Download AWS Services and Concepts and more Exams Software Engineering in PDF only on Docsity!
AWS Certified Cloud Practitioner 2023-2024. Questions
and Correct, Verified Answers. Graded A+
Amazon Aurora - ANSis a MySQL and PostgreSQL-compatible relational database engine that combines the speed and availability of high-end commercial databases with the simplicity and cost-effectiveness of open source databases. amazon Cloud HSM (Hardware security management) - ANSManage single-tenant hardware security modules (HSMs) on AWS Amazon Cloudfront - ANSis a CDN, content delivery network, network that delivers to edge locations Amazon Cloudwatch - ANSmonitor AWS infrastructure in real time can create alert that triggers alert and perform an action amazon comprehend - ANSdiscover patterns in text Amazon Data migration Service (DMS) - ANSmigrate databases move data from source to target, can be different types of data Amazon DynamoDB Accelerator (DAX) - ANSa fully managed, highly available, in-memory cache that can reduce Amazon DynamoDB response times from milliseconds to microseconds, even at millions of requests per second. Amazon EC2 Auto Scaling - ANSdynamic scaling, respond to changing demand predicative scaling - automatically schedules the right # of amazon EC2 instance based on predicted demand Amazon EC2 scaling capcity - ANSminimum capacity - minimum # of EC2 instances to launch
desire capacity - the desired amount of # of EC2 instances, if no desire, EC2 will scale to minimum capacity maximum capacity - max # of EC2 instance in auto scaling group Amazon Elastic file system (EFS) - ANSmultiple instance access data at the same time, linux file system, regional level resource Amazon ElasticCache - ANScache data for faster access Amazon GuardDuty - ANSProvide intelligent thread detection for your AWS infrastructure Amazon Kinesis - ANScollect process and analyze realtime video and datastream Amazon lex - ANSvoice and chatbox Amazon Machine image - ANSsupported and maintained image provided by AWS that provide information to launch an isntance amazon macie - ANSuse machine learning to detect and protect your data on AWS Amazon Neptune - ANSgraph database fraud detection Amazon Redshift - ANSstores historical data - Datawarehousing as a service massive scalability Amazon Relational Database Service (RDS) - ANSuse queries by writing SQL to access database supports MySQL, postgres SQL, oracle, Microsoft SQL Server high availablity, recovery provided custom ownership of schema
tech layer: platform security operations AWS CloudFormation - ANSinfrastructure as code used to define a wild variety of aws resources define without how everything is build. provision all resources needed manage all aws API for you can run in multiple account or region write code to manage AWS infrastructure AWS Cloudtrail - ANScomprehensive API auditing tool every request gets logged AWS command line interface - ANScan access aws resource from your terminal, can be repeated with commands, less susceptible to human error AWS Control tower - ANSautomate the creation and mangement of multiple account in AWS enviornments AWS cost explorer - ANSusually see and analyze spending can group by tag and see expensive with that tag can create reports AWS Direct connect - ANSprivate fiber connection from data center to AWS AWS elastic beanstalk - ANSuse desired config to build environments for you, can save configs, no need to provision and manage seperately
AWS Fargate - ANSserverless platform for ECS, EKS Manage server infrastructure for you AWS Identity and access management (IAM) - ANSdefault IAM users have no permission, root users need to explicit allowed access AWS Lambdas - ANSupload code to Lambda functions, configures a trigger and wait for it. run code less than 15 minutes short running function service oriented application event driven application no provisioning or managing services AWS Management console - ANSon the web, used for: test environments view aws billing view monitoring work with non-technical resources non-repeatable AWS marketplace - ANScurated digital catalog, managed 3rd party software AWS organization - ANScentral location to manage multiple accounts centralized management consolidated billing bulk discount hierarchical grouping of accounts
