Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Practitioner > General Cloud > Flashcards

General Cloud Flashcards

1
Q

What are contained in regions?

A

AZs (Availability Zone), each of which contain 1+ data centers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is IAM?

A

Identity and Access Management, organizes users into groups, assigns policies (JSON) to users/groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an EC2 security group?

A

A firewall. Many to many w/ EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is EBS?

A

Network drive attached to 1 EC2 instance at a time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What’s the relationship between EC2 instances and EBS volumes?

A

An EC2 instance can have multiple EBS volumes, but and EBS volume can only attach to 1 EC2 instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is CloudFormation?

A

Infrastructure as code. Code your insrastructure design and AWS will change your config to match it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is CloudFormation Stack Designer?

A

Creates diagrams for CloudFormation configurations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is CDK?

A

Cloud Development Kit. Write CloudFormation configuration in other programming languages. They are compiled to yaml/json.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Elastic Beanstalk?

A

Automatically creates/depoys a cloudformation config for your app as single instance (test env), ASG (batch) or LB + ASG (prod web)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What kind of monitoring comes with Elastic Beanstalk?

A

Pushes app health info to CloudWatch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is CodeDeploy?

A

Can deploy new versions of your applications. Does not use CloudFormation. Works with EC2 instances or on-prem servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is CodeDeploy Agent?

A

Allows you to provision on-prem servers or EC2 instances for use by CodeDeploy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is CodeCommit?

A

Amazon’s GitHub. Private integrated w/ AWS services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is CodeBuild?

A

Pulls code from Git and runs build script.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is CodePipeline?

A

Link together AWS and 3rd party build services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is CodeArtifact?

A

Artifact management system (Library repo, maven deps)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is CodeStar?

A

Dashboard. Unified UI to create build pipeline.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Cloud9?

A

Cloud IDE.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is SSM?

A

Systems Manager. Manage EC2 and on-prem systems at scale. Hybrid service. eg. patching automation. SSM agent installed on each server, which allows it to be patched by AWS’ service. Installed by default on Linux and Ubuntu AMI.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is SSM Session Manager?

A

Can SSH into your EC2 instance w/o opening port 22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

OpsWorks

A

Managed Chef & Puppet to perform server configuation or repetitive actions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which can be used to monitor and check the health of an environment: CodeStar or Beanstalk?

A

Beanstalk.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Is Beanstalk Iaas, Paas or Saas?

A

Paas

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does cloudformation us to describe AWS resources.

A

JSON or YAML templates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Are CloudFormation and Beanstalk free?

A

Yes, but you have to pay for the underlying resources (eg. EC2 instances)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are global services?

A

Services that allow your app to be available globally. Route 53, CDN (Content Delivery Network), S3 Transfer Acceleration, Global Accelerator.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is Route 53?

A

Managed DNS (global service)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is a weighted routing policy in Route 53?

A

DNS will point certain percentages of traffic distributed across several IPs. Health checks ensure hosts are available.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is latency routing policy in Route 53?

A

resolved name to IP that will have lowest latency based on user’s location.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is a failover routing policy in Route 53?

A

Will route to a primary host until a health check fails, then will switch to failover host.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What service do you use to register a domain name?

A

Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is CloudFront?

A

A CDN. Served from edge locations. Can cache from S3 or any custom http end point.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

CloudFront vs S3 Cross Region Replication

A

global edge network // have to setup for each region
files are cache for a // files updated in real time
time (eg. a day)
for static content // dynamic content, fewer regions
cloning whole bucket across rgns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is S3 Transfer Acceleration?

A

S3 buckets are linked to 1 region. This speed up transfer from other regions to an S3 bucket in a different region. Instead of tranferring over the internet, it’s transferred through the internet to the closest edge location, then over amazon’s network to the othe region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is the Global Accelerator?

A

Accelerates traffic to your load balancer from other regions by going through the internet only to the closest edge location and using AWS network for the rest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is the difference between Global Accelerator and CloudFront?

A

CloudFront delivers cached static content, Global Accelerator is for dynamic data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What are AWS outposts?

A

Server racks that offer the same infrastructure/services as AWS for on-prem.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is WaveLength?

A

Some AWS services available on the edge of 5G networks. Low latency over 5G. Free. Use cases, real-time gaming, video streaming, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What are Local Zones?

A

Extends your AWS region to more locations to get your services closer to end users and reduce latency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What is WAF?

A

Web Application Firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is Shield?

A

Protects against DDoS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

How does cloudfront protect against web attacks?

A

WAF & Shield

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is asynchronous or event based communication between applications?

A

Messages from app A are put in a queue for app B to pick up.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is SQS?

A

Standard Queue. Model for decoupling applications (messages queued up). Older than SNS. Processors split messages between them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is SNS?

A

Simple Notification Service. Pub/sub model for decoupling applications. Publish to 1 SNS topic and have multiple event subscribers notified. All subscribers will get all messages.

46
Q

What is Kinesis?

A

Real-time big data streaming.

47
Q

What is MQ?

A

Managed Apache ActiveMQ. SQS and SNS use Amazon proprietary protocols. If you have to use standard open protocols, use MQ. Not as scalable as Amazon’s.

48
Q

What is CloudWatch?

A

Monitors metrics (CPU utilization, network in…) for all AWS services. Report through dashboards.

49
Q

What EC2 metrics are available for EC2 instances?

A

CPU utilization, status checks, network (not RAM)

50
Q

What are CloudWatch alarms?

A

Trigger notifications for any metric. Can trigger autoscaling, stop/reboot and EC2 instance, send SNS notifications. Billing alarm for if you cost > certain amount.

51
Q

Which region makes CloudWatch billing alarms available?

A

us-east-1

52
Q

What are CloudWatch Events?

A

Event on a schedule: ie. Serverless cron job, invokes lamda.

Event Pattern: ie. Root user logs in

53
Q

What is EventBridge?

A

Basically == CloudWatch
Next evolution of CloudWatch Events.
Default event bus: generated by CloudWatch Events
Partner event bus: receive events from SAAS service or applications (ie. Zendesk, etc.)
Custom event bus: for your own apps

54
Q

What is CloudTrail?

A

Governance, compliance, audit. Enabled by default. History of events/API calls made w/in AWS account by console, sdk, cli, AWS services. Can direct to CloudWatch or S3. See reads separate from writes.

55
Q

What is CloudTrail Insights?

A

Costs. Looks at CloudTrail to detect unusual events.

56
Q

How are CloudTrail Events retained?

A

Events are stored for 90 days. To go farther, log them to S3, then use Athena to anaylyze.

57
Q

What is X-Ray?

A

Troubleshooting performance, understanding dependencies in a microservice architecture. Find errors and exceptions. Are we meeting SLA?

58
Q

What is CodeGuru?

A

A ML (Machine Learning) powered service for automated code reviews and app performance recommendations.

Reviewer: On check-in, it will check for bugs or performance improvements.

Profiler: Checks for bugs or performance improvements in production.

59
Q

What is Service Health Dashboard?

A

Shows health for all services in all regions. AWS services in general.

60
Q

What is the personal health dashboard?

A

Shows health of only services that affect you.

61
Q

What is VPC?

A

Virtual Private Cloud. Can partition into Subnets (each associated w/ an AZ). Can make subnets public or private. Use Route Tables to allow/deny access.

62
Q

What is a VPC Public Gateway?

A

An EC2 instance in a public subnet can use an IGW (Internet Gateway) to get to the internet. An instance in a private subnet can use a NAT gateway (AWS managed) or NAT instance (self-managed) that is created in the public subnet to get to the IGW and then the internet.

63
Q

What is a Network ACL?

A

Firewall controls traffic from/to subnet

64
Q

What are the 2 ways to protect your subnet?

A

NACL (subnet level) or Security Groups (EC2 level)

65
Q

What are VPC Flow Logs?

A

Can see IP traffic going to your VPC, subnet or elastic network interface and AWS traffic from AWS services.

66
Q

What is VPC Peering?

A

2 subnets will act as if they’re on the same network. Allows 2 VPCs to communicate, but a third party must be added to both to see both.

67
Q

What are VPC Endpoints?

A

If you want things in your subnet to communicate w/ AWS services. Use a gateway for S3/DynamoDB and an interface for anything else.

68
Q

What is Site VPN and Direct Connect?

A

Site VPN: VPN from on-prem to AWS. Direct Connect (DX): create a physical connection to AWS.

69
Q

Whare are CGW and VGW?

A

For site-to-site VPN.

on-prem –> CGW (Customer Gateway) –> VGW (Virtual Private Gateway) –> AWS subnet

70
Q

What is Transit Gateway?

A

Connect 100,000s of VPCS w/ on-prem. All talk just to the gateway which routes.

71
Q

Do Security Groups and NACL both offer ALLOW and DENY rules?

A

NACL is both, Security groups are ALLOW only

72
Q

What is shield?

A

Shield Standard = Free protection against DDOS attacks

Shield Advanced = Costs, further protection

73
Q

What tools are available to guard against DDOS attacks?

A

Standard Shield, Advanced Shield, WAF (web application firewall), Cloudfront and Route 53 (protection at edge locations), use autoscaling

74
Q

What options for encryption keys?

A

KMS (Key Management Service) = AWS managed keys, CloudHSM (Cloud Hardware Security Module) = AWS provides hardware, you manage keys

75
Q

What types of encryption keys are available?

A

Customer Managed CMK (Customer Master Key), AWS managed CMK, AWS owned CMK, CloudHSM Keys

76
Q

What is ACM?

A

AWS Certificate Manager, inflight encryption via SSL/TLS certs (eg. https at the load balancer, http to the server)

77
Q

What is Secrets Manager?

A

Stores password and rotate every x days. Automate generation and integrated w/ RDS

78
Q

What is AWS Artifact?

A

Access compliance reports and agreements.

79
Q

What is GuardDuty?

A

Intelligent threat discovery. Machine learning and 3rd party data to detect anomalys. Dedicated “finding” for cryptocurrency attacks. Works on CloudTrail logs, VPC flow logs, DNS logs and Kubernetes Audit Logs.

80
Q

What is Inspector?

A

Automated Security Assessments. Can analyze EC2 instances or containers pushed to ECR.

81
Q

What is config?

A

Records auditing and recording data for compliance. Can alert via SNS.

82
Q

What is Macie?

A

Data security and privacy service. Alert you to PII.

83
Q

What is Security Hub?

A

Central service to check security across several AWS account. Integrates from GuardDuty, Inspector, Macie, IAM… etc. Config service must be enabled.

84
Q

What is Amazon Detective?

A

Deeper analysis, finding root cause.

85
Q

How can you report abuse?

A

Can report spam, port scanning, DDOS, intrusion attempts, malware… etc. Email them or fill out abuse form online.

86
Q

What actions can only be performed by root user?

A

Change account settings, certain tax invoices, close your account, change or cancel support plan, register as a seller in the Reserved Instance Martetplace, enable MFA on S3 bucket, sign up for gov cloud.

87
Q

What is Rekognition?

A

Find objects, people, text, scenes in images and video. Can be used for user verification or people counting.

88
Q

What is Transcribe?

A

Converts speech to text. Automate closed captioning, transcribe customer service calls.

89
Q

What is Polly?

A

Turn text to speech.

90
Q

What is Translate?

A

Language translation.

91
Q

What is Lex and Connect?

A

Lex == tech powers Alexa. Can build chatbots, call center bots
Connect == virtual contact center

92
Q

What is Comprehend?

A

NLP (Natual Language Processing)

93
Q

What is SageMaker

A

Build ML (Machine Learning) models

94
Q

What is Forecast?

A

Forecasting based on past data.

95
Q

What is Kendra?

A

Document Search Service, Googling your own documents.

96
Q

What is Personalize?

A

Personalized recommendations. eg. suggestions to buy based on past purchases.

97
Q

What is Textract?

A

Image to text. eg. extract data from driver’s license.

98
Q

What is Organizations?

A

Manage multiple accounts. Single payment for all accounts. Automate account creation. Restrict account privileges using Service Control Policies.

99
Q

What are (SCPs) Service Control Policies?

A

White/blacklist IAM actions at OU or Account level. Applied to all users and roles of account (except master account).

100
Q

What is Control Tower?

A

Setup and manage multi-account environment. Creates Organization and SCPs.

101
Q

What are the free services?

A

IAM, VPC, Consolidated Billing, Elastic Beanstalk, CloudFormation, Auto Scaling Groups. Have to pay for resources these services use.

102
Q

How is EC2 pricing computed?

A

On-demand, Reserved (1 or 3 year commitment, up to 75% discount), Spot (bid for unused capacity, up to 90% discount), Dedicated (reserve for 1 or 3 years)

103
Q

How is Lambda/ECS pricing computed?

A

Lambda (per call/duration), ECS (only $ for underlying resources), Farget (vCPU and memory)

104
Q

How is S3/EFS pricing computed?

A

Storage class (Standard, Infrequent Access, One-Zone IA, Intelligent Tiering, Glacier, Glacier Deep Archive. $ for # and size of objects. Pay per request to retrieve and pay for transfer OUT.

105
Q

How is EBS pricing computed?

A

Volume type, storage amount, IOPS (I/O per second), snapshots and outbout transfer.

106
Q

How is RDS pricing computed?

A

Per hour billing, engine, size, memory, additional storage, requests/month, transfer OUT. Can reserve instances for 1 or 3 years. If multi-AZ, $ for 1 instance/AZ.

107
Q

What are billing costing tools?

A

Estimating: Pricing calculator, Tracking: Billing dashboard, Cost allocation tags, Cost and usage reports, Cost explorer, Monitoring: Billing alarms, Budgets.

108
Q

What tool can you use to forcast cost/usage up to 12 months?

A

Cost Explorer

109
Q

On what 5 categories does Trusted Advisor recommend?

A

Cost Optimization, Performance, Security, Fault Tolerance, Service Limits.

110
Q

What are 7 core checks on Trusted Advisor Support Plans?

A

Basic/Developer Support plan: S3 bucket permission, Security Groups - Specific Ports Unrestricted, IAM Use, MFA on Root Account, EBS public snapshots, RDS public snapshots, service limits.
Business/Enterprice Support plan: all from basic + cloudwatch alarms and programmatic access.

AWS Practitioner (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions