AWS Flashcards
(126 cards)
1
Q
Summarize the benefits of AWS
A
- Scalability: Allows users to scale resources up or down based on demand
- Cost Efficiency: Uses a pay as you go model which eliminates the need for costly upfront hardware investments
- Global Reach: Operates in multiple regions worldwide, providing low latency access and high availability
- Security: Including data encryption, access control, and compliance with industry standards.
- Reliability: Designed for high availability with multiple data centers and redundancy built into its services.
2
Q
What is on-demand delivery?
A
Service where products or goods are delivered to customers quickly, within hours or minutes, based on real time requests.
3
Q
What are cloud deployments?
A
Provisioning and configuring AWS resources (compute, storage, networking, ect) to run applications and services.
4
Q
What are 4 types of Cloud Deployments?
A
- Public Cloud: AWS manages shared resources for multiple customers
- Private Cloud: Dedicated AWS resources for a single organization
- Hybrid Cloud: Combines on-premises and AWS resources
- Multi-Cloud: Uses multiple cloud provider (e.g…AWS + Azure)
5
Q
Summarize the pay as you go pricing model
A
Customers pay only for the resources they use, with no upfront costs or long-term commitments.
6
Q
What is a client-server model?
A
A network architecture where a client (requester) sends requests for services or resources to a server (provider), which processes and responds.
The client typically interacts with the user, while the server manages and delivers data or services.
7
Q
What is cloud computing?
A
The delivery of computing services over the internet, allowing users to access and use resources on demand without managing physical infrastructure.
8
Q
What are the three cloud computing deployment models?
A
- Cloud-Based: Runs all parts of the application in the cloud. Migrates existing and designs new applications to the cloud.
- On-Premises: Private cloud deployment where resources are deployed using virtualization and resource management tools.
- Hybrid: Cloud based resources are connected to on premises infrastructure.
9
Q
What is cloud computing?
A
On-demand delivery of IT resources and applications through the internet with pay as you go pricing
10
Q
What is another name for on-premises deployment?
A
Private cloud deployment
11
Q
How does the scale of cloud computing help you to save costs?
A
The aggregated cloud usage from a large number of customers results in lower pay as you go prices.
12
Q
What are the benefits of EC2 at a basic level?
A
Scalability, Cost effective, flexibility, high availability, and customizable.
13
Q
What are different types of AWS EC2 instance types?
A
- General Purpose: Balanced for diverse workloads
- Compute Optimized: high performance compute needs
- Memory Optimized: For memory-intensive tasks
- Storage Optimized: For high disk throughput
- Accelerated Computing: GPU/FPGA-based tasks
14
Q
What are the benefits of EC2 Auto Scaling?
A
- Improved Availability: Automatically replaces unhealthy instances to maintain application health
- Cost efficiency: Scales instances up or down based on demand, reducing unnecessary costs
- Flexibility: Adapts to varying workload patterns
Reliability: Ensures consistent performance by maintaining the right instance count.
15
Q
Which EC2 instance type is suitable for data warehousing applications?
A
Storage Optimized
16
Q
Which Amazon EC2 instance type balances compute, memory, and networking resources?
A
General purpose
17
Q
Which EC2 instance type is ideal for high performance databases?
A
Memory optimized
18
Q
Which EC2 instance type offers high performance processors?
A
Compute optimized
19
Q
What are the 5 EC2 pricing categories?
A
- On-Demand: Pay for instances by the second or hour, with no upfront commitment
- Reserved: Commit to 1 or 3 years for significant discounts; options include standard, convertible, and scheduled.
- Spot: Bid for unused capacity at reduced rates
- Dedicated Hosts: Pay for a physical server for regulatory or licensing requirements
- Savings Plans: Commit to consistent usage for 1 or 3 years, offering flexibility and cost savings
20
Q
Which amazon EC2 pricing option provides a discount when you specify a number of EC2 instances to run a specific OS, instance family and size, and tenancy in one Region?
A
Standard Reserved Instances
20
Q
Which Amazon EC2 pricing option provides a discount when you make an hourly spend commitment to an instance family and Region for a 1year or 3 year term?
A
EC2 Instance Savings Plans
21
Q
What is the microservices approach?
A
Application components are loosely couple. If a single component fails, the other components continue to work because they are communicating with each other. The loose coupling prevents the entire application from failing.
22
Q
What is Amazon Simple Notification Service?
A
A publish/subscribe service where a publisher publishes a message to subscribers.
23
Q
What is Amazon Simple Queue Service?
A
Service where you can send, store, and receive messages between software components, without losing messages or requiring other services to be available.
24
Which AWS service is the best choice for publishing messages to subscribers?
Amazon Simple Notification Service (SNS)
25
What does the term "Serverless" mean?
Your code runs on servers, but you do not need to provision or manage these servers. You can focus on innovating new products instead of maintaining servers.
26
What is AWS Lambda?
A service that lets you run code without needing to provision or manage servers.
27
How does AWS Lamda Work?
1. You upload your code to Lambda
2. You set your code to trigger from an event source, such as AWS services, mobile applications, or HTTP endpoints
3. Lambda runs your code only when triggered
4. You pay for the compute time that you use.
28
What are containers?
A standard way to package your application's code and dependencies into a single object.
29
What is Amazon Elastic Container Service (ECS)?
A highly scalable, high performance container management system that enables you to run and scale containerized applications on AWS.
30
What is Amazon Elastic Kubernetes Service (EKS)?
A fully managed service that you can use to run Kubernetes on AWS. Enables you to deploy and manage containerized applications at scale.
31
You want to use an Amazon EC2 instance for a batch processing workload. What would be the best Amazon EC2 instance type to use?
Compute Optimized
32
You have a workload that will run for a total of 6 months and can withstand interruptions. What would be the most cost efficient EC2 purchasing option?
Spot Instance
33
Ensuring that no single Amazon EC2 instance has to carry the full workload on its own is an example of what?
Elastic Load Balancing
34
What is an Availability Zone?
A single data center or group of data centers within a Region.
35
What are Edge Locations?
Sites that Amazon Cloudfront uses to store cached copies of your content closer to your customers for faster delivery
36
What is AWS Elastic Beanstalk?
You provide code and configuration settings, and the Elastic Beanstalk deploys the resources necessary to perform tasks such as adjust capacity, load balancing, automatic scaling, and application health monitoring.
37
What is AWS CloudFormation?
Where your infrastructure is treated as code. You can build an environment by writing lines of code instead of using AWS Management console to individually provision resources.
38
What is the role of Amazon Virtual Private Cloud (VPC)?
A VPC allows you to create a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define
39
What are subnets in a VPC?
Subnets are ranges of IP addressed in a VPC, divided into public subnets and private subnets
40
How does a public subnet different from a private subnet in a VPC?
a public subnet allows internet facing resources to communicate with the internet, while a private subnet is used for backend services without internet access
41
What is a subnet in Amazon VPC?
A subnet is a section of a VPC that contains resources such as Amazon EC2 instances.
42
What is an internet gateway in Amazon VPC?
A connection between a VPC and the internet, allowing public traffic to access VPC resources.
43
What happens if there is no internet gateway in a VPC?
No public traffic can access the resources within the VPC.
44
What is a virtual private gateway?
A component that enables a secure connection between a VPC and a private network, such as an on-premises date center, using a virtual private network.
45
How does a virtual private gateway work?
It encrypts internet traffic, adding a protection as it travels from the private network to the VPC, allowing only approved network traffic.
46
What is AWS Direct Connect?
A service that establishes a dedicated private connection between your data center and a VPC.
47
What are network ACLs?
A virtual firewall that controls the inbound and outbound traffic at the subnet level. They perform STATELESS packet filtering.
48
What are sercurity groups?
A virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance. They perform STATEFUL packet filtering.
49
Briefly explain the steps of the Domain Name System (DNS)
1. Enter the domain name into the browser, this request is sent to a customer DNS resolver.
2. The customer DNS resolver asks the company DNs server for the IP address that corresponds to the company's website.
3. The company DNS server responds by providing the IP address for the company's website, 192.0.2.0
50
What is Amazon Route 53?
A DNS web service that gives developers and businesses a reliable way to route end users to internet applications hosted in AWS.
51
What feature allows you to register new domain names and manage their DNS records?
Amazon Route 53
52
Which component can be used to establish a private dedicated connection between your company's data center and AWS?
AWS Direct Connect
53
They are stateful and allow all inbound traffic by default.
Security Groups
54
Which component is used to connect a VPC to the internet?
Internet gateway
55
What do Block Level Storage Volumes behave like?
Physical hard drives
56
What does an Instance Store do?
Provides temporary block level storage for an Amazon EC2 instance
57
What happens to an Instance Store when an instance is terminated?
You lose any date in the instance store
58
What is Amazon Elastic Block Store (EBS)?
A service that provides block level storage volumes that you can use with Amazon EC2 instances. If you stop or terminate an EC2 instance, all the data on the attached EBS volume remains available.
59
What is an EBS snapshot?
An incremental backup. The first backup taken of a volume copies all the data. For subsequent backups, only the blocks of data that have changed since the most recent snapshot are saved.
60
What are two characterizes of the Amazon EBS service?
Best for data that requires retention
Separate drives from the host computer of an EC2 instance
61
In object storage, what does each object consist of?
Data
Metadata
A Key
62
What is Amazon Simple Storage Service (S3)?
A service that provides object level storage
63
How does Amazon S3 store its data?
As objects in buckets
64
What is the maximum file size for an object in Amazon S3?
5 TB
65
You want to store data that is infrequently accessed but must be immediately available when needed. Which Amazon S3 storage class should you use?
S3 Standard-IA
66
What is the ideal use case for file storage?
When a large number of services and resources need to access the same data at the same time
67
What is Amazon Elastic File System (EFS)?
A scalable file system used with AWS Cloud Services and on premises resources. It scales automatically as you add or remove files
68
How many Availability Zones does an Amazon EBS Volume store data in?
One.
69
To attach an Amazon EC2 instance to an EBS volume, where must they reside?
In the same Availability Zone.
70
Amazon EFS stores its data in how many Availability zones?
Multiple. It is a regional service.
71
How is data stored in a relational database?
Data is stored in a way that relates it to other peices of data
72
Amazon RDS is available on what six database engines?
1. Amazon Aurora
2. PostgreSQL:
3. MySQL
4. MariaDB
5. Oracle Database
6. Microsoft SQL Server
73
What databases is Amazon Aurora compatible with?
MySQL (5 times faster) and PostgreSQL (3 times faster)
74
How does Amazon Aurora help to reduce database costs?
It reduces unnecessary input/output (I/O) operations, while ensuring your database resources remain reliable and available.
75
What kind of schemas do non relational databases have?
Simple schemas
76
What are some key points about DynamoDB?
1. Non-relational NoSQL database
2. Purpose Built
3. Millisecond response time
4. Fully managed
5. Highly Scalable
77
Why are nonrelational databases sometimes referred to as "NoSQL databases"?
They use structures other than rows and columns to organize data. (e.g. key value pairs)
78
What is Amazon DynamoDB?
It is a key-value database service.
It delivers a single digit millisecond performance at any scale.
It is serverless and has automatic scaling
79
What are differences between Amazon RDS and Amazon DynamoDB
Amazon RDS has automatic high availability and customer ownership of data, schema, and network.
Amazon DynamoDB has Key-value, massive throughput capabilities, PB size potential, and granular API access
80
Name two scenarios where you should use Amazon RDS?
Using SQL to organize data
Storing data in an Amazon Aurora Database
81
What does AWS Database Migration Service (DMS) enable you to do?
Enables you to migrate relational databases, nonrelational database, and other types of data stores.
You move data between a source database and a target database of same or different types.
82
What is Amazon DocumentDB?
A document database service that supports MongoDB workloads
83
What is Amazon Neptune?
A graph database service. works with highly connected datasets, such as recommendation engines, fraud detection, and knowledge graphs.
84
What is Amazon Quantum Ledger Database (QLDB)?
A ledger database service that reviews a complete history of all the changes that have been made to your application data.
85
What is Amazon Managed Blockchain?
A service that you can use to create and manage blockchain networks with open-source frameworks. Blockchains are a distributed ledger system that lets multiple parties run transactions and share data without a central authority.
86
What is Amazon ElastiCache?
A service that adds caching layers on top of your database to help improve the read times of common requests. It supports two types of data stores: Redis and Memcached.
87
What is Amazon DynamoDB Accelerator?
An in-memory cache for DynamoDB. It helps improve response times from single digit milliseconds to microseconds.
88
Which Amazon S3 Storage classes are optimized for archival data? (2)
Amazon S3 Glacier Flexible Retrieval
Amazon S3 Glacier Deep Archive
Objects can be retrieved within a few minutes to a few hours.
89
Which AWS service is best for storing data in an object storage service?
Amazon Simple Storage Service (S3)
90
This statement best describes which Amazon Service? "A serverless key-value database service"
Amazon DynamoDB
91
Which service is used to query and analyze data across a data warehouse?
Amazon Redshift
It collects data from many sources to help you understand relationships and trends across your data.
92
Explain the AWS shared responsibility model in simple terms.
AWS controls security of the cloud. You control security in the cloud.
93
When creating an IAM user how many permissions do they have by default?
0
94
What is the Least Privilege Principle?
A user is granted access only to what they need. Be default they do not have access to anything.
95
What is an IAM policy?
The way you grant or deny users permission utilizing JSON. It describes what API calls a user can or cannot make.
96
What are the options for the "Effect" key for IAM policy?
Allow or deny
97
What does the "Action" key do for IAM policies?
You can list any AWS API call.
98
What does the "Resource" key do in IAM policies?
You can list which AWS resource the specific API call is for
99
What are IAM Groups?
An easy way to provide access for multiple users.
100
Explain AWS IAM roles.
Associated permissions that allow or deny access. They are assumed for temporary amounts of time.
101
What is the root user?
The user that has complete access to all AWS services and resources in the account
102
In AWS Organizations, where can you centrally control permissions for the accounts in your organization?
Service Control Policies (SCPs)
103
What two identities and resources can be applied to Service control Policies in AWS Organizations?
An Individual Member Account
An Organizational Unit (OU)
104
What is AWS Artifact?
A service that provides on-demand access to AWS security and compliance reports and select online agreements.
105
What tasks can you complete in AWS Artifact?
Access AWS compliance reports on-demand
Review, accept, and manage agreements with AWS
106
What is Distributed Denial of Service (DDoS)
A deliberate attempt from multiple sources to make a website or application unavailable to users.
107
What is AWS Sheild?
A service that protects applications against DDoS attacks.
108
What are the three parts of Amazon Inspector?
Network configuration reachability piece
Amazon agent
Security assessment service
109
What does AWS Key Management Service (KMS) enable?
Enables you to perform encryption operations through the use of cryptographic keys: a random string of digits used for encrypting/decrypting data
110
What is AWS WAF?
A web application firewall that lets you monitor network requests that come into your web applications. It uses web access control list (ACL) to block or allow traffic.
111
What is a document that grants or denies permissions to AWS services and resources?
IAM policy
112
An employee requires temporary access to create several Amazon S3 buckets. What service would be the best choice for this task?
IAM Role
113
Granting only the permissions that are needed to perform specific tasks best describes what?
The Principle of Least Privilege
114
Which service helps protect your applications against distributed denial of service (DDoS) attacks?
AWS Shield
115
Which task can AWS Key Management Service (KMS) perform?
Create cryptographic keys
116
What is Amazon CloudWatch?
A web service that enables you to monitor and manage various metrics and configure alarm actions based on data from those metrics.
117
What are CloudWatch Alarms?
They automatically perform actions if the value of your metric has gone above or below a predefined threshold.
118
Whta is AWS CloudTrail?
It records API calls for your account such as identity of the API caller, the time of the API call, and the source IP address of the API caller.
119
What are two tasks you can perform using AWS CloudTrail?
Track user activities and API requests throughout your AWS infrastructure
Filter logs to assist with operational analysis and troubleshooting
120
What is AWS Trusted Advisor?
A web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices
121
What two actions can you perform using Amazon CloudWatch?
Monitor your resources' utilization and performance
Access metrics from a single dashboard
122
Which service enables you to review the security of your amazon S3 buckets by checking for open access permissions?
AWS Trusted Advisor
123
What are two categories included in the AWS Trusted Advisor Dashboard?
Performance
Fault Tolerance
(Others include cost optimization, security and service limits)
124
What are the 6 pillars of AWS Well Architected Framework?
Operational Excellence
Security
Reliability
Performance Efficiency
Cost Optimization
Sustainability
125
