Revision 1 Flashcards

1
Q

easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.
imply upload your code and Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring.
can access the underlying resources at any time.

A

AWS Elastic Beanstalk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

To gain greater discounts, which services can be reserved?

A

-EC2
-Amazon DynamoDB
-Amazon RedShift
-RDS
-ElastiCache
-OpenSearch Service,

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

-Serverless
-Fully managed NoSQL database
-Supports key-value and document data models.
-Replicates the data across multiple availability zones (AZs)

A

DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

attached to a VPC and allows inbound traffic from the internet to access the VPC. It is also used as a target in route tables for outbound internet traffic.

A

Internet gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Generate reports that break down AWS Cloud compute costs by duration, resource, or tags

A

AWS Cost & Usage Report.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Used for querying data in Amazon S3 using SQL.

A

Amazon Athena

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

connects your Amazon Virtual Private Clouds (VPCs) and on-premises networks through a central hub. This simplifies your network and puts an end to complex peering relationships. It acts as a cloud router – each new connection is only made once.

A

AWS Transit Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Estimate a monthly bill for the AWS Cloud resources that will be used

A

Pricing Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Types of flow logs

A

-VPC Flow Logs
-Subnet Flow Logs
-Elastic Network Interface FLow logsELastic

Help to troubleshoot connectivity issues

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (EC2), AWS Lambda functions, and container workloads for software vulnerabilities and unintended network exposure.

A

Amazon Inspector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

enables you to easily generate and use your own encryption keys on the AWS Cloud.

helps you meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated Hardware Security Module

A

AWS CloudHSM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage.

A

AWS Storage Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.

A

Amazon Cognito.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Key pairs are used for authenticating to

A

EC2 instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

-Estimate savings when comparing the AWS Cloud to an on-premises environment

A

AWS Total Cost of Ownership (TCO) Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

AWS-managed service can be used to process vast amounts of data using a hosted Hadoop framework?

A

-Amazon EMR Elastic Map Reduce

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

software licensing and delivery model in which software is licensed on a subscription basis and is centrally hosted.

A

Software as a Service (SaaS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

AWS Trusted Advisor offers a rich set of best practice checks and recommendations across five categories:

A

-cost optimization
-security
-fault tolerance
-performance
-service limits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

plan provides access to architectural and operational reviews, as well as 24/7 access to Cloud Support Engineers through email, online chat, and phone

A

enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

-NoSQL database that supports document data structures.
-Fully managed
-Flexible schema that allows for the data model to evolve
-MongoDB
-Automatically replicates six copies of your data across 3 availability zones to offer a 99.99% availability.

A

Amazon DocumentDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

A VGW is used for IPSec VPN connections to access a VPC

A

Virtual Private Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

group of protocols that are used together to set up encrypted connections between devices. It helps keep data sent over public networks secure.

A

IPSec

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

intelligent threat detection service

A

Amazon GuardDuty

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

is an Extract, Transform, and Load (ETL) service.

A

AWS Glue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

you visibility and control of your infrastructure on AWS. provides a unified user interface so you can view operational data from multiple AWS services and allows you to automate operational tasks across your AWS resources.

A

AWS Systems Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Controls traffic to and from an EC2

A

Security Group
-Allow only
-IP or other security groups
-stateful: return traffic automatically allowed
-evaluate rules before deciding if allow
-must be specified at launch or associated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

configuration management service that provides managed instances of Chef and Puppet

A

AWS OpsWorks

28
Q

Firewall that controls traffic from and to a subnet

A

NACL Network ACL
-Allow / Deny
-IP addresses
-stateless: return traffic must explicit allow
-process rules in numbered order when deciding weather to allow
-auto applied to all instances in subnet

29
Q

makes it easy to analyze, investigate, and quickly identify the root cause of security findings or suspicious activities.

A

Amazon Detective

30
Q

scalable, serverless, embeddable, machine learning-powered business intelligence (BI) service built for the cloud.

A

-Amazon QuickSight

31
Q

fully managed non-persistent application and desktop streaming service.

A

AppStream 2.0

32
Q

is a cloud computing model where a third-party provider delivers hardware and software tools to users over the internet. Usually, these tools are needed for application development.

A

Platform as a Service (PaaS)

33
Q

Which AWS services can be used as infrastructure automation tools?

A

-AWS OpsWorks
-AWS CloudFormation

34
Q

type of cloud-computing service that allows you to execute code in response to events

A

Function as a Service (FaaS)

35
Q

Seamless omnichannel experience through a single unified contact center for voice, chat, and task management.

A

Amazon Connect

36
Q

Elastic Load Balancers can only serve targets in a single Region

A

True

37
Q

used to capture network traffic information,

A

VPC Flow Logs

38
Q

used to deploy infrastructure from templates,

A

CloudFormation

39
Q

WAF can be used to protect on-premises resources if they are deployed behind an

A

Application Load Balancer (ALB)

40
Q

creating a low-latency private connection to an on-premises data center but it cannot be used to extend the VPC.

A

Direct Connect

41
Q

-Extend your VPC into the on-premises data center
-Fully managed service that offers the same AWS infrastructure, AWS services, APIs, and tools to virtually any data center, co-location space, or on-premises facility for a truly consistent hybrid experience.

A

AWS Outposts

42
Q

Allows instance to connec to the internet while remaining private/
-AWS managed

A

NAT Gateway

-customer managed : NAT instance

43
Q

content delivery network (CDN) that caches content around the world for lower latency access.
-improves performance for both cacheable content (such as images and videos) and dynamic content (such as API acceleration and dynamic site delivery).
-good fit for HTTP use cases

A

Amazon CloudFront

44
Q

manage the maximum available permissions for AWS Organizations
Applied to account or OU

A

Service Control Policy (SCP)

Organizational Units or Accounts

45
Q

AWS Well-Architected
Under the operational excellence pillar the following best practices

A

-Perform operations as code
-Make frequent, small, reversible changes
-Refine operations procedures frequently
-Anticipate failure
-Learn from all operational failures

46
Q

Beanstalk is a platform service that leverages the automation capabilities of

A

CloudFormation

47
Q

-CloudFormation templates that automate the deployment and a guide that discusses the architecture and provides step-by-step deployment instructions.
-Acelerators reduce hundreds of manual procedures into just a few steps, so you can build your production environment quickly and start using it immediately.

A

AWS Quick Starts

48
Q

A service that is intended for organizations with multiple accounts and teams who are looking for the easiest way to set up their new multi-account AWS environment and govern at scale

A

AWS Control Tower

49
Q

collections of users and have policies attached to them.

A

IAM Group
place the users in the group and then create an IAM policy with the correct permissions and attach it to the group.

50
Q

each NACL can be applied to one or more subnets, but each subnet is required to be associated with one—and only one—NACL

A

true

51
Q

capture information about inbound and outbound IP traffic on network interfaces in a VPC?

A

VPC Flow Logs

52
Q

AWS Storage Gateway types of gateways

A

Tape Gateway
Amazon S3 File Gateway
Amazon FSx File Gateway,
Volume Gateway

53
Q

serverless event bus that makes it easier to build event-driven applications at scale using events generated from your applications.

A

Amazon EventBridge

54
Q

type of cloud computing service that offers essential compute, storage, and networking resources on demand, on a pay-as-you-go basis

A

Infrastructure as a Service (IaaS)

55
Q

Enables access to your application by leveraging the same Edge Locations as CloudFront and routing connections across the AWS global network.
improves performance for a wide range of applications over TCP or UDP by proxying packets at the edge to applications running in one or more AWS Regions.
-good fit for non-HTTP use cases, such as gaming (UDP), IoT (MQTT), or VoIP, as well as for HTTP use cases that require static IP addresses or deterministic, fast regional failover.

A

AWS Global Accelerator

56
Q

Each tag consists of a key and a value. For each resource, each tag key must be unique, and each tag key can have only one value.

A

Add department-specific tags to each resource

57
Q

This service is also involved with creating and managing encryption keys but does not use dedicated hardware.

A

AWS Key Management Service (AWS KMS)

58
Q

Amazon EC2 Auto Scaling Policies Types

A

-Scheduled scaling
-Predictive scaling
-Target tracking scaling:(ASG keep in target)
-Step scaling:Launch resources in response to demand (waiting time)

59
Q

set of rules, called routes, that determine where network traffic from your subnet or gateway is directed.

A

VPC Route Table

60
Q

fully managed ledger database that provides transparent, immutable, and cryptographically verifiable transactions

A

Amazon Quantum Ledger Database (QLDB)

61
Q

-Relational database that is compatible with MySQL and PostgreSQL
-Scale up to 128 TB
-Can deploy replicas for read scaling within and across Regions.
-Offers automated backups.

A

Amazon Aurora

62
Q

blazing fast in-memory data store that provides sub-millisecond latency to power internet-scale real-time applications.

A

Amazon ElastiCache

63
Q

This service is used for optimizing the network topology of interconnected VPCs and on-premises networks.

A

AWS Transit Gateway

64
Q

threat detection and continuous security monitoring for malicious or unauthorized behavior to help you protect your AWS accounts and workloads.

A

Amazon GuardDuty

65
Q

outbound internet access for instances running in a private subnet.

A

NAT gateway

66
Q

Enable billing alerts to monitor actual AWS costs compared to estimated costs

A

Amazon CloudWatch.

67
Q

is used for managing EC2 instances such as installing patches and software.

A

Systems Manager