Extra Flashcards

1
Q

Types of MFA

A

Virtual MFA - app on phone gives one time password
Hardware TOTP Token - key fob or card
FIDO security keys - physical key provided by third party

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

3 Elements contained in IAM policy

A

Effect, Action, Resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

AWS step functions

A

allows you to coordinate multiple AWS services into serverless workflows so you can build and update apps quickly.
multiple lambda functions in an application
visual workflow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

AWS Cloud9

A

-lets users write, run, and debug code from a web browser.
use case:A company needs to migrate all its development teams to a cloud-based integrated development environment (IDE).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

AWS FSx

A

launch and run fully managed third party file systems for Windows and Linux-based workloads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

AWS RAM

A

Recourse access manager
AWS RAM helps you securely share your AWS resources to other AWS accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Amazon QuickSight

A

create dashboards/ visualize data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

AWS Glue

A

takes data out of a databases changes the schema

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

AWS CodeCommit

A

secure, highly scalable, fully managed source control service that hosts private Git repositories.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

AWS cognito

A

Identity platform for web and mobile apps
It’s a user directory, an authentication server, and an authorization service for OAuth 2.0 access tokens and AWS credentials
authenticate and authorize users from the built-in user directory, from your enterprise directory, and from consumer identity providers like Google and Facebook.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Amazon Lightsail

A

Build applications and custom websites fast

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

AWS Storage gateway

A

hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AWS Control Tower

A

orchestrates the capabilities of several other AWS services, including AWS Organizations, AWS Service Catalog, and AWS IAM Identity Center, to build a landing zone
set up and managed on your behalf

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

AWS Secrets Manager

A

manage, retreive and rotate database credentials, API keys and passwords (best place for storing passwords)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Customer gateway

A

VPN that is on the remote side of customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

AWS Global Accelerator

A

networking serrvice that helps uou improve the availibility, performance and security of public applications.
(provides 2 global static public IP’s)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

ACM

A

AWS Certificate Manager

18
Q

AWS Transit Gateway

A

Enables customers to connect thousands of VPC’s
consolidate organizations entire routing configuration

19
Q

SCP’s

A

Service Control Policies for AWS Orginizations
policy that allows central control over maximum permissions for IAM users and roles in your organization.

20
Q

Amazon Elastic Transcoder

A

media transcoding in the cloud.
(convert audio and video files to smarphones, tablets and web browser)

21
Q

Amazon Polly

A

converts text to speech

22
Q

Amazon EMR

A

cloud big data solution for petabyte-scale data processing, interactive analytics, and machine learning using open-source frameworks such as Apache Spark, Apache Hive, and Presto.

23
Q

AWS X-RAY

A

analyze and debug serverless and distributed applications such as those built using a microservices architecture

24
Q

Amazon Macie

A

fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data

25
Q

AWS services that has data encryption automatically enabled

A

AWS Storage gateway
S3

26
Q

how Lambda is charged

A

-The time it takes for the AWS Lambda function to execute
-Number of requests for the AWS Lambda function

27
Q

Cloud foundation

A

guided path to help customers deploy, configure, and secure their new workloads

28
Q

Where is CloudWatch

A

US East (N. Virginia) us-east-1

29
Q

Well Architected Framework

A

Security-protecting information & systems
Performance Efficiency- using IT and computing resources efficiently
Operational Excellence- ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures
Cost Optimization- avoiding un-needed costs

30
Q

CodeDeploy, CodeCommit, Code pipeline

A

Code Deploy- automates code deployments to any instance, including Amazon EC2 instances and instances running on-premises
Code Commit-fully-managed source control service that hosts secure Git-based repositories
Code Pipeline- continuous delivery service that enables you to model, visualize, and automate the steps required to release your software

31
Q

Amazon Kendra

A

Kendra reimagines enterprise search for your websites and applications so your employees and customers can easily find the content they are looking for, even when it’s scattered across multiple locations and content repositories within your organization.

32
Q

OpsWorks vs Config vs Systems manager

A

OpsWorks- configuration management service that helps you configure and operate applications in a cloud enterprise by using Puppet or Chef.
Config- provides a detailed view of the configuration of AWS resources in your AWS account.
Systems manager-operations hub for your AWS applications and resources and a secure end-to-end management solution for hybrid and multicloud environments that enables secure operations at scale.

33
Q

Amazon CodeGuru

A

developer tool that provides intelligent recommendations to improve code quality and identify an application’s most expensive lines of code

34
Q

Data backup types

A

Backup and restore- hours
Pilot Light- 10s of minutes
warm stand by- minutes
multi-site active/active- real time

35
Q

Pilot light

A

replicate your data from one Region to another and provision a copy of your core workload infrastructure

36
Q

Warm standby strategy-

A

scaled-down but fully functional copy of your production environment in another AWS Region

37
Q

Amazon EC2 Image Builder

A

simplifies the building, testing, and deployment of Virtual Machine and container images for use on AWS or on-premises.

reduces the effort of keeping images up-to-date

38
Q

CloudEndure Disaster Recovery

A

easy to shift your DR strategy to the AWS Cloud from existing physical or virtual data centers, private clouds, or other public clouds
SaaS

39
Q

AWS Data Exchange

A

allows customers to find, subscribe to, and use third-party data in the cloud

40
Q

Services you can reserve for discount

A

EC2, DynamoDB, ElastiCache, RDS, and RedShift.

41
Q

Well Architected Framework - Five Pillars

A
  • Operational Excellence
  • Security
  • Reliability
  • Performance Efficiency
  • Cost Optimization