How does the AWS IAM policy evaluation logic resolve conflicting Allow and Deny statements across multiple policies?

Evaluation starts with an implicit Deny. An explicit Deny in any applicable policy (SCP, resource-based policy, permissions boundary, session policy, or identity-based policy) always overrides any explicit Allow.

What is the architectural difference between an IAM Identity-Based Policy and a Resource-Based Policy?

Identity-based policies attach to IAM users, groups, or roles to define what actions that principal can perform. Resource-based policies attach directly to a resource (such as an S3 bucket, SQS queue, or KMS key) and include a Principal element specifying who can access it.

How do a process and a thread differ in a typical operating system?

A process is a resource and protection container with its own virtual address space. Threads within it share that address space and resources such as open files, but each has its own execution state, including registers, program counter and stack. Separate processes can explicitly share memory.

What state is saved and restored during a CPU context switch?

The operating system preserves the outgoing task’s execution state, such as registers, program counter and stack pointer, and restores the incoming task’s state. Address-space state is changed when needed; switching between threads of one process need not change the page-table root. Exact saved state depends on the architecture and implementation.

4 min read

Technology, Cloud & AI Português (Brasil) 3 Interactive Flashcard Decks

Guia de estudo de Cibersegurança e Segurança da Informação: Domine os conceitos essenciais com Flashcards

Q: Quantos flashcards de Cibersegurança e Segurança da Informação devo estudar por dia?

Comece com 20 a 32 novos cartões por dia (1 conjunto) mais as revisões diárias.

Q: Por qual nível começar no flashcards.world?

Inicie pelo nível Básico e avance para o Intermediário ao atingir 85% de acerto.

Guia completo de Cibersegurança e Segurança da Informação com conjuntos de flashcards básicos, intermediários e avançados em flashcards.world.

Practice 3 Curated Cybersecurity Decks ↓ Browse All Cybersecurity Flashcards →

Interactive Premade Curricula

Cybersecurity Flashcard Decks (3)

Select any deck below to study cards with active recall, audio pronunciation, and FSRS spaced repetition, or filter by difficulty level.

Foundational EN → EN

Cloud Security: AWS IAM, Organizations, KMS, Encryption & Threat Detection

Practice Deck → More basic sets

Intermediate EN → EN

Network Security: Amazon VPC, NACLs, PrivateLink, VPN, CloudFront & Network Firewall

Practice Deck → More intermediate sets

Advanced EN → EN

Operating Systems, Networking Protocols & Distributed Systems

Practice Deck → More advanced sets

Explorar todos os conjuntos de Cibersegurança e Segurança da Informação no flashcards.world

1. Por que a Recordação Ativa e a Repetição Espaçada funcionam para Cibersegurança e Segurança da Informação

Dominar Cibersegurança e Segurança da Informação exige compreensão sólida e memorização precisa de conceitos, regras e aplicações práticas. Abaixo estão os conjuntos curados de Cibersegurança e Segurança da Informação no flashcards.world organizados por nível.

2. Conjuntos de Flashcards de Cibersegurança e Segurança da Informação no flashcards.world

3. Exemplos de Flashcards de Alto Rendimento (Cibersegurança e Segurança da Informação)

Nível	Frente (Pergunta / Termo)	Verso (Resposta / Explicação)
`basic`	How does the AWS IAM policy evaluation logic resolve conflicting Allow and Deny statements across multiple policies?	Evaluation starts with an implicit Deny. An explicit Deny in any applicable policy (SCP, resource-based policy, permissions boundary, session policy, or identity-based policy) always overrides any explicit Allow.
`basic`	What is the architectural difference between an IAM Identity-Based Policy and a Resource-Based Policy?	Identity-based policies attach to IAM users, groups, or roles to define what actions that principal can perform. Resource-based policies attach directly to a resource (such as an S3 bucket, SQS queue, or KMS key) and include a Principal element specifying who can access it.
`intermediate`	How many IP addresses does AWS reserve in every VPC subnet CIDR block, and what are those five addresses used for?	AWS reserves 5 IP addresses in every subnet (first 4 and last 1). For example, in 10.0.0.0/24: .0 is the network address, .1 is reserved for the VPC router, .2 is reserved for the AWS DNS server, .3 is reserved for future use, and .255 is the network broadcast address.
`intermediate`	Compare Security Groups and Network Access Control Lists (NACLs) in Amazon VPC.	Security Groups operate at the ENI/instance level, are stateful (return traffic is automatically allowed regardless of outbound rules), and support Allow rules only. NACLs operate at the subnet boundary, are stateless (both inbound and outbound return traffic on ephemeral ports must be explicitly permitted), and support numbered Allow and Deny rules evaluated in order.
`advanced`	How do a process and a thread differ in a typical operating system?	A process is a resource and protection container with its own virtual address space. Threads within it share that address space and resources such as open files, but each has its own execution state, including registers, program counter and stack. Separate processes can explicitly share memory.
`advanced`	What state is saved and restored during a CPU context switch?	The operating system preserves the outgoing task’s execution state, such as registers, program counter and stack pointer, and restores the incoming task’s state. Address-space state is changed when needed; switching between threads of one process need not change the page-table root. Exact saved state depends on the architecture and implementation.

4. Cronograma de Estudo de 8 Semanas

Semanas 1–2: Base (basic): Conclua os conjuntos Básicos (32 novos cartões/dia) e revise diariamente por 15–20 minutos.
Semanas 3–5: Consolidação (intermediate): Adicione os conjuntos Intermediários (20 novos cartões/dia), respondendo em voz alta antes de virar o cartão.
Semanas 6–7: Domínio (advanced): Avance para os conjuntos Avançados (15 novos cartões/dia) misturando tópicos para provas e concursos.
Semana 8: Revisão Final: Concentre-se na revisão dos cartões mais difíceis no flashcards.world até atingir 95% de acerto.

5. Erros Comuns de Estudo e Como Evitá-los

Virar o cartão sem responder antes: Sempre formule a resposta antes de olhar o verso.
Deixar para estudar na véspera: 20 minutos todos os dias garantem retenção duradoura.
Ignorar os exemplos: Leia o contexto completo no verso de cada cartão.

6. Perguntas Frequentes (FAQ)

Quantos flashcards de Cibersegurança e Segurança da Informação devo estudar por dia?

Comece com 20 a 32 novos cartões por dia (1 conjunto) mais as revisões diárias.

Por qual nível começar no flashcards.world?

Inicie pelo nível Básico e avance para o Intermediário ao atingir 85% de acerto.

Explorar todos os conjuntos de Cibersegurança e Segurança da Informação no flashcards.world →