Udemy course - Sections 1-10 Flashcards

1
Q

2 Benefits of private cloud

A

-complete control of the entire stack
-security - in a few cases, organizations may need to keep all or some of their applications and data in house

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

3 benefits of public cloud

A

-variable expense, instead of capital expense
-economies of scale
-massive elasticity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what is a hybrid cloud

A

where a private cloud and public cloud are connected together where you might be connected with either the internet or a private link.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Three things the multi cloud can connect?

A

-private cloud (vmWare, openstack)
-public cloud (aws, azure)
-organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what is a region

A

physical locations in the world and independent of others and within a region, there are availability zones (az)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what are the different zones with subnets that you can use to connect to a region

A

-Local Zone
-outpost
-wavelength (5g/mobile)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

what does cloudfront do

A

deliver content like videos through edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what is aws responsible for in the responsibility model?

A

Software
-compute
-storage
-datebase
-networking
Hardware
-regions
-availability zones
-edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what is the customer responsible for in the responsibility model?

A

-platform, applications, identity & access management
-operating system, network & firewall configurations
-client-side data encryption & data integrity authentication
-server-side encryption (filesystem and/or data)
-networking traffic protection (encryption, integrity, identity)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

three ways to access cloud services

A

-aws management console (ui)
-command line
-software development kit (ide)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

example of public services and what does that mean

A

-means you are connecting to services via a public address
-examples: dynamoDB, S3 (storage), route 53, cloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what are some private services and what does this mean?

A

-vpc where you have subnets with resources that can be either private or public
-examples: EC2 instance, amazon rds, elastic file system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

6 advantages of cloud computing

A

-trade capital expense for variable expense
-benefits from massive economies of scale
-stop guessing capacity
-speed and agility
-stop spending money running and maintaining data centers
-go global in minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

3 types of cloud computing model

A

-iaas (MANAGED TO OS)
-PAAS(managed to code)
-saas (pure consumption)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

4 types of cloud deployment

A

1) public
2) hybrid cloud
3) private cloud
4) multicloud (combo of private/hybrid/etc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

fundamentals of pricing

A

-compute
-storage
-outbound data transfer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

aws global infrastructure is made up of:

A

AWS REGIONS
-region is a geographical area
-each region consists of 2 or more AZ (availability zones)
-isolated from other AWS Regions
Availability Zones (data centers)
-AZ are sep from each other
-AZs span one or more data centers
-each AZ is designed as independent failure zone
Local Zones (fairly new and may not come up on exam
-place compute, storage, db, and other services closer to end user
-extension of aws region where you can run your latency sensitive applications
edge locations and regional edge caches

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

shared responsibility model

A

aws responsible for security of the cloud
-run underlying infrastructure
-hardware,software

user responsible for security in cloud
ec2 includes network level security, etc…

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

what is IAM

A

-identity and access management is a web service that helps you security control access to aws services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does IAM control?

A

who is authenticated and authorized to use resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

what are users?

A

individual accounts you log in with

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

what permissions do users have by default

A

none

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

what are groups used for?

A

organizing users and applying policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what do users log into the aws management console with?

A

user name and password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

what are access keys used for?

A

programmatic access (think CLI/API)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

what do access keys consist of?

A

access key id and secret access key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

what is a root user?

A

user that created the account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

what permissions do root users ahve?

A

full permissions that cannot be restricted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What does multi-factor authentication use?

A

a second factor in addition to a password (typically code generated on a device)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

what are service control policies (SCPs)

A

feature of aws organization and they control the max available permissions in aws account and they do not grant permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

IAM best practices (8)

A

-locck away your aws account root user access keys
-create individual iam users
-use groups to assign permissions to IAM users
-grant least privileges
-get started using permission with aws managed policies
-use customer managed policies instead of inline policies
-use access levels to review IAM permissions
-configure a strong password policy for your users3
-enable mfa
-use roles for applications that run on amazon ec2 instances
-use roles to delegate permissions
-do not share access keys
-rotate credentials regularly
-remove unnecessary credentials
-use policy conditions for extra security
-monitor activity in aws account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

what does ARN stand for?

