Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

2019 - AWS CSAA - MINE > EC2 > Flashcards

EC2 Flashcards

1
Q

What are the types of EC2 instances?

A

On-Demand - fixed fee, no commitment
Reserved - with contract
Spot - Bid
Dedicated hosts - physically dedicated system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How are you charged for a partial hour if the prices changes on a spot instance?

A

You will not be charged

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How are you charged for a partial hour if you terminate a spot instance?

A

You will be charged

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the instance types

A 
F
I
G
H
T
D
R
M
C
P
X
Z
A
U
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You delete an EBS instance. What is the default protection behavior?

A

None, it is deleted unless termination protection was turned on

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You delete an EC2 instance, Will addition EBS volumes other than root be retained?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Can default AMI root volumes be encrypted?

A

No.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How can you encrypt a root volume?

A

Use a 3rd party tool or it can be done when creating the AMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can EBS volumes be encrypted?

A

Yes, but not the root when using a default AMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Security group fundamentals?

A 
All inbound is blocked by default
All outbound is allowed
Changes take effect immediately
Unlimited number of EC2 instances can use the same Sec Group
Are stateful
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does stateful mean?

A

When a port is opened it is open for both inbound and outbound

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How can you block IP addresses? Sec groups or NACL’s?

A

NACLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the EBS Types?

A 
GP (SSD)
PIOPS (SSD) = DB-s
TO (HDD) =Big data
Cold (HDD) = File servers
EBS Mag - Infrequently accessed
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

You take an EBS snapshot, where is it stored?

A

S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

T or F Snapshots are Full

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you ensure an EBS snapshot is quiesced?

A

Stop the instance

17
Q

Can you take an EBS snap while the instance is running?

A

Yes

18
Q

Can you create AMI’s from volumes and snapshots?

A

Yes

19
Q

You want to change the EBS volume size and and type. When can you do this?

A

You can do this on the fly

20
Q

How do you move a EC2 volume to another AZ?

A

Take a snapshot, create an AMI then launch in the new AZ

21
Q

How do you move a EC2 volume to another region?

A

Take a snapshot, create an AMI then move to the new region

22
Q

Are snapshot of encrypted volumes encrypted?

A

Yes

23
Q

Are encrypted volumes that are restored encrypted?

A

Yes

24
Q

Can you share encrypted volumes?

A

No

25
Q

Can you share snapshots?

A

Yes, if they are unencrypted

26
Q

What are the characteristics of Instance Store

A

Cannot be stopped. If host is stopped or fails data is lost

You can reboot

27
Q

When an instance is deleted, what will happen to an instance volume and EBS?

A

Both will be deleted, but you can protect the EBS volume

28
Q

How do you encrypt the root volume?

A

Create a snapshot
Create a copy of the snapshot
Create an AMI from the encrypted snapshot
Use that AMI to launch a new encrypted instance

29
Q

What is the default cloudwatch monitoring interval?

A

5 min, but can be change to 1 min by turning on detailed monitoring

30
Q

What is the difference between cloudwatch and cloudtrail?

A

Cloud watch is used to gauge performance, cloud trail is used for auditing

31
Q

Features of cloud watch

A

Dashboards
Alarms
Events
Logs

32
Q

What can be used to automate a new instance build

A

Boot strap script

33
Q

What is the URL to get instance information?

A

http: //169.254.169.254/latest/meta-data/
http: //169.254.169.254/latest/user-data/

34
Q

What is the EFS format>

A

NFS V4
Pay for use
scalable to PB
Supports thousands of concurrent NFS connections
Data is stored across multiple AZs within a region
read after write consistency

35
Q

Benefits of roles?

A

more secure
easy to manage
Can be assigned after instance creation
Can be used in any region

36
Q

What is the best way to secure, centrally, hundreds of EC2 instances rather than using access key and secret access key

A

Roles

37
Q

Which of the following statements are true about containers on AWS? (Choose 5)

A

You can have AWS manage Kubernetes for you.
You can install and manage Kubernetes on AWS, yourself.
ECR can be used to store Docker images.
ECS allows you to control the scheduling and placement of your containers and tasks.
To be able to use ECS, you must use the ECS Agent.

2019 - AWS CSAA - MINE (9 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions