AWS Cloud for Philippine Supreme Court
32 Questions
0 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

How do you associate an Elastic IP address with an EC2 instance in the AWS console?

  • Navigate to the EC2 console, select Network & Security, Network Interfaces, choose the Elastic IP, click Actions, then click Associate Elastic IP Address.
  • Navigate to the EC2 console, select Network & Security, Network Interfaces, choose the instance, click Actions, then click Associate Elastic IP Address.
  • Navigate to the EC2 console, select Network & Security, Elastic IPs, choose the instance, click Actions, then click Associate Elastic IP Address.
  • Navigate to the EC2 console, select Network & Security, Elastic IPs, choose the Elastic IP, click Actions, then click Associate Elastic IP Address. (correct)

    • What is the purpose of a Secondary Network Interface in AWS?

  • To provide an alternative path for traffic to reach the instance if the primary network interface fails.
  • To increase the bandwidth available to the instance.
  • To enable the instance to communicate with multiple subnets within the VPC.
  • All of the above. (correct)

    • What is the order of steps involved in configuring Application Migration Service for agentless on-premise VM migration?

  • VM Discovery, Download of VM VDDK, Configuring Custom-Launch Template, Configuring Default Replication Template, Start VM Replication using Agentless.
  • Configuring Default Replication Template, Configuring Custom-Launch Template, Download of VM VDDK, VM Discovery, Start VM Replication using Agentless.
  • Download of VM VDDK, VM Discovery, Configuring Default Replication Template, Configuring Custom-Launch Template, Start VM Replication using Agentless. (correct)
  • Download of VM VDDK, Configuring Default Replication Template, Configuring Custom-Launch Template, VM Discovery, Start VM Replication using Agentless.

    • What is the difference between Pre-Cut-over and Final Cut-over in Application Migration Service?

    <p>Pre-Cut-over prepares the target environment for the migration, while Final Cut-over completes the migration by stopping replication on the source and starting the migrated instance. (A)</p> Signup and view all the answers

    What is the primary purpose of AWS Disaster Recovery Service?

    <p>To provide a mechanism for replicating and recovering data in case of a disaster. (D)</p> Signup and view all the answers

    What is the main benefit of using agentless migration in Application Migration Service?

    <p>Both A and B. (C)</p> Signup and view all the answers

    What is the purpose of installing the DR agent on a virtual machine in AWS Disaster Recovery Service?

    <p>All of the above. (D)</p> Signup and view all the answers

    What are the required permissions to install the DR agent on a Linux server?

    <p>Both B and C. (A)</p> Signup and view all the answers

    What are the key components involved in creating a public hosted zone using Route 53?

    <p>Creating a hosted zone, defining records, configuring CloudFront (B)</p> Signup and view all the answers

    Which service is used to monitor potential website defacement?

    <p>CloudWatch (B)</p> Signup and view all the answers

    When setting up an Application Load Balancer for an EC2 workload, what is the first step?

    <p>Launch EC2 instances with the webserver (A)</p> Signup and view all the answers

    What is the primary use of Content Security Policy (CSP) in the context of CloudFront?

    <p>Protecting against cross-site scripting attacks (A)</p> Signup and view all the answers

    What is the purpose of specifying glue records when adding or changing name servers and glue records for a domain registered with Route 53?

    <p>To resolve private IP addresses within your VPC (D)</p> Signup and view all the answers

    What is NOT a step involved in setting up an Application Load Balancer for an EC2 workload?

    <p>Launching an EC2 instance (B)</p> Signup and view all the answers

    What service can be used for migrating existing applications to AWS?

    <p>AWS Application Migration Service (A)</p> Signup and view all the answers

    What is the main purpose of setting up a VPC when configuring an Application Load Balancer for an EC2 workload?

    <p>To provide a secure and isolated network environment (B)</p> Signup and view all the answers

    How can you create a new AMI (Amazon Machine Image) based on an existing EC2 instance?

    <p>By using the 'Create Image' option in the EC2 console (A), By making a snapshot of the instance's root volume (B)</p> Signup and view all the answers

    To connect to an EC2 instance via SSH, which of the following is required?

    <p>An AWS Key Pair (A), A secure shell client like PuTTY (C)</p> Signup and view all the answers

    What is the purpose of the Application Migration Service?

    <p>To migrate applications from on-premises to AWS without downtime. (D)</p> Signup and view all the answers

    What is the primary purpose of VPC Peering?

    <p>To connect a virtual private cloud to another VPC. (B)</p> Signup and view all the answers

    What is the recommended approach to deploying new VPC subnets and route tables?

    <p>All of the above are valid, but the best approach depends on your specific needs. (D)</p> Signup and view all the answers

    Which of the following AWS services is used to protect against web-based attacks like SQL injection and cross-site scripting?

    <p>WAF (C)</p> Signup and view all the answers

    In the context of Disaster Recovery Service (DRS), what is the primary purpose of creating a custom launch template?

    <p>To define the size and type of the EC2 instance that will be used for recovery. (A)</p> Signup and view all the answers

    What is the purpose of the ‘Replication Template’ in the context of Application Migration Service?

    <p>To define the frequency and method the data will be replicated. (C)</p> Signup and view all the answers

    Which of the following options is not a step involved in the final cut-over phase during application migration using Application Migration Service?

    <p>Disconnecting the on-premises workload from the network. (A)</p> Signup and view all the answers

    How can you configure a VPC Peering connection between two VPCs?

    <p>Through the VPC console in AWS. (A)</p> Signup and view all the answers

    What is the main purpose of creating a Target Group for an EC2 instance?

    <p>To group multiple instances for load balancing. (B)</p> Signup and view all the answers

    What is the purpose of the Amazon Machine Image (AMI)?

    <p>To store the operating system and software for an EC2 instance. (C)</p> Signup and view all the answers

    What is the role of an Elastic IP Address in AWS?

    <p>To provide a static IP address for an EC2 instance. (B)</p> Signup and view all the answers

    Which of the following is not a step involved in configuring Site-to-Site VPN?

    <p>Deploying a new S3 bucket in AWS. (B)</p> Signup and view all the answers

    Which of the following is not a method for provisioning EC2 instances in AWS?

    <p>Install (D)</p> Signup and view all the answers

    Which of the following AWS services is used to monitor EC2 instances and other resources in AWS?

    <p>CloudWatch (B)</p> Signup and view all the answers

    Flashcards

    Elastic IP Address

    A static IP address designed for dynamic cloud computing in AWS.

    Attach Elastic IP Address

    Process of linking an Elastic IP to an instance or network interface.

    Detach Elastic IP Address

    Process of unlinking an Elastic IP from its associated instance or network interface.

    Add Secondary Network Interface

    Create an additional network interface for an EC2 instance to enhance network connectivity.

    Signup and view all the flashcards

    Application Migration Service

    A service to migrate applications from on-premises to AWS with minimal downtime.

    Signup and view all the flashcards

    Agentless VM Replication

    A technique that avoids installing software agents to replicate virtual machines.

    Signup and view all the flashcards

    Disaster Recovery (DR) Agent

    A tool installed on VMs to facilitate recovery in case of a disaster.

    Signup and view all the flashcards

    Root privileges for DR Agent

    Administrative rights needed to install the DR Agent on Linux servers.

    Signup and view all the flashcards

    CloudFront

    A content delivery network service from AWS that speeds up the distribution of content to users.

    Signup and view all the flashcards

    Content Security Policy

    A security measure that helps prevent attacks such as Cross Site Scripting (XSS) by specifying allowed content sources.

    Signup and view all the flashcards

    Caching

    The process of storing copies of files or data in temporary storage for quicker access.

    Signup and view all the flashcards

    HTTP Headers

    Included in HTTP requests and responses to provide additional information about the request or response.

    Signup and view all the flashcards

    Route 53

    AWS's scalable domain name system (DNS) web service that provides DNS routing.

    Signup and view all the flashcards

    Creating Hosted Zone

    The process of setting up a domain name within Route 53 to manage DNS records.

    Signup and view all the flashcards

    Application Load Balancer

    A service that automatically distributes incoming application traffic across multiple targets, like EC2 instances.

    Signup and view all the flashcards

    EC2 Workload Setup

    Configuring application services on Amazon EC2 instances to run applications effectively.

    Signup and view all the flashcards

    AWS Control Tower

    A management tool for AWS account setup and governance.

    Signup and view all the flashcards

    VPC

    Virtual Private Cloud, a private, isolated section of AWS Cloud.

