AWS Cloud for Philippine Supreme Court

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

How do you associate an Elastic IP address with an EC2 instance in the AWS console?

  • Navigate to the EC2 console, select Network & Security, Network Interfaces, choose the Elastic IP, click Actions, then click Associate Elastic IP Address.
  • Navigate to the EC2 console, select Network & Security, Network Interfaces, choose the instance, click Actions, then click Associate Elastic IP Address.
  • Navigate to the EC2 console, select Network & Security, Elastic IPs, choose the instance, click Actions, then click Associate Elastic IP Address.
  • Navigate to the EC2 console, select Network & Security, Elastic IPs, choose the Elastic IP, click Actions, then click Associate Elastic IP Address. (correct)

What is the purpose of a Secondary Network Interface in AWS?

  • To provide an alternative path for traffic to reach the instance if the primary network interface fails.
  • To increase the bandwidth available to the instance.
  • To enable the instance to communicate with multiple subnets within the VPC.
  • All of the above. (correct)

What is the order of steps involved in configuring Application Migration Service for agentless on-premise VM migration?

  • VM Discovery, Download of VM VDDK, Configuring Custom-Launch Template, Configuring Default Replication Template, Start VM Replication using Agentless.
  • Configuring Default Replication Template, Configuring Custom-Launch Template, Download of VM VDDK, VM Discovery, Start VM Replication using Agentless.
  • Download of VM VDDK, VM Discovery, Configuring Default Replication Template, Configuring Custom-Launch Template, Start VM Replication using Agentless. (correct)
  • Download of VM VDDK, Configuring Default Replication Template, Configuring Custom-Launch Template, VM Discovery, Start VM Replication using Agentless.

What is the difference between Pre-Cut-over and Final Cut-over in Application Migration Service?

<p>Pre-Cut-over prepares the target environment for the migration, while Final Cut-over completes the migration by stopping replication on the source and starting the migrated instance. (A)</p> Signup and view all the answers

What is the primary purpose of AWS Disaster Recovery Service?

<p>To provide a mechanism for replicating and recovering data in case of a disaster. (D)</p> Signup and view all the answers

What is the main benefit of using agentless migration in Application Migration Service?

<p>Both A and B. (C)</p> Signup and view all the answers

What is the purpose of installing the DR agent on a virtual machine in AWS Disaster Recovery Service?

<p>All of the above. (D)</p> Signup and view all the answers

What are the required permissions to install the DR agent on a Linux server?

<p>Both B and C. (A)</p> Signup and view all the answers

What are the key components involved in creating a public hosted zone using Route 53?

<p>Creating a hosted zone, defining records, configuring CloudFront (B)</p> Signup and view all the answers

Which service is used to monitor potential website defacement?

<p>CloudWatch (B)</p> Signup and view all the answers

When setting up an Application Load Balancer for an EC2 workload, what is the first step?

<p>Launch EC2 instances with the webserver (A)</p> Signup and view all the answers

What is the primary use of Content Security Policy (CSP) in the context of CloudFront?

<p>Protecting against cross-site scripting attacks (A)</p> Signup and view all the answers

What is the purpose of specifying glue records when adding or changing name servers and glue records for a domain registered with Route 53?

<p>To resolve private IP addresses within your VPC (D)</p> Signup and view all the answers

What is NOT a step involved in setting up an Application Load Balancer for an EC2 workload?

<p>Launching an EC2 instance (B)</p> Signup and view all the answers

What service can be used for migrating existing applications to AWS?

<p>AWS Application Migration Service (A)</p> Signup and view all the answers

What is the main purpose of setting up a VPC when configuring an Application Load Balancer for an EC2 workload?

<p>To provide a secure and isolated network environment (B)</p> Signup and view all the answers

How can you create a new AMI (Amazon Machine Image) based on an existing EC2 instance?

<p>By using the 'Create Image' option in the EC2 console (A), By making a snapshot of the instance's root volume (B)</p> Signup and view all the answers

To connect to an EC2 instance via SSH, which of the following is required?

