Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Cloud Practitioner > S3 > Flashcards

S3 Flashcards

1
Q

What is S3?

A

Infinitely scaling storage. Allows people to store objects (files) in buckets (directories)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How must S3 buckets be named?

A

Globally unique name (across all regions and all accounts)

  1. No uppercase
  2. No underscores
  3. 3063 characters long
  4. Not an IP
  5. Must start with a lowercase letter or number
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Is S3 a global or regional service?

A

Global, but buckets are created in a region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Are S3 buckets global or regional?

A

Region level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is an S3 Object key?

A

the full path

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is an S3 Object key composed of?

A

prefix + object name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is max size of an S3 object?

A

5TB (5000GB)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What do you do if you need to upload an object that is more than 5TB?

A

Multi-part upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is S3 Object metadata?

A

List of text key / value pairs - system or user metadata

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is S3 Object Tags?

A

Unicode key / value pair - up to 10

Useful for security / lifecycle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Do all S3 Objects have a Version Id?

A

Only if versioning is enabled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the types of S3 security?

A
  1. User based
  2. Resource based
  3. Encryption
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is used based security?

A

IAM policies - which API calls should be allowed for a specific user from IAM console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the 3 types of resource based security?

A
  1. Bucket Policies
  2. Object Access Control List
  3. Bucket Access Control List
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are Bucket Policies?

A

Bucket wide rules from the S3 console - allow cross account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are Object Access Control Lists (ACL)?

A

Finer grain at object level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

When can an IAM principal access an S3 object?

A
  1. The user IAM permissions allow it OR the resource policy ALLOWS it
  2. AND there’s no explicit DENY
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Encryption S3 Security?

A

Encrypt objects in Amazon S3 using encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How to allow EC2 Instance access to an S3 bucket? (from EC2 Instance side)

A

Create EC2 Instance Role that has attached IAM permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Is there such thing as an IAM user for EC2 Instance?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How to allow IAM user from another AWS account access to S3 bucket?

A

S3 bucket policy that allows cross-account access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is an S3 bucket policy made of?

A

It is a JSON based policy with:

  1. Resources: buckets and objects
  2. Actions: Set of API to Allow or Deny
  3. Effect: Allow / Deny
  4. Principle: The account or user to apply the policy to
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What situations would you use an S3 bucket policy?

A
  1. Grant public access to the bucket
  2. Force objects to be encrypted at upload
  3. Grant access to another account (Cross Account)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

By default are S3 buckets access-able by the public?

A

No, there are settings created to prevent company data leaks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Can S3 host websites?

A

Yes it can host static websites

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What will the website url for a S3 website be?

A

.s3-website-.amazonaws.com
OR
.s3-website..amazonaws.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What does it mean if you get a 403 error when trying to access you S3 website?

A

You need to make the bucket policy allow public reads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What level is S3 versioning enabled at?

A

Bucket level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What are the advantages of versioning your buckets?

A
  1. Protect against unintended deletes (ability to restore a version)
  2. Easy roll back to previous version
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Is it best practice to version S3 buckets?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What will a file version be if it was created before versioning was enabled?

A

Will have version ‘null’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Does suspending versioning delete the previous versions?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are S3 Access Logs?

A

When a request is sent to your bucket a log of the request is sent to a logging bucket that can be analyzed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is S3 Replication (CRR)?

A

Cross Region Replication - used for compliance, lower latency access, replication across accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is S3 Replication (SRR)?

A

Same Region Replication - log aggregation, live replication between production and test accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Can you do S3 replication to a bucket in a different account?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Do you need versioning for S3 Replication?

A

Yes, in both source and destination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

For S3 Replication, is copying asynchronous?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Are objects uploaded to S3 before replication is enabled copied over to the destination bucket?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What are the S3 storage classes?

A
  1. Amazon S3 Standard - General Purpose
  2. Amazon S3 Standard-Infrequent Access (IA)
  3. Amazon S3 One Zone-Infrequent Access
  4. Amazon S3 Intelligent Tiering
  5. Amazon glacier
  6. Amazon Glacier Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is S3 durability?

A

Very high, 99.99999999999 (11 9s) of objects across multiple AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Does S3 durability change for various storage classes?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is S3 Availability?

A

Measures how readily available a service is. S3 standard has a 99.99% availability (not available 53 minutes a year)

44
Q

Does S3 Availability change for various storage classes?

A

Yes

45
Q

What is S3 Standard?

A

For general purpose. Low latency and high throughput.

46
Q

What is S3 Standard Availability?

A

99.99%

47
Q

How many concurrent facility failures can S3 standard sustain?

A

2

48
Q

What is S3 Infrequent Access (IA)

A

Suitable for data that is less frequently accessed, but requires rapid access when needed

49
Q

What is S3 Standard - Infrequent Access (IA) availability?

A

99.99%

50
Q

How many concurrent facility failures can S3 standard - Infrequent Access sustain?

A

2

51
Q

Is S3 Standard - Infrequent Access lower cost compared to Amazon S3 Standard?

A

Yes, but there is a retrieval fee

52
Q

Use cases for S3 Standard - Infrequent Access?

A

Data store for disaster recovery, backups

53
Q

What is S3 Intelligent - Tiering?

A

For when you don’t know if you should choose S3 Standard or S3 Standard - Infrequent Access. With same low latency and high throughput of S3 Standard
Moves objects between two access tiers based on changing access patterns (frequent access, infrequent access)

54
Q

What is S3 Intelligent Tiering Availability?

A

99.99%

55
Q

Is S3 Intellignet Tiering resilient?

A

Yes, resilient against events that impact an entire availability zone

56
Q

What is S3 One Zone - Infrequent Access?

A

Same as standard IA but data is stored in a single AZ.

Same low latency and high throughput performance

57
Q

What is S3 One Zone - Infrequent Access availability?

A

99.5%

58
Q

How does S3 One Zone - IA compare to S3-IA from a cost perspective?

A

Lower cost by 20%

59
Q

Use cases for S3 One Zone - IA

A

Storing secondary backup copies of on-premise data or storing data you can recreate

60
Q

What is Amazon Glacier and Glacier Deep Archive

A

Low cost object storage (in GB/month) meant for archiving / backup. Data is retained for long term (years)

61
Q

What are Amazon Glacier retrieval options?

A
  1. Expedited (1-5 minutes)
  2. Standard (3-5 hours)
  3. Bulk (5-12 hours)
62
Q

What are Amazon Glacier Deep Archive retrieval options?

A
  1. Standard (12 hours)

2. Bulk (48 hours)

63
Q

Can you move between storage classes in S3?

A

Yes and moving objects can be automated using a lifecycle configuration

64
Q

What is S3 Object Lock?

A

Adopt a WORM model, block an object version deletion for a specified amount of time

65
Q

What is Glacier Vault Lock?

A

Adopt a WORM model. Lock the policy for future edits (can no longer be changed). Helpful for compliance and data retention

66
Q

What is the WORM model?

A

Write Once Ready Many

67
Q

What is AWS’s responsibility in the Shared Responsibility Model for S3?

A
  1. Infrastructure (global security, durability, availability, sustain concurrent loss of data in two facilities)
  2. Configuration and vulnerability analysis
  3. Compliance validation
68
Q

What is your responsibility in the Shared Responsibility Model for S3?

A
  1. S3 Versioning
  2. S3 Bucket Policies
  3. S3 Replication Setup
  4. Logging and Monitoring
    5 S3 Storage Classes
  5. Data encryption at rest and in transit
69
Q

What is AWS Snow Family?

A

Highly secure portable devices to collect and process data at the edge, and migrate data into and out of AWS

70
Q

What are the devices for snow family data migration?

A
  1. Snowcone
  2. Snowball Edge
  3. Snowmoile
71
Q

What are the devices for snow family edge computing?

A
  1. Snowcone

2. Snowball Edge

72
Q

Why use data migration with AWS Snow Family?

A
  1. Limited connectivity
  2. Limited bandwidth
  3. High network cost
  4. Shared bandwidth (can’t maximize the line)
  5. Connection stability
73
Q

When should you use Snowball device?

A

When it takes more than a week to transfer over the network

74
Q

How does a Snowball device work?

A

AWS sends you a physical device in the mail, you use it to get the data, then you send it back to them

75
Q

What is Snowball edge (for data transfers)?

A

Physical data transport solution : move TBs or PBs of data in or out of AWS. Provide block storage and Amazon S-3 Compatible object storage

76
Q

How do you pay with Snowball edge (for data transfer)?

A

Pay per data transfer job

77
Q

What are the three types of snowball edge devices?

A
  1. Snowball Edge Storage Optimized
  2. Snowball Edge Compute Optimized
  3. Snowball Edge Compute Optimized with GPU
78
Q

What is Snowball Edge Storage Optimized?

A

80TB of HDD capacity for block volume and S3 compatible object storage

79
Q

What is Snowball Edge Compute Optimized?

A

42 TB of HDD capacity for block volume and S3 compatible object storage

80
Q

What is use case for Snowball Edge (for data transfers)?

A

Large data cloud migrations, disaster recovery

81
Q

What is AWS Snowcone?

A

Small, portable computing hardware, anywhere, rugged & secure, withstands harsh environments. Used for edge computing, storage, and data transfer

82
Q

Is AWS Snowcone heavy?

A

No very light

83
Q

Does AWS Snowcone come with it’s own battery and cables?

A

No

84
Q

How do you get data from AWS Snowcone to AWS?

A

Can send back to AWS offline, or connect it to internet and use AWS DataSync to send data

85
Q

What is AWS Snowmobile?

A

Literally a truck. Transfer exabytes of data (1 EB = 1,000 PB = 1,000,000 TBs). Has 100PB of capacity (use multiple in parallel). High security, temperature controlled, GPS, 24/7 video surveillance.

86
Q

When to use AWS Snowmobile?

A

When you transfer more than 10PB

87
Q

What is the usage process for Snow Family?

A
  1. Request Snowball device from the AWS console for delivery
  2. Install the snowball client / AWS OpsHub on your servers
  3. Connect the snowball to your servers and copy files using the client
  4. Ship back the device when you’re done (goes to the right AWS facility)
  5. Data will be loaded into an S3 bucket
  6. Snowball is completely wiped
88
Q

What is Edge Computing With Snow Family?

A

Process data while it’s being created on an edge location. Setup a Snowball Edge / Snowcone device to do the computing. Can be shipped back for data transfer if needed

89
Q

What are the use cases for Edge Computing with Snow Family?

A
  1. Preprocess data
  2. Machine learning at the edge
  3. Transcoding media streams
90
Q

Are there pricing discounts for AWS Snow Family?

A

Yes 1 and 3 year discounts

91
Q

What is AWS OpsHub?

A

A software you install on your computer to manage your Snow Family Device

92
Q

What can Snow Family devices run?

A

EC2 Instances and AWS Lambda functions (using AWS IoT Greengrass)

93
Q

What is AWS Storage Gateway?

A

Bridge between on-premise data and cloud data in S3. Hybrid storage system to allow on-premises to seamlessly use the AWS Cloud

94
Q

What are the types of AWS Storage Gateway?

A
  1. File Gateway
  2. Volume Gateway
  3. Tape Gateway
95
Q

Which S3 Storage Class is the most cost-effective for archiving data with no retrieval time requirement?

  1. Amazon Glacier
  2. Amazon Glacier Deep Archive
  3. Amazon S3 Standard-Infrequent Access
  4. Amazon S3 Intelligent Tiering
A

Amazon Glacier Deep Archive

96
Q

Which S3 feature should you use if you want to make sure that a policy will no longer be changed?

  1. S3 Lifecycle Rules
  2. S3 Object Lock
  3. S3 Standard - Infrequent Access (IA)
  4. S3 Glacier Vault Lock
A

S3 Glacier Vault Lock

97
Q

What hybrid AWS service is used to allow on-premises servers to seamlessly use the AWS Cloud at the storage layer?

  1. Elastic Block Store
  2. Snowball
  3. S3
  4. Storage Gateway
A

Storage Gateway

98
Q

Which of the following services is petabyte-scale data moving service (as a fleet) in or out of AWS with computing capabilities?

  1. Snowcone
  2. Snowball Edge
  3. Snowmobile
A

Snowball Edge

99
Q

Which of the following is an exabytes-scale data moving service in or out of AWS?

  1. Snowcone
  2. Snowball Edge
  3. Snowmobile
A

Snowmobile

100
Q

What are Objects NOT composed of?

  1. Key
  2. Value
  3. Access Keys
  4. Metadata
A

Access Keys

101
Q

Where are objects stored in Amazon S3?

  1. Folders
  2. Buckets
  3. Files
    Bin
A

Buckets

102
Q

A research team deployed in a location with low-internet connection would like to move 5 Tbs of data to the Cloud? Which service can it use?

  1. Storage Gateway
  2. Snowball Edge
  3. Snowcone
  4. OpsHub
A

Snowcone

103
Q

What can you use to define actions to move S3 objects between different storage classes?

  1. Scaling Policy
  2. Bucket Policy
  3. Lifecycle Rules
  4. Replication
A

Lifecycle Rules

104
Q

A non-profit organization needs to regularly transfer petabytes of data to the cloud and to have access to local computing capacity. Which service can help with this task?

  1. Snowball Edge - Storage Optimized
  2. Snowball Edge - Compute Optimized
  3. Snowcone
  4. Snowmobile
A

Snowball Edge - Storage Optimized

105
Q

Which S3 Storage Class is suitable for less frequently accessed data, but with rapid access when needed, while keeping a high durability and allowing an Availability Zone failure?

  1. Amazon S3 Standard - General Purpose
  2. Amazon Glacier
  3. Amazon S3 One-Zone-Infrequent Access
  4. Amazon S3 Standard - Infrequent Access
A

Amazon S3 Standard - Infrequent Access

AWS Cloud Practitioner (20 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions