12.8 Whizlabs - Practice Test VI

1. There is no cost when data is transferred from EC2 to S3 if they are in the same Region.

2. In VPC, by default, all subnets can route between each other, whether they are private or public.

3. When you are creating a CIDR block, the least allowable is /28.

4. When you launch the VPC wizard, you will get the below options:

   1. VPC with a single public subnet

   2. VPC with public and private subnet

   3. VPC with public and private subnets and hardware VPN access

   4. VPC with a private subnet only and hardware VPN access

5. Shared Responsibility Model

6. When you have instances that will be used continuously and throughout the year, the best option is to buy reserved instances.

7. Penetration testing of EC2 instances may be performed by the customers, but customers need to take prior authorization from AWS before doing that.

8. To secure your data at-rest on EBS volumes:

   1. encrypt the volume when it is being created

   2. encrypt the data after the volume is created (use an encrypted file system on top of the EBS volume)

9. If you want to launch EC2 instances and assign each instance a private IP address in a predetermined range, you should to launch the instances in the VPC.

10. AWS Directory Services are used to authenticate to an existing on-premises Active Directory through VPN connections, and AWS WorkSpaces service is used for Virtual Desktop.

11. User login to your AWS:

    1. When you create a user, you need to download the Access Key ID & Secret Access Key so that the user can make API calls.

    2. Create a password for a user to allow the user to log in AWS console through a sign-in URL which includes your Account ID/Alias name.

12. AWS doesn't want you to waste the static public IP addresses. You will be charged for Elastic IP (EIP) in these 2 scenarios:

    1. If EIP is create but not allocated to any instance

    2. If EIP is attached to a stopped instance.

    Attaching an EIP to an instance through 3 steps:

    1. From EC2 service, click Elastic IPs

    2. Click Allocate New Address to allocate a new IP to your account

    3. Select the address and click Actions -> Associate Address to assign it to an instance.

13. EBS only instance types:

    1. General-purpose T2, M5, M4

    2. Compute-optimized C4, C5

    3. Accelerated-computing P3, P2, G3

14. It is easier to remember which instance types are not EBS only: M3, C3, I3, D2, R2. For virtualization types: M3, C3 can be HVM or PV, and all other instance types can only be HVM.

15. Resources that are created in AWS are identified by a unique identifier which is known as Amazon Resource Name (ARN).

16. If you are using Route53 for a static web site hosted in S3, the S3 bucket name must be the same as the domain/subdomain name. For example, if you want to use the subdomain acme.example.com, the name of the bucket must be acme.example.com

17. Some of benefits of CloudFormation:

    1. Version control your infrastructure

    2. A great Disaster Recovery option (based on the new whitepaper: using AWS for DR)

18. You can use AWS Systems Manager -> Run Command to administer instances without the need to SSH or RDP into the instance.

19. If you want to extend your on-premise infrastructure with AWS, you can use VPN connection or Direct Connection.

    1. 

20. Pilot Light is the term which is used to describe a DR scenario in which a minimal version of an environment is always running in the cloud.

21. Minimum size of object you can upload to S3 is 0 bytes. Maximum size is 5 TB.