Elastic Compute Cloud Flashcards

1
Q

What is EC2?

A

Elastic Compute Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

EC2 is an example of ___ as a Service?

A

Infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What 4 main things make up EC2?

A
  1. Renting virtual machines (EC2)
  2. Storing data on virtual drives (EBS)
  3. Distributing load across machines (ELB)
  4. Scaling the services using an auto-scaling group (ASG)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What EC2 sizing and configuration options are there?

A
  1. Operating System: Linux, Windows, Mac
  2. How much compute power and cors (CPU)
  3. How much random-access memory (RAM)
  4. How much storage space: Network-attached (EBS & EFS) / hardware (EC2 Instance Store)
  5. Network card: speed of the card, Public IP address
  6. Firewall rules: security group
  7. Bootstrap script (configure at first launch): EC2 User Data
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is EC2 User Data script?

A

Used to bootstrap our instances. Runs only once at the instance first start

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What user does the EC2 User Data Script run with?

A

Root user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does AMI stand for?

A

Amazon Machine Image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is an Amazon Machine Image?

A

A template that contains the software configuration required to launch your instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the 7 EC2 instance types?

A
  1. General Purpose
  2. Compute Optimized
  3. Memory Optimized
  4. Accelerated Computing
  5. Storage Optimized
  6. Instance Features
  7. Measuring Instance Performance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Break down the naming convention of m5.2xlarge

A

m: instance class
5: generation (AWS improves them over time)
2xlarge: size within the instance class

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is EC2 General Purpose Instance Type?

A

Great for a diversity of workloads such as web servers or code repositories. Balance between compute, memory, networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is EC2 Compute Optimized Instance Type?

A

Great for compute-intensive tasks that require high performance processors. Ex: machine learning and dedicated gaming servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is EC2 Memory Optimized Instance Type?

A

Fast performance for workloads that process large data sets in memory. Ex: high performance databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is EC2 Storage Optimized Instance Type?

A

Great for storage-intensive tasks that require high, sequential read and write access to large data sets on local storage. Ex: relational & NoSQL databases, data warehousing applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are security groups?

A

The fundamental of network security in AWS. They control how traffic is allowed into or out of our EC2 instances. They only contain allow rules and can reference by IP or by security group. The firewall.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What do security groups regulate?

A
  1. Access to Ports
  2. Authorized IP ranges - IPv4 and IPv6
  3. Control of inbound network (from other to the instance)
  4. Control of outbound network (from the instance to other)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can an instance have multiple security groups attatched?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Can a security group be attached to multiple instances?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Are security groups locked down to a region / VPC combination?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

If traffic is blocked by a security group, will the EC2 instance see it

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Is it good to maintain one separate security group for SSH access?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Is it a security group issue if your application is not accessible (time out)

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Is it a security group issue if your application gives a ‘connection refused’ error

A

No, it’s is an application error or it’s not launched

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

All inbound traffic is ___ by default

A

blocked

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

All outbound traffic is ___ by default

A

authorized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is port 22 for?

A

SSH (Secure Shell) - log into a Linux instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is port 21 for?

A

FTP (File Transport Protocol) - upload files into a file share

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is port 22 for?

A

SFTP (Secure File Transport Protocol) - upload files using SSH

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is port 80 for?

A

HTTP - access unsecured websites

30
Q

What is port 443 for?

A

HTTPS - access secured websites

31
Q

What is port 3389 for?

A

RDP (Remote Desktop Protocol) - log into a Windows instance

32
Q

What is allow from anywhere in IPv4 format?

A

0.0.0.0/0

33
Q

What is allow from anywhere in IPv6 format?

A

::/0

34
Q

What does SSH work for? (can be multiple)

  1. Mac
  2. Linux
  3. Windows < 10
  4. Windows >= 10
A

Mac, Linux, Windows >= 10

35
Q

What does Putty work for? (can be multiple)

  1. Mac
  2. Linux
  3. Windows < 10
  4. Windows >= 10
A

Windows <10 and Windows >=c10

36
Q

What does EC2 Instance Connect work for? (can be multiple)

  1. Mac
  2. Linux
  3. Windows < 10
  4. Windows >= 10
A

Mac, Linux, Windows <10, Windows >= 10

37
Q

Will EC2 have the same public IP address when you restart it?

A

No

38
Q

What are the 4 main types of EC2 Instance purchasing options?

A
  1. On-Demand: short workloads, predictable pricing
  2. Reserved: minimum 1 year
  3. Spot Instances: short workloads, cheap, can lose instance (less reliable)
  4. Dedicated Hosts: book an entire physical server, control instance placement
39
Q

What is EC2 On Demand pricing?

A

Pay for what you use.
Linux: billing per second, after the first minute
All other operating systems: billing per hour

40
Q

What are EC2 On Demand instances recommended for?

A

Short-term and un-interrupted workloads where you can’t predict how the application will behave

41
Q

Does EC2 On Demand have a long-term commitment?

A

No

42
Q

Does EC2 On Demand have any upfront cost?

A

No

43
Q

Which EC2 Instance has the highest cost?

A

On Demand

44
Q

What is EC2 Reserved Instances reservation periods?

A
  1. 1 year =+ discount

2. 3 years = +++ discount

45
Q

How does regular EC2 Reserved Instance compare to On Demand for pricing?

A

Up to 75% off compared to On Demand

46
Q

What are EC2 Reserved Instances purchasing options?

A
  1. No upfront
  2. Partial upfront = + discount
  3. All upfront = ++ discount
47
Q

Can you change instance type on regular EC2 Reserved Instance?

A

No

48
Q

What situations are EC2 Reserved Instances recommended for?

A

Steady-state usage applications (think databases)

49
Q

What is Convertible Reserved Instance?

A

Allows you to change instance type

50
Q

How does EC2 Convertible Reserved Instance compare to On Demand for pricing?

A

Up to 54% off compared to On Demand

51
Q

What is EC2 Scheduled Reserved Instances?

A

Launch within time window you reserved.

52
Q

What situations is EC2 Scheduled Reserved Instances recommended for?

A

When you require a fraction of a day / week / month

53
Q

How does EC2 Spot Instance compare to On Demand for pricing?

A

Up to 90% off compared to On Demand

54
Q

How can you lose your EC2 Spot Instance?

A

Any time your max price is less than the current spot price

55
Q

What is the most cost-effective instance type in AWS?

A

EC2 Spot Instances

56
Q

What situations are EC2 Spot Instances recommended for?

A

Workloads that are resilient to failure

57
Q

What situations are EC2 Spot Instances not recommended for?

A

Critical jobs or databases

58
Q

What is an EC2 Dedicated Host

A

A physical server with EC2 instance capacity fully dedicated to your use. Can help you address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses.

59
Q

What is reservation period for EC2 Dedicated Hosts?

A

3 years

60
Q

What situations are EC2 Dedicated Hosts recommended for?

A

Useful for software that have complicated licensing model (BYOL - Bring Your Own License) or for companies that have strong regulatory or compliance needs

61
Q

What are EC2 Dedicated Instances?

A

Instances running on hardware that’s dedicated to you. May share hardware with other instances in same account. No control over instance placement (can move hardware after Stop / Start). Soft version of Dedicated Host

62
Q

What is AWS responsible for in regards to EC2?

A
  1. Infrastructure (global network security)
  2. Isolation on physical hosts
  3. Replacing faulty hardware
  4. Compliance validation
63
Q

What are you responsible for in regards to EC2?

A
  1. Security Groups rules
  2. Operating-system patches and updates
  3. Software and utilities installed on the EC2 instance
  4. IAM Roles assigned to EC2 & IAM user access management
  5. Data security on your instance
64
Q

What is an EC2 Instance made of?

A

AMI (OS) + Instance Size (CPU + RAM) + Storage + security groups + EC2 User Data

65
Q

What are EC2 Instance Role?

A

Link to IAM roles (not 100% on this)

66
Q

Which EC2 Purchasing Option can provide the biggest discount, but is not suitable for critical jobs or databases?

  1. Scheduled Instances
  2. Convertible Instances
  3. Dedicated Hosts
  4. Spot Instances
A

Spot Instances

67
Q

Which network security tool can you use to control traffic in and out of EC2 Instances?

  1. Network Access Control List (NACL)
  2. Identity and Management Access (IAM)
  3. GuardDuty
  4. Security Groups
A

Security Groups

68
Q

Under the Shared Responsibility Model, who is responsible for operating-system patches and updates on EC2 Instances?

  1. The customer
  2. AWS
  3. Both AWS and the customer
A

The customer

69
Q

How long can you reserve an EC2 Reserved Instance?

  1. 1 or 3 years
  2. 2 or 4 years
  3. 6 months or 1 year
  4. Anytime between 1 and 3 years
A

1 or 3 years

70
Q

Are EC2 instances bound to an AZ?

A

Yes