EC2 Flashcards

1
Q

How to move an EC2 volume from one region to another?

A
  1. Take snapshot of volume
  2. Create AMI from snapshot
  3. Copy AMI to new region
  4. Launch new EC2 instance in new region from copied AMI
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How to move an EC2 volume to a new AZ?

A
  1. Take a snapshot of the volume
  2. Create AMI from snapshot
  3. Use the AMI to launch a new EC2 instance in the new AZ
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Encryption state of snapshots of encrypted volumes?

A

snapshots of encrypted volumes are encrypted automatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Encryption state of a volume restored from an encrypted snapshot

A

The restored volume is encrypted automatically

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Can you share snapshots?

A

Yes, but only if they are unencrypted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How to encrypt an unencrypted root device volume?

A
  1. Create snapshot of root device volume
  2. Create copy of the snapshot and select the encrypt option
  3. Create an AMI from the encrypted snapshot
  4. Use the AMI to launch new encrypted instances
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Alternate name for instance store volumes

A

Ephemeral storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Instance store volumes vs. EBS backed instances

A

Instance store volumes will lose the data if the underlying host fails.
EBS backed instances can be stopped without data loss.

Both can be rebooted without losing data
Both will delete ROOT volumes on termination but EBS volumes have an option to keep the root device volume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

ENI - acronym

A

Elastic Network Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

ENI - definition/info

A

For basic networking; Can use multiple to create separate networks at low cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

EN - acronym

A

Enhanced network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

EN - definition/info

A

For when you need reliable, high throughput.

Supports speeds between 10Gbps and 100Gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

EFA - acronym

A

Elastic Fabric Adaptor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

EFA - definition/info

A

For when you need to accelerate
High Performance Computing (HPC) OR
Machine Learning OR
If you need to do an OS by-pass

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

EC2 Network adapters

A

ENI - elastic network interface
EN - enhanced network
EFA - elastic fabric adaptor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Cloudwatch

A

Used to monitor performance

Can monitor most of AWS as well as apps running on AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Cloudwatch default vs detailed monitoring (EC2)

A

Will monitor every 5 mintutes by default

Will monitor every minute when detailed monitoring is turned on

18
Q

CloudWatch vs CloudTrail

A

CloudWatch is about performance.

CloudTrail is about auditing; monitores API calls

19
Q

What can you create with CloudWatch

A

Dashboards
Alarms
Events
Logs - aggregate, monitor, and store logs

20
Q

EC2 Roles vs Access key + Secret access key

A

Roles are:
easier to manage
able to be assigned to an EC2 instance after it is created via the console & the command line
universal; able to be used in any region

21
Q

Bootstrap scipts

A

Run when an EC2 instance first boots

Can be a powerful way of automating software installs and updates

22
Q

Instance metadata

A

Information about an instance (like public/private IP)

curl http://169.254.169.254/latest/meta-data

23
Q

Instance user data

A

The bootstrap script passed to EC2 instance on boot

curl http://169.254.169.254/latest/user-data

24
Q

EFS - info

A

Supports NFSv4
Can support thousands of concurrent NFS connections
Data stored across multiple AZ’s within a region
Read after write consistency

25
Q

EFS - scenario

A

distributed, highly resilient storage for Linux instances and Linux-based apps

26
Q

FSx for Windows - scenario

A

centralised storeage for Windows based apps

27
Q

FSx for Lustre - scenario

A

high-speed, high capacity distributed storage
For apps that do high performance compute (HPC), financial modeling, etc
Can store data directly on S3

28
Q

EC2 storage mechanisms

A

EFS
FSx for Windwos
FSx for Lustre

29
Q

EC2 placement groups

A

Clustered placement group
Spread placement group
Partitioned

Only certain types of instances can be launched in a placement group

30
Q

Clustered placement group

A

low network latency / high network throughput
all instances on the same rack
recommended to use homogenous instances

31
Q

Spread placement group

A

individual critical EC2 instances

Each instance on a seperate rack

32
Q

Partitioned placement group

A

multiple EC2 instances
Each partition on a seperate rack than the other
HDFS, HBase, and Cassandra

33
Q

Placement group by availability zone capabilities

A

Clustered - cannot span multiple AZs

Spread & Partitioned - can spread multiple AZs

34
Q

Placement group name

A

must be unique

35
Q

placement group merging

A

not possible

36
Q

How to block malicious IP addresses

A

Using AWS WAF

Using Network ACLs

37
Q

SR-IOV

A

Single root I/O virtualization

provides higher I/O performance and lower CPU utilization compared to traditional virtual network interfaces

38
Q

When can you attach/replace an IAM role on an EC2 instance?

A

If no current role: Anytime

If current role: When the instance is in a running state

39
Q

EC2 hypervisors

A

Xen - modified version of Xen Hypervisor

Nitro - new in-house version rolled out in 2017

40
Q

EC2 nitro

A

latest gen EC2 instances that guarantee up to 64,000 IOPS