Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

IAM > Chap 1-3 > Flashcards

Chap 1-3 Flashcards

1
Q

Difference between an AZ and Regions

A

AZs are just DCs full of servers, load balancers etc while a Region is a geographical area - each region consists of 2 or more AZs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Edge Locations

A
  1. Endpoints for AWS which are used for caching content
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Edge Locations vs Regions

A

there are many more edge locations compared to Regions (150) - review this

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Region

A

physical location in the world which consists of 2 or more AZs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

AZ

A

one or more discrete DCs, each with redundant power, networking and connectivity, housed in separate facilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Edge location consists of

A

CloudFront, amazon’s CDN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

AWS offers 3 support plans

A

Basic
Developer
Business

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

AWS Basic plan

A
  1. Free
  2. Self service access to forums and resources
  3. Best practice checks to help improve security and performance
  4. Access to health status and notifications
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

AWS Developer Plan

A
  1. 29/month
  2. Early adoption, testing and development
  3. 1 primary contact can open an unlimited number of support cases
  4. 12 hour response time for non prod systems
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

AWS Business Plan

A
  1. 100/month
  2. For prod workloads & business critical dependencies
  3. 24/7 chat, phone and email access to AWS Support
  4. Unlimited contacts can open an unlimited number of support cases
  5. 1-hour response time for production systems
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Root account

A

is the user account that you used for creating the account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Root account God mode

A

Administrator access policy (most powerful resource)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

IAM is applied at the ? level

A

global (not specific to region)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

2 Access types to AWS

A
  1. Programmatic

2. AWS Management Console Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Programmatic access

A

Enables an access key ID and secret access key for the AWS API, CLI, SDK and other development tools.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

AWS Management Console access

A

Enables a password that allows users to sign-in to the AWS Management console

17
Q

Roles

A

way for one AWS service to use another AWS service

18
Q

What are the permissions of new users when first created?

A

none

19
Q

What are assigned to new users when first created?

A

access key id and secret access keys

20
Q

Access key id and secret access keys are used to access?

A

AWS via the APIs and Command Line

21
Q

What happens if you lose your access key id and secret access keys?

A

Regenerate

22
Q

Always setup ? on your root account so that it will be secured

A

MFA

23
Q

IAM allows you to ? for password protection

A

Create and customise your own password rotation policies

24
Q

IAM consists of the following:

A
  1. Users
  2. Groups
  3. Roles
  4. Policies
25
Q

What is IAM

A

Identity Access Management - allows you to manage users and their level of access to the AWS console

26
Q

IAM - USERS

A

end users such as people, employees of an org

27
Q

IAM - GROUP

A

collection of users; each user in the group will inherit the permissions of the group

28
Q

IAM - POLICIES

A

made up document called policy documents in JSON format and they give permissions as to what a user/group/role is able to do

29
Q

IAM - ROLES

A

roles are assigned to AWS resources so that they can communicate with each other

30
Q

Power User

A

Provides full access to AWS services and resources, but does not allow management of Users and groups.

31
Q

SAML

A

Security Assertion Markup Language

32
Q

SAML gives your federated users?

A

SSO access to the Management Console

33
Q

Amazon recommends that you leave all security groups in web facing subnets open on port 22 to 0.0.0.0/0 CIDR (Classless Inter-Domain Routing) - TRUE OR FALSE

A

False

34
Q

VPC spans

A

all the AZ in the Region

35
Q

Each subnet must

A

reside in one AZ and cannot span AZs

IAM (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions