Ans: Subnet, Internet Gateway, NAT Gateway, HW VPN Connection, Virtual Private Gateway, Customer Gateway, Router, Peering Connection, VPC Endpoint for S3, Egress-only Internet Gateway.
How do you safeguard your EC2 instances running in a VPC?
Ans: Security Groups can be used to protect your EC2 instances in a VPC. We can configure both INBOUND and OUTBOUND traffic in a Security Group which enables secured access to your EC2 instances. Security Group automatically denies any unauthorized access to your EC2 instances.
In a VPC how many EC2 instances can you use?
Ans: Initially you are limited to launch 20 EC2 Instances at one time. Maximum VPC size is 65,536 instances.
Can you establish a peering connection to a VPC in a different REGION?
Ans: Not possible. Peering Connection are available only between VPC in the same region.
Can you connect your VPC with a VPC owned by another AWS account?
Ans: Yes, Possible. Provided the owner of other VPCs accepts your connection.
 |
| AWS Advanced Experienced Level Interview Questions Answers |
What are all the different connectivity options available for your VPC?
Ans: Internet Gateway, Virtual Private Gateway, NAT, EndPoints, Peering Connections.
Can a EC2 instance inside your VPC connect with the EC2 instance belonging to other VPCs?
Ans: Yes, Possible. Provided an Internet Gateway is configured in such a way that traffic bounded for EC2 instances running in other VPCs.
How can you monitor network traffic in your VPC?
Ans: It is possible using Amazon VPC Flow-Logs feature.
Difference between Security Groups and ACLs in a VPC?
Ans: A Security Group defines which traffic is allowed TO or FROM EC2 instance. Whereas ACL, controls at the SUBNET level, scrutinize the traffic TO or FROM a Subnet.
Hon an EC2 instance in a VPC establish the connection with the internet?
Ans: Using either a Public IP or an Elastic IP.
Different types of Cloud Computing as per services?
Ans: PAAS (Platform As A Service), IAAS (Infrastructure As A Service), SAAS (Software As A Service)
What is Auto Scaling?
Ans: Creating duplicate instances during heavy business hours. Scale-IN and Scale-OUT are two different statues of Scaling. Scale-IN: Reducing the instances. Scale-OUT: Increasing the instances by duplicating.
What is AMI?
Ans: AMI is defined as Amazon Machine Image. Basically it’s a template comprising software configuration part. For example, Operating System, DB Server, Application Server, etc.,
Difference between Stopping and Terminating the Instances?
Ans: When you STOP an instance it is a normal shutdown. The corresponding EBS volume attached to that instance remains attached and you can restart the instance later. When you TERMINATE an instance it gets deleted and you cannot restart that instance again later. And any EBS volume attached with that instance also deleted.
When you launch a standby Relational Database Service instance will it be available in the same Available Zone?
Ans: Not advisable. Because the purpose of having standby RDS instance is to avoid an infrastructure failure. So you have to keep your standby RDS service in a different Availability Zone, which may have different infrastructure.
Difference between Amazon RDS, DynamoDB and Redshift?
Ans: RDS is meant for structured data only. DynamoDB is meant for unstructured data which is a NoSQL service. Redshift is a data warehouse product used for data analysis.
What are Lifecycle Hooks?
Ans: Lifecycle Hooks are used in Auto Scaling. Lifecycle hooks enable you to perform custom actions by pausing instances as an Auto Scaling group launches or terminates them. Each Auto Scaling group can have multiple lifecycle hooks.
What is S3?
Ans: S3 stands for Simple Storage Service, with a simple web service interface to store and retrieve any amount of data from anywhere on the web.
What is AWS Lambada?
Ans: Lambda is an event-driven platform. It is a compute service that runs code in response to events and automatically manages the compute resources required by that code.
In S3 how many buckets can be created?
Ans: By default 100 buckets can be created in a region.
What is CloudFront?
Ans: Amazon CloudFront is a service that speeds up transfer of your static and dynamic web content such as HTML files, IMAGE files., etc., CloudFront delivers your particulars thru worldwide data centers named Edge Locations.
Brief about S3 service in AWS?
