AWS Cloud Practitioner Flashcards
(182 cards)
1
Q
What are the 6 advantages of the cloud?
A
- Trade capital expense for variable expense
- Benefit from massive economies of scale
- Stop guessing about capacity
- Increase speed and agility
- Stop spending money running and maintaining data centers
- Go global in minutes
2
Q
What are the 3 types of cloud computing?
A
- Infrastructure as a service (IAAS)
- Platform as a service (PAAS)
- Software as a service (SAAS)
3
Q
What is IAAS?
A
Infrastructure as a service
4
Q
What is PAAS?
A
Platform as a service
5
Q
What is SAAS?
A
Software as a service
6
Q
What are the 3 types of cloud computing deployments?
A
Public, Hybrid, and Private cloud
7
Q
What is an AWS region?
A
A region is a physical location in the world which consists of two or more AZs
8
Q
What is an AZ?
A
An AZ is an availability zone which is one or more discrete data centers, each with redundant power, networking, and connectivity, housed in separate facilities
9
Q
What is an edge location?
A
Edge locations are endpoints for AWS which are used for caching content. Typically consists of CloudFront, Amazon’s Content Delivery Network
10
Q
What is a CDN?
A
Content Delivery Network
11
Q
What is Amazon’s CDN called?
A
CloudFront
12
Q
Why should you choose a specific AWS region?
A
- Data sovereignty laws
- Latency to the majority of end users
- AWS services available in certain regions
13
Q
What are the different AWS support packages?
A
- Basic
- Developer
- Business
- Enterprise
14
Q
How much is the Basic support package?
A
Free
15
Q
How much is the Developer support package?
A
Starts at $29/mo and scales up with usage
16
Q
How much is the Business support package?
A
Starts at $100/mo and scales up with usage
17
Q
How much is the Enterprise support package?
A
Starts at $15k/mo and scales up with usage. Also includes a Technical Account Manager (TAM)
18
Q
What does IAM stand for?
A
Identity Access Management
19
Q
Is IAM a regional or global service?
A
Global
20
Q
What are the 3 ways to access the AWS platform?
A
- Via the console
- Programmatically via the command line
- Using a Software Development Kit (SDK)
21
Q
The root account has what kind of access? What is an additional security measure you should add to the root account?
A
- Full admin access
- 2FA or MFA
22
Q
What is an IAM Group? What do the things in this group inherit?
A
- A place to store your users
- Users in a group inherit all permissions applied to the group
23
Q
IAM Group policies are written in what?
A
JSON
24
Q
How many users should be created for each person in a company?
A
Only one. One user, one human.
25
Describe how permissions should generally be applied across users and groups
You should try to create groups with certain permissions, and then add users to their respective groups so that they inherit those permissions.
26
What are two ways to make user accounts more secure?
- Have a strong password rotation policy
| - Always enable MFA wherever possible
27
What is needed for programmatic access to AWS?
An access key
28
What are IAM credential reports used for?
To audit the permissions of your users and accounts
29
What information is shown on an IAM credential report?
Passwords, access keys, and MFA
30
What does S3 stand for?
Simple Storage Service
31
AWS S3 is ___ based, and allows you to upload ____ file types
- object
| - flat
32
How big can files uploaded to S3 be?
0 bytes to 5tb
33
What is the storage restriction on S3?
None, storage is unlimited
34
Files on S3 are stored in what?
Buckets
35
S3 is a _____ name space so your name must be _____ _____
- universal
| - globally unique
36
Is S3 suitable for installing an operating system on?
No
37
Successfully S3 upload will generate what HTTP status code?
200
38
Files uploaded to S3 are stored as _____. Where the ____ is the name of the object and the ____ is the data
- Key value pairs
- Key
- Value
39
What are the S3 class types?
- Standard
- Standard Infrequently Accessed (IA)
- One Zone IA
- Intelligent Tiering
- Glacier
- Glacier Deep Archive
40
What is the S3 Standard class for?
General purpose storage for any type of data, typically used for frequently accessed data
41
What is the S3 Intelligent Tiering class for?
Automatic cost savings for data with unknown or changing access patterns
42
What is the S3 Standard Infrequent Access class for?
For long lived but infrequently accessed data that needs millisecond access
43
What is the S3 One Zone Infrequent Access class for? Why is it called One Zone?
For re-creatable infrequently accessed data that needs millisecond access. It is called One Zone because data is stored in a single Availability Zone and would be lost in the event of AZ destruction
44
What is the S3 Glacier class for?
For long-term backups and archives with retrieval options from 1 minute to 12 hours
45
What is the S3 Glacier Deep Archive class for?
For long-term data archiving that is accessed once or twice a year and can be restored within 12 hours
46
S3 buckets are used for what?
Flat file storage
47
S3 buckets are viewed ____ but you can have buckets in ________
- Globally
| - Individual Regions
48
What kind of websites are appropriate for use with S3? When would a website not be appropriate for use with S3?
- Static websites
| - If you need to have a database
49
Why is S3 appropriate if you expect a lot of requests?
Because S3 scales automatically to meet demand i.e. a static website where you expect a lot of traffic
50
What are the 3 ways you can restrict S3 bucket access?
- Bucket policies
- Object policies
- IAM policies to Users & Groups
51
S3 bucket policies apply to what?
Across the whole bucket
52
S3 object policies apply to what?
To individual files
53
IAM security policies apply to what?
Users and Groups
54
What is S3 versioning?
- S3 stores versions of all objects
- Great backup tool
- Cannot be disabled
- MFA delete capability
55
What is CloudFront service?
Amazon's Content Delivery Network (CDN)
56
What is an Edge Location in relation to CloudFront?
The location where content will be cached. This is separate to an AWS region or AZ
57
What is an Origin in relation to CloudFront?
The origin of all the files that the CDN will distribute. This can either be an S3 bucket, an EC2 instance, an Elastic Load Balancer, or Route 53
58
What is a Distribution in relation to CloudFront?
This is the name given to the CDN which consists of a collection of Edge Locations
59
What is a CloudFront Web Distribution used for?
Websites
60
What is CloudFront RTMP used for?
Media Streaming
61
Are edge locations for CloudFront read only, write only, or read and write?
Read and write
62
Objection at CloudFront edge locations are cached for _____
The Time to Live (TTL)
63
What does EC2 stand for?
Elastic Compute Cloud
64
What is AWS EC2?
A web service that provides resizable compute capacity in the cloud
65
What are the main benefits of EC2?
- Reduces the time required to obtain and boot a new server instance to minutes
- Allows you to quickly scale capacity up and down as requirements change
66
What are the 4 different pricing models for EC2?
- On Demand
- Reserved
- Spot
- Dedicated host
67
What is EC2 On Demand pricing?
Allows you to pay a fixed rate by the hour or by the second with no commitment
68
What is EC2 Reserved pricing?
Provides you with a capacity reservation, and offers a significant discount on the hourly charge for an instance. Contract terms are 1 year or 3 years.
69
What is EC2 Spot pricing?
Enables you to bid whatever price you want for instnace capacity, providing for even greater savings if your applications have flexible start times and end times.
70
What is EC2 Dedicated Hosting?
Provides access to a physical EC2 server dedicated for your use. Dedicated host can help to reduce costs by allowing you to use your existing server-bound software licenses.
71
What is the acronym used to remember EC2 instance types?
Fight Dr McPxz AU
72
What is an EC2 F instance type?
FGPA
73
What is an EC2 I instance type?
IOPS
74
What is an EC2 G instance type?
Graphics
75
What is an EC2 H instance type?
High disk throughput
76
What is an EC2 T instance type?
Cheap general purpose i.e. T2 micro free tier
77
What is an EC2 D instance type?
Density
78
What is an EC2 R instance type?
RAM
79
What is an EC2 M instance type?
Main choice for general purpose apps
80
What is an EC2 C instance type?
Compute
81
What is an EC2 P instance type?
Graphics (think pics)
82
What is an EC2 X instance type?
