AWS Fundamentals Flashcards

Exam prep

1
Q

What EC2 instance Type is best for high performance processors?
batch processing
media transcoding
high performance web servers
high performance computing
scientific modelling and machine learning
dedicated gaming servers?

A

Compute Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What EC2 Instance Type is best for fast performance for workloads that process large data sets in memory, such as
High performance databases
distributed web scale cache stores
In memory databases optimized for BI
Real time processing of big unstructured data

A

Memory Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What EC2 Instance type is great for storage intensive tasks that require high, sequential read and write access to large data sets on local storage?
Use Cases:
High frequency online transaction processing (OLTP) systems
Relational and no SQL dbs
In memory Cache eg Redis
Data Warehousing applications
Distributed file systems

A

Storage Optimized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Key points of security groups

A

Only contain allow rules (but are statful)
Can be referenced by IP or security group
Region or VPC combination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does a time out on accessing the application tend to imean?

A

Security group issue
Connection refused is likely an app error or it’s not launched

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What protocol is port 22 used for?

A

SSH - log into a linux instance
also used for SFTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What protocol is port 21 used for?

A

FTP File transfer - upload files to a shared space

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What protocol is port 80 used for?

A

unsecured web sites HTTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What protocol is port 443 used for?

A

HTTPS secured websites

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What protocol is port 3389 used for?

A

RDP - Remote Desktop Protocol (Windows instance log in)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

EBS Volume 3 key points

A

Network (not physical) drive, can be detached from an EC2 instance and attached to another quickly

Locked to an AZ, would need to Snapshot for moving to another AZ

Has a provisioned capacity in GB and IOPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

For default settings what happens when an EC2 instance is terminated?

A

By default the root EBS volume is deleted
Be default any other attached EBS Volume is persisted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Where can you get an AMI (Customization of an EC2 instance - Amazon Machine Image)

A

Public AMI - AWS provided
Your own AMI
AWS Marketplace AMI (made by someone else)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is an EC2 Instance Store?

A

High performance hardware disk (EBS is a network drive)
with better IO performance
Good for buffer/scratch/cache data
Ephemeral

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the only EBS volumes that can be used as boot volumes?

A

gp2/gp3 (SSD - general purpose)
io1/io2 (SSD - highest performance)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When would you use Provisioned IOPs SSD for EBS Volume

A

Critical business app
Sustained IOPs performance
> 16000 OPS
can be multi-attached

17
Q

When would you use HDD volume

A

st1: Throughput optimized
Big Data, warehousing , log processing

st2: Cold HDD
infrequent access
lowest cost is important

18
Q

What is multi attach EBS with io1/io2 family?

A

Attaching same volume to multiple EC2 instances in the same AZ
Apps must manage concurrent writes
up to 16 EC2 instances at a time
must use cluster aware file system

19
Q

Does EFS work with EC2 instances in multi AZ?

A

Yes

20
Q

What are the EFS Storage Tiers

A

Standard for frequently accessed
Infrequent (EFS-IA) cost to retrieve files

21
Q

How can you manage moving EFS data between Storage Tiers

A

Use a lifecycle policy

22
Q

Elastic Load Balancer - advantages

A

AWS Guarantee it will be working, they will upgrade it and allow easy configuration

Integrated with many AWS services

23
Q

Where is the Client IP for an ALB

A

inserted in X-Forwarded-For

24
Q

What is Cross-Zone Load Banlancing

A

Each load balancer distributes evenly across all registered instances in the AZ

Without cross zone load balancing the requests are distributed in the instance of the node of the ELB

It is only enabled by Default for ALB
For NLB and GLB it is disabled and costs $$ to enable.

25
Q

What DBS are managed by AWS (RDS)

A
  • Postgres
  • MySQL
  • MariaDB
  • Oracle
  • Microsoft SQL Server
  • Aurora (AWS Proprietary database)
26
Q

Advantages of using RDS

A
  • RDS is a managed service:
  • Automated provisioning, OS patching
  • Continuous backups and restore to specific timestamp (Point in Time Restore)!
  • Monitoring dashboards
  • Read replicas for improved read performance
  • Multi AZ setup for DR (Disaster Recovery)
  • Maintenance windows for upgrades
  • Scaling capability
  • Storage backed by EBS (gp2 or io1)
  • BUT you can’t SSH into your instances
27
Q

Storage Autoscaling with RDS - what actions do you need to do

A

Set max storage threshold

28
Q

What is the max RDS Read Replica?
Are RDS Read replica Confined to a region?

A

15
RDS Read replicas can be cross region, reads are ASYNC and eventually consistent

29
Q

If you are using RDS read replicas what must the application update in order to read them.?

A

The connection string

30
Q

How does Aurora handle read scaling?

A

One Aurora instance takes writes
The master takes writes, once there is a quorum
eg 4 copies out of 6 are written then write is done.

31
Q

What is unique about Aurora

A

AWS propietarty DB
Cloud Optimized
Storage automatically grows in increments of 10TB to 128TB
Very fast replication
HIghly available
More expensive

32
Q

RDS and Aurora Security points

A

At-rest encryption:
* Database master & replicas encryption using AWS KMS – must be defined as launch time
* If the master is not encrypted, the read replicas cannot be encrypted
* To encrypt an un-encrypted database, go through a DB snapshot & restore as encrypted
* In-flight encryption: TLS-ready by default, use the AWS TLS root certificates client-side
* IAM Authentication: IAM roles to connect to your database (instead of username/pw)
* Security Groups: Control Network access to your RDS / Aurora DB
* No SSH available except on RDS Custom
* Audit Logs can be enabled and sent to CloudWatch Logs for longer retention