Set2(31-40)

Question 1

Q37: AWS Snowball

Answer 1

each snowball appliance holds up to 80TB of Data.
snowball destination must be set to s3 bucket, glacier can not be set as destination for it

Question 2

Q37: s3 bucket policy

Answer 2

you can not enforce a vpc endpoint with bucket pilocy

Question 3

Q39: AWS security groups

Answer 3

AWS security groups are stateful.
This means that when you create a security group, inbound traffic is automatically allowed for any traffic that is in response to outbound traffic that was initiated from within the security group. In other words, if a request is sent out from an instance in the security group, the response to that request is automatically allowed to come back in, regardless of any rules in the inbound security group.

Question 4

Q40: Security Practices for Root User

Answer 4

1. Lock root access keys or delete them
2. use Strong Password
3. Enable MFA