Hybrid Environment and Migration Flashcards

1
Q

What is AWS Directory Service?

A

Directory Service is an AWS managed implementation of a directory.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In AWS Directory Service, can multiple trees can be grouped into a forest?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What do Directories store?

A

Directories store objects (e.g. Users, Groups, Computers, Servers, File Shares) with a structure (domain/tree).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

True/False. Directory Service runs from within a VPC.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

True/False. Some AWS services such as Amazon Workspaces NEED a directory in order to operate.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What options are available with AWS Directory Service?

A
  1. Simple AD - An implementation of Samba 4 (compatible with basic AD functions)
  2. AWS Managed Microsoft AD - An actual Microsoft AD DS Implementation
  3. AD Connector - proxies requests back to an on-premises directory
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is AWS site-to-site VPN?

A

AWS Site-to-Site VPN is a hardware VPN solution which creates a highly available IPSec VPN between an AWS VPN and an external network such as a traditional on-premises network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the difference between Direct Connect and VPN?

A

VPNs are quicker to setup than Direct Connect and encrypt data in transit, but they don’t offer the same high performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can Site-to-Site VPNS provide HA?

A

AWS Site-to-Site VPN can be fully highly available if designed and implemented correctly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the max speed of a VPN?

A

The AWS “speed limit” for VPNs is 1.25GB per second throughput.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is AWS Transfer Family?

A

AWS Transfer Family is a secure transfer service that enables us to transfer files into and out of AWS storage services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

True/False. AWS Transfer Family does not support transferring data to or from S3 and EFS NFS file systems.

A

False. AWS Transfer Family SUPPORTS transferring data to or from S3 and EFS NFS file systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What protocols does AWS Transfer Family support?

A
  1. Secure Shell (SSH) File Transfer Protocol (SFTP)
  2. File Transfer Protocol Secure (FTPS)
  3. File Transfer Protocol (FTP)
  4. Applicability Statement 2 (AS2)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How are AWS Transfer Family costs calculated?

A

The costs associated with AWS Transfer Family are based on provisioned servers per hours and data transferred.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is AWS DataSync?

A

AWS DataSync is a data transfer service that can transfer large scale data (large amounts of data or high quantity of files) to and from AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How does AWS DataSync work?

A

DataSync keeps metadata (e.g. permissions/timestamps) and also has built in data validation so that you can confirm your data post-transfer matches the original data.

17
Q

Can scheduling be used with AWS DataSync.

A

Yes. Schedules can be set to ensure the transfer of data occurs during or outside of specific time periods.

18
Q

True/False. AWS DataSync Agents are software used to read on-premises data stores using NFS or SMB.

A

False. AWS DataSync Agents are software used to read OR WRITE TO on-premises data stores using NFS or SMB.

19
Q

How are AWS DataSync agents deployed?

A

Agents run on a virtualization platform such as VMWare and communicate with AWS DataSync Endpoints.

20
Q

What is AWS Direct Connect?

A

AWS Direct Connect links our internal network to an AWS Direct Connect location over a standard Ethernet fiber-optic cable.

One end of the cable is connected to our router, while the other is connected to an AWS Direct Connect router.

21
Q

What speeds can an AWS Direct Connect provide?

A

This physical connection can be 1, 10, or even 100GB per second (at the time of this writing).

22
Q

Are AWS Direct Connects owned by AWS?

A

Direct Connect (DX) Locations are not owned by AWS, AWS simply has space and equipment there.

23
Q

AWS Regions typically do not have multiple DX locations, and they are usually located in major data centers in metro areas.

A

False. AWS Regions typically HAVE multiple DX locations, and they are usually located in major data centers in metro areas.

24
Q

What is IPSec in a VPN?

A

IPSec is a group of protocols used to set up encrypted connections between devices. You can think of it as setting up secure tunnels across otherwise insecure networks. Ipsec keeps data sent over public networks secure and is often used to set up VPNs. It works by encrypting IP packets along with authenticating the source where the packets come from.

25
Q

What are Snowball, Snowball Edge, and Snow Mobiles?

A

These are three parts of the same product family designed to allow the physical transfer of data between business locations and AWS.

26
Q

What is AWS Snowball?

A

Snowball is a 50TB or 80TB device ordered from AWS. It tends to be economical to use this device when we need 10TB-10PB of data transferred.

Multiple Snowball devices can be sent to multiple premises.

Snowball devices contain only storage, and NOT compute.

27
Q

What is AWS Snowball Edge?

A

Snowball Edge comes with both storage and compute capacities.

Ideal for remove sites or where data processing on ingestion is needed.

28
Q

What is AWS Snow Mobile?

A

Portable datacenter within a shipping container on a truck.

Ideal for a single location when 10PB+ is required.

It’s generally not economical for multi-sites, or sub 10PB.

29
Q

What is AWS Storage Gateway?

A

Storage Gateway is a product which can be used for migrations from on-premises to AWS, extensions of a datacenter into AWS, storage tiering, disaster recovery, and replacement of backup systems.

30
Q

What modes are supported with AWS Storage Gateway?

A

Storage Gateway can be used in Volume, Tape, and File modes.

31
Q

What two modes can be used by AWS Storage Gateway Volume?

A

Storage Gateway Volume mode can be run in one of two sub-modes: Volume Stored, Volume Cached.

32
Q

What is Volume Stored mode in AWS Storage Gateway Volume?

A

All data is stored locally. This mode is great for ‘full disk’ backups of servers.

This mode is great for disaster recovery because it can be used to create EBS volumes in AWS using its EBS Snapshots.

The weakness of this mode is that it doesn’t improve datacenter capacity.

33
Q

What is Volume Cached mode in AWS Storage Gateway Volume?

A

All data is stored in AWS Managed part of S3, and then the frequently accessed data is cached locally.

34
Q

What is Storage Gateway in VTL mode?

A

Storage Gateway in VTL mode allows for replacing a tape-based backup solution with one that uses S3 and Glacier rather than physical tape media.

35
Q

What is Storage Gateway File?

A

Bridges on-premises file storage and S3 storage via Mount Points available over via NFS or SMB.

Files stored into a mount point, are visible as objects in an S3 bucket.

File Gateway doesn’t support Object Locking. This means that theoretically, two people could edit/overwrite the same file at the same time and data could be lost.

36
Q

What is AWS Transit Gateway?

A

The AWS Transit gateway is a networking gateway that can be used to simplify networking between VPCs, VPNs, and Direct Connect.

37
Q

Does Transit Gateway support multiple route tables?

A

TGWs supports multiple route tables, thus allowing for complex routing architectures.

38
Q

True/False. TGWs supports transitive routing.

A

True.

39
Q

True/False. TGWs cannot be used to create global networks by connecting multiple TGWs together.

A

False. TGWs CAN be used to create global networks by connecting multiple TGWs together.