A

Amazon Resource Name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

what IAM entity can be used to delegate permissions?

A

role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

what is elastic compute cloud?

A

EC2 that lets you run web services in the cloud (virtual servers)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

what operating system can EC2 run?

A

all: linux/windows/mac

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

AMI is used to launch what?

A

amazon machine image launches an EC2 instance (consists of ebs snapshot, permissions and configurations)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

what is user data?

A

data supplied by the user at instance launch in the form of a script

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

what is instance metadata

A

data about your instance that you can use to configure or manage the running instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

are user data/metadata encrypted?

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

how can you view meta data?

A

instance http: address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

what are access keys used for?

A

gain permissions to other AWS services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

how are access keys stored?

A

plain text

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

what is preferred method over access keys?

A

iam role and because they are not stored

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

what does aws batch do?

A

enables developers, scientists, and engineers to easily and efficiently run hundreds of thousands of batch computing jobs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

what does aws batch provisions?

A

optimal quantity and type of computer resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

what are some perks about amazon lightsail

A

great for users who don’t have deep tech expertise to provision compute services
-provides pretty much everything you need in cloud
-best suited for projects that require a few dozen instances or fewer
-simple management interface
-good for blogs, website, web applications, e-commerce etc
-can deploy load balancers and attach block storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What is ECS?

A

elastic compute service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

what is a task also known as?

A

containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

what is ECS used for?

A

running docker containers in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

EC2 launch types?

A

managed (you control) unmanaged (fargate- serverless)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

what is elastic container registry?

A

private container image registry

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

do ebs volumes data persists?

A

yes, independently of the lift of the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Do EBS volumes need to be attached to an instance?

A

nope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Can multiple EBS volumes be attached to an instance?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Can you attached multiple instances to a volume?

A

sort of through multi-attach but has constraints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Can EBS volumes be in different AZs as the instances they are attached to?

A

No, false, they have to be in same AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

what is deleted on termination by default

A

the root ebs volumes, but any extras you connected will not be.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

what are snapshhots?

A

captures point-in-time of an instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

where are snapshots stored?

A

s3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

what happens with the snapshots as you make periodic snapshots of a volume?

A

they are incremented

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Is EBS volumes AZ or region specific?

A

AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

is snapshots AZ or region speecific?

A

region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What is DLM and what does it do?

A

data lifecycle manager, automates the creation, retention, and deletion of EBS snapshots and EBS-backed AMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What does DLM help with?

A

-protects data by enforcing reg back up schedule
-creates standardized AMIs that can be refreshed at intervals
-retains backups as required by auditors and internal compliance
-recue storage costs by deleting outdated backups
-create disaster recovery backup policies that back up data to isolated accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

what are instance store volumes?

A

high performance local disks physically attached to host comp on which ec2 instance runs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

is instant stores persistent?

A

no, they are ephemeral (data lost without power)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

what is instance stores good for?

A

temp storage of info that changes frequently, like buffers/caches/scratch data

68
Q

what is EFS

A

elastic file system that is a file-based storage system, which uses NFS protocol

69
Q

can EFS connect many EC2 instances concurrently?

A

yes

70
Q

Can EC2 instances connect only to one AZ?

A

No, they can be connected from multiple AZs

71
Q

Can you connect instances from other VPCS?

A

YES

72
Q

Is EFS available for windows instances?

A

no, only available for linux

73
Q

What kind of file can be stored in S3?

A

any

74
Q

what is the size range of files in S3?

A

0bytes to 5TB

75
Q

is there a limited storage on s3?

A

no

76
Q

Can buckets be named the same anywhere in the world?

A

no, they have to be unique as namespace is universal

77
Q

Where are buckets created?

A

regions

78
Q

what is a good policy when creating buckets?

A

create them close to your users so to reduce latency

79
Q

six storage classes?

A

-s3 standard?
-s3 intelligent tiering
-s3 standard-IA
-s3 one zone-ia
-s3 glacier
-s3 glacier deep archive

80
Q

what is s3 standard

A

(durable, immediately available, frequently accessed)

81
Q

what is s3 intelligent-tiering?

A

(automatically moves data to the most cost- effective tier)

82
Q

what is standard-IA

A

(durable, immediately available, infrequently
accessed)

83
Q

What is s3 one zone-ia

A

(lower cost for infrequently accessed data with less
resilience)

84
Q

What is s3 glacier

A

(archived data, retrieval times in minutes or hours)

85
Q

what is glacier deep archive

A

(lowest cost storage class for long term retention)

86
Q

What are some S3 features

A

-Transfer acceleration – speeds up uploads using CloudFront
* Requester pays – the account requesting the objects pays
* Events – can trigger notifications to SNS, SQS and Lambda
* Static website hosting – setup a static website
* Encryption – encrypt objects in the bucket
* Replication – replicate within (SRR) or across (CRR) Regions

87
Q

What does versioning mean?

A

means of keeping multiple variants of an object in the same bucket

88
Q

What is versioning used for?

A

to preserve, retrieve, and restore every version of every object stored in your Amazon S3 bucket

89
Q

what does a versioning-enabled bucket enable you to do?

A

recover objects from accidental deletion or overwrite

90
Q

What are data access times for glacier and deep archive?

A

Data access time (Glacier) 1-5 minutes 3-5 hours 5-12 hours
Data access time (Deep Archive) N/A 12 hours 48 hours

91
Q

What are two things to know about s3 Glacier

A

-Extremely low cost and you pay only for what you need with no commitments of upfront fees
- Two classes Glacier and Glacier Deep Archive

92
Q

What are two things to know about s3 object-lock?

A

-Store objects using a write-once-read-many (WORM) model
-Prevent objects from being deleted or overwritten for a fixed time or indefinitely

93
Q

What are 3 things to know about s3 Glacier vault lock?

A
  • Also used to enforce a WORM model
  • Can apply a policy and lock the policy from future edits
  • Use for compliance objectives and data retention
94
Q

What is AWS Storage Gateway?

A

-Hybrid cloud storage service
-Access cloud storage from on-premises applications
-Enables access to proprietary object storage (S3) using standard protocols

95
Q

What are some use cases for aws storage gateway

A
  • Moving backups to the cloud
  • Using on-premises file shares backed by cloud storage
  • Low latency access to data in AWS for on-premises applications
  • Disaster recovery
96
Q

What are the three types of storage gateway?

A

-file, volume, tape

97
Q

what is file gateway?

A

provides file system interfaces to on-premises
servers

98
Q

what is volume gateway?

A

provides block-based access for on premises servers

99
Q

what is tape gateway?

A

provides a virtual tape library that is compatible with common backup software (block and file interfaces)

100
Q

What is Route 53?

A

DNS (domain name service) to register ip addresses to common names

101
Q

what are three functions that route 53 does?

A

*Domain registration – Route 53 allows you to register domain
names
* Domain Name Service (DNS) – Route 53 translates name to IP
addresses using a global network of authoritative DNS servers
* Health checking – Route 53 sends automated requests to your
application to verify that it’s reachable, available and functional

102
Q

What are some route 53 routing policies?

A
  • Simple – IP address associated with name
  • Failover – if primary is down, route to secondary
  • Geolocation – route based on geographic location of request
  • Geoproximity – route to closes Region withing geo area
  • Latency – use lowest latency route to resources
  • Multivalue answer – returns several IP addresses
  • Weighted – relative weights (e.g. 80%/20%)
103
Q

what is amazon ec2 auto scaling?

A
  • automates the scaling of ec2 instances which can be elastic and scalable
  • Launches and terminates EC2 instances based on demand
  • Helps to ensure that you have the correct number of EC2 instances available to handle the application load
104
Q

what is ASG?

A

Auto Scaling Group which is collections of EC2 instances

105
Q

What does ASG use in order to scale?
(2)?

A

status checks and cloudWatch metrics

106
Q

When can EC2 scaling scale (2)?

A

on-demand and on schedule

107
Q

What are scaling policies?

A
  • Target Tracking – Attempts to keep the group at or close to the
    metric
  • Simple Scaling – Adjust group size based on a metric
  • Step Scaling – Adjust group size based on a metric – adjustments
    vary based on the size of the alarm breach
  • Scheduled Scaling – Adjust the group size at a specific time
108
Q

What is ELB

A

Elastic load balancing, which distributes incoming app traffics across multiple targets

109
Q

how does ELB handle traffic over AZs?

A

Either in a single zone or multiple AZs

110
Q

Why is ELB helpful?

A

features high availability, automatic scaling, and robust
security necessary to make your applications fault tolerant

111
Q

what are two types of elastic load balancer?

A
  • Application Load Balancer (ALB) – layer 7 load balancer that
    routes connections based on the content of the request
  • Network Load Balancer (NLB) – layer 4 load balancer that
    routes connections based on IP protocol data
112
Q

Can ELB distribute across regions?

A

ELB cannot distribute connections across regions, only availability zones. To direct traffic across regions use Amazon Route 53

113
Q

what is launch configuration?

A

A launch configuration is the template used to create new EC2 instances and includes parameters such as instance family, instance type, AMI, key pair and security groups

114
Q

what is a hosted zone?

A

A hosted zone represents a set of records belonging to a domain

115
Q

are there instances to manage with serverless lambda functions?

A

no, serverless simply means no infrastructure (OSs or hardware) to manage, therefore no instances)

116
Q

how is provisioning and patching handled on serverless services?

A

automatically

117
Q

is there automatic scaling and high availability with serverless services?

A

Yes

118
Q

what are some aws serverless services?

A

-lambda
-fargate
-eventbridge
-step functions
-SQs
-SNS
-API Gateway
-s3
-dynamoDB

119
Q

benefits of lambda?

A
  • No servers to manage
  • Continuous scaling
  • Millisecond billing
  • Integrates with almost all other AWS services
120
Q

How is payment done with lambda functions

A

You pay only for the compute time you consume (you pay
nothing when your code is not running)

121
Q

when is lambda functions executed and how are they scaled?

A

AWS Lambda executes code only when needed and scales
automatically

122
Q

What is SQS and what is it used for? (4 things to keep in mind)

A
  • SQS offers a reliable, highly-scalable, hosted queue for storing messages in transit between computers
  • SQS is used for distributed/decoupled applications
  • SQS uses a message-oriented API
  • SQS uses pull based (polling) not push based
123
Q

What is Amazon MQ and what is it used for (5 things to keep in mind)

A
  • Message broker service
  • Similar to Amazon SQS
  • Based on Apache Active MQ and RabbitMQ
  • Used when customers require industry standard APIs and protocols
  • Useful when migrating existing queue-based applications into the cloud
124
Q

What is SNS and what is it used for? (5 things to keep in mind)

A
  • Publisher / subscriber model
  • Amazon SNS is used for building and integrating looselycoupled, distributed applications
  • Provides instantaneous, push-based delivery (no polling)
  • Uses simple APIs and easy integration with applications
  • Offered under an inexpensive, pay-as-you-go model with no up-front costs
125
Q

What is AWS step functions? (2 things to keep in mind)

A
  • AWS Step Functions makes it easy to coordinate the components of distributed applications as a series of steps in a visual workflow
  • You can quickly build and run state machines to execute the steps of your application in a reliable and scalable fashion
126
Q

What is SWF and what does it do or things to keep in mind? (4 things)

A
  • Amazon Simple Workflow Service
  • Coordinate work across distributed application components
  • Create distributed asynchronous systems as workflows
  • Best suited for human-enabled workflows like an order fulfilment system or for procedural requests
  • AWS recommends that for new applications customers consider Step Functions instead of SWF
127
Q

What does amazon event bridge do? (3 things)

A
  • Serverless event bus
  • Used for building event-driven architectures
  • Ingests data and routes it to target AWS services
128
Q

What are 4 things the amazon api gateway do? (4)

A
  • Publish APIs on AWS
  • Create RESTful and WebSocket APIs
  • Fully managed service
  • Forward connections to AWS services and on-premises
    applications
129
Q

what is a VPC dedicated to?