Ans: S3, a Simple Storage Service from Amazon. You can move your files TO and FROM S3. Its like a FTP storage. You can keep your SNAPSHOTS in S3. You can also ENCRYPT your sensitive data in S3.
Explain Regions and Available Zones in EC2?
Ans: Amazon has hosted EC2 in various locations around the world. These locations are called REGIONS. For example in Asia, Mumbai is one region and Singapore is another region. Each region is composed of isolated locations which are known as AVAILABLE ZONES. Region is independent. But the Available Zones are linked thru low-latency links.
What are the two types of Load Balancer?
Ans: Classic LB and Application LB. ALB is the Content Based Routing.
Can a AMI be shared?
Ans: Yes. A developer can create an AMI and share it with other developers for their use. A shared AMI is packed with the components you need and you can customize the same as per your needs. As you are not an owner of a shared AMI there is a risk always involved.
What is a Hypervisor?
Ans: A Hypervisor is a kind of software that enables Virtualization. It combines physical hardware resources into a platform which is delivered virtually to one or more users. XEN is the Hypervisor for EC2.
Key Pair and its uses?
Ans: You use Key Pair to login to your Instance in a secured way. You can create a key pair using EC2 console. When your instances are spread across regions you need to create key pair in each region.
What is the feature of ClassicLink?
Ans: ClassicLink allows instances in EC2 classic platform to communicate with instances in VPC using Private IP address. EC2 classic platform instances cannot not be linked to more than one VPC at a time.
Can you edit a Route Table in VPC?
Ans: Yes. You can always modify route rules to specify which subnets are routed to the Internet gateway, the virtual private gateway, or other instances.
How many Elastic IPs can you create?
Ans: 5 VPC Elastic IP addresses per AWS account per region
Can you ping the router or default gateway that connects your subnets?
Ans: NO, you cannot. It is not supported. However you can ping EC2 instances within a VPC, provided your firewall, Security Groups and network ACLs allows such traffic.
How will you monitor the network traffic in a VPC?
Ans: Using Amazon VPC Flow Logs feature.
Can you make a VPC available in multiple Available Zones?
Ans: Yes.
How do you ensure an EC2 instance is launched in a particular Available Zone?
Ans: After selecting your AMI Template and Instance Type, in the third step while configuring the instance you must select the SUBNET in which you wish to launch your instance. It will be launched in the AZ associated with that SUBNET.
For Internet Gateways do you find any Bandwidth constraints?
Ans: NO. Normally an IG is HORIZONTALLY SCALLED, Redundant and Highly Available. It is not having nay Bandwidth constraints usually.
What is the significance of a Default VPC?
Ans: When you launch your instances in a Default VPC in a Region, you would be getting the benefit of advanced Network Functionalities. You can also make use of Security Groups, multiple IP addresses, and multiple Network interfaces.
Can you make use of default EBS Snapshots?
Ans: You can use, provided if it is located in the same region where your VPC is presented.
What will happen when you delete a PEERING CONNECTION in your side?
Ans: The PEERING CONNECTION available in the other side would also get terminated. There will no more traffic flow.
Can you establish a Peering connection to a VPC in a different region?
Ans: NO. Its possible between VPCs in the same region.
Can you connect your VPC with a VPC created by another AWS account?
Ans: Yes. Only when that owner accepts your peering connection request.
When you delete your DB instance what will happen to your backups and DB snapshots?
Ans: When a DB instance is deleted, RDS retains the user-created DB snapshot along with all other manually created DB snapshots. Also automated backups are deleted and only manually created DB Snapshots are retained.
What is the significance of an Elastic IP?
Ans: The Public IP is associated with the instance until it is stopped or terminated Only. A Public IP is not static. Every time your instance is stopped or terminated the associated Public IP gets vanished and a new Public IP gets assigned with that instance. To over come this issue a public IP can be replaced by an Elastic IP address, which stays with the instance as long as the user doesn’t manually detach it. Similarly when if you are hosting multiple websites on your EC2 server, in that case you may require more than one Elastic IP address.
How will you use S3 with your EC2 instances?
Ans: Websites hosted on your EC2 instances can load their static contents directly from S3. It provides highly scalable, reliable, fast, inexpensive data storage infrastructure.
Is this possible to connect your company datacenter to Amazon Cloud?
Ans: Yes, you can very well do this by establishing a VPN connection between your company’s network and Amazon VPC.
Can you change the Private IP of an EC2 instance while it is running or stopped?
Ans: A Private IP is STATIC. And it is attached with an instance throughout is lifetime and cannot be changed.
What is the use of Subnets?
Ans: When a network has more number of HOSTS, managing these hosts can be tedious under a single large network. Therefore we divide this large network into easily manageable sub-networks (subnets) so that managing hosts under each subnet becomes easier.
What is the use of Route Table?
Ans: Route Table is used to route the network pockets. Generally one route table would be available in each subnet. Route table can have any no. of records or information, hence attaching multiple subnets to a route table is also possible.
Can you use the Standby DB instance for read and write along with your Primary DB instance?
Ans: Standby server cannot be used in parallel with primary server unless your Primary instance goes down.
What is the use of Connection Draining?
Ans: Connection Draining is a service under Elastic Load Balancing. It keeps monitoring the healthiness of the instances. If any instance fails Connection Draining pulls all the traffic from that particular failed instance and re-route the traffic to other healthy instances.
What is the role of AWS CloudTrail?
Ans: CloudTrail is designed for logging and tracking API calls. Also used to audit all S3 bucket accesses.
What is the use of Amazon Transfer Acceleration Service?
Ans: ATA service speeds up your data transfer with the use of optimized network paths. Also, speed up your CDN up to 300% compared to normal data transfer speed
What is the name of AWS CEO or Chief ?
Jeff Bezos
Lisa Su
Denise Morrison
Ans: Jeff Bezos
EC2 officially launch in …..
2002
2006
2008
Ans: 2006
S3 Launched officially lunched in …..
2002
2006
2008
Ans: 2006
You cannot store unlimited data in Amazon Web Services…..
True
False
Ans: False
Rapid provisioning allows you to very quickly spin up a new virtual machine with minimal effort. True or false ?
True
False
Ans: True
A hybrid setup is one in which part of your resources are AWS and the rest are with another cloud provider. True or False ?
True
False
Ans: False
As an added layer of security for AWS management, which of the following should be you do ?
Create multiple Admin accounts
Generate a new security key each time you log in
Create IAM users
Ans: Create IAM users
Is AMI template ?
True
False
Ans: True
EC2 Instances are Virtual Server in AWS
True
False
Ans: True
What does “elastic” refer to in Elastic Compute Cloud(EC2)? Select all that apply.
Increasing and decreasing capacity as needed
Monitoring services on multiple devices
Operating on Mac, Windows and Linux
Paying only for running virtual machines
Stretching applications across virtual machines
Ans: 1. Increasing and decreasing capacity as needed & 4. Paying only for running virtual machines
You can upload a custom configuration virtual image and sell it on the AWS Marketplace. True or false ?
True
False
Ans: True
EC2 Machine types define which of the following ?
AWS Region
Core Count
User Location
Ans: Core Count
Which is default instance type
On-demand
RI
Spot instance
Ans: On-demand
What is Elastic Computing ?
Data will be replicate to different AZs
You can spin up and spin down VMs
Automatically VMs will be add and remove
Ans: You can spin up and spin down VMs
You can upload a custom configuration virtual image and sell it on the AWS Marketplace. True or false ?
True
False
Ans: True
EC2 Machine types define which of the following ?
AWS Region
Core Count
User Location
Ans: Core Count
Which is default instance type
On-demand
RI
Spot instance
Ans: On-demand
What is Elastic Computing ?
Data will be replicate to different AZs
You can spin up and spin down VMs
Automatically VMs will be add and remove
Ans: You can spin up and spin down VMs
Can We launch multiple instances with same AMI ?
True
False
Ans: True
PEM file is one time physical password…
True
False
Ans: True
Windows user required PPK file to connect Linux instance hosted on AWS.
True
False
Ans: True
You can purchase time on EC2 directly from other users and specify the price you want to pay. True or false ?
True
False
Ans: True
Which of the following might prevent your EC2 instance from appearing in the list of instances?
EC2 is not selected
Correct region is not selected
AWS marketplace is not selected
Ans: Correct region is not selected
Which of the following main reason to terminate an unused EC2 instance ?
Security Concerns
Additional fees
Data Loss
Ans: Additional fees
Which AWS service exists only to redundantly cache data and images ?
AWS Availability Zones
AWS Edge Locations
AWS Regions
Ans: AWS Edge Locations
Regions, AZs and Edge Locations all terms are same…
True
False
Ans: False
AWS every service is available at every regions….
True
False
Ans: False
Premium support is Available in AWS for Developer, Business & Enterprise level ?
True
False
Ans: True
Can you add new Debit/Credit card in your AWS Account ?
True
False
Ans: True
Can you increase micro to large of instance ?
True
False
Ans: True
On-demand instances is based on a bid mechanism.
True
False
Ans: False
RI can be sold on the AWS marketplace?
True
False
Ans: True
Which is default types options in AWS?
On-demand
RI
Spot instance
Ans: On-demand
What are On-demand, RI and Spot instances ? Which instance is best on Production?
On-demand
RI
Depends on Application or Website
Ans: Depends on Application or Website
Which is most expensive options in instance ?
On-demand
RI
Spot instance
Ans: On-demand
Amazon S3 is internet accessible storage via HTTP /HTTPS
True
False
Ans: True
Amazon S3 is not a object level of storage
True
False
Ans: False
Amazon S3 is storage for the Internet
True
False
Ans: True
Temporary storage access speed is not guaranteed.
True
False
Ans: True
There is 99.99% SLA(Service Level Agreement) for temporary storage.
True
False
Ans: False
Ephemeral storage is block-level storage ?
True
False
Ans: True
Single object size is up to 5 TB in Amazon S3.
True
False
Ans: True
You can create unlimited bucket size in Amazon S3.
True
False
Ans: True
By default, Instance-Backed and EBS-Backed root volumes delete all data. However, when using EBS-Backed storage, you can configure it to save the data on the root volume. True or false ?
True
False
Ans: True
You can switch from an Instance-Backed to an EBS-Backed root volume at any time. True or False ?
True
False
Ans: False
When using an EBS-Backed machine, you can override the terminate option and save the root volume. True or False ?
True
False
Ans: True
Which of the following is a service of AWS Simple Storage Service(S3)? Select all that apply.
Database Indexing
File searching
Secure Hosting
Storage Scaling
Ans: 3. Secure Hosting & 4. Storage Scaling
What’s the difference between instance store and EBS?
Issue
I’m not sure whether to store the data associated with my Amazon EC2 instance in instance store or in an attached Amazon Elastic Block Store (Amazon EBS) volume. Which option is best for me?
Resolution
Some Amazon EC2 instance types come with a form of directly attached, block-device storage known as the instance store. The instance store is ideal for temporary storage, because the data stored in instance store volumes is not persistent through instance stops, terminations, or hardware failures. You can find more detailed information about the instance store at Amazon EC2 Instance Store.
For data you want to retain longer-term, or if you need to encrypt the data, we recommend using EBS volumes instead. EBS volumes preserve their data through instance stops and terminations, can be easily backed up with EBS snapshots, can be removed from instances and reattached to another, and support full-volume encryption. For more detailed information about EBS volumes, see Features of Amazon EBS.
BS can be attached to any running instance that is in the same Availability Zone ?
True
False
Ans: True
EBS is internet accessible
True
False
Ans: False
EBS has persistent file system for EC2
True
False
Ans: True
EBS supports incremental snapshots
True
False
Ans: True
Amazon Glacier enables customers to offload the administrative burdens of operating and scaling storage to AWS.
True
False
Ans: True
Amazon Glacier is a great storage choice when low storage cost is paramount.
True
False
Ans: True
Data is rarely retrieved, and retrieval latency of several hours is acceptable in Glacier
True
False
Ans: True
Glacier is basically for data archival
True
False
Ans: True
It is very cheap storage
True
False
Ans: True
Glacier has very, very slow retrieval times
True
False
Ans: True
By Default, Instance-Backed and EBS-Backed root volumes delete all data. However, when using EBS-Backed storage, you can configure it to save the data on the root volume.
True
False
Ans: True
You can switch from an Instance-Backed to an EBS-Backed root volume at any time.
True
False
Ans: False
When using an EBS-Backed machine, you can override the terminate option and save the root volume.
True
False
Ans: True
VPC is Private, Isolated, Virtual Network
True
False
Ans: True
VPC would be logically isolated network in AWS cloud
True
False
Ans: True
VPC is also give control of network architecture
True
False
Ans: True
VPC is also going to enhanced security
True
False
Ans: True
VPC has ability to interwork with other organizations
True
False
Ans: True
VPC does not enable hybrid cloud(site-to-site VPN)
True
False
Ans: False
Route Table is a set of Rules tells the direction of network
True
False
Ans: True
Security Group is a subnet level of security
True
False
Ans: False
NACLs(Network Access Lists) is a resource level of security
True
False
Ans: False
Any default stack is available in Cloud Formation ?
Ans: You can not create default stack but you can choose the type of stack to create e.g :
A sample stack
A Linux-based chef 12 stack
A Windows-based Chef 12.2 stack
A Linux-based Chef 11.10 stack
What is the difference between Stack and Template in Cloud Formation ?
Ans: Stack : Cloud-based applications usually require a group of related resources—application servers, database servers, and so on—that must be created and managed collectively. This collection of instances is called a stack.
We can create multiple server for same stack ?
Ans: you can select one “instance type” e.g: t2.micro at a time but you can set more then one “Webserver Capacity” which is “The initial number of Webserver instances“ means automatically same kind of instances will launch.
Can you explain the term SQS is pull based, not pushed base.
Ans: It means that you have to actively poll the queue in order to receive a messages.
The messages are pushed into the queue by the producers but pulled out of the queue by the consumers.You have to call the Receive Message action from the consumer in order to get the messages, they are not pushed to you automatically when they arrive.
How many Elastic IP address can be associated with a single account?
4
10
5
None the above
Ans: 5
What is the name to the additional network interfaces that can be created and attached to any Amazon EC2 instance in your VPC?
Elastic IP
Elastic Network Interface
AWS Elastic Interface
AWS Network ACL
Ans: Elastic Network Interface
You have configured ELB with three instances connected to that. If your instances are unhealthy or terminated, the traffic should be automatically replaced to another instance, what type of service can be used to achieve this requirement?
Sticky session
Fault Tolerance
Connection drainage
Monitoring
Ans: Fault Tolerance
After configuring ELB, you need to ensure that the user requests are always attached to a single instance. What setting can you use?
Session cookie
Cross one load balancing
Connection drainage
Sticky session
Ans: Sticky session
Which of the following metrics cannot have a cloud watch alarm?
EC2 instance status check failed
EC2 CPU utilization
RRS lost object
Auto scaling group CPU utilization
Ans: RRS lost object
Which of the below mentioned service is provided by Cloud watch?
Monitor estimated AWS usage
Monitor EC2 log files
Monitor S3 storage
Monitor AWS calls using Cloud trail
Ans: Monitor estimated AWS usage
A user has Launched an EC2 instance which of the below mentioned statements is not true respect to instance addressing?
The private IP addresses are not reachable from the internet
The user can communicate using the private IP across regions
The private IP address and pubic IP address for an instance are directly mapped to each other using NAT
The private IP address for the instance is assigned using DHCP
Ans: The user can communicate using the private IP across regions
Which of the following service provides the edge – storage or content delivery system that caches data at different locations?
Amazon RDS
Simple DB
Amazon Cloud Front
Amazon associates web services
Ans: Amazon Cloud Front
A user is launching an instance under the free usage tier from the AMI with a snapshot size of 50 GB. How can the user launch the instance under the free usage tier?
Launch a micro instance
Launch a micro instance, but in the EBS configuration modify the size of EBS to 50 GB.
Launch a micro instance, but do not store the data of more than 30 GB on the EBS storage.
It is not possible to have this instance under the free usage tier
Ans: It is not possible to have this instance under the free usage tier
What are the possible connection issues you can face while connecting to your instance?
Connection timed out
Server refused our key
No supported authentication methods available
All of the above
Ans: All of the above
You are enabled sticky session with ELB. What does it do with your instance?
Routes all the requests to a single DNS
Binds the user session with a specific instance
Binds the user IP with a specific session
Provides a single ELB DNS for each IP address
Ans: Binds the user session with a specific instance
Which is a main email platform that provides an easy, cost effective way for you to send compliance and receive a response using your own email address and domains?
SES
SNS
SQS
SAS
Ans: SES
Which type of load balancer makes routing decisions at either the transport layer or the application layer and supports either EC2 or VPC.
Application Load Balancer
Classic Load Balancer
Primary Load Balancer
Secondary Load Balancer
Ans: Classic Load Balancer
AWS Cloud Front has been configured to handle the customer requests to the web server launched in Linux machine. How many requests per second can Amazon Cloud Front handle?
1000
100
10000
There is no such limit
Ans: There is no such limit
You are going to launched one instance with security group. While configuring security group, what are the things you have to select?
Protocol and type
Port
Source
All of the above
Ans: Source
Which is virtual network interface that you can attach to an instance in a VPC?
Elastic IP
AWS Elastic Interface
Elastic Network Interface
AWS Network ACL
Ans: Elastic Network Interface
You have launched a Linux instance in AWS EC2. While configuring security group, you have selected SSH, HTTP, HTTPS protocol. Why do we need to select SSH?
To verity that there is a rule that allows traffic from your computer to port 22
To verify that there is a rule that allows traffic from EC2 Instance to your computer
Allows web traffic from instance to your computer
Allows web traffic from your computer to EC2 instance
Ans: To verify that there is a rule that allows traffic from EC2 Instance to your computer
You need to quickly set up an email service because a client needs to start using it in the next hour. Amazon service seems to be the logical choice but there are several options available to set it up. Which of the following options to set up AWS service would best meet the needs of the client?
Amazon SES console
AWS Cloud Formation
SMTP interface
AWS Elastic Beanstalk
Ans: Amazon SES console
You have chosen a windows instance with Classic and you want to make some change to the security group. How will these changes be effective?
Security group rules cannot be changed
Changes are automatically applied to windows instances
Changes will be effective after rebooting the instance in that security group
Changes will be effective after 24-hours
Ans: Changes are automatically applied to windows instances
Load Balancer and DNS service comes under which type of cloud service?
IAAS-Network
IAAS-Computational
IAAS-Storage
None of the above
Ans: IAAS-Storage
You have an EC2 instance that has an unencrypted volume. You want to create another encrypted volume from this unencrypted volume. Which of the following steps can achieve this?
Just simply create a copy of the unencrypted volume, you will have the option to encrypt the volume.
Create a snapshot of the unencrypted volume and then while creating a volume from the snapshot you can encrypt it
Create a snapshot of the unencrypted volume (applying encryption parameters), copy the snapshot and create a volume from the copied snapshot
This is not possible, once a volume is unencrypted, there is no way to create an encrypted volume from this
Ans: Create a snapshot of the unencrypted volume (applying encryption parameters), copy the snapshot and create a volume from the copied snapshot
Where does the user specify the maximum number of instances with the auto scaling commands?
Auto scaling Launch Config
Auto scaling group
Auto scaling policy
Auto scaling size
Ans: Auto scaling Launch Config
A user is identify that a huge data download is occurring on his instance he has already set the auto scaling policy to increase the instance count when the network Input Output increase beyond a threshold limits how can the user ensure that this temporary event does not result in scaling
The network I/O are not affecting during data download
The policy cannot be set on the network I/O
There is no way the can stop scaling as it already configured
Suspend scaling
Ans: Suspend scaling
Which are the types of AMI provided by AWS?
EBS Backed
Instance Store backed
None its volume type and not AMI types
Both A and B
Ans: Both A and B.