Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

A Cloud Guru - AWS > AIAM > Flashcards

AIAM Flashcards

1
Q

What is AWS Directory Service?

A

It has a list of services which allows you to connect AWS resources with on-premise Microsoft Active Directory.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Active Directory?

A

On-premise Microsoft Directory Service which contains list of Users, Groups, Computers & Group Policy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is LDAP?

A

Lightweight Directory Access protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

List of AWS Directory Service?

A

AWS Managed Microsoft AD
Simple AD
AD Connector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is AWS Managed Microsoft AD?

A

This provide AD Domain Controller running on Windows Servers for Each AZ.
These controllers are reachable by your application on VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Default no of Domain controller available for AWS Managed Microsoft AD?

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is AD Trust?

A

Extend existing AD to on-premises using AD Trust.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is Simple AD?

A

Simple AD is a standalone directory in cloud to support Windows workloads that need basic AD features.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which is perfect candidate for Simple AD implementation?

A

Linux workloads that need LDAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Managed AD vs Simple AD?

A

Simple AD does not support AD Trust.

Managed AD support AD Trust.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is AD Connector?

A

AD Connector is a directory gateway/proxy for your on premises directory with AWS Services.
On premises users can log in AWS using AD Connector.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Cloud Directory?

A

Directory based store for developers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is AWS Cognito User Pools?

A

Managed user directory for SAAS application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the list of AD Compatible services?

A

AWS Managed Microsoft AD
Simple AD
AD Connector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Non AD Compatible?

A

Cloud Directory

Cognito user pools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is ARN?

A

Amazon Resource Name is used to identify any resource in AWS

17
Q

ARN format?

A

“Begins with: arn : partition : service : region : account_id
End with: resource or resource_type or resource_type/resource or resource_type/resource/qualifier”

18
Q

What is inline policy?

A

Inline policy scope is limited to specific role; you cant assign inline policy to other role.

19
Q

What is AWS Resource Access Manager?

A

AWS RAM allows you to create resources centrally & allows resource sharing to other accounts.

20
Q

What is SAML?

A

Security Assertion Markup Language

21
Q

AWS responsibility for AWS managed Microsoft AD?

A

Multi AZ Deployment
Patch Monitor & recovery
Software update
backup & restore

22
Q

Customer responsibility for AWS managed Microsoft AD?

A 
User ,Group & GPO
Standard AD Tools
AD Trust
Scale out Domain Controller
AD Trust
Certificate
Federation
23
Q

Simple AD Sizes?

A

Small -500 & Large -5000

24
Q

Can you connect Simple AD with on-premise AD?

A

No

25
Q

List of policy types?

A

identity policy

resource policy

26
Q

identity policy?

A

Attached to IAM user, group & role; This policy let you specify what an identity can do.

27
Q

resource policy?

A

It is attached to an resource; you can specify who has access to resource & what actions they can perform.

28
Q

AWS Single Sign on?

A

SSO service helps centrally managed access to aws accounts & business applications.

29
Q

Does simple AD support AD Trust?

A

NO

30
Q

IAM policy structure?

A

Effect/Action/Resource

31
Q

Policy Evaluation Logic?

A

Denay policy take president than Allow policy

32
Q

AWS Managed policy?

A

Created by AWS

33
Q

Customer Managed policy?

A

Created by users

34
Q

Permission boundary?

A

It control maximum permission an IAM policy can grant.

35
Q

Types of resource you can share in RAM?

A 
App Mesh
Aurora
Code Build
EC2
EC2 Image Builder
License manager
Resource Group
Route 53

A Cloud Guru - AWS (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions