Monday, October 24, 2016

AWS SAA Study List - EBS

Elastic Block Store

Basics

  • Block level storage
  • NAS disks, which live outside the EC2 instance
  • Provides general purpose GP2, provisioned IOPS, throughput optimised and HDD disks
  • Can be used as boot volume
  • Can be snapshotted
  • EBS snapshots can be copied to another region
  • Can be used in RAID configurations (RAID 5 and RAID 6 are not recommended)
  • Provisioned IOPS disks are billed if attached to stopped instance

Limits

  • Maximum 5000 EBS volumes
  • Maximum 10,000 EBS snapshots
  • Maximum total volume per disk type (GP2, PIOPS..) 20TiB
  • Maximum total provisioned IOPS is 40,000
  • Can be attached to only one EC2 instance (no shared volumes)


Following topics are exam questions collected through Internet and should be evaluated as so. Answers are mine and have been checked with answers collected through the internet, but might still be wrong.


When an EC2 EBS-backed (EBS root) instance is stopped, what happens to the data on any ephemeral store volumes?

A. Data is automatically saved in an EBS volume.
B. Data is unavailable until the instance is restarted.
C. Data will be deleted and will no longer be accessible.
D. Data is automatically saved as an EBS snapshot.

Why? Ephemeral storage is same as instance store. http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html "The data in an instance store persists only during the lifetime of its associated instance."


When creation of an EBS snapshot is initiated, but not completed, the EBS volume:

A. Can be used while the snapshot is in progress.
B. Cannot be detached or attached to an EC2 instance until the snapshot completes
C. Can be used in read-only mode while the snapshot is in progress.
D. Cannot be used until the snapshot completes.

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-creating-snapshot.html "Snapshots occur asynchronously; the point-in-time snapshot is created immediately, but the status of the snapshot is pending until the snapshot is complete (when all of the modified blocks have been transferred to Amazon S3), which can take several hours for large initial snapshots or subsequent snapshots where many blocks have changed. While it is completing, an in-progress snapshot is not affected by ongoing reads and writes to the volume."


How can you secure data at rest on an EBS volume?

A. Attach the volume to an instance using EC2’s SSL interface.
B. Write the data randomly instead of sequentially.
C. Encrypt the volume using the S3 server-side encryption service.
D. Create an IAM policy that restricts read and write access to the volume.
E. Use an encrypted file system on top of the EBS volume.

Why? Ruling out technique leaves E as only option.


Which procedure for backing up a relational database on EC2 that is using a set of RAlDed EBS volumes for storage minimizes the time during which the database cannot be written to and results in a consistent backup?

A. 1. Detach EBS volumes, 2. Start EBS snapshot of volumes, 3. Re-attach EBS volumes
B. 1. Stop the EC2 Instance. 2. Snapshot the EBS volumes
C. 1. Suspend disk I/O, 2. Create an image of the EC2 Instance, 3. Resume disk I/O
D. 1. Suspend disk I/O, 2. Start EBS snapshot of volumes, 3. Resume disk I/O
E. 1. Suspend disk I/O, 2. Start EBS snapshot of volumes, 3. Wait for snapshots to complete, 4. Resume disk I/O

Why? https://aws.amazon.com/premiumsupport/knowledge-center/snapshot-ebs-raid-array/ "To create an "application-consistent" snapshot of your RAID array, stop applications from writing to the RAID array, and flush all caches to disk. Then ensure that the associated EC2 instance is no longer writing to the RAID array by taking steps such as freezing the file system, unmounting the RAID array, or shutting down the associated EC2 instance. After completing the steps to halt all I/O, take a snapshot of each EBS volume."


When an EC2 instance that is backed by an S3-based AMI is terminated, what happens to the data on the root volume?

A. Data is automatically saved as an EBS snapshot.
B. Data is automatically saved as an EBS volume.
C. Data is unavailable until the instance is restarted.
D. Data is automatically deleted.

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ComponentsAMIs.html "All AMIs are categorized as either backed by Amazon EBS or backed by instance store. The former means that the root device for an instance launched from the AMI is an Amazon EBS volume created from an Amazon EBS snapshot. The latter means that the root device for an instance launched from the AMI is an instance store volume created from a template stored in Amazon S3."


Which of the following instance types are available as Amazon EBS-backed only? Choose 2 answers

A. General purpose T2
B. General purpose M3
C. Compute-optimized C4
D. Compute-optimized C3
E. Storage-optimized 12

Why? https://aws.amazon.com/ec2/instance-types/ As of 10/2016 T2 and C4 are only with EBS-backed only


Which of the following are true regarding encrypted Amazon Elastic Block Store (EBS) volumes? Choose 2 answers

A. Supported on all Amazon EBS volume types
B. Snapshots are automatically encrypted
C. Available to all instance types
D. Existing volumes can be encrypted
E. Shared volumes can be encrypted

Why? https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html "Amazon EBS encryption is only available on certain instance types.", "All snapshots created from the volume" and you can rule out D as you can encrypt volumes which are created as unencrypted. "There is no direct way to encrypt an existing unencrypted volume, or to remove encryption from an encrypted volume. However, you can migrate data between encrypted and unencrypted volumes."


A t2.medium EC2 instance type must be launched with what type of Amazon Machine Image (AMI)?

A. An Instance store Hardware Virtual Machine AMI
B. An Instance store Paravirtual AMI
C. An Amazon EBS-backed Hardware Virtual Machine AMI
D. An Amazon EBS-backed Paravirtual AMI

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html list t2.medium as HVM-EBS combination


Which of the following approaches provides the lowest cost for Amazon Elastic Block Store snapshots while giving you the ability to fully restore data?

A. Maintain two snapshots: the original snapshot and the latest incremental snapshot.
B. Maintain a volume snapshot; subsequent snapshots will overwrite one another
C. Maintain a single snapshot; the latest snapshot is both incremental and complete.
D. Maintain the most current snapshot, archive the original and incremental to Amazon Glacier.

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-deleting-snapshot.html "If you make periodic snapshots of a volume, the snapshots are incremental so that only the blocks on the device that have changed since your last snapshot are saved in the new snapshot. Even though snapshots are saved incrementally, the snapshot deletion process is designed so that you need to retain only the most recent snapshot in order to restore the volume."


An existing application stores sensitive information on a non-boot Amazon EBS data volume attached to an Amazon Elastic Compute Cloud instance. Which of the following approaches would protect the sensitive data on an Amazon EBS volume?

A. Upload your customer keys to AWS CloudHSM. Associate the Amazon EBS volume with AWS CloudHSM. Remount the Amazon EBS volume.
B. Create and mount a new, encrypted Amazon EBS volume. Move the data to the new volume. Delete the old Amazon EBS volume.
C. Unmount the EBS volume. Toggle the encryption attribute to True. Re-mount the Amazon EBS volume.
D. Snapshot the current Amazon EBS volume. Restore the snapshot to a new, encrypted Amazon EBS volume. Mount the Amazon EBS volume

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html#EBSEncryption_supported_instances "While copying an unencrypted snapshot of an unencrypted volume, you can encrypt the copy. Volumes restored from this encrypted copy will also be encrypted."


A user has created numerous EBS volumes. What is the general limit for each AWS account for the maximum number of EBS volumes that can be created?
A. 10000
B. 5000
C. 100
D. 1000

Why? http://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_ebs


Your company policies require encryption of sensitive data at rest. You are considering the possible options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance. Which of these options would allow you to encrypt your data at rest? (Choose 3 answers)

A. Implement third party volume encryption tools
B. Do nothing as EBS volumes are encrypted by default
C. Encrypt data inside your applications before storing it on EBS
D. Encrypt data using native data encryption drivers at the file system level
E. Implement SSL/TLS for all services running on the server

Why? Ruling out E (as it speaks of SSL) and B as EBS volumes are not encrypted by default.


How are the EBS snapshots saved on Amazon S3?

A. Exponentially
B. Incrementally
C. EBS snapshots are not stored in the Amazon S3
D. Decrementally

Why? Only logical answer is Incrementally.


Before I delete an EBS volume, what can I do if I want to recreate the volume later?

A. Create a copy of the EBS volume (not a snapshot)
B. Store a snapshot of the volume
C. Download the content to an EC2 instance
D. Back up the data in to a physical disk

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-deleting-volume.html "However, before deletion, you can store a snapshot of the volume, which you can use to re-create the volume later."


Select the most correct answer: The device name /dev/sda1 (within Amazon EC2) is _____

A. Possible for EBS volumes
B. Reserved for the root device
C. Recommended for EBS volumes
D. Recommended for instance store volumes

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/RootDeviceStorage.html The root device is typically /dev/sda1 (Linux) or xvda (Windows).


When you view the block device mapping for your instance, you can see only the EBS volumes, not the instance store volumes.

A. Depends on the instance type
B. FALSE
C. Depends on whether you use API call
D. TRUE

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html#bdm-instance-metadata "Viewing the Instance Block Device Mapping for Instance Store Volumes: When you view the block device mapping for your instance, you can see only the EBS volumes, not the instance store volumes. You can use instance metadata to query the complete block device mapping. The base URI for all requests for instance metadata is http://169.254.169.254/latest/."


By default, EBS volumes that are created and attached to an instance at launch are deleted when that instance is terminated. You can modify this behavior by changing the value of the flag_____ to false when you launch the instance

A. DeleteOnTermination
B. RemoveOnDeletion
C. RemoveOnTermination
D. TerminateOnDeletion

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html "By default, Amazon EBS root device volumes are automatically deleted when the instance terminates. However, by default, any additional EBS volumes that you attach at launch, or any EBS volumes that you attach to an existing instance persist even after the instance terminates. This behavior is controlled by the volume's DeleteOnTermination attribute, which you can modify."


What will be the status of the snapshot until the snapshot is complete.

A. running
B. working
C. progressing
D. pending

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-creating-snapshot.html "Although you can take a snapshot of a volume while a previous snapshot of that volume is in the pending status, having multiple pending snapshots of a volume may result in reduced volume performance until the snapshots complete."


Can we attach an EBS volume to more than one EC2 instance at the same time?

A. No
B. Yes.
C. Only EC2-optimized EBS volumes.
D. Only in read mode.

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumes.html "An EBS volume can be attached to only one instance at a time within the same Availability Zone. However, multiple volumes can be attached to a single instance."


EBS Snapshots occur _____

A. Asynchronously
B. Synchronously
C. Weekly

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-creating-snapshot.html "Snapshots occur asynchronously; the point-in-time snapshot is created immediately, but the status of the snapshot is pending until the snapshot is complete (when all of the modified blocks have been transferred to Amazon S3), which can take several hours for large initial snapshots or subsequent snapshots where many blocks have changed."



Out of the stripping options available for the EBS volumes, which one has the following disadvantage :‘Doubles the amount of I/O required from the instance to EBS compared to RAID 0, because you’re mirroring all writes to a pair of volumes, limiting how much you can stripe.’ ?

A. RAID 0
B. RAID 1+0 (RAID 10)
C. RAID 1
D. RAID

Why? https://en.wikipedia.org/wiki/Standard_RAID_levels "RAID 1 consists of an exact copy (or mirror) of a set of data on two or more disks; a classic RAID 1 mirrored pair contains two disks. This configuration offers no parity, striping, or spanning of disk space across multiple disks, since the data is mirrored on all disks belonging to the array, and the array can only be as big as the smallest member disk. This layout is useful when read performance or reliability is more important than write performance or the resulting data storage capacity."


By default, when an EBS volume is attached to a Windows instance, it may show up as any drive letter on the instance. You can change the settings of the _____ Service to set the drive letters of the EBS volumes per your specifications.

A. EBSConfig
B. AMIConfig
C. Ec2Config
D. Ec2-AMIConfig

Why? http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/UsingConfig_WinAMI.html "Configuring a Windows Instance Using the EC2Config Service: Drive Letter Mapping"


In the ‘Detailed’ monitoring data available for your Amazon EBS volumes, Provisioned IOPS volumes automatically send _____ minute metrics to Amazon CloudWatch.

A. 3
B. 1
C. 5
D. 2

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch-new.html "Data is available in 1-minute periods for an additional cost."


Can I delete a snapshot of the root device of an EBS volume used by a registered AMI?

A. Only via API
B. Only via Console
C. Yes
D. No

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-deleting-snapshot.html "Note that you can't delete a snapshot of the root device of an EBS volume used by a registered AMI. You must first deregister the AMI before you can delete the snapshot."


If an Amazon EBS volume is the root device of an instance, can I detach it without stopping the instance?

A. Yes, but only if Windows instance
B. No
C. Yes
D. Yes, but only if a Linux instance

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html "If an EBS volume is the root device of an instance, you must stop the instance before you can detach the volume."


Is it possible to access your EBS snapshots?

A. Yes, through the Amazon S3 APIs.
B. Yes, through the Amazon EC2 APIs.
C. No, EBS snapshots cannot be accessed; they can only be used to create a new EBS volume.
D. EBS doesn’t provide snapshots.

Why? https://aws.amazon.com/ebs/faqs/?nc1=h_ls "Q: Will I be able to access my snapshots using the regular Amazon S3 API? No, snapshots are only available through the Amazon EC2 API."


What does Amazon EBS stand for?

A. Elastic Block Storage
B. Elastic Business Server
C. Elastic Blade Server
D. Elastic Block Store

Why? https://aws.amazon.com/ebs/ "Amazon Elastic Block Store (EBS)"


How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability Zone to another?

A. Detach the volume and attach it to another EC2 instance in the other AZ.
B. Simply create a new volume in the other AZ and specify the original volume as the source.
C. Create a snapshot of the volume, and create a new volume from the snapshot in the other AZ.
D. Detach the volume, then use the ec2-migrate-volume command to move it to another AZ.

Why? http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-copy-snapshot.html "With Amazon EBS, you can create point-in-time snapshots of volumes which we store for you in Amazon Simple Storage Service (Amazon S3). After you've created a snapshot and it has finished copying to Amazon S3 (when the snapshot status is completed), you can copy it from one AWS region to another, or within the same region. "


Provisioned IOPS Costs: you are charged for the IOPS and storage whether or not you use them in a given month.

A. FALSE
B. TRUE

Why? https://aws.amazon.com/ebs/pricing/ "You will be charged for the IOPS provisioned on a volume even when the volume is detached from an instance."

No comments:

Post a Comment