AWS Egzam

-
1. AWS SysOps Administrator Associate Exam
-150 $ 
- 130 Minutes (2 minutes per question)
- 65 Questions - You can afford to get 18 question wrong
- ~72% Passing Score
- Valid 3 years
- exam code is SOA-C01
- Qusetions
    * 22 % Monitoring and Reporting  - 14.3 (14-15) Questions
    * 8 % High Availability  - 5.2 (5-6) Questions
    * 14 % Deployment and Provisioning  - 9.1 (9-10) Questions
    * 12 % Storage and Data Management  - 7.8 (7-8) Questions
    * 18 % Security Compliance  - 11.7 (11-12) Questions
    * 14 % Networking  - 9.1 (9-10) Questions
    * 12 % Automation and Optimization  - 7.8 (7-8) Questions
- Content:

Domain 1: Monitoring and Reporting
1.1 Create and maintain metrics and alarms utilizing AWS monitoring services
1.2 Recognize and differentiate performance and availability metrics
1.3 Perform the steps necessary to remediate based on performance and availability metrics
Domain 2 : High Availability
2.1 Implement scalability and elasticity based on use case 
2.2 Recognize and differentiate highly available and resilient environments on AWS 
Domain 3: Deployment and Provisioning 
3.1 Identify and execute steps required to provision cloud resources 
3.2 Identify and remediate deployment issues 
Domain 4: Storage and Data Management 
4.1 Create and manage data retention 
4.2 Identify and implement data protection, encryption, and capacity planning needs 
Domain 5: Security and Compliance 
5.1 Implement and manage security policies on AWS 
5.2 Implement access controls when using AWS 
5.3 Differentiate between the roles and responsibility within the shared responsibility model
Domain 6: Networking 
6.1 Apply AWS networking features 
6.2 Implement connectivity services of AWS 
6.3 Gather and interpret relevant information for network troubleshooting 
Domain 7: Automation and Optimization 
7.1 Use AWS services and features to manage and assess resource utilization 
7.2 Employ cost-optimization strategies for efficient resource utilization 
7.3 Automate manual or repeatable process to minimize management overhead




Staless application:
- no knowledge of perions seessions
-horizontal scaling

Stateless components
-sessions stored for example in Amazon DynamoDB (drop0-in replacements libraries that allow to store native sessions in DynamoDB)

* avioid stateful -> Amazon Simple Workflow Service

Stateful Components
-databases stateful by definition


Distributed Processing:
-Amazon Elastic M?apReduce (Amazon EMR) to mn Hadoop
Amazon Kinesisi -> real-time processing of streaming data

instanting comput Resources:

golden image vs bootstraping
hybrid: AWS Elastic Beanstalck -> from image but running bootstrap action from .ebextensions


Automation:
-AWS Elastic BeanStalk - resource provisioning, load balancing, auto-scaling and monitoring
-Auto-recovery
-Auto-scaling
-Amazon CloudWatch alarms - sending via Amazon Simple Notification Service (Amzaon SNS) to run Lambda function
-Amazon CloudWatch Events - near real time streams of system events

AWS
-> Kinesis
-> SNS topics

-AWS OpsWorks Lifecyclee events - Continuons Configuration

Stateful firewall - security group
Stateless firewall -ACL (Access Control List) - protect subnets of VPC


EC2
- instance state stautus is Failed
- instance state status monitors the software and hardware of your individual instance
- The following are examples of problems that can cause instance status checks to fail:
  • Failed system status checks
  • Incorrect networking or startup configuration
  • Exhausted memory
  • Corrupted file system
  • Incompatible kernel






Komentarze

Prześlij komentarz

Popularne posty z tego bloga

Kubernetes

-
Obraz
I. Introduction 1. Kubernetes Overview - Kubernetes = popular container orchestrator  * it lets you schedule containers on a cluster of machines  * you can run multiple containers on one machine  * you can run long running services (like web applications)  * Kubernetes will manage the state of those containers:    ** Can start the container on specific nodeskubectl create -f pod-demo.yml    ** Will restart a container when it gets killed    ** Can move containers from one dnode to another node - you can run Kubernetes anywhere:   *on-premise (own datacenter)   *public (Google cloud, AWS)   *hybrid: public & private -highly modular -open source -backed by google -Container Orchestration = Make many servers act like one -Released by Google in 2015, maintained by large community -Runs on top of Docker (usually) as a set of APIs in containers -Provides API/CLI to managed containers across server...
Czytaj więcej

Helm

-
 0. Overivew - Packet manager 1. Helm Provenance and Integrity - https://github.com/technosophos/k8s-helm/blob/master/docs/provenance.md - Helm has provenance tools which help chart users verify the integrity and origin of a package. Using industry-standard tools based on PKI, GnuPG, and well-respected package managers, Helm can generate and verify signature files. a) Overview   -  I ntegrity is established by comparing a chart to a provenance record. Provenance records are stored in   provenance files , which are stored alongside a packaged chart. For example, if a chart is named   myapp-1.2.3.tgz , its provenance file will be   myapp-1.2.3.tgz.prov .  -  Provenance files are generated at packaging time ( helm package --sign ... ), and can be checked by multiple commands, notable   helm install --verify . b) The workflow This section describes a potential workflow for using provenance data effectively. Prerequisites: A valid PGP keyp...
Czytaj więcej

Ansible Tower / AWX

-
- Ansible Tower provides a web server interface to ansible.  - System rewuierments are somewhat heavy.  - Tower is only free for minimal use. Working with more than a few system requires a paid lincense.  - The two keys benefots of Ansible Tower are user permissioning and the audit trail (only provided with license.  - Only touched on in EX4077  - How is ansible Tower installed on your system? Ansible Tower is provided in a tarball containing binaries, config files, and an installation script that must be ran.  - To populate an Ansible Tower project with source files can be used:        * file system of the Ansible Tower server        * git        * subversion  - features:        * an interface for running Ansible plays and playbooks against target hosts.       * Separate user accounts permissioned for selective access to Tower-managed ...
Czytaj więcej