    Signup and view all the flashcards

    EC2 Instances

    Virtual servers in AWS to run applications.

    Signup and view all the flashcards

    AMI

    Amazon Machine Image, a template for launching EC2 instances.

    Signup and view all the flashcards

    Snapshot

    A backup of the volume at a specific point in time.

    Signup and view all the flashcards

    Security Groups

    Virtual firewalls that control traffic to EC2 instances.

    Signup and view all the flashcards

    SSH

    Secure Shell, a protocol for securely accessing servers remotely.

    Signup and view all the flashcards

    CloudFormation

    A service for modeling and setting up AWS resources automatically.

    Signup and view all the flashcards

    WAF

    Web Application Firewall, protects web applications from attacks.

    Signup and view all the flashcards

    CloudWatch

    Monitoring service for AWS that provides data about resource usage.

    Signup and view all the flashcards

    Disaster Recovery Service

    A service for recovering from failures or disasters in AWS.

    Signup and view all the flashcards

    Hosted Zone

    Container for DNS records for a domain in Route 53.

    Signup and view all the flashcards

    Study Notes

    AWS Quick Reference Guide for the Supreme Court of the Philippines

    • This guide provides a reference for using AWS cloud computing services, implemented during the Supreme Court cloud migration project.
    • The purpose of the document is to help users navigate and utilize AWS services effectively.

    Document Control

    • Each update to the document is tracked to maintain consistency.
    • A minor change gets a numerical increment of 0.01 or higher.
    • A major change will increment the version number (e.g., 2.0).
    • A revision log is included detailing each change's date, owner, and remarks.

    Reviewers

    • A list of stakeholders who will review the document is included.
    • Roles, such as Project Manager, Technical Manager, and Judicial Staff Officer, are mentioned.

    AWS Infrastructure Diagram

    • The document includes diagrams illustrating the network architecture of the project. Networks include:
      • Main Non-Production VPC (10.200.0.0/18) with public and private subnets.
      • DR Production VPC (10.202.0.0/16).
      • Cloud resources such as IAM, CloudWatch, Budget, Cost Explorer, Load Balancers and other components.
      • Interconnections, such as a site-to-site VPN, are noted.
    • The diagrams show the relationships among various AWS services and components

    AWS Organizational Structure

    • This section describes the AWS organizational structure, including the different Account types (Master Account, AWS Control Tower, Log Archive Account, Security OU, etc.).

    AWS Services - VPC

    • VPC Networking Diagram: details deployment of new VPC subnets, route tables, configuring VPC Peering and configuring site-to-site VPN
    • Access Management via centralized Control Tower
    • Audit and Logging

    AWS Services - EC2

    • Provisioning of EC2 Instances: launching, stopping, and terminating instances are described
    • Creation of AMIs: method of creating an AMI from an existing instance is explained
    • Creation of Snapshots: detailed steps for creating and managing snapshots
    • Creating, Attaching , Resizing and detaching volumes
    • Other EC2 Configurations: include details about security groups, and managing of AWS Key Pairs
    • Configuring EC2 Instances

    AWS Services - Other Services/Configurations

    • Configuring VPC Peering
    • Configuring Site-to-Site VPN
    • Creating a target group.
    • Creation of Elastic IP Addresses
    • Adding Secondary Network Interfaces
    • Application Migration Service (including configuration and agentless migration)
    • Disaster Recovery Service including installation procedures, and replication setup
    • WAF and CloudFront (content security and caching) configuration
    • Working with Route53 resources such as creating hosted zones, adding records and managing DNS
    • Managing AWS Keypairs
    • Configuring Security Groups

    Document Details

    • Page numbers, included for each page.
    • Individual instructions and steps for each AWS service.

    Other Configurations

    • Detailed instructions on how to create, manage, and use AWS services, with numbered steps for each task.

    Studying That Suits You

    Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

    Quiz Team

    Related Documents

    SC Cloud Migration - AWS User Manual PDF

    Description

    This quiz covers the AWS Quick Reference Guide tailored for the Supreme Court of the Philippines, focusing on cloud computing services utilized during their migration project. It includes document control details, stakeholder roles for review, and network architecture diagrams essential for understanding the implementation of AWS services.

    More Like This

    Use Quizgecko on...
    Browser
    Open
    Browser
    Browser