Fundamentals of AWS (Part 1) Flashcards

1
Q

If you want control over the EC2 Instance placement strategy? This is called what?

A

Placement Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What’s the difference between IAM Users, Groups and Roles?

A

Users: Usually a physical person.
Groups: Functions (admins, devops) Teams (engineering, design…) Contains users!
Roles: Internal usage within AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How many roles per application?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What port does AWS use for SSH?

A

Port 22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Security Groups are the fundamental of what type of security in AWS?

A

Network Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How are security groups used for EC2?

A

They control how traffic is allowed into or out. They act as a firewall.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What all do security groups regulate?

A
  1. Access to Ports.
  2. Authorised IP ranges – IPv4 and IPv6
  3. Control of inbound network (from other to the instance)
  4. Control of outbound network
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can a security group be attached to multiple instances or only 1?

A

Multiple Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

T / F: Security Groups are locked down to a region / VPC combination

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

If you experience a time out when trying to access your application. This it most likely due to what?

A

Security Group Issue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

If you recieve a “connection refused” error, then what’s likely going on?

A

It’s an application error or it’s not launched.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

T/F: For security Groups, all inbound traffic is blocked by default?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

T/F: For security Groups, all outbound traffic is blocked by default?

A

False. It’s authorized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Public IP means the machine can be identified where?

A

On the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Private IP means the machine can be identified where?

A

Only on a private network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How to private IP machines connect to the internet?

A

Using an internet gateway (a proxy)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

T / F: When you stop and start an EC2 instance, it’s public IP remains constant?

A

False - It can change its public IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

This will provide you a fixed public IP for your instance

A

Elastic IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

An Elastic IP is a what kind of IP?

A

public IPv4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How many instance can you attach an Elastic IP too?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How many Elastic IPs can you have by default

22
Q

By Default, your EC2 machine comes with what set of IPs if any?

A

Public, for www

Private IP for the internal AWS network.

23
Q

T /F: When SSH’ing into our EC2 instance, we use the private IP.

A

False. We use the public because we are not on the same network to use private.

24
Q

EC2: You can bootstrap an instance using ___?

A

EC2 User Data script

25
What does bootstraping mean?
Means launching commands when a machine starts.
26
The EC2 User Data Script runs with what user?
Root user
27
What are the 4 EC2 Instance Launch Modes?
On demand Reserved Spot Instances Dedicated Hosts
28
Describe On Demand Instances?
short workload, predictable pricing
29
Reserved Instances
long workloads (>= 1 year)
30
Spot Instances
short workloads, for cheap, can lose instances
31
Dedicated Hosts
book an entire physical server, control instance placement
32
Dedicated Instances
no other customers will share your hardware
33
Describe 'On Demand EC2 Instance'
* Pay for what you use (billing per second, after the first minute) * Has the highest cost but no upfront payment * No long term commitment
34
In what case should you use EC2 On Demand Instances?
Recommended for short-term and un-interrupted workloads, where you can't predict how the application will behave.
35
Reservation period for a 'Reserved Instance' can be what?
1-3 years
36
Can receive up to __ percent discount on Reserved Instances compared to On-demand
75%
37
This type of instance is recommended for steady state usage applications?
Reserved Instances
38
Can receive up to __ percent discount on Spot Instances
90%
39
This type of Instance allows you to bid a price and get the instance as long as its under the price
Spot Instance
40
This type of instance is good for batch jobs, big data analysis, or workloads that are resilient to failures
Spot Instances
41
This type of instance is useful for software that have complicated licensing model (BYOL) or for companies that have strong regulatory or compliance needs.
EC2 Dedicated Hosts
42
It's now possible to have an unlimited burst credit balance for burstable EC2's
True
43
T2 / T3 what what kind of EC2 Instances?
Burstable
44
What's an AMI?
an image to use to create our instances
45
T / F: AMI's can be used in multiple regions?
False. AMIs are built for a specific AWS region.
46
What are the two strategies for placement groups?
Cluster, Spread
47
Describe Cluster Placement Group
Cluster—clusters instances into a low-latency group in a single Availability Zone
48
Application that needs extremely low latency and high network throughput could make use of this>
Placement Groups Cluster. Great network (10Gbps bandwith btw instances) Cons: If rack fails, all instances fail.
49
How man EC2 Instances are allowed per AZ placement group?
7
50
Placement Groups can span across AZ's?
True
51
EC2 instances are billed by the?
Second