AWS Cloud Practitioner Flashcards

1
Q

With the IaaS cloud model, the cloud service provider provides what service? While the customer manages what services?

A

The provider manages virtualization, servers, storage, and networking.The company manages applications, data, runtime, middleware, and operating systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

With the PaaS cloud model, the cloud service provider provides what service? While the customer manages what services?

A

The provider manages runtime, middleware, operating systems, virtualization, servers, storage, and networking.The company manages applications and data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

With the SaaS cloud model, the cloud service provider provides what service? While the customer manages what services?

A

The provider manages applications, data, runtime, middleware, operating systems, virtualization, servers, storage, and networking.The company manages nothing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which access method provides packages that allow the developers to access AWS in a variety of popular programming languages and make it easy to use AWS in their existing applications?

A

AWS Software Development Kits (SDKs)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What tool can be used to create estimates for AWS use cases?

A

AWS Pricing Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Cloud service providers like AWS can pass savings to their customers by aggregating usage from hundreds of thousands of customers in the cloud. What is this cloud computing advantage called?

A

Massive economies of sale

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

With cloud computing, a company stops guessing how much capacity it will need over time and starts scaling up and down as needed with only a few minute’s notice. What is this cloud computing advantage called?

A

Stop guessing capacity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which AWS compute service enables a company to run code without managing or provisioning servers.

A

AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which AWS service is a CDN (content deliver network) platform that securely delivers video, data, and applications to customers globally with low latency and high transfer speeds.

A

Amazon CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What AWS infrastructure is designed to deliver services with the lowest latency possible? They are closer to users than regions or availability zones, often in major cities, so responses can be fast.

A

Edge locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What security measures are AWS responsible for in the cloud?

A

Physical security of data centers
Hardware and software infrastructure
Network Infrastructure
Virtualization infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What security measures are the Customer responsible for in the cloud?

A

Selecting and securing any instance operating systems
Securing the applications that are launched on AWS resources
Security group configurations
Firewall configurations
Network configurations
Account management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What tool allows you to control access to compute, storage, database, and application services in the AWS Cloud?

A

AWS Identity and Access Management (IAM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the essential components of Identity and Access Management (IAM)?

A

IAM user
IAM group
IAM policy
IAM role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which AWS service would allow a company to consolidate billing and payment for multiple AWS accounts?

A

AWS Organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How can a company ensure that provisioned accounts stay in the company’s access control guidelines?

A

Use a service control policy (SCP) to define the maximum available permissions for all the AWS accounts.

A service control policy (SCP) specifies the services and actions that users and roles can use in the accounts that the SCP affects. SCP offers central control over the maximum available permissions for all accounts in AWS Organizations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which AWS service can a company use if they use AWS Key Management Service (KMS) to protect its design data and must log all key usage?

A

AWS CloudTrail

AWS KMS integrates with AWS CloudTrail, which logs all the key usage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What AWS service provides authentication, authorization, and user management for web and mobile apps, allowing users to sign in directly with a username and password, or through a third party such as Facebook, Amazon, Google, or Apple.

A

Amazon Cognito

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which AWS solution can a company use to protect its web application against infrastructure attacks?

A

AWS Shield

It is a managed distributed denial of service (DDoS) protection service that safeguards applications running on AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

A developer is testing a new application hosted within a custom VPC and wants only the workstation to access the application during the test.

A

192.0.2.0 /32

Every bit in a /32 IP address block is fixed, and none (zero) of the bits is flexible, which means 2^0 (or 1) IP address is available for the network. It represents a single IP address and a single host.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

For better customer experience, a company needs a fixed IP address that will not change when it starts or stops the instance for updates. Which type of IP address is recommended for a small business to attach to its instance?

A

An Elastic IP address

When a company stops and restarts an EC2 instance associated with an elastic IP address, the EC2 instance retains its IP address after restarting. The existing application will not break because the application sees the (elastic) IP address it was expecting, even though the back-end EC2 instance has changed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

A cloud solutions architect is setting up a VPC to have an address space of 172.16.1.0/16. There is a requirement that all resources within the VPC must be able to talk locally to one another without any additional configuration.
What is the best destination CIDR block to route the network traffic to in the route table to meet this requirement?

A

172.16.1.0/16

Since the network traffic will travel local to the originating subnet, the destination CIDR block is the same as the originating 172.16.1.0/16 CIDR block.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

A cloud solutions architect is setting up a custom VPC in the AWS cloud. The architect has assigned the VPC to an IPv4 classless inter-domain routing (CIDR) block size of 10.0.1.0/26 and created four equal-sized subnets.
How many IP addresses will be available for use by each subnet?

A

11

A /26 IP address block will have 26 (or 64) IP addresses available, which equates to 16 IP addresses for each subnet. But AWS reserves 5 IP addresses, which are not available for use, leaving only 11 IP addresses available for use per subnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How do you pay for AWS?

A

1) Pay for what you use
2) Pay less when you reserve
3) Pay less when you use more
4) Pay even less as AWS grows

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

For certain services like Amazon EC2 and Amazon RDS, you can invest in reserved capacity. What options are available for Reserved Instances?

A

1) All Upfront Reserved Instance (or AURI)
2) Partial Upfront Reserved Instance (or PURI)
3) No Upfront Payments Reserved Instance (or NURI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Where can a customer go to get more details about Amazon EC2 billing activity that took place 3 months ago?

A

AWS Cost Explorer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

True or False? To receive the discounted rate associated with Reserved Instances, you must make a full, upfront payment for the term of the agreement.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Which AWS service provides infrastructure security optimization recommendations?

A

AWS Trusted Advisor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Which of the following must be specified when launching a new Amazon EC2 Windows instance?

A

The Amazon EC2 instance type and Amazon Machine Image (AMI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Amazon S3 replicates all objects…

A

in multiple availability zones within the same region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Which of the following can be used as a storage class for an S3 object lifecycle policy?

A

1) S3 - Standard Access
2) S3 - Infrequent Access
3) Simple Storage Service Glacier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

The name of an S3 bucket must be unique…

A

worldwide across all AWS accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What service can you use to implement storage for Amazon EC2 instances that multiple virtual machines can access at the same time?

A

Amazon Elastic File System (Amazon EFS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Amazon Elastic Block Store (Amazon EBS) is recommended when data _____ and _____.

A

must be quickly accessible, requiring long-term persistence and requires an encryption solution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is a vault regarding Amazon S3 Glacier?

A

A container for storing archives

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

True or False? When you create a bucket in Amazon S3, it is associated with a specific AWS Region.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What are two features of Amazon Elastic Block Store (Amazon EBS)?

A

Volumes can be encrypted transparently to workloads on the attached instance.

Data is automatically replicated within an Availability Zone.

38
Q

What database technology excels at scaling to hundreds of thousands of requests with key/value access to user profile and session?

A

Amazon DynamoDB

39
Q

What operation would you use to find an item in a DynamoDB table other than the item’s primary key?

A

Scan

40
Q

In Amazon DynamoDB, what does the query operation enable you to do?

A

1) Query a table using the partition key and an optional sort key filter
2) Query any secondary indexes that exist for a table
3) Efficiently retrieve items from a table or secondary index

41
Q

What AWS Cloud service is best suited for analyzing data?

A

Amazon Redshift

42
Q

In Amazon DynamoDB, an attribute is _____.

A

a fundamental data element

43
Q

If you are developing an application that requires a database with extremely fast performance, fast scalability, and flexibility in the database schema, which service should you consider?

A

Amazon DynamoDB

44
Q

When should you use Amazon Relational Database Service (Amazon RDS)?

A

When your application requires complex transactions or complex queries.

A medium to high query or write rate –Up to 30,000 IOPS (15,000 reads + 15,000 writes)

No more than a single worker node or shard

High durability

45
Q

What compatible relational database would be ideal for a company to use if they want to move their application on to AWS, which consists of a .NET layer that connects to a MySQL database?

A

Amazon Aurora

It is a MySQL and PostgreSQL compatible relational database.

46
Q

True or False? Amazon RDS automatically patches the database software and backs up your database, storing the backups for a user-defined retention period and enabling point-in-time recovery.

A

True

47
Q

What you should you consider when choosing a database type?

A

Data size
Data access period
Query frequency
Highly available

48
Q

Which Amazon EC2 instance type is best suited for scientific modeling, gaming, video encoding, and other applications that benefit from high compute power?

A

Compute optimized instances

49
Q

How should a company group its EC2 instances to make sure its application benefits from low network latency and high network throughput?

A

Cluster placement group

50
Q

What placement group is a logical grouping of instances within a single availability zone. It is recommended for applications that need low network latency, high network throughput, or both.

A

Cluster placement group

51
Q

What placement group is a group of instances that are each placed on distinct racks, with each rack having its own network and power source. It is recommended for applications that have a multiple number of critical instances that should be kept separate from each other.

A

Spread placement group

52
Q

Which optimized instances are suitable for performance databases, in-memory analytics, real-time processing of unstructured big data, and other enterprise applications.

A

Memory optimized instances

53
Q

Which instances provide a balance of CPU, memory, and network resources, making them a good choice for websites and web applications, development environments, build servers, code repositories, and line of business applications.

A

General purpose instances

54
Q

Which optimized instances are suitable for relational databases, NoSQL databases, distributed file systems, and other workloads that require high, sequential read and write access.

A

Storage optimized instances

55
Q

Which AWS solution is a shared files system that multiple EC2 instances can access concurrently.

A

Amazon Elastic File System (EFS)

56
Q

Which AWS solution is a persistent, mountable storage that can be attached to an EC2 instance for primary storage of frequently updated data. Only one EC2 instance at a time can mount an Amazon EBS volume.

A

Amazon Elastic Block Storage (EBS)

57
Q

Which AWS solution is a persistent storage where each file becomes an object and available through a uniform resource locator (URL) that can be accessed from anywhere.

A

Amazon Simple Storage Service (S3)

58
Q

Which AWS solution is a temporary storage that can be added to an Amazon EC2 instance.

A

Instance store

59
Q

Which life cycle policy is for data that are accessed less frequently but require rapid access when needed.

A

S3 standard - infrequent access

60
Q

Which life cycle policy allows the data to be retrieved in three to five hours.

A

S3 Glacier standard

61
Q

How can a company reduce the load on the RDS MySQL database and improve the overall performance?

A

Add a read replica to the RDS MySQL database

62
Q

Which database service delivers consistent, single-digit millisecond latency at any scale and allow a company to create responsive mobile, console, and desktop games?

A

Amazon DynamoDB

63
Q

What are the four areas of the performance efficiency pillar of the AWS Well-Architected Framework?

A

1) Selection
2) Review
3) Monitoring
4) Tradeoffs

64
Q

What is a principle when designing cloud-based systems?

A

Assume everything will fail.

65
Q

What are the pillars of the AWS Well-Architected Framework?

A

1) Operational Excellence
2) Security
3) Reliability
4) Performance Efficiency
5) Cost Optimization
6) Sustainability

66
Q

What are the Operational excellence design principles?

A

1) Perform operations as code
2) Make frequent, small, reversible changes
3) Refine operations procedures frequently
4) Anticipate failure
5) Learn from all operational events and failures

67
Q

What are the Security design principles?

A

1) Implement a strong identity foundation
2) Enable traceability*Apply security at all layers
3) Automate security best practices
4)vProtect data in transit and at rest
5) Keep people away from data
6) Prepare for security events

68
Q

What are the Reliability design principles?

A

1) Automatically recover from failure
2) Test recovery procedures
3) Scale horizontally to increase aggregate workload availability
4) Stop guessing capacity
5) Manage change in automation

69
Q

What are the Performance efficiency design principles?

A

1) Democratize advanced technologies
2) Go global in minutes*Use serverless architectures
3) Experiment more often
4) Consider mechanical sympathy

70
Q

What are the Cost optimization design principles?

A

1) Implement Cloud Financial Management
2) Adopt a consumption model
3) Measure overall efficiency
4) Stop spending money on undifferentiated heavy lifting
5) Analyze and attribute expenditure

71
Q

AWS Trusted Advisor provides insight regarding which five categories of an AWS account?

A

Performance, cost optimization, security, fault tolerance, and service limits.

72
Q

What is the focus of the sustainability pillar of the Well-Architected Framework?

A

Minimizing the environmental impacts of running cloud workloads

73
Q

What AWS tools help your application scale up or down based on demand?

A

Amazon EC2 Auto Scaling and Elastic Load Balancing

74
Q

What service would you use to send alerts based on Amazon CloudWatch alarms?

A

Amazon Simple Notification Service (Amazon SNS)

75
Q

What are three characteristics of Amazon EC2 Auto Scaling?

A

Amazon EC2 Auto Scaling responds to changing conditions by adding or terminating instances, launches instances from an AMI, and enforces a minimum number of running Amazon EC2 instances.

76
Q

What must be configured on an Elastic Load Balancing load balancer to expect incoming traffic?

A

A listener

77
Q

What elements are used to create an Amazon EC2 Auto Scaling launch configuration?

A

Amazon Machine Image (AMI)
Instance Type
Amazon Elastic Block Store (Amazon EBS) volumes

78
Q

What service can help you collect important metrics from Amazon RDS and Amazon EC2 instances?

A

Amazon CloudWatch

It is a monitoring service for AWS cloud resources and the applications you run on AWS.

79
Q

What are three elements of an Auto Scaling group?

A

You can specify the minimum and maximum number of instances as well as desired capacity.

80
Q

What service enables governance, compliance, operational auditing, and risk auditing of your AWS account

A

AWS CloudTrail

81
Q

In Elastic Load Balancing, when the load balancer detects an unhealthy target, what takes place?

A

The load balancer stops routing traffic to that target and sends it to a healthy target. It then resumes routing traffic to that target when it detects that the target is healthy again.

82
Q

What are the three types of load balancers that Elastic Load Balancing offers?

A

Application Load Balancer
Network Load Balancer
Classic Load Balancer

83
Q

What load balancer routes TCP and UDP traffic to targets based on IP data.
Submit

A

Network load balancer

84
Q

What load balancer provides basic load balancing across multiple EC2 instances and operates at both the application level and network transport level. It supports load balancing of applications that use HTTP, HTTPS, TCP, and SSL.

A

Classic load balancer

85
Q

What load balancer helps easily deploy, scale, and manage third-party virtual appliances, providing one gateway for distributing traffic across multiple virtual appliances while scaling them up or down based on demand.

A

Gateway load balancer

86
Q

What load balancer distributes incoming application traffic across multiple targets, such as EC2 instances, to increases the availability of the application.

A

Application load balancer

87
Q

What AWS solution will allow a company to capture detailed information about the calls made to elastic load balancing application programming interface (API) and can be analyzed to determine who made the call, what calls were made, when the call was made, the source IP address the call came from, and so on.

A

CloudTrail logs

88
Q

What ability of the AWS Cloud allows you to automatically acquire resources as needed and release resources when no longer needed.

A

Elasticity

89
Q

What type of instance can withstand some measure of degradation while still remaining available. Downtime is also minimized as much as possible, and minimal human intervention is required.

A

High availability

90
Q

What AWS ability refers to the built-in redundancy of an application’s components and the ability of the application to remain operational even if some of its components fail.

A

Fault tolerance

91
Q

What scaling option is useful for predictable workloads, when increases and decreases in the number of instances in the auto scaling group are known.

A

Scheduled scaling

92
Q
A