Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cloud Foundations > Study > Flashcards

Study Flashcards

1
Q

a piece of software that makes itself available over the internet and uses standardized format for request and response of an API interaction

A

web service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

what are three ways to interact with AWS?

A

AWS Management Console
Command Line Interface
Software Development Kits (SDKs)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

six perspectives of AWS Cloud Adoption Framework (AWS CAF)

A

business, people, governance, platform, security, operations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

describe compute pricing

A

charged per hour/second (Linux only); varies by instance type

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

describe Storage pricing

A

charged per GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

describe Data Transfer pricing

A

outbound is aggregated and charged; inbound usually has no charge; usually charged per GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

how long does free tier stay free?

A

1 year

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what are 5 free AWS services?

A
  • Amazon VPC
  • Elastic Beanstalk
  • Auto Scaling
  • AWS CloudFormation
  • AWS Identity and Access Management (IAM)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what are 4 considerations when determining Total Cost of Ownership (TCO)?

A
  1. server costs
  2. storage costs
  3. network costs
  4. IT labor costs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

AWS tool that lets you estimate monthly costs, identify opportunities to reduce costs, model solutions, explore price points, find available instance types, name estimates and create name groups of services

A

AWS Pricing Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AWS feature that consolidates different accounts into a tree

A

AWS Organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

rules that allow or deny access to AWS services for individuals in an organization unit (OU)

A

SCP (Service Control Policies)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

true or false: there is no limit on the number of OU (organization units) you can have

A

false

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

tech support service for proactive guidance

A

Technical Account Manager (TAM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

tech support service for best practices

A

AWS Trusted Advisor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

tech support service for account assistance

A

AWS Support Concierge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

list the 4 tech support plans and the case severity they support

A

Basic - NO case support
Developer - normal and low
Business - urgent, high, normal, low
Enterprise - critical, urgent, high, normal, low (all)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

what 3 elements can AWS infrastructure be broken into?

A

regions, availability zones, and points of presence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

what are the 4 steps to securing a new account?

A
  1. Stop using root (and delete root user access keys)
  2. Enable MFA
  3. Use AWS CloudTrail to track user activity
  4. Enable a billing report
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

service that provides managed DDoS protection

A

AWS Shield

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

a resource for compliance related info, where you can access security and compliance reports through the management console

A

Artifact

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

3 steps for making your VPC architecture secure

A
  • isolate subnets if possible
  • choose appropriate gateway device or VPN connection for your needs
  • use firewalls
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

a highly available and scalable DNS web service

A

Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

globally distributed system of caching servers

A

Content Delivery Network (CDN)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

9 key decisions when creating an EC2 instance

A
  1. Select an AMI
  2. Select an instance type
  3. Specify network settings
  4. Specify IAM role
  5. Specify user data script (optional)
  6. Specify storage
  7. Add tags
  8. Specify security group settings
  9. Identify or create the key pair
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

software platform that lets you run containers created from an image

A

Docker

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

AWS service for container management

A

EC2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

open source software for container orchestration that complements Docker

A

Kubernetes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Amazon service that enables running Kubernetes on AWS

A

Amazon Elastic Kubernetes Service (EKS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

fully managed Docker container registry where you can store, manage, and deploy Docker container images

A

Amazon Elastic Container Registry (ECR)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

AWS service for serverless, event-driven computing

A

Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

max memory allocation for a single Lambda function

A

3,008 MB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

max execution time for a Lambda function

A

15 minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

AWS service for easy deployment of web applications

A

Elastic Beanstalk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

a file storage service for use with Amazon EC2. It provides a file system interface, file system access semantics, and concurrently-accessible storage for up to thousands of Amazon EC2 instances

A

EFS (Elastic File System)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

what do you need to access AWS resources programmatically?

A

Access Key ID and Secret Access Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

instance type that lets you take advantage of unused EC2 capacity in the AWS cloud, available at up to a 90% discount compared to On-Demand prices. You can use them for various stateless, fault-tolerant, or flexible applications such as big data, containerized workloads, CI/CD, web servers, high-performance computing (HPC), and other test & development workloads

A

Spot Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

support type where you have production workloads on AWS and want 24x7 phone, email and chat access to technical support and architectural guidance in the context of your specific use-cases. You get full access to AWS Trusted Advisor Best Practice Checks. Also, you get access to Infrastructure Event Management for an additional fee

A

Business Support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Which two AWS services can be used to decouple components of a microservices based application on AWS Cloud

A

SNS and SQS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

what AWS service adds user sign-up, sign-in access control to web and mobile apps?

A

Cognito

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

AWS feature that lets you explore AWS services and create an estimate for the cost of your use cases on AWS

A

AWS Pricing Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

support that includes concierge-like service where the main focus is on helping the customer achieve their outcomes and find success in the cloud. You get access to online training with self-paced labs, 24x7 technical support from high-quality engineers, tools and technology to automatically manage the health of your environment, consultative architectural guidance, a designated Technical Account Manager (TAM) to coordinate access to proactive/preventative programs and AWS subject matter experts

A

Enterprise Support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

AWS service that lets you run code without provisioning or managing servers. You pay only for the compute time you consume and can run code for virtually any type of application or backend service - all with zero administration

A

Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Fill in the blank: _____ volume can be attached to a single instance in the same Availability Zone whereas ____ file system can be mounted on instances across multiple Availability Zones

A

EBS Volume
EFS file system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS

A

Macie

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

central resource for compliance-related information that matters to your organization. It provides on-demand access to AWS’ security and compliance reports and select online agreements

A

AWS Artifact

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

professional services firms that help customers of all types and sizes design, architect, build, migrate, and manage their workloads and applications on AWS, accelerating their migration to AWS cloud

A

APN (Amazon Partner Network) Consulting Partners

48
Q

AWS Web Application Firewall (WAF) offers protection from common web exploits at which layer?

A

Layer 7 (Application)

49
Q

a fully managed, serverless, key-value NoSQL database designed to run high-performance applications at any scale. offers built-in security, continuous backups, automated multi-region replication, in-memory caching, and data export tools

A

DynamoDB

50
Q

DynamoDB feature that replicates data automatically across your choice of AWS Regions and automatically scale capacity to accommodate your workloads

A

global tables

51
Q

Fill in the blank: Each AWS Region consists of _______ Availability Zones

A

Two or more

52
Q

Fill in the blank: Each Availability Zone (AZ) consists of ___________ discrete data centers

A

One or more

53
Q

Which two AWS services support VPC Endpoint Gateway for a private connection from a VPC?

A

S3, DynamoDB

54
Q

a physical server fully dedicated for your use, so you can help address corporate compliance requirements, and allows you to bring your own supported software licenses

A

EC2 Dedicated Host

55
Q

provides temporary block-level storage for your instance. This storage is located on disks that are physically attached to the host computer. This is a good option when you need storage with very low latency, but you don’t need the data to persist when the instance terminates or you can take advantage of fault-tolerant architectures

A

Instance Store

56
Q

In order for an account to be removed from an Organization, it must be able to ______________

A

operate as a stand alone account

57
Q

service used to analyze and debug serverless and distributed applications such as those built using a microservices architecture. You can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.

A

X-Ray

58
Q

service that recommends optimal AWS resources for your workloads to reduce costs and improve performance by using machine learning to analyze historical utilization metrics

A

AWS Compute Optimizer

59
Q

what is the minimum time charged for Linux based EC2 instances?

A

One minute

60
Q

an automated security assessment service that helps improve the security and compliance of applications deployed on your Amazon EC2 instances

A

Amazon Inspector

61
Q

persistent block storage solution where individual storage volumes are created and attached to EC2 instances, and data is automatically replicated within an Availability Zone

A

EBS (Elastic Block Storage)

62
Q

object storage solution that uses buckets to store data redundantly in multiple Availability Zones in the same region

A

S3 (Simple Storage Solution)

63
Q

a simple, scalable, fully managed elastic network file system for use with AWS Cloud services and on-premises resources

A

EFS (Elastic File System)

64
Q

a secure, durable, and extremely low-cost Amazon S3 cloud storage class for data archiving and long-term backup

A

S3 Glacier

65
Q

container for storing archives with S3 Glacier

A

vault

66
Q

use cases for RDS

A

web/mobile apps, e-commerce, mobile/online games, complex transactions and queries

67
Q

DynamoDB operation to find an item using an attribute other than the primary key

A

scan

68
Q

a fully-managed petabyte-scale cloud-based data warehouse product designed for large scale data set storage and analysis

A

Redshift

69
Q

what are use cases for Redshift?

A

Enterprise Data Warehouses (EDW), big data, SaaS

70
Q

a fully-managed MySQL and PostgreSQL-compatible relational database built for the cloud, which automates time-consuming administration tasks like hardware provisioning, database setup, patching, and backups

A

Aurora

71
Q

five pillars of AWS Well-Architected Framework

A
  • Operational excellence
  • Security
  • Reliability
  • Performance efficiency
  • Cost optimization
72
Q

the probability that your entire system will function as intended for a specified period

A

reliability

73
Q

normal operation time/total time; percentage of uptime

A

availability

74
Q

5 categories under Trusted Advisor

A
  • cost optimization
  • performance
  • security
  • fault tolerance
  • service limits
75
Q

type of load balancing that is done on HTTP and HTTPS on the application layer

A

Application Load Balancer

76
Q

type of load balancing done on the transport layer where extreme performance is required

A

Network Load Balancer

77
Q

type of load balancer done on HTTP, HTTPS, TCP, and SSL traffic, as well as across EC2 instances, on the application and transport layers

A

Classic Load Balancer

78
Q

a monitoring and observability service built for DevOps engineers, developers, site reliability engineers (SREs), and IT managers. Provides data and actionable insights to monitor applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health

A

CloudWatch

79
Q

what are the 5 design principles of the Operational Excellence pillar in the Well-Architected Framework?

A
  • documentation
  • frequent and small changes
  • operations as code
  • refining procedures quickly
  • anticipate system failure
80
Q

the pillar of the well-architected framework that focuses on the stability of AWS systems and their ability to support business value with long uptimes and durable systems

A

Reliability

81
Q

well-architected framework pillar that supports computing resources to maintain and meet business requirements as technologies change over time within the AWS structure

A

Performance Efficiency

82
Q

what are the 4 principles of the Performance Efficiency pillar in the well-architected framework?

A
  • going global
  • implementing serverless technologies
  • experimenting with development
  • mechanical sympathy
83
Q

total number of VPCs you can have in one region

A

5

84
Q

what should you do immediately after logging into root user for the first time?

A

enable MFA

85
Q

when using the visual editor from the IAM console to create a new IAM policy, what two components will you be prompted to provide?

A
  • choose a service
  • select an action
86
Q

EC2 instance purchasing option best for short, uninterrupted workloads for predictable, pay by the second pricing

A

on-demand

87
Q

EC2 instance purchasing option good for steady-state usage applications (think database), purchased for 1 or 3 years

A

reserved instance

88
Q

EC2 instance purchasing type good for long workloads where you get a discount based on long term usage and you commit to a certain usage type

A

savings plan

89
Q

EC2 instance purchasing type for short workloads that are resilient to failure and offer the biggest discount, but less reliability

A

spot instances

90
Q

EC2 instance purchasing type where you reserve an entire physical server and BYOL (bring your own license) is permitted; most expensive option

A

dedicated host

91
Q

EC2 instance purchasing option where no other customers will share your hardware

A

dedicated instance

92
Q

EC2 instance purchasing option good for short term, uninterrupted workloads in a specific AZ, where you can reserve capacity in that AZ for any duration; no time commitment, no billing discount

A

capacity reservation

93
Q

what instance type is best for the following use cases:
- diverse worloads
- web servers
- code repositories

A

general purpose

94
Q

what instance type is best for the following use cases:
- batch processing workloads
- media transcoding
- high performance web servers
- high performance computing
- scientific modeling
- machine learning
- dedicated gaming servers

A

compute optimized

95
Q

what instance type is best for the following use cases:
- high performance databases
- distributed web scale cache stores
- in-memory database optimized for BI
- applications performing real time processing of big unstructured data

A

memory optimized

96
Q

what instance type is best for the following use cases:
- high frequency online transaction processing (OLTP) systems
- relational and NoSQL databases
- cache for in-memory databases
- data warehouses
- distributed file systems

A

storage optimized

97
Q

what should be used to ensure regulatory compliance and enforce encryption of data at rest and data in transit?

A

IAM

98
Q

AWS service that provides information related to compliance in one location

A

AWS Compliance Center

99
Q

main benefit of Elastic IP address

A

ability to move network attributes from one instance to another in a single step

100
Q

instance purchasing type used for running processes in the background, batch processing, data aggregation, and non-time sensitive work

A

spot instances

101
Q

networking connection that links your on premises network to AWS network

A

AWS Direct Connect

102
Q

a set of virtual servers used in AWS to add resources in processing large amounts of data at reduced cost from within the EC2 infrastructure

A

fleet

103
Q

instance purchase type for spiky, short term, unpredictable workloads

A

on demand instances

104
Q

IAM policy type used to control and maintain a strict correlation between the principle entity and the policy itself

A

inline IAM policy

105
Q

Amazon recommends data in transit be encrypted using which two protocols?

A

SSL/TLS or IPSec ESP

106
Q

a centralized platform for data science, data analytics, and machine learning within S3

A

S3 data lake

107
Q

service used to perform hardware checks

A

Personal Health Dashboard

108
Q

max size of an object in S3

A

5 TB

109
Q

max number of objects that an S3 bucket can contain

A

infinite

110
Q

a CDN that caches copies of data around the world near customers using edge locations

A

CloudFront

111
Q

AWS service that creates a mini Region inside a company’s own data center or company building; an example of a hybrid cloud

A

AWS Outposts

112
Q

service that’s good for processing terabytes/petabytes of data, structured or unstructured

A

RedShift

113
Q

what two services does a Gateway type end point work with?

A

DynamoDB, S3

114
Q

service that connects several VPCs within an individual region

A

VPC Peering

115
Q

6 types of database instances offered by RDS

A
  • Microsoft SQL Server
  • MySQL
  • MariaDB
  • Oracle
  • Amazon Aurora
  • PostgreSQL
116
Q

3 customer support cases you can create with the AWS Management Console

A
  • Account and billing
  • Service limit increase
  • Technical support

Cloud Foundations (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions