Testing Flashcards

1
Q

IAM Stands for:

A

Identity and Access Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does a IAM User use to Log in:

A

Username and Password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

CLI stands for:

A

Command Line Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

API stands for:

A

Application Programming Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

CLI/API uses what to log in

A

Access Keys and Access Key IDs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

MFA stands for:

A

Multi Factor Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

SCP Stands for:

A

Service Control Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

IAM Best Prctices:

A
  1. Lock AWS account user access keys
  2. Create individual users
  3. Use groups to assign permissions to users
  4. Grant least privilege
  5. Start with AWS managed policies
  6. Use customer managed policies
  7. Use access levels to review permissions
  8. Strong Password policy
  9. MFA
  10. Use Roles for apps and to delegate permissions
  11. do not share keys
  12. rotate credentials
  13. remove unnecessary credentials
  14. Use policy conditions
  15. Monitor activity
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

EBS stands for:

A

Elastic block store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Block Storage and what is AWS service

A

Hard drives connected to a system (a C: or D: drive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Block Storage and what is AWS service

A

Hard drives connected to a system (a C: or D: drive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

EC2 Stands for:

A

Elastic Compute Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does EC2 do?

A

Runs virtual servers or instances in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is User Data

A

User Data is code that runs commands

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Meta Data

A

Metadata returns information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is LightSail

A

SUPER SIMPLE cheap cloud server for those with little expertise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Batch

A

Allows you to run thousands of computing jobs on AWS

It dynamically provisions the optimal quantity and types of resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is a Docker Container

A

It is a place to store all the steps to run an app including OS, code, settings, etc
It makes the movable from hardware and very efficient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does ECS stand for

A

Elastic Container Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a cluster

A

a logical grouping of tasks or services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is ECS Launch Type

A

it is an elastic container that you keep control of
You are charged per instance
You are responsible for optimization and management but get more control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is ECS Fargate

A

it is an elastic container that is managed by AWS
Charged per running tasks
You have limited control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

EBS Snapshots do what

A

Capture a volume at a point in time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

where is a snapshot stored

A

Inside a region outside of a AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Differences between SnapA and SnapB and SnapC

A

Snap A is the OG while all those after are the changes that are made after the OG

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What does DLM stand for

A

Data Lifecycle Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What does DLM do

A

automates creation, retention, and deletion of snapshots

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What does S3 stand for:

A

Simple Storage Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What kind of storage system is S3

A

Object storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What are the 6 classes of S3 storage

A
  1. Standard
  2. Intelligent Tiering
  3. Standard-IA
  4. One Zone-IA
  5. Glacier
  6. Glacier Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Standard S3 Storage

A

3 AZ

common data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Intelligent Tiering

A

3 AZ

It moves data to the most logical storage class

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Standard-IA Storage Class

A

3 AZ

charged per GB retrieved so it needs to data not regularly accessed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

One Zone-IA Storage class

A

Like Standard-IA but in one AZ

It makes the data less protected at a cheaper price

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Glacier Storage

A

3 AZ

Available in minutes at an updated price

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Glacier Deep Dive

A

3 AZ
Available in hours
protected data that you do not need right away

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

S3 Versioning

A

Keeping multiple variants in the same bucket

used to preserve, retrieve and restore objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

S3 Replication

A

CRR Replicates data across region

SRR Replicates data in the same region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Storage Gateway uses

A

Moving data from on premises to the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

File Gateway

A

Storage gateway using a file based system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Volume Gateway

A

Block based storage gateway system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Backup Gateway

A

Storage gateway that uses block or file protocols

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

S3 Features

A
Transfer acceleration
Requester pays
Events
Static website hosting
Encryption
Replication
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is Route 53

A

It is a DNS or Domain Naming System

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Route 53 Policies

A
simple
failover
geolocation
geo proximity
latency
Multivalue answer
weighted
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Route 53 features

A

Domain registration
hosts zones
health checks
monitors Traffic flow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Auto scaling Groups

A

EC2 Status Check

CloudWatch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

EC2 Status Check

A

If one instance fails status check will replace that instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

CloudWatch does what

A

Monitors Metrics

adds and removes instances based on metrics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What does Auto Scaling do?

A
Launches and terminates instances automatically
scales horizontally
Responds to checks and metrics
can scale on demand or by a schedule
set policies on how to respond
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What does ELB stand for:

A

Elastic Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

4 types of Elastic Load Balancers

A

Application
Network
Classic
Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Application Load Balancer

A

Operates at request level (level 7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Network Load Balancer

A

Operates at the connection level (level 4)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Classic Load Balancer

A

Older generation that uses both level 4 and 7

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Gateway Load Balancer

A

used in front of virtual apps such as firewalls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Scaling Policies

A

Target Tracking
Simple Scaling
Step Scaling
Scheduled scaling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Benefits of Serverless services

A
No instances
No hardware
No management
Capacity provisioning and patching
Provides auto scaling
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Serverless services

A
Lambda
Fargate
EventBridge
Step Function
SQS
SNS
S3
API Gateways
DynamoDB
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Lambda Functions

A

Executes code when needed

only pay when code runs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Lambda function benefits

A

no servers
Continuous Scaling
millisecond billing
integrates with services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

SQS stands for what

A

Simple Queue Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

SQS does what

A

It decouples the App tier from the Web tier.

pull based. the app will pull the info from the queue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

MQ is a what

A

Message broker service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

MQ does what

A

It works like sqs EXCEPT:
it works with industry standards like apache
and
it is a push based system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

SNS stand for what

A

Simple Notification Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

What does SNS do?

A

Pushes out information out instead of pull like SQS

pushes info to topic which will be sent to all accounts attached to that topic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Step Functions

A

Coordinates workflows automatically

Uses visual workflows and run state machines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

SWF stands for what?

A

Simple Workflow Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

SWF does What?

A

Works like Step functions but in workflows that require human interaction

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

EventBridge Does what?

A

It is a serverless event bus

it takes data that triggers an event to signal to the right server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

API stands for what?

A

Application Programming Interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

API Gateways do what?

A

It is the front door for applications
Connects multiple ways
forwards requests to Lambda or VPCs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

VPC Stands for?

A

Virtual Private Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

What are Security Groups

A

Firewall for Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What does ACL stand for

A

Access Control List

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

What is ACLs purpose

A

A firewall at the Subnet level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

3 types of IP addresses

A

Public
Private
Elastic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

Qualities of a Public IP address

A

Dynamic
lost when instance stops
cannot be moved between instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

Qualities of a Private IP

A

Attached to ALL instances

Retained when instance stops

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

Qualities of an Elastic IP

A

Static public address
Retained when instance stops
can be moved between instance
Pay if not in use

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

What does NAT stand for

A

Network Address Translation

83
Q

NAT Instances and Gateways uses and their difference

A

used for accessing internet from private subnets
Instances managed by you
Gateways managed by AWS

84
Q

VPC Peering

A

Routes made between VPC and IP address

85
Q

VPN stands for what

A

Virtual Private Network

86
Q

Managed VPN

A

VPN connection between on premises sites and AWS

87
Q

Direct Connect

A

Private connection from on premises to AWS

88
Q

Transit Gateway

A

Connects VPCs and on premises through a central hub

89
Q

Outposts

A

Deploy actual infrastructure on premises to connect to AWS

90
Q

What is CloudFront

A

Content delivery Network

91
Q

What does CloudFront do?

A

Sends data to edge locations

Allows customers to access data quickly

92
Q

What does Global Accelerator do?

A

Routes connections to app endpoints

improves availability and performance of apps

93
Q

What does CloudFormation do?

A

Infrastructure provisioned automatically through code

allows you to provision consistently

94
Q

What does CDK stand for

A

Cloud Development Kit

95
Q

What does Cloud Development Kit do?

A

Open source framework to define app resources using familiar programming languages

96
Q

What does Beanstalk do?

A

Management service for Web Apps

Deploys environment that can include Auto scaling, elastic load balancing and databases

97
Q

What does X-Ray do?

A

Analyze and debug production

98
Q

What does OpsWorks do?

A

It is a Config Management service in Chef or Puppet

99
Q

RDS stands for

A

Relational Database Service

100
Q

What does RDS use for encryption

A

KMS

101
Q

What does RDS support

A
SQL
Oracle
MySQL
Postgre
Aurora
MariaDB
102
Q

What is Aurora

A

A relational database that is compatible with MySQL and Postgre

103
Q

What is DynamoDB

A

Fully managed NoSQL Key/Value Store

It is a non-relational, Key-Value System

104
Q

DynamoDB Features

A
Serverless
NoSQL
Push button horizontal
DAX
Back ups
Global Table
105
Q

What is Redshift

A

A relational database and SQL Data Warehouse

Used for Online analytics processing (OLAP)

106
Q

EMR stands for what?

A

Elastic Map Reduce

107
Q

What does EMR do?

A
Manages Cluster Platforms frameworked in Hadoop and Spark
Performs ETL (extract, transform, and load) functions
Processes data for analytics and business intelligence
108
Q

What does Elasticache do?

A

It is a key-value store
fully manages implementations of redis and memcached
you put it in front of databases like RDS and Dynamo to lower latency of extracting data

109
Q

What does Athena do?

A

Runs queries on S3 data

110
Q

What does Glue do?

A

It is a ETL service for the metadata stored by Athena

111
Q

How do Kinesis Data Streams work

A

Producers send data to shards

consumers process data to save to another source

112
Q

How does Kinesis firehose work

A

automated data sent without shards

Saves data directly to another source

113
Q

How does Kinesis Data Analytics work

A

Real time SQL processing for streaming

114
Q

What does SQL stand for

A

Structured query langauge

115
Q

What does Pipeline do

A

processes and moves data between different services

116
Q

What is Quicksight

A

Business Intelligence Service

Creates and publish interactive BI dashboards for machine learning

117
Q

What is Neptune

A

Fully managed graph database service

118
Q

What is DocumentDB

A

A fully managed Document database that queries and indexes JSON data

119
Q

What is QLDB

A

A fully managed ledger database that provides verifiable transaction logging

120
Q

What is Managed Blockchain

A

Joining public and private networks using ethereum

121
Q

What is Organizations

A

a consolidation of multiple accounts

most important feature for test is consolidated billing

122
Q

What is control tower

A

Simplifies the creation of multiple accounts by setting up governance, compliance, and security guardrails

123
Q

What is Systems Manager

A

Manages multiple AWS Resources

124
Q

System Manager components

A
Automation
Run Command
Inventory
Patch Manager
Session Manager
Parameter Store
125
Q

What is Service Catalog

A

Creates and manage catalogs of IT services

Allows you to manage commonly deployed services

126
Q

What is Config

A

It is a fully managed compliance management service

Helps with Autiting, Security Analysis, and Resource Change Tracking

127
Q

What is Trusted advisor

A

Helps Optimize your environment

128
Q

What does Trusted Advisor Advise on

A

Cost Optimization
Performance
Security
Fault Tolerance

129
Q

What is Personal Health Dashboard

A

A Dashboard that provides alerts when events will affect you

130
Q

What is Service Health Dashboard

A

Provides the Current status of AWS Services

131
Q

What is Directory Service

A

Fully managed hosts active directory

132
Q

What is AD Connector

A

Allows on premises user to log into AWS with SSO

133
Q

What is Simple AD

A

Low scale/cost Active Directory

134
Q

What does System Manager Parameter Store do

A

Provides Secure, hierarchical storage

135
Q

What can systems manager parameter store

A

passwords
data strings
license codes

136
Q

What are the values in systems manager parameter store

A

do it all as parameter values
plaintext (unencrypted)
ciphertext (encrypted)

137
Q

What is Secret Manager

A

it is similar to parameter store BUT

allows native and automatic key rotation, fine grained permissions, and central auditing

138
Q

What does KMS stand for

A

Key Management Service

139
Q

What does KMS do

A

Creates and manages Keys

140
Q

CloudHSM stands for

A

Cloud based hardware security Module

141
Q

What does CloudHSM do

A

Generates your own encryption keys

more control and more secure than KMS but more expensive

142
Q

What is CloudTrail

A

Logs API activity for auditing

Can trigger cloudwatch events

143
Q

What are VPC Flow Logs

A

Capture the information about IP traffic going to and from the VPC interfaces

144
Q

Where are Flow Logs created

A

VPC
Subnet
Network Interfaces

145
Q

What does S3 Access Logs do

A

Provides records for the requests made to a bucket

146
Q

S3 Access Logs details include

A
Requester
Bucket Name
Time
Action
Response Status
Possible Error Codes
147
Q

What does Detective do?

A

Analyze, Investigate, and Identify security issues root causes

148
Q

Data sources for Detective

A

VPC Flow Logs
CloudTrail
GuardDuty

149
Q

What is GuardDuty and what does it detect

A
Intelligent Threat Detection Service
Detects:
Account Compromise
Instance Compromise
Malicious Reconnaissance
Bucket Compromise
150
Q

What is Macie

A

Fully managed Data security

Uses machine learning and pattern matching to find and protect sensitive data in S3

151
Q

What does WAF stand for

A

Web Application Firewall

152
Q

What does WAF do

A

Creates rules that block common exploits like SQL injection and Cross site scripting

153
Q

What is Sheild

A

Managed DDoS protection service

154
Q

What is Artifact

A

Provides on demand security and compliance reports

155
Q

What is Security Hub

A

Provides a view of security alerts across AWS Accounts

156
Q

What is Security Bulletins

A

Security and privacy events affecting AWS Services

157
Q

Why should you contact the Trust and Safety team

A
Spam
Port Scanning
DDoS
Intrusion Attempts
Hosting of objectional or copyrighted material
Distributing Malware
158
Q

Penetration Testing

A

Testing Security by simulating an attack

is allowed for 8 services without permission

159
Q

What are the pillars of Well-Architected

A
Operational Excellence
Security
Reliability
Performance Efficiency
Cost Optimization
160
Q

What does Well Architected Consist of:

A

Guidance
Tool
Lenses
Architecture Center

161
Q

Operational Excellence Pillar

A

Support Development of Workloads

162
Q

Security Pillar

A

Protect data, systems, and assets

163
Q

Reliability Pillar

A

Ensuring workload can perform

164
Q

Performance Efficiency Pillar

A

Ability to use computing resources meet system requirements

165
Q

Cost Optimization Pillar

A

Ability to run systems at the lowest price

166
Q

What do you pay for in AWS

A

Compute
Storage
Outbound Data

167
Q

What are the basics for On-Demand pricing

A

Standard rate

No Commitments

168
Q

What are the basics for Reserved pricing

A

1-3 year commitment

75% discount

169
Q

What are the basics for Spot Instant pricing

A

Bid for unused space
Up to 90% discount
can be terminated at anytime

170
Q

What are the basics for Dedicated instances pricing

A

Physical isolation at host hardware

Pay per instance

171
Q

What are the basics for Dedicated Hosts pricing

A

Physical server dedicated for your use
socket core visibility
Host affinity
Pay per host

172
Q

What are the basics for Saving Plans pricing

A

Commitment to consistent amount of usage
Pay per hour
1-3 year commitment

173
Q

What do you pay for in S3

A

Storage class
Storage quantity
Number of requests
data transfer out

174
Q

What do you pay for in Glacier

A

Expedited
Standard
Bulk

175
Q

What do you pay for in EBS

A

Volumes - GB per month

Snapshots - Space consumed by Snapshots

176
Q

What do you pay for in RDS

A

Clock hours of server up time
Database characteristics
Database purchase type

177
Q

What do you pay for in DynamoDB

A

Reading, Writing, and Storing Data

Either on-demand or provisioned

178
Q

What do you pay for in Lambda

A

Number of requests
Duration of request (to the nearest millisecond)
Price is dependent

179
Q

Benefits of Consolidated billing

A

One bill
Easy tracking
combined usage

180
Q

What do you do in Budgets

A

Set custom budgets

configure alerts

181
Q

What does budgets integrate with

A

Cost explorer
Chatbot
Service catalog

182
Q

What is Cost explorer

A

View charts of your costs to discover patterns of spending

183
Q

What does Cost and Usage report break down

A
Hour
Day
Month
Product
Product resource
Tags
184
Q

What does Price list API do?

A

Queries prices of services

185
Q

What does DMS stand for

A

Database migration service

186
Q

What does DMS do

A

Migrates Databases

Source database remains operational during transfer

187
Q

What does SMS stand for

A

Server migration service

188
Q

What does SMS do

A

Migrates servers and virtual machines

189
Q

What does DataSync do

A

Online data transfer service

Transfers data between on premises and storage services

190
Q

What is the Snowball Family used for

A

Used for migrating large volumes of data to AWS

191
Q

What does Rekognition do

A

Image and video analysis

192
Q

What does Transcribe do

A

Add speech to text capabilities to apps

193
Q

What does Translate do

A

Neural machine translation service

194
Q

What does Sagemaker do

A

helps data scientists prepare, build, train, and deploy high quality machine learning models

195
Q

What does Comprehend do

A

natural language processing service

Uses machine learning to understand unstructured (like a written letter) information

196
Q

What does Lex do

A

It is a conversational AI for chatbots

197
Q

What does Polly do

A

Turns text into life like speech

198
Q

What does Workspaces do

A

Managed DaaS solution

Works with windows or linux

199
Q

What does Appstream 2.0 do

A

Fully managed non persistent app streaming service

200
Q

What does Worklink do

A

Provides secure, one click access to your internal websites from mobile phones

201
Q

What does Workdocs do

A

Google suite by amazon

202
Q

What does IoT core do

A

Lets you to connect to IoT devices to the cloud without the need to manage servers

203
Q

What does IoT stand for

A

Internet of Things