Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SysOps > Fundamentals > Flashcards

Fundamentals Flashcards

1
Q

IAM Policies

A

allow or deny access to AWS services when attached to IAM User, Group, or Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

(T/F) IAM is global

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

IDP (ID Provider)

A

IAM - authenticate and authorize (based on policies)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

(T/F) IAM is free

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

(T/F) IAM has direct control on federated accounts.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Access Keys

A

Long-Term credentials within IAM users. Used for CLI. Don’t change regularly or automatically. IAM user can have two access keys. Can be created, deleted, inactive, active. Default to active..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Two parts to Access Keys

A

Key ID and Secret Access Key. Once you get the secret access key, you can’t get it again so WRITE that down

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Public Service

A

Accessed anywhere with Internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Private Service

A

Access through VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

(T/F) Nothing from the Internet can get to the VPC unless it is configured to do so.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS Zones

A

Pubic Internet Zone -> AWS Public Zone -> AWS Private Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Command Line Interface (CLI) use the region code (ap-southeast-2) whereas the console uses the regions name which looks like…

A

Asia Pacific (Sydney)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

VPC Default is assigned

A

One account & One Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Two types of VPC

A

Default and Custom

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

(T/F) Custom VPC can have more than one region

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

VPC CIDR

A

IP Addresses a VPC can use. Default VPC is always the same 172.31.0.0/16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

(T/F) Custom VPC can only have one CIDR

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Default VPC are always configured the same way when it comes to subnets

A

One subnet in each AZ in the region. Each subnet will have its own CIDR so subnet in AZ one could be 172.31.211.0/20

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Each VPC subnet comes with…

A

Internet Gateway, Security Group, NACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

EC2 Instance

A

OS Configured for your needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

(T/F) EC2 Instances are private by default

A

True, need to configure public access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

EC2 are AZ resilient which means

A

If the AZ fails, the instance fails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

EC2 On-Demand Billing

A

By second or hour depending on the OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

EC2 Popular Types of storage

A

Local host storage or Elastic Block Storage (EBS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

EC2 Lifecycle

A

Running, Stopped, Terminated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

EC2 Running, you pay for

A

CPU, Memory, Disk (storage), networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

EC2 Stopped, you pay for

A

Just Disk (storage)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

EC2 Terminated, you pay for

A

Nothing but once it it is terminated it cannot be recreated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Amazon Machine Image (AMI)

A

Used to create an EC2 instance or created from an EC2 instance. It is the image that configures the stack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

AMI Contains three things

A

Permissions, Root Volume, Block Device Mapping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

AMI Permissions

A

Public - Everyone Allowed
Owner (private) - implicit allow
Explicit - specific AWS accounts allowed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

AMI Root volume

A

Think C:\ in Windows or ROOT in Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

AMI Block Device Mapping

A

Which volume is boot and which is data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Connect to EC2 by…

A

RDP for Windows or SSH for Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

(T/F) you need a key pair to connect through Linux

A

True

36
Q

RDP Port

A

3389

37
Q

SSH Port

A

22

38
Q

S3

A

Global storage platform
Regional based/resilient (replicated among AZ in a region)
Public server, unlimited data & multi-user
Think of it as default storage for AWS

39
Q

Two parts of S3

A

Objects and Buckets

40
Q

S3 Object

A

Files, data, etc.

41
Q

S3 Bucket

A

Containers that hold S3 Objects

42
Q

S3 Objects Two Parts

A

Object Key (think of it as filename)
Value (content being stored)

43
Q

S3 Object Value Range

A

0 - 5 TB

44
Q

S3 Bucket region?

A

Has a primary home region that it never leaves unless it is configured to do so

45
Q

Blast Radius (major disaster) =

A

Region

46
Q

(T/F) Bucket names do not need to be globally unique

A

False, pay attention to trick questions that may ask why you can’t create the bucket name. Bucket names have to be unique across all regions and all AWS accounts

47
Q

(T/F) S3 buckets can hold unlimited objects and since each object is 0-5TB, you have unlimited storage

A

True

48
Q

Flat structure

A

How S3 is structured, all items are on the root and appear as folders by the naming convention in the S3 Object Key

49
Q

S3 Bucket names Format

A

3-63 characters, all lowercase, no underscores, must start with lowercase or number, can be IP formatted

50
Q

S3 Bucket limit

A

100 soft limit
1000 hard limit

51
Q

S3 storage in AWS - object, file, or block?

A

Object. It is not file or block storage like EFS or EBS.
Can’t mount an S3 bucket (example: G:)
Great for large scale
Great for offloading

52
Q

Offloading

A

Input and/or output to many AWS products to S3

53
Q

ARN

A

Amazon Resource Name - uniquely reference single service in AWS. Can be with a wildcard.
Format: arn:partition:service:region:account-id:resource-id
For S3 it would be arn:aws:s3:::catgif/ = just the bucket
arn:aws:s3:::catgif/* = access objects in the bucket but not the bucket
Note ::: because there is no region because s3 is global

54
Q

CloudFormation

A

Tool that lets you create, update, and delete infrastructure in AWS

55
Q

Base of CloudFormation

A

Templates written in either YAML or JSON

56
Q

CloudFormation Template contains

A

List of resources

57
Q

Mandatory component of CloudFormation Templates

A

Resources - which AWS resources are being spun up

58
Q

Other CloudFormation Template Components

A
  • Description - free text field
  • AWSTemplateFormatVersion - which version, if used Description must be underneath it
  • Metadata - control the UI
  • Parameters - prompt user for more information
  • Mappings - use lookup tables
  • Conditions - decision making in the template
  • Outputs - created output based on the template running, for example: “AZ Zone 2”
59
Q

Two steps to CloudFormation Conditions Component

A

Step 1 = create condition
Step 2 = use condition

60
Q

Logical Resource (CloudFormation)

A

Tells AWS what to create. For example: use “instance” for an EC2 instance.

61
Q

Stack (CloudFormation)

A

Contains all the logical resources that the template tells it to create.
Created when you take a template and tell CloudFormation to do something with the template.

62
Q

The whole point of CloudFormation

A

Any logical resources in the stack, CloudFormation makes a physical resource in your AWS account.
CloudFormation’s job is to keep the logical and phyisical creations in sync.

63
Q

CloudWatch

A

Support service used by almost all AWS Services - public service in Public Internet Zone

64
Q

Three main jobs of CloudWatch

A

Metrics, Logs, Events

65
Q

CloudWatch Events activated when?

A

If something happens (ex. an EC2 Instance Started) AND event scheduling (ex. do this at this time)

66
Q

CloudWatch Agent

A

Add functionality to CloudWatch that isn’t gathered natively (CPU usage is native; on-premises logs need CloudWatch Agent)

67
Q

Namespace (CloudWatch)

A

Namespace = container for monitoring data. All AWS data goes into a namespace as AWS/SERVICENAME or AWS/EC2. That’s reserved for AWS, you can’t name that. Outside of that you can name it as needed

68
Q

Metric (CloudWatch)

A

collection of related data points that is time ordered.

69
Q

Datapoint (CloudWatch)

A

consists of two things, timestamp and value. So for CPU utilization 2019-12-03T08:45:45Z and 98.3.

70
Q

Dimension (CloudWatch)

A

separate datapoints for different THINGS or PERSPECTIVES within the same metric

71
Q

Alarm (CloudWatch)

A

linked to metric and take an action based on that metric (example SNS)

72
Q

High Availability (HA)

A

ENSURE an agreed level of operational PERFORMANCE, usually UPTIME, for a HIGHER THAN NORMAL PERIOD

73
Q

Fault Tolerance (FT)

A

property that enables a system to CONTINUE OPERATING PROPERLY in the event of the FAILURE OF SOME (one or more faults within) of its COMPONENTS

74
Q

High Availability (HA) vs. Fault Tolerance (FT)

A

Fault tolerance is to operate through failure, high availability to maximum uptime

75
Q

Disaster Recovery (DR)

A

policies, tools and procedures to ENABLE THE RECOVERY or CONTINUATION of VITAL technology infrastructure and systems FOLLOWING A NATURAL OR HUMAN-INDUCED DISASTER

76
Q

Route53

A

Register Domains; Host Zones in managed nameservers it provides; global service; can withstand one or two regional failures and continue to run

77
Q

Hosted Zones

A

ZONE FILES in AWS, hosted on four managed name servers; can be PUBLIC or PRIVATE linked to VPC(S); stores records (RECORDSETS)

78
Q

Nameserver (NS)

A

record type .com zone to amazon.com zone

79
Q

A or AAA records

A

maps host name to IP A=IPv4 AAA=IPv6

80
Q

CNAME

A

create the equivalent of DNS shortcuts or Host to Host; create three CNAMEs for FTP, MAIL, WWW and point them all to the server so they go the right place. EXAM ALERT – CNAMES cannot point to an IP only another host name so look out for that!

81
Q

MX Records

A

How a server can find a mail server for a domain. MX records have to main parts – priority and value. MX 10 mail; MX 20 mail.other.domain. The dot to the right means it is a fully domain name. Priority says the lower number is picked first so MX 10 mail would be chosen first to deliver mail.

82
Q

TXT Record

A

add arbitrary text to a domain think Google Analytics requiring text in the TXT record so it can query it and use it.

83
Q

TTL

A

Time to Live. Set on DNS record in seconds. Tells it how long cache records for authoritative source (authoritative answer). If another client queries the same thing, they will get back a non-authoritative answer cached on the resolver server (most likely ISP server) because of TTL. It’s the TTL that may delay switching IP’s, etc.

84
Q

How many DNS root servers exist?

A

13

85
Q

Who manages DNS root servers?

A

12 different organizations

86
Q

Type of organisation maintaines the zones for a

A

AWS SysOps (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions