Cloud Computing Models

• A community cloud is suited for government agencies collaborating while maintaining data privacy.

Public Cloud

• A primary advantage is cost-effective scalability without large upfront investments.

Cloud Computing Characteristic

• Rapid elasticity is most relevant for a growing company needing to rapidly scale infrastructure to meet customer demands.

Cloud Computing Service Model

• Software as a Service (SaaS) provides the least amount of management and control for the end-user.
• A financial institution requiring strict control over customer data and regulatory compliance is best suited for a private cloud.
• An organization migrating its on-premise data center to the cloud, while maintaining control over virtual machines, networks, and storage, should use IaaS because of the ability to manage scalability and security of virtual resources.
• A startup building an IoT platform needing high availability and flexible infrastructure for large data amounts should use PaaS so the startup can develop, deploy, and scale applications without managing the infrastructure.

Hybrid Cloud Implementation

• A significant challenge is complex integration
• Cloud management platforms can mitigate it through seamless operation.

Community Cloud

• A benefit includes the cost-sharing among participating organizations.

Amazon EC2 Instance

• To swiftly divert traffic to a standby EC2 instance if the primary instance fails, attach a secondary elastic network interface to the EC2 instance configured with the private IP address and move the network interface to the standby EC2 instance if the primary EC2 instance becomes unreachable.

AWS Transit Gateway

• It connects multiple VPCs and on-premises networks.
• Connections can be established via VPN and Direct Connect attachments.
• AWS Transit Gateway simplifies network architecture.

SaaS vs IaaS and PaaS

• SaaS delivers ready-to-use applications without user management.

SaaS for Patient Data Management

• A major concern for healthcare organizations adopting SaaS, is data privacy and regulatory compliance
• This can be mitigated by choosing a SaaS provider offering data encryption and regional data centers.
• A key consideration during data transfer in the cloud is securing data in transit using encryption.

Two-Tier Application Architecture

• To improve high availability you should create an Amazon EC2 Auto Scaling group and an Application Load Balancer that spans multiple AZs.

Website & Web Application Spike

• Mitigate website timeout issue using the Amazon EC2 Auto Scaling groups to set up an EC2 instance warming condition using an Auto Scaling step scaling strategy.

Software as a Service (SaaS)

• The lowest Total Cost of Ownership (TCO) with a Software as a Service (SaaS) offering is an email and collaboration suite for their employees, who are willing to adapt their processes to the features provided by the cloud service.

Cloud Computing Service Model

• The cloud computing service model that best suits requirements for collaboration, productivity, ease of use, and minimal maintenance is SaaS.

CloudFront

• An Edge Location is a server where content is cached closer to users.

AWS Services Combination

• The best combination of AWS services is:
  • Amazon EC2 instances for the game server
  • Amazon EFS for shared storage of game assets
  • Amazon EC2 Auto Scaling for adjusting the number of instances

laaS Model

• The aspect of infrastructure not directly managed by the customer is physical servers and network hardware.

Financial Institutions Compliance

• To comply with data residency laws and maintaining scalability, implement a hybrid cloud model to keep sensitive data on-premise while using IaaS for scaling.

AWS VPC

• A Route Table helps control traffic flow between subnets and the internet.
• A public subnet has direct internet access, while a private subnet does not.

Pricing Models

• On-Demand Instances are best for applications with unpredictable workloads requiring flexibility in instance usage.

Amazon EC2 & Operating systems

• It can run Windows Server and Linux distributions (Ubuntu, Amazon Linux, Red Hat, etc.), macOS, and all.

Mobile App Development Companies

• Should choose PaaS, for a fully managed environment for application backend that handles deploying, managing, and scaling their backend services without worrying about infrastructure management.

AWS Transit Gateway

• Improving EC2 instance performance is not a valid use case.
• It improves security because it allows centralized monitoring and security control.

Log File Data Storage

• To store for 2 years the AWS service with the lowest possible cost is Amazon S3 Glacier.

TCP-based Application

• To transfer a TCP-based application, deploy an Application Load Balancer (ALB) which is publicly accessible over the TCP port that the application requires.

Financial Organization

• To maintain control over sensitive data while leveraging cloud benefits, the cloud deployment model to consider is a private cloud.

HTTPS Traffic

• The Elastic Load Balancer best suited for routing HTTP and HTTPS traffic at the application layer is Application Load Balancer (ALB).

AWS

• Amazon Route 53 reduces latency by routing traffic to the nearest load balancer using geographic locations.
• AWS CloudFront caches content in Edge locations which are located in multiple locations.

Route 53

• Load Balancing routing is not a routing policy.

Data Destruction Phase

• When deleting outdated customer information to comply with privacy regulations, securely erasing data across distributed environments should be addressed during the data destruction phase.

Amazon Aurora

• Performance is improved over traditional relational databases, because it automatically scales storage and compute independently.

CloudFront Storage

• AWS service commonly used to store static content is Amazon S3 (simple storage service).

Start up Deployments

• For fast global deployment without investing in physical hardware the Public Cloud model is the most suitable.

On-Premises Email Services

• To migrate on-premises email service while reducing costs use Software as a Service (SaaS).

Amazon EC2 Instance

• If EC2 instance data stored in instance memory must be there when instances resume suggest snapshotting the EC2 instances before stopping them, then restore the snapshot after restart.
• An e-commerce company using public cloud for traffic surges and private cloud for customer payments describes a hybrid cloud.

Global E-Commerce Company

• Challenge of Vendor lock-in
• Mitigation is multi-cloud or hybrid strategies.

Web Application Service Model

• The cloud computing service model that has full control for customization is Infrastructure as a Service (IaaS).

Security Group

• The default Security Group allows all outbound traffic and blocks all inbound traffic.
• A public subnet needs internet access, while a private subnet will not.

Amazon EBS vs Amazon S3

• Amazon EBS (Elastic Block Storage) provides persistent block storage for EC2, whereas Amazon S3 (Simple Storage Service) is an object storage service.

Amazon EBS Volumes

• When you delete that is not attached to any EC2 instance, the volume is deleted immediately, and data cannot be recovered.

PaaS vs IaaS

• A key advantage of using PaaS over IaaS is the reduced need to manage operating systems and middleware.

PaaS

• Developers choose PaaS because it provides pre-built environments to focus on coding.

AWS Storage Service

• The AWS storage service most suitable to store and distribute large video content where cost-effective long-term storage and low-latency access for content delivery is needed is Amazon S3.

Amazon EBS Volume

• Provisioned IOPS SSD (io2) provides the highest IOPS performance.

Amazon S3

• The default durability of objects stored is 99.999999999% (11 nines).

Amazon RDS

• Multi-AZ Deployment allows automatic failover between database instances.

DynamoDB

• Manages high availability by replicating data across multiple Availability Zones.

Amazon EC2 Instances

• Deploying On-Demand Instances during periods of high demand achieves this cost efficiently.

AWS Site-to-Site VPN

• The main purpose is to provide secure communication between on-premises and AWS VPC.

AWS Transit Gateway

• Provides a scalable alternative to VPN for connecting on-premises networks ( Direct Connect ).

Corporate Downtime

• The Amazon EC2 Autoscaling would dynamically adjusts resources to meet the change in demand.

CIDR

• 10.0.0.0/16 range is commonly used for private subnets.

Public Cloud Risk

• Vendor Lock-in is most associated with the Public Cloud.
• It can be mitigated by adopting open standards and multi-cloud strategies.

Private Cloud

• Enhanced data security and customization is a primary benefit.

Best Balance startup

• IaaS (Infrastructure as a Service) offers the best of both management and control.

PaaS

• Best suited for scenarios where the marketing department needs to build, deploy, and scale a web application without worrying about the underlying infrastructure or middleware management.

Private Cloud

• High Upfront Costs is a significant challenge, and can be addressed by security concerns.

Hybrid Cloud

• A key advantage over a Public Cloud is greater data control while still offering scalability.

Community Cloud

• A major challenge is data privacy, which can be solved by enforcing strict access controls and data encryption.

Amazon CloudFront

• An edge location improves the data transfer rate and reduced the latency for global clients.

Deploy Amazon EC2 Instance

• A software development company can develop and deploy applications without managing the underlying infrastructure or middleware (PaaS).

New security group

• By default, creates no traffic in or out.

Security Groups Assigned

• Security Groups modified effect all in the group immediately. AWS Transit Gateway.
• Simplifies Network Architecture is a key benefit.

Website with Spikes

• A solution architect should configure an Auto Scaling step scaling policy with an EC2 instance warmup condition.

BGP

• It is used through AWS Transit Gateway.

Shopping Holidays

• You can configure dynamically adjust resources to meet the change in demand using AMAZON EC2 Autoscaling during shopping holidays.

Static Website

• To serve the static website globally configure CloudFront to deliver the content in the S3 bucket.

Snapshot

• To operate for a period with EC2 Instance, snapshot the EC2 instances before stopping them and restore them after.

Firm operating in public & private subnets

• To make this architecture highly available for the web application instances, create an Amazon EC2 Auto Scaling group and an Application Load Balancer that spans multiple AZs.

AMI

• To add a software stack you must create an AMI.

Cloud Computing

• PaaS offers development and deployment, while eliminating infrastructure management.