Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Developer - Associate (Exam Pro) > S3 (Simple Storage Service) > Flashcards

S3 (Simple Storage Service) Flashcards

1
Q

True or False, S3 bucket names must be globally unique?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In S3 files you upload are referred to as what?

A

Objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The minimum and maximum size of an S3 Object

A

min: 0 Bytes
max: 5 Terabytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

The 6 types of S3 storage classes

A

Standard - (default)
Replicated across at least three AZs

Intelligent Tiering
Uses ML to analyze your object usage and determine the appropriate storage class. Data is moved to the most cost-effective access tier, without any performance impact or added overhead.

Standard Infrequently / Accessed (IA)
Cheaper if you access files less than once a month
(reduced availability)

Accessed (IA)
Objects only exist in one AZ. (Reduce durability) Data could get destroyed. A retrieval fee is applied.

Glacier
For long-term cold storage. Retrieval of data can take minutes to hours but the off is very cheap storage

Glacier Deep Archive
The lowest cost storage class. Data retrieval time is 12 hours.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

In S3, Which is the lowest cost storage class, but also has the longest retrieval time for data?

A

Glacier Deep Archive

ˈgleɪʃər dip ˈɑrˌkaɪv

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

The 2 S3 Storage Classes used for Cold Storage

A
  • Glacier
  • Glacier Deep Archive

ˈgleɪʃər dip ˈɑrˌkaɪv

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

The durability % guaranteed for S3’s standard storage class

A

99.99999999999% (11 9s)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

In S3, What is IA?

A

Infrequently Accessed

S3 Standard-IA is for data that is accessed less frequently, but requires rapid access when needed. S3 Standard-IA offers the high durability, high throughput, and low latency of S3 Standard, with a low per GB storage price and per GB retrieval fee.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

In S3, Which 2 types of storage class have no data retrieval fees?

A

Standard
Intelligent Tiering

The rest of storage classes have the value of “Per GB”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the minimum storage duration for Intelligent Tiering, Standard IA and One-Zone IA?

A

30 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the 2 methods of access control in S3?

A

Bucket Policies
Use a policy to define complex rule access.

Access Control Lists (ACL)
Legacy feature but not deprecated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Are All new buckets created public private by default?

A

Private

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

The process of encrypting files before uploading them to S3 is called what?

A

Client-Side Encryption (CSE)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How is data encrypted while in-transit?

A

SSL/TLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

The 3 types of server-side encryption (SSE) in S3

A

SSE-AES (AES-256)
SSE-KMS (AWS-KMS)
SSE-C (You provide the key yourself)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the three types of encryption in S3

A

Encryption in transit
Traffic, SSL/TLS

SSE - (Client side Encryption) Encryption at rest
AES, KMS, SSE-C

CSE (Client side Encryption)
You encrypt data before upload it

17
Q

Which type of data consistency occurs when you overwrite an existing object in S3?

A

Eventual Consistency

18
Q

True or False, when you upload a brand new file you can immediately read it back after uploading

A

True

19
Q

The 2 types of data consistency in S3

A

Read After Write Consistency
When you upload a new S3 object you are able read immediately after writing.

Eventual Consistency
When you overwrite or delete an object it takes time for S3 to replicate versions to AZs.
If you were to read immediately, S3 may return you an old copy. You need to generally wait a few seconds before reading.

20
Q

True or False, with Cross Region Replication (CRR) you can replicate data into a different AWS account

A

True

Create new bucket > Turn on versioning > Management > Replication > Add rule > Entire Bucket

Replication enables automatic, asynchronous copying of objects across Amazon S3 buckets. Buckets that are configured for object replication can be owned by the same AWS account or by different accounts. Object may be replicated to a single destination bucket or multiple destination buckets. Destination buckets can be in different AWS Regions or within the same Region as the source bucket.

To enable object replication, you add a replication configuration to your source bucket. The minimum configuration must provide the following:

  • The destination bucket or buckets where you want Amazon S3 to replicate objects
  • An AWS Identity and Access Management (IAM) role that Amazon S3 can assume to replicate objects on your behalf
21
Q

What are 2 benefits of enabling Cross Region Replication (CRR) for your S3 data?

A

Higher durability

Better disaster recovery

22
Q

You must have this enabled on both the source and destination buckets in order to enable Cross Region Replication (CRR) for S3

A

Versioning

23
Q

S3, True or False, once versioning is enabled it cannot be disabled, only suspended

A

True

24
Q

This S3 feature helps protect against deletion of your S3 data

A

MFA Delete

25
Q

Which 2 of the following are valid transition actions for S3 lifecycle policies?

A

Permanently delete data

Move data to S3 Glacier

26
Q

True or False, Lifecycle policies can be applied to both current and previous versions of a file

A

True

27
Q

The S3 feature that lets you automate moving objects to Glacier archive storage after a certain period of time

A

S3 Lifecycle Policies

  • Automate the process of moving objects to different Storage classes or deleting objects all together.
  • Can be used together with versioning Can be applied to both current and previous versions

Eg. After 7 days, a policy will take some files and will move them to glacier

28
Q

With S3 transfer acceleration, instead of uploading directly to a bucket, you use this to access an edge location

A

Distinct URL

As data arrives at the edge location It is automatically routed to s3 over a specially optimized network path (Amazon’s Backbone Network)

29
Q

Fast and secure transfer of files over long distances between your end users and an S3 bucket.

A

Transfer Acceleration

As data arrives at the edge location It is automatically routed to s3 over a specially optimized network path (Amazon’s Backbone Network)

30
Q

Which 2 ways can you generate presigned URLs for S3?

A

AWS CLI

AWS SDK

31
Q

True or False, presigned URLs generally expire just a few seconds after they are created

A

True

You have a web-application which needs to allow users to download files from a password protected part of your web-app. Your web-app generates presigned url which expires after some seconds. The user downloads the file.

32
Q

You can use these to provide temporary access to private S3 objects

A

Presigned URLs and Presigned Cookies

33
Q

How can you enable MFA Delete for S3?

A

AWS CLI

34
Q

Which S3 feature must be enabled in order to turn on MFA Delete?

A

Versioning

35
Q

If your using MFA Delete, Who can delete objects from a bucket?

A

Only the bucket owner logged in as Root User can DELETE objects from bucket

36
Q

What is S3?

What are its 10 key elements?

A
  • It’s storage for the Internet. It is designed to make web-scale computing easier for developers.
  • Lifecycle management (Move or delete objects)
  • Versioning
  • MFA Delete (Token required in order to delete objects)
  • Access Control - (Bucket Policies, ACL’s)
  • 3 Security options (In Transit, SSE, CSE)
  • 3 SSE options (AES, KMS, C)
  • Cross Region Replication
  • Transfer Acceleration (Faster uploads)
  • Presigned URL (Temporary access)
  • 6 Storage Classes (Standard, Intelligent Tiering…)

AWS Certified Developer - Associate (Exam Pro) (30 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions