概要
CLF-C01 - AWS Certified Cloud Practitioner - Chinese Simplified (CHS)
学习： 1.edx上清掉了AWS Developer Series的3个考试; 2.书看掉了《AWS認定クラウドプラクティショナー》
刷题： examtopics 242~454约200题， 刷了2~3遍
常考概念
Amazon Macie
- 一句话：梅西，管理隐私数据
- Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data?
- Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?
AWS Trusted Advisor
- 一句话：实时监控，指导你该干啥
- Which tool can be used to monitor AWS service limits?
- How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.) → It provides a list of cost optimization recommendations based on current AWS usage、It detects potential security vulnerabilities caused by permissions settings on account resources
AWS Personal Health
- 一句话： 比较像dynatrace （错了很多次不得不记录一下,关键词：管理in progress）
- Which AWS dashboard displays relevant and timely information to help users manage events in progress, and provides proactive notifications to help plan for scheduled activities?
AWS Artifact
- 一句话：合规情报
- What is the best resource for a user to find compliance-related information and reports about AWS?
Amazon S3
- 一句话：相当于dragon的功能，注意区别三种模式：Standard， One Zone-Infrequent Access， Glacier
- Which Amazon S3 storage class is optimized to provide access to data with lower resiliency requirements, but rapid access when needed such as duplicate backups? → Amazon S3 One Zone-Infrequent Access
Amazon KMS
- 一句话：相当于CKMS
- A user would like to encrypt data that is received, stored, and managed by AWS CloudTrail.
Which AWS service will provide this capability? - Which AWS service will provide a way to generate encryption keys that can be used to encrypt data? (Choose two.)
→ AWS Key Management Service (AWS KMS), AWS CloudHSM
AWS OpsWorks
- 一句话：自动化部署，提供 Chef 和 Puppet 的托管实例
- Which AWS service is used to automate configuration management using Chef and Puppet?
AWS Total Cost of Ownership
- 一句话：和自己建立系统做比较，知道自己实惠了多少
- estimate savings when comparing the AWS Cloud to an on-premises environment
- What can assist in evaluating an application for migration to the cloud? (Choose two.) → AWS Professional Services,AWS Partner Network (APN)
Amazon Polly
- 一句话：文字转语音（这都会出题。。）
- Which AWS service can be used to turn text into life-like speech?
Amazon Comprehend
- 一句话：自然语言处理
- Amazon Comprehend allows users to build applications that can respond to user requests in many languages.
Amazon DynamoDB
- 一句话：NOSQL相当于Casssandra， 可以auto-scale
- Which AWS services may be scaled using AWS Auto Scaling? (Choose two.) → EC2、DynamoDB
Amazon Route 53
- 一句话： 就是个DNS(不要想到Gateway那边去)
AWS Global Accelerator
- 一句话： 网络加速器（突然觉得很俗）
- A company wants to use an AWS service to monitor the health of application endpoints, with the ability to route traffic to healthy regional endpoints to improve application availability. Which service will support these requirements?
Amazon EFS(Elastic File System)
- 一句话：文件系统。题设中出现File System就选它
- An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously.
Which AWS storage service should be used?
AWS Snowball
- 一句话：和本地传数据用
- Which AWS services can be used to move data from on-premises data centers to AWS? (Choose two.) → AWS Snowball, AWS Database Migration Service (AWS DMS)
Amazon GuardDuty
- 一句话：保护账户，监控非法访问
- Which AWS service helps identify malicious or unauthorized activities in AWS accounts and workloads?
AWS WAF
- 一句话：防火墙
- Which AWS service or feature can enhance network security by blocking requests from a particular network for a web application on AWS? (Choose two.) → AWS WAF、Network ACLs
AWS Shield Advanced
- 一句话：保护from DDOS
- A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events.
Which AWS managed service will meet these requirements?
Amazon QuickSight
- 一句话：GA，YA，AA
AWS CloudHSM
- 一句话：云的硬件安全模块。
- Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
AWS Elastic Beanstalk
- 一句话：PaaS， 还有一个k8s版本是CaaS
- Which AWS service is suitable for an event-driven workload?
VPC Flow Logs
- 一句话：监控网络流量
- Which Amazon VPC feature enables users to capture information about the IP traffic that reaches Amazon EC2 instances?
AWS Multi-Factor Authentication
- 一句话：OneTimePassword， 将军令..
- Which of the following will enhance the security of access to the AWS Management Console? (Choose two.) → AWS Multi-Factor Authentication (AWS MFA), Password policies
AWS Storage Gateway
- 一句话：Google Driver Desktop类似的东西
- What is the purpose of AWS Storage Gateway? → It connects on-premises data storage to the AWS Cloud.
Amazon Athena
- 一句话：通过SQL访问S3。 有点HIVE对于Hadoop的意味
- Which AWS service can be used to query stored datasets directly from Amazon S3 using standard SQL?
AWS Budgets
- 一句话：预算管理系统。区别别的关键是它可以设置限制（usage limits）
- Which AWS service will allow a user to set custom cost and usage limits, and will alert when the thresholds are exceeded?
AWS Control Tower
- 一句话：AWS的ais,但是功能远不止group管理
- What can be used to automate and manage secure, well-architected, multi-account AWS environments?
Instance
- 一句话： Dedicated→专用的； Reserved→预约的； Spot→偶尔需要; On-Demand→按需求
- Which Amazon EC2 pricing model should be used to comply with per-core software license requirements? → Dedicated
- An Amazon EC2 instance runs only when needed yet must remain active for the duration of the process.What is the most appropriate purchasing option? → On-Demand Instances
5 basic pillars according to AWS are (see here)
1- Operational excellence 卓越操作
2- Security 安全性
3- Reliability 可靠性
4- Performance efficiency 性能效率
5- Cost optimization 成本优化
常考英文
- on-premises: 本地的
- compliance: 合规
- provision: 供应
- upfront: 提前 (upfront payment: 提前支付)
- transit: 过境
备注，杂谈
- examtopics之外的刷题网站：acloudguru, udemy
- Practitioner因为太简单没人考，买鸡精都要420（SAA只要200），被卖鸡精的无情鄙视