Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AWS Certified Solutions Consultant > IAM & S3 > Flashcards

IAM & S3 Flashcards

1
Q

IAM

A

Identity Access Management. Allows you to manage users and their level of access to AWS console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Policies

A

Gives permissions to what a user, group, or role is able to do

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

IAM is Global or Region specific?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Most powerful policy

A

Administrator Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What account is created at first setup and has complete admin access?

A

Root Account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What permissions do users have when first created?

A

none

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

S3 acronym

A

Simple Storage Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

S3 is _______ based

A

object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

T or F: S3 consists of key value pairs

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

T or F: S3 has versioning

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Metadata

A

Data about the data you are storing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

T or F: You can store OS’s or DB’s on S3

A

F. It’s for files only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Data consistency

A

Write new file, you can see it immediately. But if you update existing file or delete, it may take some time to propagate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

S3 is global or region specific?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

6 S3 Storage Classes

A
  1. S3 Standard 2. S3 IA (Infrequently Accessed) 3. S3 One Zone IA 4. S3 Intelligent Tiering 5. S3 Glacier 6. S3 Glacier Deep Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

S3 Standard

A

99.99% availability, 11 x 9’s for durability (you won’t lose your files)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

S3 IA

A

lower fee than S3 but you are charged retrieval fee

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

S3 One Zone IA

A

just stored in one AZ. Lower cost option for IA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

S3 Intelligent Tiering

A

optimize costs by automatically moving data to most cost effective access tier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

S3 Glacier

A

data archiving. retrieval times configurable from minutes to hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

S3 Glacier Deep Archive

A

lowest cost storage option. retrieval time 12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Cross Region Replication

A

Replicate your data files to S3 buckets across different regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

T or F: S3 uses a shared name space

A

T

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Transfer Acceleration

A

use edge locations to move files across AWS backbone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
2 things you are charged for with S3
GB storage, data retrievals
26
T or F: You can disable versioning on an S3 bucket
F. Once you enable it, you can't disable it. Although you can suspend versioning for new objects
27
LifeCycle
automates moving objects between different storage tiers
28
S3 Object Lock
store objects using write once, read many (WORM) model
29
WORM Model (Write once, read many)
helps you prevent object from being deleted or modified for fixed amount of time or indefinitely. Sometimes required through regulation.
30
Governance Mode
users can't overwrite or delete an object version or alter its lock settings unless they have special permissions
31
Compliance Mode
protect object version can't be overwritten or deleted by ANY user (even root user)
32
Legal Hold
will just stay in effect until you remove it
33
Glacier Vault Lock
deploy and enforce compliance controls for individual S3 Glacier vaults. Once locked, policy can no longer be changed
34
Prefixes
folders and subfolders within S3 buckets. You get better performance if you spread read requests across prefixes.
35
Multipart Uploads
splits big files into parts. Recommended for files over 100MBs and required for files over 5GBs
36
Byte Range Fetches
Split big files into parts for downloads from S3
37
S3 Select (Glacier Select)
enables apps to retrieve only subset of data from an object using simple SQL expressions. Improves performance. Faster and cheaper
38
AWS Organizations
account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage. Consolidate bills across your departments
39
3 Ways to share s3 buckets across accounts
1. bucket policies & IAM - applies across entire bucket 2. bucket ACL's & IAM - individual objects 3. Cross account IAM roles - programmatic and console access
40
T or F: versioning is required on both source and destination buckets for cross region replication to work
T
41
T o F: If an object that is public in one region is cross replicated to a new region, it is automatically public in the new region
F
42
AWS Data Sync
sync data from on prem data center to AWS region
43
Content Delivery Network (CDN) - For amazon this is CloudFront
deliver web content to a user based on geographic locations of the user, origin of the web content, and a content delivery server. Without CDN, your website may have latency issues
44
Edge location (CloudFront)
location where content is cached in a CDN
45
Origin (CloudFront)
Origin of all files that the CDN will distribute. Can be S3, EC2, ELB, etc
46
distribution (CloudFront)
name given to CDN which consists of collection of edge locations
47
TTL (Time to Live)
Amount of time an object will be cached at an edge location. This is configurable.
48
CloudFront SignedURL
restrict access for individual files
49
CloudFront Signed Cookies
restrict access for multiple files (like entire website). Ex. Netflix
50
Snowball
data transport solution in or out of AWS. This is a big container transported by a semi truck. Once data transfer job verified, AWS performs software erasure of snowball appliance
51
Storage Gateway
connects on prem software appliance to cloud based storage. Replicates data to AWS.
52
T or F: Storage Gateways can be either a physical or virtual machine
T
53
3 Types of Storage Gateways
1. File Gateway 2. Volume Gateway - either stored volumes or cached volumes 3. Tape Gateway
54
File Gateway
files stored as objects in S3 buckets, acces through Network File System (NFS)
55
Volume Gateway
presents your apps with disk volumes using iSCSI block protocol. Stores virtual hard disk drives in S3. Can be stored or cached volumes
56
Stored Volumes
store primary data locally, while also backing up that data to AWS
57
Cached Volumes
let you use S3 as primary data storage while retaining frequently accessed data locally in your storage gateway
58
Tape Gateway
durable, cost effective solution to archive data in AWS cloud
59
Athena
interactive query service using standard SQL for S3. Serverless.
60
Macie
Security service using ML and NLP to discover, classify and protect sensitive data stored in S3. Good for PCI and preventing ID theft
61
How many S3 buckets can you have per account?
100

AWS Certified Solutions Consultant (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions