Yoobee College AWS Infrastructure & Virtualization (CCC601)

Comprehensive practice flashcards covering architecture design, subnet routing, security group rules, compute and database sizing, pricing models, and monitoring configurations for the Yoobee College AWS cloud migration.

What five on-premises systems are targeted for cloud migration in the Yoobee College CCC601 proposal?

Two Learning Management System (LMS) servers, two Faculty Application servers, and one Student Database.

How does the proposed architecture distribute the LMS and Faculty web application tiers to ensure high availability?

It distributes the LMS and faculty web application tiers across two Availability Zones (AZ-a and AZ-b), deploying separate Application Load Balancer (ALB) target groups for each workload.

What AWS service and deployment model replaces the on-premises Student Database, and can its standby instance serve read traffic?

An Amazon RDS for PostgreSQL Multi-AZ DB deployment; its synchronous standby instance in the secondary zone does not serve read traffic.

According to the EC2 pricing evaluation, what is the suitability of the On-Demand pricing model for Yoobee College?

Initial deployment, faculty burst capacity, and scaling above the measured baseline.

What advertised discount do Standard Reserved Instances offer, and why cannot EC2 RIs be applied to the Student Database?

Standard RIs advertise up to a $72\%$ discount; EC2 RIs cannot be applied because the Student Database runs on managed Amazon RDS, which requires separate database reservation purchasing.

Why are EC2 Spot Instances excluded from the initial live LMS and student-transaction path?

Spot Instances can be interrupted by AWS when spare capacity is reclaimed; they are only suitable for independently restartable, non-critical jobs.

What is the primary difference in operational purpose between the proposed $75\%$ Auto Scaling target and the $80\%$ CloudWatch alarm?

The $75\%$ CPU target regulates horizontal Auto Scaling capacity dynamically, whereas the $80\%$ CloudWatch alarm notifies operations personnel via SNS of sustained, high resource utilization.

What CIDR block and subnet tiers form the foundation of the proposed Virtual Private Cloud (VPC)?

A VPC CIDR of 10.0.0.0/16 partitioned into three distinct tiers across two Availability Zones: Public subnets, Private Application subnets, and Private Database subnets.

What are the CIDR blocks and designated roles for Public Subnet A and Public Subnet B?

Public A (10.0.1.0/24) hosts the ALB node and NAT gateway in AZ-a; Public B (10.0.2.0/24) hosts the ALB node and NAT gateway in AZ-b; both route internet-bound traffic to the Internet Gateway.

What routing configuration is established for Database Subnet A (10.0.21.0/24) and Database Subnet B (10.0.22.0/24)?

Local VPC routing only, with no proposed default internet route.

How do private instances in Application Subnet A (10.0.11.0/24) route outbound internet traffic?

Through local VPC routing with an outbound default route pointing to NAT Gateway A in Public Subnet A.

Which operating systems and initial instance types are proposed for the LMS and Faculty Application compute tiers?

Amazon Linux 2023 for LMS nodes and Windows Server 2022 for Faculty Application nodes, both starting on t3.medium instances.

What explicit bucket policy restriction is mandated for yoobee-academic-storage-bucket?

An explicit Deny statement for requests where aws:SecureTransport is false, ensuring all unencrypted HTTP traffic is rejected.

What inbound rules are configured on the Application Load Balancer security group?

Port 443/TCP for HTTPS and port 80/TCP strictly for HTTP-to-HTTPS redirect, permitted from 0.0.0.0/0 for public IPv4 access.

Why was RDP (Port 3389) removed from the ALB security group forwarding rules?

RDP is an administrative management protocol, not an HTTP/HTTPS web application protocol to be routed by an Application Load Balancer.

What inbound source and port are permitted by the RDS database security group?

Port 5432/TCP (PostgreSQL) sourced strictly from application security groups requiring student-data access, with no internet source range permitted.

What specific CloudWatch configuration is defined for the EC2 CPU utilization alarm?

Metric AWS/EC2 CPUUtilization, Average statistic, strictly greater than $80\%$ threshold, 5-minute period, 2 evaluation periods, and 2 datapoints to trigger an ALARM state.

Which log paths are targeted for collection by the CloudWatch agent on the Linux and Windows instances?

/var/log/httpd/access_log for Linux (when Apache is deployed) and designated Windows Event Logs for Windows Server.

What utilization metric is cited in the report as a candidate trigger to investigate right-sizing an EC2 instance from t3.large to t3.medium?

Average CPU and resource utilization consistently remaining below $30\%$.

What correction does the report highlight regarding access to AWS Trusted Advisor cost checks?

Comprehensive Trusted Advisor cost checks require an eligible paid AWS Support plan and are not fully accessible under Basic Support or AWS Free Tier.