Answers 100% Pass |Revised
AWS CloudTrail - ✔✔A web service that records activity made on your account and delivers log files to
an Amazon S3 bucket. CloudTrail is for auditing whereas CloudWatch is for performance monitoring.
Amazon CloudWatch - ✔✔This service performs performance monitoring
3 types of cloud computing model are: - ✔✔Infrastructure as a service (IaaS).
Platform as a service (PaaS).
Software as a service (SaaS).
6 advantages to cloud computing - ✔✔Trade capital expense for variable expense.
Benefit from massive economies of scale.
Stop guessing about capacity.
Increase speed and agility.
Stop spending money running and maintaining data centers.
Go global in minutes.
Infrastructure as a Service (IaaS): - ✔✔Contains the basic building blocks for cloud IT and typically
provide access to networking features, computers (virtual or on dedicated hardware), and data storage
space.
IaaS provides you with the highest level of flexibility and management control over your IT resources
and is most similar to existing IT resources that many IT departments and developers are familiar with
today.
Page 1/32
Crafted for Academic Insight by KatelynWhitman. All rights reserved © 2025
,Platform as a Service (PaaS) - ✔✔Removes the need for your organization to manage the underlying
infrastructure (usually hardware and operating systems) and allows you to focus on the deployment and
management of your applications.
Software as a Service (SaaS) - ✔✔Provides you with a completed product that is run and managed by the
service provider. In most cases, people referring to Software as a Service are referring to end-user
applications.
A common example of a SaaS application is web-based email which you can use to send and receive
email without having to manage feature additions to the email product or maintain the servers.
There are 3 types of cloud deployment: - ✔✔Public Cloud or simple "Cloud" - e.g. AWS, Azure, GCP.
Hybrid Cloud - mixture of public and private clouds.
Private Cloud (on-premise) - managed in your own data centre, e.g. Hyper-V, OpenStack, VMware.
Public Cloud - ✔✔A cloud-based application is fully deployed in the cloud and all parts of the
application run in the cloud. Applications in the cloud have either been created in the cloud or have been
migrated from an existing infrastructure to take advantage of the benefits of cloud computing.
Hybrid Cloud - ✔✔A hybrid deployment is a way to connect infrastructure and applications between
cloud-based resources and existing resources that are not located in the cloud.
Private Cloud - ✔✔The deployment of resources on-premises, using virtualization and resource
management tools, is sometimes called the "private cloud."
AWS Region - ✔✔A region is a geographical area.
You can replicate data within a region and between regions using private or public Internet connections.
You retain complete control and ownership over the region in which your data is physically located,
making it easy to meet regional compliance and data residency requirements.
Page 2/32
Crafted for Academic Insight by KatelynWhitman. All rights reserved © 2025
,There is no charge for data transfer between regions.
True/False - ✔✔False:
There is a charge for data transfer between regions.
Each Amazon Region is designed to be completely isolated from the other Amazon Regions.
True/False - ✔✔True
AWS Region must have 2 or more Availability Zones (AZs)
True/False - ✔✔True
Availability Zones (AZs) - ✔✔AZs consist of one or more discrete data centers, each with redundant
power, networking, and connectivity, housed in separate facilities.
AWS Endpoint - ✔✔An endpoint is a URL that is the entry point for a web service.
For example, https://dynamodb.us-west-2.amazonaws.com is an entry point for the Amazon
DynamoDB service.
Availability Zones - ✔✔Physically separate and isolated from each other.
AZs span one or more data centers and have direct, low-latency, high throughput and redundant
network connections between each other.
Page 3/32
Crafted for Academic Insight by KatelynWhitman. All rights reserved © 2025
, Each AZ is designed as an independent failure zone.
Edge locations - ✔✔Content Delivery Network (CDN) endpoints for CloudFront.
There are many more edge locations than regions.
AWS Identity and Access Management (IAM) - ✔✔A web service that helps you securely control access
to AWS resources.
You use IAM to control who is authenticated (signed in) and authorized (has permissions) to use
resources.
IAM can be used to manage: - ✔✔Users
Groups
Access policies
Roles
User credentials
User password policies
Multi-factor authentication (MFA)
API keys for programmatic access (CLI)
AWS Identity and Access Management interaction methods: - ✔✔AWS Management Console
AWS Command Line Tools
AWS SDKs
IAM HTTPS API
By default new users are created with FULL access to any AWS services
Page 4/32
Crafted for Academic Insight by KatelynWhitman. All rights reserved © 2025