Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Developer 2022-05 Exam Prep > S3 (ACG) > Flashcards

S3 (ACG) Flashcards

1
Q

What is S3?

A

Simple Storage Service.

S3 provides secure, durable, highly-scalable object storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

S3 Object-based storage

A

Manages data as objects rather than in file systems our data blocks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the S3 storage limit?

A

Unlimited

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

S3 max object size?

A

5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

S3 buckets

A

Similar to folders

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

S3 bucket names

A

Universal namespace. All AWS accounts share the same S3 namespace. Each S3 bucket names is globally unique.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Example S3 URL

A

https://bucket-name.s3.us-east-1.amazonaws.com/puppy.jpg

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What http status code do you receive when successfully uploading a file to an S3 bucket?

A

HTTP 200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Key-Value Store

A

Key is name of object. Value is the data itself.

There’s also version ID and meta data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

S3 Availability

A

Highly available and highly durable. Built for 11 9’s of durability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are three S3 characteristics?

A

Tiered storage, lifecycle Management and versioning.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How does S3 secure your data?

A

Server-side encryption, ACLs, and bucket policies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What file types can you upload to S3?

A

Any file type, but not suitable for OS or DB storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

S3 Standard

A
  1. High availability and durability
    • data is stored redundantly across multiple devices in multiple facilities (>= 3 AZs)
    • 99.99% availability
    • 11 9’s of durability
  2. Designed for frequent access
  3. Suitable for most workloads
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

S3-IA

A

S3 Standard-Infrequent Access
Designed for infrequently accessed data. Rapid access and pay to access when needed. Per GB storage and per GB retrieval fee.

Great for long term storage and disaster recovery files (min 30 day storage).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

S3 Glacier

A

Very cheap storage.

For VERY infrequently accessed data.

You pay each time you access your data.

Use only for archiving data.

90 days minimum or 180 days minimum for Glacier Deep Archive.

Retrieval time ranges from 1 min to 12 hours or default 12 hours for Glacier Deep Archive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Default Bucket Policy

A

Private by default, only the owner has full rights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Bucket policies are written in…

A

JSON key-value pairs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

S3 Bucket ACLs

A

Applied at object level. We can apply different permissions for different objects within a bucket

20
Q

S3 Access Logs

A

Not enabled by default. Logs are written into another S3 bucket.

21
Q

WORM model

A

Write Once Read Many

22
Q

S3 Types of Encryption (3 types)

A
  1. Encryption in Transit (HTTPS/SSL/TLS)
  2. Encryption At Rest - Server Side (SSE-S3, SSE-KMS (AWS managed), SSE-C (Customer managed)
  3. Encryption at Rest - Client Side (encrypt it yourself before upload)
23
Q

Enforcing Server Side Encryption (2 ways)

A
  1. Console - select the encryption setting on your S3 bucket (easiest, just a check box)
  2. Bucket Policy
24
Q

Parameter included in the request header to encrypt during upload/put request?

A

x-amz-server-side-encryption: AE256
OR
x-amz-server-side-encryption: aws:kms

25
Q

How would you enforce encryption in transit?

A

Bucket policy requiring encryption of data in transit (HTTPS/SSL/TLS).

This policy denies any requests that do not use aws:SecureTransport in the request header.

26
Q

What is CORS?

A

Cross-Origin Resource Sharing - allowing one S3 bucket access another S3 bucket

27
Q

CloudFront Edge Location

A

Location where content is cached. Separate to an AWS Region/AZ.

28
Q

CloudFront Origin

A

Origin of all the files that the distribution will serve. Can be an S3 bucket, EC2 instance, ELB or Route53.

29
Q

CloudFront Distribution

A

Name given to the Origin and configuration settings for the content you wish to distribute using CloudFront (CDN).

30
Q

CloudFront TTL

A

The default TTL (time-to-live) is 1 day for objects to be cached and is cleared automatically.

31
Q

Edge locations are READ only. True or false?

A

FALSE

You can write to them too, i.e. PUT an object on to them.

32
Q

CloudFront Edge Locations are utilized by S3 Transfer Acceleration to reduce latency for S3 uploads. True or false?

A

TRUE

33
Q

CloudFront objects are cached for the life of the TTL. You can clear cached objects, but you will be charged. True or false?

A

TRUE

Under “Invalidation” you can manually clear a cached object for a fee.

34
Q

CloudFront is a content delivery network. True or False?

A

TRUE

35
Q

CloudFront Origin Access Identity

A

An OAI is a special CloudFront user that can access files in our bucket and serve them to users.

OAI allows us to restrict access to the contents of our bucket via an S3 URL and instead must use the CloudFront URL.

36
Q

What are the three options for CloudFront AllowedMethods?

A
  1. GET, HEAD (default, read-only)
  2. GET, HEAD, OPTIONS (read headers)
  3. GET, HEAD, OPTIONS, PUT, POST, PATCH, DELETE
37
Q

Which three options allows users to have secure access to private files located in S3?

A

CloudFront Signed URLs
CloudFront Origin Access Identity
CloudFront Signed Cookies

38
Q

What is the maximum file size that can be stored on S3?

A

5TB

39
Q

Which storage class is suitable for long-term archiving of data and supports millisecond retrieval times?

A

Glacier Instant Retrieval

40
Q

What is the largest size file you can transfer to S3 using a single PUT operation?

A

5GB

41
Q

You are hosting a website in an Amazon S3 bucket. Which feature defines a way for client web applications that are loaded in one domain to interact with resources in a different domain?

A

CORS

42
Q

What is the minimum file size allowed on S3?

A

0 bytes

43
Q

Which storage class is suitable for long-term archiving of data that occasionally needs to be accessed within a few hours or minutes?

A

S3 Glacier

44
Q

What is the HTTP code you would see once you successfully place a file in an S3 bucket?

A

200

45
Q

You are using S3 in ap-northeast-1 to host a static website in a bucket called “acloudguru”. What would the new URL endpoint be?

A

http://acloudguru.s3-website-ap-northeast-1.amazonaws.com

46
Q

If you encrypt a bucket on S3, what type of encryption does AWS use?

A

AES-256

47
Q

True or False? An Amazon S3 object owner can optionally share objects with others by creating a presigned URL.

A

TRUE

AWS Certified Developer 2022-05 Exam Prep (18 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions