Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Solutions Consultant > IAM & S3 > Flashcards

IAM & S3 Flashcards

1
Q

IAM

A

Identity Access Management. Allows you to manage users and their level of access to AWS console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Policies

A

Gives permissions to what a user, group, or role is able to do

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

IAM is Global or Region specific?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Most powerful policy

A

Administrator Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What account is created at first setup and has complete admin access?

A

Root Account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What permissions do users have when first created?

A

none

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

S3 acronym

A

Simple Storage Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

S3 is _______ based

A

object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

T or F: S3 consists of key value pairs

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

T or F: S3 has versioning

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Metadata

A

Data about the data you are storing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

T or F: You can store OS’s or DB’s on S3

A

F. It’s for files only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Data consistency

A

Write new file, you can see it immediately. But if you update existing file or delete, it may take some time to propagate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

S3 is global or region specific?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

6 S3 Storage Classes

A
  1. S3 Standard 2. S3 IA (Infrequently Accessed) 3. S3 One Zone IA 4. S3 Intelligent Tiering 5. S3 Glacier 6. S3 Glacier Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

S3 Standard

A

99.99% availability, 11 x 9’s for durability (you won’t lose your files)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

S3 IA

A

lower fee than S3 but you are charged retrieval fee

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

S3 One Zone IA

A

just stored in one AZ. Lower cost option for IA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

S3 Intelligent Tiering

A

optimize costs by automatically moving data to most cost effective access tier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

S3 Glacier

A

data archiving. retrieval times configurable from minutes to hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

S3 Glacier Deep Archive

A

lowest cost storage option. retrieval time 12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Cross Region Replication

A

Replicate your data files to S3 buckets across different regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

T or F: S3 uses a shared name space

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Transfer Acceleration

A

use edge locations to move files across AWS backbone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

2 things you are charged for with S3

A

GB storage, data retrievals

26
Q

T or F: You can disable versioning on an S3 bucket

A

F. Once you enable it, you can’t disable it. Although you can suspend versioning for new objects

27
Q

LifeCycle

A

automates moving objects between different storage tiers

28
Q

S3 Object Lock

A

store objects using write once, read many (WORM) model

29
Q

WORM Model (Write once, read many)

A

helps you prevent object from being deleted or modified for fixed amount of time or indefinitely. Sometimes required through regulation.

30
Q

Governance Mode

A

users can’t overwrite or delete an object version or alter its lock settings unless they have special permissions

31
Q

Compliance Mode

A

protect object version can’t be overwritten or deleted by ANY user (even root user)

32
Q

Legal Hold

A

will just stay in effect until you remove it

33
Q

Glacier Vault Lock

A

deploy and enforce compliance controls for individual S3 Glacier vaults. Once locked, policy can no longer be changed

34
Q

Prefixes

A

folders and subfolders within S3 buckets. You get better performance if you spread read requests across prefixes.

35
Q

Multipart Uploads

A

splits big files into parts. Recommended for files over 100MBs and required for files over 5GBs

36
Q

Byte Range Fetches

A

Split big files into parts for downloads from S3

37
Q

S3 Select (Glacier Select)

A

enables apps to retrieve only subset of data from an object using simple SQL expressions. Improves performance. Faster and cheaper

38
Q

AWS Organizations

A

account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. Consolidate bills across your departments

39
Q

3 Ways to share s3 buckets across accounts

A
  1. bucket policies & IAM - applies across entire bucket 2. bucket ACL’s & IAM - individual objects 3. Cross account IAM roles - programmatic and console access
40
Q

T or F: versioning is required on both source and destination buckets for cross region replication to work

A

T

41
Q

T o F: If an object that is public in one region is cross replicated to a new region, it is automatically public in the new region

A

F

42
Q

AWS Data Sync

A

sync data from on prem data center to AWS region

43
Q

Content Delivery Network (CDN) - For amazon this is CloudFront

A

deliver web content to a user based on geographic locations of the user, origin of the web content, and a content delivery server. Without CDN, your website may have latency issues

44
Q

Edge location (CloudFront)

A

location where content is cached in a CDN

45
Q

Origin (CloudFront)

A

Origin of all files that the CDN will distribute. Can be S3, EC2, ELB, etc

46
Q

distribution (CloudFront)

A

name given to CDN which consists of collection of edge locations

47
Q

TTL (Time to Live)

A

Amount of time an object will be cached at an edge location. This is configurable.

48
Q

CloudFront SignedURL

A

restrict access for individual files

49
Q

CloudFront Signed Cookies

A

restrict access for multiple files (like entire website). Ex. Netflix

50
Q

Snowball

A

data transport solution in or out of AWS. This is a big container transported by a semi truck. Once data transfer job verified, AWS performs software erasure of snowball appliance

51
Q

Storage Gateway

A

connects on prem software appliance to cloud based storage. Replicates data to AWS.

52
Q

T or F: Storage Gateways can be either a physical or virtual machine

A

T

53
Q

3 Types of Storage Gateways

A
  1. File Gateway 2. Volume Gateway - either stored volumes or cached volumes 3. Tape Gateway
54
Q

File Gateway

A

files stored as objects in S3 buckets, acces through Network File System (NFS)

55
Q

Volume Gateway

A

presents your apps with disk volumes using iSCSI block protocol. Stores virtual hard disk drives in S3. Can be stored or cached volumes

56
Q

Stored Volumes

A

store primary data locally, while also backing up that data to AWS

57
Q

Cached Volumes

A

let you use S3 as primary data storage while retaining frequently accessed data locally in your storage gateway

58
Q

Tape Gateway

A

durable, cost effective solution to archive data in AWS cloud

59
Q

Athena

A

interactive query service using standard SQL for S3. Serverless.

60
Q

Macie

A

Security service using ML and NLP to discover, classify and protect sensitive data stored in S3. Good for PCI and preventing ID theft

61
Q

How many S3 buckets can you have per account?

A

100

AWS Certified Solutions Consultant (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions