Amazon Redshift Interview Questions and Answers

by GangBoard Admin, June 8, 2019

In case you’re searching for Amazon Redshift Interview Questions

and answers for Experienced or Freshers, you are at the correct place.
There is parcel of chances from many presumed organizations on the
planet. The AWS advertise is relied upon to develop to more than $5
billion by 2020, from just $180 million, as per AWS industry gauges.
In this way, despite everything you have the chance to push forward
in your vocation in AWS Development. GangBoard offers
Advanced Amazon Redshift Interview Questions and answers that
assist you in splitting your Amazon Redshift interview and procure
dream vocation as AWS Developer.

Best Amazon Redshift Interview Questions and Answers

Do you believe that you have the right stuff to be a section in the
advancement of future AWS, the GangBoard is here to control you to
sustain your vocation. Various fortune 1000 organizations around the
world are utilizing the innovation of AWS to meet the necessities of
their customers. AWS is being utilized as a part of numerous
businesses. To have a great development in AWS work, our page
furnishes you with nitty-gritty data as AWS prospective employee
meeting questions and answers. Amazon Redshift Interview
Questions and answers are prepared by 10+ years experienced
industry experts. Amazon Redshift Interview Questions and answers
are very useful to the Fresher or Experienced person who is looking
for the new challenging job from the reputed company. Our Amazon
Redshift Questions and answers are very simple and have more
examples for your better understanding.

By this Amazon Redshift Interview Questions and answers, many

students are got placed in many reputed companies with high package
salary. So utilize our Amazon Redshift Interview Questions and
answers to grow in your career.

Q1) What are the benefits of using AWS Redshift?

Answer:

 We can run multiple queries on multiple nodes.

 We can use Postgresql, ODBC and JDBC.
 Automated backup
 Built-in security.
 When applications requires analytical function.
 Cost effective compared to traditional data warehousing
technique.

Q2) When can we choose the Redshift ?

Answer:

When application require more volumes from users then using

redshift we can speed up the process of query response and cut down
the infra cost.

Q3) What are the common features of Redshift?

Answer:

AWS Redshift is a fully managed, petabyte-scale data warehouse

service in the AWS, We can create a bunch of nodes once we have
data warehouse created i.e AWS redshift Cluster. Now we can upload
the set of data and perform the query for data analysis.

Q4) What’s the use of redshift?

Answer:

 Scalability up/down
 Pay for what ever we use

Q5) Which is the database redshift is using?

Answer: PostgreSQL

Q6) What Amazon redshift built for ?

Answer: Amazon Redshift is a data warehouse service fully
managed, fast. built on the technology Massive Parallel Processing.

Q7) Is redshift can be used with AWS RDS?

Answer: Answer:

AWS RDS is used for database using MariaDB, Oracle DB, Amazon
Aurora, Mysql and others.

Q8) Does AWS Redshift use SQL?

Answer: Amazon Redshift is using PostgreSQL

Q9) Does Amazon redshift based on concept cluster?

Answer: Amazon Redshift uses nodes, group of nodes are called

cluster. Single cluster runs a Amazon Redshift and it has one or
multiple number of databases.

Q10) Is AWS Redshift a stored procedures?

Answer: NO. Redshift supports tables, views and functions.

Become an AWS Certified Expert in 25Hours

Q11) Is AWS redshift is one of the RDS in AWS or is it Relation

Database?

Answer: Amazon Redshift RDBMS we can use other RDBMS

applications

Q12) What is the use of Amazon redshift ODBC driver ?

Answer: It will allow us to connect with real time data of the

Amazon Redshift from any applications which is supported with
ODBC.

Q13) Why AWS redshift is named after Redshift?

Answer: Amazon Web Services given the name RedShift for Oracle
trademark red.

Q14) What is the use of AWS redshift driver?

Answer : AWS Redshift gives you ODBC drivers for Linux,

Windows, OS X operating systems

Q15) What’s the use AWS redshift cluster Service?

Answer: AWS Redshift data collection of nodes, group of nodes are

cluster. cluster runs a AWS Redshift and it has databases.

Q16) How will the AWS redshift work?

Answer: Amazon Redshift set up, operate, and scale, managing

backups and updates and monitors nodes.

Q17) What is the difference between s3 and redshift?

Answer: AWS S3 is object based storage. AWS Redshift is a fast,

fully managed, petabyte-scale data warehouse.

Q18) What is cluster AWS cloud?

Answer: Cluster is grouping of similar services. You can create

multiple clusters depends on the requirement on the services.

Q19) Does redshift support unstructured data?

Answer: AWS Redshift is using PostgreSQL supports only structured

data.

Q20) Why redshift Distribution key is used?

Answer: Redshift distribution Keys to check where the data is located

in AWS Redshift.

Q21) Is redshift using primary keys for key-value storage?

Yes
Uses only foreign keys

No

None of the above

Answer: YES

Q22) What is MPP in Redshift ?

Answer: massive protection policy

Q23) Redshift has the fast query performance, storage and

technology which of the following is correct.

key-value

database

row

columnar

Answer: columnar

Q24) AWS Redshift is used for which one of the following ?

Small queries

complex queries

small data

large and static data

Answer: Complex Queries

Q25) AWS Redshift is basically works on nodes and cluster and

which of following option Redshift is based on?

Storage service
database

System Storage

Answer: database

Q26) What kind of application/services uses Redshift database?

Answer: Amazon Redshift is meant for services which are petabyte

scale warehousing. Example: Big data analytics and OLAP. Redshift
are fully managed and scalable in nature.

Q27) What are the business intelligent tools to which Redshift

can be integrated with?

Answer: Redshift can be integrated with Tableau, Jaspersoft,

Microstrategy, Cognos Pentaho and Amazon QuickSight.

Q28) When and why we should use Redshift Spectrum?

Answer: When we need to SQL query structured, semi-structured or

unstructured data stored in S3 and joining them with our redshift
Tables.

Q29) What data formats does Redshift Spectrum support?

Answer: Redshift Spectrum currently supports for Avro, CSV, Grok,

Ion, JSON, ORC, Parquet, RCFile, RegexSerDe, SequenceFile and
Tex.

Q30) Is Redshift similar to RDS ?

Ans. Redshift is a heavily version of PostgreSQL, it’s not used for

OLTP.OLTP remember is online transaction processing.So Redshift
is not a replacement for RDS.Redshift is OLAP, OLAP stands
for online analytical processing.That means that Redshift is used
for analytics and data warehousing.

Get AWS 100% Practical Training

Q31) How far Redshift is better in performance as compare to
other data warehouse technologies?

Answer: Redshift provides ten times better performance than other

data warehouse technologies and Redshift is meant to scale 2
petabytes of data.So petabytes, 1 petabite is 1000 terabytes,means a
lot of data.

Q32) Is Redshift a row based storage or columnar based?

Answer: Redshift supports columnar data storage (instead of row

based) which makes it good for analytical processing not for
transactional processing .

PostgreSQL, RDS, MySQL supports row based storage of data .

Q33) What is MPP . Is Redshift support MPP?

Answer: MPP stands for massively parallel query execution .It’s

highly distributed, when you run a query,it’s going to run it in
parallel across so many instances and so many cores .And as such it’s
called a massively parallel query execution which in turns makes the
database highly available.

Q34) How do we load data into Redshift?

Answer: Data is loaded from S3, DynamoDB,DMS and Read

Replicas in RDS for example, when you have a RBS database but you
want to do analytics on it to create a read replica,to pull that data from
the read replica into Redshift and to do the analytics into Redshift.

Q35) How we can scale Reshift database?

Answer: Redshift can go from one node up to 128 nodes and each
node has so many cores,and each node by itself has 160 gigabytes of
space. So, Overall it provides lot of space.

Q36) How many types of nodes supported by Redshift and what

are the functions of nodes?
Answer: Redshift supports 2 nodes -leader node and compute node

There is a leader node and the leader node is used to planning the
queries and aggregate results across all compute nodes.So the
compute nodes are going to actually be performing the queries and
they will send the results back to the leader.If you have one node, then
that nodeis both a leader node and a compute node.

Q37) What is Redshift Spectrum?

Answer: In Redshift Spectrum,you don’t need to load the data into

Redshift first. Yoy can perform the queries directly against S3.So, it is
a great way to do ah hoc queries.

Q38) What is Redshift Enhanced VPC Routing?

Answer: If you enable Redshift Enhanced VPC Routing feature , all

the COPY of data from whatever storage you want into Redshift,or
UNLOAD from Redshift back to S3 , goes through VPC which gives
you enhanced security and maybe better performance as well as your
data doesn’t go over the oublic internet.

Q39) What are the important Features of Redshift?

Answer:

 Operations : Similar to RDS

 Security : IAM,KMS ,VPC,SSL(similar to RDS)
 Redshift provides 10times more performance compare to other
warehouse services.
 Redshift is highly available and have auto healing feature.
 Redshift provides pay per node provisioned, 1/10th of the cost
compare to other data warehouse services.

Q40) For which purpose Redshift is used for ?

Answer: Redshift is used for Business Intelligence, Analytics, Data

Warehose

Q41) How will I be charged and billed if I use Amazon Redshift?

Answer: You pay only for what you use, and there are no minimum or
setup fees. Billing commences for a data warehouse cluster as soon as
the data warehouse cluster is available. Billing continues until the data
warehouse cluster terminates, which would occur upon deletion or in
the event of instance failure. You are billed based on:

 Compute Node Hours

 Backup Storage
 Data Transfer
 Data Scanned

Q42) Is it possible to access Redshift compute Nodes directly?

Answer: No. Your Amazon Redshift compute nodes are in a private

network space and can only be accessed from your data warehouse
cluster’s leader node. This provides an additional layer of security for
your data

Q43) What kind of application/services uses Redshift database?

Answer: Amazon Redshift is meant for services which are petabyte

scale warehousing. Example: Big data analytics and OLAP. Redshift
are fully managed and scalable in nature.

Q44) What are the business intelligent tools to which Redshift can
be integrated with?

Answer: Redshift can be integrated with Tableau, Jaspersoft,

Microstrategy, Cognos Pentaho and Amazon QuickSight.

Q45) When and why we should use Redshift Spectrum.

Answer: When we need to SQL query structured, semi-structured or

unstructured data stored in S3 and joining them with our redshift
Tables.

Q46) What data formats does Redshift Spectrum support?

Answer: Redshift Spectrum currently supports for Avro, CSV, Grok,
Ion, JSON, ORC, Parquet, RCFile, RegexSerDe, SequenceFile and
Tex.

Q47) Select the AWS service which is nosql database and

serverless, minimal latency ?

Answer:

 RDS
 MYSQL
 DYNAMO DB
 REDSHIFT

Q48) Can we access the compute node of Redshift directly ?

Answer:

 Redshift compute node lives in private network space and can

only be accessed from data
 warehouse cluster leader node.

Q49) How we can monitor the performance of Redshift data

warehouse cluster.

Answer:

 Performance metric like compute and storage utilization,

read/write traffic can be monitored
 via AWS Management Console or using CloudWatch.

Q50) Which sql query platform are you using to communicate

with redshift?

Answer: Postgresql

AWS Interview Questions and Answers

by GangBoard Admin, October 29, 2018

In case you’re searching for AWS Interview Questions and
answers for Experienced or Freshers, you are at the correct place.
There is parcel of chances from many presumed organizations on the
planet. The AWS advertise is relied upon to develop to more than $5
billion by 2020, from just $180 million, as per AWS industry gauges.
In this way, despite everything you have the chance to push forward
in your vocation in AWS Development. Gangboard offers
Advanced AWS Interview Questions and answers that assist you in
splitting your AWS interview and procure dream vocation as AWS
Developer.

Become an AWS Certified Expert in 25Hours

Best AWS Interview Questions and Answers

Do you believe that you have the right stuff to be a section in the
advancement of future AWS, the GangBoard is here to control you to
sustain your vocation. Various fortune 1000 organizations around the
world are utilizing the innovation of AWS to meet the necessities of
their customers. AWS is being utilized as a part of numerous
businesses. To have a great development in AWS work, our page
furnishes you with nitty-gritty data as AWS prospective employee
meeting questions and answers. AWS Interview Questions and
answers are prepared by 10+ years experienced industry
experts. AWS Interview Questions and answers are very useful to the
Fresher or Experienced person who is looking for the new challenging
job from the reputed company. Our AWS Questions and answers are
very simple and have more examples for your better understanding.

By this AWS Interview Questions and answers, many students are got
placed in many reputed companies with high package salary. So
utilize our AWS Interview Questions and answers to grow in your
career.

Become an AWS Expert with Certification in 25hours

Q1) What is AWS?

Answer:AWS stands for Amazon Web Services. AWS is a platform
that provides on-demand resources for hosting web services, storage,
networking, databases and other resources over the internet with a
pay-as-you-go pricing.

Q2) What are the components of AWS?

Answer:EC2 – Elastic Compute Cloud, S3 – Simple Storage Service,

Route53, EBS – Elastic Block Store, Cloudwatch, Key-Paris are few
of the components of AWS.

Q3) What are key-pairs?

Answer:Key-pairs are secure login information for your

instances/virtual machines. To connect to the instances we use key-
pairs that contain a public-key and private-key.

Q4) What is S3?

Answer:S3 stands for Simple Storage Service. It is a storage service

that provides an interface that you can use to store any amount of
data, at any time, from anywhere in the world. With S3 you pay only
for what you use and the payment model is pay-as-you-go.

Q5) What are the pricing models for EC2instances?

Answer:The different pricing model for EC2 instances are as below,

 On-demand
 Reserved
 Spot
 Scheduled
 Dedicated

Q6) What are the types of volumes for EC2 instances?

Answer:

 There are two types of volumes,

 Instance store volumes
  EBS – Elastic Block Stores

Q7) What are EBS volumes?

Answer:EBS stands for Elastic Block Stores. They are persistent

volumes that you can attach to the instances. With EBS volumes, your
data will be preserved even when you stop your instances, unlike your
instance store volumes where the data is deleted when you stop the
instances.

Q8) What are the types of volumes in EBS?

Answer:Following are the types of volumes in EBS,

 General purpose
 Provisioned IOPS
 Magnetic
 Cold HDD
 Throughput optimized

Q9) What are the different types of instances?

Answer: Following are the types of instances,

 General purpose
 Computer Optimized
 Storage Optimized
 Memory Optimized
 Accelerated Computing

Q10) What is an auto-scaling and what are the components?

Answer: Auto scaling allows you to automatically scale-up and scale-

down the number of instances depending on the CPU utilization or
memory utilization. There are 2 components in Auto scaling, they are
Auto-scaling groups and Launch Configuration.

Get AWS Online Training

Q11) What are reserved instances?

Answer: Reserved instances are the instance that you can reserve a
fixed capacity of EC2 instances. In reserved instances you will have
to get into a contract of 1 year or 3 years.

Q12)What is an AMI?

Answer: AMI stands for Amazon Machine Image. AMI is a template

that contains the software configurations, launch permission and a
block device mapping that specifies the volume to attach to the
instance when it is launched.

Q13) What is an EIP?

Answer: EIP stands for Elastic IP address. It is designed for dynamic

cloud computing. When you want to have a static IP address for your
instances when you stop and restart your instances, you will be using
EIP address.

Q14) What is Cloudwatch?

Answer: Cloudwatch is a monitoring tool that you can use to monitor

your various AWS resources. Like health check, network,
Application, etc.

Q15) What are the types in cloudwatch?

Answer: There are 2 types in cloudwatch. Basic monitoring and

detailed monitoring. Basic monitoring is free and detailed monitoring
is chargeable.

Q16) What are the cloudwatch metrics that are available for EC2
instances?

Answer: Diskreads, Diskwrites, CPU utilization, networkpacketsIn,

networkpacketsOut, networkIn, networkOut, CPUCreditUsage,
CPUCreditBalance.

Q17) What is the minimum and maximum size of individual

objects that you can store in S3
Answer: The minimum size of individual objects that you can store in
S3 is 0 bytes and the maximum bytes that you can store for individual
objects is 5TB.

Q18) What are the different storage classes in S3?

Answer: Following are the types of storage classes in S3,

 Standard frequently accessed

 Standard infrequently accessed
 One-zone infrequently accessed.
 Glacier
 RRS – reduced redundancy storage

Q19) What is the default storage class in S3?

Answer: The default storage class in S3 in Standard frequently

accessed.

Became an AWS Expert with Certification in 25hours

Q20) What is glacier?

Answer: Glacier is the back up or archival tool that you use to back
up your data in S3.

Q21) How can you secure the access to your S3 bucket?

Answer: There are two ways that you can control the access to your
S3 buckets,

 ACL – Access Control List

 Bucket polices

Q22) How can you encrypt data in S3?

Answer: You can encrypt the data by using the below methods,

 Server Side Encryption – S3 (AES 256 encryption)

 Server Side Encryption – KMS (Key management Service)
 Server Side Encryption – C (Client Side)
Q23) What are the parameters for S3 pricing?

Answer: The pricing model for S3 is as below,

 Storage used
 Number of requests you make
 Storage management
 Data transfer
 Transfer acceleration

Q24) What is the pre-requisite to work with Cross region

replication in S3?

Answer: You need to enable versioning on both source bucket and

destination to work with cross region replication. Also both the source
and destination bucket should be in different region.

Q25) What are roles?

Answer: Roles are used to provide permissions to entities that you

trust within your AWS account. Roles are users in another account.
Roles are similar to users but with roles you do not need to create any
username and password to work with the resources.

Q26) What are policies and what are the types of policies?

Answer: Policies are permissions that you can attach to the users that
you create. These policies will contain that access that you have
provided to the users that you have created. There are 2 types of
policies.

 Managed policies
 Inline policies

Q27) What is cloudfront?

Answer: Cloudfront is an AWS web service that provided businesses

and application developers an easy and efficient way to distribute
their content with low latency and high data transfer speeds.
Cloudfront is content delivery network of AWS.
Q28) What are edge locations?

Answer: Edge location is the place where the contents will be cached.
When a user tries to access some content, the content will be searched
in the edge location. If it is not available then the content will be made
available from the origin location and a copy will be stored in the
edge location.

Q29) What is the maximum individual archive that you can store
in glacier?

Answer: You can store a maximum individual archive of upto 40 TB.

Get AWS 100% Practical Training

Q30) What is VPC?

Answer: VPC stands for Virtual Private Cloud. VPC allows you to
easily customize your networking configuration. VPC is a network
that is logically isolated from other network in the cloud. It allows
you to have your own IP address range, subnets, internet gateways,
NAT gateways and security groups.

Q31) What is VPC peering connection?

Answer: VPC peering connection allows you to connect 1 VPC with

another VPC. Instances in these VPC behave as if they are in the
same network.

Q32) What are NAT gateways?

Answer: NAT stands for Network Address Translation. NAT

gateways enables instances in a private subnet to connect to the
internet but prevent the internet from initiating a connection with
those instances.

Q33) How can you control the security to your VPC?

Answer: You can use security groups and NACL (Network Access
Control List) to control the security to your
VPC.

Q34) What are the different types of storage gateway?

Answer: Following are the types of storage gateway.

 File gateway
 Volume gateway
 Tape gateway

Q35) What is a snowball?

Answer: Snowball is a data transport solution that used source

appliances to transfer large amounts of data into and out of AWS.
Using snowball, you can move huge amount of data from one place to
another which reduces your network costs, long transfer times and
also provides better security.

Q36) What are the database types in RDS?

Answer: Following are the types of databases in RDS,

 Aurora
 Oracle
 MYSQL server
 Postgresql
 MariaDB
 SQL server

Q37) What is a redshift?

Answer: Amazon redshift is a data warehouse product. It is a fast and

powerful, fully managed, petabyte scale data warehouse service in the
cloud.

Q38) What is SNS?

Answer: SNS stands for Simple Notification Service. SNS is a web

service that makes it easy to notifications from the cloud. You can set
up SNS to receive email notification or message notification.
Q39) What are the types of routing polices in route53?

Answer: Following are the types of routing policies in route53,

 Simple routing
 Latency routing
 Failover routing
 Geolocation routing
 Weighted routing
 Multivalue answer

Q40) What is the maximum size of messages in SQS?

Answer: The maximum size of messages in SQS is 256 KB.

Q41) What are the types of queues in SQS?

Answer: There are 2 types of queues in SQS.

 Standard queue
 FIFO (First In First Out)

Q42) What is multi-AZ RDS?

Answer: Multi-AZ (Availability Zone) RDS allows you to have a

replica of your production database in another availability zone.
Multi-AZ (Availability Zone) database is used for disaster recovery.
You will have an exact copy of your database. So when your primary
database goes down, your application will automatically failover to
the standby database.

Q43) What are the types of backups in RDS database?

Answer: There are 2 types of backups in RDS database.

 Automated backups
 Manual backups which are known as snapshots.

Q44) What is the difference between security groups and

network access control list?
Answer:

Security Groups Network access control list

Can control the access at the Can control access at the subnet
instance level level
Can add rules for both “allow”
Can add rules for “allow” only
and “deny”
Evaluates all rules before Rules are processed in order
allowing the traffic number when allowing traffic.
Can assign unlimited number of
Can assign upto 5 security groups.
security groups
Statefull filtering Stateless filtering

Q45) What are the types of load balancers in EC2?

Answer: There are 3 types of load balancers,

 Application load balancer

 Network load balancer
 Classic load balancer

Q46) What is and ELB?

Answer: ELB stands for Elastic Load balancing. ELB automatically

distributes the incoming application traffic or network traffic across
multiple targets like EC2, containers, IP addresses.

Q47) What are the two types of access that you can provide when
you are creating users?

Answer: Following are the two types of access that you can create.

 Programmatic access
 Console access

Q48) What are the benefits of auto scaling?

Answer: Following are the benefits of auto scaling

  Better fault tolerance
 Better availability
 Better cost management

Q49) What are security groups?

Answer: Security groups acts as a firewall that contains the traffic for
one or more instances. You can associate one or more security groups
to your instances when you launch then. You can add rules to each
security group that allow traffic to and from its associated instances.
You can modify the rules of a security group at any time, the new
rules are automatically and immediately applied to all the instances
that are associated with the security group

Get AWS Online Training

Q50) What are shared AMI’s?

Answer: Shared AMI’s are the AMI that are created by other
developed and made available for other developed to use.

Q51)What is the difference between the classic load balancer and

application load balancer?

Answer: Dynamic port mapping, multiple port multiple listeners is

used in Application Load Balancer, One port one listener is achieved
via Classic Load Balancer

Q52) By default how many Ip address does aws reserve in a

subnet?

Answer: 5

Q53) What is meant by subnet?

Answer: A large section of IP Address divided in to chunks are

known as subnets

Q54) How can you convert a public subnet to private subnet?

Answer: Remove IGW & add NAT Gateway, Associate subnet
in Private route table

Q55) Is it possible to reduce a ebs volume?

Answer: no it’s not possible, we can increase it but not reduce them

Q56) What is the use of elastic ip are they charged by AWS?

Answer: These are ipv4 address which are used to connect the
instance from internet, they are charged if the instances are not
attached to it

Q57) One of my s3 is bucket is deleted but i need to restore is

there any possible way?

Answer: If versioning is enabled we can easily restore them

Q58) When I try to launch an ec2 instance i am getting Service

limit exceed, how to fix the issue?

Answer: By default AWS offer service limit of 20 running instances

per region, to fix the issue we need to contact AWS support to
increase the limit based on the requirement

Q59) I need to modify the ebs volumes in Linux and windows is it

possible

Answer: yes its possible from console use modify volumes in section
give the size u need then for windows go to disk management for
Linux mount it to achieve the modification

Get AWS Online Training

Q60) Is it possible to stop a RDS instance, how can I do that?

Answer: Yes it’s possible to stop rds. Instance which are non-
production and non multi AZ’s

Q61) What is meant by parameter groups in rds. And what is the

use of it?
Answer: Since RDS is a managed service AWS offers a wide set
of parameter in RDS as parameter group which is modified as per
requirement

Q62) What is the use of tags and how they are useful?

Answer: Tags are used for identification and grouping AWS

Resources

Q63) I am viewing an AWS Console but unable to launch the

instance, I receive an IAM Error how can I rectify it?

Answer: As AWS user I don’t have access to use it, I need to have
permissions to use it further

Q64) I don’t want my AWS Account id to be exposed to users

how can I avoid it?

Answer: In IAM console there is option as sign in url where I can

rename my own account name with AWS account

Q65) By default how many Elastic Ip address does AWS Offer?

Answer: 5 elastic ip per region

Q66) You are enabled sticky session with ELB. What does it do
with your instance?

Answer: Binds the user session with a specific instance

Q67) Which type of load balancer makes routing decisions at

either the transport layer or the

Application layer and supports either EC2 or VPC.

Answer: Classic Load Balancer

Q68) Which is virtual network interface that you can attach to an

instance in a VPC?

Answer: Elastic Network Interface

 Q69) You have launched a Linux instance in AWS EC2. While
configuring security group, you

Have selected SSH, HTTP, HTTPS protocol. Why do we need to

select SSH?

Answer: To verify that there is a rule that allows traffic from EC2
Instance to your computer

Q70) You have chosen a windows instance with Classic and you
want to make some change to the

Security group. How will these changes be effective?

Answer: Changes are automatically applied to windows instances

Q71) Load Balancer and DNS service comes under which type of
cloud service?

Answer: IAAS-Storage

Q72) You have an EC2 instance that has an unencrypted volume.

You want to create another

Encrypted volume from this unencrypted volume. Which of the

following steps can achieve this?

Answer: Create a snapshot of the unencrypted volume (applying

encryption parameters), copy the. Snapshot and create a volume from
the copied snapshot

Q73) Where does the user specify the maximum number of

instances with the auto scaling Commands?

Answer: Auto scaling Launch Config

Q74) Which are the types of AMI provided by AWS?

Answer: Instance Store backed, EBS Backed

 Q75) After configuring ELB, you need to ensure that the user
requests are always attached to a Single instance. What setting
can you use?

Answer: Sticky session

Q76) When do I prefer to Provisioned IOPS over the Standard

RDS storage?

Answer:If you have do batch-oriented is workloads.

Q77) If I am running on my DB Instance a Multi-AZ

deployments, can I use to the stand by the DB Instance for read
or write a operation along with to primary DB instance?

Answer: Primary db instance does not working.

Q78) Which the AWS services will you use to the collect and the
process e-commerce data for the near by real-time analysis?

Answer: Good of Amazon DynamoDB.

Q79) A company is deploying the new two-tier an web application

in AWS. The company has to limited on staff and the requires
high availability, and the application requires to complex queries
and table joins. Which configuration provides to the solution for
company’s requirements?

Answer: An web application provide on Amazon DynamoDB

solution.

Q80) Which the statement use to cases are suitable for Amazon
DynamoDB?

Answer:The storing metadata for the Amazon S3 objects& The

Running of relational joins and complex an updates.

Q81) Your application has to the retrieve on data from your

user’s mobile take every 5 minutes and then data is stored in the
DynamoDB, later every day at the particular time the data is an
extracted into S3 on a per user basis and then your application is
later on used to visualize the data to user. You are the asked to
the optimize the architecture of the backend system can to lower
cost, what would you recommend do?

Answer: Introduce Amazon Elasticache to the cache reads from the

Amazon DynamoDB table and to reduce the provisioned read
throughput.

Q82) You are running to website on EC2 instances can deployed

across multiple Availability Zones with an Multi-AZ RDS
MySQL Extra Large DB Instance etc. Then site performs a high
number of the small reads and the write per second and the relies
on the eventual consistency model. After the comprehensive tests
you discover to that there is read contention on RDS MySQL.
Which is the best approaches to the meet these requirements?

Answer:The Deploy Elasti Cache in-memory cache is running in

each availability zone and Then Increase the RDS MySQL Instance
size and the Implement provisioned IOPS.

Q83) An startup is running to a pilot deployment of around 100

sensors to the measure street noise and The air quality is urban
areas for the 3 months. It was noted that every month to around
the 4GB of sensor data are generated. The company uses to a load
balanced take auto scaled layer of the EC2 instances and a RDS
database with a 500 GB standard storage. The pilot was success
and now they want to the deploy take atleast 100K sensors.let
which to need the supported by backend. You need to the stored
data for at least 2 years to an analyze it. Which setup of following
would you be prefer?

Answer: The Replace the RDS instance with an 6 node Redshift

cluster with take 96TB of storage.

Q84) Let to Suppose you have an application where do you have

to render images and also do some of general computing. which
service will be best fit your need?
Answer:Used on Application Load Balancer.

Q85) How will change the instance give type for the instances,
which are the running in your applications tier and Then using
Auto Scaling. Where will you change it from areas?

Answer: Changed to Auto Scaling launch configuration areas.

Q86) You have an content management system running on the

Amazon EC2 instance that is the approaching 100% CPU of
utilization. Which option will be reduce load on the Amazon EC2
instance?

Answer: Let Create a load balancer, and Give register the Amazon
EC2 instance with it.

Q87) What does the Connection of draining do?

Answer: The re-routes traffic from the instances which are to be

updated (or) failed an health to check.

Q88) When the instance is an unhealthy, it is do terminated and

replaced with an new ones, which of the services does that?

Answer: The survice make a fault tolerance.

Q89) What are the life cycle to hooks used for the AutoScaling?

Answer: They are used to the put an additional taken wait time to the
scale in or scale out events.

Are You Interested in AWS Course ? Click here

Q90) An user has to setup an Auto Scaling group. Due to some

issue the group has to failed for launch a single instance for the
more than 24 hours. What will be happen to the Auto Scaling in
the condition?

Answer: The auto Scaling will be suspend to the scaling process.

Q91) You have an the EC2 Security Group with a several running
to EC2 instances. You changed to the Security of Group rules to
allow the inbound traffic on a new port and protocol, and then the
launched a several new instances in the same of Security
Group.Such the new rules apply?

Answer:The Immediately to all the instances in security groups.

Q92) To create an mirror make a image of your environment in

another region for the disaster recoverys, which of the following
AWS is resources do not need to be recreated in second region?

Answer: May be the selected on Route 53 Record Sets.

Q93) An customers wants to the captures all client connections to

get information from his load balancers at an interval of 5
minutes only, which cal select option should he choose for his
application?

Answer: The condition should be Enable to AWS CloudTrail for the

loadbalancers.

Q94) Which of the services to you would not use to deploy an

app?

Answer: Lambda app not used on deploy.

Q95) How do the Elastic Beanstalk can apply to updates?

Answer: By a duplicate ready with a updates prepare before

swapping.

Q96) An created a key in the oregon region to encrypt of my data

in North Virginia region for security purposes. I added to two
users to the key and the external AWS accounts. I wanted to
encrypt an the object in S3, so when I was tried, then key that I
just created is not listed.What could be reason&solution?

Answer:The Key should be working in the same region.

Q97) As a company needs to monitor a read and write IOPS for
the AWS MySQL RDS instances and then send real-time alerts to
the operations of team. Which AWS services to can accomplish
this?

Answer:The monitoring on Amazon CloudWatch

Q98) The organization that is currently using the consolidated billing

has to recently acquired to another company that already has a
number of the AWS accounts. How could an Administrator to ensure
that all the AWS accounts, from the both existing company and then
acquired company, is billed to the single account?

Answer: All Invites take acquired the company’s AWS account

to join existing the company’s of organization by using AWS
Organizations.

Q99) The user has created an the applications, which will be

hosted on the EC2. The application makes calls to the Dynamo
DB to fetch on certain data. The application using the DynamoDB
SDK to connect with the EC2 instance. Which of respect to best
practice for the security in this scenario?

Answer: The user should be attach an IAM roles with the DynamoDB
access to EC2 instance.

Q100) You have an application are running on EC2 Instance,

which will allow users to download the files from a private S3
bucket using the pre-assigned URL. Before generating to URL the
Q101) application should be verify the existence of file in S3.
How do the application use the AWS credentials to access S3
bucket securely?

Answer:An Create an IAM role for the EC2 that allows list access to
objects in S3 buckets. Launch to instance with this role, and
retrieve an role’s credentials from EC2 Instance make metadata.

Q101) You use the Amazon CloudWatch as your primary

monitoring system for web application. After a recent to software
deployment, your users are to getting Intermittent the 500
Internal Server to the Errors, when you using web application.
You want to create the CloudWatch alarm, and notify the on-call
engineer let when these occur. How can you accomplish the using
the AWS services?

Answer: An Create a CloudWatch get Logs to group and A define

metric filters that assure capture 500 Internal
Servers should be Errors. Set a CloudWatch alarm on the metric and
By Use of Amazon Simple to create a Notification Service to
notify an the on-call engineers when prepare CloudWatch alarm is
triggered.

Q102) You are designing a multi-platform of web application for

the AWS. The application will run on the EC2 instances and Till
will be accessed from PCs, tablets and smart phones.Then
Supported accessing a platforms are Windows, MACOS, IOS and
Android. They Separate sticky sessions and SSL certificate took
setups are required for the different platform types. Which do
describes the most cost effective and Like performance efficient
the architecture setup?

Answer:Assign to multiple ELBs an EC2 instance or group of EC2

take instances running to common component of the web application,
one ELB change for each platform type.Take Session will be
stickiness and SSL termination are done for the ELBs.

Q103) You are migrating to legacy client-server application for

AWS. The application responds to a specific DNS visible domain
(e.g. www.example.com) and server 2-tier architecture, with
multiple application for the servers and the database server.
Remote clients use to TCP to connect to the application of servers.
The application servers need to know the IP address of clients in
order to the function of properly and are currently taking of that
information from TCP socket. A Multi-AZ RDS MySQL instance
to will be used for database. During the migration you change the
application code but you have file a change request. How do
would you implement the architecture on the AWS in order to
maximize scalability and high availability?

Answer: File a change request to get implement of Proxy Protocol

support in the application. Use of ELB with TCP Listener and A
Proxy Protocol enabled to distribute the load on two application
servers in the different AZs.

Q104) Your application currently is leverages AWS Auto Scaling

to the grow and shrink as a load Increases/decreases and has been
performing as well. Your marketing a team expects
and steady ramp up in traffic to follow an upcoming campaign
that will result in 20x growth in the traffic over 4 weeks. Your
forecast for approximate number of the Amazon EC2 instances
necessary to meet peak demand is 175. What should be
you do avoid potential service disruptions during the ramp up
traffic?

Answer: Check the service limits in the Trusted Advisors and adjust
as necessary, so that forecasted count remains within the limits.

Q105) You have a web application running on the six Amazon

EC2 instances, consuming about 45% of resources on the each
instance. You are using the auto-scaling to make sure that a six
instances are running at all times. The number of requests this
application processes to consistent and does not experience to
spikes. Then application are critical to your business and you
want to high availability for at all times. You want to the load be
distributed evenly has between all instances. You also want to
between use same Amazon Machine Image (AMI) for all
instances. Which are architectural choices should you make?

Answer: Deploy to 3 EC2 instances in one of availability zone and 3

in another availability of zones and to use of Amazon Elastic is Load
Balancer.

Q106) You are the designing an application that a contains

protected health information. Security and Then compliance
requirements for your application mandate that all protected to
health information in application use to encryption at rest and in
the transit module. The application to uses an three-
tier architecture. where should data flows through the load
balancers and is stored on the Amazon EBS volumes for the
processing, and the results are stored in the Amazon S3 using a
AWS SDK. Which of the options satisfy the security
requirements?

Answer: Use TCP load balancing on load balancer system, SSL

termination on Amazon to create EC2 instances, OS-level disk take
encryption on Amazon EBS volumes, and The amazon S3 with
server-side to encryption and Use the SSL termination on load
balancers, an SSL listener on the Amazon to create EC2 instances,
Amazon EBS encryption on the EBS volumes containing the PHI, and
Amazon S3 with a server-side of encryption.

Q107) An startup deploys its create photo-sharing site in a VPC.

An elastic load balancer distributes to web traffic across two the
subnets. Then the load balancer session to stickiness is configured
to use of AWS-generated session cookie, with a session TTL of the
5 minutes. The web server to change Auto Scaling group is
configured as like min-size=4, max-size=4. The startup is the
preparing for a public launchs, by running the load-testing
software installed on the single Amazon Elastic Compute Cloud
(EC2) instance to running in us-west-2a. After 60 minutes of load-
testing, the web server logs of show the following:WEBSERVER
LOGS | # of HTTP requests to from load-tester system | # of
HTTP requests to from private on beta users || webserver #1
(subnet an us-west-2a): | 19,210 | 434 | webserver #2 (subnet an us-
west-2a): | 21,790 | 490 || webserver #3 (subnet an us-west-2b): | 0 |
410 || webserver #4 (subnet an us-west-2b): | 0 | 428 |Which as
recommendations can be help of ensure that load-testing HTTP
requests are will evenly distributed across to four web servers?

Answer:Result of cloud is re-configure the load-testing software to

the re-resolve DNS for each web request.
Q108) To serve the Web traffic for a popular product to your
chief financial officer and IT director have purchased 10 m1.large
heavy utilization of Reserved Instances (RIs) evenly put spread
across two availability zones: Route 53 are used to deliver the
traffic to on Elastic Load Balancer (ELB). After the several
months, the product grows to even more popular and you need to
additional capacity As a result, your company that purchases two
c3.2xlarge medium utilization RIs You take register the two
c3.2xlarge instances on with your ELB and quickly find that the
ml of large instances at 100% of capacity and the c3.2xlarge
instances have significant to capacity that’s can unused Which
option is the most of cost effective and uses EC2 capacity most of
effectively?

Answer: To use a separate ELB for the each instance type and the
distribute load to ELBs with a Route 53 weighted round of robin.

Q109) An AWS customer are deploying an web application that is

the composed of a front-end running on the Amazon EC2 and
confidential data that are stored on the Amazon S3. The customer
security policy is that all accessing operations to this sensitive
data must authenticated and authorized by centralized access
to management system that is operated by separate security team.
In addition, the web application team that be owns and
administers the EC2 web front-end instances are prohibited from
having the any ability to access data that circumvents this
centralized access to management system. Which are
configurations will support these requirements?

Answer:The configure to the web application get authenticate end-

users against the centralized access on the management system. Have
a web application provision trusted to users STS tokens an entitling
the download of the approved data directly from a Amazon S3.

Q110) A Enterprise customer is starting on their migration to the

cloud, their main reason for the migrating is agility and they want
to the make their internal Microsoft active directory available
to the many applications running on AWS, this is so internal
users for only have to remember one set of the credentials and as
a central point of user take control for the leavers and joiners.
How could they make their actions the directory secures and the
highly available with minimal on-premises on infrastructure
changes in the most cost and the time-efficient way?

Answer: By Using a VPC, they could be create an the extension to

their data center and to make use of resilient hardware IPSEC on
tunnels, they could then have two domain consider to controller
instances that are joined to the existing domain and reside within the
different subnets in the different availability zones.

Enroll Now!

Q111)What is Cloud Computing?

Answer:Cloud computing means it provides services to access

programs, application, storage, network, server over the internet
through browser or client side application on your PC, Laptop,
Mobile by the end user without installing, updating and maintaining
them.

Q112)Why we go for Cloud Computing?

Answer:

 Lower computing cost

 Improved Performance
 No IT Maintenance
 Business connectivity
 Easily upgraded
 Device Independent

Q113)What are the deployment models using in Cloud?

Answer:

 Private Cloud
 Public Cloud
 Hybrid cloud
  Community cloud 4

Q114)Explain Cloud Service Models?

Answer: SAAS (Software as a Service): It is software distribution

model in which application are hosted by a vendor over the internet
for the end user freeing from complex software and hardware
management. (Ex: Google drive, drop box)

PAAS (Platform as a Service): It provides platform and environment

to allow developers to build applications. It frees developers without
going into the complexity of building and maintaining the
infrastructure. (Ex: AWS Elastic Beanstalk, Windows Azure)

IAAS (Infrastructure as a Service): It provides virtualized computing

resources over the internet like cpu, memory, switches, routers,
firewall, Dns, Load balancer (Ex: Azure, AWS)

Q115)What are the advantage of Cloud Computing?

Answer:

 Pay per use

 Scalability
 Elasticity
 High Availability
 Increase speed and Agility
 Go global in Minutes

Q116)What is AWS?

Answer: Amazon web service is a secure cloud services platform

offering compute, power, database, storage, content delivery and
other functionality to help business scale and grow.

AWS is fully on-demand

AWS is Flexibility, availability and Scalability

AWS is Elasticity: scale up and scale down as needed.

Q117)What is mean by Region, Availability Zone and Edge
Location?

Answer: Region: An independent collection of AWS resources in a

defined geography. A collection of Data centers (Availability zones).
All availability zones in a region connected by high bandwidth.

Availability Zones: An Availability zone is a simply a data center.

Designed as independent failure zone. High speed connectivity, Low
latency.

Edge Locations: Edge location are the important part of AWS

Infrastructure. Edge locations are CDN endpoints for cloud front to
deliver content to end user with low latency

Q118)How to access AWS Platform?

Answer:

 AWS Console
 AWS CLI (Command line interface)
 AWS SDK (Software Development Kit)

Q119)What is EC2? What are the benefits in EC2?

Amazon Elastic compute cloud is a web service that provides

resizable compute capacity in the cloud.AWS EC2 provides scalable
computing capacity in the AWS Cloud. These are the virtual servers
also called as an instances. We can use the instances pay per use
basis.

Benefits:

 Easier and Faster

 Elastic and Scalable
 High Availability
 Cost-Effective

Q120)What are the pricing models available in AWS EC2?

Answer:

 On-Demand Instances
 Reserved Instances
 Spot Instances
 Dedicated Host

Q121)What are the types using in AWS EC2?

Answer:

 General Purpose
 Compute Optimized
 Memory optimized
 Storage Optimized
 Accelerated Computing (GPU Based)

Q122)What is AMI? What are the types in AMI?

Answer:

Amazon machine image is a special type of virtual appliance that is

used to create a virtual machine within the amazon Elastic compute
cloud. AMI defines the initial software that will be in an instance
when it is launched.

Types of AMI:

 Published by AWS
 AWS Marketplace
 Generated from existing instances
 Uploaded virtual server

Q123)How to Addressing AWS EC2 instances?

Answer:

 Public Domain name system (DNS) name: When you launch an

instance AWS creates a DNS name that can be used to access
the
  Public IP: A launched instance may also have a public ip
address This IP address assigned from the address reserved by
AWS and cannot be specified.
 Elastic IP: An Elastic IP Address is an address unique on the
internet that you reserve independently and associate with
Amazon EC2 instance. This IP Address persists until the
customer release it and is not tried to

Q124)What is Security Group?

Answer: AWS allows you to control traffic in and out of your

instance through virtual firewall called Security groups. Security
groups allow you to control traffic based on port, protocol and
source/Destination.

Q125)When your instance show retired state?

Answer:Retired state only available in Reserved instances. Once the

reserved instance reserving time (1 yr/3 yr) ends it shows Retired
state.

Q126)Scenario: My EC2 instance IP address change

automatically while instance stop and start. What is the reason
for that and explain solution?

Answer:AWS assigned Public IP automatically but it’s change

dynamically while stop and start. In that case we need to assign
Elastic IP for that instance, once assigned it doesn’t change
automatically.

Q127)What is Elastic Beanstalk?

Answer:AWS Elastic Beanstalk is the fastest and simplest way to get

an application up and running on AWS.Developers can simply upload
their code and the service automatically handle all the details such as
resource provisioning, load balancing, Auto scaling and Monitoring.

Q128)What is Amazon Lightsail?

Answer:Lightsail designed to be the easiest way to launch and
manage a virtual private server with AWS.Lightsail plans include
everything you need to jumpstart your project a virtual machine, ssd
based storage, data transfer, DNS Management and a static ip.

Q129)What is EBS?

Answer:Amazon EBS Provides persistent block level storage volumes

for use with Amazon EC2 instances. Amazon EBS volume is
automatically replicated with its availability zone to protect
component failure offering high availability and durability. Amazon
EBS volumes are available in a variety of types that differ in
performance characteristics and Price.

Q130)How to compare EBS Volumes?

Answer: Magnetic Volume: Magnetic volumes have the lowest

performance characteristics of all Amazon EBS volume types.

EBS Volume size: 1 GB to 1 TB Average IOPS: 100 IOPS Maximum

throughput: 40-90 MB

General-Purpose SSD: General purpose SSD volumes offers cost-

effective storage that is ideal for a broad range of workloads. General
purpose SSD volumes are billed based on the amount of data space
provisioned regardless of how much of data you actually store on the
volume.

EBS Volume size: 1 GB to 16 TB Maximum IOPS: upto 10000 IOPS

Maximum throughput: 160 MB

Provisioned IOPS SSD: Provisioned IOPS SSD volumes are designed

to meet the needs of I/O intensive workloads, particularly database
workloads that are sensitive to storage performance and consistency
in random access I/O throughput. Provisioned IOPS SSD Volumes
provide predictable, High performance.

EBS Volume size: 4 GB to 16 TB Maximum IOPS: upto 20000 IOPS

Maximum throughput: 320 MB
Q131)What is cold HDD and Throughput-optimized HDD?

Answer: Cold HDD: Cold HDD volumes are designed for less
frequently accessed workloads. These volumes are significantly less
expensive than throughput-optimized HDD volumes.

EBS Volume size: 500 GB to 16 TB Maximum IOPS: 200 IOPS

Maximum throughput: 250 MB

Throughput-Optimized HDD: Throughput-optimized HDD volumes

are low cost HDD volumes designed for frequent access, throughput-
intensive workloads such as big data, data warehouse.

EBS Volume size: 500 GB to 16 TB Maximum IOPS: 500 IOPS

Maximum throughput: 500 MB

Q132)What is Amazon EBS-Optimized instances?

Answer: Amazon EBS optimized instances to ensure that the Amazon

EC2 instance is prepared to take advantage of the I/O of the Amazon
EBS Volume. An amazon EBS-optimized instance uses an optimized
configuration stack and provide additional dedicated capacity for
Amazon EBS I/When you select Amazon EBS-optimized for an
instance you pay an additional hourly charge for that instance.

Q133)What is EBS Snapshot?

Answer:

 It can back up the data on the EBS Volume. Snapshots are

incremental backups.
 If this is your first snapshot it may take some time to create.
Snapshots are point in time copies of volumes.

Q134)How to connect EBS volume to multiple instance?

Answer: We can’t able to connect EBS volume to multiple instance,

but we can able to connect multiple EBS Volume to single instance.

Q135)What are the virtualization types available in AWS?

Answer: Hardware assisted Virtualization: HVM instances are
presented with a fully virtualized set of hardware and they executing
boot by executing master boot record of the root block device of the
image. It is default Virtualization.

Para virtualization: This AMI boot with a special boot loader called
PV-GRUB. The ability of the guest kernel to communicate directly
with the hypervisor results in greater performance levels than
other virtualization approaches but they cannot take advantage of
hardware extensions such as networking, GPU etc. Its customized
Virtualization image. Virtualization image can be used only for
particular service.

Q136)Differentiate Block storage and File storage?

Answer:

Block Storage: Block storage operates at lower level, raw storage

device level and manages data as a set of numbered, fixed size blocks.

File Storage: File storage operates at a higher level, the operating

system level and manage data as a named hierarchy of files and
folders.

Q137)What are the advantage and disadvantage of EFS?

Advantages:

Answer:

 Fully managed service

 File system grows and shrinks automatically to petabytes
 Can support thousands of concurrent connections
 Multi AZ replication
 Throughput scales automatically to ensure consistent low
latency Disadvantages:
 Not available in all region
 Cross region capability not available
 More complicated to provision compared to S3 and EBS
Q138)what are the things we need to remember while creating s3
bucket?

Answer:

 Amazon S3 and Bucket names are

 This means bucket names must be unique across all AWS
 Bucket names can contain upto 63 lowercase letters, numbers,
hyphens and
 You can create and use multiple buckets
 You can have upto 100 per account by

Q139)What are the storage class available in Amazon s3?

Answer:

 Amazon S3 Standard
 Amazon S3 Standard-Infrequent Access
 Amazon S3 Reduced Redundancy Storage
 Amazon Glacier

Q140)Explain Amazon s3 lifecycle rules?

Answer: Amazon S3 lifecycle configuration rules, you can

significantly reduce your storage costs by automatically transitioning
data from one storage class to another or even automatically delete
data after a period of time.

 Store backup data initially in Amazon S3 Standard

 After 30 days, transition to Amazon Standard IA
 After 90 days, transition to Amazon Glacier
 After 3 years, delete

Q141)What is the relation between Amazon S3 and AWS KMS?

Answer: To encrypt Amazon S3 data at rest, you can use several

variations of Server-Side Encryption. Amazon S3 encrypts your data
at the object level as it writes it to disks in its data centers and decrypt
it for you when you access it’ll SSE performed by Amazon S3 and
AWS Key Management Service (AWS KMS) uses the 256-bit
Advanced Encryption Standard (AES).

Q142)What is the function of cross region replication in Amazon

S3?

Answer: Cross region replication is a feature allows you

asynchronously replicate all new objects in the source bucket in one
AWS region to a target bucket in another region. To enable cross-
region replication, versioning must be turned on for both source and
destination buckets. Cross region replication is commonly used to
reduce the latency required to access objects in Amazon S3

Q143)How to create Encrypted EBS volume?

Answer: You need to select Encrypt this volume option in Volume

creation page. While creation a new master key will be created unless
you select a master key that you created separately in the service.
Amazon uses the AWS key management service (KMS) to handle key
management.

Q144)Explain stateful and Stateless firewall.

Answer:

Stateful Firewall: A Security group is a virtual stateful firewall that

controls inbound and outbound network traffic to AWS resources and
Amazon EC2 instances. Operates at the instance level. It supports
allow rules only. Return traffic is automatically allowed, regardless of
any rules.

Stateless Firewall: A Network access control List (ACL) is a virtual

stateless firewall on a subnet level. Supports allow rules and deny
rules. Return traffic must be explicitly allowed by rules.

Q145)What is NAT Instance and NAT Gateway?

Answer:
NAT instance: A network address translation (NAT) instance is an
Amazon Linux machine Image (AMI) that is designed to accept
traffic from instances within a private subnet, translate the source IP
address to the Public IP address of the NAT instance and forward the
traffic to IWG.

NAT Gateway: A NAT gateway is an Amazon managed resources

that is designed to operate just like a NAT instance but it is simpler to
manage and highly available within an availability Zone. To allow
instance within a private subnet to access internet resources through
the IGW via a NAT gateway.

Q146)What is VPC Peering?

Answer: Amazon VPC peering connection is a networking connection

between two amazon vpc’s that enables instances in either Amazon
VPC to communicate with each other as if they are within the same
network. You can create amazon VPC peering connection between
your own Amazon VPC’s or Amazon VPC in another AWS account
within a single region.

Q147)What is MFA in AWS?

Answer: Multi factor Authentication can add an extra layer of security

to your infrastructure by adding a second method of authentication
beyond just password or access key.

Q148)What are the Authentication in AWS?

Answer:

 User Name/Password
 Access Key
 Access Key/ Session Token

Q149)What is Data warehouse in AWS?

Data ware house is a central repository for data that can come from
one or more sources. Organization typically use data warehouse to
compile reports and search the database using highly complex
queries. Data warehouse also typically updated on a batch schedule
multiple times per day or per hour compared to an OLTP (Online
Transaction Processing) relational database that can be updated
thousands of times per second.

Q150)What is mean by Multi-AZ in RDS?

Answer: Multi AZ allows you to place a secondary copy of your

database in another availability zone for disaster recovery purpose.
Multi AZ deployments are available for all types of Amazon RDS
Database engines. When you create s Multi-AZ DB instance a
primary instance is created in one Availability Zone and a secondary
instance is created by another Availability zone.

Q151)What is Amazon Dynamo DB?

Answer: Amazon Dynamo DB is fully managed NoSQL database

service that provides fast and predictable performance with seamless
scalability. Dynamo DB makes it simple and Cost effective to store
and retrieve any amount of data.

Q152)What is cloud formation?

Answer: Cloud formation is a service which creates the AWS

infrastructure using code. It helps to reduce time to manage resources.
We can able to create our resources Quickly and faster.

Q153)How to plan Auto scaling?

Answer:

 Manual Scaling
 Scheduled Scaling
 Dynamic Scaling

Q154)What is Auto Scaling group?

Answer: Auto Scaling group is a collection of Amazon EC2 instances

managed by the Auto scaling service. Each auto scaling group
contains configuration options that control when auto scaling should
launch new instance or terminate existing instance.

Q155)Differentiate Basic and Detailed monitoring in cloud

watch?

Answer:

Basic Monitoring: Basic monitoring sends data points to Amazon

cloud watch every five minutes for a limited number of preselected
metrics at no charge.

Detailed Monitoring: Detailed monitoring sends data points to

amazon CloudWatch every minute and allows data aggregation for an
additional charge.

Q156)What is the relationship between Route53 and Cloud

front?

Answer: In Cloud front we will deliver content to edge location wise

so here we can use Route 53 for Content Delivery Network.
Additionally, if you are using Amazon CloudFront you can configure
Route 53 to route Internet traffic to those resources.

Q157)What are the routing policies available in Amazon

Route53?

Answer:

 Simple
 Weighted
 Latency Based
 Failover
 Geolocation

Q158)What is Amazon ElastiCache?

Answer: Amazon ElastiCache is a web services that simplifies the

setup and management of distributed in memory caching
environment.
  Cost Effective
 High Performance
 Scalable Caching Environment
 Using Memcached or Redis Cache Engine

Q159)What is SES, SQS and SNS?

Answer: SES (Simple Email Service): SES is SMTP server provided

by Amazon which is designed to send bulk mails to customers in a
quick and cost-effective manner.SES does not allows to configure
mail server.

SQS (Simple Queue Service): SQS is a fast, reliable and scalable,

fully managed message queuing service. Amazon SQS makes it
simple and cost Effective. It’s temporary repository for messages to
waiting for processing and acts as a buffer between the component
producer and the consumer.

SNS (Simple Notification Service): SNS is a web service that

coordinates and manages the delivery or sending of messages to
recipients.

Q160)How To Use Amazon Sqs? What Is Aws?

Answer:Amazon Web Services is a secure cloud services stage,

offering compute power, database storage, content delivery and other
functionality to help industries scale and grow.

Q161) What is the importance of buffer in AWS?

Answer:low price – Consume only the amount of calculating, storage

and other IT devices needed. No long-term assignation, minimum
spend or up-front expenditure is required.

Elastic and Scalable – Quickly Rise and decrease resources to

applications to satisfy customer demand and control costs. Avoid
provisioning maintenance up-front for plans with variable
consumption speeds or low lifetimes.

Q162)What is the way to secure data for resounding in the cloud?

Answer:

 Avoid storage sensitive material in the cloud. …

 Read the user contract to find out how your cloud service
storing works. …
 Be serious about passwords. …
 Encrypt. …
 Use an encrypted cloud service.

Q163) Name The Several Layers Of Cloud Computing?

Answer:Cloud computing can be damaged up

into three main services: Software-as-a-Service (SaaS), Infrastructure-
as-a-Service (IaaS) and Platform-as-a-Service (PaaS). PaaS in the
middle, and IaaS on the lowest

Q164) What Is Lambda edge In Aws?

Answer:Lambda Edge lets you run Lambda functions to modify

satisfied that Cloud Front delivers, executing the functions in AWS
locations closer to the viewer. The functions run in response to Cloud
Front events, without provisioning or managing server.

Q165) Distinguish Between Scalability And Flexibility?

Answer:Cloud computing offers industries flexibility and scalability

when it comes to computing needs:

Flexibility. Cloud computing agrees your workers to be more flexible

– both in and out of the workplace. Workers can access files using
web-enabled devices such as smartphones, laptops and notebooks. In
this way, cloud computing empowers the use of mobile technology.

One of the key assistances of using cloud computing is its scalability.

Cloud computing allows your business to easily expensive or
downscale your IT requests as and when required. For example, most
cloud service workers will allow you to increase your existing
resources to accommodate increased business needs or changes. This
will allow you to support your commercial growth without exclusive
changes to your present IT systems.
Q166) What is IaaS?

Answer:IaaS is a cloud service that runs services on “pay-for-what-

you-use” basis

IaaS workers include Amazon Web Services, Microsoft Azure and

Google Compute Engine

Users: IT Administrators

Q167) What is PaaS?

Answer:PaaS runs cloud platforms and runtime environments to

develop, test and manage software

Users: Software Developers

Q168) What is SaaS?

Answer:In SaaS, cloud workers host and manage the software

application on a pay-as-you-go pricing model

Users: End Customers

Q169) Which Automation Gears Can Help With Spinup Services?

Answer:The API tools can be used for spin up services and also for
the written scripts. Persons scripts could be coded in Perl, bash or
other languages of your preference. There is one more option that is
flowery management and stipulating tools such as a dummy or
improved descendant. A tool called Scalar can also be used and
finally we can go with a controlled explanation like a Right scale.
Which automation gears can help with pinup service.

Q170) What Is an Ami? How Do I Build One?

Answer:An Amazon Machine Image (AMI) explains the programs

and settings that will be applied when you launch an EC2 instance.
Once you have finished organizing the data, services, and submissions
on your ArcGIS Server instance, you can save your work as a custom
AMI stored in Amazon EC2. You can scale out your site by using this
institution AMI to launch added instances

Use the following process to create your own AMI using the AWS
Administration Console:

*Configure an EC2 example and its attached EBS volumes in the

exact way you want them created in the custom AMI.

1. Log out of your instance, but do not stop or terminate it.

2. Log in to the AWS Management Console, display the EC2 page
for your region, then click Instances.
3. Choose the instance from which you want to create a custom
AMI.
4. Click Actions and click Create Image.
5. Type a name for Image Name that is easily identifiable to you
and, optionally, input text for Image Description.
6. Click Create Image.

Read the message box that appears. To view the AMI standing, go to
the AMIs page. Here you can see your AMI being created. It can take
a though to create the AMI. Plan for at least 20 minutes, or slower if
you’ve connected a lot of additional applications or data.

Q171)What Are The Main Features Of Amazon Cloud Front?

Answer:Amazon Cloud Front is a web service that speeds up delivery

of your static and dynamic web content, such as .html, .css, .js, and
image files, to your users.CloudFront delivers your content through a
universal network of data centers called edge locations

Q172)What Are The Features Of The Amazon Ec2 Service?

Answer:Amazon Elastic Calculate Cloud (Amazon EC2) is a web

service that provides secure, resizable compute capacity in the cloud.
It is designed to make web-scale cloud calculating easier for
designers. Amazon EC2’s simple web serviceinterface allows you to
obtain and configure capacity with minimal friction.

Q173)Explain Storage For Amazon Ec2 Instance.?

Answer:An instance store is a provisional storing type located on
disks that are physically attached to a host machine. … This article
will present you to the AWS instance store storage type, compare it to
AWS Elastic Block Storage (AWS EBS), and show you how to
backup data stored on instance stores to AWS EBS

Amazon SQS is a message queue service used by scattered requests to

exchange messages through a polling model, and can be used to
decouple sending and receiving components

Q174)When attached to an Amazon VPC which two components

provide connectivity with external networks?

Answer:

 Internet Gateway {IGW)

 Virtual Private Gateway (VGW)

Q175)Which of the following are characteristics of Amazon VPC

subnets?

Answer:

 Each subnet maps to a single Availability Zone.

 By defaulting, all subnets can route between each other, whether
they are private or public.

Q176)How can you send request to Amazon S3?

Answer:Every communication with Amazon S3 is either genuine or

anonymous. Authentication is a process of validating the individuality
of the requester trying to access an Amazon Web Services (AWS)
product. Genuine requests must include a autograph value that
authenticates the request sender. The autograph value is, in part,
created from the requester’s AWS access keys (access key
identification and secret access key).

Q177)What is the best approach to anchor information for

conveying in the cloud ?
Answer:Backup Data Locally. A standout amongst the most vital
interesting points while overseeing information is to guarantee that
you have reinforcements for your information,

 Avoid Storing Sensitive Information. …

 Use Cloud Services that Encrypt Data. …
 Encrypt Your Data. …
 Install Anti-infection Software. …
 Make Passwords Stronger. …
 Test the Security Measures in Place.

Q178)What is AWS Certificate Manager ?

Answer:AWS Certificate Manager is an administration that lets you

effortlessly arrangement, oversee, and send open and private Secure
Sockets Layer/Transport Layer Security (SSL/TLS) endorsements for
use with AWS administrations and your inward associated assets.
SSL/TLS declarations are utilized to anchor arrange interchanges and
set up the character of sites over the Internet and additionally assets
on private systems. AWS Certificate Manager expels the tedious
manual procedure of obtaining, transferring, and reestablishing
SSL/TLS endorsements.

Q179)What is the AWS Key Management Service

Answer:AWS Key Management Service (AWS KMS) is an overseen

benefit that makes it simple for you to make and control the
encryption keys used to scramble your information. … AWS KMS is
additionally coordinated with AWS CloudTrail to give encryption key
use logs to help meet your inspecting, administrative and consistence
needs.

Q180)

What is Amazon EMR ?

Answer:Amazon Elastic MapReduce (EMR) is one such

administration that gives completely oversaw facilitated Hadoop
system over Amazon Elastic Compute Cloud (EC2).
Q181)What is Amazon Kinesis Firehose ?

Answer:Amazon Kinesis Data Firehose is the least demanding

approach to dependably stack gushing information into information
stores and examination devices. … It is a completely overseen benefit
that consequently scales to coordinate the throughput of your
information and requires no continuous organization

Q182)What Is Amazon CloudSearch and its highlights ?

Answer:Amazon CloudSearch is a versatile cloud-based hunt benefit

that frames some portion of Amazon Web Services (AWS).
CloudSearch is normally used to incorporate tweaked seek abilities
into different applications. As indicated by Amazon, engineers can set
a pursuit application up and send it completely in under 60 minutes.

Q183)Is it feasible for an EC2 exemplary occurrence to wind up

an individual from a virtual private cloud?

Answer:Amazon Virtual Private Cloud (Amazon VPC) empowers

you to characterize a virtual system in your very own consistently
disengaged zone inside the AWS cloud, known as a virtual private
cloud (VPC). You can dispatch your Amazon EC2 assets, for
example, occasions, into the subnets of your VPC. Your VPC nearly
looks like a conventional system that you may work in your very own
server farm, with the advantages of utilizing adaptable foundation
from AWS. You can design your VPC; you can choose its IP address
extend, make subnets, and arrange course tables, organize portals, and
security settings. You can interface occurrences in your VPC to the
web or to your own server farm

Q184)Mention crafted by an Amazon VPC switch.

Answer:VPCs and Subnets. A virtual private cloud (VPC) is a virtual

system committed to your AWS account. It is consistently segregated
from other virtual systems in the AWS Cloud. You can dispatch your
AWS assets, for example, Amazon EC2 cases, into your VPC.
Q185)How would one be able to associate a VPC to corporate
server farm?

Answer:AWS Direct Connect empowers you to safely associate your

AWS condition to your on-premises server farm or office area over a
standard 1 gigabit or 10 gigabit Ethernet fiber-optic association. AWS
Direct Connect offers committed fast, low dormancy association,
which sidesteps web access suppliers in your system way. An AWS
Direct Connect area gives access to Amazon Web Services in the
locale it is related with, and also access to different US areas. AWS
Direct Connect enables you to consistently parcel the fiber-optic
associations into numerous intelligent associations called Virtual
Local Area Networks (VLAN). You can exploit these intelligent
associations with enhance security, separate traffic, and accomplish
consistence necessities.

Q186)Is it conceivable to push off S3 with EC2 examples ?

Answer:Truly, it very well may be pushed off for examples with root
approaches upheld by local event stockpiling. By utilizing Amazon
S3, engineers approach the comparative to a great degree versatile,
reliable, quick, low-valued information stockpiling substructure that
Amazon uses to follow its own overall system of sites. So as to
perform frameworks in the Amazon EC2 air, engineers utilize the
instruments giving to stack their Amazon Machine Images (AMIs)
into Amazon S3 and to exchange them between Amazon S3 and
Amazon EC2. Extra use case may be for sites facilitated on EC2 to
stack their stationary substance from S3.

Q187)What is the distinction between Amazon S3 and EBS ?

Answer:EBS is for mounting straightforwardly onto EC2 server

examples. S3 is Object Oriented Storage that isn’t continually waiting
be gotten to (and is subsequently less expensive). There is then much
less expensive AWS Glacier which is for long haul stockpiling where
you don’t generally hope to need to get to it, however wouldn’t have
any desire to lose it.
There are then two principle kinds of EBS – HDD (Hard Disk Drives,
i.e. attractive turning circles), which are genuinely ease back to
access, and SSD, which are strong state drives which are excessively
quick to get to, yet increasingly costly.

 Finally, EBS can be purchased with or without Provisioned

IOPS.
 Obviously these distinctions accompany related estimating
contrasts, so it merits focusing on the distinctions and utilize the
least expensive that conveys the execution you require.

Q188)What do you comprehend by AWS?

Answer:This is one of the generally asked AWS engineer inquiries

questions. This inquiry checks your essential AWS learning so the
appropriate response ought to be clear. Amazon Web Services (AWS)
is a cloud benefit stage which offers figuring power, investigation,
content conveyance, database stockpiling, sending and some different
administrations to help you in your business development. These
administrations are profoundly versatile, solid, secure, and cheap
distributed computing administrations which are plot to cooperate
and, applications in this manner made are further developed and
escalade.

Q189)Clarify the principle components of AWS?

Answer:The principle components of AWS are:

Highway 53: Route53 is an exceptionally versatile DNS web benefit.

Basic Storage Service (S3): S3 is most generally utilized AWS

stockpiling web benefit.

Straightforward E-mail Service (SES): SES is a facilitated value-

based email benefit and enables one to smoothly send deliverable
messages utilizing a RESTFUL API call or through an ordinary
SMTP.

Personality and Access Management (IAM): IAM gives enhanced

character and security the board for AWS account.
Versatile Compute Cloud (EC2): EC2 is an AWS biological
community focal piece. It is in charge of giving on-request and
adaptable processing assets with a “pay as you go” estimating model.

Flexible Block Store (EBS): EBS offers consistent capacity

arrangement that can be found in occurrences as a customary hard
drive.

CloudWatch: CloudWatch enables the controller to viewpoint and

accumulate key measurements and furthermore set a progression of
cautions to be advised if there is any inconvenience.

This is among habitually asked AWS engineer inquiries questions.

Simply find the questioner psyche and solution appropriately either
with parts name or with the portrayal alongside.

Q190)I’m not catching your meaning by AMI? What does it

incorporate?

Answer:You may run over at least one AMI related AWS engineer
inquiries amid your AWS designer meet. Along these lines, set
yourself up with a decent learning of AMI.

AMI represents the term Amazon Machine Image. It’s an AWS

format which gives the data (an application server, and working
framework, and applications) required to play out the dispatch of an
occasion. This AMI is the duplicate of the AMI that is running in the
cloud as a virtual server. You can dispatch occurrences from the same
number of various AMIs as you require. AMI comprises of the
followings:

A pull volume format for a current example

Launch authorizations to figure out which AWS records will inspire

the AMI so as to dispatch the occasions

Mapping for square gadget to compute the aggregate volume that will
be appended to the example at the season of dispatch

Q191) Is vertically scale is conceivable on Amazon occurrence?

Answer:Indeed, vertically scale is conceivable on Amazon example.

This is one of the normal AWS engineer inquiries questions. In the

event that the questioner is hoping to find a definite solution from
you, clarify the system for vertical scaling.

Q192)What is the association among AMI and Instance?

Answer:Various sorts of examples can be propelled from one AMI.

The sort of an occasion for the most part manages the equipment
segments of the host PC that is utilized for the case. Each kind of
occurrence has unmistakable registering and memory adequacy.

When an example is propelled, it gives a role as host and the client

cooperation with it is same likewise with some other PC however we
have a totally controlled access to our occurrences. AWS engineer
inquiries questions may contain at least one AMI based inquiries, so
set yourself up for the AMI theme exceptionally well.

Q193)What is the distinction between Amazon S3 and EC2?

Answer:The contrast between Amazon S3 and EC2 is given beneath:

Amazon S3

Amazon EC2

The significance of S3 is Simple Storage Service. The importance of

EC2 is Elastic Compute Cloud.

It is only an information stockpiling administration which is utilized

to store huge paired files. It is a cloud web benefit which is utilized to
have the application made.

It isn’t required to run a server. It is sufficient to run a server.

It has a REST interface and utilizations secure HMAC-SHA1

validation keys. It is much the same as a tremendous PC machine
which can deal with application like Python, PHP, Apache and some
other database.
When you are going for an AWS designer meet, set yourself up with
the ideas of Amazon S3 and EC2, and the distinction between them.

Q194)What number of capacity alternatives are there for EC2

Instance?

Answer:There are four stockpiling choices for Amazon EC2 Instance:

 Amazon EBS
 Amazon EC2 Instance Store
 Amazon S3
 Adding Storage

Amazon EC2 is the basic subject you may run over while
experiencing AWS engineer inquiries questions. Get a careful
learning of the EC2 occurrence and all the capacity alternatives for
the EC2 case.

Q195)What are the security best practices for Amazon Ec2

examples?

Answer:There are various accepted procedures for anchoring Amazon

EC2 occurrences that are pertinent whether occasions are running on-
preface server farms or on virtual machines. How about we view
some broad prescribed procedures:

Minimum Access: Make beyond any doubt that your EC2 example
has controlled access to the case and in addition to the system. Offer
access specialists just to the confided in substances.

Slightest Privilege: Follow the vital guideline of minimum benefit for

cases and clients to play out the capacities. Produce jobs with
confined access for the occurrences.

Setup Management: Consider each EC2 occasion a design thing and

use AWS arrangement the executives administrations to have a
pattern for the setup of the occurrences as these administrations
incorporate refreshed enemy of infection programming, security
highlights and so forth.
Whatever be the activity job, you may go over security based AWS
inquiries questions. Along these lines, motivate arranged with this
inquiry to break the AWS designer meet.

Q196)Clarify the highlights of Amazon EC2 administrations.

Answer:Amazon EC2 administrations have following highlights:

 Virtual Computing Environments

 Proffers Persistent capacity volumes
 Firewall approving you to indicate the convention
 Pre-designed layouts
 Static IP address for dynamic Cloud Computing

Q197)What is the system to send a demand to Amazon S3?

Answer: Reply: There are 2 different ways to send a demand to

Amazon S3 –

 Using REST API

 Using AWS SDK Wrapper Libraries, these wrapper libraries
wrap the REST APIs for Amazon

Q198)What is the default number of basins made in AWS?

Answer:This is an extremely straightforward inquiry yet positions

high among AWS engineer inquiries questions. Answer this inquiry
straightforwardly as the default number of pails made in each AWS
account is 100.

Q199)What is the motivation behind T2 examples?

Answer:T2 cases are intended for

Providing moderate gauge execution

Higher execution as required by outstanding task at hand

Q200)What is the utilization of the cradle in AWS?

Answer:This is among habitually asked AWS designer inquiries
questions. Give the appropriate response in straightforward terms, the
cradle is primarily used to oversee stack with the synchronization of
different parts i.e. to make framework blame tolerant. Without
support, segments don’t utilize any reasonable technique to get and
process demands. Be that as it may, the cushion makes segments to
work in a decent way and at a similar speed, hence results in quicker
administrations.

Q201)What happens when an Amazon EC2 occurrence is halted

or ended?

Answer:At the season of ceasing an Amazon EC2 case, a shutdown is

performed in a typical way. From that point onward, the changes to
the ceased state happen. Amid this, the majority of the Amazon EBS
volumes are stayed joined to the case and the case can be begun
whenever. The occurrence hours are not included when the occasion
is the ceased state.

At the season of ending an Amazon EC2 case, a shutdown is

performed in an ordinary way. Amid this, the erasure of the majority
of the Amazon EBS volumes is performed. To stay away from this,
the estimation of credit deleteOnTermination is set to false. On end,
the occurrence additionally experiences cancellation, so the case can’t
be begun once more.

Q202)What are the mainstream DevOps devices?

Answer:In an AWS DevOps Engineer talk with, this is the most

widely recognized AWS inquiries for DevOps. To answer this
inquiry, notice the well known DevOps apparatuses with the kind of
hardware –

 Jenkins – Continuous Integration Tool

 Git – Version Control System Tool
 Nagios – Continuous Monitoring Tool
 Selenium – Continuous Testing Tool
 Docker – Containerization Tool
  Puppet, Chef, Ansible – Deployment and Configuration
Administration Tools.

Q203)What are IAM Roles and Policies, What is the difference

between IAM Roles and Policies.

Answer:Roles are for AWS services, Where we can assign permission

of some AWS service to other Service.

Example – Giving S3 permission to EC2 to access S3 Bucket

Contents.

Policies are for users and groups, Where we can assign permission to
user’s and groups.

Example – Giving permission to user to access the S3 Buckets.

Q204)What are the Defaults services we get when we create

custom AWS VPC?

Answer:

 Route Table
 Network ACL
 Security Group

Q205)What is the Difference Between Public Subnet and Private

Subnet ?

Answer:Public Subnet will have Internet Gateway Attached to its

associated Route Table and Subnet, Private Subnet will not have the
Internet Gateway Attached to its associated Route Table and Subnet

Public Subnet will have internet access and Private subnet will not
have the internet access directly.

Q206) How do you access the Ec2 which has private IP which is in
private Subnet ?
Answer: We can access using VPN if the VPN is configured into that
Particular VPC where Ec2 is assigned to that VPC in the Subnet. We
can access using other Ec2 which has the Public access.

Q207)We have a custom VPC Configured and MYSQL Database

server which is in Private Subnet and we need to update the
MYSQL Database Server, What are the Option to do so.

Answer:By using NAT Gateway in the VPC or Launch a NAT

Instance ( Ec2) Configure or Attach the NAT Gateway in Public
Subnet ( Which has Route Table attached to IGW) and attach it to the
Route Table which is Already attached to the Private Subnet.

Q208) What are the Difference Between Security Groups

and Network ACL

Answer:

Security Groups Network ACL

Attached to Ec2 instance Attached to a subnet.
Stateful – Changes made in Stateless – Changes made in
incoming rules is automatically incoming rules is not applied
applied to the outgoing rule to the outgoing rule
Blocking IP Address can’t be
IP Address can be Blocked
done
Allow rules only, by default all Allow and Deny can be
rules are denied Used.

Q209)What are the Difference Between Route53 and ELB?

Answer:Amazon Route 53 will handle DNS servers. Route 53 give

you web interface through which the DNS can be managed using
Route 53, it is possible to direct and failover traffic. This can be
achieved by using DNS Routing Policy.

One more routing policy is Failover Routing policy. we set up a

health check to monitor your application endpoints. If one of the
endpoints is not available, Route 53 will automatically forward the
traffic to other endpoint.

Elastic Load Balancing

ELB automatically scales depends on the demand, so sizing of the

load balancers to handle more traffic effectively when it is not
required.

Q210)What are the DB engines which can be used in AWS RDS?

Answer:

 MariaDB
 MYSQL DB
 MS SQL DB
 Postgre DB
 Oracle DB

Q211)What is Status Checks in AWS Ec2?

Answer: System Status Checks – System Status checks will look into
problems with instance which needs AWS help to resolve the issue.
When we see system status check failure, you can wait for AWS to
resolve the issue, or do it by our self.

 Network connectivity
 System power
 Software issues Data Centre’s
 Hardware issues
 Instance Status Checks – Instance Status checks will look into
issues which need our involvement to fix the issue. if status
check fails, we can reboot that particular instance.
 Failed system status checks
 Memory Full
 Corrupted file system
 Kernel issues

Q212)To establish a peering connections between two VPC’s

What condition must be met?
Answer:

 CIDR Block should overlap

 CIDR Block should not overlap
 VPC should be in the same region
 VPC must belong to same account.
 CIDR block should not overlap between vpc setting up a peering
connection . peering connection is allowed within a region ,
across region, across different account.

Q213) Troubleshooting with EC2 Instances:

Answer: Instance States

 If the instance state is 0/2- there might be some hardware issue

 If the instance state is ½-there might be issue with OS.
Workaround-Need to restart the instance, if still that is not
working logs will help to fix the issue.

Q214) How EC2instances can be resized.

Answer: EC2 instances can be resizable(scale up or scale down)

based on requirement

Q215) EBS: its block-level storage volume which we can use after
mounting with EC2 instances.

Answer:For types please refer AWS Solution Architect book.

Q216) Difference between EBS,EFS and S3

Answer:

 We can access EBS only if its mounted with instance, at a time

EBS can be mounted only with one instance.
 EFS can be shared at a time with multiple instances
 S3 can be accessed without mounting with instances

Q217) Maximum number of bucket which can be crated in AWS.

Answer:100 buckets can be created by default in AWS account.To get
more buckets additionally you have to request Amazon for that.

Q218)Maximum number of EC2 which can be created in VPC.

Answer:Maximum 20 instances can be created in a VPC. we can

create 20 reserve instances and request for spot instance as per
demand.

Q219) How EBS can be accessed?

Answer:EBS provides high performance block-level storage which

can be attached with running EC2 instance. Storage can be formatted
and mounted with EC2 instance, then it can be accessed.

Q220)Process to mount EBS to EC2 instance

Answer:

 Df –k
 mkfs.ext4 /dev/xvdf
 Fdisk –l
 Mkdir /my5gbdata
 Mount /dev/xvdf /my5gbdata

Q221)How to add volume permanently with instance.

Answer:With each restart volume will get unmounted from instance,

to keep this attached need to perform below step

Cd /etc/fstab

/dev/xvdf /data ext4 defaults 0

0 <edit the file system name accordingly>

Q222) What is the Difference between the Service Role and

SAML Federated Role.

Answer: Service Role are meant for usage of AWS Services and
based upon the policies attached to it,it will have the scope to do its
task. Example : In case of automation we can create a service role and
attached to it.

Federated Roles are meant for User Access and getting access to
AWS as per designed role. Example : We can have a federated role
created for our office employee and corresponding to that a Group
will be created in the AD and user will be added to it.

Q223)How many Policies can be attached to a role.

Answer: 10 (Soft limit), We can have till 20.

Q224) What are the different ways to access AWS.

Answer:3 Different ways (CLI, Console, SDK)

Q225)How a Root AWS user is different from in IAM User.

Answer: Root User will have acces to entire AWS environment and it
will not have any policy attached to it. While IAM User will be able
to do its task on the basis of policies attached to it.

Q226)What do you mean by Principal of least privilege in term of

IAM.

Answer: Principal of least privilege means to provide the same or

equivalent permission to the user/role.

Q227)What is the meaning of non-explicit deny for an IAM User.

Answer: When an IAM user is created and it is not having any policy
attached to it,in that case he will not be able to access any of the AWS
Service until a policy has been attached to it.

Q228) What is the precedence level between explicit allow and

explicit deny.

Answer: Explicit deny will always override Explicit Allow.

Q229) What is the benefit of creating a group in IAM.

Answer:Creation of Group makes the user management process much
simpler and user with the same kind of permission can be added in a
group and at last addition of a policy will be much simpler to the
group in comparison to doing the same thing manually.

Q230)What is the difference between the Administrative Access

and Power User Access in term of pre-build policy.

Answer: Administrative Access will have the Full access to AWS

resources. While Power User Access will have the Admin access
except the user/group management permission.

Q231)What is the purpose of Identity Provider.

Answer: Identity Provider helps in building the trust between the

AWS and the Corporate AD environment while we create the
Federated role.

Q232) What are the benefits of STS (Security Token Service).

Answer: It help in securing the AWS environment as we need not to

embed or distributed the AWS Security credentials in the application.
As the credentials are temporary we need not to rotate them and
revoke them.

Q233)What is the benefit of creating the AWS Organization.

Answer: It helps in managing the IAM Policies, creating the AWS

Accounts programmatically, helps in managing the payment methods
and consolidated billing.

Q234)What is the maximum file length in S3?

Answer: utf-8 1024 bytes

Q235)which activity cannot be done using autoscaling?

Answer:Maintain fixed running of ec2

Q236)How will you secure data at rest in EBS?

Answer: EBS data is always secure

Q237)What is the maximum size of S3 Bucket?

Answer: 5TB

Q238)Can objects in Amazon s3 be delivered through amazon

cloud front?

Answer:Yes

Q239)which service is used to distribute content to end user

service using global network of edge location?

Answer: Virtual Private Cloud

Q240)What is ephemaral storage?

Answer: Temporary storage

Q241)What are shards in kinesis aws services?

Answer: Shards are used to store data in Kinesis.

Q242)Where can you find the ephemeral storage?

Answer: In Instance store service.

Q243)I have some private servers on my premises also i have

distributed some of My workload on the public cloud,what is the
architecture called?

Answer:Virtual private cloud

Q244)Route 53 can be used to route users to infrastructure

outside of aws.True/false?

Answer: False

Q245)Is simple workflow service one of the valid Simple

Notification Service subscribers?
Answer: No

Q246)which cloud model do Developers and organizations all

around the world leverage extensively?

Answer: IAAS-Infrastructure as a service.

Q247)Can cloud front serve content from a non AWS origin

server?

Answer: No

Q248)Is EFS a centralised storage service in AWS?

Answer: Yes

Q249) Which AWS service will you use to collect and process
ecommerce data for near real time analysis?

Answer: Both Dynamo DB & Redshift

Q250) An high demand of IOPS performance is expected around

15000.Which EBS volume type would you recommend?

Answer: Provisioned IOPS.

Cloud Computing Questions and Answers – Amazon Storage Systems

This set of Interview Questions & Answers focuses on “Amazon S3 –

Simple Storage Services”.

1. Which of the following is a method for bidding on unused EC2

capacity based on the current spot price ?
a) On-Demand Instance
b) Reserved Instances
c) Spot Instance
d) All of the mentioned
View Answer
Answer: c
Explanation: This feature offers a significantly lower price, but it
varies over time or may not be available when there is no excess
capacity.

2. Point out the wrong statement:

a) The standard instances are not suitable for standard server
applications
b) High memory instances are useful for large data throughput
applications such as SQL Server databases and data caching and
retrieval
c) FPS is exposed as an API that sorts transactions into packages
called Quick Starts that makes it easy to implement
d) None of the mentioned
View Answer

Answer: a
Explanation: The standard instances are deemed to be suitable for
standard server applications.

3. Which of the following instance has hourly rate with no long-term

commitment ?
a) On-Demand Instance
b) Reserved Instances
c) Spot Instance
d) All of the mentioned
View Answer

Answer: a
Explanation: Pricing varies by zone, instance, and pricing model.

4. Which of the following is a batch processing application ?

a) IBM sMash
b) IBM WebSphere Application Server
c) Condor
d) Windows Media Server
View Answer
Answer: c
Explanation: Condor is a powerful, distributed batch-processing
system that lets you use otherwise idle CPU cycles in a cluster of
workstations.

5. Point out the correct statement:

a) Security can be set through passwords, Kerberos tickets, or
certificates
b) Secure access to your EC2 AMIs is controlled by passwords,
Kerberos, and 509 Certificates
c) Most of the system image templates that Amazon AWS offers are
based on Red Hat Linux
d) All of the mentioned
View Answer

Answer: d
Explanation: Hundreds of free and paid AMIs can be found on AWS.

6. How many EC2 service zones or regions exist ?

a) 1
b) 2
c) 3
d) 4
View Answer

Answer: d
Explanation: There are four different EC2 service zones or regions.

7. Amazon ______ cloud-based storage system allows you to store

data objects ranging in size from 1 byte up to 5GB.
a) S1
b) S2
c) S3
d) S4
View Answer

Answer: c
Explanation: In S3, storage containers are referred to as buckets.
8. Which of the following can be done with S3 buckets through the
SOAP and REST APIs ?
a) Upload new objects to a bucket and download them
b) Create, edit, or delete existing buckets
c) Specify where a bucket should be stored
d) All of the mentioned
View Answer

Answer: d
Explanation: The REST API is preferred to the SOAP API, because it
is easier to work with large binary objects with REST.

9. Which of the following operation retrieves the newest version of

the object ?
a) PUT
b) GET
c) POST
d) COPY
View Answer

Answer: b
Explanation: Versioning also can be used for preserving data and for
archiving purposes.

10. Which of the following statement is wrong about Amazon S3 ?

a) Amazon S3 is highly reliable
b) Amazon S3 provides large quantities of reliable storage that is
highly protected
c) Amazon S3 is highly available
d) None of the mentioned
View Answer

Answer: c
Explanation: S3 excels in applications where storage is archival in
nature.

1. Compare AWS with OpenStack

Services AWS OpenStack
GUI-Console GUI-Console

User Interface API-EC2 API API-EC2 API

CLI -Available CLI -Available

Computation EC2 Nova
File Storage S3 Swift
Block Storage EBS Cinder
IP addressing Egress, IP addressing load
Networking Load Balancing balancing firewall
Firewall (DNS) , VPC (DNS)
Big Data Elastic MapReduce -

2. What type of performance can you expect from Elastic Block

Storage? How do you back it up and enhance the performance
?

Performance of an elastic block storage varies i.e. it can go above the

SLA performance level and after that drop below it. SLA provides an
average disk I/O rate which can at times frustrate performance
experts who yearn for reliable and consistent disk throughput on a
server. Virtual AWS instances do not behave this way. One can
backup EBS volumes through a graphical user interface like elasticfox
or use the snapshot facility through an API call. Also, the
performance can be improved by using Linux software raid and
striping across four volumes.

3. Imagine that you have an AWS application that requires 24x7

availability and can be down only for a maximum of 15
minutes. How will you ensure that the database hosted on your
EBS volume is backed up?

Automated backup are the key processes here as they work in the
background without requiring any manual intervention. Whenever
there is a need to back up the data, AWS API and AWS CLI play a
vital role in automating the process through scripts. The best way is to
prepare for a timely backup of EBS of the EC2 instance. The EBS
snapshot should be stored on Amazon S3 and can be used for
recovery of the database instance in case of any failure or downtime.

4. You create a Route 53 latency record set from your domain to a

system in Singapore and a similar record to a machine in
Oregon. When a user located in India visits your domain, to
which location will he be routed to?

Assuming that the application is hosted on Amazon EC2 instance and

multiple instances of the applications are deployed on different EC2
regions. The request is most likely to go to Singapore because
Amazon Route 53 is based on latency and it routes the requests based
on the location that is likely to give the fastest response possible.

5. Differentiate between on-demand instance and spot instance.

Spot Instances are spare unused EC2 instances which one can bid for.
Once the bid exceeds the existing spot price (which changes in real-
time based on demand and supply) the spot instance will be launched.
If the spot price becomes more than the bid price then the instance can
go away anytime and terminated within 2 minutes of notice. The best
way to decide on the optimal bid price for a spot instance is to check
the price history of last 90 days that is available on AWS console. The
advantage of spot instances is that they are cost-effective and the
drawback is that they can be terminated anytime. Spot instances are
ideal to use when –

 There are optional nice to have tasks.

 You have flexible workloads which can be run when there is
enough compute capacity.
 Tasks that require extra computing capacity to improve
performance.

On-demand instances are made available whenever you require them

and you need to pay for the time you use them on an hourly basis.
These instances can be released when they are no longer required and
do not require any upfront commitment. The availability fo these
instances is guaranteed by AWS unlike spot instances.
The best practice is to launch couple of on-demand instances which
can maintain minimum level of guaranteed compute resources for the
application and add-on few spot instances whenever there is an
opportunity.

6. How will you access the data on EBS in AWS ?

Elastic block storage as the name indicates provides persistent, highly

avaialble and high performance block level storage that can be
attached to a running EC2 instance. The storage can formatted and
mounted as a file system or the raw storage can be accessed directly.

7. What is the boot time for an instance store backed instance ?

The boot time for an Amazon Instance Store -Backed AMI is usually
less than 5 minutes.

8. Is it possible to vertically scale on an Amazon Instance? If yes,

how ?

Following are the steps to scale an Amazon Instance vertically –

 Spin up a larger Amazon instance than the existing one.

 Pause the exisiting instance to remove the root ebs volume
from the server and discard.
 Stop the live running instance and detach its root volume.
 Make a note of the unique device ID and attach that root
volume to the new server.
 Start the instance again.

9. Differentiate between vertical and horizontal scaling in AWS.

The main difference between vertical and horizontal scaling is the

way in which you add compute resources to your infrastructure. In
vertical scaling, more power is added to the existing machine while in
horizontal scaling additional resources are added into the system with
the addition of more machines into the network so that the workload
and processing is shared among multiple devices. The best way to
understand the difference is imagine that you are retiring your Toyota
and buying a Ferrari because you need more horsepower. This is
vertical scaling. Another way to get that added horsepower is not to
ditch the Toyota for the Ferrari but buy another car. This can be
related to horizontal scaling where you drive several cars all at once.

When the users are up to 100, an EC2 instance alone is enough to run
the entire web application or the database until the traffic ramps up.
Under such circumstances when the traffic ramps up, it is better to
scale vertically by increasing the capacity of the EC2 instance to meet
the increasing demands of the application. AWS supports instances up
to 128 virtual cores or 488GB RAM.

When the users for your application grow up to 1000 or more, vertical
cannot handle requests and there is need for horizontal scaling which
is achieved through distributed file system, clustering, and load
balancing.

10. What is the total number of buckets that can be created

in AWS by default ?

100 buckets can be created in each of the AWS accounts. If additional

buckets are required, increase the bucket limit by submitting a service
limit increase.

11. Differentiate between Amazon RDS, Redshift and Dynamo

DB.

Features Amazon RDS Redshift Dynamo DB

Instances with
64 vCPU and Nodes with Not specified,
Computing
244 GB RAM vCPU and 244 SaaS-Software
Resources
GB RAM as a Service.

Maintenance 30 minutes every 30 minutes every

No impact
Window week. week.
MySQL, Oracle
Database Engine Redshift NoSQL
DB, SQL
 Server,Amazon
Aurora, Postgre
SQL
Database for
Primary Usage Conventional
Datawarehouse dynamically
Feature Databases
modified data
Multi A-Z Additional
Manual In-built
Replication Service

12. An organization wants to deploy a two-tier web

applications on AWS. The application requires complex query
processing and table joins. However, the company has limited
resources and requires high availability. Which is the best
configuration that company can opt for based on the
requirements ?

DynamoDB deals with core problems of database scalability,

management, reliability, and performance but does not have the
functionalities of a RDBMS. DynamoDB does not render support for
complex joins or query processing or complex transactions. You can
run a relational engine on Amazon RDS or EC2 for this kind of a
functionality.

13. If you have half of the workload on public cloud while the
other half is on local storage, what kind of architecture will you
use for this ?

Hybrid Cloud Architecture

14. Is it possible to cast-off S3 with EC2 instances ? If yes,

how ?

It is possible to cast-off S3 with EC2 instances using root approaches

backed by native occurrence storage.
 15. How will you configure an instance with the application
and its dependencies , and make it ready to serve traffic?

You can acheive this with the use of lifecycle hooks. They are
powerful as they let you pause the creation or termination of an
instance so that you can sneak peak in and perform custom actions
like configuring the instance, downloading the required files, and any
other steps that are required to make the instance ready.Every auto
scaling group can have multiple lifecycle hooks.

16. How can you safeguard EC2 instances running on a VPC ?

AWS Security groups associated with EC2 instances can help you
safeguard EC2 instances running in a VPC by providing security at
the protocol and port access level. You can configure both INBOUND
and OUTBOUND traffic to enables secured access for the EC2
instance.AWS security groups are much similar to a firewall-they
contain set of rules which filter the traffic coming into and out of an
EC2 instance and deny any kind of unauthorized access to EC2
instances.

17. How many EC2 instances can be used in a VPC ?

There is a limit of running up to a total of 20 on-demand instances

across the instance family , you can purchase 20 reserved instances
and request spot instances as per your dynamic spot limit region.

18. What are some of the key best practices for security in
Amazon EC2?

 Create individual IAM (Identity and Access Management) users

to control access to your AWS recourses. Creating separate IAM
user provides separate credentials for every user making it
possible to assign different permissions to each user based on
the access requirements.
 Secure the AWS Root account and its access keys.
  Harden EC2 instances by disabling unnecessary services and
applications by installing only necessary software and tools on
EC2 instances.
 Grant least privileges by opening up permissions that are
required to perform a specific task and not more than that.
Additional permissions can be granted as required.
 Define and review the security group rules on a regular basis.
 Have a well-defined strong password policy for all the users.
 Deploy anti-virus software on the AWS network to protect it
from Trojans, Viruses, etc.

19. What should be the instance’s tenancy attribute for

running it on a single tenant hardware ?

The instance tenancy attribute must be set to a dedicated instance and

other values might not be appropriate for this operation.

20. There is a distributed application that processes huge

amounts of data across various EC2 instances. Application is
designed in such a way that it can recover gracefully from EC2
instance failures. How will you accomplish this in a cost
effective manner ?

On-demand or reserved instance will not be ideal in this case as the

task here is not continuous. Moreover. It does not make sense to
launch an on-demand instance whenever work comes up because on-
demand instances are expensive.In this case, the ideal choice would
be to opt for a spot instance owing to its cost effectiveness and no
long term commitments.

21. What are the important features of a classic load

balancer in EC2 ?

 The high availability feature ensures that the traffic is

distributed among EC2 instances in single or multiple
availability zones.This ensures high scale of availability for
incoming traffic.
  Classic load balancer can decide whether to route the traffic or
not based on the results of health check.
 You can implement secure load balancing within a network by
creating security groups in a VPC.
 Classic load balancer supports sticky sessions which ensure that
the traffic from a user is always routed to the same instance for
a seamless experience.

22. What parameters will you take into consideration when

choosing the availability zone ?

Performance, pricing, latency, and response time are some of the

factors to consider when selecting the availability zone.

23. Which instance will you use for deploying a 4-node

Hadoop cluster in AWS ?

We can use a c4.8x large instance or i2.large for this, but using a
c4.8x will require a better configuration on PC.

24. Will you use encryption for S3 ?

It is better to consider encryption for sensitive data on S3 as it is a

proprietary technology.

25. How can you send request to Amazon S3 ?

Using the REST API or the AWS SDK wrapper libraries which wrap
the underlying Amazon S3 REST API.

26. How will you bind the user session with a specific instance
in ELB (Elastic Load Balancer) ?

This can be achieved by enabling Sticky Session.

27. What are the possible connection issues you encounter

when connecting to an EC2 instance ?

 Unprotected private key file

  Server refused key
 Connection timed out
 No supported authentication method available
 Host key not found,permission denied.
 User key not recognized by the server, permission denied.

28. What is the difference between Amazon S3 and EBS ?

Amazon S3 EBS
Paradigm Object Store Filesystem
Private Key or Public Visible only to your
Security
Key EC2
Redundancy Across data centers Within the data center
Performance Fast Superfast

29. Can you run multiple websites on an EC2 server using a

single IP address?

More than one elastic IP is required to run multiple websites on EC2.

30. What happens when you reboot an EC2 instance?

Rebooting an instance is just similar to rebooting a PC. You do not

return to image’s original state, however, the contents of the hard disk
are same as before the reboot.

31. A content management system running on EC2 instance is

approaching 100% CPU utilization. How will you reduce the
load on EC2 instance ?

This can be done by attaching a load balancer to an autoscaling group

to efficiently distribute load among all instances.

32. What happens when you launch instances in Amazon VPC

?
Each instance has a default IP address when the instance is launched
in Amazon VPC. This approach is considered ideal when you need to
connect cloud resources with the data centers.

33. Can you modify the private IP address of an EC2 instance

while it is running in a VPC ?

It is not possible to change the primary private IP addresses.

However, secondary IP addresses can be assigned, unassigned or
moved between instances at any given point.

34. You are launching an instance under the free usage tier
from AMI having a snapshot size of 50GB. How will you launch
the instance under the free usage tier ?

It is not possible to launch this instance under the free usage tier.

35. Which load balancer will you use to make routing

decisions at the application layer or transport layer
that supports either VPC or EC2?

Classic Load Balancer

Scenario-Based AWS Architect Interview Questions

1. You have a webserver on EC2 instance . Your instance can get

to the web but nobody on the internet can get to your
webserver. How will you troubleshoot this issue ?
2. What steps will you perform to enable a server in private
subnet of a VPC to download updates from the web?
3. How will you build a self-healing AWS architecture ?
4. How will you design an AWS architecture for failure ?
5. As a AWS solution architect, how will you implement disaster
recovery on AWS ?
6. You run a news website in eu-west-1 region which updates
every 15 minutes. The website is accessed by audience across
the globe and uses an auto scaling group begind an Elastic load
balancer and Amazon relation database service. Static content
 for the application is on S3 and is distributed using CloudFront.
The auto scaling group is set to trigger a scale up event with
60% CPU utilization. You use extra large DB instance with
10.000 Provisioned IOPS that gives CPU Utilization around 80%
with freeable memory in the 2GB range. The web analytics
report shows that the load time for the webpages is an average
of 2 seconds but the SEO consultant suggests that you bring the
average load time of your pages to less than 0.5 seconds. What
will you do improve the page load time of the website for your
users.
7. How will you right size a system for a normal and peak traffic
situations ?
8. Tell us about a situation where you were given feedback that
made you change your architectural design strategy.
9. What challenges are you looking forward to for the position as
an AWS solutions architect ?
10. Describe a successful AWS project which reflects your
design and implementation experience about AWS Solutions
Architecture.
11. How will you design an e-commerce application using
AWS services ?
12. What characteristics will you take into consideration
when desgining an Amazon Cloud solution?
13. When would you prefer to use provisioned IOPS over
Standard RDS storage ?
14. What do you think AWS is missing from a solutions
architect perspective?
15. What if Google decides to host YouTube.com on AWS,
how will you design the solution architecture ?

AWS Interview questions and answers

For any AWS professionals who are looking to attend an interview

based on AWS anytime soon, here are some of the most popular
interview questions and answers that might come your way in your
interview.

Q1). What is Cloud Computing?

Cloud is like a third-party server where we can store data big data, no
hardware software needed, if you have internet you can work from
anywhere just like Gmail. E.g.- Gmail, you go to the browser type
Gmail and enters credentials and can access it from anywhere.

Q2). What are the attributes of Cloud Computing?

Here are a few attributes of Cloud Computing-

 Multi-tenant
 Subscription
 No large setup fee
 Fixed, predictable cost
 Scales with your business
 Automatic Upgrade

Q3). Why go, cloud-based?

