Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Solutions Architect > S3 > Flashcards

S3 Flashcards

1
Q

True or False: Buckets must have globally unique names

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or False: Buckets are created globally

A

False. Buckets are created by region. The console may make it seem as though it is global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the key in an s3 object?

A

The key is the full path, starting after the bucket name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What must you use if your object is more than 5GB?

A

Multi-part upload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What must be required for an IAM principal to access an S3 object?

A

They must have an IAM permission ALLOW OR the resource policy ALLOWS it AND there’s no explicit deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

True or False: By default, all buckets are public?

A

False. By default, all S3 resources are private. Only the resource owner can access it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

True or False: It is best practice to disable ACLs unless for specific circumstances?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is CRR and SRR replication?

A

Same region replication & cross region replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What must you do for Cross-Region Replication and Same-Region Replication to be enabled?

A

Must enable versioning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

If you want to replicate existing objects, what must you use?

A

S3 Batch Replication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the minimum storage duration for S3 Glacier?

A

90 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the 3 tiers of S3 Glacier Flexible Retrieval?

A

Expedited (1 to 5 minutes), Standard (3 to 5 hours), Bulk (5 to 12 hours)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Why would you choose a storage class of Glacier over Standard?

A

Standard is when you need frequently accessed objects. The cost per month of storage is more, but the access costs are less for Standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

You have a 25 GB file that you’re trying to upload to S3 but you’re getting errors. What is a possible solution for this?

A

Use Multi-Part upload when files are greater than 5GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

You have enabled versioning in your S3 bucket which already contains a lot of files. Which version will the existing files have?

A

Null. Versioning does not exists on previous objects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

You have updated an S3 bucket policy to allow IAM users to read/write files in the S3 bucket, but one of the users complain that he can’t perform a PutObject API call. What is a possible cause for this?

A

The IAM user has an explicit deny in the attached IAM policy. Explicit DENY take precedence over the bucket policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You want the content of an S3 bucket to be fully available in different AWS Regions. That will help your team perform data analysis at the lowest latency and cost possible. What S3 feature should you use?

A

Cross Region Replication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why would you choose Standard IA storage class over S3 Glacier Instant Access?

A

Standard IA are for objects that may still need to be accessed more frequently than a Glacier Instant Retrieval

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is requester pay?

A

The requester to the S3 bucket resources pays instead of the owner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is S3 transfer acceleration?

A

The file transfer goes to an Edge location first before being sent to S3 bucket. This increases speed as Edge location to bucket is faster than standard network delivery by utilizing CloudFront edge locations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is S3 transfer acceleration?

A

The file transfer goes to an Edge location first before being sent to S3 bucket. It utilizes the CloudFront distribution network for faster upload times over optimized network paths

21
Q

If we want to specify parts of data to retrieve on our bucket objects, what can we use?

A

S3 Select. We can use SQL commands to filter the contents of S3 Objects that we would like to retrieve

22
Q

You have an S3 bucket that has S3 Versioning enabled. This S3 bucket has a lot of objects, and you would like to remove old object versions to reduce costs. What’s the best approach to automate the deletion of these old object versions?

A

S3 Lifecycle Rules - Expiration Actions

23
Q

How can you automate the transition of S3 objects between their different tiers?

A

S3 Lifecycle Rules

24
Q

You are looking to get recommendations for S3 Lifecycle Rules. How can you analyze the optimal number of days to move objects between different storage tiers?

A

S3 Analytics Storage Class Analysis

25
Q

When would you use Byte Range Fetch vs S3 Select?

A

Byte Range Fetch will grab specifically the byte range given, whereas S3 Select is more for extracting data from an object given certain conditions

26
Q

You have a large dataset stored on-premises that you want to upload to the S3 bucket. The dataset is divided into 10 GB files. You have good bandwidth but your Internet connection isn’t stable. What is the best way to upload this dataset to S3 and ensure that the process is fast and avoid any problems with the Internet connection?

A

Use S3 Multi-part Upload & S3 Transfer Acceleration. Multi-part helps make sure data transfer is robust as any part that fails to upload, can be retried

27
Q

How can you request a higher throughout quota for KMS Api

A

Service Quotas Console

28
Q

What encryption is automatically applied to an S3 bucket?

A

SSE-S3

29
Q

Which is evaluated first for S3 security? Bucket policies or default encryption?

A

Bucket policies. Such as Deny any PUT operation that does not have “aws:kms”

Default encryption is SSE-S3 and automatically applied to new objects

30
Q

How can you protect resources in a bucket from being deleted?

A

Enforce MFA delete (versioning must be enabled)

Object lock

31
Q

What is the pre-signed URL expiration for S3 Console and AWS CLI

A

For S3 console, 1 min up to 12 hours
For AWS CLI, default 3600 secs and max 168 hours

32
Q

What is S3 Object Lock

A

S3 Object Lock protects objects from being deleted for a specified duration. Great for compliance and data retention. Versioning must be enabled to use this feature

33
Q

What are the two Object Lock retention modes?

A

Governance: Only users with special permissions can delete or modify objects

Compliance: No one can delete/modify objects

34
Q

Your client wants to make sure that file encryption is happening in S3, but he wants to fully manage the encryption keys and never store them in AWS. You recommend him to use…

A

SSE-C

35
Q

A company you’re working for wants their data stored in S3 to be encrypted. They don’t mind the encryption keys stored and managed by AWS, but they want to maintain control over the rotation policy of the encryption keys. You recommend them to use…

A

SSE-KMS

36
Q

Your company does not trust AWS for the encryption process and wants it to happen on the application. You recommend them to use …

A

Client-Side encryption

37
Q

An e-commerce company has its customers and orders data stored in an S3 bucket. The company’s CEO wants to generate a report to show the list of customers and the revenue for each customer. Customer data stored in files on the S3 bucket has sensitive information that we want to redact. How do you recommend the report can be created without exposing sensitive information?

A

Use an S3 Object Lambda to change the object before they are retrieved by the report generator application

38
Q

You are looking to provide temporary URLs to a growing list of federated users to allow them to perform a file upload on your S3 bucket to a specific location. What should you use?

A

Pre-signed URLs

39
Q

Why would you use a Legal Hold on a bucket?

A

A Legal Hold does not have a retention period, and prevents Objects from being modified or deleted until the Legal Hold is removed

40
Q

What storage class would you utilize if you are unsure how frequently objects will be accessed?

A

S3 Intelligent-Tiering

41
Q

True or False: You may run into KMS limitations with SSE-KMS for S3 encryption

A

True. Every time you upload a file it calls GenerateDataKey API and every time you download it calls the Decrypt API

42
Q

True or False: HTTPS must be used for SSE-C

A

True

43
Q

What must be used for SSE-C?

A

We must use HTTPS and proved the client secret in the header

44
Q

True or False: You cannot have different objects with different encryption types in the same bucket

A

False

45
Q

What can we do to follow activity on our S3 bucket?

A

S3 Access Logs. Choose another bucket destination and S3 will send activity logs to that bucket

Must be in the same region and cannot be the same bucket we are monitoring

46
Q

What is a pre-signed URL?

A

It is a termporary URL that can be given to a user that gives that user permission to GET / PUT to the bucket

47
Q

What is S3 Glacier Vault Lock?

A

It locks the object in S3 Glacier and that object can no longer be deleted or changed

48
Q

What are S3 access points?

A

S3 access points are named (own DNS name) network endpoints that you can attach security policies to better manage access of objects in your bucket

49
Q

True or False: Access Point policies overwrite bucket policies

A

False. If a user does not have permission on the bucket policy but they do on the access policy, they will still be denied

AWS Solutions Architect (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions