Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Cloud Practitioner > **AWS S3** > Flashcards

**AWS S3** Flashcards

Extensive TOPIC

1
Q

Amazon S3?

A

Amazon Simple Storage Service

Amazon’s system for storage data that can have an “Infinitely Scaling”

(Page 129)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are S3 Buckets and what are their main characteristics?

A

Practically, they’re Directory where ou can store files of any type (Objects).
They’re creating ove a AZ but MUST have an UNIQUE GLOBAL ID along all the AZ.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A Bucket is created in a Global Region?

A

NO, a bucket is created over a AZ but it can be accessed by all other AZ through its global unique Id.

Note: Image that you have to create an specific storage, to optimized space, it should be created on an AZ (Data Center), otherwise you could have several copies of that bucket along the world.

(Page 131)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the conventions of a Bucket’s Name?

A

+ No Space or underscores.
+ From 3 to 36 characters of name
+ Not IP
+ Must start with a lowercase letter or number.

S3://[Bucket_Name]/…

(Page 131)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Bucket’s Prefix? and how does it conform?

A

Is the full path of the resource, like a URL. It’s well known as the KEY

The prefix is conformed by:

+ The full path, after the Buket’s name,
+ The name of the file (Object)
* you must use the separator slash “/” to conform the Prefix

Sample:
s3://my-bucket/my_folder1/another_folder/my_file.txt

(Page 132)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the Max size of an Objet in a Bucket?

a) 500M
b) 5GB
c) 500GB
d) 1TB
e) 5TB

A

E, the maximus size is 5000 GB (5TB), If the object requires more space it must be uploaded using “Multi-Part Upload”

(Page 133)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What of these Entity data are part of a Bucket?
choose 3:

a) Unique ID
b Version ID
c) Tags.
d) Labels
e) Key value Pairs
f) Metadata by KVP

A

b, if versioning is enabled
c, Tags, using KVP, up to 10 Tags
f, Metadata is a list of Key-Value Pears (KVPs)

(Page 133)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the two types of Policy resources? Choose 2:

a) By User
b) By IAM
c) By AIM
d) By Object
e) By Resource
f) By file

A

b) By Identity Administrator Manager
e) S3 use Apply security policies by resources.

(Page 134)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is User Based policy?

A

It’s a Policy based on IAM users.

(Page 134)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Resource Base Policy?

A

It’s a policy focused on allowing access to resources, more widely than a User Policy.

(Page 134)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

According to their wide range, from higher to tinier. Order the three types of Resouces Base Policies:

a) Object Access Control List (ACL)
b) Bucket Access Control List (ACL)
c) Bucket Policies

A

c) Bucket Policies. It covers all the elements into the Bucket.
b) Bucket Access Control List (ACL). Grant basic permission of Read/Write to other AWS accounts. In this level you cannot choose objects.
a) Object Access Control List (ACL). Finer and can work with objects and ACL.

(Page 134)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

An IAM principal can access an S3 object if it has

a) if the resource has an IAM Policy for the IAM Principal
b) if the resource has an IAM Policy with the wildchar “*”
c) If the resources¡ has a Resource Policy with an explicitly ALLOW
f) If the resource has a Resource Policy with an explicitly DENY

A

A. is used for IAM Policies
B. is used for IAM Policies but wider
C. Is used under resource Policies.

(Page 134)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Where does S3 Bucket Policy have effect?

a) On resource
b) on Bucket
c) on IAM

A

b) On the Bucket. The resource depends of the Bucket

(Page 135)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Where does an IAM Policy have effects?

a) On Buckets
b) On Object
c) On IAMs

A

c) The IAM Policy specifies what are the services and features that the IAM user can work with.

(Page 136)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does ECS2 instance require, in a Policy, to have access to an Bucket?

a) An IAM User
b) An EC2 Instance Role
c) IAM Principal Access Policy.
e) An Bucket Policy

A

c) EC2 requieres an IAM user to work with…
b) An EC2 Instance Role.

The bucket cannot allows access directly to an EC2 instance, so you must create a
IAM User, its IAM Principal Access Policy, and an EC2 Instance Role to attach the IAM user to that Policy.

(Page 137)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Cross-Account Access – Use Bucket Policy?

A

It’s a policy that ALLOWS other AWS Accounts to access the Bucket, it doesn’t matter if the other account is part of the organization or not.

The Policy must be configured over the BUCKET.

(Page 138)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What can you do with a Bucket Policy?

a) Grant public access to the Bucket
b) Grant public access to the EC2 Instance
c) Force objects to be encrypted at upload
d) Force objects to be encrypted at download
e) Apply to a specific directory in the Bucket
f) Allow other accounts to configure the Bucket Policies.
g) Grant access to another account (Cross Account)

A

A, C and G

(Page 139)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What of these is the entity specifies the IAM Account to apply the policy?

a) Resources
b) Actions
c) Effect
d) Principal

A

D, the Principal specifies Who can apply to the policy.

(Page 139)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What of Policy setting that allows the APIS to have effect on the Resource?

a) Resources
b) Actions
c) Effect
d) Principal

A

B. Actions contains all the list of actiosn that the Policy has an effect on (Deny/Allow).

(Page 139)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

By Deafault, all the bucket are created with a Public Access Allowed

True or False?

A

False. All the Buckets are created with a public access denied.

Page (140)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

S3 can work with versioning?

A

YES, like Google Drive or another Cloud Storage

(Page 170)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What do you need to recover an object that was deleted in a a bucket?

A
  1. The object MUST be Versioning.
  2. On the Object browser, of S3, active the Versioning Viewer.
  3. Find the Objet which has the Delete Mark, on its type.
  4. Delete the Object with The Delete Mark, the object will be available again.

(Hands On)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

It’s possible to create a Web Site from a Bucket

A

Yes, you can publish your Bucket to be accessed from web, you need to set public read policies.

(Page 141)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are tha elements that comform an URL of a Bucket published as a Website

A

https://.s3-website-.amazonaws.com

(Page 141)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which of these is a valid URL of a Bucket Website?

a) http://jomt-cpp-2022-v1.s3-website-us-west-1.amazonaws.com/

b) http://jomt-cpp-2022-v1.s3.website.us-west.1.amazonaws.com/

d) http://s3-website-us-west.jomt-cpp-2022-v1.1.amazonaws.com/

A

A, the rules to create a url from a bucket are:

https://.s3-website-.amazonaws.com

(Page 141)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What Erro code you’ll receive if the Bucket has no Read Policies and it is not configured as a website

A

404, Page not found.

(Hands-on)

27
Q

What Erro code you’ll receive if the Bucket if configured as a Website but doesn’t have rights to read?

A

403, Forbidden

(Hands-on and page 141)

28
Q

How can you protect the Object’s Bucket from delete operations and, at the same time, apply rollbacks?

A

Enabling the Versioning Property on the Bucket

(Page 141)

29
Q

If a file has no versioning, what will be his versión info?

A

null

(Page 141)

30
Q

What do you need to Audit all the access on a Bucket?

A
  1. Create a new Bucket to receive the audit files. IT MUST BE on the same AZ.
  2. Enable the property to register all access, on the Buket to audit, and set the bucket, The new one that has just been created to audit, using its s3:// URL

(Hands-on)

31
Q

Versioning is necessary to run a replication Bucket?

A

YES, the Bucket that will be replicated must have Versioning configured

(page 144)

32
Q

Can Replication be performed in different regions?

A

Yes, replication can be performed in a:

Same Regional Replication (SRR)
or
Cross Regional Replication (CRR)

(Page 144)

33
Q

Must Bucket replication be with the same account?

A

No, it can be run on different IAM Accounts WITH ITS PROPER PERMISSIONS TO S3.

(Page 144)

34
Q

How does the copy run, asynchronous or synchronous?

A

asynchronous way

(page 144)

35
Q

Which replication is faster CRR or SRR?

A

SRR because it runs on the same AZ and can be used to perform a live replication.

(Page 144)

36
Q

What are the 4 General Classes of Storage Classes?

A

Standard
IA = Infrequent Access
Glacier
Tier Intelligent.

(Page 145)

37
Q

Is it possible to move storage between classes and, if it is allowed, how can be it?

A

Yes, the can be moved between classes and you need to configure the Lifecycle Configuration.

(âge 145)

38
Q

What are the 3 basic Classes for Storage?

A

Amazon S3 Standard - General Purpose
Amazon S3 Standard-Infrequent Access (IA)
Amazon S3 One Zone-Infrequent Access

(Page 145)

39
Q

What are the Glacier Subcategories for Storage Class?

A

Amazon S3 Glacier Instant Retrieval
Amazon S3 Glacier Flexible Retrieval
Amazon S3 Glacier Deep Archive

(Page 145)

40
Q

What is the most special Class of S3?

A

Amazon S3 Intelligent Tiering

(Page 145)

41
Q

What are the most important features of S3?

A

Durability and Availability.

(Page 146)

42
Q

What are the characteristics of S3 Standard - General Purpose?

A

+ Frequently access.
+ Low latency and high throughput
+ Up to two concurrent failures in the facility.
Most used for Data analytics, Gaming, content distribution, and mobile.

(Page 147)

43
Q

What are the characteristics of S3 Storage Classes – Infrequent Access?

A

+ LOWER COST, due to a lower frequency of access.
+ Rapid access at the moment of access data.

Good for: Disaster Recovery or Backups.

(Page 148)

44
Q

What is the difference between S3 Storage Classes – Infrequent Access and S3 One Zone-Infrequent Access?

A

One Zone-Infrequent Access is for only one AZ.

(Page 149)

45
Q

What are the main characteristics of Amazon S3 Glacier Storage Classes?

A

+ Cost is based on the object stored and how many times you retrieve it.
+ Pricing: price for storage + object retrieval cost.

(Page 149)

46
Q

What is the time of retrieving objects in each of the Glacier Classes?

A

+ Instant Retrieval: The Faster of them. In order of Milliseconds.
+ flexible Retrieval: Objects are retrieved within a window of 12 hours as maximum. So you can configure it as: Expedit (1-5 minutes), Standard (3-5 hours), and Bulk (5 to 12 hours)
+ Deep Archive. The slowest of the three. It took from 12 to 48 hours.

(page 149)

47
Q

What is the Minimum Storage Duration Time for objects in each of the Glacier Classes?

A

+ Instant and Flexible Retrieval: 90 days.
+ Deep Archive. 180 day.

It means that you have to pass this minimum time to access the object.

(page 149)

48
Q

What is the minimum Storage Duration for IA?

A

30 days

(Page 151)

49
Q

In how many zones is stored the object, as a minimum?

A

3, except for One-AZ that works with just ONE AZ.

(Page 151)

50
Q

How works S3 Intelligent-Tiering?

A

+ Perform a small monthly monitoring and auto-tiering fee.
+ Moves objects automatically between Access Tiers based on usage
+ There are no retrieval charges in S3
Intelligent-Tiering

According to the Tier (Standard, Glacier or IA), the properties of the tier is changed at the moment to be moved by the S3 Intelligent - Tiering.

(Page 150)

51
Q

What is WORM?

A

Write Once Read Many

It’s the model adopted in Glacery Storage or Lock Model.

It means, you create and store it and the object/Version will be locked in a specific amount of time.

(Page 153)

52
Q

What are the different types of encryption in S3?

A
  1. No-Encryption. the File is uploaded stored in S3 without any kind of encryption.
  2. Server-Side Encryption. AWS S3 encrypts the File once the file is uploaded in S3.
  3. Client-Side Encryption. The files is uploaded from the Client’s side before it is uploaded, so AWS S3 has no way to decrypt it.

(Page 154)

53
Q

What is the Shared responsibility of AWS S3 and the Customer?

A

AWS: Availability, durability, security.
Customer: Versioning, Policies, Backups/replications, Storage Classes, Data Encryption… In a few words, The Manage of the S3.

(Page 155)

54
Q

What is AWS Snow Family

A

Physical devices to import/export data where communication conditions are not enough to transfer the data through the network.

(Page 156)

55
Q

What are the three types of AWS Snow Family

A

AWS Snowcone, the smaller.
AWS Snowball, the medium size
AWS Snowmobile, the largest that imply Truck(s)

(Page 156)

56
Q

In the AWS Snow family, what are the two models of computing Edge?

A

AWS Snowcone
AWS Snowball edge.

(Page 156)

57
Q

in AWS Snow Family, what are the three types of data migration:

A
  1. AWS Snowball Edge (For data transfer and computing)
  2. AWS Snowcone (Data Transfer)
  3. AWS Snowmobile (Data transfer on a Fleet)

(Page 156)

58
Q

What is the capability of an AWS Snowball?

A

There are two:

AWS Snowball Edge Storage Optimized: 80 TB
AWS Snowball Edge Computed: 42 TB

All of them are HDD.

(Page 159)

59
Q

What is the capability of an AWS Snowcone?

A

8 TB, it’s the lighter of the Snow Family.
Only for Data transfer.

(Page 160)

60
Q

What is the capability of an AWS Snowmobile?

A

+ Transfer exabytes of data (1 EB = 1,000 PB = 1,000,000 TBs)
+ Each Snowmobile has 100 PB of capacity.

Better for DATA >10PB

(Page 161)

61
Q

What are the three Storage types that AWS provides?

A

Block:: For EBS and EC2
File System: For EFS
Object: For AWS S3 and Glacier

(Page 168)

62
Q

What is AWS Storage Gateway?

A

Is a service that leverages your company to have hybrid cloud storage in a premise environment. Allowing sharing AWS Storage and the File System of your organization.

(Page 169)

63
Q

What is OpsHub?

A

A Desktop application to monitoring AWS Snow Family devices

(Page 170)

AWS Cloud Practitioner (17 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions