Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Amazon AWS Certified Solutions Architect Associate remix > IAM & S3 > Flashcards

IAM & S3 Flashcards

1
Q

Are credentials region centric in IAM, when created?

A

No, it is universal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Are delete markers replicated

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Are deletions (delete markers) replicated in Cross Region Replication Replication?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Are edge location read only?

A

No, you can write and it will replicate to origin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Are Edge locations writable?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Are IAM configurations global or regional?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Are lifecycle rules available only for the current version?

A

No. Lifecycle rules are also available for previous versions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Are S3 buckets by default public or private?

A

By default, all newly created buckets are private (and also all objects stored inside them)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Are the Access Key ID/Secret Access Key like a password?

A

No, you cannot use the Access Key ID/Secret Access Key to login to the AWS Console. You can use this to access AWS via the APIs and Command Line however.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Are the deletions of delete markers replicated in Region Replication Replication?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Are the deletions of individual versions replicated in Region Replication Replication?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

By default all buckets are public?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

By default, when you create a new user in the IAM console, what level of access do they have?

A

No access to any AWS service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Can be versioning on S3 disabled?

A

No. It can only be suspended

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Can Cross Region Replication be used between buckets of the same region?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Can Cross Region Replication be used to replicate to multiple buckets or use daisy chaining?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can folders in S3 be tagged?

A

No. Folders don’t really exist on S3. In Amazon S3, buckets and objects are the primary resources, where objects are stored in buckets. Amazon S3 has a flat structure with no hierarchy like you would see in a file system. However, for the sake of organizational simplicity, the Amazon S3 console supports the folder concept as a means of grouping objects. Amazon S3 does this by using a shared name prefix for objects (that is, objects that have names that begin with a common string). Object names are also referred to as key names. For example, you can create a folder in the console called photos, and store an object named myphoto.jpg in it. The object is then stored with the key name photos/myphoto.jpg, where photos/ is the prefix.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Can lifecycle policies capture versions also?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Can S3 be used to host static websites?

A

Yes (serverless, very cheap, scales automatically, no dynamic site hosting)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Can you clear data from edge cache?

A

Yes, but at a cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Can you configure multiple bucket replication?

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Can you create and customize your own password rotation policies?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Can you have two buckets with the same name?

A

No. S3 is a universal namespace and names must be globally unique

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Can you install a DB in S3?

A

No. Its object based not block based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Can you log in to the AWS web console using the Access Key Id and Secret Access Key?

A

No. You must generate a password for the user and supply the user with this password, as well as the unique link to sign in to the AWS console.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Data consistency model of Amazon S3

A

Amazon S3 buckets in all Regions provide read-after-write consistency for PUTS of new objects and eventual consistency for overwrite PUTS and DELETES.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Describe the S3 consistency model

A

Read after write consistency for PUTS of new objectsEventual consistency for overwrite PUTS and DELETES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Do I need to know the final object size in advance to use Multipart Upload?

A

No. With Multipart Upload you can begin an upload before you know the final object size - You can upload an object as you are creating it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Do objects within the bucket inherit the bucket tags?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Do you need versioning enabled to use a lifecycle policy?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Does an edge location have to be in a defined region?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Does Multipart Upload deliver improved throughput?

A

Yes. You can upload parts in parallel to improve throughput.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Does Multipart Upload deliver quick recovery from network issues?

A

Yes. Smaller part size minimizes the impact of restarting a failed upload due to a network error.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Does Multipart Upload deliver the ability to append data into an open data file?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Does Multipart Upload deliver the ability to pause and resume object uploads?

A

“Yes”. You can upload object parts over time. Once you initiate a multipart upload there is no expiry; you must explicitly complete or abort the multipart upload. Then, “pause and resume object uploads” means “pausing in between parts” (but you would need to implement this manually).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Does versioning is required for Lifecycle rules?

A

No. Lifecycle rules can be used in conjunction with versioning but is not required

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Glacier Expedited Retrievals retrieval time

A

1-5 minutes (for a flat rate of $0.03 per GB retrieved)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Groups

A

A way to group our users and apply policies to them collectively

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

How am I charged for accessing Amazon S3 through the AWS Management Console?

A

Normal Amazon S3 pricing applies when accessing the service through the AWS Management Console.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

How am I charged for using Versioning?

A

Normal Amazon S3 rates apply for every version of an object stored or requested.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

How can I delete large numbers of objects?

A

You can use Multi-Object Delete to delete large numbers of objects from Amazon S3. This feature allows you to send multiple object keys in a single request to speed up your deletes. Amazon does not charge you for using Multi-Object Delete.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

How can you audit the access to S3 resources?

A

S3 buckets can be configured to create access logs which log all requests made to the S3 bucket. This can be done to another bucket (even in another AWS account)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

How can you setup access control to a bucket?

A

Using: - Bucket policies - Access control lists

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

How do you secure S3 buckets?

A

Bucket policies and S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

How does Gateway Virtual Tape Library work?

A

Virtual tape infrastructure to replace physical tapes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

How does Volume Gateway/Cached Volumes work?

A

Entire dataset is stored on S3 and the most frequently accessed data is cached on site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

How does Volume Gateway/Stored Volumes work?

A

Entire dataset is stored on site and is asynchronously backed up to S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

How is distributed the AWS Storage Gateway software?

A

Is available for download as a VM image that you instal on a host on your datacenter (VMWare ESXi or Microsoft Hyper-V).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

How is S3 date encrypted in transit?

A

SSL/TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

How many S3 buckets can be created in an account by default?

A

100

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

How many times can you view the Access Key ID/Secret Access Key when created?

A

Once. If you lose them, you have to regenerate them, so save them in a secure location.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

How much time is needed to restore from Glacier?

A

Between 3 and 5 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

How to control access to buckets?

A

ACLbucket policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

IAM consists of:

A

Users, Groups, Roles, Policy Documents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

In what language are policy documents written in?

A

JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Is S3 object or block based storage?

A

Object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Is S3 object or block based?

A

S3 is object based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Is S3 versioning incremental?

A

No. Stores all versions of an object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Is there a hard limit of PUT/POST/DELETE per second in S3? What’s an expected “limit” for PUT/POST/DELETEs and GETs per second in S3?

A

There’s no hard limit (there was a hard limit of 100 PUTs per second until 2018). Your application can achieve at least 3,500 PUT/POST/DELETE and 5,500 GET requests per second per prefix in a bucket. There are no limits to the number of prefixes in a bucket. It is simple to increase your read or write performance exponentially. For example, if you create 10 prefixes in an Amazon S3 bucket to parallelize reads, you could scale your read performance to 55,000 read requests per second.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Objects in the distribution are cahce for the life of what?

A

TTL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

One way to copy the contents of a bucket to another?

A

Using the CLI: aws s3 –recursive s3://src s3://dst

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Policy documents are written in

A

JSON, represented by a key-value pair

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Power User access allows….

A

Access to all AWS services except for management of groups and users within IAM.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

S3 durability

A

99.999999999% (11 x 9s) (Legacy S3-RRS was 99.99%)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

S3 EC2 instances, ELB or R53 can all be what in relation to Cloudfront?

A

Origins

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

S3 min and max files size?

A

0-5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

S3 storage class for scenario requiring maximum durability and minimum cost? S3 standard, S3 One Zona-IA or S3 RRS?

A

S3 One Zona-IA. It has the same durability as S3 standard (but reduced availability) and RRS is deprecated (and more expensive).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

S3 storage class for scenario requiring minimum cost and immediate access without mattering if some objects are lost. S3 RRS, S3 IA or Glacier?

A

S3 IA. Legacy S3-RRS is the most expensive one now and is deprecated. Glacier is not intended for direct access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Scope of the S3 buckets names

A

Bucket names must be unique globally.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Should you set up MFA on your root account?

A

ALWAYS!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

Storage limit in S3

A

There is unlimited storage in S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

True or false. A new bucket is publically available and permissions are wide open.

A

false

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

True or False.Newly created buckets are private

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

True or false: You can replicate buckets in the same region

A

false

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Using SAML you can give your federated users SSO access to the AWS Management Console (true or false)

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What actions can be done with Lifecycle Rules?

A

Transition to Standard-IA Transition to One Zone-IA Archive to Glacier Permanently delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

What are Amazon S3 event notifications?

A

Amazon S3 event notifications can be sent in response to actions in Amazon S3 like PUTs, POSTs, COPYs, or DELETEs. Notification messages can be sent through either Amazon SNS, Amazon SQS, or directly to AWS Lambda.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What are IAM groups?

A

A collection of users under a set of permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

What are IAM roles?

A

IAM roles are a secure way to grant permissions to entities that you trust, such as: - IAM user in another account - Application code running on an EC2 instance that needs to perform actions on AWS resources - Etc.

80
Q

What are new users assigned when first created?

A

Access Key ID, Secret Access Key

81
Q

What are the attributes of S3 versioning?

A

Stores all versionsgreat for backupsversioning cannot be disabled, only suspendedIntegrates with lifecycle rulesMFA delete provides and additional layer of security

82
Q

What are the characteristics of cached volume gateway service?

A

caches frequently accessed data on-siteminimizes on-prem storageMax 32 TBiSCSIStored in S3

83
Q

What are the characteristics of snowball edge

A

100 TBContains compute as well as storage

84
Q

What are the characteristics of snowmobile?

A

45 foot container100 PB storage

85
Q

What are the characteristics of tape gateway

A

leverage existing tape backuppreconfigured media changer and tape drives

86
Q

What are the characteristics of the file gateway service?

A

VM deployed onsiteFiles stored as objects in S3 bucketsperms are stored in the S3 user-metadata of the objectObjects can be managed like any other S3 object

87
Q

What are the characteristics of the snowball service?

A

Disk appliance80 TB max

88
Q

What are the characteristics of the stored volume volume gateway service?

A

VM deployed onsiteOnprem virtual disk that backs up to AWSpresents an application with disk volumesISCSI block-based storageUses on-prem storagecan be synchronously backed up with snapshot and stored on EBS

89
Q

What are the core fundamentals of S3?

A

key (name)Value (data)version ID (metadata)MetadataSubresources - ACL and torrent

90
Q

What are the costs associated with S3?

A

Storage Requests Storage Management Pricing (tags) Data Transfer Pricing (on cross-region replication) Transfer Acceleration (using CloudFront)

91
Q

What are the file size limits in S3?

A

Files can be from 0 bytes to 5 TB.

92
Q

What are the five types of storage gateways?

A

File gateway (NFS)Volume gateway (iSCSI)-stored volumes-cached volumesVTL gateway (VTL)

93
Q

What are the key components of cloud front?

A

Edge locations

OriginDistributions

94
Q

What are the possible configurations on an S3 object?

A

Details: - Storage class - Server side encryption Permissions Metadata Tags

95
Q

What are the S3 object permissions?

A

OwnerAccountsPublic

96
Q

What are the S3 tiers?

A

S3 Standard

S3 - IA

S3 One Zone -IA

S3 - Intelligent Tiering

S3 - Glacier

S3 - Glacier Deep Archive

97
Q

What are the security features of a snowball?

A

256 bit encrypt.TPM ensures security and chain of custody

98
Q

What are the three types of server-side encryption at rest?

A

S3 managed keys - SS3-S3AWS Key mgmt - SSE-KMSserver-side encryption with customer-provided keys - SSE-CClient-side encryption

99
Q

What are the three types of snowballs?

A

snowballsnowball edgesnowmobile

100
Q

What are the two types of cloudfront distributions?

A

Web and RTMP

101
Q

What are the two types of volume gateways?

A

stored volumes and cached volumes

102
Q

What are the types of AWS Storage Gateway?

A

File Gateway

Volume Gateway-Stored Volumes

Volume Gateway-Cached

Volumes Gateway Virtual Tape Library (VTL)

103
Q

What are the types of distributions?

A

Web and RTMP

104
Q

What are the use cases for snowball edge

A

import/exporttemp storage or support workloads in remote sites

105
Q

What are you asked when creating a bucket?

A

Bucket name, region, etc.

106
Q

What aws service would be best for a static website?

107
Q

What can versioning integrate with to provide enhanced data protection?

A

lifecycle rules

108
Q

What can you use to secure buckets?

A

Bucket policies and ACLs

109
Q

What determines a time data will live in the edge location?

110
Q

What do I have to take into account if I plan to use S3 static website hosting with Route53?

A

The bucket name must be equals to the domain name.

111
Q

What does a CDN do?

A

It stores and delivers data to users based on geographic location to ensure reduced latency

112
Q

What does read after write consistency mean?

A

The file is available immediately after writing

113
Q

What does S3 stands for?

A

Simple Storage Service

114
Q

What encryption does S3 manage keys - SS3-S3use?

115
Q

What encryption methods are supported for “in transfer” S3 resources?

116
Q

What encryption methods are supported for the Server Side Encryption (“at rest”) of S3 resources?

A

SSE-S3 (Managed keys) SSE-KMS (Key Management Service) SSE-C (Customer Provided Keys)

117
Q

What happens whe an item is written to an edge location?

A

It is sent to the origin

118
Q

What import/export destinies/sources are supported by Snowball?

A

Import to S3 Export from S3

119
Q

What is a distribution made up of?

A

Edge locations

120
Q

What is a distribution?

A

A collection of edge locations

121
Q

What is an additional way to secure IAM for both the root login and new users alike?

A

Implement MFA (multi factor authentication) for all accounts

122
Q

What is an alternative to upload big objects to S3 apart from a single PUT?

A

The Multipart Upload API

123
Q

What is an edge location?

A

A location where content will be cached?

124
Q

What is an origin?

A

Data source, S3 bucket EC2 instance or ELB

125
Q

What is an S3 lifecycle policy?

A

A mechanism to transition data to tiered storage.

126
Q

What is AWS Storage Gateway?

A

AWS Storage Gateway is a service that connects an on-premises software appliance with cloud-based storage to provide seamless and secure integration between your on-premises IT environment and the AWS storage infrastructure in the cloud.

127
Q

What is AWS storage GW?

A

a software service connects on-prem storage to AWS cloud storage

128
Q

What is client side encryption?

A

Data is encrypted then uploaded to S3

129
Q

What is cloudfront?

A

It is a CDN content delivery network

130
Q

What is one of the formats of the S3 objects URL?

A

https://s3-[region].amazonaws.com/[bucketName]

131
Q

What is required for Cross Region Replication?

A

Versioning enabled on the source and target buckets

132
Q

What is required to enable cross region replication?

A

versioning on both sidesunique regions

133
Q

What is RTMP used for

A

media streaming

134
Q

What is S3 acceleration?

A

Leverages cloudfront edge locations to accelerate S3 uploads. Distinct URL

135
Q

What is S3 Transfer Acceleration?

A

Instead of uploading directly to your S3 bucket, you can use a distinct URL to upload directly to an Edge Location which will then transfer the file to S3

136
Q

What is s3 versoning?

A

stores all versions of an object ( including writes and deletes)

137
Q

What is snowball?

A

AMS import export service

138
Q

What is the consistency for overwrite of PUTS and deletes for S3?

A

Eventual consistency

139
Q

What is the consistency of puts for S3

A

read after write consistency

140
Q

What is the guarantee durability of S3

A

99.999999999%

141
Q

What is the HTTP PUT size limit in S3?

142
Q

What is the max size for cached volume gateway storage?

143
Q

What is the max file min file size eligible for transition?

144
Q

What is the max size of store volumes?

145
Q

What is the proper format for a s3bucket name?

A

Https://s3-region.amazonaws/bucketname

146
Q

What is the S3 availability SLA

147
Q

What is the S3 bucket url format?

A

region.amazonaws.com/bucket name

148
Q

What level of access does the root account has? (Read only, Power user, Administrator or No access)

A

Administrator access

149
Q

What S3 class is lowest cost and does not have redundancy?

A

S3 one zone - IA

150
Q

What S3 classes changes a retrieval fee?

151
Q

What serivce will provide an HTTP 200 status code and when?

A

S3 when uploading files

152
Q

What service utilizes the edge network to accelerate uploads to S3?

A

S3 transfer acceleration

153
Q

What snowball version has compute services?

A

Snowball edge

154
Q

What storage solution would you use for data archive?

155
Q

What type of in transit encryption does S3 use?

156
Q

What type of locations cache content in cloudfront

A

Edge locations

157
Q

What type of storage gateway would you use for file storage?

A

File gateway

158
Q

What type of storage gateway would you use for installing an OS?

A

Volume gateway (iSCSI)

159
Q

What types of Snowball exist?

A

Snowball Snowball Edge (with computing capabilities) Snowmobile (truck)

160
Q

What was AWS Import/Export Disk? (deprecated)

A

An Import/Export service where the customer sent his disks to AWS in order to: * Import to EBS * Import to S3 * Import to Glacier * Export from S3

161
Q

What would you use volume gateway for?

A

block based storage

162
Q

What’s an additional security measure to prevent accidental deletions of S3 objects?

A

Versioning’s MFA delete capability

163
Q

What’s the HTTP status code for a successful S3 write?

A

HTTP 200 OK

164
Q

When can an object be transferred to Glacier with Lifecycle rules?

A

30 days after IA (Standard or One Zone) or 1 day after created (if not IA)

165
Q

When can an object be transferred to IA (Standard or One Zone) with Lifecycle rules?

A

30 days after the creation date

166
Q

When editing permissions (policies and ACLs), to whom does the concept of the “Owner” refer?

A

The “Owner” refers to the identity and email address used to create the AWS account.

167
Q

When is the Root account created and what access does it have?

A

account created when first setup your AWS account. It has complete Admin access

168
Q

When performing cross region replication are delete markers replicated?

169
Q

When performing cross region replication are existing files in the bucket previous to configuration replicated?

170
Q

When users are first created, they have

A

NO permissions

171
Q

When would you use file gateway

A

flat files

172
Q

When you activate Cross Region Replication, does existing objects are replicated?

A

No. Existing objects will not be replicated. Cross-Region Replication replicates every future upload of every object to another bucket.

173
Q

Which is the URL format for S3 static website hosting?

A

http://s3-[region].amazonaws.com/bucketname

174
Q

Which storage gateway service retains 100% of all data onsite?

A

Stored volume gateway

175
Q

Will deleted individual version or delete markers be replicated?

176
Q

Will you be charged to clear objects in a cloudfront distribution?

177
Q

You delete an object in a bucket. Will that deletion marker in versioning be replicated?

178
Q

You have an S3 bucket and want to provide an additional layer of protection from accidental deletion?

A

MFA delete

179
Q

You have just setup a lifecycle policy. You notice not all files were transitioned to the next tier. Why?

A

The files creation date must be older than 30 days and the file larger than 128KB

180
Q

You manually copy over items from one bucket to another. Items at the source were publically available, but are not at the destination. Why?

A

The object is copied but not permissions.

181
Q

You need a storage gateway but have limited disk space on-prem, but need to ensure any frequently requested data is readily available. Which storage gateway should you use?

A

cached volumes

182
Q

You need to a storage gateway that will ensure all data that may be required is readily available. Which would you choose?

A

stored volumes

183
Q

You need to ensure encryption is enabled on your S3 bucket. Governance has indicated its required to capture an audit trail of all encrypts and decrypts with the key. What type of encryption would you recomend

A

AWS Key mgmt - SSE-KMS

184
Q

You need to ensure encryption is enabled on your S3 bucket. Governance has indicated its required to capture an audit trail of all encrypts and decrypts with the key. What type of encryption would you recommend

A

AWS Key mgmt - SSE-KMS

185
Q

You need to ensure encryption is enabled on your S3 bucket. You want to use an existing key What type of encryption would you recommend

A

AWS Key mgmt - SSE-KMS

186
Q

You need to ensure encryption is enabled on your S3 bucket. You want to manage the keys yourself. What type of encryption would you recommend

A

server side encryption with customer provided keys - SSE-C

187
Q

You want to ensure auditing of your buckets are enabled but are concerned the logs will take up to much space. Can the logs be redirected to another bucket?

188
Q

You’ve deleted an object in your source bucket. You observe this activity replicated to the destination bucket. You then go into versioning and delete the deletion marker. Will this change be replicated?

189
Q

You’ve enabled bucket cross-region replication. There are existing files there and you add some new files. When you check the destination, only the new files are present. Why?

A

Existing files on sources are not replicated after replication is enabled. Only new or changed files will be present at the destination

190
Q

You’ve enabled versioning. Can it be disabled?

A

No. only suspended

191
Q

You work for a major news network in Europe. They have just released a new mobile app that allows users to post their photos of newsworthy events in real time. Your organization expects this app to grow very quickly, essentially doubling its user base each month. The app uses S3 to store the images, and you are expecting sudden and sizable increases in traffic to S3 when a major news event takes place (as users will be uploading large amounts of content.) You need to keep your storage costs to a minimum, and it does not matter if some objects are lost. With these factors in mind, which storage media should you use to keep costs as low as possible?

A

S3 - One Zone-Infrequent Access

The key driver here is cost, so an awareness of cost is necessary to answer this. Full S3 is quite expensive at around $0.023 per GB for the lowest band. S3 standard IA is $0.0125 per GB, S3 One-Zone-IA is $0.01 per GB, and Legacy S3-RRS is around $0.024 per GB for the lowest band. Of the offered solutions SS3 One-Zone-IA is the cheapest suitable option. Glacier cannot be considered as it is not intended for direct access, however it comes in at around $0.004 per GB. Of course you spotted that RRS is being deprecated, and there is no such thing as S3 - Provisioned IOPS Further information: https://aws.amazon.com/s3/pricing/https://aws.amazon.com/s3/reduced-redundancy/

192
Q

You run a meme creation website that stores the original images in S3 and each meme’s meta data in DynamoDB. You need to decide upon a low-cost storage option for the memes, themselves. If a meme object is unavailable or lost, a Lambda function will automatically recreate it using the original file from S3 and the metadata from DynamoDB. Which storage solution should you use to store the non-critical, easily reproducible memes in the most cost effective way?

A

S3 - OneZone-IA is the recommended storage for when you want cheaper storage for infrequently accessed objects. It has the same durability but less availability. There can be cost implications if you use it frequently or use it for short lived storage. Glacier is cheaper, but has a long retrieval time. RRS has effectively been deprecated. It still exists but is not a service that AWS want to sell anymore. Further information: https://aws.amazon.com/s3/faqs/?nc=sn&loc=6https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html

193
Q

What is the availability of S3-OneZone-IA?

A

OneZone-IA is only stored in one Zone. While it has the same Durability, it may be less Available than normal S3 or S3-IA. Further information: https://aws.amazon.com/s3/storage-classes/?nc=sn&loc=3

194
Q

You work for a health insurance company that amasses a large number of patients’ health records. Each record will be used once when assessing a customer, and will then need to be securely stored for a period of 7 years. In some rare cases, you may need to retrieve this data within 24 hours of a claim being lodged. Given these requirements, which type of AWS storage would deliver the least expensive solution?

A

The recovery rate is a key decider. The record shortage must be; safe, durable, low cost, and the recovery can be slow. All features of Glacier. Further information: https://aws.amazon.com/s3/faqs/?nc=sn&loc=6https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html

195
Q

Which of the following options allows users to have secure access to private files located in S3? (Choose 3)

A

CloudFront Signed URLs

CloudFront Origin Access Identity

CloudFront Signed Cookies

196
Q

You work for a busy digital marketing company who currently store their data on premise. They are looking to migrate to AWS S3 and to store their data in buckets. Each bucket will be named after their individual customers, followed by a random series of letters and numbers. Once written to S3 the data is rarely changed, as it has already been sent to the end customer for them to use as they see fit. However on some occasions, customers may need certain files updated quickly, and this may be for work that has been done months or even years ago. You would need to be able to access this data immediately to make changes in that case, but you must also keep your storage costs extremely low. The data is not easily reproducible if lost. Which S3 storage class should you choose to minimise costs and to maximize retrieval times?

A

S3 - IA

he need to immediate access is an important requirement along with cost. Glacier has a long recovery time at a low cost or a shorter recovery time at a high cost, and 1Zone-IA has a lower Availability level which means that it may not be available when needed. Further information: https://aws.amazon.com/s3/storage-classes/?nc=sn&loc=3https://aws.amazon.com/blogs/aws/aws-storage-update-new-lower-cost-s3-storage-option-glacier-price-reduction/http://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html

Amazon AWS Certified Solutions Architect Associate remix (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions