Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CPC Prep > Everything > Flashcards

Everything Flashcards

1
Q

Region

A

A cluster of data centers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Availability Zones

A

Each region has many AZs. Each AZ has one or more discrete data centers with redundant power, networking, and connectivity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

3 Options to access AWS:

A

1) AWS Console - protected by password and MFA
2) (CLI) Command Line Interface - protected by access keys
3) (SDK) Software Developer Kit - for CODE, protected by access keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

AWS Cloudshell

A

(Account- Level)
Way to access AWS. An alternative to installing CLI is Cloudshell.

Quicker & easier.

Allows you to run AWS commands from the browser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

IAM Credentials Report

A

audit permissions of your account

report lists users and status of credentials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

IAM Access Advisor

A

(User-Level)
Shows the service permissions granted to a user and when those services were last accessed (can use this info to revise policies)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Is EC2 PaaS, Iaas, or Saas?

A

IaaS - Infrastructure as a service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

EC2

A

Renting virtual machines (BRAIN)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

EBS Volumes

A

“Elastic Block Storage”

Storing data on virtual network drives
(STORAGE for EC2)

Network drive you can attach to your instances while they run & allows you instance to persist data

  • One instance at a time (2 EBS can be on 1 instance)(they can also standalone/not attached at all)
  • One AZ
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

ELB

A

Distributing loads across machines

(Scalability) Horizontal

ELBs are servers that forward internet traffic to multiple servers (EC2 instances) downstream

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

ASG

A

Scaling the services using auto-scaling groups

Horizontal scalability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

EC2 Reserved Instances

A

*Like a “soft” version of a dedicated host

75% discount compared to on-demand

reserve a specific instance type

recommended for steady-state usage applications (like databases)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

EC2 Dedicated Hosts

A

a PYSICAL server with EC2 instance capacity dedicated to your use

  • helps address compliance requirements
  • (BYOL) Bring your own license
  • more expensive $
  • 3 years
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Security Groups

A

firewall attached to the EC2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Snapshot

A

To move an EBS volume from one AZ to another, you first have to snapshot it

It’s for a backup anytime you want

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

JSON Documents

A

IAM - can be assigned to users and groups allowing users to use certain services in AWS

*policies define the permissions to users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

AMI

A

“Amazon Machine Image”

A CUSTOMIZATION of an EC2 instance - create ready to use EC2 instances with our customizations

built region specific (1 region)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

EC2 Image Builder

A

used to automate the creation of Virtual Machines or container images

Automatically build, test, and distribute AMIs in multiple regions

Free service

Allows to be truly global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

EFS

A

“Elastic File System”

NETWORK/Shared file system

Storage that can be mounted to HUNDREDS of instances at a time

Multiple AZs

Highly scalable. No capacity planning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

EC2 Instance Store

A

Storage for EC2

High performance hardware disk attached to our EC2 instance

lost if the EC2 instance is stopped/terminated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Vertical Scalability

A

increase the size of the instance

ex: change from t2.micro –> t2.large

Usually a limit on how much you can vertically scale b/c of HARDWARE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Horizontal Scalability

A

increase the NUMBER of instance for an application (rather than size)

ex: auto-scaling group (ASG) & load balancer (ELB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

High Availability

A

Multi-AZs

Goal to survive a data center loss (Disaster)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Scalability

A

ability to accommodate a larger load by making the HARDWARE stronger (scale up) or by adding nodes (scale out)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Elasticity

A

Cloud-friendly, match demand, optimize costs

means that there will be some auto-scaling based on load

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Agility

A

DISTRACTOR - not related to scalability or elasticity

means new IT resources are only a click away in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Is Elastic Load Balancer (ELB) managed or not managed?

A

MANAGED by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Auto-Scaling Groups

A

in the cloud you can create and get rid of servers quickly – as load on your websites and applications change

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

S3

A

STORAGE

infinite scaling!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Buckets

A

S3 allows people to store “objects” (files) in buckets (directories)

must have globally unique name

defined at the region level

buckets are created in a region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How to encrypt in S3?

A

Encrypt objects in Amazon S3 using encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

S3 Websites

A

S3 can host STATIC websites and have them accessible on the www.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Why is it best to use S3 Versioning?

A
  • protects against unintended deletes (ability to respond to a version)
  • easy to roll back to previous version
  • suspending versions does NOT delete the previous versions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

S3 Access Logs

A
  • for audit purposes
  • log all access to S3 buckets
  • any request make to S3 from any account (authorized or denied)
  • helpful to figure out the root cause of an issues, audit usage, view suspicious patterns
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

CRR

A

S3 Replication

Cross-region replication

Use Cases = compliance, lowering latency access, replication accounts accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

SSR

A

S3 Replication

Same-region replication

Use Cases = log aggregation, live replication between production and test accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

S3 Storage Classes:

S3 Standard - General Purposes

A

99.999% availability
used for frequently access data
low latency
sustains 2 concurrent facility failures

Use Case = big data analytics, mobile and gaming apps, content distribution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

S3 Storage Classes:

S3 Standard - Infrequent Access (IA)

A

for data less frequently accessed, but requires rapid access when needed

lower 99.9% availability
lower cost compared to standard
retrieval fee
sustains 2 concurrent facility failures

Use Case = disaster recovery, backup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

S3 Storage Classes:

S3 Intelligent-Tiering

A

99.9% availability

Cost-Optimized - by automatically moving objects between two access tiers based on changing access patterns: frequent & infrequent

Resilient against events that impact entire AZs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

S3 Storage Classes:

S3 One Zone - Infrequent Access (IA)

A

Same as reg infrequent access, but data stores in a single AZ

99.5% availability

lower cost than S3-IA (by 20%)

Use Case = storing secondary backup data copies of on-prem data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Amazon Glacier

A

low cost object storage

meant for archiving & backup

data retained for years

various retrieval options of time & fees

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Glacier Deep Archive

A

cheapest!

standard: 12 hours
bulk: 48 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

S3 Lifecycle Rules

A

transition objects between classes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

S3 Glacier Vault Lock/ S3 Object Lock

A

WORM - write once read many

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Snow family

A

physical device to import data

or

edge computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

OpsHub

A

Software to manager Snow family devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Storage Gateway

A

Hybrid solution to extend/bridge on-prem storage to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Relational Databases

A

looks like excel spreadsheets “sequal”

perform queries/lookups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

NoSQLDatabases

A 
not sequal
not relational
FLEXIBLE
Scalable 
High performance

ex: JSON is a common form of data in NoSQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

If a Database is AWS managed, what is AWS responsibility?

A

patching
automatic backup, restore, upgrades
monitoring alerts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Elasticache

A

In memory database

helps reduce load of databases for read intensive workloads

faster than main RDS database for read/write

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

DynamoDB

A

Serverless database

Key/value database

NoSQL - not relational

scales MASSIVE workloads, low latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

DAX

A

Dynamo DB accelerator

use instead of Elasticash for DynamoDB only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Redshift

A

Database
OLAP (Online Analytical Processing)

Analytics & data warehousing

(ex: Tableau integrated with it)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

EMR

A

Database
Elastic Map Reduce
HADOOP CLUSTERS (for big data)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Athena

A

Serverless database
SQL
used to query data in S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Quicksight

A

Serverless machine learning to create INTERACTIVE DASHBOARDS on your data

58
Q

Document DB

A

NoSQL Database
for MONGO DB
fully managed

59
Q

Amazon Neptune

A

managed GRAPH database

a social network

60
Q

QLDB

A

database
Financial Transations Ledger $$

CENTRALIZED

immunable
crytopgraphic

61
Q

Managed Blockchain

A

database
Hyperledger

DECENTRALIZED

62
Q

Glue

A

Managed database

ELT (Extract, Transform, Load) for analytics

63
Q

DMS

A

Database Migration Service

64
Q

Docker

A

(other compute)

container technology to run APPLICATIONS

65
Q

ECS

A

(other compute)

run docker containers on EC2 instances

66
Q

Fargate

A

(other compute)
SERVERLESS - Run docker containers without provisioning the infrastructure

no EC2 instance needed

67
Q

ECR

A

(other compute)
“Elastic Container Registry”

Private docker image repository

68
Q

Lightsail

A

(compute)

Simple for those with little cloud experience; simple, low pricing

69
Q

Lambda

A

Compute

SERVERLESS
FaaS (Function as a service)

Event-driven: Bills by runtime and requests/incidents (per call/per duration)

Use Case = create thumbnails of images onto S3 run; run a serverless job

70
Q

CloudFormation

A

{Deployment}
AWS only

Infrastructure as CODE
works w/almost any AWS resource
repeat code across regions and accounts

71
Q

Beanstalk

A

{Deployment}
AWS only

Platform as a Service (PaaS)

72
Q

CodeDeploy

A

HYBRID deploy & upgrade any application onto servers

73
Q

Systems Manager

A

HYBRID

patch, config, and run commands at scale

74
Q

Ops Works

A

HYBRID

Chef & Puppet

75
Q

Route 53

A

{Leveraging Global Infrastructure}

Managed DNS - Domain Name System

Great to route users to the closest deployment with least latency

76
Q

CDN (Global Content Delivery Network)

A

{Leveraging Global Infrastructure}

Replicate part of your cloud app to edge locations
Decrease latency
Cache common requests

77
Q

S3 Transfer Acceleration

A

{Leveraging Global Infrastructure}

Accelerate global uploads & downloads into S3

78
Q

AWS Global Accelerator

A

{Leveraging Global Infrastructure}

Improve global application availability & performance using the AWS global network

79
Q

AWS Outposts

A

{Leveraging Global Infrastructure}

Deploy outposts racks in your own data center on-prem to extend AWS services

80
Q

SQS (Simple Queue Service)

A

{Cloud Integrations}

to DECOUPLE applications in AWS
QUEUE service

81
Q

SNS (Simple Notification Service)

A

{Cloud Integrations}

  • 2nd way to decouple (from SQS)
  • What if you want to send one message to many receivers?
  • Event subscribers & event notifications

Email, SMS, or mobile notifications

82
Q

Kinesis

A

{Cloud Integrations}

Real-time data streaming & analysis

83
Q

Amazon MQ

A

{Cloud Integrations}

Managed Apache MQ in the cloud

*think apache MQ - like MJ/ Nick apache helicopters

84
Q

Cloud Watch

A

{Cloud Monitoring}

  • Metrics - monitor performance & billing
  • Alarms - automate notification, perform EC2 action, notify to SNS
  • Logs - collect log filed from EC2 instances, servers, Lambda functions
  • Events (Eventbridge)- react to events in AWS or trigger rule on schedule
85
Q

CloudTrail

A

{Cloud Monitoring}

to AUDIT API calls made within AWS account

86
Q

CloudTrail Insights

A

{Cloud Monitoring}

Automated analysis of Cloudtrail events
unusual activity

87
Q

X-Ray

A

{Cloud Monitoring}

trace requests made through your distributed applications

88
Q

Service Health Dashboard

A

{Cloud Monitoring}

status of all SERVICES across all regions

89
Q

Personal Health Dashboard

A

{Cloud Monitoring}

AWS events that impact YOU (remediation)

90
Q

Shield

A

{Security & Compliance}

automatic DDoS protection (24/7 for advanced shield)

91
Q

WAF

A

{Security & Compliance}

Web Application FIREWALL

92
Q

KMS

A

{Security & Compliance}

Key Management Service
Encryption keys managed by AWS

93
Q

Cloud HSM

A

{Security & Compliance}

Hardware encryption, AWS provisions hardware, but customer manages it (encryption keys)

94
Q

Artifact

A

{Security & Compliance}

Get access to compliance reports

95
Q

GaurdDuty

A

{Security & Compliance}

find malicious behavior w/VPC, DNS, & CloudTrail logs

96
Q

Inspector

A

{Security & Compliance}

for EC2 only - install agent and find vulnerabilities

97
Q

Config

A

{Security & Compliance}

track configuration changes and compliance against rules

98
Q

Macie

A

{Security & Compliance}

SENSITIVE DATA (Personal)

in S3 bucket

99
Q

CloudTrail

A

{Security & Compliance}

Track API calls by users in account

automate security across accounts

100
Q

AWS Security Hub

A

{Security & Compliance}

gather security findings from many sources IN ONE PLACE

101
Q

Detective

A

{Security & Compliance}

Find root cause of security/suspicious activities

102
Q

AWS Abuse

A

REPORT IT

103
Q

What are the Root User only privileges?

A

Root User:

  • Access owner
  • access to ALL services
  • Don’t use for everyday tasks

Only Root User Can:

  • ** change account setting
  • view tax statements
  • ** close AWS accounts
  • restore IAM permissions
  • ** change AWS support plan
  • ** register as a seller in reserved marketplace
  • sign up for GovCloud
  • enable MFA
  • edit/delete S3 bucket policy
104
Q

Rekognition

A

{Machine Learning}

FACE DETECTION

105
Q

Transcribe

A

{Machine Learning}

Audio to text

(ex: subtitles)

106
Q

Polly

A

{Machine Learning}

Text to Audio

107
Q

Translate

A

{Machine Learning}

Translations

108
Q

Lex

A

{Machine Learning}

Chatbots (Conversational/ intention)

Powers Alexa

109
Q

Connect

A

{Machine Learning}

Cloud Contact Center

used in conjunction with Lex

110
Q

Comprehend

A

{Machine Learning}

Natural language processing

111
Q

SageMaker

A

{Machine Learning}

for developer/data scientist
build, train, & deploy ML

112
Q

TCO Calculator

A

{Billing & Costs}

Used to estimate costs for migrations from on-prem

113
Q

AWS Pricing Calculator

A

{Billing & Costs}

used to estimate cost of architecture / solution

114
Q

Billing Dashboard

A

{Billing & Costs}

High level costs for the month

115
Q

Cost Allocation Tags

A

{Billing & Costs}

Detailed logs/categories

116
Q

Cost & Usage Reports

A

{Billing & Costs}

Most Comprehensive!!

117
Q

Cost Explorer

A

{Billing & Costs}

Used to FORCAST

Visual/detailed

118
Q

{Account Best Practices}

To operate multiple accounts, use ____

A

Organizations

119
Q

{Account Best Practices}

Use ___ to restrict account power

A

SCP (Service Control Policies)

120
Q

{Account Best Practices}

Easily set up multiple accounts with best practices with the ____

A

AWS Control Tower

121
Q

{Account Best Practices}

Use _____ for easy management and billing.

A

Tags & Cost Allocation tags

122
Q

{Account Best Practices}

What are the IAM guidelines?

A
  • MFA
  • Least privilege
  • password policy
  • password rotation
123
Q

If your account is compromised you should …

A

Change the root password.
Delete & rotate all passwords/keys
Contact AWS Support

124
Q

IAM

A

Identity & access management inside your AWS account for users that you trust & belong to your company

125
Q

Organizations

A

manage multiple AWS accounts

126
Q

Cognito

A

to create a database of users for your mobile and web applications

ex: Facebook users

127
Q

Directory Services

A

to integrate Microsoft Active Directory in AWS

128
Q

Single SignOn (SSO)

A

provides one login for multiple AWS accounts & applications

129
Q

Workspaces

A

{Other Random Services to know}

DESKTOP as a Service (DaaS) to provision Windows or Linex desktops

for it someone wants a desktop in the cloud

*Virtual Desktop Infrastructure (VDI)

130
Q

AppStream 2.0

A

{Other Random Services to know}

Desktop application service
app delivered from a browser
no need to connect to VDI
works with any device!

131
Q

Sumerian

A

{Other Random Services to know}

create and run virtual reality (VR) and augmented reality (AR)

3D MODELS! (animate them to look alive)

ex: bird example in course

132
Q

AWS IoT Core

A

{Other Random Services to know}

“Internet of Things”
The network on internet connected devices that are able to connect to the cloud serverless

Ex: Cars, light, Boat, etc.

133
Q

Elastic Transcoder

A

{Other Random Services to know}

used to convert media filed stores in S3 into media files compatible with playback devices (Phones, tablets)

134
Q

What are the Well Architected Framework, General Guiding Principles?

A
  1. stop guessing capacity needs
  2. test system at production scale
  3. automate to make experimentation easier
  4. allow for evolutionary architectures
  5. drive using data
  6. improve through gam days (simulate)
135
Q

What are the Best Practices - Design Principles?

A
  1. Scalability - vertical & horizontal
  2. Disposable Resources - servers should be disposable and easily configured
  3. Automation - serverless, auto-scaling
  4. Lose Coupling - smaller, loosely coupled components (no cascading failure)
  5. Think “Services” not Servers
136
Q 
#1 Pilar
Operational Excellence
A 
operation as code
annotate documentation
make frequent, small, reversible changes 
refine operational procedures frequently
anticipate failure
learn from failure
137
Q 
#2 Pilar 
Security
A

Protect through risk assessment and migration strategies

strong identity foundation
enable traceability 
apply security to all layers
automate security 
protect data in transit and at rest
keep people away from data
prepare for security events
138
Q 
#3 Pilar
Reliability
A

agility to recover from disruptions

test recovery principles
automate recovery
auto-scaling (stop guessing capacity)
scale horizontally
manage in automation (use automation to make changes to infrastructure)
139
Q 
#4 Pilar
Performance Efficiency
A

adapting & providing the best performance

advanced technologies
server less
global in mins
experiment more often
mechanical sympathy - be aware of all services that exist
140
Q 
#5 Pilar 
Cost Optimization
A

Business value at lowest cost point

pay only for what you use
measure efficiency: CloudWatch
stop spending $ on data center operations
use tags for billing
use manages services (reduce cost of ownership)

CPC Prep (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions