EC2 Flashcards

1
Q

T or F

Termination Protection is enabled by default.

A

False. You must enable it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

T or F

On an EBS-backed instance, the default action is for the root EBS volume to be deleted when the instance is terminated.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

T or F

EBS Root Volumes of your DEFAULT AMI’s CAN be encrypted.

A

True.

You can also use a third party tool (such as bit locker, etc.) to encrypt the root volume, or this can be done whnen creating AMI’s (lab to follow) in the AWS console or using the API.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Security Groups are…

A

Stateful. Meaning that if and inbound rule is created an outbound rule is automatically created.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is EBS?

A

Elastic Block Storage.

EBS provides persistent block storage volumes for use with Amazon EC2 instances in the AWS Cloud.

Each Amazon EBS Volume is automatically replicated within it’s Availability Zone to protect you from component failure, offering high availability and durability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the 5 types of EBS Storage;

A
  • General Purpose (SSD)
  • Provisioned IOPS (SSD)
  • Throughput Optimized Hard Disk Drive
  • Cold Hard Disk Drive
  • Magnetic
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Compare EBS Types

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Ephemeral Storage

A

Storage that only exists while the EC2 instance is running. A reboot will wipe everything off.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Instance Store Volumes are sometimes called…

A

Ephemeral

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

True/False: Instance store volumes cannot be stopped.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Elastic Network Adapter (ENA) supports network speeds of up to…

A

100 Gbps for supported instance types.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Virtual Function (VF) interface supports network speeds of up to…

A

10 Gbps for supported instance type…usually older.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is an Elastic Fabric Adapter?

A

Elastic Fabric Adapter (EFA) is a network device that you can attach to your Amazon EC2 instance to accelerate High Performance Computing (HPC) and machine learning applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

When to use ENI?

A

For basic networking. Perhaps you need a separate management network to your production network or a separate logging network and you need to do this at low cost. In this scenario use multiple ENIs for each network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

When to use Enhanced Network something like ENA?

A

When you need speeds between 10 Gbps and 100 Gbps. Anywhere you need reliable, high throughput.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When to use an Elastic Fabric Adapter

A

when you need to accelerate High Performance Computing (HPC) and machine learning application of if you need to do an OS by-pass. If you see a scenario question mentioning HPC or ML and asking what network adapter you want, choose EFA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is a spot instance?

A

It’s the same concept as a spot trade but can also be persistent.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are spot fleets?

A

Spot fleets are a collection of Spot Instances and, optionally, On-Demand Instances.

18
Q

What are spot fleets?

A

Spot fleets are a collection of Spot Instances and, optionally, On-Demand Instances.

18
Q

What are spot fleets?

A

Spot fleets are a collection of Spot Instances and, optionally, On-Demand Instances.

19
Q

Spot Fleet Strategies: capacityOptimized

A

The Spot Instances come form the pool with optimal capacity for the number of instances launching.

20
Q

Spot Fleet Strategies: diversified

A

The Spot Instances are distributed across all pools.

21
Q

Spot Fleet Strategies: lowestPrice

A

The Spot Instances come from the pool with the lowest price. This the the default strategy.

22
Q

Spot Fleet Strategies: InstancePoolsToUseCount

A

The Spot Instances are distributed across the number of Spot Instance pools you specify. This parameter is valid only when used in combination with lowestPrice.

23
Q

Spot instances save up __% of the cost of On-Demand Instances.

A

90

24
Q

You can block Spot Instances from terminating by using…

A

Spot block.

25
Q

Spot Instances are useful for any type of computing where you don’t need…

A

persistent storage.

26
Q

EC2 Hibernate preserves the in-memory RAM…

A

on persistent storage, but Instance RAM must be less than 150 GB.

27
Q

CloudWatch vs CloudTrail

A

CloudWatch is about performance monitoring. CloudTrail is about auditing. (API calls within the AWS platform.)

28
Q

What can you do with CloudWatch

A
  • Dashboards
  • Alarms/Alerts
  • Events
  • Logs
29
Q

Tell me 4 things about IAM Roles

A
  1. Roles are more secure than storing your access key and secret access key on individual EC2 instances.
  2. Roles are easier to manage.
  3. Roles can be assigned to an EC2 instance after it is created using both the console & command line.
  4. Roles are universal – you can use them in any region.
30
Q

How to get metadata about your EC2?

A

curl http://169.254.169.254/latest/meta-data

curl http://169.254.169.254/latest/user-data

31
Q

What is Amazon FSx for Windows

A

It provides a fully managed native MS Windows file system so you can easily move your Windows-based application that require file storage to AWS. It is built on Windows Server.

32
Q

Tell me something about Amazon FSx Lustre

A

It is a fully managed file system that is optimized for compute-intensive workloads, such as high-performance computing, machine learning, media data processing workflows, and electronic design automation. I can process massive data sets at up to hundreds of gigabytes per second of throughput, millions of IOPS, and sub-millisecond latencies.

33
Q

What is a cluster placement group

A

A cluster placement group is a grouping of instances within a single Availability Zone. Placement groups are recommended for applications that need low network latency, high network throughput, or both.

34
Q

What is a spread placement group?

A

A group of instances that are each placed on distinct underlying hardware. Recommended for applications that have a small number of critical instances that should be kept separate from each other. THINK - individual instances.

35
Q

What is a Partitioned Placement Group

A

When using partition placement groups, Amazon EC2 divides each group into logical segments called partitions. Amazon EC2 ensures that each partition within a placement group has its own set of racks. Each rack has its own network and power source. No two partitions within a placement group share the same racks, allowing you to isolate the impact of hardware failure within your application. THINK - Multiple instances.

36
Q

What is enhanced networking?

A
  • It uses single root I/O virtualization (SR-IOV) to provide high-performance networking capabilities on supported instance types.
  • SR-IOV is a method of device virtualization that provides higher I/O performance and lower CPU utilization when compared to traditional virtualized network interfaces.
  • Enhanced networking provides higher bandwidth, higher packet per second (PPS) performance, and consistently lower-inter-instance latencies. There is NO ADDITIONAL CHARGE for enhanced networking.
  • Use this when you want good network performance.
37
Q

What is an Elastic Fabric Adapter?

A
  • An Elastic Fabric Adapter (EFA) is a network device you can attach to your Amazon EC2 instance to accelerate HPC and machine learning applications.
  • EFA provides lower, more consistent latency and higher throughput than the TCP transport traditionally used in cloud-based HPC systems.
  • EFA can us OS-bypass, which enables HPC and machine learning applications to bypass the operating system kernel and communicate directly with the EFA device. It makes it a lot faster with much lower latency. It is not supported with Windows currently–only LInux.
38
Q

What are the storage services that allow us to achieve HPC on AWS

A

Instance-attached storage:

  • EBS - Scale up to 64,000 IOPS with Provisioned IOPS (PIOPS)
  • Instance Store: Scale to millions of IOPS; low latency

Network storage:

  • Amazon S3:
  • Amazon EFS: Scale IOPS based on total size, or use Provisioned IOPS
  • Amazon FSx for Lustre: HPC-optimized distributed file system; millions of IOPS, which is also backed by S3.
39
Q

What are the orchestration and automation services that allow us to achieve HPC on AWS?

A

AWS Batch - Enables developers, scientists, and engineers to easily and efficiently run hundreds of thousands of batch computing jobs on AWS. AWS Batch supports multi-node parallel jobs, which allows you to run a single job that spans multiple EC2 instances. You can easily schedule jobs and launch EC2 instances according to your needs.

AWS Parallel Cluster - Open-source cluster management tool that makes it easy for you to deploy and manage HPC clusters on AWS. ParallelCluster uses simple text file to model and provision all the resources needed for your HPC applications in an automated and secure manner. Automate creation of VPC, subnet, cluster type, and instance types.

40
Q

What is AWS WAF (Web Application Firewall)

A

AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront, an Application Load Balancer or API Gateway.

AWS WAF also lets you control access to your content.

41
Q

At its most basic level, AWS WAF allows what 3 different behaviors:

A
  1. Allow all requests except the ones you specify
  2. Block all requests except the ones you specify
  3. Count the requests that match the properties you specify