Revision Flashcards

1
Q

AWS Trusted Advisor offers a rich set of best practice checks and recommendations across five categories:

A

-cost optimization
-security
-fault tolerance
-performance
-service limits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

-Relational database that is compatible with MySQL and PostgreSQL
-Scale up to 128 TB
-Can deploy replicas for read scaling within and across Regions.
-Offers automated backups.

A

Amazon Aurora

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Used for querying data in Amazon S3 using SQL.

A

Amazon Athena

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

-NoSQL database that supports document data structures.
-Fully managed
-Flexible schema that allows for the data model to evolve
-MongoDB
-Automatically replicates six copies of your data across 3 availability zones to offer a 99.99% availability.

A

Amazon DocumentDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

-Serverless
-Fully managed NoSQL database
-Supports key-value and document data models.
-Replicates the data across multiple availability zones (AZs)

A

DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

AWS Well-Architected
Under the operational excellence pillar the following best practices

A

-Perform operations as code
-Make frequent, small, reversible changes
-Refine operations procedures frequently
-Anticipate failure
-Learn from all operational failures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Amazon EC2 Auto Scaling Policies Types

A

-Scheduled scaling
-Predictive scaling
-Target tracking scaling:(ASG keep in target)
-Step scaling:Launch resources in response to demand (waiting time)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

is used for managing EC2 instances such as installing patches and software.

A

Systems Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

-Extend your VPC into the on-premises data center
-Fully managed service that offers the same AWS infrastructure, AWS services, APIs, and tools to virtually any data center, co-location space, or on-premises facility for a truly consistent hybrid experience.

A

AWS Outposts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Seamless omnichannel experience through a single unified contact center for voice, chat, and task management.

A

Amazon Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

creating a low-latency private connection to an on-premises data center but it cannot be used to extend the VPC.

A

Direct Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

-CloudFormation templates that automate the deployment and a guide that discusses the architecture and provides step-by-step deployment instructions.
-Acelerators reduce hundreds of manual procedures into just a few steps, so you can build your production environment quickly and start using it immediately.

A

AWS Quick Starts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

used to deploy infrastructure from templates,

A

CloudFormation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

content delivery network (CDN) that caches content around the world for lower latency access.
-improves performance for both cacheable content (such as images and videos) and dynamic content (such as API acceleration and dynamic site delivery).
-good fit for HTTP use cases

A

Amazon CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Enables access to your application by leveraging the same Edge Locations as CloudFront and routing connections across the AWS global network.
improves performance for a wide range of applications over TCP or UDP by proxying packets at the edge to applications running in one or more AWS Regions.
-good fit for non-HTTP use cases, such as gaming (UDP), IoT (MQTT), or VoIP, as well as for HTTP use cases that require static IP addresses or deterministic, fast regional failover.

A

AWS Global Accelerator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

This service is used for optimizing the network topology of interconnected VPCs and on-premises networks.

A

AWS Transit Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Elastic Load Balancers can only serve targets in a single Region

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

WAF can be used to protect on-premises resources if they are deployed behind an

A

Application Load Balancer (ALB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

fully managed non-persistent application and desktop streaming service.

A

AppStream 2.0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

is an Extract, Transform, and Load (ETL) service.

A

AWS Glue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

scalable, serverless, embeddable, machine learning-powered business intelligence (BI) service built for the cloud.

A

-Amazon QuickSight

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Generate reports that break down AWS Cloud compute costs by duration, resource, or tags

A

AWS Cost & Usage Report.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Estimate a monthly bill for the AWS Cloud resources that will be used

A

Pricing Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Enable billing alerts to monitor actual AWS costs compared to estimated costs

A

Amazon CloudWatch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

-Estimate savings when comparing the AWS Cloud to an on-premises environment

A

AWS Total Cost of Ownership (TCO) Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

fully managed ledger database that provides transparent, immutable, and cryptographically verifiable transactions

A

Amazon Quantum Ledger Database (QLDB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

enables you to easily generate and use your own encryption keys on the AWS Cloud.

helps you meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated Hardware Security Module

A

AWS CloudHSM

28
Q

This service is also involved with creating and managing encryption keys but does not use dedicated hardware.

A

AWS Key Management Service (AWS KMS)

29
Q

used to capture network traffic information,

A

VPC Flow Logs

30
Q

is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage.

A

AWS Storage Gateway

31
Q

AWS Storage Gateway types of gateways

A

Tape Gateway
Amazon S3 File Gateway
Amazon FSx File Gateway,
Volume Gateway

32
Q

intelligent threat detection service

A

Amazon GuardDuty

33
Q

is a cloud computing model where a third-party provider delivers hardware and software tools to users over the internet. Usually, these tools are needed for application development.

A

Platform as a Service (PaaS)

34
Q

software licensing and delivery model in which software is licensed on a subscription basis and is centrally hosted.

A

Software as a Service (SaaS)

35
Q

type of cloud computing service that offers essential compute, storage, and networking resources on demand, on a pay-as-you-go basis

A

Infrastructure as a Service (IaaS)

36
Q

type of cloud-computing service that allows you to execute code in response to events

A

Function as a Service (FaaS)

37
Q

configuration management service that provides managed instances of Chef and Puppet

A

AWS OpsWorks

38
Q

easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.
imply upload your code and Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring.
can access the underlying resources at any time.

A

AWS Elastic Beanstalk

39
Q

AWS-managed service can be used to process vast amounts of data using a hosted Hadoop framework?

A

-Amazon EMR Elastic Map Reduce

40
Q

manage the maximum available permissions for AWS Organizations
Applied to account or OU

A

Service Control Policy (SCP)

Organizational Units or Accounts

41
Q

lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.

A

Amazon Cognito.

42
Q

plan provides access to architectural and operational reviews, as well as 24/7 access to Cloud Support Engineers through email, online chat, and phone

A

enterprise

43
Q

Each tag consists of a key and a value. For each resource, each tag key must be unique, and each tag key can have only one value.

A

Add department-specific tags to each resource

44
Q

attached to a VPC and allows inbound traffic from the internet to access the VPC. It is also used as a target in route tables for outbound internet traffic.

A

Internet gateway

45
Q

outbound internet access for instances running in a private subnet.

A

NAT gateway

46
Q

group of protocols that are used together to set up encrypted connections between devices. It helps keep data sent over public networks secure.

A

IPSec

47
Q

A VGW is used for IPSec VPN connections to access a VPC

A

Virtual Private Gateway

48
Q

set of rules, called routes, that determine where network traffic from your subnet or gateway is directed.

A

VPC Route Table

49
Q

each NACL can be applied to one or more subnets, but each subnet is required to be associated with one—and only one—NACL

A

true

50
Q

collections of users and have policies attached to them.

A

IAM Group
place the users in the group and then create an IAM policy with the correct permissions and attach it to the group.

51
Q

capture information about inbound and outbound IP traffic on network interfaces in a VPC?

A

VPC Flow Logs

52
Q

Key pairs are used for authenticating to

A

EC2 instances.

53
Q

connects your Amazon Virtual Private Clouds (VPCs) and on-premises networks through a central hub. This simplifies your network and puts an end to complex peering relationships. It acts as a cloud router – each new connection is only made once.

A

AWS Transit Gateway

54
Q

serverless event bus that makes it easier to build event-driven applications at scale using events generated from your applications.

A

Amazon EventBridge

55
Q

you visibility and control of your infrastructure on AWS. provides a unified user interface so you can view operational data from multiple AWS services and allows you to automate operational tasks across your AWS resources.

A

AWS Systems Manager

56
Q

threat detection and continuous security monitoring for malicious or unauthorized behavior to help you protect your AWS accounts and workloads.

A

Amazon GuardDuty

57
Q

automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (EC2), AWS Lambda functions, and container workloads for software vulnerabilities and unintended network exposure.

A

Amazon Inspector

58
Q

makes it easy to analyze, investigate, and quickly identify the root cause of security findings or suspicious activities.

A

Amazon Detective

59
Q

A service that is intended for organizations with multiple accounts and teams who are looking for the easiest way to set up their new multi-account AWS environment and govern at scale

A

AWS Control Tower

60
Q

Beanstalk is a platform service that leverages the automation capabilities of

A

CloudFormation

61
Q

blazing fast in-memory data store that provides sub-millisecond latency to power internet-scale real-time applications.

A

Amazon ElastiCache

62
Q

To gain greater discounts, which services can be reserved?

A

-EC2
-Amazon DynamoDB
-Amazon RedShift
-RDS
-ElastiCache
-OpenSearch Service,

63
Q

Which AWS services can be used as infrastructure automation tools?

A

-AWS OpsWorks
-AWS CloudFormation

64
Q

Allows instance to connec to the internet while remaining private/
-AWS managed

A

NAT Gateway

-customer managed : NAT instance

65
Q

Firewall that controls traffic from and to a subnet

A

NACL Network ACL
-Allow / Deny
-IP addresses
-stateless: return traffic must explicit allow
-process rules in numbered order when deciding weather to allow
-auto applied to all instances in subnet

66
Q

Controls traffic to and from an EC2

A

Security Group
-Allow only
-IP or other security groups
-stateful: return traffic automatically allowed
-evaluate rules before deciding if allow
-must be specified at launch or associated

67
Q

Types of flow logs

A

-VPC Flow Logs
-Subnet Flow Logs
-Elastic Network Interface FLow logsELastic

Help to troubleshoot connectivity issues