How does the AWS IAM policy evaluation logic resolve conflicting Allow and Deny statements across multiple policies?

Evaluation starts with an implicit Deny. An explicit Deny in any applicable policy (SCP, resource-based policy, permissions boundary, session policy, or identity-based policy) always overrides any explicit Allow.

What is the architectural difference between an IAM Identity-Based Policy and a Resource-Based Policy?

Identity-based policies attach to IAM users, groups, or roles to define what actions that principal can perform. Resource-based policies attach directly to a resource (such as an S3 bucket, SQS queue, or KMS key) and include a Principal element specifying who can access it.

How do a process and a thread differ in a typical operating system?

A process is a resource and protection container with its own virtual address space. Threads within it share that address space and resources such as open files, but each has its own execution state, including registers, program counter and stack. Separate processes can explicitly share memory.

What state is saved and restored during a CPU context switch?

The operating system preserves the outgoing task’s execution state, such as registers, program counter and stack pointer, and restores the incoming task’s state. Address-space state is changed when needed; switching between threads of one process need not change the page-table root. Exact saved state depends on the architecture and implementation.

5 min read

Technology, Cloud & AI Català 3 Interactive Flashcard Decks

Guia d'estudi de Ciberseguretat: Domina els conceptes clau amb targetes de memòria

Q: Quantes targetes de Ciberseguretat hauria d'estudiar cada dia?

Recomanem entre 20 i 32 targetes noves al dia (1 joc curat) més els repassos diaris (uns 15–25 minuts en total).

Q: Per quin nivell de Ciberseguretat hauria de començar a flashcards.world?

Comença pel nivell Bàsic per assegurar la terminologia fonamental i passa a l'Intermedi quan superis el 85% d'encerts.

Guia completa d'estudi de Ciberseguretat amb jocs de targetes bàsics, intermedis i avançats, exemples de record actiu i pla d'estudi a flashcards.world.

Practice 3 Curated Cybersecurity Decks ↓ Browse All Cybersecurity Flashcards →

Interactive Premade Curricula

Cybersecurity Flashcard Decks (3)

Select any deck below to study cards with active recall, audio pronunciation, and FSRS spaced repetition, or filter by difficulty level.

Foundational EN → EN

Cloud Security: AWS IAM, Organizations, KMS, Encryption & Threat Detection

Practice Deck → More basic sets

Intermediate EN → EN

Network Security: Amazon VPC, NACLs, PrivateLink, VPN, CloudFront & Network Firewall

Practice Deck → More intermediate sets

Advanced EN → EN

Operating Systems, Networking Protocols & Distributed Systems

Practice Deck → More advanced sets

Explora tots els jocs de targetes de Ciberseguretat a flashcards.world

1. Per què el Record Actiu i la Repetició Espaiada funcionen per a Ciberseguretat

Dominar Ciberseguretat exigeix tant una comprensió conceptual sòlida com rapidesa i precisió per recordar definicions, principis, mecanismes i casos pràctics. Combinar el Record Actiu (Active Recall) amb la Repetició Espaiada elimina la falsa sensació de domini i fixa els coneixements de Ciberseguretat a la memòria a llarg termini.

Tot seguit trobaràs el full de ruta complet amb enllaços directes als jocs de targetes curats de Ciberseguretat a flashcards.world classificats per nivell de dificultat.

2. Jocs de targetes recomanats de Ciberseguretat a flashcards.world (Per nivell)

3. Previsualització de targetes d'alt rendiment (Ciberseguretat)

Nivell	Anvers (Pregunta / Terme)	Revers (Resposta / Explicació)
`basic`	How does the AWS IAM policy evaluation logic resolve conflicting Allow and Deny statements across multiple policies?	Evaluation starts with an implicit Deny. An explicit Deny in any applicable policy (SCP, resource-based policy, permissions boundary, session policy, or identity-based policy) always overrides any explicit Allow.
`basic`	What is the architectural difference between an IAM Identity-Based Policy and a Resource-Based Policy?	Identity-based policies attach to IAM users, groups, or roles to define what actions that principal can perform. Resource-based policies attach directly to a resource (such as an S3 bucket, SQS queue, or KMS key) and include a Principal element specifying who can access it.
`intermediate`	How many IP addresses does AWS reserve in every VPC subnet CIDR block, and what are those five addresses used for?	AWS reserves 5 IP addresses in every subnet (first 4 and last 1). For example, in 10.0.0.0/24: .0 is the network address, .1 is reserved for the VPC router, .2 is reserved for the AWS DNS server, .3 is reserved for future use, and .255 is the network broadcast address.
`intermediate`	Compare Security Groups and Network Access Control Lists (NACLs) in Amazon VPC.	Security Groups operate at the ENI/instance level, are stateful (return traffic is automatically allowed regardless of outbound rules), and support Allow rules only. NACLs operate at the subnet boundary, are stateless (both inbound and outbound return traffic on ephemeral ports must be explicitly permitted), and support numbered Allow and Deny rules evaluated in order.
`advanced`	How do a process and a thread differ in a typical operating system?	A process is a resource and protection container with its own virtual address space. Threads within it share that address space and resources such as open files, but each has its own execution state, including registers, program counter and stack. Separate processes can explicitly share memory.
`advanced`	What state is saved and restored during a CPU context switch?	The operating system preserves the outgoing task’s execution state, such as registers, program counter and stack pointer, and restores the incoming task’s state. Address-space state is changed when needed; switching between threads of one process need not change the page-table root. Exact saved state depends on the architecture and implementation.

4. Pla d'estudi de 8 setmanes amb repetició espaiada

Setmanes 1–2: Fonaments (basic): Completa els jocs de nivell Bàsic (1 joc de 32 targetes al dia). Assegura la precisió dels conceptes clau i fes el repàs diari (15–20 min).
Setmanes 3–5: Aplicació (intermediate): Incorpora els jocs Intermedis (20 targetes noves/dia) mantenint el repàs espaiat dels bàsics. Respon en veu alta abans de girar la targeta.
Setmanes 6–7: Mestratge (advanced): Passa als jocs Avançats (15 targetes noves/dia) i combina preguntes dels tres nivells per preparar exàmens i proves oficials.
Setmana 8: Consolidació: Atura les targetes noves durant 7 dies i repassa les targetes més difícils fins a superar el 95% d'encert.

5. Errors habituals d'estudi i com evitar-los

Girar la targeta sense respondre abans: Formula sempre la resposta completa mentalment o en veu alta abans de mirar el revers.
Deixar tot l'estudi per a l'últim dia: La consolidació de la memòria depèn del descans nocturn. 20 minuts diaris superen qualsevol marató d'última hora.
Ignorar el context: Llegeix l'explicació o frase d'exemple del revers per entendre com s'aplica cada concepte en casos reals.
Saltar directament al nivell avançat: Consolida un 90% d'encerts al nivell basic abans de passar a intermediate i advanced.

6. Preguntes freqüents (FAQ)

Quantes targetes de Ciberseguretat hauria d'estudiar cada dia?

Recomanem entre 20 i 32 targetes noves al dia (1 joc curat) més els repassos diaris (uns 15–25 minuts en total).

Per quin nivell de Ciberseguretat hauria de començar a flashcards.world?

Comença pel nivell Bàsic per assegurar la terminologia fonamental i passa a l'Intermedi quan superis el 85% d'encerts.

Puc estudiar aquests jocs de Ciberseguretat al mòbil i a l'ordinador?

Sí, tots els jocs enllaçats estan disponibles a flashcards.world des de qualsevol dispositiu.

Explora tots els jocs de targetes de Ciberseguretat a flashcards.world →