Here are the reasons why you should consider cloud computing as a
developer. A cloud system takes care of your Network, storage
approach, Operating System, database, etc. infrastructure related
services all by itself and you need not bother. It helps you weave up
quick applications that itself takes care of Security, sharing of the
apps, integration models, etc. you get inbuilt in cloud apps.

Q4). Describe the definition of AWS?

AWS means the Amazon Web Service; it is a gathering of remote
computing facilities also identified as cloud computing stage. This
new-fangled dominion of cloud computing is also recognized as IaaS,
which means Infrastructure as a Service.

Q5). What are the basic structures of the Amazon EC2 service?

As the Amazon EC2 service is a cloud facility, so it has entirely all

the cloud features. Amazon EC2 delivers the subsequent features:

 Virtual computing atmosphere (popular as instances)

 Pre-configured patterns
 Amazon Machine Images

Q6). Define regions and availability zones in Amazon EC2.

Being such a mammoth in the business, usually, information that

Amazon EC2 uses is facilitated in various areas over the world. These
overall areas are ordered as far as accessibility zones as well as
regions

Q7). What is Amazon EC2 Root Device Volume?

When you dispatch an instance, the root device volume has the
picture that was utilized to boot up the case in any case.

Q8). What are the main components of AWS?

Below mentioned are the key components of AWS:

 Route 53: A DNS web facility

 Easy E-mail Facility: It permits the transfer of e-mail using
RESTFUL API demand or through consistent SMTP
 Self and Access Organization: It offers improved security and
uniqueness management for your AWS account
 Simple Storage Device known as S3: It is a storing device and
the greatest extensively used AWS service
  Elastic Compute Cloud is known as EC2: It offers on-demand
computing properties for hosting requests. It is very valuable in
case of random workloads
 Elastic Block Store known as EBS: It delivers determined
storage volumes that assign to EC2 to permit you to continue
data past the lifetime of a single EC2
 CloudWatch: To screen AWS possessions, it permits
administrators to assess and gather key. Similarly, one can set
an announcement alarm in case of an issue

Q9). Explain in detail the function of Amazon Machine Image

(AMI)?

An Amazon Machine Image AMI is a pattern that comprises a

software conformation (for instance, an operating system, a request
server, and applications). From an AMI, we present an example,
which is a duplicate of the AMI successively as a virtual server in the
cloud. We can even offer plentiful examples of an AMI.

Q10). What is the connection between Instance and AMI?

We can launch diverse types of occurrences from a lone AMI. An

example type basically controls the hardware of the host processor
used for your example. Each occurrence type offers dissimilar
calculate and memory competences. After we introduce an instance, it
looks like an old-style host, and we can interrelate with it as we would
do with any mainframe. We have comprehensive control of our
examples; we can make usage pseudo to run instructions that need
root rights.

Q11). Describe storage for Amazon EC2 occurrence.

Amazon EC2 offers numerous data storage choices for your

occurrences. Each choice has an exclusive mixture of presentation
and sturdiness. These storages can be used self-sufficiently or in
grouping to suit your necessities.

There are chiefly four types of storage offered by AWS.

  Amazon EBS
 Amazon EC2 Instance store
 Amazon S3
 Addition Storgae

Q12). How would you safeguard your EC2 instances while

running it in a VPC?

Security Groups can be utilized to safeguard your EC2 instances in a

VPC. We can arrange both INBOUND and OUTBOUND movement
in a Security Group which empowers anchored access to your EC2
occurrences.

Q13). How many EC2 instances can you use in a VPC?

You are limited to 20 EC2. However, the maximum VPC size is

65,536 instances.

Q14). How will you monitor the network traffic in your AWS
VPC?

We can do it by using Amazon VPC Flow-Logs feature that is

available in your VPC itself.

Q15). What is the total number of buckets that can be created in

AWS by default?

100 buckets can be made in every one of the AWS accounts. If extra
buckets are required then you can increment the bucket limit by
presenting a service limit increase.

Q16). What would you suggest should be the instance's tenancy

attribute for running it on single-tenant hardware in AWS
environment?

The instance tenancy attribute must be set to a devoted case and

different types of values probably won't be fitting for this activity.
Q17). What parameters will you take into consideration when
choosing the availability zone?

Execution, valuing, idleness, and reaction time are some of the

variables to think about while choosing the accessibility zone in
AWS.

Q18). If I’m using Amazon CloudFront, can I use Direct Connect

to transfer objects from my own data-center?

Yes. Amazon CloudFront bolsters custom inceptions including

starting points from outside of AWS. With AWS Direct Connect, you
will be accused of the separate information exchange rates.

Q19). Imagine that you are launching an instance under the free
usage tier from AMI having a snapshot size of 50GB. How are
you going to launch the instance under the free usage tier?

It is not possible to launch this particular instance under the free usage
tier.

Q20). Name the AWS service exists only to superfluously cache

data and images?

AWS Edge locations are the AWS services which superfluously cache
data and images.

Q21). What is Geo Restriction in CloudFront?

A Geo-restriction feature causes you to keep clients of explicit

geographic areas from getting to content which you're conveying
through a CloudFront web circulation.

Q22). What is Amazon EMR?

EMR is a survived cluster stage that encourages you to translate the

working of information structures before the implication. Apache
Hadoop and Apache Spark on the Amazon Web Services causes you
to research a lot of information. You can get ready information for the
exam objectives and showcasing insightfulness outstanding tasks at
hand utilizing Apache Hive and utilizing other applicable open source
plans.

AWS Interview Questions for Intermediate Level Jobs

Q23). What is multi-AZ RDS?

Multi-AZ (Availability Zone) RDS enables you to have a copy of

your generation database in another accessibility zone. Multi-AZ
(Availability Zone) database is utilized for calamity recuperation. You
will have a precise of your database. So when your essential database
goes down, your application will consequently failover to the backup
database.

Q24). What are security groups?

Security groups go about as a firewall that contains the traffic for at

least one examples. You can relate at least one security gatherings to
your occasions when you dispatch at that point. You can add
guidelines to every security bunch that enables traffic to and from its
related examples. You can alter the guidelines of a security bunch
whenever the new standards are naturally and promptly connected to
every one of the occasions that are related to the security group.

Q25). What Is Configuration Management?

Configuration management has been around for quite a while in web

tasks and frameworks organization. However, its social ubiquity has
been constrained. Most frameworks head design machines as
programming were created before adaptation control – that is
physically making changes on servers. Every server can look at that
point and for the most part, is somewhat extraordinary. Investigating,
however, is clear as you log in to the crate and work on it
legitimately. Setup the executives brings a huge robotization
instrument in the image, overseeing servers like strings of a manikin.
This powers institutionalization, best practices, and reproducibility as
all configs are formed and oversaw. It likewise presents another
method for working, which is the greatest obstacle to its reception.
Q26). Explain How You Would Simulate Perimeter Security
Using The Amazon Web Services Model?

Traditional perimeter security that we're now acquainted with

utilizing firewalls etc. isn't upheld in the Amazon EC2 world. AWS
underpins security gatherings. One can make a security bunch for a
hop box with ssh gets to – just port 22 open. From that point, a web
server gathering and database bunch are made. The web server bunch
permits 80 and 443 from the world, yet port 22 *only* from the hop
box gathering.

Further, the database bunch permits port 3306 from the web server
gathering and port 22 from the hop box gathering. Add any machines
to the web server gathering, and they would all be able to hit the
database. Nobody from the world can, and nobody can
straightforwardly ssh to any of your cases.

Q27). How to Use Amazon Sqs?

Amazon SQS (Simple Queue Service) is a message passing system

that is utilized for correspondence between various connectors that are
associated with one another. It likewise goes about as a communicator
between different segments of Amazon. It keeps all the distinctive
utilitarian segments together. This usefulness causes various parts to
be inexactly coupled, and give engineering that is more failure
resilient system.

Q28). What do you mean by classic link?

The Amazon virtual private cloud classic link will allow EC2
examples in the EC2 great stage. This happens so it can speak with
the occasions that are available in the virtual private cloud. The
correspondence happens with the assistance of private IP addresses.
To utilize a great connection, it is significant that you empower it to
for virtual private cloud in your record. At that point, you should
relate a security bunch with a case in the EC2 great. This security
bunch is from the VPC for which you empowered the great
connection in your record. Every single principle that is there for the
VPC security bunch is relevant for the correspondences between the
examples in EC2 exemplary and those cases in the VPC.

Q29). What is AWS Lambada?

Lambda is an event-driven stage. It is a process benefit that runs code

in light of occasions and consequently deals with the computer assets
required by that code

Q30). If my AWS Direct Connect flops, will I lose my connection?

If a gridlock AWS Direct connects has been arranged, in the occasion

of a let-down it will change over to the second one. It is optional to
permit Bidirectional Forwarding Detection (BFD) when arranging
your influences to safeguard faster recognition and failover. On the
other hand, if you have organized a backup IPsec VPN joining as an
alternative, all VPC traffic will failover to the backup VPN
connection routinely.

Q31). Can I connect my corporate data center to the Amazon

Cloud?

Yes, you can do this by setting up a VPN(Virtual Private Network)

association between your organization's system and your VPC
(Virtual Private Cloud), this will enable you to collaborate with your
EC2 occasions as though they were inside your current system.

Q32). Describe Amazon Machine Image, and what is the

connection between Instance and AMI?

Amazon Web Services offers numerous ways to contact Amazon

EC2, like the web-based border, AWS Command Line Interface CLI
as well as Amazon Tools for Windows Power Shell. Initially, you are
required to sign up for an AWS version, and you can contact Amazon
EC2. Amazon EC2 offers a Query API. These requirements are HTTP
or HTTPS requirements that practice the HTTP verbs GET or POST
and a Query constraint called Action.

Q33). What are two types of AMIs or Amazon Machine Images?

There are two kinds of AMIs or Amazon Machine Images that are
accessible:

 EBS based storage

 Instance store-backed AMI

Q34). Are you aware of the Security Group in Amazon EC2?

Explain a little bit about it.

Security groups in Amazon EC2 are one of the routes through which
the security of the cloud organize is ensured. They go about as a
firewall and are utilized for controlling both the inbound just as
outbound traffic at the dimension of the instance.

Q35). What are Amazon EBS-Optimized instances?

Amazon EBS streamlined occasions to guarantee that the Amazon

EC2 case is set up to exploit the I/O of the Amazon EBS Volume. An
Amazon EBS-improved occasion utilizes a streamlined setup stack
and gives the extra devoted ability to Amazon EBS I/When you select
Amazon EBS-upgraded for a case you pay an extra hourly charge for
that instance.

Q36). What Is Lambda@edge In Aws?

In AWS, we can utilize Lambda@Edge utility to take care of the issue

of low system idleness for end clients. In Lambda@Edge, there is no
compelling reason to the arrangement or oversee servers. We can
simply transfer our Node.js code to AWS Lambda and make works
that will be activated on CloudFront demands. At the point when a
solicitation for substance is gotten by CloudFront edge area, the
Lambda code is prepared to execute. This is a generally excellent
choice for scaling up the activities in CloudFront without overseeing
servers.

Q37). Which virtual network interface would you use to attach to

an instance in a VPC?

Elastic Network Interface

Q38). Explain what T2 instances is?

T2 instances are intended to give moderate gauge execution and the

capacity to blast to higher execution as required by the outstanding
task at hand.

Q39). What is the role of a Route Table in AWS?

Route Table is utilized to network the system pockets. By and a large

one-course table would be accessible in each subnet. Course table can
have any no. of records or data, subsequently appending different
subnets to a course table is additionally conceivable.

Q40). What is the use of AWS CloudTrail?

CloudTrail is intended for logging and following API calls. It is also

used to review all the S3 bucket accesses.

Q41). Are there any Bandwidth constraints for internet

gateways?

Ordinarily, an IG is horizontally called, and it is Redundant and

Highly Available. It isn’t having any type of Bandwidth constraints as
a rule.

Q42). Which instance will you use for deploying a 4-node Hadoop
cluster in AWS?

We can utilize a c4.8x large instance or i2. large for this, yet utilizing
a c4.8x will require a superior configuration on PC.

Q43). How can you bind a user session with the specific instance
in ELB (Elastic Load Balancer)?

This can be easily achieved by permitting Sticky Session.

Q44). What will happen if you erase a peering connection in your

side?

The peering connection accessible in the opposite side would likewise

get erased. There will be no more activity streaming.
Q45). What is a redshift?

Redshift is a major information distribution center item. It is quick

and incredible, completely overseen information distribution center
administration in the cloud.

Q46). What are the edge locations?

An edge location is where the substance will be stored. Along these

lines, when a client is attempting to getting to any substance, the
substance will consequently be looked in the edge location.

AWS Interview Questions and Answers for Advanced Workforce

Q47). What is a key pair, and what are its uses?

You utilize Key Pair to log in to your Instance in an anchored way.

You can make a key pair utilizing EC2 support. At the point when
your occurrences are spread crosswise over locales, you have to make
the key pair in every region.

Q48). Describe what S3 is?

S3 is known for Simple Storage Service. You can custom the S3

interface to supply and recover any quantity of data, at any time and
from any place on the web. For S3, the expense model is "pay as you
go."

Q49). Will you use encryption for S3?

It is smarter to consider encryption for delicate information on S3 as it

is a restrictive innovation.

Q50). How can you send a request to Amazon S3?

We can do that by utilizing the REST API or the AWS SDK wrapper
libraries which wrap the basic Amazon S3 REST API.

Q51). What are the parameters for S3 pricing?

The pricing model for S3 is as below-

  Storage used
 Number of requests you make
 Storage management
 Data transfer
 Transfer acceleration

Q52). What is the pre-requisite to work with Cross region

replication in S3?

You have to empower forming on both source container and goal to

work with cross-district replication. Additionally, both the source and
destination bucket ought to be in a different region.

Q53). Can S3 be cast-off with EC2 instances, in case of “Yes”

please specify How?

Yes, it can be cast-off for instances with root approaches backed by

native occurrence storage. By using Amazon S3, developers have
access to the similar extremely scalable, dependable, fast, low-priced
data storage substructure that Amazon uses to track its own
worldwide network of websites. To perform systems in the Amazon
EC2 atmosphere, developers use the tools providing to load their
Amazon Machine Images (AMIs) into Amazon S3 and to transfer
them between Amazon S3 and Amazon EC2. An additional use case
might be for websites hosted on EC2 to load their stationary content
from S3.

Q54). Where do you think an AMI fits, when you are designing an
architecture for a solution?

AMIs(Amazon Machine Images) resemble formats of virtual

machines, and an instance is derived from an AMI. AWS offers pre-
built AMIs which you can pick while you are propelling a case, some
AMIs are not free,like this can be purchased from the AWS
Marketplace. You can likewise make your own custom AMI which
would enable you to spare space on AWS. For instance, on the off
chance that you needn't bother with a lot of programming on your
establishment, you can modify your AMI to do that. This makes it
cost effective since you are evacuating the undesirable things.
Q55). What is the purpose of Subnets?

When a system has a greater number of hosts, dealing with these hosts
can be very tasking under an extensive solitary system. Subsequently,
we partition this huge system into effortless small sub-systems
(subnets) with the goal that the tasks of management under each
subnet winds up being less demanding.

Q56). What are the roles?

Roles are utilized to give authorizations to elements that you trust

inside your AWS account. Roles are clients in another record. Roles
are like clients; however, with Roles you don't have to make any
username and password to work with the assets.

Q57). Which instance has an hourly rate with no long-term

commitment?

On-Demand Instance has an hourly rate with no long-term

responsibility because the estimating of this element fluctuates with
the valuing model, for example just as a zone.

Q58). Which operation retrieves the newest version of the object?

GET operation helps you to retrieve the newest version of the object.

Q59). Does Clustering need to be turned on to use GSLB?

Yes, you should turn on grouping and furthermore design it to utilize

Global Server Load Balancing. Every single intermediary that goes in
close vicinity to the site or group must gain a similar design. In this
way, every bit of hardware can go about as a DNS server if that turns
into the master for the site. Every one of the destinations will have a
special SLB/GSLB/Cluster design, and you should utilize the GSLB
site flood order with the goal that the remote GSLB site can be added
to the nearby machine.

Q60). Suggest the possible connection issues that you may

encounter when connecting to an EC2 instance?
  Unprotected private key file
 Server refused key
 Connection timed out
 No supported authentication method available
 Host key not found, permission denied.
 User key not recognized by the server, permission denied.

Q61). Are you allowed to run multiple websites on an EC2 server

while using a single IP address?

Yes, but to do that more than one elastic IP is required.

Q62). Explain what happens when you reboot a running EC2

instance?

Rebooting a running EC2 instance is just similar to rebooting a PC.

You will not return to the image’s original state, but, the contents of
your hard disk are going to remain the same.

Q63). What is a snowball?

Snowball is an information transport arrangement that utilized source

machines to exchange a lot of information into and out of AWS.
Utilizing snowball, you can move colossal measure of information
starting with one spot then onto the next, which lessens your system
costs, long exchange times and furthermore gives better security.

Q64). What is the process to speed up data transfer in Snowball?

The data transfer can speed up in the following way:

 By playing out numerous duplicate tasks at one time, for

example, on the off chance that the workstation is sufficiently
incredible, you can start various cp directions each from various
terminals, on a similar Snowball gadget.
 Copying from different workstations to a similar snowball.
 Transferring enormous records or by making a bunch of little
document, this will decrease the encryption overhead.
  Eliminating pointless snaps, for example, make a setup where
the source machine(s) and the snowball are the main machines
dynamic on the switch being utilized, this can enormously
improve execution.

Q65). Mention the work of an Amazon VPC router?

Empowering of Amazon EC2 cases that is inside the subnet so it can

speak with Amazon EC2 occurrences on different subnets that are in
the equivalent VPC is finished by an Amazon VPC switch. It likewise
helps in empowering Internet portals, subnets, and virtual private
passages so it can speak with one another. You won't get between
utilization information from the switch. Be that as it may, you are
qualified to get arrange utilization measurements from the cases
which are utilizing Amazon cloud watch.

Q66). Mention the process in which a hardware VPN connection

turns work with Amazon VPC?

The virtual private cloud is associated with the server farm with the
assistance of an equipment VPN association. Web convention security
VPN associations are upheld by Amazon. To assistant the uprightness
and privacy of any information which is in travel, this information is
exchanged between the VPN and the server farms are directed over a
scrambled VPN association. To set up an equipment VPN association,
you needn't bother with the accessibility of an Internet passage.

Q67). Explain the AWS Certificate Manager?

AWS Certificate Manager, which can be abbreviated as ACM deals

with the unpredictability of broadening, giving and controlling the
endorsements, which are conceded over ACM to the client's AWS
based forms and websites.

Individuals deal with ACM to keep up and appeal the endorsements

and practice other Amazon web administrations for the site's
motivation. ACM authentications can't be dealt with outside of AWS.

Q68). What are the important features of Amazon cloud search?

Important features of the Amazon cloud are:

 Boolean searches
 Prefix Searches
 Range searches
 Entire text search
 AutoComplete advice

Q69). What are key-pairs in AWS?

Key – pairs are secure login data for your virtual machines. To
associate with the occurrences, you can utilize key-sets which contain
a public-key and private-key.

Q70). How to Disable Password-based Logins for Root in Amazon

Ec2 Instance?

Utilizing a fixed root secret key for an open AMI is a security chance
that can rapidly become known. Not with standing depending on
clients to change the password after the first login opens a lucky little
opening for potential maltreatment.

1. What is AWS?
Answer : AWS full form (amazon web services). AWS is a secure
cloud services platform offering compute, database, storage, content
delivery and many other functionality to help business grow up.
AWS is fully on-demand.
AWS is Flexibility, availability and Scalability.

2. What are the types of load balancer in EC2?

Answer :- There are 3 types of load balancers in ec2
1. Application Load Balancer.
2. Network Load Balancer.
3. Classic Load Balancer.

3. What is the maximum size of messagesinSQS ?

Answer :- Maximum size of messages in SQS is 256KB.
4. What is subnet mask ?
Answer :- A large section of IP Address. It’s dividing a single
network into two or more networks (small network) is called
subnetting.

5. How many deployment models using in Cloud?

Answer :- There are 4 type of modules using in cloud.
1. Private Cloud
2. Public Cloud
3. Hybrid cloud
4. Community cloud 4

6. What are the advantage of Cloud Computing(AWS) ?

Answer: There are fewadvantage of cloud computing.
1. Pay per use
2. Scalability
3. Elasticity
4. High Availability
5. Increase speed and Agility
6. Go global in Minutes.

7. What are the type of cloud computing module ?

Answer:- 1. Infrastructure as a Service (IaaS
2. Platform as a Service (PaaS)
3. Software as a Service (SaaS)

8. What is EC2? What are the benefits in EC2?

Answer :- EC2 full form is Elastic compute cloud. ec2 is a web
service that provides resizable, secure compute capacity in the cloud.
EC2 provides scalable computing capacity in the Cloud. use the
instance (PPU) pay per use basis.
Benefits:
1. Easier and Faster
2. Elastic and Scalable
3. High Availability
4. Cost-Effective

How to increase aws instance disk space

9. What is Elastic Beanstalk?
Answer :- Elastic Beanstalk is service of AWS . EB is the simplest
and fastest way to get application up and running on amazon web
services. Developers can easily upload code and the service
automatically handle by default all the details such as resources
provisioning, load balancer, Auto scaling and Monitoring.

10. Whatare the advantage of EFS?

Answer: Advantage of Encrypting File System.

1. Fully managed service

2. Secure
3. File system grows and shrinks automatically to petabytes
4. Can support thousands of concurrent connections
5. Throughput scales automatically to ensure consistent low
latency

10. What is full form of EBS?

Answer :- EBS full form is Elastic Block Store.

11. What are the storage class available in Amazon s3 ?

Answer :- four type of storage class available in s3
1. Amazon S3 Standard
2. Amazon S3 Standard-Infrequent Access
3. Amazon S3 Reduced Redundancy Storage
4. Amazon Glacier

12. What type of Authentication in AWS?

Answer :- according to hostingride three authentication.

1. Username / Password
2. Access Key (.pem)
3. Access Key / Session Token.

13. What are the various layers of the cloud architecture ?

Answer :- There are five type of layers.

SC - (Storage Controller)
CLC- (Cloud Controller)
 NC- (Node Controller)
CC- (Cluster Controller)
Walrus.

14. What is s3 ?
Answer :- S3 full form (Simple Storage Service). S3 used interface to
store and retrieve amount of data, at any time and from anywhere on
the web.

15. What is SES, SQS and SNS?

Answer :- SES - Simple Email Service.
SQS - Simple Queue Service.
SNS - Simple notification service.

16. What is IaaS ?

Answer :- IaaS cloud services using cloud computing, everyone have
different work .
IaaS is a cloud service that runs services on “pay/for/what/we/use”
basis
IaaS workers include Amazon Web Services andazure services also
Google Compute Engine.

17. What is PaaS or SaaS ?

Answer :- PaaS runs cloud platforms and runtime environments to
develop, test or manage softwares.
In SaaS cloud workers host and manage the softwares application on a
pay-as-we-go pricing models.

18. How to write Cronjob in AWS ?

Answer :- Click Here to more about How to set Cronjob in aws.

19. How many bucket by default create in aws ?

Answer :- 100 buckets by default can be created.

2) Mention what the key components of AWS are?

The key components of AWS are

 Route 53:A DNS web service

 Simple E-mail Service:It allows sending e-mail using
RESTFUL API call or via regular SMTP
 Identity and Access Management:It provides enhanced
security and identity management for your AWS account
 Simple Storage Device or (S3):It is a storage device and the
most widely used AWS service
 Elastic Compute Cloud (EC2): It provides on-demand
computing resources for hosting applications. It is handy in case
of unpredictable workloads
 Elastic Block Store (EBS):It offers persistent storage volumes
that attach to EC2 to allow you to persist data past the lifespan
of a single Amazon EC2 instance
 CloudWatch: To monitor AWS resources, It allows
administrators to view and collect key Also, one can set a
notification alarm in case of trouble.

3) Explain what S3 is?

S3 stands for Simple Storage Service. You can use S3 interface to

store and retrieve any amount of data, at any time and from anywhere
on the web. For S3, the payment model is “pay as you go.”

4) What is AMI?

AMI stands for Amazon Machine Image. It’s a template that provides
the information (an operating system, an application server, and
applications) required to launch an instance, which is a copy of the
AMI running as a virtual server in the cloud. You can launch
instances from as many different AMIs as you need.

5) Mention what the relationship between an instance and AMI

is?

From a single AMI, you can launch multiple types of instances. An

instance type defines the hardware of the host computer used for your
instance. Each instance type provides different computer and memory
capabilities. Once you launch an instance, it looks like a traditional
host, and we can interact with it as we would with any computer.

6) What does an AMI include?

An AMI includes the following things

 A template for the root volume for the instance

 Launch permissions decide which AWS accounts can avail the
AMI to launch instances
 A block device mapping that determines the volumes to attach
to the instance when it is launched

7) How can you send a request to Amazon S3?

Amazon S3 is a REST service, and you can send a request by using

the REST API or the AWS SDK wrapper libraries that wrap the
underlying Amazon S3 REST API.

8) Mention what the difference between Amazon S3 and EC2 is?

The difference between EC2 and Amazon S3 is that

EC2 S3
 It is a data storage system
 It is a cloud web service used for
where any amount of data can
hosting your application
be stored

 It is like a huge computer

machine which can run either  It has a REST interface and
Linux or Windows and can uses secure HMAC-SHA1
handle application like PHP, authentication keys
Python, Apache or any databases

9) How many buckets can you create in AWS by default?

By default, you can create up to 100 buckets in each of your AWS

accounts.

10) Explain can you vertically scale an Amazon instance? How?

Yes, you can vertically scale on Amazon instance. For that

 Spin up a new larger instance than the one you are currently
running
 Pause that instance and detach the root webs volume from the
server and discard
 Then stop your live instance and detach its root volume
 Note the unique device ID and attach that root volume to your
new server
 And start it again

11) Explain what T2 instances is?

T2 instances are designed to provide moderate baseline performance

and the capability to burst to higher performance as required by the
workload.

12) In VPC with private and public subnets, database servers

should ideally be launched into which subnet?

With private and public subnets in VPC, database servers should

ideally launch into private subnets.

13) Mention what the security best practices for Amazon EC2
are?

For secure Amazon EC2 best practices, follow the following steps

 Use AWS identity and access management to control access to

your AWS resources
 Restrict access by allowing only trusted hosts or networks to
access ports on your instance
 Review the rules in your security groups regularly
 Only open up permissions that you require
 Disable password-based login, for example, launched from your
AMI

14) Explain how the buffer is used in Amazon web services?

The buffer is used to make the system more robust to manage traffic
or load by synchronizing different component. Usually, components
receive and process the requests in an unbalanced way. With the help
of buffer, the components will be balanced and will work at the same
speed to provide faster services.

15) While connecting to your instance what are the possible

connection issues one might face?

The possible connection errors one might encounter while connecting

instances are

 Connection timed out

 User key not recognized by the server
 Host key not found, permission denied
 An unprotected private key file
 Server refused our key or No supported authentication method
available
 Error using MindTerm on Safari Browser
 Error using Mac OS X RDP Client

16) What are key-pairs in AWS?

Key-pairs are secure login information for your virtual machines. To

connect to the instances, you can use key-pairs which contain a
public-key and private-key.

17) What are the different types of instances?

Following are the types of instances:

 General purpose
 Computer Optimized
 Memory Optimized
 Storage Optimized
 Accelerated Computing

18) Is the property of broadcast or multicast supported by

Amazon VPC?
No, currently Amazon VPI not provide support for broadcast or
multicast.

19) How many Elastic IPs is allows you to create by AWS?

5 VPC Elastic IP addresses are allowed for each AWS account.

20) Explain default storage class in S3

The default storage class is a Standard frequently accessed.

21) What are the roles?

Roles are used to providing permissions to entities which you can

trust within your AWS account. Roles are very similar to users.
However, with roles, you do not require to create any username and
password to work with the resources.

22) What are the edge locations?

Edge location is the area where the contents will be cached. So, when
a user is trying to accessing any content, the content will
automatically be searched in the edge location.

23) What is VPC?

VPC stands for Virtual Private Cloud. It allows you to customize your
networking configuration. It is a network which is logically isolated
from another network in the cloud. It allows you to have your IP
address range, internet gateways, subnet and security groups.

24) Explain snowball

Snowball is a data transport option. It used source appliances to a

large amount of data into and out of AWS. With the help of snowball,
you can transfer a massive amount of data from one place to another.
It helps you to reduce networking costs.

25) What is a redshift?

Redshift is a big data warehouse product. It is fast and powerful, fully
managed data warehouse service in the cloud.

26) What are the advantages of auto-scaling?

Following are the advantages of autoscaling

 Offers fault tolerance

 Better availability
 Better cost management

27) What is meant by subnet?

A large section of IP Address divided into chunks is known as

subnets.

28) Can you establish a Peering connection to a VPC in a

different region?

No, It’s only possible between VPCs in the same region.

29) What is SQL?

Simple Queues Services also known as SQL. It is distributed queuing

service which acts as a mediator for two controllers.

30) How many subnets can you have per VPC?

You can have 200 subnets per VPC.

31) DNS and Load Balancer service comes under which type of
cloud service?

DNS and Load Balancer and DNS services come under IAAS-storage
cloud service.

32) What is the role of AWS CloudTrail?

CloudTrail is a specially designed tool for logging and tracking API

calls. It helps to audit all S3 bucket accesses.
33) When EC2 officially launched?

EC2 officially launched in the year 2006.

34) What is SimpleDB?

SimpleDB is a data repository of structure record which encourages

data doubts and indexing both S3 and EC2are called SimpleDB.

35) Explain Amazon ElasticCache

Amazon Elasticcache is a web service which makes it easy to deploy,

scale and store data in the cloud.

36) What is AWS Lambda?

Lambda is an Amazon compute service which allows you to run code

in the AWS Cloud without managing servers.

37) Name the types of AMI provided by AWS

The types of AMI provided by AWS are:

1. Instance store backed

2. EBS backed

38) Name the AWS service exists only to redundantly cache data
and images?

AWS Edge locations are service which redundantly cache data and
images.

39) Explain Geo Restriction in CloudFront

A Geo-restriction feature helps you to prevent users of specific

geographic locations from accessing content which you’re distributing
through a CloudFront web distribution.

40) What is Amazon EMR?

EMR is a survived cluster stage which helps you to interpret the
working of data structures before the intimation. Apache Hadoop and
Apache Spark on the Amazon Web Services helps you to investigate a
large amount of data. You can prepare data for the analytics goals and
marketing intellect workloads using Apache Hive and using other
relevant open source designs.

41) What is boot time taken for the instance stored backed AMI?

The boot time for an Amazon instance store-backend AMI is less than
5 minutes.

42) Do you need an internet gateway to use peering connections?

Yes, the Internet gateway is needed to use VPC (virtual private cloud
peering) connections.

43) How to connect EBS volume to multiple instances?

We can’t be able to connect EBS volume to multiple

instances. Although, you can connect various EBS Volumes to a
single instance.

44) List different types of cloud services

Various types of cloud services are:

 Software as a Service (SaaS),

 Data as a Service (DaaS)
 Platform as a Service (PaaS)
 Infrastructure as a Service (IaaS).

45) State the difference between An Instance and AMI

AMI is a template consisting software configuration part. For

example Operating systems, applications, application server if you
start an instance, a duplicate of the AMI in a row as an attendant in
the cloud.
46) What are the different types of Load Balancer in AWS
services?

Two types of Load balancer are:

1. Application Load Balancer

2. Classic Load Balancer

47) In which situation you will select provisioned IOPS over

standard RDS storage?

You should select provisioned IOPS storage over standard RDS

storage if you want to perform batch-related workloads.

48) What are the important features of Amazon cloud search?

Important features of the Amazon cloud are:

 Boolean searches
 Prefix Searches
 Range searches
 Entire text search
 AutoComplete advice

49) Can vertically scaling is allows in Amazon Instance?

Yes, you can vertically estimate one Amazon instance.

50) What is the use of lifecycle hooks in Autoscaling?

Lifecycle hooks are used for autoscaling to put an additional wait time
to a scale in or scale out event.

51) What are various layers of Cloud Architecture explained in

AWS training?

Different layers of cloud architecture are:

 Cloud controller
 Cluster controller
 Storage Controller
  Node Controller

52) What are the storage class available in Amazon s3?

Storage classes available with Amazon s3 are:

 Amazon S3 standard
 Amazon S3 standard-infrequent Access
 Amazon S3 Reduced Redundancy Storage
 Amazon Glacier

53) Name some of the DB engines which can be used in AWS RDS

1. MS-SQL DB
2. MariaDB
3. MYSQL DB
4. OracleDB
5. PostgreDB