Study guides
Explanations of the topics exams test most, each with practice questions to check yourself.
Amazon S3 storage classes and lifecycle rulesHow S3 storage classes, Intelligent-Tiering and lifecycle rules work, with the retrieval fees and minimum durations that AWS exam questions turn on.
AWS disaster recovery strategies, RTO and RPOBackup and restore, pilot light, warm standby and active/active on AWS, how RTO and RPO pick between them, and the services each strategy uses.
Azure RBAC vs Azure Policy vs Entra roles vs resource locksHow Azure RBAC, Azure Policy, Microsoft Entra roles and resource locks differ, how scope inheritance works, and when deny beats audit.
Azure Storage redundancy - LRS, ZRS, GRS, GZRS and failoverHow LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS differ, what failover does to your account, and how access tiers interact with redundancy.
GCP IAM roles, service accounts and keyless accessBasic, predefined and custom roles in Google Cloud IAM, how grants inherit down the hierarchy, and how to use service accounts without keys.
IAM users, roles and policies on AWSHow IAM users, roles, identity-based and resource-based policies, cross-account access, SCPs and permissions boundaries fit together for AWS exams.
Kubernetes NetworkPolicy, explained for CKA, CKAD and CKSHow NetworkPolicy isolation works, why policies only add allows, the namespaceSelector AND/OR trap, DNS egress, and what your CNI has to support.
Kubernetes Service types, Ingress and Gateway APIClusterIP, NodePort, LoadBalancer, ExternalName and headless Services, how selectors build endpoints, and how to debug a Service for CKA and CKAD.
Prompt engineering vs RAG vs fine-tuningWhen to use prompt engineering, retrieval-augmented generation, fine-tuning or continued pre-training, compared on cost, freshness, hallucination and privacy.
SQS vs SNS vs EventBridge on AWSWhen to use an SQS queue, an SNS topic or an EventBridge bus, plus fan-out, FIFO ordering, visibility timeouts and dead-letter queues for AWS exams.
The AWS shared responsibility model explainedWhat AWS secures and what you secure on EC2, RDS, Lambda and S3, how the line moves with each service, and how Cloud Practitioner questions test it.
VPC endpoints vs NAT gateways on AWSWhen to use gateway endpoints, interface endpoints (PrivateLink) or a NAT gateway for private subnets, and the cost and security trade-offs exams test.