Master AWS Cloud Computing, DevOps, EC2, S3, VPC, RDS & Security — Exact Answers from PDF
Categorized into Beginner, Intermediate & Advanced Levels
🟢 Beginner Q1–Q85
Q1
What is AWS?
AWS stands for Amazon Web Services. AWS is a platform that provides on-demand resources for hosting web services, storage, networking, databases and other resources over the internet with a pay-as-you-go pricing.
Q2
What are the components of AWS?
EC2 – Elastic Compute Cloud, S3 – Simple Storage Service, Route53, EBS – Elastic Block Store, Cloudwatch, Key-Paris are few of the components of AWS.
Q3
What are key-pairs?
Key-pairs are secure login information for your instances/virtual machines. To connect to the instances we use key-pairs that contain a public-key and private-key.
Q4
What is S3?
S3 stands for Simple Storage Service. It is a storage service that provides an interface that you can use to store any amount of data, at any time, from anywhere in the world. With S3 you pay only for what you use and the payment model is pay-as-you-go.
Q5
What are the pricing models for EC2 instances?
The different pricing model for EC2 instances are as below: • On-demand • Reserved • Spot • Scheduled • Dedicated
Q6
What are the types of volumes for EC2 instances?
There are two types of volumes: • Instance store volumes • EBS – Elastic Block Stores
Q7
What are EBS volumes?
EBS stands for Elastic Block Stores. They are persistent volumes that you can attach to the instances. With EBS volumes, your data will be preserved even when you stop your instances, unlike your instance store volumes where the data is deleted when you stop the instances.
Q8
What are the types of volumes in EBS?
Following are the types of volumes in EBS: • General purpose • Provisioned IOPS • Magnetic • Cold HDD • Throughput optimized
Q9
What are the different types of instances?
Following are the types of instances: • General purpose • Computer Optimized • Storage Optimized • Memory Optimized • Accelerated Computing
Q10
What is an auto-scaling and what are the components?
Auto scaling allows you to automatically scale-up and scale-down the number of instances depending on the CPU utilization or memory utilization. There are 2 components in Auto scaling, they are Auto-scaling groups and Launch Configuration.
Q11
What are reserved instances?
Reserved instances are the instance that you can reserve a fixed capacity of EC2 instances. In reserved instances you will have to get into a contract of 1 year or 3 years.
Q12
What is an AMI?
AMI stands for Amazon Machine Image. AMI is a template that contains the software configurations, launch permission and a block device mapping that specifies the volume to attach to the instance when it is launched.
Q13
What is an EIP?
EIP stands for Elastic IP address. It is designed for dynamic cloud computing. When you want to have a static IP address for your instances when you stop and restart your instances, you will be using EIP address.
Q14
What is Cloudwatch?
Cloudwatch is a monitoring tool that you can use to monitor your various AWS resources. Like health check, network, Application, etc.
Q15
What are the types in cloudwatch?
There are 2 types in cloudwatch. Basic monitoring and detailed monitoring. Basic monitoring is free and detailed monitoring is chargeable.
Q16
What are the cloudwatch metrics that are available for EC2 instances?
Diskreads, Diskwrites, CPU utilization, networkpacketsIn, networkpacketsOut, networkIn, networkOut, CPUCreditUsage, CPUCreditBalance.
Q17
What is the minimum and maximum size of individual objects that you can store in S3?
The minimum size of individual objects that you can store in S3 is 0 bytes and the maximum bytes that you can store for individual objects is 5TB.
Q18
What are the different storage classes in S3?
Following are the types of storage classes in S3: • Standard frequently accessed • Standard infrequently accessed • One-zone infrequently accessed • Glacier • RRS – reduced redundancy storage
Q19
What is the default storage class in S3?
The default storage class in S3 is Standard frequently accessed.
Q20
What is glacier?
Glacier is the back up or archival tool that you use to back up your data in S3.
Q21
How can you secure the access to your S3 bucket?
There are two ways that you can control the access to your S3 buckets: • ACL – Access Control List • Bucket policies
Q22
How can you encrypt data in S3?
You can encrypt the data by using the below methods: • Server Side Encryption – S3 (AES 256 encryption) • Server Side Encryption – KMS (Key management Service) • Server Side Encryption – C (Client Side)
Q23
What are the parameters for S3 pricing?
The pricing model for S3 is as below: • Storage used • Number of requests you make • Storage management • Data transfer • Transfer acceleration
Q24
What is the pre-requisite to work with Cross region replication in S3?
You need to enable versioning on both source bucket and destination to work with cross region replication. Also both the source and destination bucket should be in different region.
Q25
What are roles?
Roles are used to provide permissions to entities that you trust within your AWS account. Roles are users in another account. Roles are similar to users but with roles you do not need to create any username and password to work with the resources.
Q26
What are policies and what are the types of policies?
Policies are permissions that you can attach to the users that you create. These policies will contain that access that you have provided to the users that you have created. There are 2 types of policies: • Managed policies • Inline policies
Q27
What is cloudfront?
Cloudfront is an AWS web service that provided businesses and application developers an easy and efficient way to distribute their content with low latency and high data transfer speeds. Cloudfront is content delivery network of AWS.
Q28
What are edge locations?
Edge location is the place where the contents will be cached. When a user tries to access some content, the content will be searched in the edge location. If it is not available then the content will be made available from the origin location and a copy will be stored in the edge location.
Q29
What is the maximum individual archive that you can store in glacier?
You can store a maximum individual archive of upto 40 TB.
Q30
What is VPC?
VPC stands for Virtual Private Cloud. VPC allows you to easily customize your networking configuration. VPC is a network that is logically isolated from other network in the cloud. It allows you to have your own IP address range, subnets, internet gateways, NAT gateways and security groups.
Q31
What is VPC peering connection?
VPC peering connection allows you to connect 1 VPC with another VPC. Instances in these VPC behave as if they are in the same network.
Q32
What are NAT gateways?
NAT stands for Network Address Translation. NAT gateways enables instances in a private subnet to connect to the internet but prevent the internet from initiating a connection with those instances.
Q33
How can you control the security to your VPC?
You can use security groups and NACL (Network Access Control List) to control the security to your VPC.
Q34
What are the different types of storage gateway?
Following are the types of storage gateway: • File gateway • Volume gateway • Tape gateway
Q35
What is a snowball?
Snowball is a data transport solution that used source appliances to transfer large amounts of data into and out of AWS. Using snowball, you can move huge amount of data from one place to another which reduces your network costs, long transfer times and also provides better security.
Q36
What are the database types in RDS?
Following are the types of databases in RDS: • Aurora • Oracle • MYSQL server • Postgresql • MariaDB • SQL server
Q37
What is a redshift?
Amazon redshift is a data warehouse product. It is a fast and powerful, fully managed, petabyte scale data warehouse service in the cloud.
Q38
What is SNS?
SNS stands for Simple Notification Service. SNS is a web service that makes it easy to notifications from the cloud. You can set up SNS to receive email notification or message notification.
Q39
What are the types of routing polices in route53?
Following are the types of routing policies in route53: • Simple routing • Latency routing • Failover routing • Geolocation routing • Weighted routing • Multivalue answer
Q40
What is the maximum size of messages in SQS?
The maximum size of messages in SQS is 256 KB.
Q41
What are the types of queues in SQS?
There are 2 types of queues in SQS: • Standard queue • FIFO (First In First Out)
Q42
What is multi-AZ RDS?
Multi-AZ (Availability Zone) RDS allows you to have a replica of your production database in another availability zone. Multi-AZ (Availability Zone) database is used for disaster recovery. You will have an exact copy of your database. So when your primary database goes down, your application will automatically failover to the standby database.
Q43
What are the types of backups in RDS database?
There are 2 types of backups in RDS database: • Automated backups • Manual backups which are known as snapshots.
Q44
What is the difference between security groups and network access control list?
Security Groups vs Network Access Control List: • Security Groups can control the access at the instance level | Network ACL can control access at the subnet level • Security Groups can add rules for 'allow' only | Network ACL can add rules for both 'allow' and 'deny' • Security Groups evaluate all rules before allowing the traffic | Network ACL rules are processed in order number when allowing traffic • Security Groups can assign unlimited number of security groups | Network ACL can assign upto 5 security groups • Security Groups use Stateful filtering | Network ACL uses Stateless filtering
Q45
What are the types of load balancers in EC2?
There are 3 types of load balancers: • Application load balancer • Network load balancer • Classic load balancer
Q46
What is an ELB?
ELB stands for Elastic Load balancing. ELB automatically distributes the incoming application traffic or network traffic across multiple targets like EC2, containers, IP addresses.
Q47
What are the two types of access that you can provide when you are creating users?
Following are the two types of access that you can create: • Programmatic access • Console access
Q48
What are the benefits of auto scaling?
Following are the benefits of auto scaling: • Better fault tolerance • Better availability • Better cost management
Q49
What are security groups?
Security groups acts as a firewall that contains the traffic for one or more instances. You can associate one or more security groups to your instances when you launch then. You can add rules to each security group that allow traffic to and from its associated instances. You can modify the rules of a security group at any time, the new rules are automatically and immediately applied to all the instances that are associated with the security group.
Q50
What are shared AMI's?
Shared AMI's are the AMI that are created by other developed and made available for other developed to use.
Q51
What is the difference between the classic load balancer and application load balancer?
Dynamic port mapping, multiple port multiple listeners is used in Application Load Balancer. One port one listener is achieved via Classic Load Balancer.
Q52
By default how many Ip address does aws reserve in a subnet?
5
Q53
What is meant by subnet?
A large section of IP Address divided in to chunks are known as subnets.
Q54
How can you convert a public subnet to private subnet?
No it's not possible, we can increase it but not reduce them.
Q56
What is the use of elastic ip are they charged by AWS?
These are ipv4 address which are used to connect the instance from internet, they are charged if the instances are not attached to it.
Q57
One of my s3 bucket is deleted but i need to restore, is there any possible way?
If versioning is enabled we can easily restore them.
Q58
When I try to launch an ec2 instance i am getting Service limit exceed, how to fix the issue?
By default AWS offer service limit of 20 running instances per region, to fix the issue we need to contact AWS support to increase the limit based on the requirement.
Q59
I need to modify the ebs volumes in Linux and windows is it possible?
Yes its possible from console use modify volumes in section give the size you need then for windows go to disk management, for Linux mount it to achieve the modification.
Q60
Is it possible to stop a RDS instance, how can I do that?
Yes it's possible to stop rds. Instance which are non-production and non multi AZ's.
Q61
What is meant by parameter groups in rds. And what is the use of it?
Since RDS is a managed service AWS offers a wide set of parameter in RDS as parameter group which is modified as per requirement.
Q62
What is the use of tags and how they are useful?
Tags are used for identification and grouping AWS Resources.
Q63
I am viewing an AWS Console but unable to launch the instance, I receive an IAM Error how can I rectify it?
As AWS user I don't have access to use it, I need to have permissions to use it further.
Q64
I don't want my AWS Account id to be exposed to users how can I avoid it?
In IAM console there is option as sign in url where I can rename my own account name with AWS account.
Q65
By default how many Elastic Ip address does AWS Offer?
5 elastic ip per region.
Q66
You are enabled sticky session with ELB. What does it do with your instance?
Binds the user session with a specific instance.
Q67
Which type of load balancer makes routing decisions at either the transport layer or the Application layer and supports either EC2 or VPC?
Classic Load Balancer.
Q68
Which is virtual network interface that you can attach to an instance in a VPC?
Elastic Network Interface.
Q69
You have launched a Linux instance in AWS EC2. While configuring security group, you have selected SSH, HTTP, HTTPS protocol. Why do we need to select SSH?
To verify that there is a rule that allows traffic from EC2 Instance to your computer.
Q70
You have chosen a windows instance with Classic and you want to make some change to the Security group. How will these changes be effective?
Changes are automatically applied to windows instances.
Q71
Load Balancer and DNS service comes under which type of cloud service?
IAAS-Storage.
Q72
You have an EC2 instance that has an unencrypted volume. You want to create another Encrypted volume from this unencrypted volume. Which of the following steps can achieve this?
Create a snapshot of the unencrypted volume (applying encryption parameters), copy the Snapshot and create a volume from the copied snapshot.
Q73
Where does the user specify the maximum number of instances with the auto scaling Commands?
Auto scaling Launch Config.
Q74
Which are the types of AMI provided by AWS?
Instance Store backed, EBS Backed.
Q75
After configuring ELB, you need to ensure that the user requests are always attached to a Single instance. What setting can you use?
Sticky session.
Q76
When do I prefer to Provisioned IOPS over the Standard RDS storage?
If you have do batch-oriented is workloads.
Q77
If I am running on my DB Instance a Multi-AZ deployments, can I use to the stand by the DB Instance for read or write a operation along with to primary DB instance?
Primary db instance does not working.
Q78
Which the AWS services will you use to the collect and the process e-commerce data for the near by real-time analysis?
Good of Amazon DynamoDB.
Q79
A company is deploying the new two-tier an web application in AWS. The company has to limited on staff and the requires high availability, and the application requires to complex queries and table joins. Which configuration provides to the solution for company's requirements?
An web application provide on Amazon DynamoDB solution.
Q80
Which the statement use to cases are suitable for Amazon DynamoDB?
The storing metadata for the Amazon S3 objects & The Running of relational joins and complex an updates.
Q81
Your application has to the retrieve on data from your user's mobile take every 5 minutes and then data is stored in the DynamoDB, later every day at the particular time the data is an extracted into S3 on a per user basis and then your application is later on used to visualize the data to user. You are asked to the optimize the architecture of the backend system can to lower cost, what would you recommend do?
Introduce Amazon Elasticache to the cache reads from the Amazon DynamoDB table and to reduce the provisioned read throughput.
Q82
You are running to website on EC2 instances deployed across multiple Availability Zones with an Multi-AZ RDS MySQL Extra Large DB Instance. The site performs a high number of small reads and write per second and relies on the eventual consistency model. After comprehensive tests you discover that there is read contention on RDS MySQL. Which is the best approaches to the meet these requirements?
Deploy Elasti Cache in-memory cache running in each availability zone and then Increase the RDS MySQL Instance size and Implement provisioned IOPS.
Q83
An startup is running a pilot deployment of around 100 sensors to measure street noise and air quality in urban areas for 3 months. Every month around 4GB of sensor data are generated. The company uses a load balanced auto scaled layer of EC2 instances and a RDS database with 500 GB standard storage. The pilot was success and now they want to deploy atleast 100K sensors which need to be supported by backend. You need to store data for at least 2 years to analyze it. Which setup would you prefer?
Replace the RDS instance with an 6 node Redshift cluster with 96TB of storage.
Q84
Suppose you have an application where you have to render images and also do some general computing. Which service will be best fit your need?
Used on Application Load Balancer.
Q85
How will you change the instance type for the instances, which are running in your applications tier and using Auto Scaling. Where will you change it from?
Changed to Auto Scaling launch configuration.
🟡 Intermediate Q86–Q170
Q86
You have an content management system running on the Amazon EC2 instance that is approaching 100% CPU of utilization. Which option will be reduce load on the Amazon EC2 instance?
Create a load balancer, and register the Amazon EC2 instance with it.
Q87
What does the Connection draining do?
The re-routes traffic from the instances which are to be updated (or) failed an health to check.
Q88
When the instance is an unhealthy, it is terminated and replaced with new ones, which of the services does that?
The service make a fault tolerance.
Q89
What are the life cycle hooks used for the AutoScaling?
They are used to put an additional wait time to the scale in or scale out events.
Q90
An user has setup an Auto Scaling group. Due to some issue the group has failed to launch a single instance for more than 24 hours. What will happen to the Auto Scaling in that condition?
The auto Scaling will suspend the scaling process.
Q91
You have an EC2 Security Group with several running EC2 instances. You changed the Security Group rules to allow inbound traffic on a new port and protocol, and then launched several new instances in the same Security Group. Such the new rules apply?
Immediately to all the instances in security groups.
Q92
To create a mirror image of your environment in another region for disaster recovery, which of the following AWS resources do not need to be recreated in second region?
Maybe the selected on Route 53 Record Sets.
Q93
A customer wants to capture all client connections to get information from his load balancers at an interval of 5 minutes only, which option should he choose for his application?
The condition should be Enable to AWS CloudTrail for the loadbalancers.
Q94
Which of the services would you not use to deploy an app?
Lambda app not used on deploy.
Q95
How does Elastic Beanstalk apply updates?
By a duplicate ready with a updates prepare before swapping.
Q96
A key was created in the Oregon region to encrypt data in North Virginia region for security purposes. Two users and an external AWS account were added to the key. When trying to encrypt an object in S3, the key was not listed. What could be the reason & solution?
The Key should be working in the same region.
Q97
A company needs to monitor read and write IOPS for AWS MySQL RDS instances and send real-time alerts to the operations team. Which AWS services can accomplish this?
The monitoring on Amazon CloudWatch.
Q98
The organization that is currently using consolidated billing has recently acquired another company that already has a number of AWS accounts. How could an Administrator ensure that all AWS accounts, from both existing company and the acquired company, are billed to a single account?
Invites the acquired company's AWS accounts to join the existing company's organization by using AWS Organizations.
Q99
The user has created an application, which will be hosted on EC2. The application makes calls to DynamoDB to fetch certain data. The application is using the DynamoDB SDK to connect with the EC2 instance. Which is best practice for security in this scenario?
The user should attach an IAM roles with the DynamoDB access to EC2 instance.
Q100
You have an application running on EC2 Instance, which will allow users to download files from a private S3 bucket using a pre-assigned URL. Before generating the URL the application should verify the existence of file in S3. How does the application use AWS credentials to access S3 bucket securely?
Create an IAM role for the EC2 that allows list access to objects in S3 buckets. Launch the instance with this role, and retrieve the role's credentials from EC2 Instance metadata.
Q101
You use Amazon CloudWatch as your primary monitoring system for web application. After a recent software deployment, your users are getting Intermittent 500 Internal Server Errors when using the web application. You want to create a CloudWatch alarm, and notify the on-call engineer when these occur. How can you accomplish this using AWS services?
Create a CloudWatch Logs group and define metric filters that capture 500 Internal Server Errors. Set a CloudWatch alarm on the metric and use Amazon Simple Notification Service to notify the on-call engineers when CloudWatch alarm is triggered.
Q102
You are designing a multi-platform web application for AWS. The application will run on EC2 instances and will be accessed from PCs, tablets and smart phones. Supported platforms are Windows, MACOS, IOS and Android. Separate sticky sessions and SSL certificate setups are required for the different platform types. Which describes the most cost effective and performance efficient architecture setup?
Assign multiple ELBs to an EC2 instance or group of EC2 instances running common component of the web application, one ELB for each platform type. Session stickiness and SSL termination are done for the ELBs.
Q103
You are migrating a legacy client-server application for AWS. The application responds to a specific DNS visible domain and has a server 2-tier architecture, with multiple application servers and a database server. Remote clients use TCP to connect to the application servers. The application servers need to know the IP address of clients in order to function properly and are currently taking that information from TCP socket. A Multi-AZ RDS MySQL instance will be used for database. During the migration you change the application code but you have filed a change request. How would you implement the architecture on AWS in order to maximize scalability and high availability?
File a change request to implement Proxy Protocol support in the application. Use ELB with TCP Listener and Proxy Protocol enabled to distribute the load on two application servers in the different AZs.
Q104
Your application currently leverages AWS Auto Scaling to grow and shrink as load Increases/decreases and has been performing well. Your marketing team expects a steady ramp up in traffic to follow an upcoming campaign that will result in 20x growth in traffic over 4 weeks. Your forecast for approximate number of Amazon EC2 instances necessary to meet peak demand is 175. What should you do to avoid potential service disruptions during the ramp up traffic?
Check the service limits in the Trusted Advisors and adjust as necessary, so that forecasted count remains within the limits.
Q105
You have a web application running on six Amazon EC2 instances, consuming about 45% of resources on each instance. You are using auto-scaling to make sure that six instances are running at all times. The number of requests this application processes is consistent and does not experience spikes. The application is critical to your business and you want high availability at all times. You want the load to be distributed evenly between all instances. You also want to use the same Amazon Machine Image (AMI) for all instances. Which architectural choices should you make?
Deploy 3 EC2 instances in one availability zone and 3 in another availability zones and use Amazon Elastic Load Balancer.
Q106
You are designing an application that contains protected health information. Security and compliance requirements for your application mandate that all protected health information in application use encryption at rest and in transit. The application uses a three-tier architecture where data flows through the load balancers and is stored on Amazon EBS volumes for processing, and the results are stored in Amazon S3 using AWS SDK. Which of the options satisfy the security requirements?
Use TCP load balancing on load balancer, SSL termination on Amazon EC2 instances, OS-level disk encryption on Amazon EBS volumes, and Amazon S3 with server-side encryption. Also use SSL termination on load balancers, an SSL listener on the Amazon EC2 instances, Amazon EBS encryption on the EBS volumes containing the PHI, and Amazon S3 with server-side encryption.
Q107
An startup deploys its photo-sharing site in a VPC. An elastic load balancer distributes web traffic across two subnets. The load balancer session stickiness is configured to use AWS-generated session cookie, with a session TTL of 5 minutes. The web server Auto Scaling group is configured as min-size=4, max-size=4. After 60 minutes of load-testing, web server logs show that 2 instances in us-west-2a received requests while 2 instances in us-west-2b received 0 HTTP requests from the load-tester. Which recommendations can help ensure that load-testing HTTP requests are evenly distributed across all four web servers?
Re-configure the load-testing software to re-resolve DNS for each web request.
Q108
To serve web traffic for a popular product, 10 m1.large heavy utilization Reserved Instances are evenly spread across two availability zones. Route 53 is used to deliver the traffic to an Elastic Load Balancer. After several months, the product grows more popular and you need additional capacity. Your company purchases two c3.2xlarge medium utilization RIs. You register the two c3.2xlarge instances with your ELB and quickly find that the m1.large instances are at 100% capacity and the c3.2xlarge instances have significant unused capacity. Which option is the most cost effective and uses EC2 capacity most effectively?
Use a separate ELB for each instance type and distribute load to ELBs with a Route 53 weighted round robin.
Q109
An AWS customer is deploying a web application that is composed of a front-end running on Amazon EC2 and confidential data stored on Amazon S3. The customer's security policy is that all accessing operations to this sensitive data must be authenticated and authorized by a centralized access management system operated by a separate security team. The web application team that owns and administers the EC2 web front-end instances are prohibited from having any ability to access data that circumvents this centralized access management system. Which configuration will support these requirements?
Configure the web application to authenticate end-users against the centralized access management system. Have the web application provision trusted users STS tokens entitling the download of the approved data directly from Amazon S3.
Q110
A Enterprise customer is starting their migration to the cloud. Their main reason for migrating is agility and they want to make their internal Microsoft active directory available to many applications running on AWS, so internal users only have to remember one set of credentials and as a central point of user control for leavers and joiners. How could they make their directory secure and highly available with minimal on-premises infrastructure changes in the most cost and time efficient way?
By using a VPC, they could create an extension to their data center and make use of resilient hardware IPSEC tunnels, they could then have two domain controller instances that are joined to the existing domain and reside within different subnets in different availability zones.
Q111
What is Cloud Computing?
Cloud computing means it provides services to access programs, application, storage, network, server over the internet through browser or client side application on your PC, Laptop, Mobile by the end user without installing, updating and maintaining them.
Q112
Why we go for Cloud Computing?
• Lower computing cost • Improved Performance • No IT Maintenance • Business connectivity • Easily upgraded • Device Independent
Q113
What are the deployment models using in Cloud?
• Private Cloud • Public Cloud • Hybrid cloud • Community cloud
Q114
Explain Cloud Service Models?
SAAS (Software as a Service): It is software distribution model in which application are hosted by a vendor over the internet for the end user freeing from complex software and hardware management. (Ex: Google drive, drop box)
PAAS (Platform as a Service): It provides platform and environment to allow developers to build applications. It frees developers without going into the complexity of building and maintaining the infrastructure. (Ex: AWS Elastic Beanstalk, Windows Azure)
IAAS (Infrastructure as a Service): It provides virtualized computing resources over the internet like cpu, memory, switches, routers, firewall, Dns, Load balancer. (Ex: Azure, AWS)
Q115
What are the advantage of Cloud Computing?
• Pay per use • Scalability • Elasticity • High Availability • Increase speed and Agility • Go global in Minutes
Q116
What is AWS?
Amazon web service is a secure cloud services platform offering compute, power, database, storage, content delivery and other functionality to help business scale and grow. AWS is fully on-demand. AWS is Flexibility, availability and Scalability. AWS is Elasticity: scale up and scale down as needed.
Q117
What is mean by Region, Availability Zone and Edge Location?
Region: An independent collection of AWS resources in a defined geography. A collection of Data centers (Availability zones). All availability zones in a region connected by high bandwidth.
Availability Zones: An Availability zone is a simply a data center. Designed as independent failure zone. High speed connectivity, Low latency.
Edge Locations: Edge location are the important part of AWS Infrastructure. Edge locations are CDN endpoints for cloud front to deliver content to end user with low latency.
Q118
How to access AWS Platform?
• AWS Console • AWS CLI (Command line interface) • AWS SDK (Software Development Kit)
Q119
What is EC2? What are the benefits in EC2?
Amazon Elastic compute cloud is a web service that provides resizable compute capacity in the cloud. AWS EC2 provides scalable computing capacity in the AWS Cloud. These are the virtual servers also called as an instances. We can use the instances pay per use basis.
Benefits: • Easier and Faster • Elastic and Scalable • High Availability • Cost-Effective
Amazon machine image is a special type of virtual appliance that is used to create a virtual machine within the amazon Elastic compute cloud. AMI defines the initial software that will be in an instance when it is launched.
Types of AMI: • Published by AWS • AWS Marketplace • Generated from existing instances • Uploaded virtual server
Q123
How to Addressing AWS EC2 instances?
• Public Domain name system (DNS) name: When you launch an instance AWS creates a DNS name that can be used to access the instance. • Public IP: A launched instance may also have a public ip address. This IP address assigned from the address reserved by AWS and cannot be specified. • Elastic IP: An Elastic IP Address is an address unique on the internet that you reserve independently and associate with Amazon EC2 instance. This IP Address persists until the customer release it.
Q124
What is Security Group?
AWS allows you to control traffic in and out of your instance through virtual firewall called Security groups. Security groups allow you to control traffic based on port, protocol and source/Destination.
Q125
When does your instance show retired state?
Retired state only available in Reserved instances. Once the reserved instance reserving time (1 yr/3 yr) ends it shows Retired state.
Q126
My EC2 instance IP address changes automatically while instance stop and start. What is the reason for that and explain the solution?
AWS assigned Public IP automatically but it changes dynamically while stop and start. In that case we need to assign Elastic IP for that instance, once assigned it doesn't change automatically.
Q127
What is Elastic Beanstalk?
AWS Elastic Beanstalk is the fastest and simplest way to get an application up and running on AWS. Developers can simply upload their code and the service automatically handles all the details such as resource provisioning, load balancing, Auto scaling and Monitoring.
Q128
What is Amazon Lightsail?
Lightsail is designed to be the easiest way to launch and manage a virtual private server with AWS. Lightsail plans include everything you need to jumpstart your project – a virtual machine, SSD based storage, data transfer, DNS Management and a static IP.
Q129
What is EBS?
Amazon EBS Provides persistent block level storage volumes for use with Amazon EC2 instances. Amazon EBS volume is automatically replicated with its availability zone to protect component failure offering high availability and durability. Amazon EBS volumes are available in a variety of types that differ in performance characteristics and Price.
Q130
How to compare EBS Volumes?
Magnetic Volume: Magnetic volumes have the lowest performance characteristics of all Amazon EBS volume types. EBS Volume size: 1 GB to 1 TB | Average IOPS: 100 IOPS | Maximum throughput: 40-90 MB
General-Purpose SSD: General purpose SSD volumes offers cost-effective storage that is ideal for a broad range of workloads. EBS Volume size: 1 GB to 16 TB | Maximum IOPS: upto 10000 IOPS | Maximum throughput: 160 MB
Provisioned IOPS SSD: Provisioned IOPS SSD volumes are designed to meet the needs of I/O intensive workloads, particularly database workloads that are sensitive to storage performance and consistency in random access I/O throughput. EBS Volume size: 4 GB to 16 TB | Maximum IOPS: upto 20000 IOPS | Maximum throughput: 320 MB
Q131
What is cold HDD and Throughput-optimized HDD?
Cold HDD: Cold HDD volumes are designed for less frequently accessed workloads. These volumes are significantly less expensive than throughput-optimized HDD volumes. EBS Volume size: 500 GB to 16 TB | Maximum IOPS: 200 IOPS | Maximum throughput: 250 MB
Throughput-Optimized HDD: Throughput-optimized HDD volumes are low cost HDD volumes designed for frequent access, throughput-intensive workloads such as big data, data warehouse. EBS Volume size: 500 GB to 16 TB | Maximum IOPS: 500 IOPS | Maximum throughput: 500 MB
Q132
What is Amazon EBS-Optimized instances?
Amazon EBS optimized instances ensure that the Amazon EC2 instance is prepared to take advantage of the I/O of the Amazon EBS Volume. An Amazon EBS-optimized instance uses an optimized configuration stack and provides additional dedicated capacity for Amazon EBS I/O. When you select Amazon EBS-optimized for an instance you pay an additional hourly charge for that instance.
