Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Solutions Architect - Associate > S3: Simple Storage Service > Flashcards

S3: Simple Storage Service Flashcards

1
Q

Is S3 public or private by default?

A

S3 is private by default.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a bucket policy?

A

A resource policy for S3 buckets that can allow access from other AWS accounts or anonymous access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Does S3 have a hierarchical folder structure?

A

No. S3 storage is flat, but uses prefixes to emulate a folder-like structure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the Block Public Access setting on an S3 bucket do?

A

It blocks public access (in various forms) to an S3 bucket regardless of the bucket policies attached to the bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What type of policy is needed to grant anonymous or cross-account access to an S3 bucket?

A

Bucket policy, which is a type of resource policy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What type of web site hosting is S3 capable of providing?

A

Static website hosting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What two pages are specified when configuring static website hosting in S3?

A

Index and error.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

When using a custom domain for static website hosting, what bucket name must be used?

A

A bucket name that matches the domain (e.g., http://www.example.com should have a bucket name of www.example.com).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When considering static website hosting, what is offloading?

A

Using S3 to host static content, like images, while other aspects of the site are dynamic and generated outside of S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When considering static website hosting, what are out-of-band pages?

A

Using S3 to host a secondary static website that displays content when the main, dynamic website is down for maintenance or has an outage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

The S3 Object Versioning setting defaults to what?

A

Disabled.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can you disable S3 Object Versioning?

A

No, Object Versioning cannot be disabled once it has been enabled. It can be suspended (and then re-enabled) but it cannot be disabled.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the ID value of an S3 object when Object Versioning is disabled?

A

Null.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

When accessing a version of an S3 object that is not the current version, what information must be specified?

A

The object ID.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

If an S3 object is accessed without specifing the object ID, what version of the object is returned?

A

The current version or latest version.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

If you delete an S3 Object when Object Versioning is enabled, how does S3 handle the delete?

A

It creates a delete marker and points the current version at that marker.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What happens if an S3 object if its delete marker is deleted?

A

The object is undeleted and the most recent version becomes the current version.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

If you want to delete a particular version (including the current version) of an S3 object, what information must be specified?

A

The object ID.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What impact does enabling MFA Delete have?

A

MFA is required to modify a bucket’s Object Versioning configuration and MFA is required to delete specific versions of objects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is multipart upload for S3 objects?

A

Multipart upload allows you to upload a single object as a set of parts. Each part is a contiguous portion of the object’s data. You can upload these object parts independently and in any order. If transmission of any part fails, you can retransmit that part without affecting other parts. After all parts of your object are uploaded, Amazon S3 assembles these parts and creates the object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the minimum size for multipart upload to S3?

A

100MB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the size range for a single part for a multipart upload to S3?

A

5MB - 5GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is S3 Transfer Acceleration?

A

Data being uploaded to an S3 bucket in any region will upload to the closest AWS Edge Location and transit the AWS Global network, which is much faster than using the Internet to get to the region that contains the S3 bucket.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the three requirements for an S3 bucket to accept Transfer Acceleration uploads?

A
  1. Transfer Acceleration must be enabled.
  2. The bucket name cannot contain periods (.).
  3. The bucket name must be DNS compatible.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How resilient is an S3 bucket?

A

Regional resilient, though it can be configured to replicate data across regions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is the default storage service for AWS?

A

S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the size range for an S3 object?

A

0 bytes to 5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

How unique does an S3 bucket name need to be?

A

Globally unique.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is the maximum number of objects an S3 bucket can hold?

A

Unlimited.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What restrictions are there for S3 bucket names?

A
  1. They must be globally unique names
  2. 3-63 characters
  3. Letters must be lower case
  4. No underscores
  5. Must start with a letter or a number
  6. Cannot be formatted like an IP address (#.#.#.#)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the limit for the number of S3 buckets an AWS account can have?

A

100 soft limit, 1000 hard limit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What are the components of an S3 object?

A

The key (name) and value (data).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Can you mount an S3 bucket?

A

No, it is object storage, not block or file storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

At what level is encryption defined in S3?

A

The object level. Buckets aren’t encrypted; the objects inside an S3 bucket are.

35
Q

When using Server-Side Encryption (SSE) with S3, where does the at-rest encryption take place?

A

In S3.

36
Q

How do you enable unencrypted storage on S3?

A

You can’t. You must use SSE at a minimum on S3.

37
Q

What is Server-Side Encryption with Customer-provided keys (SSE-C)?

A

The customer manages the encryption keys, and Amazon S3 manages the encryption as it writes to disks and the decryption when accessing objects.

38
Q

What is Server-Side Encryption with S3-Managed keys (SSE-S3)?

A

All data is encrypted with keys managed by S3.

39
Q

What is Server-side encryption with AWS Key Management Service (SSE-KMS)?

A

Server-side encryption with AWS KMS keys (SSE-KMS) is provided through an integration of the AWS KMS service with Amazon S3.

40
Q

What is the default Server-Side Encryption (SSE) schema for S3?

A

Server-Side Encryption with S3-Managed keys (SSE-S3).

41
Q

What are two limitations of SSE-S3 in highly regulated environments?

A

The customer has no key control and cannot use role separation.

42
Q

What type of encryption does SSE-S3 use?

A

AES-256.

43
Q

What is the maximum number of S3 objects that a KMS Data Encryption Key (DEK) can encrypt/decrypt?

A

One. Each object uses an unique DEK.

44
Q

When would using S3 bucket keys be helpful?

A

When repeated object I/O would result in many calls to KMS for DEKs. Calls to KMS have a cost and can be throttled at certain levels.

45
Q

What is an S3 Bucket Key?

A

A time-limited key provided by KMS that is used to generate DEKs within S3. Using a bucket key reduces the number of API calls to KMS, thus reducing cost and increasing scalability.

46
Q

What are the S3 Object Storage Classes?

A

Standard
Standard Infrequent Access (IA)
One Zone IA
Glacier - Instant
Glacier - Flexible
Glacier - Deep Archive

47
Q

Across how many AZs are object replicated when using S3 Standard and S3 Standard Infrequent Access (IA)?

A

Three.

48
Q

What status code is returned by S3 once an object has been durably stored?

A

HTTP/1.1 200 OK

49
Q

How are you billed for S3 Standard?

A

There is a GB/month fee, a per GB transfer out fee, and a fee per 1,000 requests.

50
Q

When should S3 Standard be used?

A

When data will be frequently accessed and is not replaceable.

51
Q

When should S3 Standard Infrequent Access (IA) be used?

A

When data will be infrequently accessed and is not replaceable.

52
Q

How are you billed for S3 Standard Infrequent Access (IA)?

A

There is a GB/month fee, a per GB transfer out fee, a fee per 1,000 requests, and a per GB retrieval fee. There is also a minimum duration charge of 30 days and a minimum capacity charge of 128KB per object.

53
Q

When should S3 One Zone Infrequest Access (IA) be used?

A

When data will be infrequently accessed and is non-critical or replaceable.

54
Q

How are you billed for S3 One Zone Infrequent Access (IA)?

A

There is a GB/month fee, a per GB transfer out fee, a fee per 1,000 requests, and a per GB retrieval fee. There is also a minimum duration charge of 30 days and a minimum capacity charge of 128KB per object.

55
Q

How resilient is S3 One Zone Infrequent Access (IA)?

A

AZ resilient.

56
Q

What is the minimum duration charge for S3 Glacier - Instant Access?

A

90 days.

57
Q

When should S3 Glacier - Instant Retrieval be used?

A

When data is not replaceable and will be very infrequently accessed, but instant retrieval is needed when it is accessed.

58
Q

When should S3 Glacier - Flexible Retrieval be used?

A

When data is not replaceable and will be very infrequently accessed. Immediate or real-time access isn’t needed and the data does not need to be made public.

59
Q

What are the three retrieval speed levels for S3 Glacier - Flexible Retrieval?

A

Expedited (1-5 minutes)
Standard (3-5 hours)
Bulk (5-12 hours)

60
Q

What is the minimum billable size and duration for S3 Glacier - Flexible?

A

40KB and 90 Days

61
Q

When should S3 Glacier - Deep Archive Retrieval be used?

A

When data is not replaceable and will be very infrequently accessed. Immediate or real-time access isn’t needed and the data does not need to be made public.

62
Q

What is the minimum billable size and duration for S3 Glacier - Deep Archive?

A

40KB and 180 Days

63
Q

What are the two retrieval speed levels for S3 Glacier - Flexible Retrieval?

A

Standard (12 hours)
Bulk (up to 48 hours)

64
Q

What is S3 Intelligent Tiering?

A

Intelligent Tiering moves data between Frequent Access, Infrequent Access, Archive Instant Access, Archive Access, and Deep Archive automatically.

65
Q

What is S3 Lifecycle Configuration?

A

A set of configuration rules that transition S3 objects between storage classes or expire objects based on age. This is not based on access patterns (that is handled by Intelligent Tiering).

66
Q

What considerations are needed when implementing S3 Lifecycle Configuration rules?

A
  1. Minimum durations at each storage class.
  2. Minimum sizes at each storage class.
  3. Objects can not move up in storage class. They can only move down.
67
Q

What is Cross-Region Replication for S3?

A

The copying of data to an S3 Bucket in a different region.

68
Q

What is Same-Region Replication for S3?

A

The copying of data to an S3 Bucket in the same region.

69
Q

When performing Cross-Region and Same-Region Replication for S3 across AWS accounts, what must be done to the destination bucket to ensure data can be copied successfully?

A

A bucket policy must be applied to the destination bucket that allows the appropriate role from the source account to write data into the destination bucket.

70
Q

What options are available for S3 Replication?

A
  1. Replication all objects or some objects
  2. Change the storage class for the replicated objects
  3. Set the ownership of the replicated objects
  4. Replication Time Control that guarantees a 15 minute replication time
71
Q

When enabling replication on an S3 Bucket, will existing object be replicated?

A

No, S3 Replication is not retroactive, but batch replication can be used to replicate existing objects.

72
Q

What needs to be enabled for S3 Replication to work?

A

Versioning.

73
Q

By default, is S3 Replication one-way or bi-directional?

A

One way. Objects added to the destination bucket are not replicated back to the source bucket unless the bi-directional setting is enabled.

74
Q

Are deletes replicated by S3 Replication?

A

No, delete markers are not replicated.

75
Q

How can you give access to an object in a non-public S3 Bucket to an anonymous user?

A

A pre-signed URL will provide access to a bucket a specified amount of time.

76
Q

When are the permissions for a pre-signed URL evaluated?

A

When the object or bucket is accessed. If the user that generated the pre-signed URL no longer or never had permissions for the object or bucket, access using the pre-signed URL will be denied.

77
Q

What events can trigger S3 Event Notifications?

A

Object creation
Object delete
Object restore
Object replication

78
Q

What are the two types of S3 Object Lock?

A

Retention Period and Legal Hold.

79
Q

What are the modes available for S3 Object Lock - Retention Period and what do they mean?

A

Compliance - the object cannot be deleted or overwritten for the duration of the retention period. Also, the retention period CANNOT be modified, even by the root user.

Governance - the object cannot be deleted or overwritten for the duration of the retention period, but the retention period can be adjusted using the s3:BypassGovernanceRetention permission and by passing the x-amz-bypass-goverance-retention:true header.

80
Q

How do you change or delete an S3 object with a Legal Hold Object Lock?

A

Turn off the Legal Hold and then modify/delete the object.

81
Q

What command is used to create an S3 Access Point via the CLI?

A

aws s3control create-access-point –name apname –account-id 12345 –bucket bname

82
Q

How can permissions on an S3 Bucket be controlled using S3 Access Points?

A

By creating S3 Access Points with different DNS addresses and then applying specific bucket policies to each Access Point.

83
Q

What is the maximum number of parts for a multipart upload to S3?

A

10,000 parts.

AWS Certified Solutions Architect - Associate (49 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions