Domain 4 Flashcards

1
Q

True or False - Ephemeral storage is lowest cost and is temporary

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or False - EBS provides snapshot functionality

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an EBS snapshot?

A

Amazon Elastic Block Store (EBS) snapshots are point-in-time copies of your Amazon EBS volumes. Snapshots are incremental, meaning that only the data that has changed since your last snapshot is saved,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is AWS Trusted Advisor?

A

AWS Trusted Advisor is a service that provides real-time guidance to help you optimize your AWS environment according to best practices. It analyzes your AWS resources to help you reduce costs, improve performance, enhance security, and increase fault tolerance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How can CloudWatch help with Cost Savings?

A
  1. Metrics to help better understand over or under utilization
  2. Alarms - Cost alarms
  3. Auto scaling - Increase or decrease the number of instances based on demand
  4. Automation - Trigger AWS lambda functions based on CloudWatch events to automate actions like shutting down unused instances during off-hours
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does WAF protect against?

A
  1. SQL Injection
  2. Bots
  3. DDoS mitigation

Note - Pay only for what you use

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Cost Explorer

A

SEE patterns in AWS spending over time, project future costs, identify areas that need further inquiry, observe Reserved Instance utilization, observe Reserved Instance coverage, and receive Reserved Instance recommendations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is AWS Budgets

A

Set custom budgets that trigger alerts when cost or usage exceed (or are forecasted to exceed) a budgeted amount. Budgets can be set based on tags and accounts as well as resource types.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is CloudWatch

A

Collect and track metrics, monitor log files, set alarms, and automatically react to changes in AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Cloud Trail

A

Log, continuously monitor, and retain account activity related to actions across AWS infrastructure at low cost.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

S3 Analytics

A

Automated analysis and visualization of Amazon S3 storage patterns to help you decide when to shift data to a different storage class.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Cost and Usage Report

A

Granular raw data files detailing your hourly AWS usage across accounts used for Do-It-Yourself (DIY) analysis (e.g., determining which Amazon S3 bucket is driving data transfer spend). The AWS Cost and Usage Report has dynamic columns that populate depending on the services you use.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Cost allocation tags

A

Cost allocation tags are labels that you assign to your AWS resources to organize and manage cost reporting. They allow you to categorize and track your AWS costs by defining how costs are allocated across different areas of your business

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is AWS Systems Manager

A

AWS Systems Manager is a service that helps you manage and automate operational tasks across your AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is AWS Backup

A

AWS Backup is designed to provide a simple and scalable solution for backing up data across AWS services, enabling you to protect critical workloads and ensure business continuity with minimal manual intervention.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is AWS Snowmobile?

A

AWS Snowmobile is a service designed to transfer extremely large amounts of data to AWS. It is essentially an exabyte-scale data transfer service used when you need to move large volumes of data—up to 100 petabytes per Snowmobile—directly to AWS. Here’s a closer look at AWS Snowmobile and its key features:

17
Q

What is the Snow family?

A

Snowcone - 8 terabytes of storage. Ideal for edge computing, storage, and data transfer in remote or rugged environments with limited space or connectivity.

Snowball - Snowball devices are designed for efficient data transfer and can also perform edge computing tasks.

Snowmobile - Snowmobile is a massive, truck-sized data transfer service capable of moving up to 100 petabytes of data in a single trip.

18
Q

Summarize CloudFront and cost management

A

By optimizing content delivery and reducing unnecessary data transfer, Amazon CloudFront helps in managing operational costs effectively while maintaining high performance and security standards. The combination of caching, efficient data transfer, and integrated edge computing capabilities makes CloudFront a cost-effective choice for delivering content globally.

19
Q

What does right sizing mean

A

Right sizing is a concept in cloud computing and IT resource management that involves adjusting the size and configuration of computing resources to best fit the actual workload needs.

20
Q

What does elasticity mean

A

Elasticity in the context of cloud computing refers to the ability of a cloud service to automatically scale its resource capacity up or down according to the current demand.

21
Q

How does ElastiCache help with performance and scalability?

A

ElastiCache allows you to significantly improve application performance by caching frequently accessed data and reducing the load on backend databases.

It supports horizontal scaling with the ability to add or remove nodes on demand and provides read replicas and sharding for Redis to scale read-heavy and write-heavy workloads.

22
Q

How does ElastiCache help with High Availability and Reliability

A

Automatic Failover: In case of a node failure, ElastiCache can automatically detect the failure and reroute traffic to healthy nodes.

Multi-AZ Deployments: For Redis, ElastiCache supports Multi-AZ with automatic failover, ensuring high availability and reliability of your cached data.

23
Q

When to use ALB, NLB, CLB, GLB

A

ALB - Load balancing HTTP and HTTPS layer 7 traffic (application layer)

NLB - TCP and UDP traffic and operate at Layer 4 (transport layer)

CLB - Basic level 4 and 7 with no advanced features

GLB - Global user base ensures high availability and automatically directs traffic to healthy endpoints

24
Q

Summarize Read Replicas

A

Read replicas are created using asynchronous replication from the source database instance. This means changes made to the primary database are eventually propagated to the replicas, though there might be some replication lag.

As the name suggests, read replicas are used for read-only operations, such as SELECT queries, to alleviate the load on the primary database, which handles write operations.

In certain scenarios, read replicas can be promoted to standalone instances to serve as a backup in case the primary database becomes unavailable, although they do not provide automatic failover capabilities like a Multi-AZ deployment.

25
Q

What is RTO?

A

Recovery Time Object - It represents the maximum acceptable amount of time that a system, application, or business process can be down after a failure or disaster before it must be restored to operational status.

26
Q

What is RPO?

A

Recovery Point Object - It defines the maximum acceptable amount of data loss measured in time that a business can tolerate due to a disruption. In other words, RPO represents the age of the data you need to restore in order to resume normal operations after a failure.

27
Q

What is Throttling

A

Throttling is a technique used to control the amount of traffic sent or received by a network or a server application. It helps prevent overload by limiting the number of requests that can be processed over a specified period.

28
Q

Summarize Routes in a VPC

A

Within a VPC, routing is a crucial aspect that determines how network traffic is directed. Routes in a VPC are specified in route tables, which control the network traffic flow within and outside the VPC.

29
Q

Common Route Targets

A

Internet Gateway - A route to an IGW is necessary for public subnets, which allow outbound internet traffic.

NAT Gateway/Instance: Allows instances in a private subnet to initiate outbound IPv4 traffic to the internet, while preventing the internet from initiating a connection with those instances.

Virtual Private Gateway: Connects your VPC to a VPN or a Direct Connect connection for communication with on-premises networks.

Virtual Private Gateway: Connects your VPC to a VPN or a Direct Connect connection for communication with on-premises networks.

Transit Gateway: Facilitates connectivity between VPCs, AWS accounts, and on-premises networks.