A summary of what you need to know for the exam can be found here
What types of Cloud Computing services are there?
IAAS PAAS SAAS
Explain each of the following and give an example:
- IAAS
- PAAS
- SAAS
What types of clouds (or cloud deployments) are there?
- Public
- Hybrid
- Private
Explain each of the following Cloud Computing Deployments:
- Public
- Hybrid
- Private
Explain the following
- Availability zone
- Region
- Edge location
AWS regions are data centers hosted across different geographical locations worldwide, each region is completely independent of one another.
Within each region, there are multiple isolated locations known as Availability Zones. Multiple availability zones ensure high availability in case one of them goes down.
Edge locations are basically content delivery network which caches data and insures lower latency and faster delivery to the users in any location. They are located in major cities in the world.
What is VPC?
"A logically isolated section of the AWS cloud where you can launch AWS resources in a virtual network that you define" Read more about it here.
True or False? VPC spans multiple regions
False
True or False? Subnets belong to the same VPC, can be in different availability zones
True. Just to clarify, a subnet must reside entirely in one AZ.
What is an Internet Gateway?
"component that allows communication between instances in your VPC and the internet" (AWS docs). Read more about it here
True or False? NACL allow or deny traffic on the subnet level
True
True or False? Multiple Internet Gateways can be attached to one VPC
False. Only one internet gateway can be attached to a single VPC.
True or False? Route Tables used to allow or deny traffic from the internet to AWS instances
False.
Explain Security Groups and Network ACLs
- NACL - security layer on the subnet level.
- Security Group - security layer on the instance level.
What is AWS Direct Connect?
Allows you to connect your corporate network to AWS network.
What is EC2?
"a web service that provides secure, resizable compute capacity in the cloud". Read more here
What is AMI?
Amazon Machine Images is "An Amazon Machine Image (AMI) provides the information required to launch an instance". Read more here
What are the different source for AMIs?
- Personal AMIs - AMIs you create
- AWS Marketplace for AMIs - Paid AMIs usually with bundled with licensed software
- Community AMIs - Free
What is instance type?
"the instance type that you specify determines the hardware of the host computer used for your instance" Read more about instance types here
True or False? The following are instance types available for a user in AWS:
- Compute optimizied
- Network optimizied
- Web optimized
False. From the above list only compute optimized is available.
What is EBS?
"provides block level storage volumes for use with EC2 instances. EBS volumes behave like raw, unformatted block devices." More on EBS here
What EC2 pricing models are there?
On Demand - pay a fixed rate by the hour/second with no commitment. You can provision and terminate it at any given time. Reserved - you get capacity reservation, basically purchase an instance for a fixed time of period. The longer, the cheaper. Spot - Enables you to bid whatever price you want for instances or pay the spot price. Dedicated Hosts - physical EC2 server dedicated for your use.
What are Security Groups?
"A security group acts as a virtual firewall that controls the traffic for one or more instances" More on this subject here
Explain what is AWS S3?
S3 stands for 3 S, Simple Storage Service. S3 is a object storage service which is fast, scalable and durable. S3 enables customers to upload, download or store any file or object that is up to 5 TB in size.
More on S3 here
What is a bucket?
An S3 bucket is a resource which is similar to folders in a file system and allows storing objects, which consist of data.
True or False? A bucket name must be globally unique
True
Explain folders and objects in regards to buckets
- Folder - any sub folder in an s3 bucket
- Object - The files which are stored in a bucket
Explain the following:
-
Object Lifecycles
-
Object Sharing
-
Object Versioning
Object Lifecycles
Object Sharing
Object Versioning
Object Lifecycles - Transfer objects between storage classes based on defined rules of time periods
Object Sharing - Share objects via a URL link
Object Versioning - Manage multiple versions of an object
Explain Object Durability and Object Availability
Object Durability: The percent over a one-year time period that a file will not be lost Object Availability: The percent over a one-year time period that a file will be accessible
What is a storage class? What storage classes are there?
Each object has a storage class assigned to, affecting its availability and durability. This also has effect on costs. Storage classes offered today:
-
Standard:
- Used for general, all-purpose storage (mostly storage that needs to be accessed frequently)
- The most expensive storage class
- 11x9% durability
- 2x9% availability
- Default storage class
-
Standard-IA (Infrequent Access)
- Long lived, infrequently accessed data but must be available the moment it's being accessed
- 11x9% durability
- 99.90% availability
-
One Zone-IA (Infrequent Access):
- Long-lived, infrequently accessed, non-critical data
- Less expensive than Standard and Standard-IA storage classes
- 2x9% durability
- 99.50% availability
-
Intelligent-Tiering:
- Long-lived data with changing or unknown access patterns. Basically, In this class the data automatically moves to the class most suitable for you based on usage patterns
- Price depends on the used class
- 11x9% durability
- 99.90% availability
-
Glacier: Archive data with retrieval time ranging from minutes to hours
-
Glacier Deep Archive: Archive data that rarely, if ever, needs to be accessed with retrieval times in hours
-
Both Glacier and Glacier Deep Archive are:
- The most cheap storage classes
- have 9x9% durability
More on storage classes here
A customer would like to move data which is rarely accessed from standard storage class to the most cheapest class there is. Which storage class should be used?
