Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS CPE SJ > CPE > Flashcards

CPE Flashcards

1
Q

Storage

How much data can be stored in Amazon S3?

A

Virtually Unlimited

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Databse Services

Benefits of deploying a relational database on Amazon RDS instead of Amazon EC2?

A

Automated backups
Software Patching

RDS is a managed service that makes it easy to set up, operate, and scale a relational database in the cloud.

Amazon Aurora is a RDS DB

The RDS service includes the following:
* Security and patching of the DB instances.
* Automated backup for the DB instances.
* Software updates for the DB engine.
* Easy scaling for storage and compute.
* Multi-AZ option with synchronous replication.
* Automatic failover for Multi-AZ option.
* Read replicas option for read heavy workloads.

RDS is a fully managed service and you do not have access to the underlying EC2 instance (no root access).

Relational databases are known as Structured Query Language (SQL) databases.
Non-relational databases are known as NoSQL databases.

RDS is an Online Transaction Processing (OLTP) type of database.

RDS features and benefits:
* SQL type of database.
* Can be used to perform complex queries and joins.
* Easy to setup, highly available, fault tolerant, and scalable.
* Used when data is clearly defined.
* Common use cases include online stores and banking systems.

Amazon RDS supports the following database engines:
* SQL Server.
* Oracle.
* MySQL Server.
* PostgreSQL.
* Aurora.
* MariaDB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Database Services

Postgress SQL DB running on an Amazon EC2 instance. How do you increase availability.

A

Migrate to Amazon RDS and enable the Multi-AZ feature

Amamzon RDS has a built in Multi-AZ feature

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Database Services

Deploying my SQL on AWS: Need to scale and auto backup. Which Amazon service to use

A

Amazon Aurora

Amazon Aurora is a relational database

Amazon RDS supports the following database engines:
* SQL Server.
* Oracle.
* MySQL Server.
* PostgreSQL.
* Aurora.
* MariaDB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Developer Tools

Which AWS service provide a managed software version control system?

A

AWS CodeCommitt

AWS CodeCommit is a fully-managed source control service that hosts secure Git-based repositories.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Developer Tools

Which tool helps set up your entire continuous delivery toolchain in minutes, allowing you to start releasing code faster.

A

AWS CodeStar

AWS CodeStar enables you to quickly develop, build, and deploy applications on AWS.

AWS CodeStar provides a unified user interface, enabling you to easily manage your software development activities in one place.

AWS CodeStar makes it easy for your whole team to work together securely, allowing you to easily manage access and add owners, contributors, and viewers to your projects.

You can use a variety of project templates to start developing applications on Amazon EC2, AWS Lambda, and AWS Elastic Beanstalk.

AWS CodeStar projects support many popular programming languages including Java, JavaScript, PHP, Ruby, and Python.
https://aws.amazon.com/codestar/features/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Developer Tools

What is AWS CodeCommit?

A

AWS CodeCommit is a fully managed source control service that hosts secure Git-based repositories.
It makes it easy for teams to collaborate on code in a secure and highly scalable ecosystem.
CodeCommit eliminates the need to operate your own source control system or worry about scaling its infrastructure.
You can use CodeCommit to securely store anything from source code to binaries, and it works seamlessly with your existing Git tools.
https://aws.amazon.com/codecommit/features/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is AWS CodeBuild

A

AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy.

With CodeBuild, you don’t need to provision, manage, and scale your own build servers. CodeBuild scales continuously and processes multiple builds concurrently, so your builds are not left waiting in a queue.

You can get started quickly by using prepackaged build environments, or you can create custom build environments that use your own build tools.
With CodeBuild, you are charged by the minute for the compute resources you use.
https://aws.amazon.com/codebuild/features/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

A website has a global customer base and users have reported poor performance when connecting to the site.

Which AWS service will improve the customer experience by reducing latency?

A

AWS CloudFront

Amazon CloudFront is a content delivery network (CDN) that allows you to store (cache) your content at “edge locations” located around the world.

This allows customers to access content more quickly and provides security against DDoS attacks.

CloudFront can be used for data, videos, applications, and APIs.
CloudFront uses Edge Locations and Regional Edge Caches:

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

An Amazon Virtual Private Cloud (VPC) can include multiple:

A

Availability zones

A virtual private cloud (VPC) is a virtual network dedicated to your AWS account. Analogous to having your own DC inside AWS.

It is logically isolated from other virtual networks in the AWS Cloud.

Provides complete control over the virtual networking environment including selection of IP ranges, creation of subnets, and configuration of route tables and gateways.

You can launch your AWS resources, such as Amazon EC2 instances, into your VPC.

When you create a VPC, you must specify a range of IPv4 addresses for the VPC in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16.This is the primary CIDR block for your VPC.

A VPC spans all the Availability Zones in the region.

You have full control over who has access to the AWS resources inside your VPC.

You can create your own IP address ranges, and create subnets, route tables and network gateways.

When you first create your AWS account a default VPC is created for you in each AWS region. A default VPC is created in each region with a subnet in each AZ.

By default you can create up to 5 VPCs per region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Using EC2 instances to run applications dedicated to different departments in a sigle VPC. How to break the cost and allocate to each department?

A

Create Tags by department and run a cost allocation report.

create cost allocation tags that specify the department and assign them to resources. These tags must be activated so they are visible in the cost allocation report. Once this is done and a monthly cost allocation report has been configured it will be easy to monitor the costs for each department.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

serverless workflow that coordinates multiple AWS services into a reliable application.
visual workflow that can track the status of each step in the application.

A

AWS Step Functions

allows developers to coordinate multiple AWS services into serverless workflows. It provides a visual console to visualize the steps in the workflow, helping to build and update applications quickly and monitor the status of each step in the process.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AWS Data Exchange

A

allows customers to find, subscribe to, and use third-party data in the cloud. Companies can subscribe to a diverse selection of data products provided by various data providers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What can a Cloud Practitioner use to categorize and track AWS costs by project?

A

Cost allocation tags

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Amazon CloudFront

A

is a content delivery network (CDN) that caches content around the world for lower latency access.

AWS Global Accelerator enables access to your application by leveraging the same Edge Locations as CloudFront and routing connections across the AWS global network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

AWS Outposts

A

With AWS Outposts you can extend your VPC into the on-premises data center

fully managed service that offers the same AWS infrastructure, AWS services, APIs, and tools to virtually any datacenter, co-location space, or on-premises facility for a truly consistent hybrid experience.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does AWS trusted Advisor do?

A

improve the performance of your service by checking your service limits, ensuring you take advantage of provisioned throughput, and monitoring for overutilized instances.
Trusted advisor provide recommendations

AWS Trusted Advisor offers a rich set of best practice checks and recommendations across five categories: cost optimization, security, fault tolerance, performance, and service limits.

CloudWatch monitor performance but does not provide recommendations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What does Amazon Inspector do?

A

Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

Amazon Inspector automatically discovers workloads, such as Amazon EC2 instances, containers, and Lambda functions, and scans them for software vulnerabilities and unintended network exposure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does AWS Health Dashboard do?

A

The health dashboard shows issues or upcoming events that may impact your resources. It does not notify of service limit breaches.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Elements in S3 bucket policy

A

Action: action
Resoruce: Hardware
Principal: User
Condition: condition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Amazon CloudWatch

A

Amazon CloudWatch is a performance monitoring service. AWS services send metrics about their utilization to CloudWatch which collects the metrics. You can then view the results in CloudWatch and configure alarms.

CloudWatch monitor performance but does not provide recommendations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

AWS CloudFormation

A

provides a common language for you to describe and provision all the infrastructure resources in your cloud environment.

CloudFormation allows you to use a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts.

This file serves as the single source of truth for your cloud environment.

You can use JSON or YAML to describe what AWS resources you want to create and configure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Ways you can work with AWS Identity and Access Management (IAM)

A
  1. AWS Management Console
  2. AWS Command Line Tools
  3. AWS SDKs
  4. IAM HTTPS API
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

IAM can be used to manage

A

Users.
Groups.
Access policies.
Roles.
User credentials.
User password policies.
Multi-factor authentication (MFA).
API keys for programmatic access (CLI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

IAM Users

A

IAM users are individuals who have been granted access to an AWS account

Each IAM user has three main components:

A username.
A password.
Permissions to access various resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What should the root account be used for

A

Billing only if possible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

IAM User

A

Person or a service

28
Q

Amazon Elastic Map Reduce (EMR)

A

Easily and cost-effectively process vast amounts of data.

EMR utilizes a hosted Hadoop framework running on Amazon EC2 and Amazon S3.

29
Q

Amazon Redshift

A

Fully managed
is a fast, simple, cost-effective data warehousing service.
use SQl and BI tools to anlayze data

When to use:
* Data warehouse for large volumes of aggregated data
* Primarily OLAP workloads

30
Q

When to use Amazon DynamoDB

A

Fully Managed service -No SQL non relational
* Name(key)/value pair data
* Unpredictable data structure
* In-memory performance with persistence
* High I/O needs
* Require dynamic scaling (can scale to massive workloads)

Single digit ms latency

Data is synchronously replicated across 3 facilities (AZs) in a region.
a multi-region, multi-master database.

31
Q

Amazon Neptune

A

Fully maaged Graph database (e.g. social network)
Relationships between objects are of high value

Highly avaialbe
ms latency - highly available in multiple AZs

32
Q

DynamoDB Acceleraotr - DAX

A

Fully managed in memory cache for DynamoDB

33
Q

AWS Glue

A

data integration service that makes it easy for analytics users to discover, prepare, move, and integrate data from multiple sources.

  • Managed service
  • Extract and Load service (ETL)
  • Prepare and transform data for analytics

Discover and organize data
Transform, prepare, and clean data for analysis
Build and monitor data pipelines

34
Q

Amazon Athena

A

SQL on S3

Serverless query service
perform analytics against S3 objects
uses standard SQl
Supports CSV, JSON, ORC, AVRO and Parquest

Use cases:
Business Intelligence / Analytics / Reporting
Analyze & query VPS flow logs
ELB logs
CloudTrail trails

To anlayze data in S3 - use Athena

35
Q

Amazon QuickSight

A

Serverless ML powered BI service to create interactive dashboards

36
Q

Amazon ElastiCache

A

deploy and run Memcached or Redis protocol-compliant server nodes in the cloud

blazing fast in-memory data store that provides sub-millisecond latency to power internet-scale real-time applications. Built on open-source Redis or Memcached, ElastiCache works seamlessly with Redis or Memcached without any code changes.

37
Q

Amazon GuardDuty

A

intelligent threat detection and continuous security monitoring for malicious or unauthorized behavior to help you protect your AWS accounts and workloads. uses ML.

Continuous monitoring for events across:
* AWS CloudTrail Management Events.
* AWS CloudTrail S3 Data Events.
* Amazon VPC Flow Logs.
* DNS Logs.

38
Q

VPN connection

A

Secure connection between on premise and VPC

39
Q

Transit gateway

A

Interconnect multiple VPCs and on-premises networks, and as a VPN endpoint for the Amazon side of the Site-to-Site VPN connection.

40
Q

AWS Shield

A

To help minimize the effect of DoS and DDoS attacks on your applications, you can use AWS Shield

41
Q

AWS Key Management Service (AWS KMS)

A

enables you to perform encryption operations through the use of cryptographic keys.

42
Q

AWS WAF
web application firewall

A

a web application firewall that lets you monitor network requests that come into your web applications.

AWS WAF works together with Amazon CloudFront and an Application Load Balancer.

43
Q

The maximum file size for an object in Amazon S3

A

5 TB

44
Q

AWS Data Exchange

A

is a service that makes it easy for customers to find, subscribe to, and use third-party data in the AWS Cloud.

45
Q

AWS Cost Explorer

A

Analyze your cost and usage data with visuals, filtering, and grouping. You can forecast your costs and create custom reports.

46
Q

AWS Step Functions

A

makes it easy to coordinate the components of distributed applications as a series of steps in a visual workflow.

47
Q

Amazon SQS

A

fully managed message queuing service that makes it easy to decouple and scale microservices, distributed systems, and serverless applications. Amazon SQS moves data between distributed application components and helps you decouple these components.

48
Q

Amazon Simple Email Service (Amazon SES)

A

is a reliable, scalable, and cost-effective email service. Digital marketers and application developers can use Amazon SES to send marketing, notification, and transactional emails.

49
Q

Amazon Memory DB

A

is only for Redis

50
Q

Snowball

A

Offline data or remote storage

51
Q

Snowcone

A

Deploy ultra-portable data transfer and edge computing devices anywhere

52
Q

Snowmobile

A

moves up to 100 petabytes (PB) of data in a 45-foot long ruggedized shipping container and is ideal for multi-PB or exabyte (EB)-scale digital media migrations and data center shutdowns.

53
Q

Service control policies (SCPs)

A

A type of organization policy that you can use to manage permissions in your organization.
SCPs offer central control over the maximum available permissions for the IAM users and IAM roles in your organization.
SCPs are available only in an organization that has all features enabled. SCPs aren’t available if your organization has enabled only the consolidated billing features.

SCPs do not grant permissions to the IAM users and IAM roles in your organization. No permissions are granted by an SCP.

54
Q

Amazon Macie

A

Is a fully managed data security and data privacy service.

Discovers sensitive data by using machine learning and pattern matching, provides visibility into data security risks, and enables automated protection against those risks.

55
Q

IAM Access Analyzer

A

IAM Access Analyzer external access analyzers help identify resources in your organization and accounts that are shared with an external entity.

IAM Access Analyzer unused access analyzers help identify unused access in your organization and accounts.

IAM Access Analyzer validates IAM policies against policy grammar and AWS best practices.

IAM Access Analyzer custom policy checks help validate IAM policies against your specified security standards.

IAM Access Analyzer generates IAM policies based on access activity in your AWS CloudTrail logs.

56
Q

Amazon Cognito

A

**handles user authentication and authorization for your web and mobile apps.

login to app via social media app etc

57
Q

AWS Lambda

A

Compute Service

With AWS Lambda, you can run code without provisioning or managing servers. You pay only for the compute time that you consume

58
Q

Amazon Simple Queue Service (Amazon SQS)

A

is a fully managed message queuing service that makes it easy to decouple and scale microservices, distributed systems, and serverless applications.

Amazon SQS moves data between distributed application components and helps you decouple these components.

59
Q

Amazon OpenSearch Service

A

a managed service that makes it easy to deploy, operate, and scale OpenSearch, a popular open-source search and analytics engine.

60
Q

AWS Data Pipeline

A

a web service that you can use to automate the movement and transformation of data.

61
Q

AWS Data Exchange

A

a service that makes it easy for customers to find, subscribe to, and use third-party data in the AWS Cloud.

62
Q

AWS Fargate

A

allows you to run containers without having to manage servers or clusters.

you no longer have to provision, configure, and scale clusters of VMs to run containers.

Fargate lets you focus on designing and building your applications instead of managing the infrastructure that runs them.

63
Q

AWS Elastic Beanstalk

A

is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and Internet Information Services (IIS).

64
Q

Amazon Lightsail

A

is designed to be the easiest way to launch and manage a virtual private server with AWS. Lightsail plans include everything you need to jumpstart your project – a VM, SSD-based storage, data transfer, DNS management, and a static IP address – for a low, predictable price.

65
Q
A

AWS CPE SJ (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions