Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Cloud Practitioner - Zed > Cram Deck > Flashcards

Cram Deck Flashcards

1
Q

Benefits of Cloud Computing

A

Opex vs. Capex, Running data center, capacity guessing, massive economies of scale, increase speed and agility, global in minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

EC2

A

Elastic compute cloud. General purpose, compute optimized, memory optimized, accelerated, storage optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

EC2: General Purpose

A

balance of compute, memory, networking. Application servers, gaming servers, backend servers for enterprise applications, small and medium databases

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

EC2: Compute Optimized

A

High performance processing. high performance web servers, compute intensive applications servers, and dedicated gaming servers, batch processing workloads that require processing many transactions in a single group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

EC2: Memory Optimized

A

fast performance for workloads that process large datasets in memory. workload that requires large amounts of data to be preloaded before running an application. This scenario might be a high performance database or a workload that involves performing real time processing of a large amount of unstructured data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

EC2: Accelerated Computing

A

hardware accelerators, or coprocessors, to perform some functions more efficiently than is possible in software running on CPUs. floating point number calculations, graphics processing, and data pattern matching.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

EC2: Storage Optimized

A

require high, sequential read and write access to large datasets on local storage.

distributed file systems, data warehousing applications, and high frequency online transaction processing (OLTP) systems.

Storage optimized instances are designed to deliver tens of thousands of low latency, random IOPS to applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

IOPS

A

input/output operations per second

performance of a storage device.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

EC2 Pricing Models

A 
On demand, 
  EC2 savings plans,
  reserved instances, 
  spot instances, 
  dedicated hosts.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

EC2: On Demand Pricing

A

short term, irregular workloads that cannot be interrupted.
No upfront costs or minimum contracts apply.
run continuously until stopped
pay for compute time used
applications that have unpredictable usage patterns
not for work lasting > year (use Reserved Instances).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

EC2: Savings Plans Pricing

A

1 - 3 year term.

savings of up to 72% over On Demand costs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

EC2: Reserved Instances Pricing

A

Standard, Convertible, Scheduled
Standard & Convertible for 1 - 3 year
Scheduled Reserved Instances for a 1 year term.

greater cost savings with the 3 year option.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

EC2: Spot Instances Pricing

A

For flexible start and end times, or that can withstand interruptions.
cost savings at up to 90% vs. On Demand

2-Minute Warning before stop/hibernate/terminate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

EC2: Dedicated Hosts Pricing

A

physical servers with Amazon EC2 instance capacity that is fully dedicated to your use.
use your existing per socket, per core, or per VM software licenses.
On Demand Dedicated Hosts and Dedicated Hosts Reservations.
Dedicated Hosts are the most expensive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

EC2 Auto Scaling

A

automatically add or remove Amazon EC2 instances in response to changing application demand.

Dynamic scaling responds to changing demand.
Predictive scaling automatically schedules on predicted demand.
Can set minimum capacity, desired capacity, and maximum capacity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Elastic Load Balancing

A

automatically distributes incoming application traffic across multiple resources, such as Amazon EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Amazon SNS

A

Simple Notification Service is a publish/subscribe service. NS topics, a publisher publishes messages to subscribers. subscribers can be web servers, email addresses, AWS Lambda functions, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Amazon SQS

A

Simple Queue Service.
send, store, and receive messages between software components, without losing messages or requiring other services to be available.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Serverless Computing

A

code runs on servers, but you do not need to provision or manage these servers.
focus more on innovating new products and features instead of maintaining servers.
AWS Lambda, fargate, sqs, sns, s3, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

AWS Lambda

A

Run code without provision or manage servers.
pay only for the compute time that you consume.
E.G. automatically resizing uploaded images to the AWS Cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Containers

A

package application code and dependencies into a single object.
can also use containers for processes and workflows in which there are essential requirements for security, reliability, and scalability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Amazon ECS

A

Elastic Container Service.
highly scalable, high performance container management system that enables you to run and scale containerized applications on AWS.
supports Docker containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Amazon EKS

A

Elastic Kubernetes Service. fully managed service that you can use to run Kubernetes on AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Kubernetes

A

open source software that enables you to deploy and manage containerized applications at scale. A large community of volunteers maintains Kubernetes, and AWS actively works together with the Kubernetes community.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

AWS Fargate

A

serverless compute engine for containers. It works with both Amazon ECS and Amazon EKS. do not need to provision or manage servers. AWS Fargate manages your server infrastructure for you.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

AWS Regions

A

consists of multiple, isolated, and physically separate AZ’s within a geographic area. 24 regions today. Select based on compliance, proximity, available services, pricing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

AWS AZs

A

Availability Zones. 77 globally. is a single data center or a group of data centers within a Region. located tens of miles apart from each other, close for low latency between AZs, but distant enough to reduce the chance disaster affects multiple AZs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Edge Locations

A

a site that Amazon CloudFront uses to store cached copies of your content

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

AWS Management Console

A

a web based interface for accessing and managing AWS services. can also use the AWS Console mobile application. Multiple identities can stay logged into the AWS Console mobile app at the same time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

AWS Command Line Interface

A

enables you to control multiple AWS services directly from the command line within one tool. AWS CLI is available for users on Windows, macOS, and Linux. Can automate the actions that your services and applications perform through scripts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

AWS SDK

A

Software Development Kits. use AWS services through an API designed for your programming language or platform. Supported programming languages include C++, Java, .NET, and more.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

AWS Elastic Beanstalk

A

you provide code and configuration settings for web apps, and Elastic Beanstalk deploys the resources necessary to perform the following tasks: Adjust capacity, load balancing, automatic scaling, application health monitoring.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

AWS CloudFormation

A

treat your infrastructure as code. you can build an environment by writing lines of code instead of using the AWS Management Console to individually provision resources..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Amazon VPC

A

Virtual Private Cloud. A networking service. enables you to provision an isolated section of the AWS Cloud. VPCs connected via IG, VPG, AWS DC. Resources in VPC organized into subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

IG

A

Internet Gateway. A connection between a VPC and the internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

VPG

A

Virtual Private Gateway. allows protected internet traffic from approved networks into VPC. enables virtual private network (VPN) connection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

AWS DC

A

Direct Connect. establish a dedicated private connection between your data center and a VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Subnets

A

Public and Private subnets. Networking organization within VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

ACL

A

Access Control List. Virtual firewall in VPC. checks packet permissions for subnets. Default allows all in/out traffic. Custom network ACLs in/out denied until rules added. All ACLs Explicit Deny… if no matching rule, is denied.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Stateless Filtering

A

Network ACLs perform stateless packet filtering. They remember nothing and check packets that cross the subnet border each way: inbound and outbound.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Security Groups

A

a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance. By default, a security group denies all inbound traffic and allows all outbound traffic. Multiple Amazon EC2 instances within a subnet can be same SG or different SGs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Stateful Filtering

A

Security groups perform stateful packet filtering. They remember previous decisions made for incoming packets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

DNS

A

Domain Name System. Phone book for the internt. Matches domain names with IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Amazon Route 53

A

Is a DNS web service. Connects user requests to infrastructure running in AWS. Can register domain names with R53 and transfer DNS records for existing domain names managed by other domain registrars.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Amazon EBS

A

Elastic block store.
block level storage for EC2.
if EC2 instance terminated, data on EBS volume remains available.
incremental backups of EBS volumes via creating Amazon EBS snapshots.
Single AZ.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Instance Store

A

temporary block storage for EC2 instance.
physically attached to EC2 host
same lifespan as EC2 instance.
data in instance store lost at EC2 termination.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

EBS Snapshot

A

Elastic Block Store incremental backup.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Amazon S3

A

Simple Storage Service
Object level storage in buckets.
Any file type.
Max file size = 5TB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Amazon S3 Classes

A

Standard, Standard Infrequent Access (S IA), One Zone Infrequent Access (1Z IA), Intelligent Tiering, Glacier, Glacier Deep Archive).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

S3 Standard

A

Designed for frequently accessed data, min 3x AZ. websites, content distribution, and data analytics. S3 Standard has a higher cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

S3 Standard IA

A

Ideal for infrequently accessed data, Similar to S3 Standard but has a lower storage price and higher retrieval price. Infrequently accessed, but needs high availability. Min 3x AZs. Lower storage price, higher retrieval price.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

S3 One Zone IA

A

Stores data in a single Availability Zone, Has a lower storage price than S3 Standard IA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

S3 Intelligent Tiering

A

Ideal for data with unknown or changing access patterns, Requires a small monthly monitoring and automation fee per object. @ 30 days > IA tier, @ 90 days > archive tier, @180 days, > deep archive tier. If access in IA tier, moves back to Standard.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

S3 Glacier

A

Durable (11 Nines of durability)
Lower cost than other s3 products

retrieval:
     Expedited: 1 5 min
     Standard: 3 5 hours
     Bulk: 5 12 hours
  AES 256 encryption
  multiple copies on multiple devices, multiple AZs
  Write once/read many capable
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

S3 Glacier Deep Archive

A

Durable (11 Nines of durability)
Lowest cost object storage class
retrieval:

 Standard: 12 hours   

 Bulk: 48 hours

 moves copy of data into temporary S3 1Z
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

File Storage

A

multiple clients (such as users, applications, servers, and so on) can access data that is stored in shared file folders. In this approach, a storage server uses block storage with a local file system to organize files. Clients access data through file paths. ideal for use cases in which a large number of services and resources need to access the same data at the same time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Amazon EFS

A

Elastic File System
Linux file systems

  in cloud and/or on prem servers (via direct connect or vpn)
  automatically scales with files stored
  2 Performance Modes
     General Purpose, Max I/O
  2 Storage Classes
     Standard, Infrequent Access (IA)

Across multiple AZs
no min fees or setup costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Relational Database

A

data is stored in a way that relates it to other pieces of data. use structured query language (SQL) to store and query data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Amazon RDS

A

Relational Database Service. managed service that automates tasks such as hardware provisioning, database setup, patching, and backups. Can integrate with other AWS services (e.g. Lambda).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Amazon RDS DB Engines

A

Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, Microsoft SQL Server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Amazon Aurora

A

enterprise class relational database. It is compatible with MySQL and PostgreSQL. up to five times faster than standard MySQL databases and up to three times faster than standard PostgreSQL databases. replicates six copies of your data across three Availability Zones and continuously backs up your data to Amazon S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Nonrelational Database

A

you create tables. A table is a place where you can store and query data. NoSQL. E.g. key value pairs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Amazon DynamoDB

A

a key value database service. It delivers single digit millisecond performance at any scale. Serverless. Automatic Scaling.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Amazon Redshift

A

a data warehousing service that you can use for big data analytics. It offers the ability to collect data from many sources and helps you to understand relationships and trends across your data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

AWS DMS

A

Database Migration Service. enables you to migrate relational databases, nonrelational databases, and other types of data stores. Move from source to target db. Can be same or different types. Source data operational during migration. Dev and testing, consolidation, replication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Amazon DocumentDB

A

a document database service that supports MongoDB workloads.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Amazon Neptune

A

a graph database service. You can use Amazon Neptune to build and run applications that work with highly connected datasets, such as recommendation engines, fraud detection, and knowledge graphs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Amazon QLDB

A

Quantum Ledger Database is a ledger database service. You can use Amazon QLDB to review a complete history of all the changes that have been made to your application data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Amazon Managed Blockchain

A

a service that you can use to create and manage blockchain networks with open source frameworks. Blockchain is a distributed ledger system that lets multiple parties run transactions and share data without a central authority.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Amazon ElastiCache

A

a service that adds caching layers on top of your databases to help improve the read times of common requests. It supports two types of data stores: Redis and Memcached.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

Amazon DAX

A

DynamoDB Accelerator. an in memory cache for DynamoDB. It helps improve response times from single digit milliseconds to microseconds.

72
Q

Shared Responsibility Model

A

AWS is responsible for security OF the cloud. Customer responsible for security IN the cloud.

73
Q

AWS IAM

A

Identity and Access Management.
manage access to AWS services and resources securely.
IAM users, groups, and roles, IAM policies, Multi factor authentication.

74
Q

Root User

A

email address and password that you used to create your AWS account.
complete access to all the AWS services and resources in the account.
Do not use the root user for everyday tasks.

75
Q

IAM User

A

an identity in AWS.
person or application that interacts with AWS services and resources
name and credentials for each person who needs to access AWS.
new IAM user in AWS, it has no permissions associated.

76
Q

IAM Policies

A

a document that allows or denies permissions to AWS services and resources.
customize users’ levels of access to resources.
Follow the security principle of least privilege when granting permissions.

77
Q

IAM Groups

A

An IAM group is a collection of IAM users. Can assign IAM policies to groups.

78
Q

IAM Roles

A

An IAM role is an identity that you can assume to gain temporary access to permissions. IAM roles are ideal for situations in which access to services or resources needs to be granted temporarily, instead of long term.

79
Q

MFA

A

Multi Factor Authentication. Requires a second device (other than U/N and P/W) to authenticate.

80
Q

AWS Organizations

A

multiple AWS accounts within a central location.
root is parent container for accounts in organization.
Can use Service Control Policies (SCP) to control permissions for AWS accounts in org.
consolidated billing.

81
Q

OUs

A

Organizational Units.
group accounts into OUs
easier to manage accounts with similar business or security requirements.
policies applied to OU, are inherited by all accounts in the OU
easily isolate workloads or applications that have specific security requirements.

82
Q

AWS Artifact

A

on demand access to AWS security and compliance reports and select online agreements.
Artifact Agreements and Artifact Reports.

83
Q

AWS Artifact Agreements

A

Boilerplate agreements to address needs of customers who are subject to specific regulations, such as the Health Insurance Portability and Accountability Act (HIPAA).

84
Q

AWS Artifact Reports

A

compliance reports from third party auditors.

85
Q

Customer Compliance Center

A

Customer compliance stories
relate how companies in regulated industries have solved various compliance, governance, and audit challenges.
compliance whitepapers
includes an auditor learning path.

86
Q

DoS Attack

A

Denial of Service attack.
deliberate attempt to make a website or application unavailable to users.
Originates from a Single Source

87
Q

DDoS Attack

A

Destributed Denial of Service Attack.

multiple sources are used to start an attack

88
Q

AWS Shield

A

a service that protects applications against DDoS attacks.

Two tiers: Standard and Advanced

89
Q

AWS Shield Standard

A

Automatic, no cost protection from common, frequently occurring types of DDoS attacks.
Uses variety of analysis techniques to detect maliciois traffic and mitigate

90
Q

AWS Shield Advanced

A

paid service
detailed attack diagnostics
detect and mitigate sophisticated DDoS attacks.
Integrates with CloudFRONT, Route 53, ELB, etc.
Can integrate Shield with AWS WAF by writing custom rules.

91
Q

AWS KMS

A

Key Management Service.
encryption using cryptographic keys.
create, manage, and use cryptographic keys.
control the use of keys across a wide range of services and in your applications.

92
Q

AWS WAF

A

Web Application Firewall.
monitor network requests that come into your web applications.
Works with CloudFront and Application Load Balancer.
Uses Web ACL.

93
Q

Amazon Inspector

A

automated security assessments.
prioritizes by severity level, including a detailed description of each security issue and a recommendation for how to fix it.

94
Q

Amazon GuardDuty

A

intelligent threat detection for AWS infrastructure and resources.
do not have to deploy or manage any additional security software.
continuously analyzes data from multiple AWS sources, including VPC Flow Logs and DNS logs.

95
Q

Amazon CloudWatch

A

enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics. uses metrics to represent the data points for your resources.

96
Q

Amazon CloudWatch Alarms

A

automatically perform actions if the value of your metric has gone above or below a predefined threshold.

97
Q

Amazon CloudWatch Dashboard

A

enables you to access all the metrics for your resources from a single location. customize separate dashboards for different business purposes, applications, or resources.

98
Q

AWS CloudTrail

A

records API calls for your account. includes the identity of the API caller, the time of the API call, the source IP address of the API caller, and more.

99
Q

AWS CloudTrail Insights

A

optional feature allows CloudTrail to automatically detect unusual API activities in your AWS account.

100
Q

AWS Trusted Advisor

A

a web service that inspects your AWS environment and provides real time recommendations in accordance with AWS best practices. five categories: cost optimization, performance, security, fault tolerance, and service limits.

101
Q

AWS Free Tier

A

Always Free, 12 months free (first 12 months after opening account), Trials (short term product trials).

102
Q

AWS Pricing Principles

A

Pay for what you use; pay less when you reserve; pay less with volume based discounts when you use more.

103
Q

AWS Billig Dashboard

A

pay your AWS bill, monitor your usage, and analyze and control your costs. Compare your current month to date balance with the previous month, and get a forecast of the next month based on current usage. View month to date spend by service. View Free Tier usage by service. Access Cost Explorer and create budgets. Purchase and manage Savings Plans. Publish AWS Cost and Usage Reports.

104
Q

Consolidated Billing

A

receive a single bill for all AWS accounts in your organization. The default maximum number of accounts allowed for an organization is 4, but you can contact AWS Support to increase your quota, if needed. you can review itemized charges incurred by each account. share bulk discount pricing, Savings Plans, and Reserved Instances across the accounts in your organization.

105
Q

AWS Budgets

A

create budgets to plan your service usage, service costs, and instance reservations. updates three times a day

106
Q

AWS Cost Explorer

A

enables you to visualize, understand, and manage your AWS costs and usage over time. includes a default report of the costs and usage for your top five cost accruing AWS services. You can apply custom filters and groups

107
Q

AWS Support

A

Basic, Developer, Business, Enterprise

108
Q

AWS Support: Basic

A

free for all AWS customers. whitepapers, documentation, and support communities. access to a limited selection of AWS Trusted Advisor checks. can use the AWS Personal Health Dashboard

109
Q

AWS Support: Developer

A

Best practice guidance, Client side diagnostic tools, Building block architecture support, which consists of guidance for how to use AWS offerings, features, and services together

110
Q

AWS Support: Business

A

Use case guidance to identify AWS offerings, features, and services that can best support your specific needs, All AWS Trusted Advisor checks, Limited support for third party software, such as common operating systems and application stack components

111
Q

AWS Support: Enterprise

A

Application architecture guidance, which is a consultative relationship to support your company’s specific use cases and applications, Infrastructure event management: A short term engagement with AWS Support that helps your company gain a better understanding of your use cases. This also provides your company with architectural and scaling guidance. A Technical Account Manager

112
Q

Technical Account Manager (TAM)

A

With an Enterprise Support plan. Primary POC at AWS. provide guidance, architectural reviews, and ongoing communication with your company as you plan, deploy, and optimize your applications.

113
Q

AWS Marketplace

A

igital catalog that includes thousands of software listings from independent software vendors. You can use AWS Marketplace to find, test, and buy software that runs on AWS. several categories, such as Infrastructure Products, Business Applications, Data Products, and DevOps.

114
Q

AWS CAF

A

Cloud Adoption Framework. 6 Perspectives. Business, People, Governance, Platform, Security, Operations

115
Q

CAF Business Perspective

A

ensures that IT aligns with business needs and that IT investments link to key business results. Business managers, Finance managers, Budget owners, Strategy stakeholders

116
Q

CAF People Perspective

A

supports development of an organization wide change management strategy for successful cloud adoption. Human resources, Staffing, People managers

117
Q

CAF Governance Perspective

A

focuses on the skills and processes to align IT strategy with business strategy. Chief Information Officer (CIO), Program managers, Enterprise architects, Business analysts, Portfolio managers

118
Q

CAF Platform Perspective

A

principles and patterns for implementing new solutions on the cloud, and migrating on premises workloads to the cloud. Chief Technology Officer (CTO), IT managers, Solutions architects

119
Q

CAF Security Perspective

A

ensures that the organization meets security objectives for visibility, auditability, control, and agility. Chief Information Security Officer (CISO), IT security managers, IT security analysts

120
Q

CAF Operations Perspective

A

helps you to enable, run, use, operate, and recover IT workloads to the level agreed upon with your business stakeholders. IT operations managers, IT support managers

121
Q

Six Strategies for Migration

A

rehosting, replatforming, refactoring/re architecting, repurchasing, retaining, retiring.

122
Q

Rehosting

A

lift and shift” involves moving applications without changes.

123
Q

Replatforming

A

“lift, tinker, and shift,” involves making a few cloud optimizations to realize a tangible benefit. Optimization is achieved without changing the core architecture of the application.

124
Q

Refactoring/re architecting

A

reimagining how an application is architected and developed by using cloud native features. Refactoring is driven by a strong business need to add features, scale, or performance that would otherwise be difficult to achieve in the application’s existing environment.

125
Q

Repurchasing

A

moving from a traditional license to a software as a service model.

126
Q

Retaining

A

keeping applications that are critical for the business in the source environment. This might include applications that require major refactoring before they can be migrated, or, work that can be postponed until a later time.

127
Q

Retiring

A

removing applications that are no longer needed.

128
Q

AWS Snowcone

A

small, rugged, and secure edge computing and data transfer device. It features 2 CPUs, 4 GB of memory, and 8 TB of usable storage.

129
Q

AWS Snowball (Storage Optimized)

A

Storage Optimized: large scale data migrations and recurring transfer workflows, 80TB block/S3, 1TB SSD block, 40v CPU & 80 GiB memory for EC2 sbe1 Instances

130
Q

AWS Snowball (Compute Optimized)

A

use cases such as machine learning, full motion video analysis, analytics, and local computing stacks. 42TB for S3/EBS, 7.68 TB SSD for EBS, 52 vCBU, 208 GiB memory, optional GPU

131
Q

AWS Snowmobile

A

exabyte scale data transfer service used to move large amounts of data to AWS. You can transfer up to 100 petabytes of data per Snowmobile, a 45 foot long ruggedized shipping container, pulled by a semi trailer truck.

132
Q

AWS Well Architected Framework

A

Operational Excellence, Security, Reliability, Performacne Efficiency, Cost optimization

133
Q

Operational Excellence

A 
Run/monitor systems for business value
  organization
  prepare
  operate
  evolve
134
Q

Security Groups

A

the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies.

135
Q

Reliability

A

the ability of a system to do the following: Recover from infrastructure or service disruptions, Dynamically acquire computing resources to meet demand, Mitigate disruptions such as misconfigurations or transient network issues

136
Q

Performance Efficiency

A

the ability to use computing resources efficiently to meet system requirements and to maintain that efficiency as demand changes and technologies evolve.

137
Q

Cost Optimization

A

the ability to run systems to deliver business value at the lowest price point.

138
Q

Workload

A

Collection of interrelated applications, infrastructure, policy, governance, and operations running on aws that provide business or operational value.

139
Q

Pillars of Well Architected

A 
operational excellence
  security
  reliability
  performance efficiency
  cost optimization
140
Q

Well Architected: Operational Excellence

A

organization, priorities & structure
prepare, design for operations
operate, health of workload
evolve, learn from experiences

141
Q

Well Architected: Security

A 
identity & access management
  detection
  infrastructure protection
  data protection
  incident response
142
Q

Well Architected: Reliability

A

foundations
Workload architecture
change management
failure management

143
Q

Well Architected: Reliability

A

selection of right resources
review selections periodically
monitor performance of resources
trade offs between performance and efficiency

144
Q

Well Architected: cost optimization

A 
cloud financial management
  spend and usage awareness
  cost effective resources
  manage demand and supply resources
  optimize over time
Achieve critical business outcomes at lowest cost
145
Q

AWS Data Center Security Layers

A

Perimeter (physical security)
Environmental (force majeure)
Infrastructure (fire, hvac, power)
Data (data protection/destruction policies)

146
Q

User Access Keys

A

Used for AWS CLI, the AWS SDKs, or direct HTTPS

Each user can have two active access keys

147
Q

EC2 Key Pairs

A

For SSH or RDP connections to an Amazon Elastic Cloud Compute (EC2) instance.

No identity tracking not best for daily access. Use Active Directory or LDAP routinely.

148
Q

AWS Secrets Manager

A

centrally manage access secrets for AWS, on premises, and third party services.
database credentials, passwords, third party API keys, and even arbitrary text.
replace hardcoded credentials in your code with an API call to Secrets Manager to retrieve the secret programmatically.
automatically rotate the secret

149
Q

AWS SSO

A

Single Sign On
Compatible with Microsoft Active Directory
Access multiple AWS accounts

150
Q

AWS Security Token Service (STS)

A

web service for temporary, limited privilege credentials for IAM users.
used for users taking different role or are being federated.

151
Q

AWS Managed Microsoft AD

A

AWS Directory Service for Microsoft Active Directory
enables Active Directory in the AWS Cloud.
built on actual Microsoft Active Directory and does not require you to synchronize or replicate data from your existing Active Directory to the cloud.

152
Q

AWS Organizations

A

Centrally manage and enforce policies for multiple AWS accounts.
group accounts into organizational units and use service control policies to centrally control AWS services.
automate the creation of new accounts through APIs
simplify billing w/ single payment method for all accounts in organization w/ consolidated billing.
no additional charge for service

153
Q

Amazon Cognito

A

add user sign up, sign in, and access controls to your web and mobile apps.
define roles and map users to different roles. User sign in by a third party identity provider, or directly via Amazon Cognito.

154
Q

AWS Detective Controls

A

capture & collect logs (CloudTrail)
monitoring & notification (CloudWatch)
Auditing (Mgmt Console & CLI): S3, ELB, CloudWatch, CloudTrail, and VPC

155
Q

AWS Config

A

continuous monitoring and assessment
detect non compliance configurations almost in real time.
view current and historic configurations

156
Q

AWS infrastructure Protection

A 
via Isolation. VPC: subnet routing, ACLs, Security Groups
  App/OS Security w/ AWS Systems Manager
  AWS Firewall Manager
  AWS Direct Connect
  AWS CloudFormation
157
Q

AWS Firewall

A

centrally configure and manage AWS WAF rules across your accounts and applications

158
Q

AWS Data Protection Concepts

A

Protection at Rest:
Client side encryption (user managed) &
Server side encryption (AWS managed)

Protection in transit:
HTTPS endpoints using TLS
deploy, and manage public and private certificates used for TLS w/ AWS
IPsec with VPN connectivity into AWS

159
Q

AWS CloudHSM

A

hardware security modules (HSM) in AWS Cloud. (a computing device that processes cryptographic operations and provides secure storage for cryptographic keys)

160
Q

AWS Certificate Manager (ACM)

A

creates and manages public SSL/TLS certificates for AWS based websites and applications.

ACM can also be used to issue private SSL/TLS X.509 certificates that identify users, computers, applications, services, servers, and other devices internally.

161
Q

Amazon Macie

A

uses machine learning to automatically discover, classify, and protect sensitive data in AWS.

recognizes sensitive data such as personally identifiable information (PII) or intellectual property.

dashboards and alerts give visibility into data access/movement

162
Q

Security Incident Response

A

APIs automate incident response tasks
Forensics using EBS snapshots
CloudFormation to quickly create new trusted environment
AWS Step Functions to tie together multiple steps in a forensic/recovery process.

163
Q

AWS Step Functions

A

coordinate multiple AWS services into serverless workflows.
build and update apps quickly.
design and run workflows that stitch together services such as AWS Lambda and AWS CloudFormation.

164
Q

DDoS Mitigation

A

Using AWS Edge. Diversifies points of access between services and data accessed via web.
Route 53, CloudFront, Shield

165
Q

AWS Web Application Firewall (WAF)

A

protects from common web exploits.

customizable web security rules.

166
Q

DAS

A

Direct Attached Storage
HDD, SSD
physically attached to server

167
Q

SAN

A

Storage Area Network
centralized block storage
disk arrays, tape storage
usually isolated from LAN (LAN & SAN traffic don’t compete for bandwidth )

168
Q

RAID

A

Redundant Array of Independent Disks
block storage
works on Amazon EBS (software level RAID)

RAID 5/6 not recommended on EBS, consomes IOPS available

169
Q

Block Storage Downsides

A

connected to one server at a time (if server goes down, needs be connected to another)

no metadata
pay for all storage within a block whether used or not (EBS scales blocks, not bits)

170
Q

Block Storage Use Cases

A

backup/recovery
persistent local storage
relational/noSQL databases

data warehousing
enterprise applications
big data processing

171
Q

Amazon EBS Volume Types

A

SSD Volumes

gp2 (default for EBS)
gp3 (new gen, 20% cheaper than gp2)

io1 (high IOPS)

io2 (faster than io1)

io2 Block Express (fastest)

HDD Volumes
st1 (throughput optimized)
sc1 (cold HDD)

172
Q

Amazon FSx

A

Managed File Storage System

for Windows:
SSD backed
Native support for NTFS, SMB, Active Directory, DFS
Automatic daily backup
for CRM, ERP, Active Directory, dotnet, home directory, etc.

Lustre
Parallel Distributed File System
high performance for compute intensive apps
ML, modeling, big data, video processing
data on many servers accessible by many compute instances concurrently

173
Q

Object Based Storage

A

Data stored as objects in a bucket.
Accessed via metadata and unique object ID
Amazon S3

PRO:
  Scalability, durability, cost
CON:
  interface & application compatibility
  performance (slower than file/block storage)
174
Q

Hybrid Data Storage Architectures

A

typically use cloud storage appliance
Data Cache

Hot Data is frequently read/write

Cold Data: less frequently read/write

Dirty Data: written, not yet uploaded to cloud

Dirty data is uploaded to buffer and then to storage appliance

User reads data from cache. If not there, downloaded from cloud.

175
Q

AWS Storage Gateway

A

File Gateway Appliance
SMB/NFS integrated

Volume Gateway Appliance
iSCSI integration

Tape Gateway Appliance
virtual tape storage appliance
iSCSI/VTL integration

176
Q

File Transfer Protocols

Amazon File Systems & Storage Gateway
S3
AWS Data Transfer

A

Amazon FS/Storage Gateway:
iSCSI, NFS, SMB, NTFS

Amazon S3
RESTful API, AWS SDKs

AWS Data Transfer
FTP, SFTP

AWS Cloud Practitioner - Zed (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions