EC2 Flashcards
How are EC2 subnets arranged within a region?
Each subnet will default into a single availability zone - subnets do not cross availability zones
By default what will happen to the EBS volume attached to an EC2 instance when the instance is terminated?
By default the EBS instance will be deleted
Can EBS root volumes be encrypted?
EBS root volumes of your Default Amazon AMI’s CAN NOT be encrypted. You can use 3rd party tools (such as bitlocker) to encrypt the root volume, or you can do this when creating AMI’s.
What ports are blocked/allowed by default in AWS security groups?
By default all inbound traffic is blocked, all outbound traffic is allowed
How long do changes to security groups take to propagate?
Changes to security groups take effect immmediately
What is the difference between AWS security groups and network ACLs?
AWS security groups are stateful (if you create a rule to allow traffic in it is automatically allowed back out again) while ACLs are stateless (you MUST create separate rules to allow traffic in and out)
Can security groups be used to block traffic from specific IP addresses?
No, to do this you must use ACLs.
Can security groups be used to deny traffic?
No, all traffic is denied by default. Security groups are used to allow traffic but cannot deny traffic.
Can an EBS volume be in a different availability zone from the EC2 instance it is mounted on?
No, they must be in the same availability zone.
What EBS volume types can be modified on the fly without shutting down the EC2 instance?
All types except for Magnetic Storage (Standard) - General Purpose SSD (GP2), Throughput Optomized HDD (ST1), Cold HDD (SC1), Provisioned IOPS SSD (IO1)
How can an EBS volume be moved from one availability zone to another?
You can take a snapshot of an existing EBS volume, then create a new volume from that snapshot in a new availability zone.
How can you move an EC2 instance to a different region?
You must create a snapshot of the instance first, then you can copy that snapshot to a new region.
What RAID configuration should you not use with AWS?
Amazon recommends not ever using RAID 5 on EBS
In EBS why would you use RAID arrays?
RAID arrays would be used on EBS to increase disk I/O performance. This would commonly be used with RAID 0 or RAID 10
What are the 3 common ways to take an application consistent snapshot of a RAID array?
- Freeze the filesystem
- Unmount the RAID array
- Shut down the associated EC2 instance