[AWS CCP] Dump 정리 -1

본 글은 https://hyunhp.tistory.com/ 포스트를 참고하여 작성되었습니다.

---

1. A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch. Which AWS Support plan offers guidance and support for this kind of event at no additional charge?
A. AWS Business Support
B. AWS Basic Support
C. AWS Developer Support
D. AWS Enterprise Support

A. AWS enterprise support

---

2. A company wants to establish a schedule for rotating database user credentials.
Which AWS service will support this requirement with the LEAST amount of operational overhead?
A. AWS secrets manager
-> This service is specifically designed for managing sensitive information like API keys, passwords, and database credentials. It includes automatic rotation of secrets to enhance security and reduce operational overhead.

---

3. Which aws service of feature can be used to create a private connection between an on-prem workload and aws cloud workload?
A. AWS direct connect

---

4. Which AWS service is used to provide encryption(암호화) for amazon EBS?
A. AWS KMS
Key Management Service
Encryption(암호화) 나오면 이거 !
암호화 키 생성하고 관리 도와주는 서비스

---

5. A company wants to manage its AWS Cloud resources through a web interface.
Which AWS service will meet this requirement?
A. AWS Management Console
-> web-based interface that allows users to access and manage their AWS resources using a graphical user interface(GUI)

---

6. Which of the following are advantages of aws cloud?
A. High economies of scale / launch globally in minutes

 

---

7. Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?
A. High availability

+ Agility(민첩성): 변화에 빠르게 대응하는 능력

This refers to the ability to quickly and easily adapt to changes, innovate, and respond to evolving business needs.

+ Elasticity(탄력성): 수요에 따라 자동으로 늘었다 줄었다 하는 능력

Elasticity is the ability to dynamically scale resources up or down based on demand. It helps optimize costs and ensures that the application can handle varying workloads.

+ Scalability(확장성): 커질 수 있는 구조

Scalability involves the ability to increase or decrease the size of resources to accommodate changes in demand. It is related to both elasticity and the ability to handle growth.

+ High availability(고가용성): 안 멈추고 계속 사용할 수 있게 만드는 것

An architecture's ability to withstand failures with minimal downtime is a key aspect of high availability in the AWS Cloud. High availability ensures that applications remain operational and accessible even in the face of component failures or disruptions.

---

8. A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.
Which AWS service should the developer use to meet these requirements?
A. CloudFormation
-> 인프라를 코드로 저장하는 서비스(IaC) > 개발, 테스트, 프로덕션같은 다양한 환경에서 배포의 일관성 보장 가능

-> 같은 인프라를 반복해서 만들고싶다(완전 반복 자동화)
-> A service that allows you to define and provision AWS infrastructure as code in a safe, predictable, and repeatable manner. It enables the developer to create and manage a collection of AWS resources by describing the infrastructure in a template. This helps in maintaining both development and production environments consistently.

+ AWS Ground Station: AWS Ground Station is a service for satellite data processing.

 

+Amazon EC2: 가상서버 1대(또는 몇대)를 직접 만들어서 사용하는 서비스

+ AWS Shield: AWS Shield is a managed Distributed Denial of Service (DDoS) protection service. It is focused on protecting applications from DDoS attacks.

+ AWS IoT Device Defender: AWS IoT Device Defender is a service that helps you secure your IoT devices.

---

9. Which task is the customer’s responsibility, according to the AWS shared responsibility model?
A. Maintain the security of the AWS Cloud. (고객 책임은 무엇인가)
B. Configure firewalls and networks.
C. Patch the operating system of Amazon RDS instances.
D. Implement physical and environmental controls.
=> B
Customers have control over configuring security groups, network access control lists, and other network-related configurations to control traffic to and from their resources.

 

+ AWS책임: 클라우드 자체를 보호 (키워드: hardware, data center, physical infrastructure)

+ 고객 책임: 클라우드 안에서 설정/보안 (키워드: configure, manage, set up security group, network settings)

---

10. Which AWS service helps deliver highly available applications with "fast failover" for multi-Region and Multi-AZ architectures?
=> AWS global accelerator

장애 감지 시 즉시 다른 region으로 라우팅

실시간으로 전환 

---

11. A company has a set of ecommerce applications. The applications need to be able to send messages to each other.
Which AWS service meets this requirement?
=> amazon simple queue service(amazon SQS)

fully managed message queuing service that enables decoupling and scaling of distributed systems. It allows applications to send messages to each other and helps in building distributed, loosely coupled systems.

---

12. What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)
=> volume discounts / one bill for multiple accounts

---

13. A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.
Which AWS service or resource will meet this requirement?
=> access analyzer for s3

---

14. What is the best resource for a user to find compliance-related information and reports about AWS?
=> AWS artifact

+ AWS Marketplace: An online store where customers can find, buy, and deploy software that runs on AWS.

+ Amazon Inspector: An automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

+ AWS Support: Provides technical support for AWS services. While AWS Support may assist with compliance-related inquiries, it is not the primary resource for compliance reports.

---

15. Which AWS service enables companies to deploy(배포) an application close to end users? (사용자랑 가까운 위치에서 서비스 제공)
=> Amazon Cloudfront
A content delivery network (CDN) service that enables companies to deliver static and dynamic web content, including applications, to end users with low latency and high transfer speeds. It helps deploy an application close to end users.

+ Amazon Route 53: 인터넷 주소(URL)를 실제 서버로 연결해주는 서비스(DNS)

A scalable domain name system (DNS) web service designed to route end-user requests to globally distributed endpoints. It facilitates domain registration and management of DNS records, contributing to efficient application deployment.

---

16. Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?
=> amazon glabal accelerator

---

17. Which AWS service provides highly durable object storage? (파일을 안전하게 저장하는 서비스는?)
=> Amazon S3

파일을 겁나 안전하게 저장하는 객체 스토리지 서비스

+ Amazon S3 (Simple Storage Service): Provides highly durable object storage with 99.999% (11 9's) durability. It is suitable for storing and retrieving any amount of data.

+Amazon Elastic File System (Amazon EFS): 여러 서버가 같이 쓰는 공유폴더 / 클라우드 및 온프렘 리소스에서 사용가능한 확장가능 완전관리형 NFS 파일 시스템 (Shared file system)

Provides scalable file storage, but it is not specifically designed for object storage. It is more suitable for file-based workloads.

+ Amazon Elastic Block Store (Amazon EBS): EC2에 붙이는 하드디스크 개념 (키워드 : Attach to EC2)

EC2 위한 영구적 블록 스토리지 볼륨 제공

인터넷으로 연결된 네트워크 드라이브

데이터 영구히 보관해야할 때 사용

Provides block-level storage volumes for use with Amazon EC2 instances. It is not object storage; instead, it is used for attaching persistent block storage to instances.

+ Amazon FSx: 특정 용도에 최적화된 "기업용 파일 서버"

windows, lustre, netapp ontap 같은 널리 사용되는 파일 시스템 위한 완전관리형 파일 스토리지 서비스

Provides fully managed file storage, and it is not focused on object storage. It is designed for Windows File Server or Lustre file systems. 

 

+ S3 storage class : 사용 빈도에 따라 비용 최적화하는 옵션

standard(자주 사용) / standard-IA(가끔 사용) / Glacier(거의 안씀 저렴)

---

18. Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances? (AWS 책임 고르기)
=> Operating system installations

+ 고객 책임 - > OS 설치, 패치, DB 설치 및 관리, DB 백업, 애플리케이션 등
-> database backups
Database software patches
Operating system patches

---

19. Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
=> the ability to user the pay-as-you-go model
=> no longer having to guess what capacity will be required

---

20. Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?
=> AWS storage gateway

온프레미스, AWS 클라우드 연결해주는 다리

온프레미스에서 AWS 스토리지를 로컬처럼 쓰게해주는 하이브리드 서비스

A hybrid cloud storage service that enables on-premises applications to use cloud storage seamlessly. It provides file, volume, and tape gateway interfaces to integrate on-premises environments with AWS Cloud storage. This service allows on-premises users to access virtually unlimited cloud storage while maintaining a hybrid storage infrastructure.