AWS Exam Flashcards
Exam
What is the AWS Snowball Edge?
a 100TB data transfer device, used to move large amounts of data into and out of AWS as a temporary storage tier with compute capacity.
What is the AWS Snowmmobile?
an exabyte scale data transfer service used to move extremely large amounts of data to AWS. Up to 100 PB in a 45 foot long ruggedized shipping container pulled by a semi truck. Secure, fast, effective.
Can snowball import to and export from S3?
Yes
If you want to move large quantities of data in or out of S3, what is the best way?
AWS Snowball/Snowmobile
What does the storage gateway do?
Connects an on-premises appliance with AWS cloud based storage
Name the three different types of storage gateways
- File Gateway (NFS)
- Volume Gateway (iSCSI) for stored volumes and cached volumes
- Tape Gateway (VTL)
IAM (Identity Access Management) consists of what?
- Users
- Groups
- Roles
- Policies
What programming language are IAM policies using?
JSON
What permissions do new users have by default?
None
Does IAM apply to regions, or is it global?
Global
What are new users assigned upon creation?
Access Key ID & Secret Access Keys
What is the first thing you should do when you access AWS with your root account?
Setup Multifactor Authentication
S3 is block based or object based?
Object based
What is the maximum file size in S3?
0 to 5 TB
Where are files stored in S3?
Buckets
Can you use S3 to install an OS or Database on?
No
By default, all new buckets are…
Private
a Key is? (S3)
Name of the object
a Value is? (S3)
Data, sequence of bytes
When is Version ID used?
When versioning is activated
Metadata is?
Data about the data your are storing
Name 2 subresources (S3)
- ACL
- Torrent
S3 consistency model
- Read after write consistency for PUTS of new objects
- Eventual consistency for overwrite PUTS or DELETES (takes time to propagate)
S3 Standard storage
Standard storage, 99.99% availability, 11 9s durability, redundant across multiple devices and facilities. Can sustain 2 facilities loss concurrently
S3 IA storage
Infrequently accessed data. Retrieval fee charged.
S3 One Zone IA
Same as S3 IA, only one availability zone
S3 Intelligent Tiering
Moves data to the most cost effective access tier
S3 Glacier
Data archiving. Retrieval times configurable from minutes to hours
S3 Glacier Deep Archive
Data archiving. Retrieval times around 12 hours
Encryption in transit is achieved by…
SSL/TLS
Encryption at rest is achieved by…
- S3 Managed Keys (SSE S3)
- AWS KMS (SSE KMS)
- Customer provided keys (SSE C)
- Client side encryption
Cross region replication requirements
- Versioning enabled
- Regions must be unique
Are files in an existing bucket replicated automatically when replication is activated?
No, only new files added after activation
Are delete markers, individual versions replicated in CRR?
No
How many S3 buckets per account by default?
100
