107
Q

True / False: A design principle for efficiency is to have mechanical empathy.

A

False - should be sympathy.

108
Q

_____ is a collection of resources that share one or more tags.

A

Resource Groups

109
Q

Are Resource Groups only for resources in the same region?

A

No

110
Q

Are Resource Groups only for resources of the same type?

A

No

111
Q

VPC’s use _____ to control traffic into and out of subnets

A

route tables

112
Q

_____ act as built-in firewalls and control access to instances

A

security groups

113
Q

Subnets created in VPC are automatically public or private

A

private

114
Q

What three things are needed for a subnet to be public.

A

Internet gateway
Routing table
Public IP Address

115
Q

What are the default settings of a security group

A

all inbound traffic is DENIED; all outbound traffic is ALLOWED

116
Q

What is configurable within a VPC

A

IP ranges
Routing
Network gateways
Security settings

117
Q

What are the services unique to each AZ to protects zones from failures

A

Physically distinct data centers
Data centers have their own uninterrupted power supply
Each data center has a backup generator
The data centers have network connectivity
The data centers have cooling equipment

118
Q

_____ allows for customers to increase and decrease the SAME capabilities and _____ allows for customers to grow or reduce DIFFERENT capabilities.

A

Flexibility; scalability

119
Q

AWS ______ capability allows customers to run code / their applications without provisioning or managing servers.

A

Lambda

120
Q

AWS ______ capability allows customers to run a simple website or e-commerce application through launching a virtual private server in minutes.

A

Lightsale (compute)

121
Q

AWS Lightsale includes the following to enable a website service.

A 
Virtual private machine
SSD-based storage
Data transfer
DNS management
Static IP address
122
Q

What type of server would you recommend to a customer if they have a high IO workload for their databases?

A

Provisioned IOPS

123
Q

If you have a customer that has several common DB queries and wants to increase the performance of their applications, what service could they use?

A

ElastiCache

124
Q

What are the two options for CloudWatch monitoring?

A

Standard (5 min) and Detailed (1 min)

125
Q

What type of feature in RDS should you use if you have a DB that has a lot of traffic?

A

Read Replica

126
Q

What type of set up could our customer use in RDS to ensure they have fault tolerance?

A

Multiple AZ, as automatic fail over does not require customer action

127
Q

What type of service can a customer use to host a static website?

A

S3

128
Q

What are at least three services that have relatively unlimited storage?

A

S3, DynomoDB, SQS

129
Q

What service allows a customer to launch a container service without having to use EC2?

A

Fargate

130
Q

What are the four main entities within IAM

A

Users, Groups, Roles, Permissions

131
Q

True / false: a best practice is to grant permissions to applications via access keys vice roles.

A

False

132
Q

What are the components of risk management and compliance programs

A

Risk management
Control environment
Information security

133
Q

What factors influence pricing

A

AWS region
OS (AMI contains the OS)
Instance Type
Instance Size

134
Q

What services are free

A 
Inbound traffic
VPC
Elastic Beanstalk
CloudFormation
IAM
AutoScaling
Elastic IP (as long as tied to an EC2 instance)
135
Q

3 ways to pay for EC2 instances

A

On Demand
Reserved Instances
Spot

136
Q

What is the limit of flexible IP addresses per account per region

A

5

137
Q

What are the RI payment options

A

All Upfront, Partial Upfront, No Upfront

138
Q

Which service has built-in DDOS protection

A

CloudFront

139
Q

What are the benefits of AWS Security

A

Keep your data safe
Meet compliance requirements
Save money
Scale quickly

140
Q

What are the three ways you can access AWS

A

Management Console
Command Line Interface
Software Development Kits

AWS Cloud Practitioner (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions