AWS Cloud Fundamentals Practice Exam

Question 1 AWS Cloud Fundamentals

What is Elastic Load Balancing (ELB)?

Amazon Elastic Compute Cloud (EC2) provides resizable virtual servers (instances) in the cloud for running applications with choice of OS, CPU, memory, storage, and networking. Types include Application Load Balancer (ALB) for HTTP/HTTPS, Network Load Balancer (NLB) for TCP/UDP/TLS, and Gateway Load Balancer (GWLB) for virtual appliances. CloudTrail records API calls and account activity for auditing, compliance, governance, and troubleshooting across AWS services. ELB automatically distributes incoming application traffic across multiple targets like EC2 instances for high availability and fault tolerance.

Question 2 AWS Cloud Fundamentals

What is an IAM Policy?

Grant only the permissions necessary for a user or role to perform their tasks, minimizing security risks from over-privileged access. Auto Scaling automatically adjusts EC2 capacity based on demand, using scaling policies tied to CloudWatch metrics for cost optimization. An IAM Policy is a JSON document defining permissions (allow/deny) for actions on AWS resources, attached to users, groups, or roles. It includes Regions (54+), Availability Zones (170+), and Edge Locations (400+ globally), enabling low-latency access, data residency, and disaster recovery.

Question 3 AWS Cloud Fundamentals

What is Amazon SQS?

Amazon EFS provides scalable, shared file storage for EC2 instances with NFS protocol, accessible across AZs. Support plans include Basic (free), Developer, Business, and Enterprise with varying response times, TAMs, and proactive services. Simple Queue Service (SQS) is a fully managed message queuing service decoupling microservices, workflows, and distributed systems. Relational Database Service (RDS) manages relational databases like MySQL, PostgreSQL, with automated backups, patching, and Multi-AZ for HA.

Question 4 AWS Cloud Fundamentals

What is an Availability Zone (AZ)?

Cloud computing is the on-demand delivery of IT resources over the internet with pay-as-you-go pricing, instead of buying, owning, and maintaining physical data centers and servers. ElastiCache is an in-memory data store supporting Redis or Memcached for caching to improve database performance and reduce load. An Availability Zone is an isolated location within a Region, comprising one or more data centers with redundant power, networking, and connectivity, designed for high availability. Elastic Container Service (ECS) manages Docker containers at scale, supporting Fargate (serverless) or EC2 launch types for orchestration.

Question 5 AWS Cloud Fundamentals

What is serverless computing?

Serverless lets developers build and run applications without managing infrastructure; AWS handles scaling, patching, and availability automatically. Types include Application Load Balancer (ALB) for HTTP/HTTPS, Network Load Balancer (NLB) for TCP/UDP/TLS, and Gateway Load Balancer (GWLB) for virtual appliances. An Availability Zone is an isolated location within a Region, comprising one or more data centers with redundant power, networking, and connectivity, designed for high availability. An Internet Gateway connects your VPC to the internet, enabling public subnets to communicate outbound and receive inbound traffic.

Question 6 AWS Cloud Fundamentals

What is AWS Lambda?

An AWS Account is a unique identifier for billing and resource management; multiple accounts can be organized under AWS Organizations for governance. An AMI is a template for launching EC2 instances, containing OS, application server, and data needed to create a ready-to-run instance. AWS Lambda is a serverless compute service running code in response to events without provisioning or managing servers, charged per use. Network Address Translation (NAT Gateway) allows private subnet instances to access the internet for updates while preventing inbound connections for security.

Question 7 AWS Cloud Fundamentals

What are AWS Pricing Models?

Models include On-Demand (pay per hour), Reserved Instances (discount for commitment), Savings Plans (flexible reservations), and Spot Instances (bid for spare capacity). Instance types categorize EC2 instances by compute, memory, and networking capacity, such as General Purpose (M5), Compute Optimized (C5), Memory Optimized (R5). Support plans include Basic (free), Developer, Business, and Enterprise with varying response times, TAMs, and proactive services. AWS provides benefits like agility, scalability, elasticity, global reach, pay-as-you-go pricing, security, and high reliability through its global infrastructure.

Question 8 AWS Cloud Fundamentals

What are the main benefits of using AWS cloud?

AWS Shield provides DDoS protection; Standard is automatic and free, Advanced offers enhanced mitigation with support. AWS is responsible for the security 'of' the cloud (infrastructure, hardware, software), while customers are responsible for security 'in' the cloud (data, OS, applications, IAM). It includes Regions (54+), Availability Zones (170+), and Edge Locations (400+ globally), enabling low-latency access, data residency, and disaster recovery. AWS provides benefits like agility, scalability, elasticity, global reach, pay-as-you-go pricing, security, and high reliability through its global infrastructure.

Question 9 AWS Cloud Fundamentals

What is Elastic File System (EFS)?

CloudWatch monitors AWS resources and applications, collecting metrics, logs, and events with alarms, dashboards, and automated actions. AWS Lambda is a serverless compute service running code in response to events without provisioning or managing servers, charged per use. Amazon EFS provides scalable, shared file storage for EC2 instances with NFS protocol, accessible across AZs. ELB automatically distributes incoming application traffic across multiple targets like EC2 instances for high availability and fault tolerance.

Question 10 AWS Cloud Fundamentals

What is AWS CloudTrail?

AWS is responsible for the security 'of' the cloud (infrastructure, hardware, software), while customers are responsible for security 'in' the cloud (data, OS, applications, IAM). Amazon Web Services (AWS) is a comprehensive, secure, and scalable cloud computing platform provided by Amazon, offering over 200 fully featured services from data centers globally. Network Address Translation (NAT Gateway) allows private subnet instances to access the internet for updates while preventing inbound connections for security. CloudTrail records API calls and account activity for auditing, compliance, governance, and troubleshooting across AWS services.

Question 11 AWS Cloud Fundamentals

What is AWS KMS?

Key Management Service (KMS) creates and manages cryptographic keys for encrypting data across AWS services. Free Tier offers limited free usage of 100+ services for 12 months or always-free, ideal for learning and prototyping. An IAM Role is a temporary identity assumed by users, services, or applications to gain permissions without long-term credentials. Amazon Web Services (AWS) is a comprehensive, secure, and scalable cloud computing platform provided by Amazon, offering over 200 fully featured services from data centers globally.

Question 12 AWS Cloud Fundamentals

What are the types of ELB?

AWS is responsible for the security 'of' the cloud (infrastructure, hardware, software), while customers are responsible for security 'in' the cloud (data, OS, applications, IAM). Simple Notification Service (SNS) is a pub/sub messaging service sending notifications via email, SMS, HTTP, or other protocols. Types include Application Load Balancer (ALB) for HTTP/HTTPS, Network Load Balancer (NLB) for TCP/UDP/TLS, and Gateway Load Balancer (GWLB) for virtual appliances. Auto Scaling automatically adjusts EC2 capacity based on demand, using scaling policies tied to CloudWatch metrics for cost optimization.

Question 13 AWS Cloud Fundamentals

What is AWS Auto Scaling?

Auto Scaling automatically adjusts EC2 capacity based on demand, using scaling policies tied to CloudWatch metrics for cost optimization. ELB automatically distributes incoming application traffic across multiple targets like EC2 instances for high availability and fault tolerance. Web Application Firewall (WAF) protects web apps from exploits like SQL injection and XSS using rules and rate limiting. IAM is a service for securely controlling access to AWS resources by creating users, groups, roles, and policies defining permissions.

Question 14 AWS Cloud Fundamentals

What are S3 Storage Classes?

Grant only the permissions necessary for a user or role to perform their tasks, minimizing security risks from over-privileged access. Amazon Elastic Compute Cloud (EC2) provides resizable virtual servers (instances) in the cloud for running applications with choice of OS, CPU, memory, storage, and networking. Classes include S3 Standard (frequent access), Intelligent-Tiering (automatic), Glacier (archival), and One Zone-IA (infrequent single AZ), optimized for cost and access patterns. Key Management Service (KMS) creates and manages cryptographic keys for encrypting data across AWS services.

Question 15 AWS Cloud Fundamentals

What is an IAM Role?

Amazon EBS provides block-level storage volumes for EC2 instances, offering persistent, high-performance storage with snapshots for backups. A Subnet is a range of IP addresses in your VPC divided across Availability Zones for resource placement, with public or private types. An AWS Region is a geographic area consisting of multiple isolated Availability Zones, each with independent power, cooling, and networking to enhance fault tolerance. An IAM Role is a temporary identity assumed by users, services, or applications to gain permissions without long-term credentials.

Question 16 AWS Cloud Fundamentals

What is Amazon DynamoDB?

AWS is responsible for the security 'of' the cloud (infrastructure, hardware, software), while customers are responsible for security 'in' the cloud (data, OS, applications, IAM). AWS Shield provides DDoS protection; Standard is automatic and free, Advanced offers enhanced mitigation with support. An AWS Account is a unique identifier for billing and resource management; multiple accounts can be organized under AWS Organizations for governance. DynamoDB is a fully managed NoSQL database offering single-digit millisecond latency, infinite scalability, and global tables for multi-region replication.

Question 17 AWS Cloud Fundamentals

What is AWS CloudWatch?

ElastiCache is an in-memory data store supporting Redis or Memcached for caching to improve database performance and reduce load. CloudWatch monitors AWS resources and applications, collecting metrics, logs, and events with alarms, dashboards, and automated actions. Simple Notification Service (SNS) is a pub/sub messaging service sending notifications via email, SMS, HTTP, or other protocols. Simple Queue Service (SQS) is a fully managed message queuing service decoupling microservices, workflows, and distributed systems.

Question 18 AWS Cloud Fundamentals

What is an AWS Account?

Models include On-Demand (pay per hour), Reserved Instances (discount for commitment), Savings Plans (flexible reservations), and Spot Instances (bid for spare capacity). Key Management Service (KMS) creates and manages cryptographic keys for encrypting data across AWS services. An Availability Zone is an isolated location within a Region, comprising one or more data centers with redundant power, networking, and connectivity, designed for high availability. An AWS Account is a unique identifier for billing and resource management; multiple accounts can be organized under AWS Organizations for governance.

Question 19 AWS Cloud Fundamentals

What is the principle of least privilege in IAM?

It provides best practices across 6 pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability. An AWS Region is a geographic area consisting of multiple isolated Availability Zones, each with independent power, cooling, and networking to enhance fault tolerance. Network Address Translation (NAT Gateway) allows private subnet instances to access the internet for updates while preventing inbound connections for security. Grant only the permissions necessary for a user or role to perform their tasks, minimizing security risks from over-privileged access.

Question 20 AWS Cloud Fundamentals

What is Amazon EKS?

An AWS Region is a geographic area consisting of multiple isolated Availability Zones, each with independent power, cooling, and networking to enhance fault tolerance. An IAM Policy is a JSON document defining permissions (allow/deny) for actions on AWS resources, attached to users, groups, or roles. CloudFront is a content delivery network (CDN) that speeds up distribution of static/dynamic web content by caching at Edge Locations globally. Elastic Kubernetes Service (EKS) runs Kubernetes clusters managed by AWS, simplifying operations with integration to VPC, IAM, and CloudWatch.

Question 21 AWS Cloud Fundamentals

What is AWS Shield?

Cost Explorer analyzes and visualizes AWS costs/trends with forecasts, recommendations, and RI purchase analysis for optimization. ELB automatically distributes incoming application traffic across multiple targets like EC2 instances for high availability and fault tolerance. AWS Shield provides DDoS protection; Standard is automatic and free, Advanced offers enhanced mitigation with support. AWS Lambda is a serverless compute service running code in response to events without provisioning or managing servers, charged per use.

Question 22 AWS Cloud Fundamentals

What is AWS Identity and Access Management (IAM)?

An AWS Account is a unique identifier for billing and resource management; multiple accounts can be organized under AWS Organizations for governance. IAM is a service for securely controlling access to AWS resources by creating users, groups, roles, and policies defining permissions. DynamoDB is a fully managed NoSQL database offering single-digit millisecond latency, infinite scalability, and global tables for multi-region replication. Elastic Kubernetes Service (EKS) runs Kubernetes clusters managed by AWS, simplifying operations with integration to VPC, IAM, and CloudWatch.

Question 23 AWS Cloud Fundamentals

What is a NAT Gateway?

Network Address Translation (NAT Gateway) allows private subnet instances to access the internet for updates while preventing inbound connections for security. An Internet Gateway connects your VPC to the internet, enabling public subnets to communicate outbound and receive inbound traffic. Grant only the permissions necessary for a user or role to perform their tasks, minimizing security risks from over-privileged access. Amazon Web Services (AWS) is a comprehensive, secure, and scalable cloud computing platform provided by Amazon, offering over 200 fully featured services from data centers globally.

Question 24 AWS Cloud Fundamentals

What is Amazon SNS?

Models include On-Demand (pay per hour), Reserved Instances (discount for commitment), Savings Plans (flexible reservations), and Spot Instances (bid for spare capacity). Amazon EBS provides block-level storage volumes for EC2 instances, offering persistent, high-performance storage with snapshots for backups. Cloud computing is the on-demand delivery of IT resources over the internet with pay-as-you-go pricing, instead of buying, owning, and maintaining physical data centers and servers. Simple Notification Service (SNS) is a pub/sub messaging service sending notifications via email, SMS, HTTP, or other protocols.

Question 25 AWS Cloud Fundamentals

What is AWS Support?

AWS provides benefits like agility, scalability, elasticity, global reach, pay-as-you-go pricing, security, and high reliability through its global infrastructure. ELB automatically distributes incoming application traffic across multiple targets like EC2 instances for high availability and fault tolerance. Support plans include Basic (free), Developer, Business, and Enterprise with varying response times, TAMs, and proactive services. Amazon Simple Storage Service (S3) is object storage for internet-scale data with 99.999999999% durability, unlimited scalability, and features like versioning and lifecycle policies.

Question 26 AWS Cloud Fundamentals

What is Amazon ECS?

An IAM Policy is a JSON document defining permissions (allow/deny) for actions on AWS resources, attached to users, groups, or roles. Elastic Container Service (ECS) manages Docker containers at scale, supporting Fargate (serverless) or EC2 launch types for orchestration. It provides best practices across 6 pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability. An IAM Role is a temporary identity assumed by users, services, or applications to gain permissions without long-term credentials.

Question 27 AWS Cloud Fundamentals

What is Amazon Machine Image (AMI)?

Network Address Translation (NAT Gateway) allows private subnet instances to access the internet for updates while preventing inbound connections for security. An AMI is a template for launching EC2 instances, containing OS, application server, and data needed to create a ready-to-run instance. CloudFront is a content delivery network (CDN) that speeds up distribution of static/dynamic web content by caching at Edge Locations globally. Models include On-Demand (pay per hour), Reserved Instances (discount for commitment), Savings Plans (flexible reservations), and Spot Instances (bid for spare capacity).

Question 28 AWS Cloud Fundamentals

What is an IAM User?

Elastic Container Service (ECS) manages Docker containers at scale, supporting Fargate (serverless) or EC2 launch types for orchestration. An IAM Policy is a JSON document defining permissions (allow/deny) for actions on AWS resources, attached to users, groups, or roles. An AMI is a template for launching EC2 instances, containing OS, application server, and data needed to create a ready-to-run instance. An IAM User is an identity for a person or application needing long-term access to AWS services, associated with credentials like access keys.

Question 29 AWS Cloud Fundamentals

What is cloud computing?

Cloud computing is the on-demand delivery of IT resources over the internet with pay-as-you-go pricing, instead of buying, owning, and maintaining physical data centers and servers. An IAM User is an identity for a person or application needing long-term access to AWS services, associated with credentials like access keys. CloudWatch monitors AWS resources and applications, collecting metrics, logs, and events with alarms, dashboards, and automated actions. Virtual Private Cloud (VPC) lets you provision a logically isolated network section in AWS where you launch resources with control over IP ranges, subnets, routing, and gateways.

Question 30 AWS Cloud Fundamentals

What is the AWS Shared Responsibility Model?

Auto Scaling automatically adjusts EC2 capacity based on demand, using scaling policies tied to CloudWatch metrics for cost optimization. AWS is responsible for the security 'of' the cloud (infrastructure, hardware, software), while customers are responsible for security 'in' the cloud (data, OS, applications, IAM). Relational Database Service (RDS) manages relational databases like MySQL, PostgreSQL, with automated backups, patching, and Multi-AZ for HA. An Availability Zone is an isolated location within a Region, comprising one or more data centers with redundant power, networking, and connectivity, designed for high availability.

Question 31 AWS Cloud Fundamentals

What is an AWS Region?

Route 53 is a scalable DNS web service providing domain registration, health checks, and traffic routing policies like latency-based or geolocation. Support plans include Basic (free), Developer, Business, and Enterprise with varying response times, TAMs, and proactive services. An AWS Region is a geographic area consisting of multiple isolated Availability Zones, each with independent power, cooling, and networking to enhance fault tolerance. Web Application Firewall (WAF) protects web apps from exploits like SQL injection and XSS using rules and rate limiting.

Question 32 AWS Cloud Fundamentals

What is Amazon Route 53?

Elastic Kubernetes Service (EKS) runs Kubernetes clusters managed by AWS, simplifying operations with integration to VPC, IAM, and CloudWatch. An IAM Role is a temporary identity assumed by users, services, or applications to gain permissions without long-term credentials. Free Tier offers limited free usage of 100+ services for 12 months or always-free, ideal for learning and prototyping. Route 53 is a scalable DNS web service providing domain registration, health checks, and traffic routing policies like latency-based or geolocation.

Question 33 AWS Cloud Fundamentals

What is AWS Organizations?

ELB automatically distributes incoming application traffic across multiple targets like EC2 instances for high availability and fault tolerance. AWS Organizations helps centrally manage policies across multiple AWS accounts with features like consolidated billing, service control policies (SCPs), and account grouping. Free Tier offers limited free usage of 100+ services for 12 months or always-free, ideal for learning and prototyping. Relational Database Service (RDS) manages relational databases like MySQL, PostgreSQL, with automated backups, patching, and Multi-AZ for HA.

Question 34 AWS Cloud Fundamentals

What is the AWS Global Infrastructure?

Classes include S3 Standard (frequent access), Intelligent-Tiering (automatic), Glacier (archival), and One Zone-IA (infrequent single AZ), optimized for cost and access patterns. AWS Organizations helps centrally manage policies across multiple AWS accounts with features like consolidated billing, service control policies (SCPs), and account grouping. Cost Explorer analyzes and visualizes AWS costs/trends with forecasts, recommendations, and RI purchase analysis for optimization. It includes Regions (54+), Availability Zones (170+), and Edge Locations (400+ globally), enabling low-latency access, data residency, and disaster recovery.

Question 35 AWS Cloud Fundamentals

What is Amazon CloudFront?

Route 53 is a scalable DNS web service providing domain registration, health checks, and traffic routing policies like latency-based or geolocation. An IAM User is an identity for a person or application needing long-term access to AWS services, associated with credentials like access keys. CloudFront is a content delivery network (CDN) that speeds up distribution of static/dynamic web content by caching at Edge Locations globally. An Internet Gateway connects your VPC to the internet, enabling public subnets to communicate outbound and receive inbound traffic.

Question 36 AWS Cloud Fundamentals

What is an Internet Gateway (IGW)?

Simple Queue Service (SQS) is a fully managed message queuing service decoupling microservices, workflows, and distributed systems. An Internet Gateway connects your VPC to the internet, enabling public subnets to communicate outbound and receive inbound traffic. An AWS Region is a geographic area consisting of multiple isolated Availability Zones, each with independent power, cooling, and networking to enhance fault tolerance. An IAM User is an identity for a person or application needing long-term access to AWS services, associated with credentials like access keys.

Question 37 AWS Cloud Fundamentals

What is Amazon S3?

Amazon Simple Storage Service (S3) is object storage for internet-scale data with 99.999999999% durability, unlimited scalability, and features like versioning and lifecycle policies. An IAM Role is a temporary identity assumed by users, services, or applications to gain permissions without long-term credentials. Relational Database Service (RDS) manages relational databases like MySQL, PostgreSQL, with automated backups, patching, and Multi-AZ for HA. Web Application Firewall (WAF) protects web apps from exploits like SQL injection and XSS using rules and rate limiting.

Question 38 AWS Cloud Fundamentals

What is the AWS Well-Architected Framework?

Cloud computing is the on-demand delivery of IT resources over the internet with pay-as-you-go pricing, instead of buying, owning, and maintaining physical data centers and servers. It provides best practices across 6 pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability. CloudTrail records API calls and account activity for auditing, compliance, governance, and troubleshooting across AWS services. Free Tier offers limited free usage of 100+ services for 12 months or always-free, ideal for learning and prototyping.

Question 39 AWS Cloud Fundamentals

What are EC2 Instance Types?

Instance types categorize EC2 instances by compute, memory, and networking capacity, such as General Purpose (M5), Compute Optimized (C5), Memory Optimized (R5). AWS Organizations helps centrally manage policies across multiple AWS accounts with features like consolidated billing, service control policies (SCPs), and account grouping. An AMI is a template for launching EC2 instances, containing OS, application server, and data needed to create a ready-to-run instance. Cloud computing is the on-demand delivery of IT resources over the internet with pay-as-you-go pricing, instead of buying, owning, and maintaining physical data centers and servers.

Question 40 AWS Cloud Fundamentals

What is AWS?

Instance types categorize EC2 instances by compute, memory, and networking capacity, such as General Purpose (M5), Compute Optimized (C5), Memory Optimized (R5). An Availability Zone is an isolated location within a Region, comprising one or more data centers with redundant power, networking, and connectivity, designed for high availability. Amazon Web Services (AWS) is a comprehensive, secure, and scalable cloud computing platform provided by Amazon, offering over 200 fully featured services from data centers globally. Amazon Simple Storage Service (S3) is object storage for internet-scale data with 99.999999999% durability, unlimited scalability, and features like versioning and lifecycle policies.

Question 41 AWS Cloud Fundamentals

What is AWS Cost Explorer?

Grant only the permissions necessary for a user or role to perform their tasks, minimizing security risks from over-privileged access. Cost Explorer analyzes and visualizes AWS costs/trends with forecasts, recommendations, and RI purchase analysis for optimization. AWS Organizations helps centrally manage policies across multiple AWS accounts with features like consolidated billing, service control policies (SCPs), and account grouping. CloudTrail records API calls and account activity for auditing, compliance, governance, and troubleshooting across AWS services.

Question 42 AWS Cloud Fundamentals

What is the AWS Free Tier?

Free Tier offers limited free usage of 100+ services for 12 months or always-free, ideal for learning and prototyping. The models are Infrastructure as a Service (IaaS) for virtualized computing resources, Platform as a Service (PaaS) for development platforms, and Software as a Service (SaaS) for ready-to-use software applications. An AMI is a template for launching EC2 instances, containing OS, application server, and data needed to create a ready-to-run instance. Virtual Private Cloud (VPC) lets you provision a logically isolated network section in AWS where you launch resources with control over IP ranges, subnets, routing, and gateways.

Question 43 AWS Cloud Fundamentals

What is Amazon RDS?

Network Address Translation (NAT Gateway) allows private subnet instances to access the internet for updates while preventing inbound connections for security. Amazon EBS provides block-level storage volumes for EC2 instances, offering persistent, high-performance storage with snapshots for backups. Relational Database Service (RDS) manages relational databases like MySQL, PostgreSQL, with automated backups, patching, and Multi-AZ for HA. ElastiCache is an in-memory data store supporting Redis or Memcached for caching to improve database performance and reduce load.

Question 44 AWS Cloud Fundamentals

What is Amazon VPC?

Simple Notification Service (SNS) is a pub/sub messaging service sending notifications via email, SMS, HTTP, or other protocols. Edge Locations are endpoints for AWS services like CloudFront and Route 53, used to cache content closer to users for low-latency delivery worldwide. An AMI is a template for launching EC2 instances, containing OS, application server, and data needed to create a ready-to-run instance. Virtual Private Cloud (VPC) lets you provision a logically isolated network section in AWS where you launch resources with control over IP ranges, subnets, routing, and gateways.

Question 45 AWS Cloud Fundamentals

What are the three main cloud service models?

CloudTrail records API calls and account activity for auditing, compliance, governance, and troubleshooting across AWS services. The models are Infrastructure as a Service (IaaS) for virtualized computing resources, Platform as a Service (PaaS) for development platforms, and Software as a Service (SaaS) for ready-to-use software applications. CloudFront is a content delivery network (CDN) that speeds up distribution of static/dynamic web content by caching at Edge Locations globally. Grant only the permissions necessary for a user or role to perform their tasks, minimizing security risks from over-privileged access.

Question 46 AWS Cloud Fundamentals

What is Amazon EC2?

A Subnet is a range of IP addresses in your VPC divided across Availability Zones for resource placement, with public or private types. AWS Shield provides DDoS protection; Standard is automatic and free, Advanced offers enhanced mitigation with support. It includes Regions (54+), Availability Zones (170+), and Edge Locations (400+ globally), enabling low-latency access, data residency, and disaster recovery. Amazon Elastic Compute Cloud (EC2) provides resizable virtual servers (instances) in the cloud for running applications with choice of OS, CPU, memory, storage, and networking.

Question 47 AWS Cloud Fundamentals

What are AWS Edge Locations?

CloudFront is a content delivery network (CDN) that speeds up distribution of static/dynamic web content by caching at Edge Locations globally. Edge Locations are endpoints for AWS services like CloudFront and Route 53, used to cache content closer to users for low-latency delivery worldwide. An Availability Zone is an isolated location within a Region, comprising one or more data centers with redundant power, networking, and connectivity, designed for high availability. Grant only the permissions necessary for a user or role to perform their tasks, minimizing security risks from over-privileged access.

Question 48 AWS Cloud Fundamentals

What is AWS WAF?

IAM is a service for securely controlling access to AWS resources by creating users, groups, roles, and policies defining permissions. Web Application Firewall (WAF) protects web apps from exploits like SQL injection and XSS using rules and rate limiting. ELB automatically distributes incoming application traffic across multiple targets like EC2 instances for high availability and fault tolerance. CloudWatch monitors AWS resources and applications, collecting metrics, logs, and events with alarms, dashboards, and automated actions.

Question 49 AWS Cloud Fundamentals

What is Elastic Block Store (EBS)?

The models are Infrastructure as a Service (IaaS) for virtualized computing resources, Platform as a Service (PaaS) for development platforms, and Software as a Service (SaaS) for ready-to-use software applications. AWS provides benefits like agility, scalability, elasticity, global reach, pay-as-you-go pricing, security, and high reliability through its global infrastructure. Auto Scaling automatically adjusts EC2 capacity based on demand, using scaling policies tied to CloudWatch metrics for cost optimization. Amazon EBS provides block-level storage volumes for EC2 instances, offering persistent, high-performance storage with snapshots for backups.

Question 50 AWS Cloud Fundamentals

What is a Subnet in VPC?

ELB automatically distributes incoming application traffic across multiple targets like EC2 instances for high availability and fault tolerance. IAM is a service for securely controlling access to AWS resources by creating users, groups, roles, and policies defining permissions. A Subnet is a range of IP addresses in your VPC divided across Availability Zones for resource placement, with public or private types. Cloud computing is the on-demand delivery of IT resources over the internet with pay-as-you-go pricing, instead of buying, owning, and maintaining physical data centers and servers.