- One Zone-IA
- Glacier Deep Archive
- Intelligent-Tiering
Glacier Deep Archive
Explain what is Storage Gateway
"AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage". More on Storage Gateway here
Explain the following Storage Gateway deployments types
- File Gateway
- Volume Gateway
- Tape Gateway
Explained in detail here
What is the difference between stored volumes and cached volumes?
Stored Volumes - Data is located at customer's data center and periodically backed up to AWS Cached Volumes - Data is stored in AWS cloud and cached at customer's data center for quick access
What is IAM? What are some of its features?
Full explanation is here In short: it's used for managing users, groups, access policies & roles
True or False? IAM configuration is defined globally and not per region
True
Given an example of IAM best practices?
- Set up MFA
- Delete root account access keys
- Create IAM users instead of using root for daily management
What are Roles?
A way for allowing a service of AWS to use another service of AWS. You assign roles to AWS resources. For example, you can make use of a role which allows EC2 service to acesses s3 buckets (read and write).
What are Policies?
Policies documents used to give permissions as to what a user, group or role are able to do. Their format is JSON.
A user is unable to access an s3 bucket. What might be the problem?
There can be several reasons for that. One of them is lack of policy. To solve that, the admin has to attach the user with a policy what allows him to access the s3 bucket.
What should you use to:
-
Grant access between two services/resources?
-
Grant user access to resources/services?
Grant access between two services/resources?
Grant user access to resources/services?
Role
Policy
What permissions does a new user have?
Only a login access.
What is ELB (Elastic Load Balancing)?
AWS definition: "Elastic Load Balancing automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions."
More on ELB here
What is auto scaling?
AWS definition: "AWS Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost"
Read more about auto scaling here
True or False? Auto Scaling is about adding resources (such as instances) and not about removing resource
False. Auto scaling adjusts capacity and this can mean removing some resources based on usage and performances.
What types of load balancers are supported in EC2 and what are they used for?
- Application LB - layer 7 traffic
- Network LB - ultra-high performances or static IP address
- Classic LB - low costs, good for test or dev environments
What is Route 53?
"Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service" Some of Route 53 features:
- Register domain
- DNS service - domain name translations
- Health checks - verify your app is available
More on Route 53 here
Explain what is CloudFront
AWS definition: "Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment."
More on CloudFront here
Explain the following
- Origin
- Edge location
- Distribution
What is AWS CloudWatch?
AWS definition: "Amazon CloudWatch is a monitoring and observability service..."
More on CloudWatch here
What is AWS CloudTrail?
AWS definition: "AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account."
Read more on CloudTrail here
What is Simply Notification Service?
AWS definition: "a highly available, durable, secure, fully managed pub/sub messaging service that enables you to decouple microservices, distributed systems, and serverless applications."
Read more about it here
Explain the following in regards to SNS:
-
Topics
-
Subscribers
-
Publishers
Topics
Subscribers
Publishers
Topics - used for grouping multiple endpoints
Subscribers - the endpoints where topics send messages to
Publishers - the provider of the message (event, person, ...)
What is the shared responsibility model? What AWS is responsible for and what the user is responsible for based on the shared responsibility model?
The shared responsibility model defines what the customer is responsible for and what AWS is responsible for.
More on the shared responsibility model here
True or False? Based on the shared responsibility model, Amazon is responsible for physical CPUs and security groups on instances
False. It is responsible for Hardware in its sites but not for security groups which created and managed by the users.
What is the AWS compliance program?
Explain what each of the following services is used for
- AWS Inspector
- AWS Artifact
- AWS GuardDuty
- AWS Shield
What is AWS WAF? Give an example of how it can used and describe what resources or services you can use it with
What AWS VPN is used for?
What is the difference between Site-to-Site VPN and Client VPN?
True or False? AWS Inspector can perform both network and host assessments
True
What is AWS Acceptable Use Policy?
It describes prohibited uses of the web services offered by AWS. More on AWS Acceptable Use Policy here
What is AWS Key Management Service (KMS)?