Extreme memory
83
What is an EC2 Z instance type?
Extreme memory and CPU
84
What is an EC2 A instance type?
Arm based workloads
85
What is an EC2 U instance type?
Bare metal
86
What are the different EBS volume types?
- General purpose SSD (GP2)
- Provisioned IOPS SSD (IO1)
- Throughput Optimized HDD (ST1) (magnetic)
- Cold HDD (SC1) (magnetic)
- Magnetic (previous gen)
87
What is a GP2 EBS volume type? What is it used for?
- General purpose SSD
| - Balances price and performance for a wide variety of workloads
88
What is an IO1 EBS volume type? What is it used for?
- Provisioned IOPS SSD
| - Highest performance SSD volume for mission critical low latency or high throughput workloads
89
What is an ST1 EBS volume type? What is it used for?
- Throughput Optimized HDD
- Magnetic
- Low cost HDD volume designed for frequently accessed, throughput intensive workloads
90
What is an SC1 EBS volume type?
- Cold HDD
- Magnetic
- Lowest cost HDD volume designed for less frequently accessed workloads like file servers
91
True or false - EC2 is a compute based server, it is not serverless
True! EC2 is a server!
92
What do you need to connect to an EC2 instance?
A private key
93
What is the commonly used EC2 port for Linux?
- SSH
| - Port 22
94
What is the commonly used EC2 port for Windows?
- Remote Desktop Protocol
| - Port 3389
95
What is the port for HTTP?
Port 80
96
What is the port for HTTPS?
Port 443
97
EC2 Security groups act as a what?
Virtual firewall that opens specific ports for usage
98
Always design for _____. You should have at least one EC2 instance in each _________.
- Failure
| - Availability Zone
99
What is more secure than using access key IDs and secret access keys?
Using Roles
100
When can you apply roles to EC2 instances?
- Any time
| - Changes take effect immediately
101
Do you need to specify roles at a regional level?
No, roles are universal
102
What are the 3 different types of load balancers?
- Application load balancers
- Network load balances
- Classic load balancers
103
What should you think of when you think of Application Load Balancers?
They are layer 7 aware meaning they can make intelligent decisions
104
What should you think of when you think of Network Load Balancers?
- Extreme performance
| - Static IP addresses
105
What should you think of when you think of Classic Load Balancers?
- Used for testing and development
| - Keep costs low
106
What is Amazon RDS?
Relational Database Service
107
What kind of databases can RDS handle?
- SQL/OLTP
- SQL
- MySQL
- PostgreSQL
- Oracle
- Aurora
- MariaDB
108
What is Amazon's NoSQL database service?
DynamoDB
109
What is Amazon's Online Analytics Processing service?
Redshift OLAP
110
What is Amazon Elasticache?
Full managed in-memory data store, coompatible with Redis or Memcached. It takes a load off of the production db.
111
What are the two key features of Amazon RDS?
- Multi AZ for disaster recovery
| - Read replicas for performance
112
What is Route 53?
AWS DNS service
113
What does DNS stand for?
Domain Name Service
114
What is the purpose of DNS?
To resolve domain names to IP addresses
115
Is Route 53 a global or regional service?
Global
116
What is AWS Elastic Beanstalk?
An easy to use service for deploying and scaling web applications and services with familiar languages and servers without worrying about the infrastructure that runs those applications. Simply upload an app and Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, app health monitoring, etc
117
What is AWS CloudFormation?
CloudFormation gives you an easy way to model a collection of related AWS and third party resources, provision them quickly and consistently, and manage them throughout their lifecycles by treating infrastructure as code.
- You can create CloudFormation templates that describes the resources you want to use
- The service is free but the resources are not
118
What are the global AWS services to remember?
- IAM
- Route 53
- CloudFront
- SNS/SES
- S3
119
What are the on premise deployment services?
- Snowball
- Snowball Edge
- Storage Gateway
- Code Deploy
- Opsworks
- IoT Greengrass
120
What is CloudWatch?
CloudWatch is a monitoring and observability service. It provides you with data and actionable insights to monitor your applications, respond to system wide performance changes, optimize resource utilization, and get a unified view of operational health.
121
What is the default monitoring interval for CloudWatch? What is the interval if you turn on detailed monitoring?
- 5 minutes
| - 1 minute
122
How can you trigger notifications with CloudWatch?
By creating CloudWatch Alarms
123
When you think about CloudWatch you should think about what?
Performance
124
What is Systems Manager?
Systems Manager gives you visibility and control of your infrastructure on AWS. it provides a unified user interface so you can view operational data from multiple AWS services and automate operational tasks across your AWS resources as well as group resources.
125
What service does Systems Manager integrate with to give you a dashboard of your entire state?
CloudWatch
126
What is EBS?
A virtual disk that can be attached to EC2. The size of the disk can be changed, but it is not done automatically.
127
What is EFS?
A virtual disk that can be attached to EC2, and the size of the disk is elastic
128
What is the difference between EBS and EFS?
They are both virtual disks in the cloud, but EBS size cannot be changed automatically whereas EFS is elastic.
129
What is Global Accelerator?
Global Accelerator is a networking service that sends your user's traffic through AWS global network infrastructure, improving user performance by up to 60%. When the internet is congested, Global Accelerator's automatic routing optimizations will help keep packet loss, jitter, and latency consistently low.
130
What is Capex?
Capex stands for Capital Expenditure which is where you pay up front. It's a fixed, sunk cost.
131
What is Opex?
Opex stands for operational expenditure which is where you pay for what you use. Think of utility billing such as electricity, gas, water, etc
132
What are the main tenets of AWS billing and pricing?
- Pay as you go
- Pay for what you use
- Pay less as you use more
- Pay even less when you reserve capacity
133
What does On Demand pricing entail?
Allows you to pay a fixed rate by the hour or by the second with no commitment
134
What does Reserved entail?
Provides you with a capacity reservation, and offers a significant discount on the hourly charge for an instance. Contract terms are 1 year or 3 years.
135
What does Spot pricing entail?
Enables you to bid whatever price you want for instance capacity, providing for even greater savings if your applications have flexible start and end times.
136
What does Dedicated Host pricing entail?
Physical EC2 server dedicated for your use. Dedicated hosts can help you reduce costs by allowing you to use your existing server bound software licenses.
137
What are the FREE AWS services to remember?
- VPC
- Elastic Beanstalk
- CloudFormation
- Identity Access Manager (IAM)
- Auto Scaling
- Opsworks
- Consolidated Billing
138
What is AWS Budgets used for?
Budgets is used to budget or predict costs BEFORE they are incurred
139
What is AWS Cost Explorer used for?
Cost Explorer is used to explore cost AFTER they have been incurred
140
What AWS support plan do you need if you want a Technical Account Manager?
Enterprise
141
What are the case severity response times for the Basic support plan?
None guaranteed
142
What are the case severity response times for the Developer support plan?
- General Guidance, 24hrs
| - System Impaired, 12hrs
143
What are the case severity response times for the Business support plan?
- General Guidance, 24hrs
- System Impaired, 12hrs
- Production Impaired, 4hrs
- Production Down, 1hr
144
What are the case severity response times for the Enterprise support plan?
- General Guidance, 24hrs
- System Impaired, 12hrs
- Production Impaired, 4hrs
- Business Critical System Down, 15min
145
What are tags?
Tags are key value pairs attached to AWS resources
146
What is metadata?
Data about data
147
What is a Resource Group?
Resource groups make it easy to group resources using the tags that are assigned to them. You can group resources that share one or more tags.
148
What is Tag Editor?
Tag Editor is a global service that allows us to discover resources and to add additional tags to them as well.
149
True or False - You should make sure to deploy all resources on the paying account
False. The paying account should be used for billing purposes only. Do not deploy resources to the paying account.
150
What is the maximum number of linked accounts?
20
151
True or False - When monitoring is enabled on the paying account, the billing data for all linked accounts is included
True
152
True or False - You cannot create billing alerts per individual account
False
153
Is CloudTrail enabled globally across all accounts or per account?
CloudTrail is enabled per AWS account and is enabled per region
154
How can you consolidate CloudTrail logs?
- Turn on CloudTrail in the paying account
- Create an S3 bucket with a policy that allows cross-account access
- Turn on CloudTrail in the other accounts and use the bucket in the paying account
155
True or False - Consolidated billing allows you to get volume discounts on all your accounts
True
156
What happens to unused EC2 reserved instance?
They are applied across the group
157
What is AWS Quickstart?
AWS Quick Start is a way of deploying environments quickly, using CloudFormation templates built by AWS Solutions Architects who are experts in that particular technology
158
What is AWS Landing Zone?
AWS Landing Zone is a oslution that helps customers more quickly set up a secure multi-account AWS environment on AWS best practices
159
What is AWS Simple Monthly Calculator?
Simple Monthly Calculator is used to calculate your running costs on AWS on a per month basis. It is not a comparison tool.
160
What is AWS TCO calculator?
TCO calculator is used to compare costs of running your infrastructure on premise vs in the AWS cloud. It will generate reports that you can give to C-level execs to make a business case to move to the cloud.
161
According to the Shared Responsibility model, customers are responsible for things ____ the cloud
IN
162
According to the Shared Responsibility model, AWS has responsibility ___ the cloud
OF
163
In terms of the Shared Responsibility model, name the things that customers are responsible for
- Customer Data
- Platform, apps, identity and access management
- operating system, network and firewall configuration
- client side data, encryption, and data integrity
- server side encryption
- network traffic protection
164
In terms of the Shared Responsibility model, name the things that AWS is responsible for
- Software
- Compute
- Storage
- Database
- Networking
- Hardware/AWS Global Infrastructure
- Regions
- AZs
- Edge Locations
165
What is a responsibility that is shared between AWS and customers?
Encryption
166
True of False - An advantage of using RDS over a traditional database is that AWS maintains the underlying OS and performs software patching on the database.
True
167
Which 2 of these are pillars of an AWS Well Architected Framework?
- Ease of use
- Operational Excellence
- Reliability
- Scalability
- Elasticity
- Operational Excellence
| - Reliability
168
Which valuable AWS design principle can be a valuable feature when deploying applications?
- Tight coupling
- Regional coupling
- Hardware coupling
- Loose coupling
Loose coupling
169
A video production company uploads large video files to S3 buckets using multipart upload. To which AWS Cloud best practice does this adhere?
- Decouple your components
- Think parallel
- Design for failure
- Implement elasticity
Think Parallel
170
What tool can you use to test IAM policies?
IAM Policy Simulator
171
A new application needs temporary access to resources in AWS. How can this best be achieved?
Create an IAM Role and have the application assume the role.
172
In Identity and Access Management, which term refers to the IAM resource objects that AWS users for authentication?
Entities
173
You are working with IAM and need to attach policies to users, groups, and roles. What will you be attaching these policies to?
Identities
174
If you needed to set up a virtual firewall for your EC2 instance. What would you use?
Security group
175
Which AWS service provides central governance and management across multiple AWS accounts?
AWS Organizations
176
After configuring your VPC and all of the resources iwthin it, you want to add an extra layer of security at the subnet level. What will you use to add this security?
Network ACL
177
What AWS Developer Tools Suite service will enable creating, managing, and working with software development projects on AWS?
AWS CodeStar
178
What AWS service can automate deployments from end to end and provide continuous delivery functionality?
CodePipeline
179
Several EC2 instance in a public subnet need internet access. What will you configure as one step in granting internet access?
Internet gateway
180
What AWS service, coupled with EC2, can you implement elasticity by adding and removing instances as needed?
Auto Scaling
181
You have infrequently accessed data in S3 buckets that you want to transfer to Glacier. What can you use in AWS to do this?
S3 Lifecycle Policy
182
A gaming company is using the AWS Developer Tool Suite to develop, build, and deploy their applications. Which AWS service can be used too trace user requests from end to end through the app?
AWS X-Ray
