Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

2019 - AWS CSAA - MINE > IAM & S3 > Flashcards

IAM & S3 Flashcards

1
Q

What are the components that makeup IAM?

A

Users

Groups

Policies

Roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a group in IAM?

A

A collection of users. Each user inherits the permission of the group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a policy in IAM?

A

Policies are made up of documents called policy documents and are formatted in JSON. They give permissions to what a user, group ,role can do

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a role in IAM?

A

You can create roles and assign to AWS resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a role used for?

A

Allow an AWS resource access to another resource or service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What permissions do users have when first created?

A

None

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are new users assigned when created?

A

Access Key ID

Secret access Keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can you use access key and secret access keys to login to the AWS console?

A

No, they are used with APIs to provide programmatic access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How many time can you view the access key ID and secret access keys

A

Once when created

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How can you better secure IAM

A

Use MFA for root create and customize password rotation policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Is S3 object-based or block-based?

A

Object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the size ranges for S3?

A

0-5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Can you have two buckets with the same name?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the S3 URL format?

A

region.amazonaws.com/bucket name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Is S3 suitable for an OS or DB?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the status code for a successful put?

A

HTTP 200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How can you protect against accidental deletion?

A

MFA delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the S3 fundamentals

A

Key Value

Version

Metadata

Subresources -

ACL

Torrents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Describe the S3 consistency model

A

Read after writer for puts of new and eventual consistency for overwrite PUTS and DELETES

20
Q

What are the S3 tiers

A

S3 standard

S3 -IA

S3 - One Zone - IA

S3 - Intelligent Tiering

S3 Glacier

S3 - Deep Archive

21
Q

What can you use to better control access to buckets?

A

ACL or bucket policies

22
Q

True or false - Buckets are public when created?

A

False - They are private

23
Q

You need to track access to the bucket and all files for security purposes. How can you do that?

A

Enable access logging.

24
Q

What encryption options are available with data in transit?

A

SSL/TLS

25
Q

What encryption options are available with data at rest?

A

S3 - Managed keys - SSE-S3

AWS Key mgmt Service, managed keys - SSE-KMS

Server side Encryption with customer provided keys - SSE-C

Client side

26
Q

How does versioning store objects?

A

Stores all versions, including writes even if you delete

27
Q

Can S3 versioning be disabled?

A

No, it can only be suspended

28
Q

What feature of S3 can help automate object movement between storage tiers?

A

Lifecycle management

29
Q

What is required to enable cross-region replication?

A

Versioning on source and destination, regions must be unique

30
Q

Will existing files be replicated when cross-region replication is turned on?

A

No. All new files will be

31
Q

What is not replicated with CRR?

A

existing files put before replication was turned on and delete markers, deleted individual versions or delete markers

32
Q

What does CloudFront use to cache content to provide fast delivery?

A

Edge location

33
Q

What are the components of CloudFront?

A

Origin, Edge location, distribution

34
Q

What are the types of Origins?

A

S3 bucket,

EC2,

ELB,

R53

35
Q

What is a CF distribution?

A

Name of CDN which is made up of Edge locations

36
Q

What are the types of distributions?

A

Web - for websites RTMP - media streaming

37
Q

Are edge location RO?

A

No

38
Q

How are objects cached?

A

TTL value

39
Q

Is there a cost to invalidate a cached object?

A

Yes

40
Q

What is snowball used for?

A

To mass load import data to S3 or export

41
Q

What are the types of storage GW’s?

A

File GW

Volume GW - Stored volumes

Cached GW VTL

42
Q

What is AWS Storage Gateway?

A

It is a virtual appliance that can be used to cache S3 locally at a customer’s site.

43
Q

When should you use multi-part upload?

A

If you’re uploading large objects over a stable high-bandwidth network, use multipart uploading to maximize the use of your available bandwidth by uploading object parts in parallel for multi-threaded performance. If you’re uploading over a spotty network, use multipart uploading to increase resiliency to network errors by avoiding upload restarts. When using multipart uploading, you need to retry uploading only parts that are interrupted during the upload. You don’t need to restart uploading your object from the beginning.

44
Q

What is the maximum and minimum object sizes when using multipart upload?

A

5 MB to 5 TB

45
Q

When should you use pre-signed URLs?

A

The pre-signed URLs are useful if you want your user/customer to be able to upload a specific object to your bucket, but you don’t require them to have AWS security credentials or permissions.

46
Q

What is file gateway?

A

File Gateway is a configuration of the AWS Storage Gateway service that provides your applications a file interface to seamlessly store files as objects in Amazon S3, and access them using industry standard file protocols.

2019 - AWS CSAA - MINE (9 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions