CPC Exam
Infrastructure as a Service (IaaS) - Answer-§ Basically AWS - you manage the server which can be
physical or virtual, as well as the operating system, usually the data center provider will have no access
to your server - EC2
§ Basic building blocks of cloud IT and typically provides access to networking features, computers and
data storage space
§ Provides highest level of flexibility and management control over IT resources
Platform as a Service (PaaS) - Answer-§ Removes the need for organizations to manage the underlying
infrastructure and allow you to focus on the deployment and management of your applications
§ Helps you be more efficient as you don't need to worry about resource procurement, capacity
planning, software maintenance, patching or any of the undifferentiated heavy lifting involved in
running your application
Software as a Service
(SaaS) - Answer-Software that is hosted centrally on the Internet and accessed by users with a Web
browser.
AWS Global Infrastructure - Answer-o 25 regions and 80 availability zones, over 150 edge locations
,region - Answer-o geographical area, each region consists of 2 or more availability zones
Availability Zone - Answer-o data center, building filled with servers, may be several data centers
o each data center has its own redundant power, networking, connectivity, housed in separate facilities
o physically isolated and connected via a low latency redundant link
edge locations - Answer-o are AWS endpoints used for caching content - consists of Cloudfront
o there are more than regions - over 150
Identity and Access Management (IAM) - Answer-o Enables you to securely control access to AWS
services and resources for your users - you can create and manage AWS users and groups, and use
permissions to allow and deny their access to AWS resources
o You can grant permissions to a user by creating a policy, which is a document in JSON format that
explicitly lists permissions to allow or deny access to resources in an AWS account.
root account - Answer-§ Has full administrator access - create users for each individual within your
organization
§ Complete access to all AWS services
user - Answer-§ A person or application that interacts with AWS
groups - Answer-collections of users with identical permissions
roles - Answer-is similar to a user in that it is an AWS identity with permissions that determine what the
identity can and cannot do in AWS. it does not have any long-term defined credentials, such as password
or access keys, associated with it. Instead, if a user is assigned to it, access keys are created dynamically
and provided to the user temporarily. Use them to delegate access to users, applications, or services
that don't normally have access to your AWS resources.
,access key - Answer-§ for programmatic access to AWS
· Long-term credentials for IAM user, authenticates requests
IAM credential report - Answer-· You can generate and download a credential report that lists all the
users in your account
o Passwords
§ Whether it was enabled, last used, last changed
o Access keys
§ Whether it is access, last used, last rotated
o MFA
§ Whether it has been enabled
S3 - Answer--- provides developers and IT teams with secure, durable, highly-scalable object storage, is
easy to use, with a simple web services interface to store and retrieve any amount of data from
anywhere on the web
o Not just a storage bucket --- requester pays, versioning, hosting static website, object lifecycle
management
in S3... - Answer-o Files can be from 0 Bytes to 5 TB
o Unlimited storage
o Files are stored in buckets (folders in the cloud)
o Is a universal namespace, names must be unique globally
o When you upload a file to S3, you will receive a HTTP 200 code if the upload was successful
o Not suitable to install an operating system on
, S3 Standard Storage - Answer-99.99% Availability and 99.9999999% Durability because your data is
stored on 3 different storage facilities and is designed to with stand the lose of 2 data center facilities.
S3 - IA - Answer-*Standard Infrequent Access*
S3 storage class for data that is accessed less frequently, but requires rapid access when needed.
-- lower fee than S3, but you are charged a retrieval fee
S3 one zone -- IA - Answer-§ For when you want a lower-cost option for infrequently accessed data, but
do not require the multiple availability zone data resilience
S3 -- intelligent tiering - Answer-§ Designed to optimize costs by automatically moving data to the most
cost-effective access tier, without performance impact or operational overhead, uses machine learning
§ Delivers automatic cost savings by moving data between two-access tiers - frequent and infrequent
access - when access patterns change, and is ideal for data with unknown or changing access patterns
S3 glacier - Answer-§ Secure, durable, low-cost storage class for data archiving, you can reliably store
any amount of data at costs that are competitive with or cheaper than on-premises solutions, retrieval
times configurable from minutes to hours
§ Uses: media asset workflows, healthcare information, compliance archiving, scientific data storage,
digital preservation
§ Can use vaults
S3 glacier deep archive - Answer-§ S3 glacier deep archive is Amazon S3's lowest cost storage class
where a retrieval time of 12 hours is acceptable
S3 Transfer Acceleration - Answer-§ Enabled fast, easy and secure transfers of files over long distances
between your end users and an S3 bucket, takes advantage of Amazon Cloudfront's globally distributed
edge locations, as the data arrives at an edge location, data is routed to Amazon S3 over an optimized
network path
§ Optimizes performance for data transfer between users & objects in Amazon S3 bucket
Infrastructure as a Service (IaaS) - Answer-§ Basically AWS - you manage the server which can be
physical or virtual, as well as the operating system, usually the data center provider will have no access
to your server - EC2
§ Basic building blocks of cloud IT and typically provides access to networking features, computers and
data storage space
§ Provides highest level of flexibility and management control over IT resources
Platform as a Service (PaaS) - Answer-§ Removes the need for organizations to manage the underlying
infrastructure and allow you to focus on the deployment and management of your applications
§ Helps you be more efficient as you don't need to worry about resource procurement, capacity
planning, software maintenance, patching or any of the undifferentiated heavy lifting involved in
running your application
Software as a Service
(SaaS) - Answer-Software that is hosted centrally on the Internet and accessed by users with a Web
browser.
AWS Global Infrastructure - Answer-o 25 regions and 80 availability zones, over 150 edge locations
,region - Answer-o geographical area, each region consists of 2 or more availability zones
Availability Zone - Answer-o data center, building filled with servers, may be several data centers
o each data center has its own redundant power, networking, connectivity, housed in separate facilities
o physically isolated and connected via a low latency redundant link
edge locations - Answer-o are AWS endpoints used for caching content - consists of Cloudfront
o there are more than regions - over 150
Identity and Access Management (IAM) - Answer-o Enables you to securely control access to AWS
services and resources for your users - you can create and manage AWS users and groups, and use
permissions to allow and deny their access to AWS resources
o You can grant permissions to a user by creating a policy, which is a document in JSON format that
explicitly lists permissions to allow or deny access to resources in an AWS account.
root account - Answer-§ Has full administrator access - create users for each individual within your
organization
§ Complete access to all AWS services
user - Answer-§ A person or application that interacts with AWS
groups - Answer-collections of users with identical permissions
roles - Answer-is similar to a user in that it is an AWS identity with permissions that determine what the
identity can and cannot do in AWS. it does not have any long-term defined credentials, such as password
or access keys, associated with it. Instead, if a user is assigned to it, access keys are created dynamically
and provided to the user temporarily. Use them to delegate access to users, applications, or services
that don't normally have access to your AWS resources.
,access key - Answer-§ for programmatic access to AWS
· Long-term credentials for IAM user, authenticates requests
IAM credential report - Answer-· You can generate and download a credential report that lists all the
users in your account
o Passwords
§ Whether it was enabled, last used, last changed
o Access keys
§ Whether it is access, last used, last rotated
o MFA
§ Whether it has been enabled
S3 - Answer--- provides developers and IT teams with secure, durable, highly-scalable object storage, is
easy to use, with a simple web services interface to store and retrieve any amount of data from
anywhere on the web
o Not just a storage bucket --- requester pays, versioning, hosting static website, object lifecycle
management
in S3... - Answer-o Files can be from 0 Bytes to 5 TB
o Unlimited storage
o Files are stored in buckets (folders in the cloud)
o Is a universal namespace, names must be unique globally
o When you upload a file to S3, you will receive a HTTP 200 code if the upload was successful
o Not suitable to install an operating system on
, S3 Standard Storage - Answer-99.99% Availability and 99.9999999% Durability because your data is
stored on 3 different storage facilities and is designed to with stand the lose of 2 data center facilities.
S3 - IA - Answer-*Standard Infrequent Access*
S3 storage class for data that is accessed less frequently, but requires rapid access when needed.
-- lower fee than S3, but you are charged a retrieval fee
S3 one zone -- IA - Answer-§ For when you want a lower-cost option for infrequently accessed data, but
do not require the multiple availability zone data resilience
S3 -- intelligent tiering - Answer-§ Designed to optimize costs by automatically moving data to the most
cost-effective access tier, without performance impact or operational overhead, uses machine learning
§ Delivers automatic cost savings by moving data between two-access tiers - frequent and infrequent
access - when access patterns change, and is ideal for data with unknown or changing access patterns
S3 glacier - Answer-§ Secure, durable, low-cost storage class for data archiving, you can reliably store
any amount of data at costs that are competitive with or cheaper than on-premises solutions, retrieval
times configurable from minutes to hours
§ Uses: media asset workflows, healthcare information, compliance archiving, scientific data storage,
digital preservation
§ Can use vaults
S3 glacier deep archive - Answer-§ S3 glacier deep archive is Amazon S3's lowest cost storage class
where a retrieval time of 12 hours is acceptable
S3 Transfer Acceleration - Answer-§ Enabled fast, easy and secure transfers of files over long distances
between your end users and an S3 bucket, takes advantage of Amazon Cloudfront's globally distributed
edge locations, as the data arrives at an edge location, data is routed to Amazon S3 over an optimized
network path
§ Optimizes performance for data transfer between users & objects in Amazon S3 bucket