AWS definition: "KMS makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications." More on KMS here
True or False? A user is not allowed to perform penetration testing on any of the AWS services
False. On some services, like EC2, CloudFront and RDS, penetration testing is allowed.
True or False? DDoS attack is an example of allowed penetration testing activity
False.
What is AWS RDS?
What is AWS DynamoDB?
What is AWS Redshift and how is it different than RDS?
What is AWS ElastiCache? For what cases is it used?
Amazon Elasticache is a fully managed Redis or Memcached in-memory data store.
It's great for use cases like two-tier web applications where the most frequently accesses data is stored in ElastiCache so response time is optimal.
What is Amazon Aurora
A MySQL & Postgresql based relational database. Also, the default database proposed for the user when using RDS for creating a database. Great for use cases like two-tier web applications that has a MySQL or Postgresql database layer and you need automated backups for your application.
Explain what is AWS Lambda
AWS definition: "AWS Lambda lets you run code without provisioning or managing servers. You pay only for the compute time you consume."
Read more on it here
True or False? In AWS Lambda, you are charged as long as a function exists, regardless of whether it's running or not
False. Charges are being made when the code is executed.
Which of the following set of languages Lambda supports?
-
R, Swift, Rust, Kotlin
-
Python, Ruby, Go
-
Python, Ruby, PHP
R, Swift, Rust, Kotlin
Python, Ruby, Go
Python, Ruby, PHP
Python, Ruby, Go
Which service would you use for building a website or web application?
Lightsail
Which tool would you use for choosing between Reserved instances or On-Demand instances?
Cost Explorer
What would you use to check how many unassociated Elastic IP address you have?
Trusted Advisor
What service allows you to transfer large amounts (Petabytes) of data in and out of the AWS cloud?
AWS Snowball
What provides a virtual network dedicated to your AWS account?
VPC
What you would use for having automated backups for an application that has MySQL database layer?
Amazon Aurora
What would you use to migrate on-premise Oracle database to AWS?
AWS Database Migration Service
What would you use to check why certain EC2 instances were terminated?
AWS CloudTrail
What would you use for SQL database?
AWS RDS
What would you use for NoSQL database?
AWS DynamoDB
What would you use for running SQL queries interactively on S3?
AWS Athena
What would you use for adding image and video analysis to your application?
AWS Rekognition
Which service is used for sending notifications?
SNS
Which service would you use for monitoring malicious activity and unauthorized behavior in regards to AWS accounts and workloads?
Amazon GuardDuty
Which service would you use for centrally manage billing, control access, compliance, and security across multiple AWS accounts?
AWS Organizations
Which service would you use for web application protection?
AWS WAF
What is AWS Organizations?
AWS definition: "AWS Organizations helps you centrally govern your environment as you grow and scale your workloads on AWS." More on Organizations here
Explain AWS pricing model
It mainly works on "pay-as-you-go" meaning you pay only for what are using and when you are using it. In s3 you pay for 1. How much data you are storing 2. Making requests (PUT, POST, ...) In EC2 it's based on the purchasing option (on-demand, spot, ...), instance type, AMI type and the region used.
More on AWS pricing model here
How one should estimate AWS costs when for example comparing to on-premise solutions?
- TCO calculator
- AWS simple calculator
- Cost Explorer
What basic support in AWS includes?
- 24x7 customer service
- Trusted Advisor
- AWS personal Health Dashoard
Which of the following are AWS accounts types (and are sorted by order)?
-
Basic, Developer, Business, Enterprise
-
Newbie, Intermediate, Pro, Enterprise
-
Developer, Basic, Business, Enterprise
-
Beginner, Pro, Intermediate Enterprise
Basic, Developer, Business, Enterprise
Newbie, Intermediate, Pro, Enterprise
Developer, Basic, Business, Enterprise
Beginner, Pro, Intermediate Enterprise
Basic, Developer, Business, Enterprise
True or False? Region is a factor when it comes to EC2 costs/pricing
True. You pay differently based on the chosen region.
What is AWS Lightsail?
AWS definition: "Lightsail is an easy-to-use cloud platform that offers you everything needed to build an application or website, plus a cost-effective, monthly plan."
What is AWS Rekognition?
AWS definition: "Amazon Rekognition makes it easy to add image and video analysis to your applications using proven, highly scalable, deep learning technology that requires no machine learning expertise to use."
Learn more here
What is the Trusted Advisor?
What AWS services are serverless (or have the option to be serverless)?
AWS Lambda AWS Athena
What is AWS Athena?
"Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL."
Learn more about AWS Athena here
Good luck! You can do it :)