Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Certified Developer - Associate > 2 - Storage > Flashcards

2 - Storage Flashcards

1
Q

What is the DNS name for S3?

A

https://bucket.s3-region.amazonaws.com/object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the consistency model for S3?

A

Read after write for PUTS of new objects

Eventual consistency for overwrite PUTs and DELETEs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What do objects in S3 consist of?

A

Key, value, version ID, metadata, and sub-resources

Sub-resources include bucket policies, ACLs, CORS configurations, and transfer acceleration configurations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is CORS and why is it needed for S3?

A

By default, the client prevents scripts in one bucket from accessing resources in another

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the S3 storage classes?

A

Standard

Infrequently Accessed

One zone - Infrequently Accessed

Glacier

Reduced Redundancy Storage

(intelligent tiering)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

In practical terms, how durable is S3?

A

Standard, Standard-IA, and Glacier are designed to withstand the loss of an AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the Standard S3 storage class?

A

11 9’s durability, 99.99% availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the Standard-IA S3 storage class?

A

11 9’s durability, 99.9% availability, request fee

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the One Zone - IA S3 storage class?

A

11 9’s durability, 99.5% availability, request fee, won’t withstand AZ loss

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the Glacier S3 storage class?

A

11 9’s durability 99.99% availability, no real-time access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the RRS S3 storage class?

A

99.99% durability, 99.99% availability, not reccomended

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How does intelligent tiering?

A

It automatically moves objects between two tiers: frequent and infrequent. It remains 11 9’s durability and 99.9% availability but has a small monthly cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the ways of managing security in S3?

A

ACLs, bucket policies and public access settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are ACLs?

A

Settings applied at the bucket and object level to control access to accounts, the public, and the log service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are bucket policies?

A

IAM based policies that provide further control over the bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are public access settings?

A

A feature that prevents accidentally making S3 buckets/objects public by blocking ACL changes that would have this effect

17
Q

How are S3 buckets monitored?

A

Server access logging - requests logged in another bucket

CloudTrail logs API calls

18
Q

What basic types of encryption does S3 support?

A

Client-side, server-side and in-transit

19
Q

How does server-side encryption with S3 work?

A

SSE-S3 - each object has its own key the keys are encrypted by AWS’ master key which they rotate

SSE-KMS - keys are managed for you with KMS, this uses an envelope key

SSE-C - uses KMS but you provide the key

20
Q

How can server-side encryption be enforced?

A

Set a bucket policy which denies PUT requests that don’t have the x-amz-server-side-encryption header.

21
Q

What does CloudFront consist of?

A

Distributions (web or RMTP) which are a group of edge locations that serve content from an origin

22
Q

In the context of CloudFront, how do origins work?

A

They can be on-premises, EC2, ELB or Route53 but are generally just S3 buckets

A single distribution can have multiple distributions by setting a precedence

23
Q

Can CloudFront be used for uploads?

A

Absolutely. In fact, it is used behind the scenes for S3 acceleration

24
Q

How can S3 performance be optimised?

A

For GET heavy workloads, use CloudFront

For mixed request workloads, the previous advice was to avoid sequential key names but this is no longer necessary

25
Q

When should multiple-part uploads be used?

A

They should be used for objects larger than 100MB, and must be used for objects larger than 5GB

26
Q

What values should be used for x-amz-server-side-encryption?

A

AES256 for SSE-S3 or aws:kms for SSE-KMS

27
Q

How can CloudFront objects be protected?

A

Using signed URLs, signed cookies or whitelisting/blacklisting countries

28
Q

What is Storage Gateway?

A

A service to connect on-premises systems to cloud storage

29
Q

What kinds of gateway does Storage Gateway support?

A

Tape Gateway - uses VTL to store data on S3

File Gateway - provides object based storage on S3 using SMB or NFS

Volume Gateway - uses iSCSI to provide block-based storage. Can operate in two modes:

  • Cached - the full volume is stored on S3, and the most recently access data is cached locally
  • Stored: the entire volume is available locally, and asynchronously replicated to S3

Certified Developer - Associate (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions