Cloud Computing Mock Test 1

Mock Tests for AWS Certification

• Mock tests are used to identify gaps in knowledge and review chapters that cover the concepts examined in the questions.
• Mock tests help in preparing for the official AWS certification exam.

Cloud Service Models

• Infrastructure as a Service (IaaS) is most like an on-premises environment, where you configure virtual infrastructure components such as compute, network, and storage services.
• IaaS allows hosting applications on.

Cloud Deployment Models

• Hybrid cloud deployment model is required when migrating workloads in stages, ensuring connectivity between on-premises infrastructure and applications deployed on AWS.

AWS Regions

• Choosing a specific AWS Region depends on factors such as:
  • Reducing latency by being closer to end-users.
  • Compliance or data residency laws.

AWS Global Infrastructure

• Edge locations enable caching content (videos, images, and documents) and offer low-latency access.

AWS Services

• AWS Storage Gateway enables designing a hybrid cloud architecture and accessing Amazon S3 cloud storage.
• Amazon CloudFront is a content delivery service that can be used to cache content locally.

Support Plans

• AWS support plans include:
  • Basic Support plan.
  • Developer Support plan.
  • Business Support plan.
  • Enterprise Support plan.
• The cost-effective support plan for non-production workloads is the Developer Support plan.

Global Services

• AWS IAM and Amazon Route 53 are regarded as global services on AWS.

Cost Estimation

• AWS Pricing Calculator is a tool that can be used to estimate monthly costs.
• AWS Cost Explorer is a tool that enables viewing Reserved Instance (RI) utilization.

IAM Users and Roles

• IAM users and roles can be used to grant access to AWS resources.
• IAM roles are used to grant temporary access to AWS resources.

IAM Policies

• IAM policies can be used to define permissions for IAM users and roles.
• SCPs (Service Control Policies) are used to define boundaries for IAM users and roles.
• Permission boundaries are used to define the maximum set of permissions that can be defined for IAM users and roles.

Amazon S3

• Amazon S3 storage classes include:
  • Standard-IA (for infrequently accessed objects).
  • Glacier (for archiving data).
  • Intelligent Tiering (for cost-effective storage).
• Amazon S3 Cross-Region Replication (CRR) enables creating a secondary copy of objects in a different Region.

Data Encryption

• Server-Side Encryption with KMS keys (SSE-KMS) is used to encrypt data at rest and provides an auditing feature.

Snowball Edge

• Snowball Edge is a data transfer service that can be used to transfer large amounts of data to AWS.
• Snowball Edge Storage Optimized is used for large-scale data migrations.

Amazon VPC

• Amazon VPC enables connecting multiple VPCs using private IP address space.
• AWS Transit Gateway is a service that enables connecting multiple VPCs and on-premises networks.

Load Balancers

• Application Load Balancers (ALBs) can be used to redirect traffic to a friendly domain name.
• Route 53 can be used to configure the alias's name for an ALB.

EC2 Instances

• EC2 instances can be used for various workloads, including compute-intensive workloads.
• Accelerated Computing instances are designed for floating-point number calculations, graphics processing, or data pattern matching.

EBS Volumes

• EBS volume types include:
  • General Purpose SSD (gp2).
  • Provisioned IOPS SSD (io1).
  • Throughput Optimized HDD (st1).
  • Cold HDD (sc1).

Note: The above notes are based on the provided text and are intended to be a summary of the key points. Please refer to the original text for more information and context.### Payment Options for RIs

• A 1-year commitment with payment made using the Partial Upfront option helps achieve the maximum discount for Reserved Instances (RIs).

Deploying Virtual Private Servers (VPS)

• Amazon Lightsail enables quick deployment of VPS that comes preconfigured with common application stacks, SSD storage, and fixed IP addresses for a fixed monthly fee based on the server configuration.

Deploying Docker Applications

• Amazon ECS (Elastic Container Service) enables deployment of Docker applications without having to manage EC2 instances.
• The Fargate Launch Type is used to deploy Docker applications without managing EC2 instances.

Serverless Offering

• AWS Lambda is part of the AWS serverless offering, allowing code to run in response to a trigger or event.

File Sharing Capabilities

• Amazon FSx for Windows File Server offers file sharing capabilities for Windows-aware applications and integrates with Microsoft Active Directory.

Storage Architecture

• Amazon Elastic File System (EFS) is recommended for hosting shared files for application servers.

Obtaining Windows Local Administrator Password

• The Windows local administrator password can be obtained using the key pair to decrypt the password.

Hybrid Solution

• AWS Outposts enables a hybrid solution by extending AWS Infrastructure to host EC2 and EBS services in on-premise data centers.

Dynamic Compute Services

• AWS Batch dynamically provisions compute services that scale based on the volume and resource requirements of submitted jobs.

Containerized Applications

• Amazon EKS (Elastic Container Service for Kubernetes) helps deploy, manage, and scale containerized applications using Kubernetes on AWS.

Advantages of Amazon RDS

• Amazon RDS is a fully managed database where AWS manages the underlying compute and storage architecture, as well as patching and updates.

Database Failover Capabilities

• Multi-AZ enables failover capabilities if the master copy fails.

Database Migration

• Amazon Database Migration Service (DMS) enables migration of on-premises MySQL databases to Amazon RDS.

SQL Queries

• Redshift Spectrum allows performing SQL queries against data stored directly on Amazon S3 buckets.

Database Resilience

• Amazon Aurora offers high resilience with copies of the database placed across a minimum of three Availability Zones.

Database Service

• Amazon DynamoDB is a database service that enables storing data using complex structures with options for nested attributes.

Immutable Data

• Amazon QLDB (Quantum Ledger Database) is designed to store sensitive data that is immutable and where the transactional logs are cryptographically verifiable.

In-Memory Caching

• Amazon Elasticache for Redis offers Multi-AZ capabilities, encryption of data, and compliance with HIPAA.

Data Warehousing

• Amazon Redshift is a fully managed data warehousing capability that enables analyzing large datasets using standard SQL and Business Intelligence (BI) tools.

Cost Optimization

• Auto Scaling helps provision only the necessary number of EC2 instances required to meet application demand, thus saving on costs.

Elastic Load Balancer

• Network Load Balancer is suitable for Transmission Control Protocol (TCP), User Datagram Protocol (UDP), and Transport Layer Security (TLS) type traffic.

Firewall Protection

• AWS WAF (Web Application Firewall) offers firewall protection to help protect against common web exploits.

Dynamic Scaling Policy

• Target tracking scaling policy helps launch or terminate EC2 instances in the fleet based on the target value of a specific metric.

Alert Notification

• Amazon SNS (Simple Notification Service) is used to send out alert notifications.

Decoupling Application Components

• Amazon SNS enables decoupling application components into distributed systems.

Message Broker Service

• Amazon MQ ( Message Queue) enables continuing to use Apache ActiveMQ and facilitating communications between application components.

Workflow Process

• Amazon Step Functions helps architect the workflow process for applications that require human intervention.

Streaming Data

• Amazon Kinesis Data Streams is used to analyze stream data in real-time.

Querying Raw Data

• Amazon Athena is used to query raw data in Amazon S3 using standard SQL.

Loading Streaming Data

• Amazon Kinesis Firehose is used to load a massive amount of streaming data into Amazon Redshift.

Interactive BI Dashboards

• Amazon QuickSight helps create and publish interactive BI dashboards.

ETL Solution

• Amazon Glue is a serverless Extract, Transform, and Load (ETL) solution.

Orchestrate Infrastructure

• AWS CloudFormation helps automate the infrastructure build of the test environment.

Automate Start/Stop EC2 Instances

• Amazon CloudWatch Events is used to automate the start and stop of EC2 instances according to a specified schedule.

Custom CloudWatch Metrics

• YAML and JSON are formats used to write CloudFormation templates.

CloudWatch Features

• Alarms, Dashboards, Logs, and Events are features of CloudWatch.

Monitoring Network Traffic

• VPC Flow Logs are used to record inbound network traffic on port 80.

Auditing Purposes

• AWS CloudTrail is used to track user activity and API usage in the AWS account for auditing purposes.

Resource Management

• AWS Config helps see how resources are interrelated, configured in the past, and view historical changes to those resources over time.

Security Patches

• AWS Systems Manager (SSM) Patch Manager is used to roll out security patches across EC2 instances and on-premises servers.

Secret Management

• AWS Systems Manager (SSM) Parameter Store is used to manage secrets information more securely.### AWS Services
• AWS Systems Manager Incident Manager: used to manage and resolve incidents that affect AWS-hosted applications.
• AWS Trusted Advisor: used to identify resources that have not been configured by following security best practices.
• AWS Personal Health Dashboard (PHD): used to provide a personalized view of AWS service health and performance.

Well-Architected Framework

• Cost Optimization: suggests that selecting the appropriate pricing options allowing consumption models for provisioning resources.
• Fault Tolerance: suggests that replacing failed resources is often better than trying to figure out why the failure occurred.
• Reliability: ensures that the workload performs its intended function correctly and consistently when it's expected to.

Security and Identity

• AWS KMS: provides a secure way to create, manage, and use cryptographic keys.
• AWS CloudHSM: provides a secure way to create, manage, and use cryptographic keys.
• AWS Shield: offers protection against DDoS attacks and features an AWS Shield Response Team (SRT) 24/7 to assist in handling such attacks.
• AWS WAF: integrates with Amazon CloudFront and ALBs to offer protection against common web exploits.

Storage and Analytics

• Amazon S3: provides object storage and offers various storage classes, such as Standard, Standard-IA, and Glacier.
• Amazon Macie: helps to monitor data access, particularly highlighting sensitive information such as personally identifiable information (PII).
• Amazon Redshift: offers text search and analytics capabilities that can store, analyze, and perform search functions against big data volumes in near real-time.

Compute and Networking

• AWS EC2: provides virtual servers and offers various pricing models, such as On-Demand, Reserved Instances, and Spot Instances.
• AWS CloudFront: provides a content delivery network (CDN) that can be used to cache content at edge locations.
• AWS Route 53: provides a DNS service that can be used to register domain names and route internet traffic.

Migration and Hybrid Cloud

• AWS Migration Evaluator: enables you to capture millions of real-time data points related to your IT environment and review recommendations for right sizing and costing workloads on AWS.
• AWS Hybrid Cloud: offers several services to build hybrid clouds, such as VPN technologies, Direct Connect, and AWS Outposts.

Other AWS Services

• AWS Cognito: provides identity and access management solutions for web and mobile applications.
• AWS Detective: helps to determine the root cause of security issues by extracting time-based events.
• AWS GuardDuty: analyzes data from CloudTrail event logs, Amazon VPC Flow Logs, and DNS logs to detect malicious activities.
• AWS X-Ray: provides a service map that shows the dependencies between components in a distributed application.

Assess your knowledge of cloud computing concepts and identify areas for improvement with this mock test. Review the chapters that cover the concepts examined in each question to fill knowledge gaps and get a high score on the official exam.