A

aws account

130
Q

true/false, Not logically isolated form other virtual networks in the aws cloud

A

flase, it is logically isolated

131
Q

what kind of controls do you have over a vpc?

A

complete control

132
Q

Can you launch your aws resources into your vpc and if so, whats an example?

A

yes, EC2 instances can be launched to your VPC

133
Q

what is analogous to having your own DC (data center?) inside aws?

A

VPC

134
Q

what do you have to specify when you create a vpc?

A

range of IPv4 addresses for the vpc in form of a cidr (classless inter-domain routing) block,

-ex: 10.0.0.0/16

135
Q

what does a VPC span?

A

all AZs in a rgion

136
Q

who has control of the aws resources inside a vpc?

A

you have full controll of access

137
Q

whats the default number of VPCs you can create per region?

A

5

138
Q

What is the default when talking about a VPC?

A

default vpc is created in each region with a subnet in each AZ

139
Q

4 things to remember about security groups?

A

-they are firewalls for EC2 instances
-operate at the instance level
-supports allow rules only
-stateful

140
Q

4 things to remember about network access control lists or NACLs?

A

-firewall at subnet level
-support allow and deny rules
-stateless
-process rules in order

141
Q

what is lost when instance is stopped?

A

public IPS

142
Q

what are public IPs?

A

dynamic

143
Q

can public Is be moved between instances?

A

no

144
Q

whats attached to all instances?

A

private IPs

145
Q

are private IPs retained when an instance is stopped?

A

yes

146
Q

what are elastic IPs?

A

static public addresses

147
Q

are elastic IPs retained when instance is stopped?

A

yes

148
Q

what IPs can be moved between instances?

A

elastic ones

149
Q

how are elastic IPs charged?

A

when assigned to account and not being used

150
Q

what is used for access the internet from private subnets and where are they deployed?

A

NAT instances & Gateways and deployed in public subnets

151
Q

where do route tables need to be updated if trying to access public IP addresses from private subnet?

A

private subnet

152
Q

Does AWS or you manage NAT instances?

A

You

153
Q

Does AWS or you manage NAT gateways?

A

AWS

154
Q

what is vpc peering

A

allows you to route between VPCs using private IP addresseS

155
Q

2 things/benefits about AWS managed VPN?

A

1) VPN connection between on-premises sites and aws
2) uses the public internet

156
Q

2 things about AWS direct connect

A

1) private connection from on-premises to aws
2) avoid the public internet

157
Q

AWS transit gateway (2 things)

A

-connects VPCs and on-premises networks through a central hub
-simplifies network configuration

158
Q

3 things to remember about aws outpost?

A

-deploy aws infrastructure on-prem and connect AWS servers
-can extend a vpc into the on-prem environment
-supports several AWS services

159
Q

How can an organization create a private hybrid cloud connection between their on-premises data center and the AWS Cloud?

A

Direct Connect

160
Q

Which AWS-managed network service can be used to enable Internet connectivity for EC2 instances in private subnets?

A

NAT Gateway

161
Q

What type of information does VPC peering use to route traffic from one VPC to another?

A

private IP addresses

162
Q

Which services have a Global scope?

A

AWS IAM, CloudFront, Route 53

163
Q

Which types of Origin does Amazon CloudFront support (2)?

A

s3 and ec2 instances

164
Q

In Amazon Route 53, what is the name for the configuration item that holds a collection of records belonging to a domain?

A

hosted zone

165
Q

Which service can assist a developer with quickly deploying and managing a web application on AWS?

A

beanstalk

166
Q

AWS Elastic Beanstalk is an example of which cloud computing service model?

A

Paas

167
Q

Which service can be used to automatically create an Amazon VPC and then launch an EC2 instance, Auto Scaling Group and Elastic Load balancer?

A

cloud formation