1) What is AWS?

Answer: AWS stands for Amazon Web Services. AWS is a platform that provides on-demand
resources for hosting web services, storage, networking, databases and other resources over
the internet with a pay-as-you-go pricing.

2) What are the components of AWS?

Answer:EC2 Elastic Compute Cloud, S3 Simple Storage Service, store, Cloudwatch, Key-
Paris are few of the components of AWS.

3) What are Key Pairs?

Answer: Key-pairs are secure login information for your instances/virtual machines. To
connect to the instances we use key-pairs that contain a public-key and private-key.

4) What is S3?
Answer: S3 stands for Simple Storage Service. It is a storage service that provides an
interface that you can use to store any amount of data, at any time, from anywhere in the
world. With S3 you pay only for what you use and the payment model is pay-as-you-go.

5) What are the pricing models for EC2instances?

Answer: The different pricing models for EC2 instances are as below,
 On-demand
 Reserved
 Spot
 Scheduled
 Dedicated

6) What are the types of volumes for EC2 instances?

Answer: There are two types of Volumes,
 Instance store volumes
 Elastic Block Stores (EBS)

7) What are EBS volumes?

Answer: EBS stands for Elastic Block Stores. They are persistent volumes that you can attach
to the instances. With EBS volumes, your data will be preserved even when you stop your
instances, unlike your instance store volumes where the data is deleted when you stop the
instances.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

1
8) What are the types of volumes in EBS?
Answer: Following are the types of volumes in EBS,
 General Purpose
 Provisioned IOPS
 Magnetic
 Cold HDD
 Throughput optimized

9) What are the different types of instances?

Answer: Following are the types of instances,
 General Purpose
 Computer Optimized
 Storage Optimized
 Memory Optimized
 Accelerated Computing

10) What is an auto-scaling and what are the components?

Answer: Auto scaling allows you to automatically scale-up and scale-down the number of
instances depending on the CPU utilization or memory utilization. There are 2 components in
Auto scaling, they are Auto-scaling groups and Launch Configuration.

11) What are reserved instances?

Answer: Reserved instances are the instance that you can reserve a fixed capacity of EC2
instances. In reserved instances you will have to get into a contract of 1 year or 3 years.

12) What is an AMI?

Answer: AMI stands for Amazon Machine Image. AMI is a template that contains the software
configurations, launch permission and a block device mapping that specifies the volume to
attach to the instance when it is launched.

13) What is an EIP?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

2
Answer: EIP stands for Elastic IP address. It is designed for dynamic cloud computing. When
you want to have a static IP address for your instances when you stop and restart your
instances, you will be using EIP address.

14) What is Cloudwatch?

Answer: Cloudwatch is a monitoring tool that you can use to monitor your various AWS
resources. Like health check, network, Application, etc.

15) What are the types in cloudwatch?

Answer: There are 2 types in cloudwatch. Basic monitoring and detailed monitoring. Basic
monitoring is free and detailed monitoring is chargeable.

16) What are the cloudwatch metrics that are available for EC2 instances?
Answer: Diskreads, Diskwrites, CPU utilization, networkpacketsIn, networkpacketsOut,
networkIn, networkOut, CPUCreditUsage, CPUCreditBalance.

17) What is the minimum and maximum size of individual objects that you
can store in S3?
Answer: The minimum size of individual objects that you can store in S3 is 0 bytes and the
maximum bytes that you can store for individual objects is 5TB.

18) What are the different storage classes in S3?

Answer: Following are the types of storage classes in S3,
 Standard frequently accessed
 Standard infrequently accessed
 One-zone infrequently accessed.
 Glacier
 RRS reduced redundancy storage

19) What is the default storage class in S3?

Answer: The default storage class in S3 in Standard frequently accessed.
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

3
20) What is glacier?
Answer: Glacier is the back up or archival tool that you use to back up your data in S3.

21) How can you secure the access to your S3 bucket?

Answer: There are two ways that you can control the access to your S3 buckets,
 ACL Access Control List
 Bucket polices

22) How can you encrypt data in S3?

Answer: You can encrypt the data by using the below methods,
 Server Side Encryption S3 (AES 256 encryption)
 Server Side Encryption KMS (Key management Service)
 Server Side Encryption C (Client Side)

23) What are the parameters for S3 pricing?

Answer: The pricing model for S3 is as below,
 Storage used
 Number of requests you make
 Storage management
 Data transfer
 Transfer acceleration
24) What is the pre-requisite to work with Cross region replication in S3?
Answer: You need to enable versioning on both source bucket and destination to work with
cross region replication. Also both the source and destination bucket should be in different
region.

25) What are roles?

Answer: Roles are used to provide permissions to entities that you trust within your AWS

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

4
account. Roles are users in another account. Roles are similar to users but with roles you do
not need to create any username and password to work with the resources.

26) What are policies and what are the types of policies?
Answer: Policies are permissions that you can attach to the users that you create. These
policies will contain that access that you have provided to the users that you have created.
There are two types of policies.
 Managed policies
 Inline policies

27) What is cloud front?

Answer: Cloud front is an AWS web service that provided businesses and application
developers an easy and efficient way to distribute their content with low latency and high
data transfer speeds. Cloud front is content delivery network of AWS.

28) What are edge locations?

Answer: Edge location is the place where the contents will be cached. When a user tries to
access some content, the content will be searched in the edge location. If it is not available
then the content will be made available from the origin location and a copy will be stored in
the edge location.

29) What is the maximum individual archive that you can store in glacier?
Answer: You can store a maximum individual archive of up to 40 TB.

30) What is VPC?

Answer: VPC stands for Virtual Private Cloud. VPC allows you to easily customize your
networking configuration. VPC is a network that is logically isolated from other network in the
cloud. It allows you to have your own IP address range, subnets, internet gateways, NAT
gateways and security groups.

31) What is VPC peering connection?

Answer: VPC peering connection allows you to connect 1 VPC with another VPC. Instances in

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

5
these VPC behave as if they are in the same network.

32) What are NAT gateways?

Answer: NAT stands for Network Address Translation. NAT gateways enables instances in a
private subnet to connect to the internet but prevent the internet from initiating a connection
with those instances.

33) How can you control the security to your VPC?

Answer: You can use security groups and NACL (Network Access ,,,,, List) to control the
security to your VPC.

34) What are the different types of storage gateway?

Answer: Following are the types of storage gateway.
 File gateway
 Volume gateway
 Tape gateway

35) What is a snowball?

Answer: Snowball is a data transport solution that used source appliances to transfer large
amounts of data into and out of AWS. Using snowball, you can move huge amount of data
from one place to another which reduces your network costs, long transfer times and also
provides better security.

36) What are the database types in RDS?

Answer: Following are the types of databases in RDS,
 Aurora
 Oracle
 MYSQL server
 Postgresql
 MariaDB
 SQL server

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

6
37) What is a redshift?
Answer: Amazon redshift is a data warehouse product. It is a fast and powerful, fully
managed, petabyte scale data warehouse service in the cloud.
38) What is SNS?
Answer: SNS stands for Simple Notification Service. SNS is a web service that makes it easy
to notifications from the cloud. You can set up SNS to receive email notification or message
notification.

39) What are the types of routing polices in route53?

Answer: Following are the types of routing policies in route53,
 Simple routing
 Latency routing
 Failover routing
 Geolocation routing
 Weighted routing
 Multivalue answer

40) What is the maximum size of messages in SQS?

Answer: The maximum size of messages in SQS is 256 KB.

41) What are the types of queues in SQS?

Answer: There are 2 types of queues in SQS.
 Standard queue
 FIFO (First In First Out)

42) What is multi-AZ RDS?

Answer: Multi-AZ (Availability Zone) RDS allows you to have a replica of your production
database in another availability zone. Multi-AZ (Availability Zone) database is used for
disaster recovery. You will have an exact copy of your database. So when your primary
database goes down, your application will automatically failover to the standby database.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

7
43) What are the types of backups in RDS database?
Answer: There are 2 types of backups in RDS database.
 Automated backups
 Manual backups which are known as snapshots.

44) What is the difference between security groups and network access
control list?
Answer:
Security Groups Network access control list

Can control the access at the instance level Can control access at the subnet level
Can add rules for “allow” only Can add rules for both “allow” and “deny”
Rules are processed in order number when
Evaluates all rules before allowing the traffic
allowing traffic
Can assign unlimited number of security
Can assign upto 5 security groups
groups
Statefull filtering Stateless filtering

45) What are the types of load balancers in EC2?

Answer: There are 3 types of load balancers,
 Application load balancer
 Network load balancer
 Gateway load balancer

46) What is and ELB?

Answer: ELB stands for Elastic Load balancing. ELB automatically distributes the incoming
application traffic or network traffic across multiple targets like EC2, containers, IP
addresses.

47) What are the two types of access that you can provide when you are
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

8
creating users?
Answer: Following are the two types of access that you can create.
 Programmatic access
 Console access

48) What are the benefits of auto scaling?

Answer: Following are the benefits of auto scaling
 Better fault tolerance
 Better availability
 Better cost management

49) What are security groups?

Answer: Security groups acts as a firewall that contains the traffic for one or more instances.
You can associate one or more security groups to your instances when you launch then. You
can add rules to each security group that allow traffic to and from its associated instances.
You can modify the rules of a security group at any time, the new rules are automatically and
immediately applied to all the instances that are associated with the security group

50) What are shared AMI s?

Answer: Shared AMI s are the AMI that are created by other developed to use.

51)What is the difference between the classic load balancer and application
load balancer?
Answer: Dynamic port mapping, multiple port multiple listeners is used in Application Load
Balancer, One port one listener is achieved via Classic Load Balancer

52) By default how many Ip address does aws reserve in a subnet?

Answer: 5

53) What is meant by subnet?

Answer: A large section of IP Address divided in to chunks is known as subnets
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

9
54) How can you convert a public subnet to private subnet?
Answer: Remove IGW & add NAT Gateway, Associate subnet in Private route table

55) Is it possible to reduce a EBS volume?

Answer: no it s not possible, we can increase it but not reduce it

56) What is the use of elastic ip are they charged by AWS?

Answer: These are ipv4 address which are used to connect the instance from internet, they
are charged if the instances are not attached to it

57) One of my s3 is bucket is deleted but i need to restore is there any

possible way?
Answer: If versioning is enabled we can easily restore them

58) When I try to launch an ec2 instance i am getting Service limit exceed,
how to fix the issue?
Answer: By default AWS offer service limit of 20 running instances per region, to fix the issue
we need to contact AWS support to increase the limit based on the requirement

59) I need to modify the ebs volumes in Linux and windows is it possible?
Answer: yes its possible from console use modify volumes in section give the size u need
then for windows go to disk management for Linux mount it to achieve the modification

60) Is it possible to stop a RDS instance, how can I do that?

Answer: Yes it s possible to stop rds. Instance which are non-prod

61) What is meant by parameter groups in rds. And what is the use of it?
Answer: Since RDS is a managed service AWS offers a wide set of parameter in RDS as
parameter group which is modified as per requirement

62) What is the use of tags and how they are useful?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

10
Answer: Tags are used for identification and grouping AWS Resources

63) I am viewing an AWS Console but unable to launch the instance, I

receive an IAM Error how can I rectify it?
Answer: As AWS user I don t have access to use it, I need to have

64) I don t want my AWS Account id to be exposed to

Answer: In IAM console there is option as sign in url where I can rename my own account
name with AWS account

65) By default how many Elastic Ip address does AWS Offer?

Answer: 5 elastic ip per region

66) You are enabled sticky session with ELB. What does it do with your
instance?
Answer: Binds the user session with a specific instance

67) Which type of load balancer makes routing decisions at either the
transport layer or the Application layer and supports either EC2 or VPC?
Answer: Elastic Load Balancer

68) Which is virtual network interface that you can attach to an instance in a
VPC?
Answer: Elastic Network Interface

69) You have launched a Linux instance in AWS EC2. While configuring
security group, you have selected SSH, HTTP, HTTPS protocol. Why do we
need to select SSH?
Answer: To verify that there is a rule that allows traffic from EC2 Instance to your computer

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

11
70) You have chosen a windows instance with Classic and you want to make
some change to the Security group. How will these changes be effective?
Answer: Changes are automatically applied to windows instances

71) Load Balancer and DNS service comes under which type of cloud
service?
Answer: IAAS-Storage

72) You have an EC2 instance that has an unencrypted volume. You want to
create another Encrypted volume from this unencrypted volume. Which of
the following steps can achieve this?
Answer: Create a snapshot of the unencrypted volume (applying encryption parameters),
copy the. Snapshot and create a volume from the copied snapshot

73) Where does the user specify the maximum number of instances with the
auto scaling Commands?
Answer: Auto scaling Launch Config

74) Which are the types of AMI provided by AWS?

Answer: Instance Store backed, EBS Backed

75) After configuring ELB, you need to ensure that the user requests are
always attached to a Single instance. What setting can you use?
Answer: Sticky session

76) When do I prefer to Provisioned IOPS over the Standard RDS storage?
Answer: If you have do batch-oriented is workloads.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

12
77) If I am running on my DB Instance a Multi-AZ deployments, can I use to
the stand by the DB Instance for read or write a operation along with the
primary DB instance?
Answer: Primary db instance does not work.

78) Which the AWS services will you use to the collect and the process
e-commerce data for the near by real-time analysis?
Answer: Good of Amazon DynamoDB.

79) A company is deploying the new two-tier an web application in AWS. The
company has to limited on staff and the requires high availability, and the
application requires to complex queries and table joins. Which configuration
provides to the solution for company s requirements?
Answer: An web application provide on Amazon DynamoDB solution.

80) Which statement use to cases is suitable for Amazon DynamoDB?

Answer: The storing metadata for the Amazon S3 objects & The Running of relational joins
and complex an updates.

81) Your application has to the retrieve on data from every 5 minutes and
then data is stored in the DynamoDB, later every day at the particular time
the data is an extracted into S3 on a per user basis and then your
application is later on used to visualize the data to user. You are the asked to
the optimize the architecture of the backend system can to lower cost, what
would you recommend do?
Answer: Introduce Amazon Elastic ache to the cache reads from the Amazon DynamoDB
table and to reduce the provisioned read throughput.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

13
82) You are running to website on EC2 instances can deployed across
multiple Availability Zones with an Multi-AZ RDS MySQL Extra Large DB
Instance etc. Then site performs a high number of the small reads and the
write per second and relies on the eventual consistency model. After the
comprehensive tests you discover to that there is read contention on RDS
MySQL. Which is the best approaches to the meet these requirements?
Answer:The Deploy Elasti Cache in-memory cache is running in each availability zone and
Then Increase the RDS MySQL Instance size and the Implement provisioned IOPS.

83) An start-up is running to a pilot deployment of around 100 sensors to the

measure street noise and The air quality is urban areas for the 3 months. It
was noted that every month to around the 4GB of sensor data are generated.
The company uses to a load balanced take auto scaled layer of the EC2
instances and a RDS database with a 500 GB standard storage. The pilot
was success and now they want to the deploy take at least 100K sensors.
Let which to need the supported by backend. You need to the stored data for
at least 2 years to analyze it. Which setup of following would you be prefer?
Answer: The Replace the RDS instance with a 6 node Redshift cluster with take 96TB of
storage.

84) Let to Suppose you have an application where do you have to render
images and also do some of general computing. Which service will be best
fit your need?
Answer: Used on Application Load Balancer.

85) How will change the instance give type for the instances, which are the
running in your applications tier and Then using Auto Scaling. Where will
you change it from areas?
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

14
Answer: Changed to Auto Scaling launch configuration areas.

86) You have a content management system running on the Amazon EC2
instance that is the approaching 100% CPU of utilization. Which option will
be reduce load on the Amazon EC2 instance?
Answer: Let Create a load balancer, and Give register the Amazon EC2 instance with it.

87) What does the Connection of draining do?

Answer: The re-routes traffic from the instances which are to be updated (or) failed an health
to check.

88) When the instance is an unhealthy, it is do terminated and replaced with

an new ones, which of the services does that?
Answer: The service makes a fault tolerance.

89) What are the life cycle to hooks used for the Auto Scaling?
Answer: They are used to the put an additional taken wait time to the scale in or scale out
events.

90) An user has to setup an Auto Scaling group. Due to some issue the
group has to fail for launch a single instance for the more than 24 hours.
What will be happen to the Auto Scaling in the condition?
Answer: The auto Scaling will be suspend to the scaling process.

91) You have an the EC2 Security Group with a several running to EC2
instances. You changed to the Security of Group rules to allow the inbound
traffic on a new port and protocol, and then they launched a several new
instances in the same of Security Group. Such the new rules apply?
Answer: The immediately to all the instances in security groups.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

15
92) To create a mirror makes an image of your environment in another region
for the disaster recoveries, which of the following AWS is resources do not
need to be recreated in second region?
Answer: May be the selected on Route 53 Record Sets.

93) An customers wants to the captures all client connections to get

information from his load balancers at an interval of 5 minutes only, which
cal select option should he choose for his application?
Answer: The condition should be Enable to AWS CloudTrail for the loadbalancers.

94) Which of the services to you would not use to deploy an app?
Answer: Lambda app not used on deploy.

95) How does the Elastic Beanstalk can apply to updates?

Answer: By a duplicate ready with a updates prepare before swapping.

96) An created a key in the Oregon region to encrypt of my data in North

Virginia region for security purposes. I added to two users to the key and the
external AWS accounts. I wanted to encrypt an object in S3, so when I was
tried, then key that I just created is not listed. What could be reason &
solution?
Answer: The Key should be working in the same region.

97) As a company needs to monitor a read and write IOPS for the AWS
MySQL RDS instances and then send real-time alerts to the operations of
team. Which AWS services to can accomplish this?
Answer: The monitoring on Amazon Cloud Watch

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

16
98) The organization that is currently using the consolidated billing has to
recently acquired to another company that already has a number of the AWS
accounts. How could an Administrator to ensure that all the AWS accounts,
from the both existing company and then acquired company, is billed to the
single account?
Answer: All
Invites take acquired the company s AWS account to join existing by using AWS
Organizations.

99) The user has created an application, which will be hosted on the EC2.
The application makes calls to the Dynamo DB to fetch on certain data. The
application using the DynamoDB SDK to connect with the EC2 instance.
Which of respect to best practice for the security in this scenario?
Answer: The user should be attaching IAM roles with the DynamoDB access to EC2 instance.

100) You have an application are running on EC2 Instance, which will allow
users to download the files from a private S3 bucket using the pre-assigned
URL. Before generating to URL the Q101) application should be verify the
existence of file in S3. How do the application use the AWS credentials to
access S3 bucket securely?
Answer: An Create an IAM role for the EC2 that allows list access to objects in S3 buckets.
Launch an instance with this role, and retrieve an role s credentials from

101) You use the Amazon CloudWatch as your primary monitoring system
for web application. After a recent to software deployment, your users are to
getting Intermittent the 500 Internal Server to the Errors, when you using
web application. You want to create the CloudWatch alarm, and notify the

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

17
on-call engineer let when these occur. How can you accomplish the using
the AWS services?
Answer: An Create a Cloud Watch get Logs to group and A define metric filters that assure
capture 500 Internal Servers should be Errors. Set a CloudWatch alarm on the metric and By
Use of Amazon Simple to create a Notification Service to notify an the on-call engineers when
prepare Cloud Watch alarm is triggered.

102) You are designing a multi-platform of web application for the AWS. The
application will run on the EC2 instances and Till will be accessed from PCs,
tablets and smart phones. Then Supported accessing a platforms are
Windows, MACOS, IOS and Android. They Separate sticky sessions and SSL
certificate took setups are required for the different platform types. Which
do describes the most cost effective and Like performance efficient the
architecture setup?
Answer: Assign to multiple ELBs an EC2 instance or group of EC2 take instances running to
common component of the web application, one ELB change for each platform type.Take
Session will be stickiness and SSL termination are done for the ELBs.