<p>An AWS Key Pair (A), A secure shell client like PuTTY (C)</p> Signup and view all the answers

What is the purpose of the Application Migration Service?

<p>To migrate applications from on-premises to AWS without downtime. (D)</p> Signup and view all the answers

What is the primary purpose of VPC Peering?

<p>To connect a virtual private cloud to another VPC. (B)</p> Signup and view all the answers

What is the recommended approach to deploying new VPC subnets and route tables?

<p>All of the above are valid, but the best approach depends on your specific needs. (D)</p> Signup and view all the answers

Which of the following AWS services is used to protect against web-based attacks like SQL injection and cross-site scripting?

<p>WAF (C)</p> Signup and view all the answers

In the context of Disaster Recovery Service (DRS), what is the primary purpose of creating a custom launch template?

<p>To define the size and type of the EC2 instance that will be used for recovery. (A)</p> Signup and view all the answers

What is the purpose of the ‘Replication Template’ in the context of Application Migration Service?

<p>To define the frequency and method the data will be replicated. (C)</p> Signup and view all the answers

Which of the following options is not a step involved in the final cut-over phase during application migration using Application Migration Service?

<p>Disconnecting the on-premises workload from the network. (A)</p> Signup and view all the answers

How can you configure a VPC Peering connection between two VPCs?

<p>Through the VPC console in AWS. (A)</p> Signup and view all the answers

What is the main purpose of creating a Target Group for an EC2 instance?

<p>To group multiple instances for load balancing. (B)</p> Signup and view all the answers

What is the purpose of the Amazon Machine Image (AMI)?

<p>To store the operating system and software for an EC2 instance. (C)</p> Signup and view all the answers

What is the role of an Elastic IP Address in AWS?

<p>To provide a static IP address for an EC2 instance. (B)</p> Signup and view all the answers

Which of the following is not a step involved in configuring Site-to-Site VPN?

<p>Deploying a new S3 bucket in AWS. (B)</p> Signup and view all the answers

Which of the following is not a method for provisioning EC2 instances in AWS?

<p>Install (D)</p> Signup and view all the answers

Which of the following AWS services is used to monitor EC2 instances and other resources in AWS?

<p>CloudWatch (B)</p> Signup and view all the answers

Flashcards

Elastic IP Address

A static IP address designed for dynamic cloud computing in AWS.

Attach Elastic IP Address

Process of linking an Elastic IP to an instance or network interface.

Detach Elastic IP Address

Process of unlinking an Elastic IP from its associated instance or network interface.

Add Secondary Network Interface

Create an additional network interface for an EC2 instance to enhance network connectivity.

Signup and view all the flashcards

Application Migration Service

A service to migrate applications from on-premises to AWS with minimal downtime.

Signup and view all the flashcards

Agentless VM Replication

A technique that avoids installing software agents to replicate virtual machines.

Signup and view all the flashcards

Disaster Recovery (DR) Agent

A tool installed on VMs to facilitate recovery in case of a disaster.

Signup and view all the flashcards

Root privileges for DR Agent

Administrative rights needed to install the DR Agent on Linux servers.

Signup and view all the flashcards

CloudFront

A content delivery network service from AWS that speeds up the distribution of content to users.

Signup and view all the flashcards

Content Security Policy

A security measure that helps prevent attacks such as Cross Site Scripting (XSS) by specifying allowed content sources.

Signup and view all the flashcards

Caching

The process of storing copies of files or data in temporary storage for quicker access.

Signup and view all the flashcards

HTTP Headers

Included in HTTP requests and responses to provide additional information about the request or response.

Signup and view all the flashcards

Route 53

AWS's scalable domain name system (DNS) web service that provides DNS routing.

Signup and view all the flashcards

Creating Hosted Zone

The process of setting up a domain name within Route 53 to manage DNS records.

Signup and view all the flashcards

Application Load Balancer

A service that automatically distributes incoming application traffic across multiple targets, like EC2 instances.

Signup and view all the flashcards

EC2 Workload Setup

Configuring application services on Amazon EC2 instances to run applications effectively.

Signup and view all the flashcards

AWS Control Tower

A management tool for AWS account setup and governance.

Signup and view all the flashcards

VPC

Virtual Private Cloud, a private, isolated section of AWS Cloud.

Signup and view all the flashcards

EC2 Instances

Virtual servers in AWS to run applications.

Signup and view all the flashcards

AMI

Amazon Machine Image, a template for launching EC2 instances.

Signup and view all the flashcards

Snapshot

A backup of the volume at a specific point in time.

Signup and view all the flashcards

Security Groups

Virtual firewalls that control traffic to EC2 instances.

Signup and view all the flashcards

SSH

Secure Shell, a protocol for securely accessing servers remotely.

Signup and view all the flashcards

CloudFormation

A service for modeling and setting up AWS resources automatically.

Signup and view all the flashcards

WAF

Web Application Firewall, protects web applications from attacks.

Signup and view all the flashcards

CloudWatch

Monitoring service for AWS that provides data about resource usage.

Signup and view all the flashcards

Disaster Recovery Service

A service for recovering from failures or disasters in AWS.

Signup and view all the flashcards

Hosted Zone

Container for DNS records for a domain in Route 53.

Signup and view all the flashcards

Study Notes

AWS Quick Reference Guide for the Supreme Court of the Philippines

  • This guide provides a reference for using AWS cloud computing services, implemented during the Supreme Court cloud migration project.
  • The purpose of the document is to help users navigate and utilize AWS services effectively.

Document Control

  • Each update to the document is tracked to maintain consistency.
  • A minor change gets a numerical increment of 0.01 or higher.
  • A major change will increment the version number (e.g., 2.0).
  • A revision log is included detailing each change's date, owner, and remarks.

Reviewers

  • A list of stakeholders who will review the document is included.
  • Roles, such as Project Manager, Technical Manager, and Judicial Staff Officer, are mentioned.

AWS Infrastructure Diagram

  • The document includes diagrams illustrating the network architecture of the project. Networks include:
    • Main Non-Production VPC (10.200.0.0/18) with public and private subnets.
    • DR Production VPC (10.202.0.0/16).
    • Cloud resources such as IAM, CloudWatch, Budget, Cost Explorer, Load Balancers and other components.
    • Interconnections, such as a site-to-site VPN, are noted.
  • The diagrams show the relationships among various AWS services and components

AWS Organizational Structure

  • This section describes the AWS organizational structure, including the different Account types (Master Account, AWS Control Tower, Log Archive Account, Security OU, etc.).

AWS Services - VPC

  • VPC Networking Diagram: details deployment of new VPC subnets, route tables, configuring VPC Peering and configuring site-to-site VPN
  • Access Management via centralized Control Tower
  • Audit and Logging

AWS Services - EC2

  • Provisioning of EC2 Instances: launching, stopping, and terminating instances are described
  • Creation of AMIs: method of creating an AMI from an existing instance is explained
  • Creation of Snapshots: detailed steps for creating and managing snapshots
  • Creating, Attaching , Resizing and detaching volumes
  • Other EC2 Configurations: include details about security groups, and managing of AWS Key Pairs
  • Configuring EC2 Instances

AWS Services - Other Services/Configurations

  • Configuring VPC Peering
  • Configuring Site-to-Site VPN
  • Creating a target group.
  • Creation of Elastic IP Addresses
  • Adding Secondary Network Interfaces
  • Application Migration Service (including configuration and agentless migration)
  • Disaster Recovery Service including installation procedures, and replication setup
  • WAF and CloudFront (content security and caching) configuration
  • Working with Route53 resources such as creating hosted zones, adding records and managing DNS
  • Managing AWS Keypairs
  • Configuring Security Groups

Document Details

  • Page numbers, included for each page.
  • Individual instructions and steps for each AWS service.

Other Configurations

  • Detailed instructions on how to create, manage, and use AWS services, with numbered steps for each task.

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Quiz Team

Related Documents

SC Cloud Migration - AWS User Manual PDF

More Like This

Use Quizgecko on...
Browser
Open
Browser
Browser