Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Sysops > Storage > Flashcards

Storage Flashcards

1
Q

Can you mount EBS across AZs?

A

No, to ensure the lowest latency this is not possible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

When to use provisioned IOPS?

A

When more than 10000 IOPS are needed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an IOPS?

A

Measurement how many read/write actions can happen in a second - based on a standard package size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is throughput?

A

product of packet size and IOPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are Bursting IOPS and Throughput

A

Burst: IOPS not used are generating credits that can be used to burst up to 3000 IOPS and therefore a higher throughput

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What must be considered for IOPS for EC2 and EBS?

A

Even though EBS volumes can have a high amount of IOPS it might be limited by the EC2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How to share (un)encrypted snapshots

A

Public shared snapshots can only be unencrypted.

Encrypted volumes can be shared to a specific account as long as the Customer Master Key is provided

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How are EFS volumes sized?

A

Automatic sizing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When to (not) use S3-IA?

A

If called < 20 times/yr, smaller than 4Kb and listed shorter than 30days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How to use Cross-Region Replication?

A

Versioning must be enabled. (Files are not syncronized to the regions, just copied)
CRR can be used for different accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the vault lock?

A

When used a file cannot be deleted until a certain amount of time (10yrs e.g.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Describe the (three) Storage Gateway Options

A 
File interface (Access via Network File System)
Volume interface (Data is accessed on local storage)
Tape interface (Connected to existing backup method -  and then stored in S3)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the time interval at which EFS metric data gets sent to CloudWatch?

A

CloudWatch receives EFS metric data in one-minute intervals.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which are not replicated by default using S3 CRR?

A

Objects that existed before replication
Lifecycle policies
Server-side encryption using KMS-managed keys
Server-side encryption using customer-provided keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the limitation for HDD storage?

A

You cannot use them for a boot device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When to use the cold HDD (sc1)

A

Infrequent access with minimized storage costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How to get 6000 IOPS

A

Using a volume size of 2000GB (2000 x 3IOPS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When is Pre-Warming an EBS volume neccessary?

A

In the past a new volume needed to be warmed in order to ensure the maximum capacity.
New volumes do not require this anymore.

However: if a volume is restored from S3 the blocks need to be initialized this causes some latency issues.
There a pre warming could be done.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the volume status checks?

A

OK
WARNING
Degraded (performance under expectation)
Severely degraded (performance highly under expectations)
IMPARED
Stalled (performance severely under expectations)
Not Available (I/O is not measured - volume is offline)
INSUFFICIENT_DATA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Can you modify an attached EBS volume?

A

Yes, it is possible to change the type, size and IOPS on an attached volume without detaching it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is Eviction? (Elasticache)

A

When there’s no space and a file is added, an old file needs to be deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What should be done in terms of Eviction on Elasticache?

A

Memcache(d): Scale out or Up (increase RAM)

Redis: Scale out (add read replicas)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How many IOPS are given per GB for gp2 and io2

A

gp2: 3 (16000 max)
io1: 50 (64000 max)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Describe the two consistency models in S3

A

Read after Write consistency for PUTS on new objects

Eventual Consistency for PUTS on existing object and DELETES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are you charged for in S3?

A
  • Storage per GB
  • Requests (GET, PUT)
  • Storage Management (like Tagging)
  • Accelerated Traffic
  • Egress traffic
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is the file gateway?

A
  • uses S3 for storage
  • accessed with NSF or SMB and therefore appears as a normal network storage
  • has the all the advantages of S3
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the volume gateway?

A
  • cloud backed storage
  • iSCSI
  • two types:
    • Gateway Stored Volumes: Storage is local, backup in AWS (as EBS snapshots)
    • Gateway Cached Volumes: S3 as primary storage, files are cached locally
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is Tape Gateway?

A
  • Data Archive in Glacier

- Can integrate with existing tape infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Can a policy be attached to an S3 object?

A

No, only to buckets+

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is the difference between a bucket policy and iam user policy?

A

“Who can access this S3 resource?”

“What can this user do in AWS?”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is an advantage of a bucket policy?

A

You can grant cross-account access to S3 bucket w/o IAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is an S3 Access Control List (ACL)?

A

Precursor to Bucket Policies.
Can be on a Bucket, Folder or Object Level
Can only grant, not deny access
Has predefined groups (All users, All auth. users)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

S3: What is the maximum upload size for a single PUT operation to S3, and what is the maximum object size limit?

A

5GB for a PUT, 5TB for a single object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

A user has launched a dedicated EBS-backed instance. You are curious where the EBS volume for this instance will be created.

A

The EBS volume will not be created on the same tenant hardware assigned to the dedicated instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

A root AWS account owner is trying to understand various options to set the permission to Amazon S3. Which option below is not an access control mechanism in Amazon S3?

  • S3 Bucket access control list
  • S3 Object access policy
  • IAM User access policy
  • S3 Bucket access policy
A

S3 Object access policy

Amazon S3 provides a set of operations to work with the Amazon S3 resources. Managing S3 resource access refers to granting others permissions to work with S3. There are three ways the root account owner can define access with S3:

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

In AWS Storage Gateway, using a tape gateway’s virtual tape library (VTL), you can cost-effectively and durably archive backup data in____

A

Amazon Glacier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

After a retrival request to Glacier, how can the data be accessed

A

The retrieval request creates a temporary copy of your data in the S3 RRS or S3 Standard-IA storage class while leaving the archived data intact in S3 Glacier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Which types of AWS Storage Gateway offer local caches for frequently accessed data? (Choose 2 answers)

A

Cached volume gateways
File gateways

Both file gateways and cached volume gateways provide local caches to store frequently accessed data. Stored volume gateways keep all files locally, so all stored data can be retrieve with reduced latency. Tape gateways are an archival method, and not ideal for data that needs to be readily available.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

When using a tape gateway in AWS Storage Gateway, files are accessible unless they are stored within a ____________, in which case they will need to be retrieved first, which may take several hours.

A

archived tape

40
Q

In Amazon Elastic File System (EFS), which of the following performance modes is ideal for applications where tens, hundreds, or thousands of Elastic Compute Cloud (EC2) instances access a file system?

Provisioned IOPS mode
Max I/O mode
General Purpose mode
Enhanced Throughput mode

A

Max I/O mode

Amazon EFS offers two performance modes: General Purpose mode and Max I/O mode

41
Q

Does Amazon EFS support Linux and Windows instances?

A

No, only Linux

42
Q

What is the potential size range for individual objects stored in Amazon S3?

A

0 bytes to 5 TB

43
Q

A user has launched an EC2 instance from an instance store-backed AMI. If the user reboots the instance, what will happen to the data on the instance store volume?

A

The data will be preserved. Rebooting an instance is equivalent to rebooting an operating system.

44
Q

A user has created a new EBS volume. The user wants to mount the volume on the instance to which it is attached. Which step is required before the user can mount the volume?

A

The user must create a file system on the volume.

45
Q

When using Amazon Glacier’s expedited retrieval option, which of the following is correct?

Amazon Glacier takes 1-5 minutes to retrieve data.
Amazon Glacier takes 5-12 hours to retrieve data.
Amazon Glacier takes 1 hour to retrieve data.
Amazon Glacier takes 3-5 hours to retrieve data.

A

Amazon Glacier takes 1-5 minutes to retrieve data.

46
Q

Which encryption method does AWS Storage Gateway use to encrypt all data by default?

Server-side encryption with KMS-managed keys (SSE-KMS)

Customer-side encryption with KMS-managed keys (CSE-KMS)

Server-side encryption with S3-managed keys (SSE-S3)

Server-side encryption with Customer-managed keys (SSE-C)

A

By default, Storage Gateway uses Amazon S3-Managed Encryption Keys (SSE-S3) to server-side encrypt all data it stores in Amazon S3. You have an option to use the Storage Gateway API to configure the different gateway types to encrypt data stored in the cloud using the AWS Key Management Service (KMS).

47
Q

True or False: Regarding Amazon CloudFront, an RTMP distribution must use an Amazon S3 bucket as the origin.

48
Q

When using Amazon Glacier’s bulk retrieval option, which of the following is correct?

Amazon Glacier takes 3-5 hours to retrieve data.
Amazon Glacier 1 hour to retrieve data.
Amazon Glacier takes 5-12 hours to retrieve data.
Amazon Glacier takes 1-5 minutes to retrieve data.

A

Amazon Glacier takes 5-12 hours to retrieve data.

49
Q

Which types of AWS Storage gateways have a limited amount of total storage per gateway? (

A

Stored volume gateway

Cached volume gateway

50
Q

What is AWS DataSync?

A

AWS DataSync makes it simple and fast to move large amounts of data online between on-premises storage and Amazon S3, Amazon Elastic File System (Amazon EFS), or Amazon FSx for Windows File Server. Manual tasks related to data transfers can slow down migrations and burden IT operations.

51
Q

What is initialization / pre warming and when to use it?

A

Reading all the blocks before the volume goes into production.

After restoring a volume from a S3 snapshot

52
Q

EBS: What changes can be done while a volume is attached?

A 
Increase size (volume file size needs to be etended on the server)
change volume type
increase IOPS (for io1 volumes)
53
Q

What is the maximum IOPS capability of an io1 volume?

54
Q

EBS: What happens to the volumes if an EC2 instance is terminated?

A

Root Device will be deleted by default - can be disabled

Other Volumes will be detached

55
Q

What is the snowball edge?

A

Physical device with 100TB of storage.
Also has a computational unit inside that can run Lambda functions when data is transferred.
Also has S3 endpoints and NFS support

56
Q

NFS: What are the options for throughput and performance mode?

A

Bursting & Provisioned

General Purpose & Max I/O (used when 100s of instances are connected)

57
Q

Which AWS service allows your on-premises systems to access your files in S3 over NFS or SMB using a virtual appliance installed in your data center?

A

File Gateway

58
Q

S3: What are the three reasons for CRR?

A

Compliance (must be stored in multiple locations)
Latency
Disaster Recovery

59
Q

What is the scope of EFS?

A

Across multiple AZs within a region

60
Q

What are the security group settings for EFS?

A

Allow traffic from TCP Port 2049 from the security groups of the EC2 instances

61
Q

EBS: What is a Lifecycle Policy?

A

Data Lifecycle Manager enables you to automate the creation, retention, copy and deletion of EBS snapshots and EBS-backed AMIs. It also enables you to automate cross-account snapshot copy actions for snapshots that are shared with you, based on Amazon CloudWatch events.

To decide which Volumes are used you look for specific tags.

62
Q

S3: Can you encrypt metadata?

63
Q

What is the difference in terms of backup/updating between block - and object storage?

A

In Object storage there is no concept of updating the delta, is always replaces the whole file

64
Q

What is the packet size limitation of HDD / SSD?

A

SSD: 256KB
HDD: 1MB

65
Q

What can be done to raise the max. IOPS?

A

Have more volumes in Raid0

66
Q

How are EBS Snapshots stored?

A

They are stored in S3, but not as object visible to the user.
Since they are not “real” objects it is possible to store only the changed delta data and therefore reducing the storage capacity needed

67
Q

Do you need to stop an instance to create a snapshot?

A

Boot volumes yes, additional volumes no.

But it makes sense to hold writes to get the best results.

68
Q

What are the advantages of instance storage?

A

SInce it lives on the same hardware it is included in the hourly costs and there cannot be network issues

69
Q

What are the size limits of Glacier?

A

1byte to 40TB

70
Q

What is the Vault Lock?

A

Files cannot be deleted for a duration of time, even if the company does not exist anymore

71
Q

Which command would you use to mount an EBS volume?

A

aws ec2 attach-volume –volume-id –instance-id

–device /dev/

72
Q

What is the

maximum allowed length of an S3 bucket name and are underscores allowed?

A

63 characters

no

73
Q

Which S3 storage class offers 99.99% availability?

A

S3 Standard

74
Q

Which S3 storage class offers 99.9% availability?

A

S3 Standard-IA

75
Q

Which S3 storage class offers 99.5% availability?

A

S3 One Zone-IA

76
Q

You currently have snapshots of your EBS volumes going to S3. You need to access the
snapshots. How would you access them?

A

Amazon EC2 API

77
Q

S3: What tool can be used to analyse S3 access permissions?

A

Access Analyzer for S3.

78
Q

S3; What are the expected retrieval times for Deep Archive Standard and Bulk?

A

Standard: 12h
Bulk: 24h

79
Q

CloudFront: What is origin redundancy?

A

A different origin in case of 400/500 errors from the origin

80
Q

CloudFront: How long is a file cached by default?

81
Q

CloudFront: What is the single-file limit?

82
Q

You need to continually move large amounts of data from your on-premises datacenter to
AWS. What is the best way to accommodate large ongoing file transfers?

A

Transfer over AWS Direct Connec

83
Q

How does AWS Snowball guarantee that your AWS Snowball device has not been
tampered with before its arrival at an AWS datacenter?

A

Tamper-resistant enclosure

TPM chip

84
Q

You need to remove a large amount of data from Amazon S3 and bring it back to your
on-premises datacenter. The data is approximately 75 TB. What is the best method to
transfer the data back to your on-premises datacenter?

A

AWS Snowball

85
Q

What needs to be done in order to export Glacier Deep Archive data to a Snowball?

A

Restore the data from Amazon S3 Glacier and then create the export request.

86
Q

Which command is used to enable lifecycle management for Amazon EFS via the
AWS CLI?

A

aws efs put-lifecycle-configuration

87
Q

You need to protect the data that is stored in your Amazon EFS implementation. Which
of the following are methods that will allow you to safeguard the Amazon EFS data?

A

AWS Backup Service

EFS-to-EFS backup solution

88
Q

You have chosen to delete the CMK you were using for your Amazon EFS deployment.
How can you immediately delete the CMK?

A

The deletion of a CMK is irreversible so you can’t do it immediately; you have to
schedule the deletion. You can schedule it for anywhere from 7–30 days. If you must get
rid of it more immediately, you can revoke or disable the key.

89
Q

How can you reduce costs for using Amazon EFS across multiple availability zones?

A

When you create mount points for Amazon EFS, it is recommended to create them
in each availability zone as this will reduce the amount of cross-availability zone access,
which incurs additional cos

90
Q

What is the size difference between a Snowball and a Snowball Edge?

A

SB: 80TB
Edge: 100TB

91
Q

S3: Which of the following S3 operations costs nothing?

A

A. DELETE
B. LIST
C. GET

92
Q

Which can / cannot be a CloudFront origin?

A

Yes: A public S3 bucket, elastic load balancer, public web server
No: A Lambda function

93
Q

Which protocol does EFS use?

94
Q

On which type of gateway does AWS Storage Gateway allow you to use iSCSI?

A

Volume Gateway

95
Q

What is required to enable MFA Delete?

A

A bucket policy

96
Q

An SSE-C encrypted object named file.txt exists in an S3 bucket on which versioning is
enabled. What will happen if you try to delete this object?

A

Because versioning is enabled, S3 will only create a delete marker. There’s no need to
specify the encryption key to delete an object version.

Sysops (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions