AWS Certified Solutions Architect -
Associate SAA-C03 Terms Exam
The iiSix iiPillars iiof iiWell-Architected iiFramework ii- iiCorrect iiAnswers ii-Operational
iiExcellence, iiSecurity, iiReliability, iiPerformance iiEfficiency, iiCost iiOptimization,
iiSustainability
Region ii- iiCorrect iiAnswers ii-Physical iilocation iiwith iitwo iior iimore iiavailability iizones
Availability iiZone ii(AZ) ii- iiCorrect iiAnswers ii-One iior iimore iidiscrete iidata iicenters
Edge iiLocations ii- iiCorrect iiAnswers ii-endpoints iifor iiAWS iiused iifor iicaching iicontent
iiand iiuses iicontent iidelivery iinetwork ii(CDN)
Your iiresponsibilities ii- iiCorrect iiAnswers ii-If iiyou iican iido iiit iifrom iithe iimanagement
iiconsole ii(typically iideals iiwith iiitems iiat iithe iiVM iilevel)
AWS's iiresponsibilities ii- iiCorrect iiAnswers ii-If iiyou iican't iido iiit iifrom iithe iimanagement
iiconsole ii(typically iideals iiwith iiitems iiat iithe iihardware iilevel)
Shared iiresponsibilities ii- iiCorrect iiAnswers ii-Encryptions
Compute ii- iiCorrect iiAnswers ii-EC2, iiLambda, iiElastic iiBeanstalk
Storage ii- iiCorrect iiAnswers ii-S3, iiEBS, iiEFS, iiFSx, iiStorage iiGateway
Database ii- iiCorrect iiAnswers ii-RDS, iiDynamoDB, iiRedshift
Networking ii- iiCorrect iiAnswers ii-VPCs, iiDirect iiConnect, iiRoute ii53, iiAPI iiGateway,
iiAWS iiGlobal iiAccelerator
4 iiSteps iito iisecure iiRoot iiAccount ii- iiCorrect iiAnswers ii-1) iiEnable iiMFA, ii2) iiCreate
iiAdmin iigroups, ii3) iicreate iiuse iiaccounts, ii4) iiadd iiusers iito iiadmin iigroup
IAM iiPolicy iidocuments iiconsist iiof ii- iiCorrect iiAnswers ii-JSON
,Are iiIAM iilocal iior iiuniversal ii- iiCorrect iiAnswers ii-Global, iidoes iinot iicurrently iiapply iito
iiregions
Usage iiof iithe iiRoot iiAccount ii- iiCorrect iiAnswers ii-Should iinot iibe iiused iiday iito iiday
New iiUsers iidefault iipermission ii- iiCorrect iiAnswers ii-Has iino iipermissions
User iiaccess iikey iiand iisecret iikeys ii- iiCorrect iiAnswers ii-Not iithe iisame iiusernames
iiand iipasswords, iiuse iiwhen iiusing iiAPIs iiand iithe iiCommand iiline. iiCan iionly iiview
iionce iiso iisave iithem.
Password iipolicies ii- iiCorrect iiAnswers ii-set iipolicies iito iirotate iithem
IAM iiFederation ii- iiCorrect iiAnswers ii-Combine iiexisting iiuser iiaccounts ii(like iifrom
iiMicrosoft iiActive iiDirectory) iito iiuse iifor iicredentials iifor iiAWS iiusing iiSAML ii(Security
iiAssertion iiMarkup iiLanguage)
Simple iiStorage iiService ii(S3) ii- iiCorrect iiAnswers ii-Object iibased, iifiles iisize iiup iito ii5
iiTB, iinot iifor iiOS iior iiDB iistorage, iiunlimited iistorage iispace
S3 iiFile iiLocation iiSyntax ii- iiCorrect iiAnswers ii-Universal iiName iispace, iibucket-
name.s3.Region.amazonaws.com/key-name
S3 iiObject iiDate ii- iiCorrect iiAnswers ii-Key ii(name), iiValue ii(the iiactual iifile), iiVersion iiID,
iiMetadata
S3 iiDefault iiSecurity ii- iiCorrect iiAnswers ii-Buckets iiare iiprivate iiby iidefault. iiYou iineed
iito iiallow iipublic iiaccess
Access iiControl iiLists ii(ACLs) ii- iiCorrect iiAnswers ii-optional iilayer iiof iisecurity iithat
iicontrol iiinbound iiand iioutbound iinetwork iitraffic iito iia ii(VPC). iiOperates iiat iithe iisubnet
iilevel
Bucket iipolicies ii- iiCorrect iiAnswers ii-Make iientire iibuckets iipublic iiusing iithese
Successful iiupload iito iiS3 iiBucket ii- iiCorrect iiAnswers ii-HTTP ii200 iicode
Hosting iia iiStatic iiWebsite ii- iiCorrect iiAnswers ii-Use iiS3, iibucket iipolicies iito iimake iiit
iipublic, iinothing iidynamic, iiS3 iiscales iiautomatically iiwith iidemand
Versioning iiObjects ii- iiCorrect iiAnswers ii-All iiversions iiare iistored iiin iiS3, iigreat iifor
iibackups, iicannot iibe iidisabled iionce iienabled, iiintegrates iiwith iilifecycle iirules, iisupports
iiMFA
S3 iiStandard ii- iiCorrect iiAnswers ii-99.99% iiavailability iiand ii11 ii9's iidurability, ii>=3 iiAZs,
iisuitable iifor iimost iiwork iiloads
, S3 iiStandard-Infrequent iiAccess ii- iiCorrect iiAnswers ii-99.99% iiavailability iiand ii11 ii9's
iidurability, ii>=3 iiAZs, iiLong-term, iiinfrequently iiaccessed, iicritical iidata
S3 iiOne iiZone-Infrequent iiAccess ii- iiCorrect iiAnswers ii-99.5% iiavailability iiand ii11 ii9's
iidurability, ii1 iiAZ, iiLong-term, iiinfrequently iiaccessed, iinon-critical iidata
S3 iiGlacier ii- iiCorrect iiAnswers ii-99.99% iiavailability iiand ii11 ii9's iidurability, ii>=3 iiAZs,
iiLong-term iidata iiarchiving iithat iioccasionally iineeds iito iibe iiaccessed iiwithin iihours iior
iiminutes
S3 iiGlacier iiDeep iiArchive ii- iiCorrect iiAnswers ii-99.99% iiavailability iiand ii11 ii9's
iidurability, ii>=3 iiAZs, iiRarely iiaccessed iidata iiarchiving iiwith iia iidefault iiretrieval iitime iiof
ii12 iihours
S3 iiIntelligent-Tiering ii- iiCorrect iiAnswers ii-99.99% iiavailability iiand ii11 ii9's iidurability,
ii>=3 iiAZs, iiuse iimachine iilearning iifor iiunknown iior iiunpredictable iiaccess iipatterns
Lifecycle iiManagement ii- iiCorrect iiAnswers ii-Automates iimoving iiyour iiobjects iibetween
iidifferent iistorage iitiers, iican iibe iiused iiwith iiversioning, iican iibe iiapplied iito iicurrent iiand
iiprevious iiversions
Write-Once-Read-Many ii(WORM) ii- iiCorrect iiAnswers ii-a iifeature iithat iiallows iistoring
iidata iiin iian iiimmutable iiformat iiin iiS3
S3 iiObject iiLock ii- iiCorrect iiAnswers ii-store iiobjects iiusing iiWORM, iican iibe iiinduvial iior
iiapplied iiacross iibuckets, iicomes iiin iigovernance iimode iiand iicompliance iimode
S3 iiObject iiLock iiGovernance iiMode ii- iiCorrect iiAnswers ii-users iican't iioverwrite iior
iidelete iian iiobject iiversion iior iialter iiits iilock iisettings iiunless iithey iihave iispecial
iipermissions
S3 iiObject iiLock iiCompliance iiMode ii- iiCorrect iiAnswers ii-a iiprotected iiobject iiversion
iithat iican't iibe iioverwritten iior iideleted iiby iiany iiuser, iiincluding iithe iiroot iiuser
S3 iiGlacier iiVault iiLock ii- iiCorrect iiAnswers ii-allows iieasy iideployment iiand
iienforcement iiof iicompliance iicontrols iifor iiS3 iiGlacier iivaults, iican iiuse iiWORM
S3 iiEncryption iiin iiTransit ii- iiCorrect iiAnswers ii-SSL/TLS, iiHTTPS
S3 iiEncryption iiat iiRest ii- iiCorrect iiAnswers ii-Server-side iiencryption, iiSSE-S3 ii(AES
ii256-bit),SSE-KMS ii(Key iiManagement iiSystem), iiSSE-C
S3 iiClient-Side iiEncryption ii- iiCorrect iiAnswers ii-You iiencrypt iithe iifiles iiyourself iibefore
iiyou iiupload iithem