Section 12: Leveraging the AWS Global Infrastructure Flashcards

1
Q

Points of Presence is another name for E___ L________

A

Edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the URL for the AWS infrastructure site

A

https://infrastructure.aws

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The service is a managed DNS service

A

Route53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

If mapping a URL to an IP4 address, this is called “a r_____”

A

a record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

If mapping a URL to an IP6 address, this is called a “q_________ a_ r_____”

A

quadruple a record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

if mapping a hostname to another hostname, this is called a C____

A

CNAME

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

If mapping a hostname to an AWS Resource, this is called an

A

Alias

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

If mapping:

  1. hostname to IP4
  2. hostname to IP6
  3. hostname to hostname
  4. hostname to AWS Resource

a. an alias
b. a record
c. CNAME
d. a quadruple record

A

1b
2d
3c
4a

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Route 53 Routing policies:

  1. Simple Routing Policy
  2. Weighted Routing policy
  3. Latency routing policy
  4. Failover routing policy

a. looks at where user is located to then direct user to the closest DNS server
b. users a primary and failover EC2 instance for DNS server
c. assign weight (priority) to instances (ie. 10, 70, and 20) - similar to load balancing
d. no health checks, very basic

A
  1. d
  2. c
  3. a
  4. b
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Routing Policy:

looks at where user is located to then direct user to the closest DNS server

A

Latency routing policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Routing Policy:

assign weight (priority) to instances (ie. 10, 70, and 20) - similar to load balancing

A

Weighted routing policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Routing Policy:

no health checks, very basic

A

Simple routing policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Routing Policy:

uses a primary and failover EC2 instance for DNS server

A

Failover routing policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How much does Route 53 charge for the domain?

A

$12/year and $.50/month for the hosted zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Anytime you see “CDN’ on the exam, think of this service

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does CDN stand for?

A

Cloud Delivery Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

this service improves read performance by caching the content of your website at the different Edge locations

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

CloudFront is present at ___ (how many) Points of Presence globally

A

216

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

CloudFront is protected against what kind of attacks

A

DDoS

20
Q

CloudFront is protected against DDoS attacks due to integration with which two services

A

Web Application Firewall
Shield

21
Q

What is a CloudFront origin?

A

the location where content is stored, and from which CloudFront gets content to serve to viewers.

22
Q

what is the term for the location where CloudFront content is stored, and from which CloudFront gets content to serve to viewers.

A

origin

23
Q

What is the term used for when CloudFront can be used to upload files to S3

A

ingress

24
Q

what is an ingress?

A

CloudFront can be used to upload files to S3

25
Q

what is CloudFront Origin Access Control (OAC)

A

enhanced security for CloudFront

26
Q

what is the name of the enhanced security for CloudFront?

A

CloudFront Origin Access Control (OAC)

27
Q

CloudFront Origin Access Control (OAC) is replacing what previous security system?
Origin Accentuate Identify (OAI)
Access Identity Origin (AIO)
Origin Access Identity (OAI)

A

Origin Access Identity (OAI)

28
Q

What type of AWS service does CloudFront use to distribute files and cache them at the edge

A

S3

29
Q

What are two type of CloudFront origins (pick two)
S3
Elastic Block store
Elastic File store
Custom Origin (HTTP)

A

S3 and Custom Origin (HTTP)

30
Q

CloudFront, when a file is cached, it is cached at each Edge location. About how long is the file cached (roughly)?

A

a day

31
Q

Does this describe CloudFront or S3 Cross Replication?

Global Edge network
Files cached
Great for static content that needs to be available everything

A

CloudFront

32
Q

Does this describe CloudFront or S3 Cross Replication?

must be setup for each region you want replication to happen
files are updated in near real time
read only
better for dynamic content that needs to be available at low-latency in a few regions

A

S3 Cross Region replication

33
Q

CloudFront is a (regional/global) service

A

Global

34
Q

When you want to upload or download a file that’s in an S3 bucket that is far away from you, what service might you consider for improving performance?

A

S3 Transfer accelerator

35
Q

This service allows you to optimize the route to your application by about 60%

A

AWS Global Accelerator

36
Q

In order to improve connection speed to an application, traffic can be routed through an E___ location

A

Edge

37
Q

The An_c___ IP are created for your application and traffic is sent through Edge locations

A

Anycast IP

38
Q

What type of service is this?
No caching
proxying packets at the Edge locations to applications running in one or more AWS Regions
Good for HTTP use cases that require static IP address
Good for HTTP use cases that require deterministic, fast regional failover

A

AWS Global Accelerator

39
Q

The URL for a small tool that allows you to do a speed test for Global Accelerator

A

https://speedtest.globalaccelerator.aws/#/

40
Q

This service allows traffic to/from an application to travel over the private AWS network instead of the public internet to help improve traffic speed

A

AWS Global Accelerator

41
Q

This service offers server racks that offer the same AWS infrastructure, services, APIs & tools to build your own applications on-prem just as in the cloud

A

AWS Outposts

42
Q

W___L_____ Zones are infrastructure deployments embedded within the telecommunications providers’ datacenters at the edge of 5G networks

A

WaveLength Zones

43
Q

WaveLength Zones provide ultra (high/low) latency through (3G/4G/5G) networks

A

Low/5G

44
Q

Wavelength Zones provide a (low/high) bandwidth and (insecure/secure) connection to the parent region

A

High/Secure

45
Q

AWS L____ Zones places AWS computer, storage, database and other selected AWS services closer to end users to run latency-sensitive applications

A

Local Zones

46
Q

As it relates to Global Applications Architecture:

1 Single Region, Single AZ
2. Single Region, Multi AZ
3. Multi Region, Active-Passive
4. Multi-Region, Active-Active

A - write to only “active”, replication to “read”, users can read from “read”, “write” does not have global latency (as writing is to only one region) but “read” is global as it can be done from multiple regions

B - has high availability, lack of global latency, relatively easy to setup

C - read and write to multiple regions, global latency for read and write, most difficult to setup

D - lack of high availability, lack of global latency, easy to setup

A

1 - D
2 - B
3 - A
4 - C