extra aws Flashcards

1
Q

aws config

A

assess, audit, and evaluate the configurations of your AWS resources to check for compliance

allows you to keep a record of your AWS resources’ configuration history and assesses it for compliance with your internal policies and best practices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AWS Reference Architecture Diagrams

A

a collection of technical resources to help you build industry-tested architectures more effectively and efficiently in the AWS Cloud.

It does not provide a set of foundational questions that you can use to evaluate if your architecture is aligned with AWS best practices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

OpsWorks

A

OpsWorks is a configuration management service that helps customers configure and operate applications, both on-premises and in the AWS Cloud, using Chef and Puppet.

opsWorks can rollback

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

AWS Quick Starts

A

are built by AWS solutions architects and partners to help you deploy popular technologies on AWS, based on AWS best practices for security and high availability. These accelerators reduce hundreds of manual procedures into just a few steps, so you can build your production environment quickly and start using it immediately.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Amazon FSx

A

windows

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

EFS

A

linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

AWS CodeBuild

A

a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. With CodeBuild, you don’t need to provision, manage, and scale your own build servers. CodeBuild scales continuously and processes multiple builds concurrently, so your builds are not left waiting in a queue.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

VPC endpoint

A

enables you to privately connect your VPC to Amazon S3 without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

aws organization benefits?

A

– Centrally Manage Policies across Multiple AWS Accounts
– Automate AWS Account Creation and Management
– Consolidate Billing across Multiple AWS Accounts
– Govern Access to AWS Services, Resources, and Regions
– Configure AWS Services Across Multiple Accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

AWS Service Catalog

A

AWS Service Catalog = portfolio

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS Site-to-Site vpn

A

VPN creates a secure connection between your data center or branch office and your AWS cloud resources. For globally distributed applications, the Accelerated Site-to-Site VPN option provides even greater performance by working with AWS Global Accelerator.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

AWS Systems Manager Parameter Store

A

primarily used to centralize the configuration data of their application. You can store data such as passwords, database strings, AMI IDs, and license codes as parameter values.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Amazon S3 $$$

A

Storage - Costs vary with the number and size of objects stored in your Amazon S3 buckets as well as the type of storage.

Requests - The number and type of requests. GET requests incur charges at different rates than other requests, such as PUT and COPY requests.

Data transfer - The amount of data transferred out of the Amazon S3 region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Reserved Instances

A

Reserved Instances - capacity reservations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What can you do with AWS cost and usage report?

A

Access comprehensive AWS cost and usage information
– The AWS Cost & Usage Report gives you the ability to delve deeply into your AWS cost and usage data, understand how you are using your AWS implementation, and identify opportunities for optimization.

Track your Amazon EC2 Reserved Instance (RI) usage

– Each line item of usage that receives an RI discount contains information about where the discount was allocated. This makes it easier to trace which instances are benefitting from specific reservations.

Leverage strategic data integrations

– Using the Amazon Athena data integration feature, you can quickly query your cost and usage information using standard SQL queries. You can also upload your data directly into Amazon Redshift or Amazon QuickSight.

Allows you to load your cost and usage information into Amazon Athena, Amazon Redshift, and AWS QuickSight

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

cost moneyyy $$

A

Transfer of EC2 files between two AWS Regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

does it cost money? Setting up additional VPCs in your account

A

No its free

18
Q

does it cost money? Provisioning Elastic IPs and attaching them to running EC2 instances

A

no. only if they are not attached to ec2

19
Q

Egress data to the internet

A

data transfer out from Amazon S3 to the internet
he action of going out of or leaving a place.

20
Q

global

A

IAM, STS, Route 53, CloudFront, and WAF.

21
Q

zonal

A

EC2 Instances and EBS Volumes which are tied to the Availability Zone where they were launched

22
Q

regional

A

he EBS snapshots are considered regional since it is not tied to a specific Availability Zone.

Amazon EFS

– AWS Batch

23
Q

which is more expensive? EBS or S3 Glacier Flexible retrieval

A

Amazon EBS is incorrect because this is a type of block storage that is not suitable to be used for database backups. It is also more expensive than S3 Glacier Flexible Retrieval.

24
Q

What are the two ways to grant permission to amazon s3 resources?

A

Bucket policy and user policy are two of the access policy options available for you to grant permission to your Amazon S3 resources.

25
Q

What are access keys?

A

Access keys are long-term credentials for an IAM user or the AWS account root user

26
Q

access keys consists of what?

A

Access keys consist of two parts:

  1. Access key ID (for example: AKIAIOSTUTORIALSDOJO)
  2. Secret access key (for example: wJalrXUtnFEMI/K7MDENG/bTutorialsDojoKEY).
27
Q

an account alias is in IAM?

A

A substitute for an account ID in the web address for your account

28
Q

Security group

A

instances

29
Q

Network ACL

A

subnets

30
Q

permitted

A

– Amazon EC2 instances
- Elastic Load Balancers
– Amazon API Gateways
- NAT Gateways
– Amazon CloudFront
– Amazon RDS
– Amazon Aurora

– AWS Lambda and Lambda Edge functions

– Amazon Lightsail resources

– Amazon Elastic Beanstalk environments

31
Q

s3 versioning

A

Versioning in Amazon S3 is a means of keeping multiple variants of an object in the same bucket. You can use the S3 Versioning feature to preserve, retrieve, and restore every version of every object stored in your buckets. With versioning you can recover more easily from both unintended user actions and application failures

32
Q

Name ways you can launch RDS

A

You can launch a new RDS database cluster using the AWS Management Console, AWS CLI, AWS SDK and AWS CloudFormation.

33
Q

aws global accelerator

A

AWS Global Accelerator uses the AWS global network to optimize the path from your users to your applications, improving the performance of your traffic by as much as 60%. AWS Global Accelerator continually monitors the health of your application endpoints and redirects traffic to healthy endpoints in less than 30 seconds.

34
Q

aws root user tasks

A

Change your account settings. This includes the account name, email address, root user password, and root user access keys. Other account settings, such as contact information, payment currency preference, and AWS Regions, don’t require root user credentials.

Restore IAM user permissions. If the only IAM administrator accidentally revokes their own permissions, you can sign in as the root user to edit policies and restore those permissions.

Activate IAM access to the Billing and Cost Management console.

View certain tax invoices. An IAM user with the aws-portal:ViewBilling permission can view and download VAT invoices from AWS Europe, but not AWS Inc. or Amazon Internet Services Private Limited (AISPL).

Close your AWS account.

Register as a seller in the Reserved Instance Marketplace.

Configure an Amazon S3 bucket to enable MFA (multi-factor authentication).

Edit or delete an Amazon Simple Storage Service (Amazon S3) bucket policy that includes an invalid virtual private cloud (VPC) ID or VPC endpoint ID.

Sign up for AWS GovCloud (US).

Request AWS GovCloud (US) account root user access keys from AWS Support.

35
Q

ECS

A

Amazon ECS eliminates the need to install, operate, and scale container management infrastructure, and simplifies the creation of environments with familiar AWS core features like Security Groups, Elastic Load Balancing, and AWS Identity and Access Management (IAM).”

36
Q

AWS Transit Gateway
B. AWS Transit Gateway

A
37
Q

LIST OF COMPUTE

A

Amazon EC2
Amazon EC2 Auto Scaling
Amazon Elastic Container Registry
Amazon Elastic Container Service
Amazon Elastic Kubernetes Service
Amazon Lightsail
AWS Batch
AWS Elastic Beanstalk
AWS Fargate
AWS Lambda
AWS Serverless Application Repository
AWS Outposts
VMware Cloud on AWS

38
Q

DDOS

A

shield
waf
cloudfront
aws firewall manager
aws global accelerator
elastic load balanccing
amazon route 53
elastic ip address

39
Q

When building a cloud Total Cost of Ownership (TCO) model, which cost elements should be considered for workloads running on AWS? (Choose three.)

A

data, storage compute

40
Q

Which AWS service would a customer use with a static website to achieve lower latency and high transfer speeds?
A. AWS Lambda
B. Amazon DynamoDB Accelerator
C. Amazon Route 53
D. Amazon CloudFront

A

D

41
Q

hybrid

A

aws post
wavelenght
local zone
snow

ecs
eks

aws storage gateway
aws backup
aws datasync
aws transfer family

aws direct connect
amazon route 53 resolver

aws directory
iam
systems manager
opswork

aws code deploy
cloud waqtfch
xray