has a technical account manager AWS trusted advisors - ANSservice evaluate resource against 5 principles: cost optimization performance security fault tolerance service limits AWS Well Architected framework - ANSoperational excellence security reliability performance efficiency cost optimization sustainability Benefits of cloud computing - ANSvariable expense less money to run and maintain data centers have capacity need on demand higher economy of scale for AWS, lower price as you buy larger storage increase speed and agility cloud computing - ANSon demand delivery of IT resources with pay as you go pricing Cloud computing development models - ANScloud base deployment on premise deployment hybrid deployment Cloudtrail insights - ANSoptional feature that detect unusual API activities
Container Orchestration tools - ANSAmazon Elastic Container Service (ECS) Amazon Elastic Kubernetes Service (EKS) containerizes application - package everything that is needed for your application to run. dashboard - ANSshow data monitor in new real time access all metrics from central location dedicated host - ANSusually for compliance requirements, most expensive and you get more control to your host Denial of service (DDOS) - ANSshutdown application/ overwhelming application disaster recovery options - ANSbackup and restore - lowest cost pilot light - data live, service idle warm standby - always running instance but smaller multi site active - zero downtime, zero data lost, most expensive Domain name system resolution - ANScustom DNS resolver that communicates with a company DNS server DynamoDB - ANSserverless database stores flexible data stores in multiple available zones very fast bad for complex data doesn't use SQL structure data useing key value pairs PB size potential
least preveledge principle - ANSgive access only to what you need Load balancing - ANStakes request and distribute traffic across multiple resources Migration strategies - ANSrehosting- lift and shift replatforming - lift, tinker, and shift retire - remove old apps retain - don't migrate and then deprecate repurchase-fresh start, change licensing with vendors refactoring - write new code Multitenacy - ANSThe hypervisor shares virtual machine, in AWS, one EC2 is not aware of other EC network ACL (Access control list) - ANSa part of a gateway to determine if packet can be accepted or denied Stateless- doesn't remember previous decisions, always check default- allow all inbounding and out bounding traffic custom network ACL - inbound and outbound taffic is denied on demand instances - ANSno contract, short term, uninterrupted, irregular workloads packets - ANSmessages broken down from the internet region - ANSgeographically separate area, contains multiple availability zones solves high availability and fault tolerance issues Region choice - ANScompliance proximity
feature availability pricing reserved instance - ANSnot required for constant computing. one to three year contract all upfront partial upfront no upfront root account - ANSthe account that is created with your AWS. Should hide or delete your key. Can do anything on the account. Best to turn on MFA to login (Multi factor authentication) S3 types - ANSS3 standard S3 infrequent access - higher access cost , lower storage cost S3 Glacier - auditing data, retain data over years S3 one zone-infrequent access -cheap but only 1 available zone S3 outpost - Delivers S3 on premise savings plan - ANSconstant amount of computing, lower price in exchange for contract for 1 or 3 years security group - ANSinstance level security, accept only specific website doesn't check packet going out is stateful(remembers prior decisions) will not check previous decision. default- denies all inbound traffic and allow all outbound traffic shared responsibility model - ANSAWS is responsible for physical building/servers/guards network and hypervisor for temper proof
42 TB
AWS snowmobile large truck and body guards 100PB spot instance - ANSbet on stances, and shut off anytime with 2 minute waring, good for batch processes. subnets - ANSsection of vpc that contain resources Technical Account Manager (TAM) - ANSprimary point of contact at AWS. They provide guidance, architectural reviews, and ongoing communication with your company as you plan, deploy, and optimize your applications. tightly coupled - ANSsingle component fails then the whole system fails. Rely on all system to be fully operational Types of EC2 instances - ANSGeneral Purpose - Balance resource Compute Optimized - Compute intensive. scentific Memory Optimized - Large amount of unstructured data Accelerated Computing - floating point calculation, streaming Storage Optimized - good for storing data Vertical scaling instance - ANSmake instance bigger or smaller when needed virtual private cloud (VPC) - ANSisolated section has public and private subnets groups resources together Virtual private Gateway - ANSconnect private network to VPC
