Cloud Data Storage Solutions Flashcards

Which encryption option lets you manage your own keys for cloud-stored data while the provider performs encryption?

Answer: Customer-managed keys via KMS (SSE-KMS)

Customer-managed keys through a key management service give control over key rotation and access policies.

What is the main trade-off of multi-region replication for a storage bucket?

Answer: Higher availability and lower read latency at increased cost

Multi-region replication improves availability and locality but increases storage and transfer costs.

Which storage type is most appropriate for the working data of a transactional OLTP application?

Answer: Low-latency block or managed relational storage

OLTP needs low-latency, high-IOPS storage such as block volumes or managed databases.

What problem does a presigned URL solve in cloud object storage?

Answer: Granting temporary, scoped access to a private object without sharing credentials

A presigned URL grants time-limited access to a specific object without exposing account credentials.

Which metric best describes the probability that stored objects are not lost over a year?

Answer: Durability

Durability measures the likelihood data survives without loss, often quoted as eleven nines (99.999999999%).

What is a common reason to use S3 Intelligent-Tiering?

Answer: Automatic cost optimization for data with unpredictable access patterns

Intelligent-Tiering automatically moves objects between access tiers based on usage to optimize cost.

Which practice reduces the risk of accidentally exposing sensitive data in a cloud bucket?

Answer: Enforcing block-public-access and least-privilege IAM policies

Blocking public access and applying least-privilege policies prevent unintended data exposure.