Q133
What is EBS Snapshot?
• It can back up the data on the EBS Volume. Snapshots are incremental backups. • If this is your first snapshot it may take some time to create. Snapshots are point in time copies of volumes.
Q134
How to connect EBS volume to multiple instance?
We can't able to connect EBS volume to multiple instance, but we can able to connect multiple EBS Volume to single instance.
Q135
What are the virtualization types available in AWS?
Hardware assisted Virtualization (HVM): HVM instances are presented with a fully virtualized set of hardware and they execute by executing master boot record of the root block device of the image. It is default Virtualization.
Para virtualization (PV): This AMI boots with a special boot loader called PV-GRUB. The ability of the guest kernel to communicate directly with the hypervisor results in greater performance levels than other virtualization approaches but they cannot take advantage of hardware extensions such as networking, GPU etc. It is a customized Virtualization image that can be used only for particular service.
Q136
Differentiate Block storage and File storage?
Block Storage: Block storage operates at lower level, raw storage device level and manages data as a set of numbered, fixed size blocks.
File Storage: File storage operates at a higher level, the operating system level and manages data as a named hierarchy of files and folders.
Q137
What are the advantage and disadvantage of EFS?
Advantages: • Fully managed service • File system grows and shrinks automatically to petabytes • Can support thousands of concurrent connections • Multi AZ replication • Throughput scales automatically to ensure consistent low latency
Disadvantages: • Not available in all region • Cross region capability not available • More complicated to provision compared to S3 and EBS
Q138
What are the things we need to remember while creating s3 bucket?
• Amazon S3 bucket names are globally unique • This means bucket names must be unique across all AWS accounts • Bucket names can contain upto 63 lowercase letters, numbers, hyphens and periods • You can create and use multiple buckets • You can have upto 100 per account by default
Q139
What are the storage class available in Amazon s3?
Amazon S3 lifecycle configuration rules allow you to significantly reduce your storage costs by automatically transitioning data from one storage class to another or even automatically deleting data after a period of time. • Store backup data initially in Amazon S3 Standard • After 30 days, transition to Amazon Standard IA • After 90 days, transition to Amazon Glacier • After 3 years, delete
Q141
What is the relation between Amazon S3 and AWS KMS?
To encrypt Amazon S3 data at rest, you can use several variations of Server-Side Encryption. Amazon S3 encrypts your data at the object level as it writes it to disks in its data centers and decrypt it for you when you access it. SSE performed by Amazon S3 and AWS Key Management Service (AWS KMS) uses the 256-bit Advanced Encryption Standard (AES).
Q142
What is the function of cross region replication in Amazon S3?
Cross region replication is a feature that allows you to asynchronously replicate all new objects in the source bucket in one AWS region to a target bucket in another region. To enable cross-region replication, versioning must be turned on for both source and destination buckets. Cross region replication is commonly used to reduce the latency required to access objects in Amazon S3.
Q143
How to create Encrypted EBS volume?
You need to select 'Encrypt this volume' option in Volume creation page. While creation a new master key will be created unless you select a master key that you created separately in the service. Amazon uses the AWS key management service (KMS) to handle key management.
Q144
Explain stateful and Stateless firewall.
Stateful Firewall: A Security group is a virtual stateful firewall that controls inbound and outbound network traffic to AWS resources and Amazon EC2 instances. Operates at the instance level. It supports allow rules only. Return traffic is automatically allowed, regardless of any rules.
Stateless Firewall: A Network access control List (ACL) is a virtual stateless firewall on a subnet level. Supports allow rules and deny rules. Return traffic must be explicitly allowed by rules.
Q145
What is NAT Instance and NAT Gateway?
NAT Instance: A network address translation (NAT) instance is an Amazon Linux Machine Image (AMI) that is designed to accept traffic from instances within a private subnet, translate the source IP address to the Public IP address of the NAT instance and forward the traffic to the Internet Gateway.
NAT Gateway: A NAT gateway is an Amazon managed resource that is designed to operate just like a NAT instance but it is simpler to manage and highly available within an availability Zone. To allow instances within a private subnet to access internet resources through the IGW via a NAT gateway.
Q146
What is VPC Peering?
Amazon VPC peering connection is a networking connection between two Amazon VPCs that enables instances in either Amazon VPC to communicate with each other as if they are within the same network. You can create Amazon VPC peering connection between your own Amazon VPCs or Amazon VPC in another AWS account within a single region.
Q147
What is MFA in AWS?
Multi factor Authentication can add an extra layer of security to your infrastructure by adding a second method of authentication beyond just password or access key.
Data warehouse is a central repository for data that can come from one or more sources. Organizations typically use data warehouse to compile reports and search the database using highly complex queries. Data warehouse also typically updated on a batch schedule multiple times per day or per hour compared to an OLTP (Online Transaction Processing) relational database that can be updated thousands of times per second.
Q150
What is mean by Multi-AZ in RDS?
Multi AZ allows you to place a secondary copy of your database in another availability zone for disaster recovery purpose. Multi AZ deployments are available for all types of Amazon RDS Database engines. When you create a Multi-AZ DB instance, a primary instance is created in one Availability Zone and a secondary instance is created by another Availability zone.
Q151
What is Amazon Dynamo DB?
Amazon Dynamo DB is fully managed NoSQL database service that provides fast and predictable performance with seamless scalability. Dynamo DB makes it simple and Cost effective to store and retrieve any amount of data.
Q152
What is cloud formation?
Cloud formation is a service which creates the AWS infrastructure using code. It helps to reduce time to manage resources. We can create our resources Quickly and faster.
Auto Scaling group is a collection of Amazon EC2 instances managed by the Auto scaling service. Each auto scaling group contains configuration options that control when auto scaling should launch new instance or terminate existing instance.
Q155
Differentiate Basic and Detailed monitoring in cloud watch?
Basic Monitoring: Basic monitoring sends data points to Amazon CloudWatch every five minutes for a limited number of preselected metrics at no charge.
Detailed Monitoring: Detailed monitoring sends data points to Amazon CloudWatch every minute and allows data aggregation for an additional charge.
Q156
What is the relationship between Route53 and Cloud front?
In Cloud front we will deliver content to edge location wise so here we can use Route 53 for Content Delivery Network. Additionally, if you are using Amazon CloudFront you can configure Route 53 to route Internet traffic to those resources.
Q157
What are the routing policies available in Amazon Route53?
Amazon ElastiCache is a web service that simplifies the setup and management of distributed in memory caching environment. • Cost Effective • High Performance • Scalable Caching Environment • Using Memcached or Redis Cache Engine
Q159
What is SES, SQS and SNS?
SES (Simple Email Service): SES is SMTP server provided by Amazon which is designed to send bulk mails to customers in a quick and cost-effective manner. SES does not allow to configure mail server.
SQS (Simple Queue Service): SQS is a fast, reliable and scalable, fully managed message queuing service. Amazon SQS makes it simple and cost effective. It's a temporary repository for messages waiting for processing and acts as a buffer between the component producer and the consumer.
SNS (Simple Notification Service): SNS is a web service that coordinates and manages the delivery or sending of messages to recipients.
Q160
How To Use Amazon SQS? What Is AWS?
Amazon Web Services is a secure cloud services stage, offering compute power, database storage, content delivery and other functionality to help industries scale and grow.
Q161
What is the importance of buffer in AWS?
Low price – Consume only the amount of computing, storage and other IT devices needed. No long-term assignment, minimum spend or up-front expenditure is required. Elastic and Scalable – Quickly Rise and decrease resources to applications to satisfy customer demand and control costs. Avoid provisioning maintenance up-front for plans with variable consumption speeds or low lifetimes.
Q162
What is the way to secure data for storing in the cloud?
• Avoid storage sensitive material in the cloud. • Read the user contract to find out how your cloud service storing works. • Be serious about passwords. • Encrypt. • Use an encrypted cloud service.
Q163
Name the several layers of Cloud Computing?
Cloud computing can be broken up into three main services: Software-as-a-Service (SaaS), Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS). PaaS in the middle, and IaaS on the lowest.
Q164
What is Lambda edge in AWS?
Lambda Edge lets you run Lambda functions to modify content that CloudFront delivers, executing the functions in AWS locations closer to the viewer. The functions run in response to CloudFront events, without provisioning or managing server.
Q165
Distinguish Between Scalability And Flexibility?
Flexibility: Cloud computing agrees your workers to be more flexible – both in and out of the workplace. Workers can access files using web-enabled devices such as smartphones, laptops and notebooks. In this way, cloud computing empowers the use of mobile technology.
Scalability: One of the key assistances of using cloud computing is its scalability. Cloud computing allows your business to easily scale up or down your IT requests as and when required. Most cloud service workers will allow you to increase your existing resources to accommodate increased business needs or changes.
Q166
What is IaaS?
IaaS is a cloud service that runs services on 'pay-for-what-you-use' basis. IaaS workers include Amazon Web Services, Microsoft Azure and Google Compute Engine. Users: IT Administrators.
Q167
What is PaaS?
PaaS runs cloud platforms and runtime environments to develop, test and manage software. Users: Software Developers.
Q168
What is SaaS?
In SaaS, cloud workers host and manage the software application on a pay-as-you-go pricing model. Users: End Customers.
Q169
Which Automation Tools Can Help With Spinup Services?
The API tools can be used for spin up services and also for written scripts. Scripts could be coded in Perl, bash or other languages of your preference. There is one more option that is flowery management and stipulating tools such as Puppet or advanced descendants. A tool called Scalar can also be used and finally we can go with a controlled explanation like a Right scale.
Q170
What Is an AMI? How Do I Build One?
An Amazon Machine Image (AMI) explains the programs and settings that will be applied when you launch an EC2 instance. Once you have finished organizing the data, services, and submissions on your instance, you can save your work as a custom AMI stored in Amazon EC2.
Process to create your own AMI using the AWS Management Console: 1. Configure an EC2 instance and its attached EBS volumes in the exact way you want them in the custom AMI. 2. Log out of your instance, but do not stop or terminate it. 3. Log in to the AWS Management Console, display the EC2 page for your region, then click Instances. 4. Choose the instance from which you want to create a custom AMI. 5. Click Actions and click Create Image. 6. Type a name for Image Name and optionally input text for Image Description. 7. Click Create Image.
🔴 Advanced Q171–Q250
Q171
What Are The Main Features Of Amazon Cloud Front?
Amazon Cloud Front is a web service that speeds up delivery of your static and dynamic web content, such as .html, .css, .js, and image files, to your users. CloudFront delivers your content through a universal network of data centers called edge locations.
Q172
What Are The Features Of The Amazon EC2 Service?
Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for designers. Amazon EC2's simple web service interface allows you to obtain and configure capacity with minimal friction.
Q173
Explain Storage For Amazon EC2 Instance.
An instance store is a provisional storing type located on disks that are physically attached to a host machine. This article presents you to the AWS instance store storage type, compares it to AWS Elastic Block Storage (AWS EBS), and shows you how to backup data stored on instance stores to AWS EBS.
Amazon SQS is a message queue service used by distributed requests to exchange messages through a polling model, and can be used to decouple sending and receiving components.
Q174
When attached to an Amazon VPC which two components provide connectivity with external networks?
• Internet Gateway (IGW) • Virtual Private Gateway (VGW)
Q175
Which of the following are characteristics of Amazon VPC subnets?
• Each subnet maps to a single Availability Zone. • By default, all subnets can route between each other, whether they are private or public.
Q176
How can you send request to Amazon S3?
Every communication with Amazon S3 is either authenticated or anonymous. Authentication is a process of validating the identity of the requester trying to access an Amazon Web Services (AWS) product. Authenticated requests must include a signature value that authenticates the request sender. The signature value is, in part, created from the requester's AWS access keys (access key identification and secret access key).
Q177
What is the best approach to secure information for conveying in the cloud?
• Backup Data Locally – guarantee that you have reinforcements for your information. • Avoid Storing Sensitive Information. • Use Cloud Services that Encrypt Data. • Encrypt Your Data. • Install Anti-infection Software. • Make Passwords Stronger. • Test the Security Measures in Place.
Q178
What is AWS Certificate Manager?
AWS Certificate Manager is an administration that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS administrations and your internal associated assets. SSL/TLS certificates are utilized to secure network communications and establish the identity of websites over the Internet and additionally assets on private systems. AWS Certificate Manager removes the tedious manual process of obtaining, uploading, and renewing SSL/TLS certificates.
Q179
What is the AWS Key Management Service?
AWS Key Management Service (AWS KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. AWS KMS is additionally coordinated with AWS CloudTrail to give encryption key use logs to help meet your auditing, regulatory and compliance needs.
Q180
What is Amazon EMR?
Amazon Elastic MapReduce (EMR) is a service that provides a completely managed hosted Hadoop framework over Amazon Elastic Compute Cloud (EC2).
Q181
What is Amazon Kinesis Firehose?
Amazon Kinesis Data Firehose is the easiest approach to reliably load streaming information into information stores and examination devices. It is a completely managed service that consequently scales to coordinate the throughput of your information and requires no continuous organization.
Q182
What Is Amazon CloudSearch and its highlights?
Amazon CloudSearch is a versatile cloud-based search service that forms some portion of Amazon Web Services (AWS). CloudSearch is normally used to incorporate customized search capabilities into different applications. According to Amazon, engineers can set a search application up and deploy it completely in under 60 minutes.
Q183
Is it feasible for an EC2 classic instance to wind up a member of a virtual private cloud?
Amazon Virtual Private Cloud (Amazon VPC) enables you to define a virtual system in your own consistently isolated zone inside the AWS cloud, known as a virtual private cloud (VPC). You can launch your Amazon EC2 resources, such as instances, into the subnets of your VPC. Your VPC closely resembles a conventional system that you may work in your own server farm, with the advantages of using adaptable foundation from AWS. You can configure your VPC; you can choose its IP address range, create subnets, and configure route tables, network gateways, and security settings.
Q184
Mention the work of an Amazon VPC router.
VPCs and Subnets. A virtual private cloud (VPC) is a virtual system committed to your AWS account. It is constantly separated from other virtual systems in the AWS Cloud. You can launch your AWS assets, such as Amazon EC2 instances, into your VPC.
Q185
How would one connect a VPC to corporate server farm?
AWS Direct Connect enables you to securely connect your AWS environment to your on-premises server farm or office over a standard 1 gigabit or 10 gigabit Ethernet fiber-optic connection. AWS Direct Connect offers dedicated fast, low latency connection, which bypasses internet access suppliers in your system path. An AWS Direct Connect location gives access to Amazon Web Services in the region it is associated with, as well as access to different US regions. AWS Direct Connect enables you to seamlessly partition the fiber-optic connections into multiple logical connections called Virtual Local Area Networks (VLAN).
Q186
Is it conceivable to boot EC2 from S3?
Yes, it can be done for instances with root volumes supported by local instance storage. By using Amazon S3, developers access the highly scalable, consistent, fast, low-priced data storage infrastructure that Amazon uses to follow its own worldwide network of websites. In order to perform systems in the Amazon EC2 environment, developers use the instruments provided to load their Amazon Machine Images (AMIs) into Amazon S3 and transfer them between Amazon S3 and Amazon EC2. Additional use cases may be for websites hosted on EC2 to load their static content from S3.
Q187
What is the distinction between Amazon S3 and EBS?
EBS is for mounting directly onto EC2 server instances. S3 is Object Oriented Storage that isn't continually waiting to be accessed (and is therefore less expensive). There is also AWS Glacier which is for long term storage where you don't really expect to need to access it, but wouldn't want to lose it.
There are two main kinds of EBS – HDD (Hard Disk Drives, i.e. magnetic spinning disks), which are fairly slow to access, and SSD, which are solid state drives which are fast to access, but more expensive. • Finally, EBS can be purchased with or without Provisioned IOPS. • Obviously these differences come with related pricing differences, so it's worth focusing on the differences and using the cheapest that delivers the performance you require.
Q188
What do you comprehend by AWS?
Amazon Web Services (AWS) is a cloud service platform which offers computing power, analytics, content conveyance, database storage, deployment and some other administrations to help you in your business development. These administrations are highly scalable, reliable, secure, and inexpensive distributed computing services which are designed to cooperate and applications made are further developed and escalated.
Q189
Clarify the principle components of AWS?
The principle components of AWS are: • Route 53: Route53 is an exceptionally scalable DNS web service. • Simple Storage Service (S3): S3 is most commonly used AWS storage web service. • Simple E-mail Service (SES): SES is a hosted transactional email service that enables one to smoothly send deliverable messages using a RESTFUL API call or through an ordinary SMTP. • Identity and Access Management (IAM): IAM provides enhanced identity and security management for AWS account. • Elastic Compute Cloud (EC2): EC2 is an AWS ecosystem central piece. It provides on-demand and scalable processing resources with a 'pay as you go' pricing model. • Elastic Block Store (EBS): EBS offers persistent storage that can be found in instances as a customary hard drive. • CloudWatch: CloudWatch enables monitoring and collecting key metrics and also set a series of alerts to be notified if there is any issue.
Q190
What do you mean by AMI? What does it incorporate?
AMI represents the term Amazon Machine Image. It's an AWS template which provides the information (an application server, and working framework, and applications) required to perform the launch of an instance. This AMI is the copy of the AMI that is running in the cloud as a virtual server. You can launch instances from as many different AMIs as you require. AMI consists of the following: • A root volume template for a running instance • Launch permissions to determine which AWS accounts will inspire the AMI to launch the instances • Mapping for block device to compute the aggregate volume that will be attached to the instance at the time of launch
Q191
Is vertical scale possible on Amazon instance?
Yes, vertical scaling is possible on Amazon instance. In the event that the interviewer is hoping to find a detailed answer, the mechanism for vertical scaling: stop the instance, change the instance type to a larger size, and start it.
Q192
What is the association between AMI and Instance?
Various types of instances can be launched from one AMI. The type of an instance generally determines the hardware components of the host computer that is used for the instance. Each kind of instance has unmistakable computing and memory capacity.
When an instance is launched, it performs as a host and the user interaction with it is the same as with any other computer but we have completely controlled access to our instances.
Q193
What is the distinction between Amazon S3 and EC2?
Amazon S3 vs Amazon EC2: • The meaning of S3 is Simple Storage Service. The meaning of EC2 is Elastic Compute Cloud. • S3 is only a data storage service which is used to store large binary files. EC2 is a cloud web service which is used to host the application. • S3 doesn't require running a server. EC2 is sufficient to run a server. • S3 has a REST interface and uses secure HMAC-SHA1 authentication keys. EC2 is much like a tremendous computer machine which can handle applications like Python, PHP, Apache and other databases.
Q194
How many storage options are there for EC2 Instance?
There are four storage options for Amazon EC2 Instance: • Amazon EBS • Amazon EC2 Instance Store • Amazon S3 • Adding Storage
Q195
What are the security best practices for Amazon EC2 instances?
• Minimum Access: Make sure that your EC2 instance has controlled access to the instance and also to the network. Offer access permissions only to the trusted entities. • Least Privilege: Follow the principle of least privilege for instances and users to perform the functions. Generate roles with restricted access for the instances. • Configuration Management: Consider each EC2 instance a configuration item and use AWS configuration management services to have a baseline for the setup of the instances, including updated anti-virus software, security features etc.
Q196
Clarify the highlights of Amazon EC2 services.
Amazon EC2 services have following highlights: • Virtual Computing Environments • Proffers Persistent storage volumes • Firewall allowing you to specify the protocol • Pre-configured templates • Static IP address for dynamic Cloud Computing
Q197
What is the system to send a demand to Amazon S3?
There are 2 different ways to send a request to Amazon S3: • Using REST API • Using AWS SDK Wrapper Libraries, these wrapper libraries wrap the REST APIs for Amazon
Q198
What is the default number of buckets created in AWS?
The default number of buckets created in each AWS account is 100.
Q199
What is the purpose of T2 instances?
T2 instances are designed for: • Providing moderate baseline performance • Higher performance as required by workload
Q200
What is the use of the buffer in AWS?
The buffer is mainly used to manage load with the synchronization of different components i.e. to make system fault tolerant. Without buffer, components don't use any reasonable method to get and process requests. But the buffer makes components to work in a good way and at the same speed, thus resulting in faster services.
Q201
What happens when an Amazon EC2 instance is stopped or terminated?
Stopped: At the time of stopping an Amazon EC2 instance, a shutdown is performed in a normal way. From that point, changes to the ceased state occur. During this, all the Amazon EBS volumes are stayed attached to the instance and the instance can be started any time. The instance hours are not included when the instance is in the ceased state.
Terminated: At the time of terminating an Amazon EC2 instance, a shutdown is performed. During this, the deletion of the majority of the Amazon EBS volumes is performed. To stay away from this, the estimation of attribute deleteOnTermination is set to false. On termination, the instance also goes through deletion, so the instance can't be started once again.
Q202
What are the popular DevOps tools?
• Jenkins – Continuous Integration Tool • Git – Version Control System Tool • Nagios – Continuous Monitoring Tool • Selenium – Continuous Testing Tool • Docker – Containerization Tool • Puppet, Chef, Ansible – Deployment and Configuration Administration Tools.
Q203
What are IAM Roles and Policies, What is the difference between IAM Roles and Policies?
Roles are for AWS services, where we can assign permission of some AWS service to other Service. Example – Giving S3 permission to EC2 to access S3 Bucket Contents.
Policies are for users and groups, where we can assign permission to users and groups. Example – Giving permission to user to access the S3 Buckets.
Q204
What are the Defaults services we get when we create custom AWS VPC?
• Route Table • Network ACL • Security Group
Q205
What is the Difference Between Public Subnet and Private Subnet?
Public Subnet will have Internet Gateway Attached to its associated Route Table and Subnet. Private Subnet will not have the Internet Gateway Attached to its associated Route Table and Subnet.
Public Subnet will have internet access and Private subnet will not have the internet access directly.
Q206
How do you access the EC2 which has private IP which is in private Subnet?
We can access using VPN if the VPN is configured into that Particular VPC where EC2 is assigned to that VPC in the Subnet. We can access using other EC2 which has the Public access.
Q207
We have a custom VPC Configured and MYSQL Database server which is in Private Subnet and we need to update the MYSQL Database Server. What are the options to do so?
By using NAT Gateway in the VPC or Launch a NAT Instance (EC2). Configure or Attach the NAT Gateway in Public Subnet (which has Route Table attached to IGW) and attach it to the Route Table which is already attached to the Private Subnet.
Q208
What are the Differences Between Security Groups and Network ACL?
Security Groups vs Network ACL: • Security Groups are Attached to EC2 instance | Network ACL is Attached to a subnet • Security Groups are Stateful – Changes made in incoming rules are automatically applied to the outgoing rule | Network ACL is Stateless – Changes made in incoming rules are NOT applied to the outgoing rule • In Security Groups, Blocking IP Address can't be done | In Network ACL, IP Address can be Blocked • Security Groups have Allow rules only, by default all are denied | Network ACL has Allow and Deny rules used
Q209
What are the Differences Between Route53 and ELB?
Amazon Route 53 will handle DNS servers. Route 53 gives you a web interface through which the DNS can be managed. Using Route 53, it is possible to direct and failover traffic. This can be achieved by using DNS Routing Policy. One more routing policy is Failover Routing policy. We set up a health check to monitor your application endpoints. If one of the endpoints is not available, Route 53 will automatically forward the traffic to other endpoint.
Elastic Load Balancing (ELB): ELB automatically scales depending on the demand, so sizing of the load balancers to handle more traffic effectively when it is not required.
Q210
What are the DB engines which can be used in AWS RDS?
• MariaDB • MYSQL DB • MS SQL DB • Postgre DB • Oracle DB
Q211
What is Status Checks in AWS EC2?
System Status Checks – System Status checks will look into problems with instance which needs AWS help to resolve the issue. When we see system status check failure, you can wait for AWS to resolve the issue, or do it yourself. • Network connectivity • System power • Software issues in Data Centres • Hardware issues
Instance Status Checks – Instance Status checks will look into issues which need our involvement to fix the issue. If status check fails, we can reboot that particular instance. • Failed system status checks • Memory Full • Corrupted file system • Kernel issues
Q212
To establish a peering connections between two VPC's. What condition must be met?
• CIDR Block should not overlap • VPC should be in the same region • VPC must belong to same account • CIDR block should not overlap between VPCs setting up a peering connection. Peering connection is allowed within a region, across region, across different account.
Q213
Troubleshooting with EC2 Instances:
Instance States: • If the instance state is 0/2 – there might be some hardware issue • If the instance state is 1/2 – there might be issue with OS
Workaround – Need to restart the instance, if still that is not working logs will help to fix the issue.
Q214
How EC2 instances can be resized?
EC2 instances can be resizable (scale up or scale down) based on requirement.
Q215
EBS: its block-level storage volume which we can use after mounting with EC2 instances.
For types please refer AWS Solution Architect book.
Q216
Difference between EBS, EFS and S3?
• We can access EBS only if its mounted with instance, at a time EBS can be mounted only with one instance. • EFS can be shared at a time with multiple instances. • S3 can be accessed without mounting with instances.
Q217
Maximum number of bucket which can be created in AWS.
100 buckets can be created by default in AWS account. To get more buckets additionally you have to request Amazon for that.
Q218
Maximum number of EC2 which can be created in VPC.
Maximum 20 instances can be created in a VPC. We can create 20 reserve instances and request for spot instance as per demand.
Q219
How EBS can be accessed?
EBS provides high performance block-level storage which can be attached with running EC2 instance. Storage can be formatted and mounted with EC2 instance, then it can be accessed.
With each restart volume will get unmounted from instance, to keep this attached need to perform below step: cd /etc/fstab /dev/xvdf /data ext4 defaults 0 0 (edit the file system name accordingly)
Q222
What is the Difference between the Service Role and SAML Federated Role?
Service Role: Service Roles are meant for usage of AWS Services and based upon the policies attached to it, it will have the scope to do its task. Example: In case of automation we can create a service role and attach it.
Federated Roles: Federated Roles are meant for User Access and getting access to AWS as per designed role. Example: We can have a federated role created for our office employee and corresponding to that a Group will be created in the AD and user will be added to it.
Q223
How many Policies can be attached to a role?
10 (Soft limit), We can have till 20.
Q224
What are the different ways to access AWS?
3 Different ways (CLI, Console, SDK).
Q225
How a Root AWS user is different from an IAM User?
Root User will have access to entire AWS environment and it will not have any policy attached to it. While IAM User will be able to do its task on the basis of policies attached to it.
Q226
What do you mean by Principle of least privilege in term of IAM?
Principle of least privilege means to provide the same or equivalent permission to the user/role.
Q227
What is the meaning of non-explicit deny for an IAM User?
When an IAM user is created and it is not having any policy attached to it, in that case he will not be able to access any of the AWS Service until a policy has been attached to it.
Q228
What is the precedence level between explicit allow and explicit deny?
Explicit deny will always override Explicit Allow.
Q229
What is the benefit of creating a group in IAM?
Creation of Group makes the user management process much simpler and user with the same kind of permission can be added in a group and at last addition of a policy will be much simpler to the group in comparison to doing the same thing manually.
Q230
What is the difference between the Administrative Access and Power User Access in term of pre-build policy?
Administrative Access will have the Full access to AWS resources. While Power User Access will have the Admin access except the user/group management permission.
Q231
What is the purpose of Identity Provider?
Identity Provider helps in building the trust between the AWS and the Corporate AD environment while we create the Federated role.
Q232
What are the benefits of STS (Security Token Service)?
It helps in securing the AWS environment as we need not to embed or distribute the AWS Security credentials in the application. As the credentials are temporary we need not to rotate them and revoke them.
Q233
What is the benefit of creating the AWS Organization?
It helps in managing the IAM Policies, creating the AWS Accounts programmatically, helps in managing the payment methods and consolidated billing.
Q234
What is the maximum file length in S3?
utf-8 1024 bytes.
Q235
Which activity cannot be done using autoscaling?
Maintain fixed running of EC2.
Q236
How will you secure data at rest in EBS?
EBS data is always secure.
Q237
What is the maximum size of S3 Bucket?
5TB.
Q238
Can objects in Amazon S3 be delivered through amazon cloud front?
Yes.
Q239
Which service is used to distribute content to end user service using global network of edge location?
Virtual Private Cloud.
Q240
What is ephemeral storage?
Temporary storage.
Q241
What are shards in kinesis aws services?
Shards are used to store data in Kinesis.
Q242
Where can you find the ephemeral storage?
In Instance store service.
Q243
I have some private servers on my premises also i have distributed some of my workload on the public cloud. What is the architecture called?
Virtual private cloud.
Q244
Route 53 can be used to route users to infrastructure outside of aws. True/false?
False.
Q245
Is simple workflow service one of the valid Simple Notification Service subscribers?
No.
Q246
Which cloud model do Developers and organizations all around the world leverage extensively?
IAAS – Infrastructure as a service.
Q247
Can cloud front serve content from a non AWS origin server?
No.
Q248
Is EFS a centralised storage service in AWS?
Yes.
Q249
Which AWS service will you use to collect and process ecommerce data for near real time analysis?
Both Dynamo DB & Redshift.
Q250
An high demand of IOPS performance is expected around 15000. Which EBS volume type would you recommend?