103) You are migrating to legacy client-server application for AWS. The
application responds to a specific DNS visible domain
(e.g.www.example.com) and server 2-tier architecture, with multiple
application for the servers and the database server. Remote clients use to
TCP to connect to the application of servers. The application servers need to
know the IP address of clients in order to the function of properly and are
currently taking of that information from TCP socket. A Multi-AZ RDS MySQL
instance to will be used for database. During the migration you change the
application code but you have file a change request. How do would you

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

18
implement the architecture on the AWS in order to maximize scalability and
high availability?
Answer: File a change request to get implement of Proxy Protocol support in the application.
Use of ELB with TCP Listener and A Proxy Protocol enabled to distribute the load on two
application servers in the different AZs.

104) Your application currently is leverages AWS Auto Scaling to the grow
and shrink as a load Increases/decreases and has been performing as well.
Your marketing a team expects and steady ramp up in traffic to follow an
upcoming campaign that will result in 20x growth in the traffic over 4 weeks.
Your forecast for approximate number of the Amazon EC2 instances
necessary to meet peak demand is 175. What should be you do avoid
potential service disruptions during the ramp up traffic?
Answer: Check the service limits in the Trusted Advisors and adjust as necessary, so that
fore casted count remains within the limits.

105) You have a web application running on the six Amazon EC2 instances,
consuming about 45% of resources on the each instance. You are using the
auto-scaling to make sure that a six instances are running at all times. The
number of requests this application processes to consistent and does not
experience to spikes. Then application are critical to your business and you
want to high availability for at all times. You want to the load be distributed
evenly has between all instances. You also want to between use same
Amazon Machine Image (AMI) for all instances. Which are architectural
choices should you make?
Answer: Deploy to 3 EC2 instances in one of availability zone and 3 in another availability of
zones and to use of Amazon Elastic is Load Balancer.

106) You are the designing an application that a contains protected health
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

19
information. Security and Then compliance requirements for your
application mandate that all protected to health information in application
use to encryption at rest and in the transit module. The application to uses
an three-tier architecture. Where should data flows through the load
balancers and is stored on the Amazon EBS volumes for the processing,
and the results are stored in the Amazon S3 using a AWS SDK. Which of the
options satisfy the security requirements?
Answer: Use TCP load balancing on load balancer system, SSL termination on Amazon to
create EC2 instances, OS-level disk take encryption on Amazon EBS volumes, and The
amazon S3 with server-side to encryption and Use the SSL termination on load balancers, an
SSL listener on the Amazon to create EC2 instances, Amazon EBS encryption on the EBS
volumes containing the PHI, and Amazon S3 with a server-side of encryption.

107) An startup deploys its create photo-sharing site in a VPC. An elastic

load balancer distributes to web traffic across two the subnets. Then the
load balancer session to stickiness is configured to use of AWS-generated
session cookie, with a session TTL of the 5 minutes. The web server to
change Auto Scaling group is configured as like min-size=4, max-size=4. The
startup is the preparing for a public launchs, by running the load-testing
software installed on the single Amazon Elastic Compute Cloud (EC2)
instance to running in us-west-2a. After 60 minutes of load-testing, the web
server logs of show the following:WEBSERVER LOGS | # of HTTP requests
to from load-tester system | # of HTTP requests to from private on beta
users || webserver #1 (subnet an us-west-2a): | 19,210 | 434 | webserver #2
(subnet an us-west-2a): | 21,790 | 490 || webserver #3 (subnet an us-west-2b):
| 0 | 410 || webserver #4 (subnet an us-west-2b): | 0 | 428 |Which as
recommendations can be help of ensure that load-testing HTTP requests are
will evenly distributed across to four web servers?
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

20
Answer: Result of cloud is re-configure the load-testing software to the re-resolve DNS for
each web request.

108) To serve the Web traffic for a popular product to your chief financial
officer and IT director have purchased 10 m1.large heavy utilization of
Reserved Instances (RIs) evenly put spread across two availability zones:
Route 53 are used to deliver the traffic to on Elastic Load Balancer (ELB).
After the several months, the product grows to even more popular and you
need to additional capacity As a result, your company that purchases two
c3.2xlarge medium utilization RIs You take register the two c3.2xlarge
instances on with your ELB and quickly find that the ml of large instances at
100% of capacity and the c3.2xlarge instances have significant to capacity
that option is the most of cost effective and uses EC2 capacity most of
effectively?
Answer: To use a separate ELB for the each instance type and the distribute load to ELBs
with a Route 53 weighted round of robin.

109) An AWS customer are deploying an web application that is the

composed of a front-end running on the Amazon EC2 and confidential data
that are stored on the Amazon S3. The customer security policy is that all
accessing operations to this sensitive data must authenticated and
authorized by centralized access to management system that is operated by
separate security team. In addition, the web application team that be owns
and administers the EC2 web front-end instances are prohibited from having
the any ability to access data that circumvents this centralized access to
management system. Which are configurations will support these
requirements?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

21
Answer: The configure to the web application get authenticate end-users against the
centralized access on the management system. Have a web application provision trusted to
users STS tokens an entitling the download of the approved data directly from a Amazon S3.

110) A Enterprise customer is starting on their migration to the cloud, their

main reason for the migrating is agility and they want to the make their
internal Microsoft active directory available to the many applications
running on AWS, this is so internal users for only have to remember one set
of the credentials and as a central point of user take control for the leavers
and joiners. How could they make their actions the directory secures and
the highly available with minimal on-premises on infrastructure changes in
the most cost and the time-efficient way?
Answer: By Using a VPC, they could be create an the extension to their data center and to
make use of resilient hardware IPSEC on tunnels, they could then have two domain consider
to controller instances that are joined to the existing domain and reside within the different
subnets in the different availability zones.

111) What is Cloud Computing?

Answer: Cloud computing means it provides services to access programs, application,
storage, network, server over the internet through browser or client side application on your
PC, Laptop, Mobile by the end user without installing, updating and maintaining them.
Cloud computing is a cloud platform service that provides you with theon-demand services
that can range from compute, databases, storage, networking, applications and so on. Cloud
computing follows your pay-as-you-go model where you are going to pay only for what you
are using.

112) Why we go for Cloud Computing?

Answer:
 Lower computing cost
 Improved Performance
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

22
  No IT Maintenance
 Business connectivity
 Easily upgraded
 Device Independent

113) What are the deployment models using in Cloud?

Answer:
 Private Cloud
 Public Cloud
 Hybrid cloud
 Community cloud 4

Q114) Explain Cloud Service Models?

Answer: SAAS (Software as a Service): It is software distribution model in which application
are hosted by a vendor over the internet for the end user freeing from complex software and
hardware management. (Ex: Google drive, drop box)
PAAS (Platform as a Service): It provides platform and environment to allow developers to
build applications. It frees developers without going into the complexity of building and
maintaining the infrastructure. (Ex: AWS Elastic Beanstalk, Windows Azure)
IAAS (Infrastructure as a Service): It provides virtualized computing resources over the
internet like cpu, memory, switches, routers, firewall, Dns, Load balancer (Ex: Azure, AWS)

115) What are the advantage of Cloud Computing?

Answer:
 Pay per use
 Scalability
 Elasticity
 High Availability
 Increase speed and Agility
 Go global in Minutes

116) What is AWS?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

23
Answer: Amazon web service is a secure cloud services platform offering compute, power,
database, storage, content delivery and other functionality to help business scale and grow.
AWS is fully on-demand
AWS is Flexibility, availability and Scalability
AWS is Elasticity: scale up and scale down as needed.

117) What is mean by Region, Availability Zone and Edge Location?

Answer: Region: An independent collection of AWS resources in a defined geography. A
collection of Data centres (Availability zones). All availability zones in a region connected by
high bandwidth.
Availability Zones: An Availability zone is a simply a data centre. Designed as independent
failure zone. High speed connectivity, Low latency.
Edge Locations: Edge locations are the important part of AWS Infrastructure. Edge locations
are CDN endpoints for cloud front to deliver content to end user with low latency

118) How to access AWS Platform?

Answer:
 AWS Console
 AWS CLI (Command line interface)
 AWS SDK (Software Development Kit)

119) What is EC2? What are the benefits in EC2?

Amazon Elastic compute cloud is a web service that provides resizable compute capacity in
the cloud.AWS EC2 provides scalable computing capacity in the AWS Cloud. These are the
virtual servers also called as instances. We can use the instances pay per use basis.
Benefits:
 Easier and Faster
 Elastic and Scalable
 High Availability
 Cost-Effective

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

24
120) What are the pricing models available in AWS EC2?
Answer:
 On-Demand Instances
 Reserved Instances
 Spot Instances
 Dedicated Host

121) What are the types using in AWS EC2?

Answer:
 General Purpose
 Compute Optimized
 Memory optimized
 Storage Optimized
 Accelerated Computing (GPU Based)

122) What is AMI? What are the types in AMI?

Answer: Amazon machine image is a special type of virtual appliance that is used to create a
virtual machine within the amazon Elastic compute cloud. AMI defines the initial software that
will be in an instance when it is launched.
Types of AMI:
 Published by AWS
 AWS Marketplace
 Generated from existing instances
 Uploaded virtual server

123) How to Addressing AWS EC2 instances?

Answer: Public Domain name system (DNS) name: When you launch an instance AWS creates
a DNS name that can be used to access the Public IP: A launched instance may also have a
public ip address This IP address assigned from the address reserved by AWS and cannot be

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

25
specified. Elastic IP: An Elastic IP Address is an address unique on the internet that you
reserve independently and associate with Amazon EC2 instance. This IP Address persists
until the customer release it and is not tried to

124) What is Security Group?

Answer: AWS allows you to control traffic in and out of your instance through virtual firewall
called Security groups. Security groups allow you to control traffic based on port, protocol
and source/Destination.

125) When your instance show retired state?

Answer: Retired state only available in reserved instances. Once the reserved instance
reserving time (1 yr/3 yr) ends it shows Retired state.
126) Scenario: My EC2 instance IP address change automatically while
instance stop and start. What is the reason for that and explain solution?
Answer: AWS assigned Public IP automatically but it s change dyna that case we need to
assign Elastic IP for that instance, once assi automatically.

127) What is Elastic Beanstalk?

Answer: AWS Elastic Beanstalk is the fastest and simplest way to get an application up and
running on AWS. Developers can simply upload their code and the service automatically
handle all the details such as resource provisioning, load balancing, Auto scaling and
Monitoring.

128) What is Amazon Lightsail?

Answer: Lightsail designed to be the easiest way to launch and manage a virtual private
server with AWS. Lightsail plans include everything you need to jumpstart your project a
virtual machine, ssd based storage, data transfer, DNS Management and a static ip.
129) What is EBS?
Answer: Amazon EBS Provides persistent block level storage volumes for use with Amazon
EC2 instances. Amazon EBS volume is automatically replicated with its availability zone to

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

26
protect component failure offering high availability and durability. Amazon EBS volumes are
available in a variety of types that differ in performance characteristics and Price.

130) How to compare EBS Volumes?

Answer: Magnetic Volume: Magnetic volumes have the lowest performance characteristics of
all Amazon EBS volume types.
EBS Volume size: 1 GB to 1 TB Average IOPS: 100 IOPS Maximum throughput: 40-90 MB
General-Purpose SSD: General purpose SSD volumes offers cost-effective storage that is
ideal for a broad range of workloads. General purpose SSD volumes are billed based on the
amount of data space provisioned regardless of how much of data you actually store on the
volume.
EBS Volume size: 1 GB to 16 TB Maximum IOPS: upto 10000 IOPS Maximum throughput:
160MB
Provisioned IOPS SSD: Provisioned IOPS SSD volumes are designed to meet the needs of I/O
intensive workloads, particularly database workloads that are sensitive to storage
performance and consistency in random access I/O throughput. Provisioned IOPS SSD
Volumes provide predictable, high performance.
EBS Volume size: 4 GB to 16 TB Maximum IOPS: up to 20000 IOPS Maximum throughput: 320
MB

131) What is cold HDD and Throughput-optimized HDD?

Answer: Cold HDD: Cold HDD volumes are designed for less frequently accessed workloads.
These volumes are significantly less expensive than throughput-optimized HDD volumes.
EBS Volume size: 500 GB to 16 TB Maximum IOPS: 200 IOPS Maximum throughput: 250 MB
Throughput-Optimized HDD: Throughput-optimized HDD volumes are low cost HDD volumes
designed for frequent access, throughput-intensive workloads such as big data, data
warehouse.
EBS Volume size: 500 GB to 16 TB Maximum IOPS: 500 IOPS Maximum throughput: 500 MB

132) What is Amazon EBS-Optimized instances?

Answer: Amazon EBS optimized instances to ensure that the Amazon EC2 instance is
prepared to take advantage of the I/O of the Amazon EBS Volume. Amazon EBS-optimized
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

27
instances uses an optimized configuration stack and provide additional dedicated capacity
for Amazon EBSI/When you select Amazon EBS-optimized for an instance you pay an
additional hourly charge for that instance.

133) What is EBS Snapshot?

Answer: It can back up the data on the EBS Volume. Snapshots are incremental backups.
If this is your first snapshot it may take some time to create. Snapshots are point in time
copies of volumes.

134) How to connect EBS volume to multiple instance?

Answer: We can t able to connect EBS volume to multiple instance multiple EBS Volume to
single instance.

135) What are the virtualization types available in AWS?

Answer: Hardware assisted Virtualization: HVM instances are presented with a fully
virtualized set of hardware and they executing boot by executing master boot record of the
root block device of the image. It is default Virtualization.
Para virtualization: This AMI boot with a special boot loader called PV-GRUB. The ability of
the guest kernel to communicate directly with the hypervisor results in greater performance
levels than other virtualization approaches but they cannot take advantage of hardware
extensions such as networking, GPU etc. It’s customized Virtualization image. Virtualization
image can be used only for particular service.

136) Differentiate Block storage and File storage?

Answer: Block Storage: Block storage operates at lower level, raw storage device level and
manages data as a set of numbered, fixed size blocks.
File Storage: File storage operates at a higher level, the operating system level and manage
data as a named hierarchy of files and folders.

137) What are the advantage and disadvantage of EFS? Advantages?

Answer:

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

28
  Fully managed service
 File system grows and shrinks automatically to petabytes
 Can support thousands of concurrent connections
 Multi AZ replication
 Throughput scales automatically to ensure consistent low latency Disadvantages:
 Not available in all region
 Cross region capability not available
 More complicated to provision compared to S3 and EBS
138) What are the things we need to remember while creating s3 bucket?
Answer:
 Amazon S3 and Bucket names are
 This means bucket names must be unique across all AWS
 Bucket names can contain up to 63 lowercase letters, numbers, hyphens and
 You can create and use multiple buckets
 You can have up to 100 per account by

139) What are the storage class available in Amazon s3?

Answer:
 Amazon S3 Standard
 Amazon S3 Standard-Infrequent Access
 Amazon S3 Reduced Redundancy Storage
 Amazon Glacier

140) Explain Amazon s3 lifecycle rules?

Answer: Amazon S3 lifecycle configuration rules, you can significantly reduce your storage
costs by automatically transitioning data from one storage class to another or even
automatically delete data after a period of time.
 Store backup data initially in Amazon S3 Standard
 After 30 days, transition to Amazon Standard IA
 After 90 days, transition to Amazon Glacier
 After 3 years, delete

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

29
141) What is the relation between Amazon S3 and AWS KMS?
Answer: To encrypt Amazon S3 data at rest, you can use several variations of Server-Side
Encryption. Amazon S3 encrypts your data at the object level as it writes it to disks in its data
centres and decrypt it for you when you access it ll SSE performed Management Service
(AWS KMS) uses the 256-bit Advanced Encryption Standard (AES).

142) What is the function of cross region replication in Amazon S3?

Answer: Cross region replication is a feature allows you asynchronously replicate all new
objects in the source bucket in one AWS region to a target bucket in another region. To
enable cross-region replication, versioning must be turned on for both source and
destination buckets. Cross region replication is commonly used to reduce the latency
required to access objects in Amazon S3

143) How to create Encrypted EBS volume?

Answer: You need to select Encrypt this volume option in Volume creation page. While
creation a new master key will be created unless you select a master key that you created
separately in the service. Amazon uses the AWS key management service (KMS) to handle
key management.

144) Explain Stateful and Stateless firewall?

Answer: Stateful Firewall: A Security group is a virtual stateful firewall that controls inbound
and outbound network traffic to AWS resources and Amazon EC2 instances. Operates at the
instance level. It supports allow rules only. Return traffic is automatically allowed, regardless
of any rules.
Stateless Firewall: A Network access control List (ACL) is a virtual stateless firewall on a
subnet level. Supports allow rules and deny rules. Return traffic must be explicitly allowed by
rules.
145) What is NAT Instance and NAT Gateway?
Answer: NAT instance: A network address translation (NAT) instance is an Amazon Linux
machine Image (AMI) that is designed to accept traffic from instances within a private subnet,
translate the source IP address to the Public IP address of the NAT instance and forward the

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

30
traffic to IWG.
NAT Gateway: A NAT gateway is an Amazon managed resources that is designed to
operate just like a NAT instance but it is simpler to manage and highly available within an
availability Zone. To allow instance within a private subnet to access internet resources
through the IGW via a NAT gateway.

146) What is VPC Peering?

Answer: Amazon VPC peering connection is a networking connection that enables instances
in either Amazon VPC to communicate with each other as if they are within the same network.
You can create amazon VPC peering connection between your own Amazon VPC s or Amazon
VPC in another AWS account within a single region

147) What is MFA in AWS?

Answer: Multi factor Authentication can add an extra layer of security to your infrastructure
by adding a second method of authentication beyond just password or access key.

148) What are the Authentication in AWS?

Answer:
 User Name/Password
 Access Key
 Access Key/ Session Token

149) What is Data warehouse in AWS?

Answer: Data ware house is a central repository for data that can come from one or more
sources. Organization typically use data warehouse to compile reports and search the
database using highly complex queries. Data warehouse also typically updated on a batch
schedule multiple times per day or per hour compared to an OLTP (Online Transaction
Processing) relational database that can be updated thousands of times per second.

150) What is mean by Multi-AZ in RDS?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

31
Answer: Multi AZ allows you to place a secondary copy of your database in another
availability zone for disaster recovery purpose. Multi AZ deployments are available for all
types of Amazon RDS Database engines. When you create s Multi-AZ DB instance a primary
instance is created in one Availability Zone and a secondary instance is created by another
Availability zone.

151) What is Amazon Dynamo DB?

Answer: Amazon Dynamo DB is fully managed NoSQL database service that provides fast
and predictable performance with seamless scalability. Dynamo DB makes it simple and Cost
effective to store and retrieve any amount of data.

152) What is cloud formation?

Answer: Cloud formation is a service which creates the AWS infrastructure using code. It
helps to reduce time to manage resources. We can able to create our resources Quickly and
faster.

153) How to plan Auto scaling?

Answer:
 Manual Scaling
 Scheduled Scaling
 Dynamic Scaling

154) What is Auto Scaling group?

Answer: Auto Scaling group is a collection of Amazon EC2 instances managed by the Auto
scaling service. Each auto scaling group contains configuration options that control when
auto scaling should launch new instance or terminate existing instance.

155) Differentiate Basic and Detailed monitoring in cloud watch?

Answer:
Basic Monitoring: Basic monitoring sends data points to Amazon cloud watch every five
minutes for a limited number of preselected metrics at no charge.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

32
Detailed Monitoring: Detailed monitoring sends data points to amazon CloudWatch every
minute and allows data aggregation for an additional charge.

156) What is the relationship between Route53 and Cloud front?

Answer: In Cloud front we will deliver content to edge location wise so here we can use
Route 53 for Content Delivery Network. Additionally, if you are using Amazon Cloud Front you
can configure Route 53 to route Internet traffic to those resources.

157) What are the routing policies available in Amazon Route53?

Answer:
 Simple
 Weighted
 Latency Based
 Failover
 Geolocation

158) What is Amazon ElastiCache?

Answer: Amazon ElastiCache is a web services that simplifies the setup and management of
distributed in memory caching environment.
 Cost Effective
 High Performance
 Scalable Caching Environment
 Using Memcached or Redis Cache Engine

159) What is SES, SQS and SNS?

Answer: SES (Simple Email Service): SES is SMTP server provided by Amazon which is
designed to send bulk mails to customers in a quick and cost-effective manner.SES does not
allows to configure mail server.
SQS (Simple Queue Service): SQS is a fast, reliable and scalable, fully
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

33
managed message queuing service. Amazon SQS makes it simple an
temporary repository for messages to waiting for processing and acts as a buffer between
the component producer and the consumer.
SNS (Simple Notification Service): SNS is a web service that coordinates and manages the
delivery or sending of messages to recipients.

160) How to Use Amazon SQS? What Is Aws?

Answer: Amazon Web Services is a secure cloud services stage, offering compute power,
database storage, content delivery and other functionality to help industries scale and grow.

161) What is the importance of buffer in AWS?

Answer: Low price Consume only the amount of calculating, storage needed. No long-term
assignation, minimum spend or up-front expenditure is required.
Elastic and Scalable Quickly Rise and decrease resources to application
and control costs. Avoid provisioning maintenance up-front for plans with variable
consumption speeds or low lifetimes.

162) What is the way to secure data for resounding in the cloud?
Answer:
 Avoid storage sensitive material in the cloud.
 Read the user contract to find out how your cloud service stored
 Be serious about passwords.
 Encrypt.
 Use an encrypted cloud service.

163) Name the Several Layers Of Cloud Computing?

Answer: Cloud computing can be damaged up into three main services: Software-as-a-
Service (SaaS), Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS). PaaS in
the middle, and IaaS on the lowest

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

34
164) What Is Lambda edge In Aws?
Answer: Lambda Edge lets you run Lambda functions to modify satisfied that Cloud Front
delivers, executing the functions in AWS locations closer to the viewer. The functions run in
response to Cloud Front events, without provisioning or managing server.

165) Distinguish Between Scalability And Flexibility?

Answer: Cloud computing offers industries flexibility and scalability when it comes to
computing needs.
Flexibility: Cloud computing agrees your workers to be more flexible at workplace. Workers
can access files using web-enabled devices such as smart phones, laptops and notebooks. In
this way, cloud computing empowers the use of mobile technology. One of the key
assistances of using cloud computing is its scalability. Cloud computing allows your
business to easily expensive or downscale your IT requests as and when required. For
example, most cloud service workers will allow you to increase your existing resources to
accommodate increased business needs or changes. This will allow you to support your
commercial growth without exclusive changes to your present IT systems.

166) What is IaaS?

Answer: IaaS is a cloud service that runs services on pay-for-what
IaaS workers include Amazon Web Services, Microsoft Azure and Google Compute Engine
Users: IT Administrators

167) What is PaaS?

Answer: PaaS runs cloud platforms and runtime environments to develop, test and manage
software
Users: Software Developers
168) What is SaaS?
Answer: In SaaS, cloud workers host and manage the software application on a pay-as-you-
go pricing model
Users: End Customers

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

35
169) Which Automation Gears Can Help With Spinup Services ?
Answer: The API tools can be used for spin up services and also for the written scripts.
Persons scripts could be coded in Perl, bash or other languages of your preference. There is
one more option that is flowery management and stipulating tools such as a dummy or
improved descendant. A tool called Scalar can also be used and finally we can go with a
controlled explanation like a Right scale. Which automation gears can help with pinup
service.

170) What Is an Ami? How Do I Build One?

Answer: An Amazon Machine Image (AMI) explains the programs and settings that will be
applied when you launch an EC2 instance. Once you have finished organizing the data,
services, and submissions on your ArcGIS Server instance, you can save your work as a
custom AMI stored in Amazon EC2. You can scale out your site by using this institution AMI
to launch added instances
Use the following process to create your own AMI using the AWS Administration Console:
*Configure an EC2 example and its attached EBS volumes in the exact way you want them
created in the custom AMI.
1. Log out of your instance, but do not stop or terminate it.
2. Log in to the AWS Management Console, display the EC2 page for your region, then click
Instances.
3. Choose the instance from which you want to create a custom AMI.
4. Click Actions and click Create Image.
5. Type a name for Image Name that is easily identifiable to you and, optionally, input text for
Image Description.
6. Click Create Image.
Read the message box that appears. To view the AMI standing, go to the AMIs page. Here you
can see your AMI being created. It can take a though to create the AMI. Plan for at least 20
minutes, or slower if you have connected a lot of additional applications or data

171) What are the Main Features Of Amazon Cloud Front?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

36
Answer: Amazon Cloud Front is a web service that speeds up delivery of your static and
dynamic web content, such as .html, .css, .js, and image files, to your users. Cloud Front
delivers your content through a universal network of data centres called edge locations

172) What Are The Features Of The Amazon Ec2 Service?

Answer: Amazon Elastic Calculate Cloud (Amazon EC2) is a web service that provides
secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud
calculating easier for designers. Amazon EC2 s simple web service interface allows your
capacity with minimal friction.

173) Explain Storage For Amazon Ec2 Instance?

Answer: An instance store is a provisional storing type located on disks that are physically
attached to a host machine. Compare it to AWS Elastic Block Storage (AWS EBS), and show
you how to backup data stored on instance stores to AWS EBS
Amazon SQS is a message queue service used by scattered requests to exchange messages
through a polling model, and can be used to decouple sending and receiving components

174) When attached to an Amazon VPC which two components provide

connectivity with external networks?
Answer:
 Internet Gateway {IGW)
 Virtual Private Gateway (VGW)

175) Which of the following are characteristics of Amazon VPC subnets?

Answer:
 Each subnet maps to a single Availability Zone.
 By defaulting, all subnets can route between each other, whether they are private or
public.

176) How can you send request to Amazon S3?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

37
Answer: Every communication with Amazon S3 is either genuine or anonymous.
Authentication is a process of validating the individuality of the requester trying to access an
Amazon Web Services (AWS) product. Genuine requests must include a autograph value that
authenticates the request sender. The autograph value is, in part, created from the r
(access key identification and secret access key).

177) What is the best approach to anchor information for conveying in the
cloud ?
Answer: Backup Data Locally. A standout amongst the most vital interesting points while
overseeing information is to guarantee that you have reinforcements for your information,
 Avoid Storing Sensitive Information.
 Use Cloud Services that Encrypt Data.
 Encrypt Your Data.
 Install Anti-infection Software.
 Make Passwords Stronger.
 Test the Security Measures in Place.

178) What is AWS Certificate Manager?

Answer: AWS Certificate Manager is an administration that lets you effortlessly arrangement,
oversee, and send open and private Secure Sockets Layer/Transport Layer Security
(SSL/TLS) endorsements for use with AWS administrations and your inward associated
assets. SSL/TLS declarations are utilized to anchor arrange interchanges and set up the
character of sites over the Internet and additionally assets on private systems. AWS
Certificate Manager expels the tedious manual procedure of obtaining, transferring, and re-
establishing SSL/TLS endorsements.

179) What is the AWS Key Management Service?

Answer: AWS Key Management Service (AWS KMS) is an overseen benefit that makes it
simple for you to make and control the encryption keys used to scramble is additionally

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

38
coordinated with AWS Cloud Trail to give encryption key use logs to help meet your
inspecting, administrative and consistence needs.

180) What is Amazon EMR?

Answer: Amazon Elastic MapReduce (EMR) is one such administration that gives completely
over saw facilitated Hadoop system over Amazon Elastic Compute Cloud (EC2).

181) What is Amazon Kinesis Firehose?

Answer: Amazon Kinesis Data Firehose is the least demanding approach to dependably stack
gushing information into information stores and examination device overseen benefit that
consequently scales to coordinate the throughput of your information and requires no
continuous organization.

182) What Is Amazon CloudSearch and its highlights?

Answer: Amazon CloudSearch is a versatile cloud-based hunt benefit that frames some
portion of Amazon Web Services (AWS). CloudSearch is normally used to incorporate
tweaked seek abilities into different applications. As indicated by Amazon, engineers can set
a pursuit application up and send it completely in under 60 minutes.

183) Is it feasible for an EC2 exemplary occurrence to wind up an individual

from a virtual private cloud?
Answer: Amazon Virtual Private Cloud (Amazon VPC) empowers you to characterize a virtual
system in your very own consistently disengaged zone inside the AWS cloud, known as a
virtual private cloud (VPC). You can dispatch your Amazon EC2 assets, for example,
occasions, into the subnets of your VPC. Your VPC nearly looks like a conventional system
that you may work in your very own server farm, with the advantages of utilizing adaptable
foundation from AWS. You can design your VPC; you can choose its IP address extend, make
subnets, and arrange course tables, organize portals, and security settings. You can interface
occurrences in your VPC to the web or to your own server farm
184) Mention crafted by an Amazon VPC switch?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

39
Answer: VPCs and Subnets. A virtual private cloud (VPC) is a virtual system committed to
your AWS account. It is consistently segregated from other virtual systems in the AWS Cloud.
You can dispatch your AWS assets, for example, Amazon EC2 cases, into your VPC.

185) How would one be able to associate a VPC to corporate server farm?
Answer: AWS Direct Connect empowers you to safely associate your AWS condition to your
on-premises server farm or office area over a standard 1 gigabit or 10 gigabit Ethernet fiber-
optic association. AWS Direct Connect offers committed fast, low dormancy association,
which sidesteps web access suppliers in your system way. An AWS Direct Connect area gives
access to Amazon Web Services in the locale it is related with, and also access to different
US areas. AWS Direct Connect enables you to consistently parcel the fiber-optic associations
into numerous intelligent associations called Virtual Local Area Networks (VLAN). You can
exploit these intelligent associations with enhance security, separate traffic, and accomplish
consistence necessities.

186) Is it conceivable to push off S3 with EC2 examples?

Answer: Truly, it very well may be pushed off for examples with root approaches upheld by
local event stockpiling. By utilizing Amazon S3, engineers approach the comparative to a
great degree versatile, reliable, quick, low-valued information stockpiling substructure that
Amazon uses to follow its own overall system of sites. So as to perform frameworks in the
Amazon EC2 air, engineers utilize the instruments giving to stack their Amazon Machine
Images (AMIs) into Amazon S3 and to exchange them between Amazon S3 and Amazon EC2.
Extra use case may be for sites facilitated on EC2 to stack their stationary substance from
S3.

187) What is the distinction between Amazon S3 and EBS?

Answer: EBS is for mounting straightforwardly onto EC2 server examples. S3 is Object
Oriented Storage that isn’t continually waiting be gotten to (and is subsequent) then much
less expensive AWS Glacier which is for long haul stock generally hope to need to get to it
There are then two principle kinds of EBS HDD (Hard Disk Drives, i.e. attractive
genuinely ease back to access, and SSD, which are strong state drives which are excessively
quick to get to, yet increasingly costly.
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

40
Finally, EBS can be purchased with or without Provisioned IOPS.
Obviously these distinctions accompany a related estimating contrast, so it merits focusing
on the distinctions and utilize the least expensive that conveys the execution you require.

188) What do you comprehend by AWS?

Answer: This is one of the generally asked AWS engineer inquiries questions. This inquiry
checks your essential AWS learning so the appropriate response ought to be clear. Amazon
Web Services (AWS) is a cloud benefit stage which offers figuring power, investigation,
content conveyance, database stockpiling, sending and some different administrations to
help you in your business development. These administrations are profoundly versatile,
solid, secure, and cheap distributed computing administrations which are plot to cooperate
and, applications in this manner made are further developed and escalade.

189) Clarify the principle components of AWS?

Answer: The principle components of AWS are:
Highway 53: Route53 is an exceptionally versatile DNS web benefit.
Basic Storage Service (S3): S3 is most generally utilized AWS stockpiling web benefit.
Straightforward E-mail Service (SES): SES is a facilitated value-based email benefit and
enables one to smoothly send deliverable messages utilizing a RESTFUL API call or through
an ordinary SMTP.
Personality and Access Management (IAM): IAM gives enhanced character and security the
board for AWS account.
Versatile Compute Cloud (EC2): EC2 is an AWS biological community focal piece. It is in
charge of giving on-request and adaptable processing assets with a pay as you go estimating
model.
Flexible Block Store (EBS): EBS offers consistent capacity arrangement that can be found in
occurrences as a customary hard drive.
Cloud Watch: Cloud Watch enables the controller to viewpoint and accumulate key
measurements and furthermore set a progression of cautions to be advised if there is any
inconvenience.
190) I am not catching your meaning by AMI?
Answer: You may run over at least one AMI related AWS engineer inquiries amid your AWS
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

41
designer meet. Along these lines, set yourself up with a decent learning of AMI.
AMI represents the term Amazon Machine Image. It s an AWS format which gives th
and working framework, and applications) required to play out the dispatch of an occasion.
This AMI is the duplicate of the AMI that is running in the cloud as a virtual server. You can
dispatch occurrences from the same number of various AMIs as you require. AMI comprises
of the followings:
 A pull volume format for a current example
 Launch authorizations to figure out which AWS records will inspire the AMI so as to
dispatch the occasions
 Mapping for square gadget to compute the aggregate volume that will be appended to
the example at the season of dispatch

191) Is vertically scale is conceivable on Amazon occurrence?

Answer: Indeed, vertically scale is conceivable on Amazon occurrence.

192) What is the association among AMI and Instance?

Answer: Various sorts of examples can be propelled from one AMI. The sort of an occasion
for the most part manages the equipment segments of the host PC that is utilized for the
case. Each kind of occurrence has unmistakable registering and memory adequacy.
When an example is propelled, it gives a role as host and the client cooperation with it is
same likewise with some other PC however we have a totally controlled access to our
occurrences. AWS engineer inquiries questions may contain at least one AMI based inquiries,
so set yourself up for the AMI theme exceptionally well.

193) What is the distinction between Amazon S3 and EC2?

Answer:
Amazon S3 Amazon EC2
The significance of S3 is Simple Storage The importance of EC2 is Elastic Compute
Service Cloud.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

42
 It is only an information stockpiling
It is a cloud web benefit which is utilized to
administration which is utilized to store huge
have the application made
paired files
It isn’t required to run a server It is sufficient to run a server.
It is much the same as a tremendous PC
It has a REST interface and utilizations machine which can deal with application like
secure HMAC-SHA1 validation keys. Python, PHP, Apache and some other
database.

194) What number of capacity alternatives are there for EC2 Instance?
Answer: There are four stockpiling choices for Amazon EC2 Instance:
 Amazon EBS
 Amazon EC2 Instance Store
 Amazon S3
 Adding Storage

195) What are the security best practices for Amazon Ec2 examples?
Answer: There are various accepted procedures for anchoring Amazon EC2 occurrences that
are pertinent whether occasions are running on-preface server farms or on virtual machines.
How about we view some broad prescribed procedures:
Minimum Access: Make beyond any doubt that your EC2 example has controlled access to
the case and in addition to the system. Offer access specialists just to the confided in
substances.
Slightest Privilege: Follow the vital guideline of minimum benefit for cases and clients to play
out the capacities. Produce jobs with confined access for the occurrences.
Setup Management: Consider each EC2 occasion a design thing and use AWS arrangement
the executives administrations to have a pattern for the setup of the occurrences as these
administrations incorporate refreshed enemy of infection programming, security highlights
and so forth.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

43
196) Clarify the highlights of Amazon EC2 administrations?
Answer: Amazon EC2 administrations have following highlights:
 Virtual Computing Environments
 Proffers Persistent capacity volumes
 Firewall approving you to indicate the convention
 Pre-designed layouts
 Static IP address for dynamic Cloud Computing

197) What is the system to send a demand to Amazon S3?

Answer: There are 2 different ways to send a demand to Amazon S3
 Using REST API
 Using AWS SDK Wrapper Libraries, these wrapper libraries wrap the REST APIs for
Amazon

198) What is the default number of basins made in AWS?

Answer: This is an extremely straightforward inquiry yet positions high among AWS engineer
inquiries questions. Answer this inquiry straightforwardly as the default number of pails
made in each AWS account is 100.

199) What is the motivation behind T2 examples?

Answer: T2 cases are intended for
 Providing moderate gauge execution
 Higher execution as required by outstanding task at hand

200) What is the utilization of the cradle in AWS?

Answer: This is among habitually asked AWS designer inquiries questions. Give the
appropriate response in straightforward terms, the cradle is primarily used to oversee stack
with the synchronization of different parts i.e. to make framework blame tolerant. Without
support, segments don’t utilize any reasonable technique to get and process the cushion
makes segments to work in a decent way and at a similar speed, hence results in quicker
administrations.

201) What happens when an Amazon EC2 occurrence is halted or ended?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

44
Answer: At the season of ceasing an Amazon EC2 case, a shutdown is performed in a typical
way. From that point onward, the changes to the ceased state happen. Amid this, the majority
of the Amazon EBS volumes are stayed joined to the case and the case can be begun
whenever. The occurrence hours are not included when the occasion is the ceased state.
At the season of ending an Amazon EC2 case, a shutdown is performed in an ordinary way.
Amid this, the erasure of the majority of the Amazon EBS volumes is performed. To stay away
from this, the estimation of credit delete On Termination is set to false. On end, the
occurrence additionally experiences cancellation, so the case can t be begun once more.

202) What are the mainstream DevOps devices?

Answer: In an AWS DevOps Engineer talk with, this is the most widely recognized AWS
inquiries for DevOps. To answer this inquiry, notice the well known DevOps apparatuses with
the kind of hardware
 Jenkins Continuous Integration Tool
 Git Version Control System Tool
 Nagios Continuous Monitoring Tool
 Selenium Continuous Testing Tool
 Docker Containerization Tool
 Puppet, Chef, Ansible Deployment and Configuration Administer

203) What are IAM Roles and Policies, What is the difference between IAM
Roles and Policies?
Answer: Roles are for AWS services, where we can assign permission of some AWS service
to other Service.
Example Giving S3 permission to EC2 to access S3 Bucket Conte
Policies are for users and groups, Where we can assign permission to user s an
Example Giving permission to user to access the S3 Buckets.

204) What are the Defaults services we get when we create custom AWS
VPC?
Answer:
 Route Table
 Network ACL
 Security Group

205) What is the Difference Between Public Subnet and Private Subnet?
Answer:
Public Subnet Private Subnet
It will have Internet Gateway Attached to its Private Subnet will not have the Internet
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

45
 Gateway Attached to its associated Route
associated Route Table and Subnet
Table and Subnet
Private subnet will not have the internet
Public Subnet will have internet access
access directly.

206) How do you access the Ec2 which has private IP which is in private
Subnet ?
Answer: We can access using VPN if the VPN is configured into that Particular VPC where
Ec2 is assigned to that VPC in the Subnet. We can access using other Ec2 which has the
Public access.

207) We have a custom VPC Configured and MYSQL Database server which
is in Private Subnet and we need to update the MYSQL Database Server,
What are the Option to do so?
Answer: By using NAT Gateway in the VPC or Launch a NAT Instance ( Ec2) Configure or
Attach the NAT Gateway in Public Subnet ( Which has Route Table attached to IGW) and
attach it to the Route Table which is Already attached to the Private Subnet.

208) What are the Difference Between Security Groups and Network ACL?
Answer:
Security Groups Network ACL
Attached to Ec2 instance Attached to a subnet
Stateful – Changes made in incoming rules is Stateless – Changes made in incoming rules
automatically applied to the outgoing rule is not applied to the outgoing rule
Blocking IP Address can’t be done IP Address can be Blocked
Allow rules only, by default all rules are Allow and Deny can be Used
denied

209) What are the Difference Between Route53 and ELB?

Answer: Amazon Route 53 will handle DNS servers. Route 53 give you web interface through
which the DNS can be managed using Route 53, it is possible to direct and failover traffic.
This can be achieved by using DNS Routing Policy. One more routing policy is Failover
Routing policy. We set up a health check to monitor your application endpoints. If one of the
endpoints is not available, Route 53 will automatically forward the traffic to other endpoint.
Elastic Load Balancing: ELB automatically scales depends on the demand, so sizing of the
load balancers to handle more traffic effectively when it is not required.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

46
210) What are the DB engines which can be used in AWS RDS?
Answer:
 MariaDB
 MYSQL DB
 MS SQL DB
 Postgre DB
 Oracle DB
211) What is Status Checks in AWS Ec2?
Answer: System Status Checks System Status checks will look in which needs AWS help to
resolve the issue. When we see system status check failure, you can wait for AWS to resolve
the issue, or do it by our self.
 Network connectivity
 System power
 Software issues Data Centre s
 Hardware issues
 Instance Status Checks Instance Status checks will look into i
 involvement to fix the issue. if status check fails, we can reboot that particular
instance.
 Failed system status checks
 Memory Full
 Corrupted file system
 Kernel issues

212) To establish a peering connections between two VPC’s what must be

met?
Answer:
 CIDR Block should overlap
 CIDR Block should not overlap
 VPC should be in the same region
 VPC must belong to same account.
 CIDR block should not overlap between vpc setting up a peering connection. Peering
connection is allowed within a region, across region, across different account.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

47
213) Troubleshooting with EC2 Instances?
Answer: Instance States
 If the instance state is 0/2- there might be some hardware issue
 If the instance state is ½-there might be issue with OS.
 Workaround-Need to restart the instance, if still that is not working logs will help to fix
the issue.

214) How EC2 instances can be resized?

Answer: EC2 instances can be resizable (scale up or scale down) based on requirement

215) EBS: its block-level storage volume which we can use after mounting
with EC2 instances?
Answer: For types please refer AWS Solution Architect book.

216) Difference between EBS, EFS and S3?

Answer: We can access EBS only if it’s mounted with instance, at a time EBS can be mounted
only with one instance.
EFS can be shared at a time with multiple instances
S3 can be accessed without mounting with instances

217) Maximum number of bucket which can be created in AWS?

Answer: 100 buckets can be created by default in AWS account. To get more buckets
additionally you have to request Amazon for that.

218) Maximum number of EC2 which can be created in VPC?

Answer: Maximum 20 instances can be created in a VPC. we can create 20 reserve instances
and request for spot instance as per demand.

219) How EBS can be accessed?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

48
Answer: EBS provides high performance block-level storage which can be attached with
running EC2 instance. Storage can be formatted and mounted with EC2 instance, and then it
can be accessed.

220) Process to mount EBS to EC2 instance?

Answer:
 Df k
 mkfs.ext4 /dev/xvdf
 Fdisk l
 Mkdir /my5gbdata
 Mount /dev/xvdf /my5gbdata

221) How to add volume permanently with instance?

Answer: With each restart volume will get un mounted from instance, to keep this attached
need to perform below step
 Cd /etc/fstab
 /dev/xvdf /data ext4 defaults 0
 0 <edit the file system name accordingly>

222) What is the Difference between the Service Role and SAML Federated
Role?
Answer: Service Role are meant for usage of AWS Services and based upon the policies
attached to it, it will have the scope to do its task.
Example: In case of automation we can create a service role and attached to it.
Federated Roles are meant for User Access and getting access to AWS as per designed role.
Example: We can have a federated role created for our office employee and corresponding to
that a Group will be created in the AD and user will be added to it.
223) How many Policies can be attached to a role?
Answer: 10 (Soft limit), We can have till 20.

224) What are the different ways to access AWS?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

49
Answer: Three Different ways (CLI, Console, SDK)

225) How a Root AWS user is different from in IAM User?

Answer: Root User will have access to entire AWS environment and it will not have any policy
attached to it. While IAM User will be able to do its task on the basis of policies attached to it.

226) What do you mean by Principal of least privilege in term of IAM?

Answer: Principal of least privilege means to provide the same or equivalent permission to
the user/role.

227) What is the meaning of non-explicit deny for an IAM User?

Answer: When an IAM user is created and it is not having any policy attached to it, in that
case he will not be able to access any of the AWS Service until a policy has been attached to
it.

228) What is the precedence level between explicit allow and explicit deny?
Answer: Explicit deny will always override Explicit Allow.

229) What is the benefit of creating a group in IAM?

Answer: Creation of Group makes the user management process much simpler and user with
the same kind of permission can be added in a group and at last addition of a policy will be
much simpler to the group in comparison to doing the same thing manually.

230) What is the difference between the Administrative Access and Power
User Access in term of pre-build policy.
Answer: Administrative Access will have the Full access to AWS resources. While Power User
Access will have the Admin access except the user/group management permission.
231) What is the purpose of Identity Provider?
Answer: Identity Provider helps in building the trust between the AWS and the Corporate AD
Environment while we create the Federated role.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

50
232) What are the benefits of STS (Security Token Service)?
Answer: It help in securing the AWS environment as we need not to embed or distributed the
AWS Security credentials in the application. As the credentials are temporary we need not to
rotate them and revoke them.

233) What is the benefit of creating the AWS Organization?

Answer: It helps in managing the IAM Policies, creating the AWS Accounts programmatically,
helps in managing the payment methods and consolidated billing.

234) What is the maximum file length in S3?

Answer: utf-8 1024 bytes

235) Which activity cannot be done using auto scaling?

Answer: Maintain fixed running of ec2

236) How will you secure data at rest in EBS?

Answer: EBS data is always secure
237) What is the maximum size of S3 Bucket?
Answer: 5TB

238) Can objects in Amazon s3 be delivered through amazon cloud front?

Answer: Yes

239) Which service is used to distribute content to end user service using
global network of edge location?
Answer: Virtual Private Cloud
240) What is ephemaral storage?
Answer: Temporary storage

241) What are shards in kinesis aws services?

Answer: Shards are used to store data in Kinesis.
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

51
242) Where can you find the ephemeral storage?
Answer: In Instance store service.

243) I have some private servers on my premises also i have distributed

some of my workload on the public cloud, what is the architecture called?
Answer: Virtual private cloud

244) Route 53 can be used to route users to infrastructure outside of AWS?

(True/false)
Answer: False

245) Is simple workflow service one of the valid Simple Notification Service
subscribers?
Answer: No

246) Which cloud model do Developers and organizations all around the
world leverage extensively?
Answer: IAAS-Infrastructure as a service.

247) Can cloud front serve content from a non AWS origin server?
Answer: No

248) Is EFS a centralised storage service in AWS?

Answer: Yes
249) Which AWS services will you use to collect and process ecommerce
data for near real time analysis?
Answer: Both Dynamo DB & Redshift

250) An high demand of IOPS performance is expected around 15000.Which

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

52
EBS volume type would you recommend?
Answer: Provisioned IOPS.

251) What are various vendors that provides that cloud computing services?
Answer: Below are some of the vendors that provides that cloud services.
 AWS
 Azure
 GCP
 SAP cloud
 Oracle cloud
 Red Hat cloud
 Verizon and so on.

252) What is the difference between a user and a role in AWS and under what
service does this concept come under?
Answer: A user and a role is used to provide access to the AWS services. When a user is
created, you will have credentials for the user but when you create a role, no credentials are
created. So your roles are more secured when compared to the users. This concept comes
under the IAM service that deals with the access to the AWS services.

253) What are the types of access that you can give to your users?
Answer: You can give 2 types of access to your users, programmatic access and console
access.

254) What are the different instance types we have in EC2?

Answer: We have the below type of instance types in EC2,
 General-purpose
 Compute-optimized
 Storage optimized
 Memory-optimized
 Accelerated computing

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

53
255) What are the pricing models in EC2?
Answer: Below are the pricing models in EC2,
 On-demand
 Spot instances
 Scheduled instances
 Reserved instances
 Dedicated instances
 Dedicated hosts
 Saving plans
 Capacity reservations

256) What is the difference between Instance store volume and EBS
volumes?
Answer: Instance store volumes are used for temporary data. That is, the data is available as
long as the instance is running. F you stop or terminate the instance, the data is lost.
EBS volumes are used for persistent data. That is, the data can be made available even when
the instance is not running.

257) What are the types of EBS volumes?

Answer: Below are the types in EBS volumes,
 General-purpose
 Provisioned IOPS
 Magnetic
 Cold HDD
 Throughput optimized
258) What are key pairs and what does it consists of?
Answer: Key pairs are login information that you can use to login to the EC2 instances. It
consists of public key and private key that will make for the key pairs.

259) How can you monitor the health status of your EC2 instances?

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

54
Answer: You can monitor the EC2 instances by creating a health check for the EC2 instances.
You have this option when creating the load balancer and can be used by the load balancer to
decide whether to send the load/traffic to the EC2 instances.

260) What is the monitoring tool in AWS and what are the metrics that you
can monitor for EC2?
Answer: Cloudwatch is the monitoring tool in AWS. By using this, you can monitor metrics
like, CPU utilization, disk reads, disk writes, network in, network out and so on.

261) What is the S3 service? What are the different storage types and which
is the default one?
Answer: S3 is storage for the internet. You can use this S3 service to store any data, any time
and access the data from any location. Below are the types of S3 storage,
 Standard frequently accessed
 Standard infrequently accessed
 One-zone infrequently accessed
 Glacier
 Glacier archive
 Intelligent tiering
 Reduced redundancy storage.
By default, whenever you create the S3 buckets, standard frequently accessed will be used.

262) How can control the access to your S3 buckets?

Answer: You can control the access by using the ACL Access Control List

263) What is the difference between EBS and EFS?

Answer: EBS Elastic Block Store is attached to a single instance at a time
Elastic File System (EFS) can be attached to multiple instances at the same time.

264) What is the service that can be used for data migration?
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

55
Answer: Snowball is a service that can be used for data migration. You can use this service to
move your data from one region to another region, import from S3, export from S3 or for local
usage.

265) What is the difference between the Internet gateway and NAT gateway?
Answer: The Internet gateway is used to give internet access to your instances that are
running the public subnets and NAT Network Address Translation is used to give internet
that are running in the private subnets.

266) What is an EIP?

Answer: EIP stands for Elastic IP address. When you stop and start an instance, you public IP
address will change. To avoid this, you can use an EIP that will maintain the same IP address
when you start and stop and EC2 instance.

267) What is the difference between a security group and NACL?

Answer:
Security groups NACL
Created at the instance level Created at the subnet level
You can add only allow rules You can add allow and deny rules
Does not have any rule numbers Follows rule numbering system
Statefull Stateless

267) What is the auditing service in AWS?

Answer: Cloud trail is the auditing service that can be used in AWS. By default, all the actions
that a user takes in the AWS account is logged as an event in the Cloud Trail service. You can
see the events for the last 90 days by default.
268) What is cloud formation?
Answer: Cloud Formation is also known as Infrastructure As A Service. This service can be
used to automate the infrastructure setup by writing scripts. You can write the script in either
JSON or YAML format. Both are supported by cloud Formation.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

56
269) What are the types of routing policies we have in Route53?
Answer: We have the below routing policies in Route53,
 Simple
 Weighted
 Latency
 Failover
 Geolocation
 Multivalue answer

270) What is cloud front?

Answer: Cloud Front is the content delivery network in AWS. In Cloud Front, you have edge
locations that act as your cache locations that are utilized by Cloud Front to cache the
contents.

271) What are the types you have in storage gateway?

Answer: There are 3 types in storage gateway,
 File gateway
 Volume gateway
 Tape gateway

272) What are the types you have in kinesis?

Answer: There are 3 types in kinesis,
 Kinesis streams
 Kinesis firehose
 Kinesis analytics

273) What is the command that you can use to login to the command line
tool?
Answer: You can use the aws configure command to login to the command you for the
access key and secret key to login to the terminal.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

57
274) What is the command to copy contents from S3 bucket to an EC2
server?
Answer: You can use the below command,
aws s3 cp s3://<S3 bucket name> <destination>

275) Which is the service that is known as serverless computing service?

Answer: Lambda is the service that is known as serverless computing. With this service, you
do not have to worry about provisioning servers or managing any servers.

276) What are key pairs?

Answer: Key pairs are you login information that you can use to login to the EC2 servers. Key
pairs consist of public key and private key that make up for the key pairs.

277) What is user data in AWS?

Answer: User data can be used to write the boot-up script that you can use to execute certain
commands when your server is starting up. Whenever you want to automate certain tasks in
your server, you can make use of the user data section for your boot-up scripts.

278) How can you encrypt the data in S3?

Answer: You can use AES-256 and KMS to encrypt your data in S3. KMS is your Key
Management Service to encrypt your data in S3.

AWS Real Time Trouble shooting’s

1) EC2: Instance Unreachable
 Symptoms: Unable to connect to an EC2 instance.
 Resolution: Check security group rules and Network ACLs to ensure correct inbound and out bound
traffic. Verify the instance state and system logs for any issues. Update security groups if necessary.

2) Auto Scaling: Scaling Issues

 Symptoms: Auto Scaling fails to launch or terminate instances.
 Resolution: Review Auto Scaling group configuration, launch configurations and health checks. Check
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

58
 instance termination protection settings. Investigate Cloud Watch alarms for triggers and adjust
policies accordingly.

3) Load Balancer: Unhealthy Instances

 Symptoms: Load balancer reports instances as unhealthy.
 Resolution: Inspect Cloud Watch metrics for instances, troubleshoot application health checks and
ensure instances are registered with the correct load balancer. Check security group settings and
troubleshoot application health.

4) Route53: DNS Resolution Issues

 Symptoms: Domain not resolving or pointing to the wrong IP address.
 Resolution: Verify Route53 records for accuracy. Check DNS propagation and TTL settings. Confirm the
health of associated resources (e.g., Load Balancer, EC2 instances). Investigate any issues reported in
Route 53 health checks.

5) Cloud Watch: Alarm Triggering Incorrectly

 Symptoms: Cloud Watch alarms triggering when they shouldn’t or not triggering when
expected.
 Resolution: Review alarm configurations, thresholds and evaluation periods.Check associated metrics
for accuracy. Verify the underlying issue causing the alarm condition.

6) SSL: Certificate Expiry

 Symptoms: SSL certificate expired or causing browser warnings.
 Resolution: Renew or replace the SSL certificate. Update the certificate in the associated AWS services
(e.g., Load Balancer, Cloud Front). Monitor certificate expiry using AWS Certificate Manager (ACM) or
other tools.

7) Cloud Front: Content Not Updating

 Symptoms: Changes in the origin not reflected in Cloud Front distribution.
 Resolution: Invalidate Cloud Front cache for updated content. Check Cloud Front distribution settings,
origin configurations and TTL settings. Ensure that the origin is serving the latest content.

8) Elastic Cache: Cache Node Issues

 Symptoms: High latency or cache node failures in Elastic Cache.
 Resolution: Monitor Cloud Watch metrics for Elastic Cache. Investigate and resolve issues such as
memory pressure, evictions or network problems. Consider scaling the cache cluster if needed.

9) RDS: Database Performance Degradation

 Symptoms: Slow queries or high database latency.
 Resolution: Analyze Cloud Watch metrics for RDS. Optimize database queries, adjust instance
size or consider scaling read replicas. Monitor storage capacity and perform database
maintenance tasks.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

59
10) IAM User: Access Denied
 Symptoms: IAM user unable to perform expected actions.
 Resolution: Review IAM user policies and roles. Ensure the user has the necessary permissions for the
intended actions. Check for any explicit "Deny" policies that might override "Allow" policies.

11) Deployment: Application Rollback

 Symptoms: Deployment of an application version introduces issues.
 Resolution: Implement a rollback mechanism in your deployment strategy. Investigate logs
and metrics to identify the problematic version. Rollback to the previous stable version and
analyze the root cause of the issue before attempting a re-deployment.

Roles & Responsibilities

Build & Release/Devops Engineer
Daily Activities

 StandUp Meeting - 15 mins

What you done yesterday and what you going to do today. Share to team if you facing
any challenges.
 Work on POC, User Stories.
 Giving Demo to different clients on CI/CD pipelines to start DevOps services.
 Attended various trainings on GIT, Ant, Maven, and Jenkins to create DevOps POC’s.
 Documenting all the Build and deployment related issues
 Participate in a various meetings and status calls including project meetings,
Troubleshooting Issues.
 Communicating with development team for Build plan and Build failures.
 EOD update the Tasks in ALM (Jira,TFS ,HP ALM...)

Sprint Mgmt
 Every 2 Weeks one sprint
 Every 2 sprints one person will be scrum master
 Scrum master create a Sprint
 Send Status Meeting Report to manager
 Bourn Down Report Generate send to manager

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

60
  End of the Sprint have a Retrospective meeting what went well and what the things
pending taking the action for that.

CI Activities
 Creating Automated job
-- configure a new job with newly created branch
-- continuous builds
-- Post build sending email to respective stakeholders
 Creating CI/CD pipelines by integrating GitHub, maven, Jenkins, Chef.
 Creating Manual Job
 Updates on CI plug-in
 Installing Plug-in in Jenkins as per project requirements.
 Configuring Slaves in Jenkins.
 Monitor the health of your project with night builds
-- Every day check the build statuses
-- Email Notifications
 Troubleshoot compile and build failures and facilitate resolution.
 Coordinating with the Development team to fix the Build related issues.
 Create Nightly Builds to check sanity of our code.
 Implemented release management processes which reduced manual mistakes, and the
faster rollback of golden build releases in case of emergency
 Communicating with development team for Build plan and Build failures.
 Integrated Jenkins with different code quality analysis and Review tools like Sonarqube,
Jacoco.
 Integrate jenkins with nexus for artifactory management.
 Implemented multi-parallel jobs in Jenkins which does CI, packaging, Sonar job and
deployment job to different environments such as DEV, TEST and PROD

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

61
 Environment Mgmt

 Setup dev, test, uat and production environments.

 Dev Env
dev server 1
dev server 2
dev server 3

 QA Env
qa server 1
qa server 2
qa server 3

 UAT Env
uat server 1
uat server 2
uat server 3

 For every project have 3/4 environments.

 For every environment have minimum 2-4 servers.

SCM Activities
 Create branch for new release
 Branching, Tagging, Release Activities
 Backup servers in Non working Hours

Other Tool Activities

 Installed and Configured Nexus repository for all Snapshot and Release versions.
 Installed MYSQL and configured database schemas for SonarQube 6.0.
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

62
 Release Cycle
 Every 2 weeks have QA Release
 Every 4 weeks have UAT Release
 Every 2 months have PROD Release

NOTE:
 To release the code to qa testing environment we will create release branch and create
the tag from release branch. Once it's released delete the release branch.
 We will deploy to release artifacts into testing environments .i.e deploying application
qa environment.

 Your testing environments can be anywhere

Can be On Premise - Linux VMS
Can be Cloud Instances - Ec2 instance
Can be docker containers

QA/UAT builds
Release plan is for 3 months then
 12 builds in QA
To test functional bugs (with dummy data)
 3 builds for UAT
To Testing functionality with prod data

Activities while doing builds

Ex: At 12:00pm : the build starts
 Open Build Server (win/linux)
 Checkout codebase from branch
 Trigger Ant/maven build scripts
 Stop services
 Backup the existing artifacts
 Deployment of your current artifacts

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

63
  Start the services
 Smoke testing /sanity testing

Script related Activities:

 Writing/modifying shell scripts to stop/start WebLogic/tomcat/websphere servers.

 Written/modifying shell scripts to deploy into WebLogic/tomcat/websphere servers.
 Writing/modifying shell scripts for daily database backup.

Challenges while doing Builds

 SVN/GIT is going down

-- checkout Fails(by another user locker the file)
 Ant/maven
-- compilation errors(by dev team)
 Stopping servers
-- server not reachable/ not able to stop the service Http status codes 404,503
 Backup time
-- Disk space issues
 Deployment
-- permission issues/connectivity issues
-- App loading will failure
-- server listener issues
-- Framework issues

AWS Sysops/Devops Engineer

 Setting up dev,test,uat and production environments on cloud.

 Troubleshooting EC2 related to network,firewall and performance issues.
 Created the roles and groups for users and resources using AWS Identity Access
Management (IAM).
 Provided highly durable and available data by using S3 data store, versioning, life cycle
policies.
 Created AMIs for critical production servers for backup.
 Given support for all other AWS products such as Autoscalling,S3, RDS, Elastic Load
Balancing, and Route53 (DNS)
Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

64
  Writing/modifying Cloud Formation/terraform scripts automate the provisioning of aws
resources like IAM,EC2, Route 53,RDS,ELB and Autoscaling.
 Created deployment process using code pipeline and Elastic Beanstalk..
 Using Cloud Watch monitoring resources such as
EC2,
CPU memory,
Amazon RDS DB services, Dynamo DB tables,
EBS volumes;
To set alarms for notification or automated actions;
To monitor logs for a better understanding and operation of the system.

 Installing patches and packages on ec2 instances.

 Configured the SNS notification when instances are stopping.
 Configuring aws logs for application servers.

Address: HIG-247, 2nd floor, Road no 2, Opp: Bank of Baroda, KPHB Phase 1& 2, Kukatpally, Hyderabad, Telangana 500072

65