Answer: The AWS Serverless Application Model (AWS SAM) extends AWS CloudFormation to provide a simplified way of defining the Amazon API Gateway APIs, AWS Lambda functions, and Amazon DynamoDB tables needed by your serverless application.

Now how will these states help in that?

Answer: If a core is put into sleep state it will reduce the overall temperature of the processor and hence other cores can perform better. Now the same can be synchronized with other cores so that the processor can boost as many cores it can by timely putting other cores to sleep, and thus get an overall performance boost.

Concluding, the C and P state can be customized in some EC2 instances like the c4.8xlarge instance and thus you can customize the processor according to your workload.

To deploy a 4-node cluster of Hadoop in AWS which instance type can be used?

Answer: First, let’s understand what actually happens in a Hadoop cluster, the Hadoop cluster follows a master-slave concept. The master machine processes all the data, slave machines store the data and act as data nodes. Since all the storage happens at the slave, a higher capacity hard disk would be recommended and since master does all the processing, a higher RAM and a much better CPU is required. Therefore, you can select the configuration of your machine depending on your workload. For e.g. – In this case, c4.8xlarge will be preferred for master machine whereas for slave machine we can select i2. large instance. If you don’t want to deal with configuring your instance and installing Hadoop cluster manually, you can straight away launch an Amazon EMR (Elastic Map Reduce) instance which automatically configures the servers for you. You dump your data to be processed in S3, EMR picks it from there, processes it, and dumps it back intoS3.

Where do you think an AMI fits, when you are designing an architecture for a solution?

Answer: AMIs (Amazon Machine Images) are like templates of virtual machines and an instance is derived from an AMI. AWS offers pre-baked AMIs which you can choose while you are launching an instance, some AMIs are not free, therefore can be bought from the AWS Marketplace. You can also choose to create your own custom AMI which would help you save space on AWS. For example, if you don’t need a set of software on your installation, you can customize your AMI to do that. This makes it cost-efficient since you are removing the unwanted things.

I have some private servers on my premises, also I have distributed some of my workload on the public cloud, what is this architecture called?

A. Virtual Private Network

B. Private Cloud

C. Virtual Private Cloud

D. Hybrid Cloud

Answer D.
Explanation: This type of architecture would be a hybrid cloud. Why? Because we are using both, the public cloud, and your on premises servers i.e the private cloud. To make this hybrid architecture easy to use, wouldn’t it be better if your private and public cloud were all on the same network(virtually). This is established by including your public cloud servers in a virtual private cloud, and connecting this virtual cloud with your on premise servers using a VPN(Virtual Private Network).

What does the following command do with respect to the Amazon EC2 security groups?

ec2-create-group CreateSecurityGroup

A. Groups the user created security groups into a new group for easy access.

B. Creates a new security group for use with your account.

C. Creates a new group inside the security group.

D. Creates a new rule inside the security group.

Answer B.
Explanation: A Security group is just like a firewall; it controls the traffic in and out of your instance. In AWS terms, the inbound and outbound traffic. The command mentioned is pretty straight forward, it says create security group, and does the same. Moving along, once your security group is created, you can add different rules in it. For example, you have an RDS instance, to access it, you have to add the public IP address of the machine from which you want access the instance in its security group.

Here is aws scenario-based interview question. You have a video trans-coding application. The videos are processed according to a queue. If the processing of a video is interrupted in one instance, it is resumed in another instance. Currently there is a huge back-log of videos which needs to be processed, for this you need to add more instances, but you need these instances only until your backlog is reduced. Which of these would be an efficient way to do it?

You should be using an On Demand instance for the same. Why? First of all, the workload has to be processed now, meaning it is urgent, secondly you don’t need them once your backlog is cleared, therefore Reserved Instance is out of the picture, and since the work is urgent, you cannot stop the work on your instance just because the spot price spiked, therefore Spot Instances shall also not be used. Hence On-Demand instances shall be the right choice in this case.

You have a distributed application that periodically processes large volumes of data across multiple Amazon EC2 Instances. The application is designed to recover gracefully from Amazon EC2 instance failures. You are required to accomplish this task in the most cost-effective way.

Which of the following will meet your requirements?

Spot Instances
Reserved instances
Dedicated instances
On-Demand instances

Answer: A
Explanation: Since the work we are addressing here is not continuous, a reserved instance shall be idle at times, same goes with On Demand instances. Also, it does not make sense to launch an On Demand instance whenever work comes up, since it is expensive. Hence Spot Instances will be the right fit because of their low rates and no long-term commitments.

Are the Reserved Instances available for Multi-AZ Deployments?

A. Multi-AZ Deployments are only available for Cluster Compute instances types

B. Available for all instance types

C. Only available for M3 instance types

D. Not Available for Reserved Instances

Answer B.
Explanation: Reserved Instances is a pricing model, which is available for all instance types in EC2.

How to use the processor state control feature available on the c4.8xlarge instance?

The processor state control consists of 2 states:

The C state – Sleep state varying from c0 to c6. C6 being the deepest sleep state for a processor
The P state – Performance state p0 being the highest and p15 being the lowest possible frequency.

Now, why the C state and P state. Processors have cores, these cores need thermal headroom to boost their performance. Now since all the cores are on the processor the temperature should be kept at an optimal state so that all the cores can perform at the highest performance.

Now how will these states help in that? If a core is put into sleep state it will reduce the overall temperature of the processor and hence other cores can perform better. Now the same can be synchronized with other cores, so that the processor can boost as many cores it can by timely putting other cores to sleep, and thus get an overall performance boost.

Concluding, the C and P state can be customized in some EC2 instances like the c4.8xlarge instance and thus you can customize the processor according to your workload.

How to do it? You can refer this tutorial for the same.

What kind of network performance parameters can you expect when you launch instances in cluster placement group?

The network performance depends on the instance type and network performance specification, if launched in a placement group you can expect up to

10 Gbps in a single-flow,
20 Gbps in multiflow i.e full duplex
Network traffic outside the placement group will be limited to 5 Gbps(full duplex).

To deploy a 4-node cluster of Hadoop in AWS which instance type can be used?

First let’s understand what actually happens in a Hadoop cluster, the Hadoop cluster follows a master slave concept. The master machine processes all the data, slave machines store the data and act as data nodes. Since all the storage happens at the slave, a higher capacity hard disk would be recommended and since master does all the processing, a higher RAM and a much better CPU is required. Therefore, you can select the configuration of your machine depending on your workload. For e.g. – In this case c4.8xlarge will be preferred for master machine whereas for slave machine we can select i2.large instance. If you don’t want to deal with configuring your instance and installing hadoop cluster manually, you can straight away launch an Amazon EMR (Elastic Map Reduce) instance which automatically configures the servers for you. You dump your data to be processed in S3, EMR picks it from there, processes it, and dumps it back into S3.

Where do you think an AMI fits, when you are designing an architecture for a solution?

AMIs(Amazon Machine Images) are like templates of virtual machines and an instance is derived from an AMI. AWS offers pre-baked AMIs which you can choose while you are launching an instance, some AMIs are not free, therefore can be bought from the AWS Marketplace. You can also choose to create your own custom AMI which would help you save space on AWS. For example if you don’t need a set of software on your installation, you can customize your AMI to do that. This makes it cost efficient, since you are removing the unwanted things.

How is stopping and terminating an instance different from each other?

Starting, stopping and terminating are the three states in an EC2 instance, let’s discuss them in detail:

Stopping and Starting an instance: When an instance is stopped, the instance performs a normal shutdown and then transitions to a stopped state. All of its Amazon EBS volumes remain attached, and you can start the instance again at a later time. You are not charged for additional instance hours while the instance is in a stopped state.
Terminating an instance: When an instance is terminated, the instance performs a normal shutdown, then the attached Amazon EBS volumes are deleted unless the volume’s deleteOnTermination attribute is set to false. The instance itself is also deleted, and you can’t start the instance again at a later time.

If I want my instance to run on a single-tenant hardware, which value do I have to set the instance’s tenancy attribute to?

A. Dedicated

B. Isolated

C. One

D. Reserved

Answer A.
Explanation: The Instance tenancy attribute should be set to Dedicated Instance. The rest of the values are invalid.

When will you incur costs with an Elastic IP address (EIP)?

A. When an EIP is allocated.

B. When it is allocated and associated with a running instance.

C. When it is allocated and associated with a stopped instance.

D. Costs are incurred regardless of whether the EIP is associated with a running instance.

Answer C.
Explanation: You are not charged, if only one Elastic IP address is attached with your running instance. But you do get charged in the following conditions:

When you use more than one Elastic IPs with your instance.
When your Elastic IP is attached to a stopped instance.
When your Elastic IP is not attached to any instance.

How is a Spot instance different from an On-Demand instance or Reserved Instance?

First of all, let’s understand that Spot Instance, On-Demand instance and Reserved Instances are all models for pricing. Moving along, spot instances provide the ability for customers to purchase compute capacity with no upfront commitment, at hourly rates usually lower than the On-Demand rate in each region. Spot instances are just like bidding, the bidding price is called Spot Price. The Spot Price fluctuates based on supply and demand for instances, but customers will never pay more than the maximum price they have specified. If the Spot Price moves higher than a customer’s maximum price, the customer’s EC2 instance will be shut down automatically. But the reverse is not true, if the Spot prices come down again, your EC2 instance will not be launched automatically, one has to do that manually. In Spot and On demand instance, there is no commitment for the duration from the user side, however in reserved instances one has to stick to the time period that he has chosen.

How do you choose an Availability Zone?

Let’s understand this through an example, consider there’s a company which has user base in India as well as in the US.

Let us see how we will choose the region for this use case :

So, with reference to the above figure the regions to choose between are, Mumbai and North Virginia. Now let us first compare the pricing, you have hourly prices, which can be converted to your per month figure. Here North Virginia emerges as a winner. But, pricing cannot be the only parameter to consider. Performance should also be kept in mind hence, let’s look at latency as well. Latency basically is the time that a server takes to respond to your requests i.e the response time. North Virginia wins again!

So, concluding, North Virginia should be chosen for this use case.

Is one Elastic IP address enough for every instance that I have running?

Depends! Every instance comes with its own private and public address. The private address is associated exclusively with the instance and is returned to Amazon EC2 only when it is stopped or terminated. Similarly, the public address is associated exclusively with the instance until it is stopped or terminated. However, this can be replaced by the Elastic IP address, which stays with the instance as long as the user doesn’t manually detach it. But what if you are hosting multiple websites on your EC2 server, in that case you may require more than one Elastic IP address.

What are the best practices for Security in Amazon EC2?

There are several best practices to secure Amazon EC2. A few of them are given below:

Use AWS Identity and Access Management (IAM) to control access to your AWS resources.
Restrict access by only allowing trusted hosts or networks to access ports on your instance.
Review the rules in your security groups regularly, and ensure that you apply the principle of least
Privilege – only open up permissions that you require.
Disable password-based logins for instances launched from your AMI. Passwords can be found or cracked, and are a security risk.

Another scenario-based interview question. You need to configure an Amazon S3 bucket to serve static assets for your public-facing web application. Which method will ensure that all objects uploaded to the bucket are set to public read?

A. Set permissions on the object to public read during upload.

B. Configure the bucket policy to set all objects to public read.

C. Use AWS Identity and Access Management roles to set the bucket to public read.

D. Amazon S3 objects default to public read, so no action is needed.

Answer B.
Explanation: Rather than making changes to every object, its better to set the policy for the whole bucket. IAM is used to give more granular permissions, since this is a website, all objects would be public by default.

A customer wants to leverage Amazon Simple Storage Service (S3) and Amazon Glacier as part of their backup and archive infrastructure. The customer plans to use third-party software to support this integration. Which approach will limit the access of the third-party software to only the Amazon S3 bucket named “company-backup”?

A. A custom bucket policy limited to the Amazon S3 API in three Amazon Glacier archive “company-backup”

B. A custom bucket policy limited to the Amazon S3 API in “company-backup”

C. A custom IAM user policy limited to the Amazon S3 API for the Amazon Glacier archive “company-backup”.

D. A custom IAM user policy limited to the Amazon S3 API in “company-backup”.

Answer D.
Explanation: Taking queue from the previous questions, this use case involves more granular permissions, hence IAM would be used here.

Can S3 be used with EC2 instances, if yes, how?

Yes, it can be used for instances with root devices backed by local instance storage. By using Amazon S3, developers have access to the same highly scalable, reliable, fast, inexpensive data storage infrastructure that Amazon uses to run its own global network of web sites. In order to execute systems in the Amazon EC2 environment, developers use the tools provided to load their Amazon Machine Images (AMIs) into Amazon S3 and to move them between Amazon S3 and Amazon EC2.

Another use case could be for websites hosted on EC2 to load their static content from S3.

A customer implemented AWS Storage Gateway with a gateway-cached volume at their main office. An event takes the link between the main and branch office offline. Which methods will enable the branch office to access their data?

Restore by implementing a lifecycle policy on the Amazon S3 bucket.
Make an Amazon Glacier Restore API call to load the files into another Amazon S3 bucket within four to six hours.
Launch a new AWS Storage Gateway instance AMI in Amazon EC2, and restore from a gateway snapshot.
Create an Amazon EBS volume from a gateway snapshot, and mount it to an Amazon EC2 instance.

Answer C.
Explanation: The fastest way to do it would be launching a new storage gateway instance. Why? Since time is the key factor which drives every business, troubleshooting this problem will take more time. Rather than we can just restore the previous working state of the storage gateway on a new instance.

When you need to move data over long distances using the internet, for instance across countries or continents to your Amazon S3 bucket, which method or service will you use?

A. Amazon Glacier

B. Amazon CloudFront

C. Amazon Transfer Acceleration

D. Amazon Snowball

Answer C.
Explanation: You would not use Snowball, because for now, the snowball service does not support cross region data transfer, and since, we are transferring across countries, Snowball cannot be used. Transfer Acceleration shall be the right choice here as it throttles your data transfer with the use of optimized network paths and Amazon’s content delivery network upto 300% compared to normal data transfer speed.

How can you speed up data transfer in Snowball?

The data transfer can be increased in the following way:

By performing multiple copy operations at one time i.e. if the workstation is powerful enough, you can initiate multiple cp commands each from different terminals, on the same Snowball device.
Copying from multiple workstations to the same snowball.
Transferring large files or by creating a batch of small file, this will reduce the encryption overhead.
Eliminating unnecessary hops i.e. make a setup where the source machine(s) and the snowball are the only machines active on the switch being used, this can hugely improve performance.

If you want to launch Amazon Elastic Compute Cloud (EC2) instances and assign each instance a predetermined private IP address you should:

A. Launch the instance from a private Amazon Machine Image (AMI).

B. Assign a group of sequential Elastic IP address to the instances.

C. Launch the instances in the Amazon Virtual Private Cloud (VPC).

D. Launch the instances in a Placement Group.

Answer C.
Explanation: The best way of connecting to your cloud resources (for ex- ec2 instances) from your own data center (for eg- private cloud) is a VPC. Once you connect your datacenter to the VPC in which your instances are present, each instance is assigned a private IP address which can be accessed from your datacenter. Hence, you can access your public cloud resources, as if they were on your own network.

Can I connect my corporate datacenter to the Amazon Cloud?

Yes, you can do this by establishing a VPN(Virtual Private Network) connection between your company’s network and your VPC (Virtual Private Cloud), this will allow you to interact with your EC2 instances as if they were within your existing network.

Is it possible to change the private IP addresses of an EC2 while it is running/stopped in a VPC?

Primary private IP address is attached with the instance throughout its lifetime and cannot be changed, however secondary private addresses can be unassigned, assigned or moved between interfaces or instances at any point.

Why do you make subnets?

A. Because there is a shortage of networks

B. To efficiently utilize networks that have a large no. of hosts.

C. Because there is a shortage of hosts.

D. To efficiently utilize networks that have a small no. of hosts.

Answer B.
Explanation: If there is a network which has a large no. of hosts, managing all these hosts can be a tedious job. Therefore we divide this network into subnets (sub-networks) so that managing these hosts becomes simpler.

Which of the following is true?

A. You can attach multiple route tables to a subnet

B. You can attach multiple subnets to a route table

C. Both A and B

D. None of these.

Answer B.
Explanation: Route Tables are used to route network packets, therefore in a subnet having multiple route tables will lead to confusion as to where the packet has to go. Therefore, there is only one route table in a subnet, and since a route table can have any no. of records or information, hence attaching multiple subnets to a route table is possible.

In CloudFront what happens when content is NOT present at an Edge location and a request is made to it?

A. An Error “404 not found” is returned

B. CloudFront delivers the content directly from the origin server and stores it in the cache of the edge location

C. The request is kept on hold till content is delivered to the edge location

D. The request is routed to the next closest edge location

Answer B.
Explanation: CloudFront is a content delivery system, which caches data to the nearest edge location from the user, to reduce latency. If data is not present at an edge location, the first time the data may get transferred from the original server, but from the next time, it will be served from the cached edge.

If I’m using Amazon CloudFront, can I use Direct Connect to transfer objects from my own data center?

Yes. Amazon CloudFront supports custom origins including origins from outside of AWS. With AWS Direct Connect, you will be charged with the respective data transfer rates.

If my AWS Direct Connect fails, will I lose my connectivity?

If a backup AWS Direct connect has been configured, in the event of a failure it will switch over to the second one. It is recommended to enable Bidirectional Forwarding Detection (BFD) when configuring your connections to ensure faster detection and failover. On the other hand, if you have configured a backup IPsec VPN connection instead, all VPC traffic will failover to the backup VPN connection automatically. Traffic to/from public resources such as Amazon S3 will be routed over the Internet. If you do not have a backup AWS Direct Connect link or a IPsec VPN link, then Amazon VPC traffic will be dropped in the event of a failure.

If I launch a standby RDS instance, will it be in the same Availability Zone as my primary?

A. Only for Oracle RDS types

B. Yes

C. Only if it is configured at launch

D. No

Answer D.
Explanation: No, since the purpose of having a standby instance is to avoid an infrastructure failure (if it happens), therefore the standby instance is stored in a different availability zone, which is a physically different independent infrastructure.

When would I prefer Provisioned IOPS over Standard RDS storage?

If you have batch-oriented workloads
If you use production online transaction processing (OLTP) workloads.
If you have workloads that are not sensitive to consistent performance
All of the above

Answer A.
Explanation: Provisioned IOPS deliver high IO rates but on the other hand it is expensive as well. Batch processing workloads do not require manual intervention they enable full utilization of systems, therefore a provisioned IOPS will be preferred for batch oriented workload.

How is Amazon RDS, DynamoDB and Redshift different?

Amazon RDS is a database management service for relational databases, it manages patching, upgrading, backing up of data etc. of databases for you without your intervention. RDS is a Db management service for structured data only.
DynamoDB, on the other hand, is a NoSQL database service, NoSQL deals with unstructured data.
Redshift, is an entirely different service, it is a data warehouse product and is used in data .

If I am running my DB Instance as a Multi-AZ deployment, can I use the standby DB Instance for read or write operations along with primary DB instance?

A. Yes

B. Only with MySQL based RDS

C. Only for Oracle RDS instances

D. No

Answer D.
Explanation: No, Standby DB instance cannot be used with primary DB instance in parallel, as the former is solely used for standby purposes, it cannot be used unless the primary instance goes down.

Your company’s branch offices are all over the world, they use a software with a multi-regional deployment on AWS, they use MySQL 5.6 for data persistence.

The task is to run an hourly batch process and read data from every region to compute cross-regional reports which will be distributed to all the branches. This should be done in the shortest time possible. How will you build the DB architecture in order to meet the requirements?

A. For each regional deployment, use RDS MySQL with a master in the region and a read replica in the HQ region

B. For each regional deployment, use MySQL on EC2 with a master in the region and send hourly EBS snapshots to the HQ region

C. For each regional deployment, use RDS MySQL with a master in the region and send hourly RDS snapshots to the HQ region

D. For each regional deployment, use MySQL on EC2 with a master in the region and use S3 to copy data files hourly to the HQ region

Answer A.
Explanation: For this we will take an RDS instance as a master, because it will manage our database for us and since we have to read from every region, we’ll put a read replica of this instance in every region where the data has to be read from. Option C is not correct since putting a read replica would be more efficient than putting a snapshot, a read replica can be promoted if needed to an independent DB instance, but with a Db snapshot it becomes mandatory to launch a separate DB Instance.

Can I run more than one DB instance for Amazon RDS for free?

Yes. You can run more than one Single-AZ Micro database instance, that too for free! However, any use exceeding 750 instance hours, across all Amazon RDS Single-AZ Micro DB instances, across all eligible database engines and regions, will be billed at standard Amazon RDS prices. For example: if you run two Single-AZ Micro DB instances for 400 hours each in a single month, you will accumulate 800 instance hours of usage, of which 750 hours will be free. You will be billed for the remaining 50 hours at the standard Amazon RDS price.

Which AWS services will you use to collect and process e-commerce data for near real-time analysis?

A. Amazon ElastiCache

B. Amazon DynamoDB

C. Amazon Redshift

D. Amazon Elastic MapReduce

Answer B,C.
Explanation: DynamoDB is a fully managed NoSQL database service. DynamoDB, therefore can be fed any type of unstructured data, which can be data from e-commerce websites as well, and later, an analysis can be done on them using Amazon Redshift. We are not using Elastic MapReduce, since a near real time analyses is needed.

Can I retrieve only a specific element of the data, if I have a nested JSON data in DynamoDB?

Yes. When using the GetItem, BatchGetItem, Query or Scan APIs, you can define a Projection Expression to determine which attributes should be retrieved from the table. Those attributes can include scalars, sets, or elements of a JSON document.

A company is deploying a new two-tier web application in AWS. The company has limited staff and requires high availability, and the application requires complex queries and table joins. Which configuration provides the solution for the company’s requirements?

A. MySQL Installed on two Amazon EC2 Instances in a single Availability Zone

B. Amazon RDS for MySQL with Multi-AZ

C. Amazon ElastiCache

D. Amazon DynamoDB

Answer D.
Explanation: DynamoDB has the ability to scale more than RDS or any other relational database service, therefore DynamoDB would be the apt choice.

What happens to my backups and DB Snapshots if I delete my DB Instance?

When you delete a DB instance, you have an option of creating a final DB snapshot, if you do that you can restore your database from that snapshot. RDS retains this user-created DB snapshot along with all other manually created DB snapshots after the instance is deleted, also automated backups are deleted and only manually created DB Snapshots are retained.

Which of the following use cases are suitable for Amazon DynamoDB? Choose 2 answers

A. Managing web sessions.

B. Storing JSON documents.

C. Storing metadata for Amazon S3 objects.

D. Running relational joins and complex updates.

Answer C,D.
Explanation: If all your JSON data have the same fields eg [id,name,age] then it would be better to store it in a relational database, the metadata on the other hand is unstructured, also running relational joins or complex updates would work on DynamoDB as well.

How can I load my data to Amazon Redshift from different data sources like Amazon RDS, Amazon DynamoDB and Amazon EC2?

You can load the data in the following two ways:

You can use the COPY command to load data in parallel directly to Amazon Redshift from Amazon EMR, Amazon DynamoDB, or any SSH-enabled host.
AWS Data Pipeline provides a high performance, reliable, fault tolerant solution to load data from a variety of AWS data sources. You can use AWS Data Pipeline to specify the data source, desired data transformations, and then execute a pre-written import script to load your data into Amazon Redshift.

Your application has to retrieve data from your user’s mobile every 5 minutes and the data is stored in DynamoDB, later every day at a particular time the data is extracted into S3 on a per user basis and then your application is later used to visualize the data to the user. You are asked to optimize the architecture of the backend system to lower cost, what would you recommend?

A. Create a new Amazon DynamoDB (able each day and drop the one for the previous day after its data is on Amazon S3.

B. Introduce an Amazon SQS queue to buffer writes to the Amazon DynamoDB table and reduce provisioned write throughput.

C. Introduce Amazon Elasticache to cache reads from the Amazon DynamoDB table and reduce provisioned read throughput.

4. Write data directly into an Amazon Redshift cluster replacing both Amazon DynamoDB and Amazon S3.

Answer C.
Explanation: Since our work requires the data to be extracted and analyzed, to optimize this process a person would use provisioned IO, but since it is expensive, using a ElastiCache memory instead to cache the results in the memory can reduce the provisioned read throughput and hence reduce cost without affecting the performance.

You are running a website on EC2 instances deployed across multiple Availability Zones with a Multi-AZ RDS MySQL Extra Large DB Instance. The site performs a high number of small reads and writes per second and relies on an eventual consistency model. After comprehensive tests you discover that there is read contention on RDS MySQL. Which are the best approaches to meet these requirements? (Choose 2 answers)

A. Deploy ElastiCache in-memory cache running in each availability zone

B. Implement sharding to distribute load to multiple RDS MySQL instances

C. Increase the RDS MySQL Instance size and Implement provisioned IOPS

D. Add an RDS MySQL read replica in each availability zone

Answer A,C.
Explanation: Since it does a lot of read writes, provisioned IO may become expensive. But we need high performance as well, therefore the data can be cached using ElastiCache which can be used for frequently reading the data. As for RDS since read contention is happening, the instance size should be increased and provisioned IO should be introduced to increase the performance.

A startup is running a pilot deployment of around 100 sensors to measure street noise and air quality in urban areas for 3 months. It was noted that every month around 4GB of sensor data is generated. The company uses a load balanced auto scaled layer of EC2 instances and a RDS database with 500 GB standard storage. The pilot was a success and now they want to deploy at least 100K sensors which need to be supported by the backend. You need to store the data for at least 2 years to analyze it. Which setup of the following would you prefer?

A. Add an SQS queue to the ingestion layer to buffer writes to the RDS instance

B. Ingest data into a DynamoDB table and move old data to a Redshift cluster

C. Replace the RDS instance with a 6 node Redshift cluster with 96TB of storage

D. Keep the current architecture but upgrade RDS storage to 3TB and 10K provisioned IOPS

Answer C.
Explanation: A Redshift cluster would be preferred because it easy to scale, also the work would be done in parallel through the nodes, therefore is perfect for a bigger workload like our use case. Since each month 4 GB of data is generated, therefore in 2 year, it should be around 96 GB. And since the servers will be increased to 100K in number, 96 GB will approximately become 96TB. Hence option C is the right answer.

Suppose you have an application where you have to render images and also do some general computing. From the following services which service will best fit your need?

A. Classic Load Balancer

B. Application Load Balancer

C. Both of them

D. None of these

Answer B.
Explanation: You will choose an application load balancer, since it supports path based routing, which means it can take decisions based on the URL, therefore if your task needs image rendering it will route it to a different instance, and for general computing it will route it to a different instance.

What is the difference between Scalability and Elasticity?

Scalability is the ability of a system to increase its hardware resources to handle the increase in demand. It can be done by increasing the hardware specifications or increasing the processing nodes.

Elasticity is the ability of a system to handle increase in the workload by adding additional hardware resources when the demand increases (same as scaling) but also rolling back the scaled resources, when the resources are no longer needed. This is particularly helpful in Cloud environments, where a pay per use model is followed.

How will you change the instance type for instances which are running in your application tier and are using Auto Scaling. Where will you change it from the following areas?

A. Auto Scaling policy configuration

B. Auto Scaling group

C. Auto Scaling tags configuration

D. Auto Scaling launch configuration

Answer D.
Explanation: Auto scaling tags configuration, is used to attach metadata to your instances, to change the instance type you have to use auto scaling launch configuration.

You have a content management system running on an Amazon EC2 instance that is approaching 100% CPU utilization. Which option will reduce load on the Amazon EC2 instance?

A. Create a load balancer, and register the Amazon EC2 instance with it

B. Create a CloudFront distribution, and configure the Amazon EC2 instance as the origin

C. Create an Auto Scaling group from the instance using the CreateAutoScalingGroup action

D. Create a launch configuration from the instance using the CreateLaunchConfigurationAction

Answer A.
Explanation: Creating alone an autoscaling group will not solve the issue, until you attach a load balancer to it. Once you attach a load balancer to an autoscaling group, it will efficiently distribute the load among all the instances. Option B – CloudFront is a CDN, it is a data transfer tool therefore will not help reduce load on the EC2 instance. Similarly, the other option – Launch configuration is a template for configuration which has no connection with reducing loads.

When should I use a Classic Load Balancer and when should I use an Application load balancer?

A Classic Load Balancer is ideal for simple load balancing of traffic across multiple EC2 instances, while an Application Load Balancer is ideal for microservices or container-based architectures where there is a need to route traffic to multiple services or load balance across multiple ports on the same EC2 instance.

What does Connection draining do?

A. Terminates instances which are not in use.

B. Re-routes traffic from instances which are to be updated or failed a health check.

C. Re-routes traffic from instances which have more workload to instances which have less workload.

D. Drains all the connections from an instance, with one click.

Answer B.
Explanation: Connection draining is a service under ELB which constantly monitors the health of the instances. If any instance fails a health check or if any instance has to be patched with a software update, it pulls all the traffic from that instance and reroutes them to other instances.

When an instance is unhealthy, it is terminated and replaced with a new one, which of the following services does that?

A. Sticky Sessions

B. Fault Tolerance

C. Connection Draining

D. Monitoring

Answer B.
Explanation: When ELB detects that an instance is unhealthy, it starts routing incoming traffic to other healthy instances in the region. If all the instances in a region becomes unhealthy, and if you have instances in some other availability zone/region, your traffic is directed to them. Once your instances become healthy again, they are rerouted back to the original instances.

What are lifecycle hooks used for in Autoscaling?

A. They are used to do health checks on instances

B. They are used to put an additional wait time to a scale in or scale out event.

C. They are used to shorten the wait time to a scale in or scale out event

D. None of these

Answer B.
Explanation: Lifecycle hooks are used for putting wait time before any lifecycle action i.e launching or terminating an instance happens. The purpose of this wait time, can be anything from extracting log files before terminating an instance or installing the necessary softwares in an instance before launching it.

A user has setup an Auto Scaling group. Due to some issue the group has failed to launch a single instance for more than 24 hours. What will happen to Auto Scaling in this condition?

A. Auto Scaling will keep trying to launch the instance for 72 hours

B. Auto Scaling will suspend the scaling process

C. Auto Scaling will start an instance in a separate region

D. The Auto Scaling group will be terminated automatically

Answer B.
Explanation: Auto Scaling allows you to suspend and then resume one or more of the Auto Scaling processes in your Auto Scaling group. This can be very useful when you want to investigate a configuration problem or other issue with your web application, and then make changes to your application, without triggering the Auto Scaling process.

You have an EC2 Security Group with several running EC2 instances. You changed the Security Group rules to allow inbound traffic on a new port and protocol, and then launched several new instances in the same Security Group. The new rules apply:

A. Immediately to all instances in the security group.

B. Immediately to the new instances only.

C. Immediately to the new instances, but old instances must be stopped and restarted before the new rules apply.

D. To all instances, but it may take several minutes for old instances to see the changes.

Answer A.
Explanation: Any rule specified in an EC2 Security Group applies immediately to all the instances, irrespective of when they are launched before or after adding a rule.

To create a mirror image of your environment in another region for disaster recovery, which of the following AWS resources do not need to be recreated in the second region? ( Choose 2 answers )

A. Route 53 Record Sets

B. Elastic IP Addresses (EIP)

C. EC2 Key Pairs

D. Launch configurations

E. Security Groups

Answer A.
Explanation: Route 53 record sets are common assets therefore there is no need to replicate them, since Route 53 is valid across regions

A customer wants to capture all client connection information from his load balancer at an interval of 5 minutes, which of the following options should he choose for his application?

A. Enable AWS CloudTrail for the loadbalancer.

B. Enable access logs on the load balancer.

C. Install the Amazon CloudWatch Logs agent on the load balancer.

D. Enable Amazon CloudWatch metrics on the load balancer.

Answer A.
Explanation: AWS CloudTrail provides inexpensive logging information for load balancer and other AWS resources This logging information can be used for analyses and other administrative work, therefore is perfect for this use case.

A customer wants to track access to their Amazon Simple Storage Service (S3) buckets and also use this information for their internal security and access audits. Which of the following will meet the Customer requirement?

A. Enable AWS CloudTrail to audit all Amazon S3 bucket access.

B. Enable server access logging for all required Amazon S3 buckets.

C. Enable the Requester Pays option to track access via AWS Billing

D. Enable Amazon S3 event notifications for Put and Post.

Answer A.
Explanation: AWS CloudTrail has been designed for logging and tracking API calls. Also this service is available for storage, therefore should be used in this use case.

Which of the following are true regarding AWS CloudTrail? (Choose 2 answers)

A. CloudTrail is enabled globally

B. CloudTrail is enabled on a per-region and service basis

C. Logs can be delivered to a single Amazon S3 bucket for aggregation.

D. CloudTrail is enabled for all available services within a region.

Answer B,C.
Explanation: Cloudtrail is not enabled for all the services and is also not available for all the regions. Therefore, option B is correct, also the logs can be delivered to your S3 bucket, hence C is also correct.

What happens if CloudTrail is turned on for my account but my Amazon S3 bucket is not configured with the correct policy?

CloudTrail files are delivered according to S3 bucket policies. If the bucket is not configured or is misconfigured, CloudTrail might not be able to deliver the log files.

How do I transfer my existing domain name registration to Amazon Route 53 without disrupting my existing web traffic?

You will need to get a list of the DNS record data for your domain name first, it is generally available in the form of a “zone file” that you can get from your existing DNS provider. Once you receive the DNS record data, you can use Route 53’s Management Console or simple web-services interface to create a hosted zone that will store your DNS records for your domain name and follow its transfer process. It also includes steps such as updating the nameservers for your domain name to the ones associated with your hosted zone. For completing the process you have to contact the registrar with whom you registered your domain name and follow the transfer process. As soon as your registrar propagates the new name server delegations, your DNS queries will start to get answered.

Which of the following services you would not use to deploy an app?

A. Elastic Beanstalk

B. Lambda

C. Opsworks

D. CloudFormation

Answer B.
Explanation: Lambda is used for running server-less applications. It can be used to deploy functions triggered by events. When we say serverless, we mean without you worrying about the computing resources running in the background. It is not designed for creating applications which are publicly accessed.

How does Elastic Beanstalk apply updates?

A. By having a duplicate ready with updates before swapping.

B. By updating on the instance while it is running

C. By taking the instance down in the maintenance window

D. Updates should be installed manually

Answer A.
Explanation: Elastic Beanstalk prepares a duplicate copy of the instance, before updating the original instance, and routes your traffic to the duplicate instance, so that, incase your updated application fails, it will switch back to the original instance, and there will be no downtime experienced by the users who are using your application.

How is AWS Elastic Beanstalk different than AWS OpsWorks?

AWS Elastic Beanstalk is an application management platform while OpsWorks is a configuration management platform. BeanStalk is an easy to use service which is used for deploying and scaling web applications developed with Java, .Net, PHP, Node.js, Python, Ruby, Go and Docker. Customers upload their code and Elastic Beanstalk automatically handles the deployment. The application will be ready to use without any infrastructure or resource configuration.

In contrast, AWS Opsworks is an integrated configuration management platform for IT administrators or DevOps engineers who want a high degree of customization and control over operations.

What happens if my application stops responding to requests in beanstalk?

AWS Beanstalk applications have a system in place for avoiding failures in the underlying infrastructure. If an Amazon EC2 instance fails for any reason, Beanstalk will use Auto Scaling to automatically launch a new instance. Beanstalk can also detect if your application is not responding on the custom link, even though the infrastructure appears healthy, it will be logged as an environmental event (e.g a bad version was deployed) so you can take an appropriate action.

For a detailed discussion on this topic, please refer Lambda AWS blog.

How is AWS OpsWorks different than AWS CloudFormation?

OpsWorks and CloudFormation both support application modelling, deployment, configuration, management and related activities. Both support a wide variety of architectural patterns, from simple web applications to highly complex applications. AWS OpsWorks and AWS CloudFormation differ in abstraction level and areas of focus.

AWS CloudFormation is a building block service which enables customer to manage almost any AWS resource via JSON-based domain specific language. It provides foundational capabilities for the full breadth of AWS, without prescribing a particular model for development and operations. Customers define templates and use them to provision and manage AWS resources, operating systems and application code.

In contrast, AWS OpsWorks is a higher-level service that focuses on providing highly productive and reliable DevOps experiences for IT administrators and ops-minded developers. To do this, AWS OpsWorks employs a configuration management model based on concepts such as stacks and layers, and provides integrated experiences for key activities like deployment, monitoring, auto-scaling, and automation. Compared to AWS CloudFormation, AWS OpsWorks supports a narrower range of application-oriented AWS resource types including Amazon EC2 instances, Amazon EBS volumes, Elastic IPs, and Amazon CloudWatch metrics.

I created a key in Oregon region to encrypt my data in North Virginia region for security purposes. I added two users to the key and an external AWS account. I wanted to encrypt an object in S3, so when I tried, the key that I just created was not listed. What could be the reason?

A. External aws accounts are not supported.

B. AWS S3 cannot be integrated KMS.

C. The Key should be in the same region.

D. New keys take some time to reflect in the list.

Answer C.
Explanation: The key created and the data to be encrypted should be in the same region. Hence the approach taken here to secure the data is incorrect.

A company needs to monitor the read and write IOPS for their AWS MySQL RDS instance and send real-time alerts to their operations team. Which AWS services can accomplish this?

A. Amazon Simple Email Service

B. Amazon CloudWatch

C. Amazon Simple Queue Service

D. Amazon Route 53

Answer B.
Explanation: Amazon CloudWatch is a cloud monitoring tool and hence this is the right service for the mentioned use case. The other options listed here are used for other purposes for example route 53 is used for DNS services, therefore CloudWatch will be the apt choice.

What happens when one of the resources in a stack cannot be created successfully in AWS OpsWorks?

When an event like this occurs, the “automatic rollback on error” feature is enabled, which causes all the AWS resources which were created successfully till the point where the error occurred to be deleted. This is helpful since it does not leave behind any erroneous data, it ensures the fact that stacks are either created fully or not created at all. It is useful in events where you may accidentally exceed your limit of the no. of Elastic IP addresses or maybe you may not have access to an EC2 AMI that you are trying to run etc.

What automation tools can you use to spin up servers?

Any of the following tools can be used:

Roll-your-own scripts, and use the AWS API tools. Such scripts could be written in bash, perl or other language of your choice.
Use a configuration management and provisioning tool like puppet or its successor Opscode Chef. You can also use a tool like Scalr.
Use a managed solution such as Rightscale.

What is Amazon EC2?

EC2 is short for Elastic Compute Cloud, and it provides scalable computing capacity. Using Amazon EC2 eliminates the need to invest in hardware, leading to faster development and deployment of applications. You can use Amazon EC2 to launch as many or as few virtual servers as needed, configure security and networking, and manage storage. It can scale up or down to handle changes in requirements, reducing the need to forecast traffic. EC2 provides virtual computing environments called “instances.”

What Are Some of the Security Best Practices for Amazon EC2?

Security best practices for Amazon EC2 include using Identity and Access Management (IAM) to control access to AWS resources; restricting access by only allowing trusted hosts or networks to access ports on an instance; only opening up those permissions you require, and disabling password-based logins for instances launched from your AMI.

What is Amazon S3?

S3 is short for Simple Storage Service, and Amazon S3 is the most supported storage platform available. S3 is object storage that can store and retrieve any amount of data from anywhere. Despite that versatility, it is practically unlimited as well as cost-effective because it is storage available on demand. In addition to these benefits, it offers unprecedented levels of durability and availability. Amazon S3 helps to manage data for cost optimization, access control, and compliance.

Can S3 Be Used with EC2 Instances, and If Yes, How?

Amazon S3 can be used for instances with root devices backed by local instance storage. That way, developers have access to the same highly scalable, reliable, fast, inexpensive data storage infrastructure that Amazon uses to run its own global network of websites. To execute systems in the Amazon EC2 environment, developers load Amazon Machine Images (AMIs) into Amazon S3 and then move them between Amazon S3 and Amazon EC2.

Amazon EC2 and Amazon S3 are two of the best-known web services that make up AWS.

What Is Identity and Access Management (IAM) and How Is It Used?

Identity and Access Management (IAM) is a web service for securely controlling access to AWS services. IAM lets you manage users, security credentials such as access keys, and permissions that control which AWS resources users and applications can access.

What Is Amazon Virtual Private Cloud (VPC) and Why Is It Used?

A VPC is the best way of connecting to your cloud resources from your own data center. Once you connect your datacenter to the VPC in which your instances are present, each instance is assigned a private IP address that can be accessed from your data center. That way, you can access your public cloud resources as if they were on your own private network.

What Is Amazon Route 53?

Amazon Route 53 is a scalable and highly available Domain Name System (DNS). The name refers to TCP or UDP port 53, where DNS server requests are addressed.

What Is Cloudtrail and How Do Cloudtrail and Route 53 Work Together?

CloudTrail is a service that captures information about every request sent to the Amazon Route 53 API by an AWS account, including requests that are sent by IAM users. CloudTrail saves log files of these requests to an Amazon S3 bucket. CloudTrail captures information about all requests. You can use information in the CloudTrail log files to determine which requests were sent to Amazon Route 53, the IP address that the request was sent from, who sent the request, when it was sent, and more.

When Would You Prefer Provisioned IOPS over Standard Rds Storage?

You would use Provisioned IOPS when you have batch-oriented workloads. Provisioned IOPS delivers high IO rates, but it is also expensive. However, batch processing workloads do not require manual intervention.

How Do Amazon Rds, Dynamodb, and Redshift Differ from Each Other?

Amazon RDS is a database management service for relational databases. It manages patching, upgrading, and data backups automatically. It’s a database management service for structured data only. On the other hand, DynamoDB is a NoSQL database service for dealing with unstructured data. Redshift is a data warehouse product used in data analysis.

What Are the Benefits of AWS’s Disaster Recovery?

Businesses use cloud computing in part to enable faster disaster recovery of critical IT systems without the cost of a second physical site. The AWS cloud supports many popular disaster recovery architectures ranging from small customer workload data center failures to environments that enable rapid failover at scale. With data centers all over the world, AWS provides a set of cloud-based disaster recovery services that enable rapid recovery of your IT infrastructure and data.

What is auto-scaling?

Ans. Auto-scaling is a feature of AWS which allows you to configure and automatically provision and spin-up new instances without the need for your intervention.

What are the different types of cloud services?

Ans. Different types of cloud services are:

Software as a Service (SaaS)
Data as a Service (DaaS)
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)

What is Amazon S3?

Ans. Amazon S3 (Simple Storage Service) is an object storage with a simple web service interface to store and retrieve any amount of data from anywhere on the web.

What is SimpleDB?

Ans. It is a structured data store that supports indexing and data queries to both EC2 and S3.

What is an AMI?

Ans. AMI (Amazon Machine Image) is a snapshot of the root filesystem.

What is the type of architecture, where half of the workload is on the public load while at the same time half of it is on the local storage?

Ans. Hybrid cloud architecture.

Can I vertically scale an Amazon instance? How do you do it?

Ans. Yes. Spinup a new larger instance than the one you are running, then pause that instance to detach the root EBS volume from this server and discard. After that, stop the live instance and detach its root volume. Note the unique device ID and attach that root volume to the new server, and start again. This way you will have scaled vertically.

How can you send a request to Amazon S3?

Ans. You can send requests by using the REST API or the AWS SDK wrapper libraries that wrap the underlying Amazon S3 REST API.

How many buckets can be created in AWS by default?

Ans. By default, 100 buckets can be created.

Should encryption be used for S3?

Ans. Encryption should be considered for sensitive data as S3 is a proprietary technology.

What are the various AMI design options?

Ans. Fully Baked AMI, JeOS (just enough operating system) AMI, and Hybrid AMI.

What is Geo Restriction in CloudFront?

Ans. Geo restriction, also known as geo-blocking, is used to prevent users in specific geographic locations from accessing content that you’re distributing through a CloudFront web distribution.

Explain what is a T2 instance?

Ans. T2 instances are designed to provide moderate baseline performance and the capability to burst to higher performance as required by workload.

What is AWS Lambda?

Ans. AWS Lambda is a compute service that lets you run code in the AWS Cloud without provisioning or managing servers.

What is a Serverless application in AWS?

Ans. The AWS Serverless Application Model (AWS SAM) extends AWS CloudFormation to provide a simplified way of defining the Amazon API Gateway APIs, AWS Lambda functions, and Amazon DynamoDB tables needed by your serverless application.

What is the use of Amazon ElastiCache?

Ans. Amazon ElastiCache is a web service that makes it easy to deploy, operate, and scale an in-memory data store or cache in the cloud.

Explain how the buffer is used in Amazon web services?

Ans. The buffer is used to make the system more robust to manage traffic or load by synchronizing different components.

Differentiate between stopping and terminating an instance

Ans. When an instance is stopped, the instance performs a normal shutdown and then transitions to a stopped state.

When an instance is terminated, the instance performs a normal shutdown, then the attached Amazon EBS volumes are deleted unless the volume’s deleteOnTermination attribute is set to false.

Is it possible to change the private IP addresses of an EC2 while it is running/stopped in a VPC?

Ans. The primary private IP address cannot be changed. Secondary private addresses can be unassigned, assigned or moved between interfaces or instances at any point.

Give one instance where you would prefer Provisioned IOPS over Standard RDS storage?

Ans. When you have batch-oriented workloads.

What is AWS?

Ans. It is the acronym for Amazon Web Service. It is a comprehensive, evolving cloud-computing platform of Amazon. It is also known as Infrastructure as a Service (IaaS).

What is the boot time for an instance store backed instance?

Ans. The boot time for an Amazon Instance Store -Backed AMI is less than 5 minutes.

Will you use encryption for S3?

Ans. Yes I will, as it is a proprietary technology. It’s always a good idea to consider encryption for sensitive data on S3.

What is Identity Access Management and how is it used?

Ans. It is a web service, which is used to securely control access to AWS services. Identity Access Management allows you to manage users, security credentials, and resource permissions.

Explain the advantages of AWS’s Disaster Recovery (DR) solution.

Ans. Following are the advantages of AWS’s Disaster Recovery (DR) solution:

AWS offers a cost-effective backup, storage, and DR solution, helping the companies to reduce their capital expenses
Fast setup time and greater productivity gains
AWS helps companies to scale up even during seasonal fluctuations
It seamlessly replicates on-premises data to the cloud
Ensures fast retrieval of files

How do you send requests to Amazon S3?

Ans. We can achieve this by using the REST API or the AWS SDK wrapper libraries. These elements wrap the underlying Amazon S3 REST API.

What is DynamoDB?

Ans. DynamoDB is a fully managed proprietary NoSQL database service, supporting key-value and document data structures. It can be used when a fast and flexible NoSQL database with a flexible data model and reliable performance is required.

What is Redshift?

Ans. Redshift is a petabyte size data warehouse service by Amazon. It is easy, cost-effective, and scalable, and can be fully configured to analyze your entire data with the existing business intelligence tools.

Which data centers are deployed for cloud computing?

Ans. There are two data centers in cloud computing, one is Containerized Data centers, and another is Low-Density Data Centers.

Which AWS services will you use to collect and process e-commerce data for near real-time analysis?

Ans. Following are the AWS services will be used to collect and process e-commerce data for near real-time analysis:

Amazon DynamoDB
Amazon ElastiCache
Amazon Elastic MapReduce
Amazon Redshift

What is SQS?

Ans. Simple Queue Service (SQS) is a distributed message queuing service that acts as a mediator for two controllers. It is a pay-per-use web service.

What are the popular DevOps tools?

Ans. The popular DevOps tools are –

Chef, Puppet, Ansible, and SaltStack – Deployment and Configuration Management Tools
Docker – Containerization Tool
Git – Version Control System Tool
Jenkins – Continuous Integration Tool
Nagios – Continuous Monitoring Tool
Selenium – Continuous Testing Tool

What is Hybrid cloud architecture?

Ans. It is a type of architecture where the workload is divided into two halves among which one is on public load and the other is on the local storage. It is a mix of on-premises, private cloud and third-party, and public cloud services between two platforms.

What Is Configuration Management?

Ans. Configuration management is used to manage the configuration of systems and the services that they provide entirely through code. This is a repetitive and consistent process that is achieved through –

Intuitive command-line interface
Lightweight and easily readable domain-specific language (DSL)
Comprehensive REST-based API

What are the features of Amazon cloud search?

Ans. Amazon cloud search features:

AutoComplete advice
Boolean Searches
Entire text search
Faceting term boosting
Highlighting
Prefix Searches
Range searches

How do you access the data on EBS in AWS?

Ans. Data cannot be accessible on EBS directly by a graphical interface in AWS. This process includes assigning the EBS volume to an EC2 instance. Here, when the volume is connected to any of the instances either it can be Windows or Unix, you can write or read on it. First, you can take a screenshot from the volumes with data and build unique volumes with the help of screenshots. Here, each EBS volume can be attached to only a single instance.

What is the difference between Amazon RDS, Redshift, and Dynamo DB?

Ans. Differentiate between Amazon RDS, Redshift and Dynamo DB:

Features	Amazon RDS	Redshift	Dynamo DB
Primary Usage Feature	Conventional Databases	Datawarehouse	Database for dynamically modified data
Database Engine	MySQL, Oracle DB, SQL Server, Amazon Aurora, Postgre SQL	Redshift	NoSQL
Computing Resources	Instances with 64 vCPU and 244 GB RAM	Nodes with vCPU and 244 GB RAM	Not specified, SaaS-Software as a Service.
Multi A-Z Replication	Additional Service	Manual	In-built
Maintenance Window	30 minutes every week.	30 minutes every week.	No impact

If you hold half of the workload on the public cloud whereas different half is on local storage, in such case what type of architecture can be used?

Ans. In such cases, the hybrid cloud architecture can be used.

Mention the possible connection issues you encounter when connecting to an EC2 instance?

Ans. Following are the possible connection issues you encounter when connecting to an EC2 instance:

Server refused key
Connection timed out
Host key not found; permission denied.
Unprotected private key file
No supported authentication method available

What are lifecycle hooks in AWS autoscaling?

Ans. Lifecycle hooks can be added in the autoscaling group. It enables you to perform custom actions by pausing instances where the autoscaling group terminates and launches them. Every auto-scaling group consists of multiple lifecycle hooks.

What is a Hypervisor?

Ans. A Hypervisor is a type of software used to create and run virtual machines. It integrates physical hardware resources into a platform which are distributed virtually to each user. Hypervisor includes Oracle Virtual Box, Oracle VM for x86, VMware Fusion, VMware Workstation, and Solaris Zones.

Explain the use of Route Table?

Ans. Route Table is used to control the network traffic where each subnetwork of VPC is associated with a route table. Route table consists of a large number of information, whereas connecting multiple subnetworks to a route table is also feasible.

What is the use of Connection Draining?

Ans. Connection Draining is a process used to support load balancer. It keeps tracking all of the instances if any instance fails connection draining drag all the traffic from that specific failed instance and re-route the traffic to the active instances.

Explain the role of AWS CloudTrail?

Ans. AWS CloudTrail is a service designed for monitoring and auditing actions of API calls. With AWS CloudTrail, the user can monitor and retain account activity connected with actions covering the AWS infrastructure.peed

Explain the use of Amazon Transfer Acceleration Service?

Ans. Amazon Transfer Acceleration Service is used to boost your data transfer with the help of advanced network paths. It also transfers files fast and secures between your client and an S3 bucket.

How to update AMI tools at the Boot-Time on Linux?

Ans. To update AMI tools at the Boot-Time on Linux:

# Update to Amazon EC2 AMI tools

echo ” + Updating EC2 AMI tools”

yum update -y aws-amitools-ec2

echo ” + Updated EC2 AMI tools”

How does Encryption is done in S3?

Ans. Encryption is done in S3 by using:

In Transit: SSL/TLS
At Rest
Server-Side in Encryption
S3 Managed Keys – SSE-S3
AWS Key Management Service, Managed of Keys – SSE-KMS
Server-Side Encryption with Customer Provided Keys – SSE-C
Client-Side Encryptions

Explain Amazon Route 53?

Ans. Amazon Route 53 is defined as a scalable and highly available Domain Name System (DNS). It is created for the benefit of developers and companies to route end users to internet applications by translating names which is the most reliable and cost-effective process.

What are the pricing models for EC2 instances?

Ans. Following are the different pricing model for EC2 instances:

Dedicated
Reserved
On-demand
Scheduled
Spot

What are the parameters for S3 pricing?

Ans. Following are the parameters for S3 pricing:

Transfer acceleration
Number of requests you make
Storage management
Data transfer
Storage used

What are the best security practices for Amazon EC2?

Ans. Below are the steps to follow for secure Amazon EC2 best practices:

Using AWS identity and access management to manage access to the AWS resource.
Exclude access by initializing trusted host or network to access ports on our instance.
Evaluate the rules in your security groups.
Stop passport login, for instance, opened from your AMI

How do you add a current instance to a new Autoscaling group?

Ans. Follow the steps to know how you can add an existing instance to a new auto-scaling group:

Launch EC2 console
Under instances select your instance
Choose the action, instance setting and attach to the auto-scaling group
Select a new auto-scaling group
Comply with this group to the instance
If needed edit the instance
In the end, you can add the instance to a new auto-scaling group successfully.

Explain S3’s default storage class?

The default storage class in S3 is a Standard that is frequently accessed.

What do you understand by the roles?

In AWS, Roles are providing permissions to the entities which you can trust within your account. Roles and users are similar to each other. However, while working with the resources it does not require creating the username and password, unlike users.

Describe the term edge locations?

The contents are cached in an area which is called the Edge location. Whenever a user tries to access any content, the content will be automatically searched in the edge location.

Explain VPC?

VPC is an abbreviation for Virtual Private Cloud. It helps in the customization of the networking configuration.VPC is a network in the cloud that is logically isolated from the other network. VPC provides you with IP address range, subnet, internet gateways, and security groups.

What is a snowball?

A data transport option is called Snowball. Snowball uses source appliances for huge data in and out of AWS. Snowball helps in transferring a massive amount of data in different places. It is helpful in reducing networking costs.

What is a redshift?

Redshift is a big data warehouse product that is fast and powerful, fully managed data warehouse service in the cloud.

Enlist the advantages of auto-scaling?

The advantages of auto-scaling are:

It offers tolerance for fault.
Proper availability
Effective cost management

Define subnet?

A subnet is a huge segment of IP Addresses divided into chunks.

Name the different types of instances?

Ans. Following are the different types of instances:

Memory-optimized
Accelerated computing
Computer-optimized
General-purpose
Storage optimize

Mention the different layers of cloud architecture?

Ans. Following are the different types of layers in cloud architecture:

Node controller
Cloud controller
Cluster controller
Storage controller

What are the edge locations?

Ans. An edge location is defined as the place where the content is used to be cached. If a user finds to access some content, then the given content will be searched in the edge location. If it is not available, then the content will be accessible from the origin location, and a copy will be stored.

What are NAT gateways?

Ans. NAT(Network Address Translation) used to enable instances in a private subnet that helps to connect to the internet but avoid the internet from starting a connection with those instances.

Name the database types in RDS?

Ans. Following are the types of databases in RDS:

MYSQL server
Postgresql
SQL server
Aurora
Oracle
MariaDB

What are EBS Volumes?

Ans. Elastic Block Store(EBS) is a block-level storage device, wherein each block acts as a separate hard drive. These volumes are used with EC2 instances, and each EBS volume can be attached to only one EC2 instance.

Name the types of backups in the RDS database?

Ans. Following are two types of backups in the RDS database:

Automated backups
Manual backups

Mention the benefits of auto-scaling?

Ans. Following are some of the benefits of auto-scaling:

Better availability
Better fault tolerance
Better cost management

How can Amazon SQS be used?

Ans. Amazon SQS (Simple Queue Service) is a message passing mechanism used to make a connection between different connectors that are connected with each other. It is also used as an interlink between multiple components of Amazon.

Name some examples of the DB engine that is used in AWS RDS?

Ans. Below are the few examples of DB engine that is used in AWS RDS:

MS-SQL DB
MYSQL DB
Maria DB
Oracle DB
Postgre DB

Is it possible to minimize an EBS volume?

Ans. No, it is not possible to minimize volume, we can only increase it.

Is there any possible way to restore the deleted S3 bucket?

Ans. We can only restore it when versioning is enabled.

Name the types of AMI provided by AWS?

Ans. Following are two types of AMI provided by AWS:

Instance Store backed
EBS Backed

How terminating and stopping an instance are the different processes?

Ans: Instance performs a regular shut down when it is stopped. It then performs transactions. As the entire EBS volumes remain present, it is possible to start the instance anytime again when you want. The best thing is when the instance remains in the stopped state, users don’t need to pay for that particular time.

Upon termination, the instance performs a regular shutdown. After this, the Amazon EBS volumes start deleting. You can stop them from deleting simply by setting the “Delete on Termination” to false. Because the instance gets deleted, it is not possible to run it again in the future.

At what value the instance’s tenancy attribute is to be set for running it on single-tenant hardware?

Ans: It should be set to the Dedicated Instance for smoothly running it on single-tenant hardware. Other values are not valid for this operation.

When there is a need to acquire costs with an EIP?

Ans: EIP stands for Elastic Internet Protocol address. Costs are acquired with an EIP when the same is associated and allocated with a stopped instance. In case only one Elastic IP is there with the instance you are running, you will not be charged for it. However, in case the IP is attached to a stopped instance or doesn’t attach to any instance, you need to pay for it.

What is the difference between an On-demand instance and a Spot Instance?

Ans: Spot instance is similar to bidding and the price of bidding is known as the Spot price. Both Spot and on-demand instances are pricing models. In both of them, there is no commitment to the exact time from the user end. Without upfront payment, Spot instance can be used while the same is not possible in case of an On-demand instance. It needs to be purchased first and the price is higher than the spot instance.

Name the Instances types for which the Multi AZ-deployments are available

Ans: The Multi-AZ deployments are simply available for all the instances irrespective of their types and use.

When Instances are launched in the cluster placement group, what are the network performance parameters that can be expected?

Ans: Actually, it depends largely on the type of Instance, as well as on the specification of network performance. In case they are started in the placement group, you can expect the following parameters

20 Gbps in case of full-duplex or when in multi-flow
Up to 10 Gbps in case of a single-flow
Outside the group, the traffic is limited to 5 Gbps.

Which Instance can be used for deploying a 4-node cluster of Hadoop in Amazon Web Services?

Ans: It is possible to use i2.large or c4.8x large Instance for this. However, c.4bx needs a better configuration on the PC. At some stages, you can simply launch the EMR for the automatic configuration of the server for you. Data can be put into S3 and EMR is able to pick it from there. It will load your data in S3 again after processing it.

What do you know about an AMI?

Ans: AMI is generally considered as the template for the virtual machines. While starting an instance, it is possible to select pre-baked AMI’s that AMI commonly have in them. However, not all AMIs are available to use free of cost. It is also possible to have a customized AMI and the most common reason to use the same is nothing but saving the space on Amazon Web Service. This is done in case a group of software is not required and AMI can simply be customized in that situation.

Tell us various parameters that you should consider while selecting the Availability Zone?

Ans: For this, there are various parameters that should be kept in mind. Some of them are the performance, pricing, latency, as well as response time.

What do you know about the private and the public address?

Ans: Well, the private address is directly correlated with the Instance and is sent back to EC2 only in case it is terminated or stopped. On the other side, the public address is correlated in a similar manner with the Instance until it is terminated or stopped. It is possible to replace the public address with Elastic IP. This is done when a user wants it to stay with Instance as per the need.

Is it possible to run the multiple websites on the EC2 server with one Elastic IP address?

Ans: No, it’s not possible. We need more than one elastic IP in such a case.

Name the practices available when it comes to securing the Amazon EC2?

Ans: This can be done through several practices. A review of the protocols in the security group is to be monitored regularly and it is to be ensured that the principle of least is applicable over there. Next practice is using access management and AWS identity for controlling and securing access. Access is to be restricted to hosts and networks that are trusted. In addition to this, only those permissions are opened which are required and not any other. It would also be good to disable password-based logins for the instances.

What are the states available in Processor State Control?

Ans: It contains two states and they are:

P-state- It has different levels starting from P0 to P15. P0 represents the highest frequency and P15 represents the lowest frequency.
C-State- Its levels are from C0 to C6 where C6 is the strongest state for the processor.

It is possible to customize these states in a few EC2 instances which enable users to customize processor as per need.

Name the approach that restricts the access of third-party software in Storage Service to S3 bucket named “Company Backup”?

Ans: There is a policy named custom IAM user policy that limits the S3 API in the bucket

It is possible to use S3 with EC2 instances. How?

Ans: Yes, it’s possible if the instances are having root devices and they are supported by the instance storage. Amazon uses one of the very reliable, scalable, fast, as well as inexpensive networks for hosting all their websites. With the help of S3, it is possible for the developers to get access to the same network. There are tools available in AMI’s that users can consider when it comes to executing systems in EC2. The files can simply be moved between EC2 and S3.

Is it possible to speed up data transfer in Snowball? How?

Ans: Yes, it’s possible. There are certain methods for this. First is simply copying from different hosts to the same Snowball. Another method is by creating a group of smaller files. This is helpful as it cut down the encryption issues. Data transfer can also be enhanced by simply copy operations again and again at the same time provided the workstation is capable to bear the load.

Name the method that you will use for moving the data to a very long distance?

Ans: Amazon Transfer Acceleration is a good option. There are other options such as Snowball but the same doesn’t support data transfer over a very long distance such as among continents. Amazon Transfer Acceleration is the best option because it simply throttles the data with the help of network channels that are optimized and assures very fast data transfer speed.

What will happen if you launch the instances in Amazon VPC?

Ans: This is a common approach that is considered when it comes to launching EC2 instances. Each instance will be having a default IP addressed if the instances are launched in Amazon VPC. This approach is also considered when you need to connect cloud resources with the data centers.

Is it possible to establish a connection between the Amazon cloud and a corporate data center? How?

Ans: Yes, it’s possible. For this, first, a Virtual Private Network is to be established between the Virtual private cloud and the organization’s network. After this, the connection can simply be created and data can be accessed reliably.

Why is it not possible to change or modify the private IP address of an EC2 instance when it is running?

Ans: This is because the private IP remains with the instance permanently or through the life cycle. Thus it cannot be changed or modified. However, it is possible to change the secondary private address.

Why are subnets required to be created?

Ans: They are needed to utilize the network with a large number of hosts in a reliable manner. Of course, it’s a daunting task to manage them all. By dividing the network into smaller subnets, it can be made simpler and the chances of errors or data loss can be eliminated up to an excellent extent.

Is it possible to attach multiple subnets to a routing table?

Ans: Yes, it’s possible. They are generally considered when it comes to routing the network packets. Actually, when a subnet has several route tables, it can create confusion about the destination of these packets. It is because of no other reason than this there should be only one route table in a subnet. The route table can have unlimited records and therefore it is possible to attach multiple subnets to a routeing table.

What happens if the AWS Direct Connect fails to perform its function?

Ans: It is recommended to backup the Direct Connect as in case of a power failure you can lose everything. Enabling BFD i.e. Bi-directional Forwarding Detection can avoid the issues. In case no backup is there, VPC traffic would be dropped and you need to start everything from the initial point again.

What will happen if the content is absent in CloudFront and a request is made?

Ans: CloudFront sent the content from the primary server directly to the cache memory of the edge location. As it’s a content delivery system, it tries to cut down the latency and that is why it will happen. If the operation is performed for the second time, the data would directly be served from the cache location.

Is it possible to use direct connect for transferring the objects from the data centers?

Ans: Yes, it is possible. Cloud Front simply supports custom origins and thus this task can be performed. However, you need to pay for it depending on the data transfer rates.

When there is a need to consider Provisional IOPS than Standard RDS storage in AWS?

Ans: In case you have hosts that are batch oriented, there is a need for the same. The reason is provisional IOPs are known to provide faster IO rates. However, they are a bit expensive when compared to other options. Hosts with batch processing don’t need manual intervention from the users. It is because of this reason provisional IOPs are preferred.

Compare RDS, Redshift, and DynamoDB?

Ans: RDS is basically a DBM service that is considered for relational databases. It is useful for upgrading and patching of data automatically. However, it works for structured data only. On the other side, Redshift is used in Data analysis. It is basically a data warehouse service. When it comes to DynamoDB, it is considered when there is a need to deal with unstructured data. RDS is quick as compared to both Redshift and DynamoDB. All of them are powerful enough to perform their tasks without errors.

Is it possible to run multiple DB for Amazon RDS free of cost?

Ans: Yes, it’s possible. However, there is a strict upper limit of 750 hours of usage post which everything will be billed as per RDS prices. In case you exceed the limit, you will be charged only for the extra hours beyond 750.

Name the services which can be used for collecting and processing e-commerce data?

Ans: Amazon Redshift and Amazon DynamoDB are the best options. Generally, data from e-commerce websites are in an unstructured manner. As both of them are useful for unstructured data, we can use them.

What is the significance of Connection Draining?

Ans: There are certain stages when the traffic needs to be re-verified for bugs unwanted files that raise security concerns. Connection draining helps in re-routing the traffic that comes from the Instances and which is in a queue to be updated.

What is AWS?

AWS stands for Amazon Web Service; it is also known as a cloud computing platform as it is a collection of remote computing services. This new domain of cloud computing is also known as Infrastructure as a Service or IaaS.

Describe the key components of AWS?

The key components of AWS are:

Simple Storage Device or (S3): It is the most widely used AWS service and also a storage device.
Route 53: It is called a DNS Web Service.
Simple E-mail Service: It is used for sending an e-mail via regular SMTP or by using the RESTFUL API call.
Identity and Access Management: Its purpose is to provide identity management and enhanced security for a user’s AWS account.
Elastic Compute Cloud (EC2): The purpose of EC2 is to provide on-demand computing resources for hosting applications. It is convenient for unpredictable workloads.
Elastic Block Store (EBS): It offers determined storage volumes that connect to EC2 to allow you to endure data past the lifespan of a single Amazon EC2 instance.
Cloud Watch: It allows administrators to view and collect the key to monitoring AWS resources. Also, it can be used to set a notification alarm in case of trouble.

Explain S3?

S3 is the abbreviation for Simple Storage Service. S3 interface is used to store and retrieve numerous amount of data, at any time, and also from anywhere on the web. The payment model for S3 is known as “pay as you go.”

What is Amazon Machine Image?

Amazon Machine Image is AMI. AMI is a template providing the information (an application server, an operating system, and applications) required for launching an instance. That instance is a copy of the AMI which is running as a virtual server in the cloud. The instances from different AMIs are launched as per requirement.

Describe the relationship between an instance and AMI?

You can launch multiple types of instances from a single AMI. An instance type defines the host computer hardware which is used for your instance. Different computer and memory capabilities are provided by each instance type. Once an instance is launched, it resembles a traditional host, which is used for interaction as done with any computer.

What does an AMI include?

An AMI consists of the following things:

A template that is used as the base volume for the instance.
A block device mapping to determine the volumes to attach to the instance when it is launched.
Startup permissions decide which AWS accounts can leverage the AMI to start instances.

How to send a request to Amazon S3?

As Amazon S3 is a REST Service, by using the REST API or the AWS SDK wrapper libraries that wrap the elemental Amazon S3 REST API a request is sent.

Differentiate between Amazon S3 and EC2?

In AWS how many buckets can be created by default?

In each AWS account, you can create up to 100 buckets by default.

Explain the process to vertically scale on Amazon Instance?

The steps to vertically scale on Amazon instance are:

Upgrade from the current instance to a new larger instance.
Pause the previous instance and discard it by detaching the root web volumes from the servers.
Now stop the live instance and also detach its root volume.
Attach the root volume to the new server after you note the unique device ID.
And finally, restart it.

Describe the T2 instances?

T2 instances are designed such as to provide balanced baseline achievement and also it has the capacity to gust to higher achievement based on the requirement of the workload.

Which subnet should be preferred to launch database servers?

Among the private and public subnets in VPC, private subnet should be preferred ideally for launching the database servers.

Enlist few best Security practices for Amazon EC2?

Following are the best security practices for secure Amazon EC2:

To control access to your AWS resources using AWS identity and access management.
Limit the access to ports of instance by allowing only trusted hosts or networks.
Analyze the rules regularly in your security groups.
Open the permissions based on the requirement only.
Disable password-based login.

Explain the use of a buffer in Amazon web services?

To make the system more robust for managing the traffic or load by synchronizing different components the buffer is used. Generally, receiving and processing of the requests are in an unbalanced way by the components. But when the buffer is used, the components are balanced and work at the same speed to provide proper service.

What are the possible connection issues one might face while connecting to the instance?

While connecting instances the possible connection issues one might face are:

Connection Time out
User key unrecognizable by the server
Host key not found; permission denied
A private key file which is unprotected
Server refusing key or No support authentication method available
On Safari Browser Error using Mind Term
Error while using Mac OS X RDP Client

What do you mean by key-pairs in AWS?

The secured login information used for virtual machines is called as Key Pairs. For connecting to the instances, key-pairs containing a public-key and private-key are used.

Explain the different types of instances?

The different types of instances are:

General-purpose
Computer Optimized
Memory-Optimized
Storage Optimized
Accelerated Computing

Does Amazon VPC support the property of broadcast or multicast?

No, currently support for the property of broadcast or multicast is not provided by Amazon VPC.

How many Elastic IPs are can create an AWS account combined?

Five VPC Elastic IP addresses are necessary for creating the AWS account.

Is it possible to establish a Peering connection to a VPC in a different region?

No, the peering connection to a VPC is possible in only the same region.

Define SQL with reference to AWS?

SQL is called Simple Queues Services. It acts as a mediator for two controllers which helps in the distribution of the queuing service.

How many subnets can be used per VPC?

200 subnets per VPC can be used.

Categorize the DNS and Load Balancer service in cloud service?

DNS and Load Balancer services belong to the IAAS-storage cloud service.

Explain AWS Cloud Trail?

AWS Cloud Trail is a special tool for logging and tracking API calls. It also helps in auditing the S3 bucket access.

When was EC2 officially launched?

In the year 2006 EC2 was officially launched.

What do you understand by SimpleDB?

A data depository is a structured record that strengthens the data doubts and indexing of both S3 and EC2 is Simple DB.

Define Amazon ElasticCache?

A web service that is easy to deploy, scale, and store data in the cloud is Amazon ElasticCache.

Define AWS Lambda?

An Amazon computes service which permits you to run code in the AWS Cloud without controlling servers is AWS Lambda.

What types of AMI are provided by AWS?

AWS provides the following types of AMI:

Instance store backed
EBS backed

Which AWS service redundantly cache data and images?

AWS service which redundantly cache data and images are AWS Edge locations.

What do you mean by the term Geo Restriction in CloudFront?

Geo-restriction is a feature that helps us to prevent specific geographic locations users from accessing content that has been distributed through a CloudFront web distribution.

Explain Amazon EMR?

Amazon EMR is a survived cluster stage which is helpful in data structures as it illustrates the working before the intimation. Apache Spark and Apache Hadoop on Amazon Web Services are helpful in investigating data of a magnificent amount. Using Apache Hive the data for the analytics goals and marketing intellect workloads can be prepared. It also uses other relevant open-source designs.

Specify the boot time required for the instance stored backed AMI?

The boot time required for an Amazon instance store-backend AMI is less than 5 minutes.

Is there a requirement of an Internet gateway to use peering connections?

Yes, there is a requirement of an Internet gateway while using VPC (virtual private cloud peering) connections.

Is it possible to connect the EBS volume to multiple instances?

It is not possible to connect the EBS volume to multiple instances. In fact, it is possible to connect numerous EBS Volumes to a single instance.

Mention the various types of cloud services?

The various types of cloud services are:

Software as a Service (SaaS)
Data as a Service (DaaS)
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)

What is the difference between an AMI and an Instance?

A template consisting of the software configuration part is AMI. For example Application, application server, operating systems. On the other hand, if you start an Instance, it is a duplicate of the AMI in a row as an attendant in the cloud.

Specify the types of Load Balancer in AWS services?

AWS Services uses two types of load balancers:

Classic Load Balancer
Application Load Balancer

When will be the provisioned IOPS selected over Standard RDS storage?

While performing the batch-related workloads selection of provisioned IOPS storage happens after comparing to standard RDS storage.

Mention the important features of the Amazon cloud search?

The important features of the Amazon cloud are below:

Range search
Boolean search
AutoComplete advice
Prefix Search
Entire text search

Does Amazon Instance allow vertical scaling?

Yes, Amazon Instance allows vertical scaling.

Brief the purpose of life cycle hooks is Auto scaling?

The purpose of Lifecycle hooks in Autoscaling is to put an additional wait time to a scale in or scale out event.

Enlist different layers of Cloud Architecture?

Different layers of cloud architecture are:

Cloud controller
Node Controller
Storage Controller
Cluster controller

Specify the various storage classes available in Amazon s3?

The Storage classes that are available with Amazon s3 are:

Amazon S3 standard
Glacier
Amazon S3 Reduced Redundancy Storage
Amazon S3 standard-infrequent Access

Specify few DB engines which can be used in AWS RDS?

MS-SQL DB
OracleDB
PostgreDB
MariaDB
MYSQL DB

Define Amazon EC2?

Amazon EC2 eliminates the requirement to invest in hardware, important to quicker development and operation of applications. You can utilize Amazon EC2 to begin as many virtual servers as required, configure security and networking, and direct storage. It can scale up or down to grip changes in necessities dropping the need to estimate traffic.

What do you mean by Identity Access Management and how it is used?

Identity Access Management is a web service for firmly controlling contact with AWS services. It lets you direct users, security identification such as admission keys, and permissions that manage which AWS resources users and applications can access.

Explain Amazon Route 53?

Amazon Route 53 is a scalable and extremely available Domain Name System. The name refers to UDP port 53, where DNS server requests are addressed.

Tell me some benefits of AWS’s disaster recovery?

The AWS cloud supports many admired disaster recovery architectures ranging from little customer workload data centre failures to environments that allow rapid failover at scale. With data centres all over the globe, AWS provides a position of cloud-based disaster recovery services that permit fast recovery of your IT infrastructure and data.

Define Amazon Virtual Private Cloud, and why is it used?

A VPC is a top way of linking to your cloud resources from your own data centre. Once you attach your datacenter to the VPC in which your instances are there, each instance is assigned a confidential IP address that can be operated from your data centre.

When would you prefer provisioned IOPS over Standard RDS storage?

Provisioned IOPS delivers elevated IO rates, but it is also exclusive. However, batch dispensation workloads do not need manual interference.

Name the instances types for which the Multi-AZ- deployments are available?

The Multi-AZ deployments are only available for all the instances irrespective of their use and types.

Explain AMI?

AMI is usually measured as the template for the virtual machines. While starting a request, it is likely to select pre-baked AMI’s that AMI normally have in them. However, not all AMIs are obtainable to use free of cost. Moreover, you can also have modified AMI, and the common reason to use the same is nothing but saving the space on Amazon Web Service.

Tell me something about the private and public address?

The private address is openly correlated with the case and is sent back to EC2 only in case it is terminated. On the other side, the public address is connected in a similar model with the Instance until it is terminated. It is potential to restore the public address with Elastic IP.

Why are subnets required to be created?

They are required to utilize the network with a huge number of hosts in a dependable manner. By separating the network into smaller subnets, it can be made more straightforward, and the probability of errors can be eliminated up to an outstanding extent.

Name the states available in processor state control?

It contains two states:

C- state: Its levels are from C0 to C6, where C6 is the strongest state for the mainframe.
P- state: It has diverse levels starting from P0 to P15. P0 represents the maximum frequency, and P15 represents the lowest incidence.

Why is it not possible to modify the private IP address of an EC2 instance when it is running?

It is because the private IP remains with the illustration through the life cycle. Thus it cannot be modified. However, it is likely to change the minor private address.

Is it possible to use direct connect for transferring the objects from the data centres?

Yes, it is possible. Cloud Front only supports convention origins, and thus this task can be performed. However, you need to reimburse for it depending on the data convey rates.

Define the significance of connection draining?

There are convinced stages when the traffic needs to be re-verified for bug’s surplus files that lift security concerns. Connection draining helps in re-routing the transfer that comes from the Instances and which is in a line to be efficient.

Name the services which can be used for collecting and processing e-commerce data?

Amazon Redshift and Amazon DynamoDB are the most excellent options. In general, data from e-commerce websites are in a formless manner. As both of them are functional for unstructured data, we can use them.

Is it possible to establish a connection between the Amazon cloud and corporate data centre?

Yes, it’s possible. For it, first, a Virtual Private Network is to be recognized between the Virtual private cloud and the organization’s network. Then, the link can be created, and data can be continuously accessed.

What will happen if you launch the instances in Amazon VPC?

Each occurrence will be having a default IP addressed if the instances are launched in Amazon VPC. This approach is also measured when you require connecting cloud resources with the data centres.

What are the various parameters that you should consider while selecting the availability zone?

There are a variety of parameters that should be ensured. Some of them are the presentation, pricing, latency, as well as reply time.

Define Amazon S3?

Amazon S3 objects storage which supports a planned web service boundary that helps to store and refurbish any quantity of data loss and stored wherever on the web.

Explain SimpleDB?

It is an appropriately structured data store which handles the procedure of indexing as well as data queries bound to EC2 and S3.

State me the reasons for making subnets?

The following reasons are:

To tackle the shortage created by the deficiency of hosts.
To make total use of networks which hold less no. of hosts.
It could be payable to a lack of networks.
They help to make correct and ideal use of networks which have a high number of hosts.

Name a few types of cloud services?

The types of cloud services comprise Software as a Service, Data as a Service, Platform as a Service, and Infrastructure as a Service.

What is auto-scaling?

Auto-scaling is a quality of AWS which allows you to arrange and automatically offer and spin-up new instances without any requirement for your negotiation.

Tell me the full form of AMI?

AMI stands for Amazon Machine Language and refers to a snapshot of the root file system.

Will you use encryption for S3?

Encryption can be used for confidential and secret data on S3. It is because if it happens to be proprietary expertise.

These are some of the following interview questions & answers for AWS solution architect jobs. Before heading for a Job, Interview candidates should prefer to go through such kind of interview questions and prepare well.

How to secure your data for transport in the cloud?

Answer: Ensure that no one can intercept the data as it moves from point A to point B in the cloud and also checks that there are no data leaks with the encryption key from any storage in the cloud. You can also segregate your data from other companies’ data and then encrypt it by using an approved method. In addition, you can ensure the security of older data that remains with a cloud vendor after you have no use for it.

What is S3? What is it used for? Should encryption be used in S3?

Answer: According to Amazon, S3 is storage for the Internet. They define it as a “simple storage service that offers software developers a highly-scalable, reliable, and low-latency data storage infrastructure at very low costs”.
Amazon S3 provides a simple web service interface which you can use to store and retrieve any amount of data, at any time, from anywhere on the web. Using this web service, developers can easily build applications that make use of Internet storage.
Encryption should be considered for sensitive data, as S3 is a proprietary technology developed by Amazon themselves, and yet to be proven from a security standpoint.

How is AWS OpsWorks different than AWS CloudFormation?

Answer: OpsWorks and CloudFormation both support application modeling, deployment, configuration, management, and related activities. Both support a wide variety of architectural patterns, from simple web applications to highly complex applications. AWS OpsWorks and AWS CloudFormation differ in abstraction level and areas of focus.

AWS CloudFormation is a building block service which enables the customer to manage almost any AWS resource via JSON-based domain-specific language. It provides foundational capabilities for the full breadth of AWS, without prescribing a particular model for development and operations. Customers define templates and use them to provision and manage AWS resources, operating systems and application code.

In contrast, AWS OpsWorks is a higher level service that focuses on providing highly productive and reliable DevOps experiences for IT administrators and ops-minded developers. To do this, AWS OpsWorks employs a configuration management model based on concepts such as stacks and layers and provides integrated experiences for key activities like deployment, monitoring, auto-scaling, and automation. Compared to AWS CloudFormation, AWS OpsWorks supports a narrower range of application-oriented AWS resource types including Amazon EC2 instances, Amazon EBS volumes, Elastic IPs, and Amazon CloudWatch metrics.

Explain what is AMI?

Answer: AMI stands for Amazon Machine Image. It’s a template that provides the information (an operating system, an application server, and applications) required to launch an instance, which is a copy of the AMI running as a virtual server in the cloud. You can launch instances from as many different AMIs as you need.

What is the Amazon EC2 service?

Answer: Amazon describes Elastic Compute Cloud (Amazon EC2) as a web service that provides resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers. Amazon EC2’s simple web service interface allows developers to obtain and configure capacity with minimal friction.

How is buffer used in Amazon web services?

Answer: Buffer is used to making the system more resilient to burst of traffic or load by synchronizing different components. The components always receive and process the requests in an unbalanced way. Buffer keeps the balance between different components and makes them work at the same speed to provide faster services.

How to use the processor state control feature available on the c4.8xlarge instance?

The processor state control consists of 2 states:

The C state – Sleep state varying from c0 to c6. C6 being the deepest sleep state for a processor
The P state – Performance state p0 being the highest and p15 being the lowest possible frequency.
Now, why the C state and P state. Processors have cores, these cores need thermal headroom to boost their performance. Now since all the cores are on the processor the temperature should be kept at an optimal state so that all the cores can perform at the highest performance.

When should I use a Classic Load Balancer and when should I use an Application load balancer?

Answer: A Classic Load Balancer is ideal for simple load balancing of traffic across multiple EC2 instances, while an Application Load Balancer is ideal for microservices or container-based architectures where there is a need to route traffic to multiple services or load balance across multiple ports on the same EC2 instance.

What is the difference between SQL and NoSQL Database in AWS?

Answer: Explain about RDS options and Dynamo DB characteristics, their differences, benefits, and purpose of each related to AWS service.
Which option exists to accelerate the performance of a web application? Describe how to improve the performance of web applications by allowing you to retrieve information from a fast, managed, in-memory system, instead of relying entirely on slower disk-based databases. AWS offers a service called Amazon Elastic Cache, it can not only improve load and response time to user actions and queries but also reduce the cost associated with scaling web applications.

What is the function of the Amazon Elastic Compute Cloud?

Answer: Amazon Elastic compute cloud also known as Amazon EC2 is an Amazon web service that provides scalable resources and makes the computing easier for developers. The main functions of Amazon EC2 are:

It provides easy configurable options and allows the user to configure the capacity.
It provides the complete control of computing resources and let the user run the computing environment according to his requirements.
It provides a fast way to run the instances and quickly book the system hence reducing the overall time.
It provides scalability to the resources and changes its environment according to the requirement of the user.
It provides varieties of tools to the developers to build failure resilient applications.

How to deliver content faster?

Answer: Describe in detail the service like Amazon CloudFront which is a content delivery web service. It integrates with other AWS services to give developers and businesses an easy way to distribute content to end-users with low latency, high data transfer speeds, and no minimum usage commitments.

What are the different deployment models for Cloud?

The different models are:

Private Cloud
Public Cloud
Hybrid Clouds

How to enable an automatic scaling solution according to the user demand?

Explain about Autoscaling features of AWS. Remember that Auto Scaling allows you to scale your Amazon EC2 capacity up or down automatically according to conditions you define, and it is particularly well suited for applications that experience hourly, daily, or weekly variability in usage.
Describe how to create a launch configuration, an auto-scaling group including common limits and how to monitor it using Cloudwatch and how to establish automatic alerts and actions.

What is the use of Amazon ElastiCache?

Answer: Amazon ElastiCache is a web service that makes it easy to deploy, operate, and scale an in-memory data store or cache in the cloud.

What are the managed database services provided by AWS?

Answer: Answer with the Amazon Relational Database Service (Amazon RDS). It is a web service that makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while managing time-consuming database management tasks, allowing you to focus on your applications and business.

It gives you access to the capabilities of a MySQL, Oracle, SQL Server, or PostgreSQL database engines running on your own Amazon RDS cloud-based database instance with high availability configurations.

What is the relation between Instance and AMI?

Answer: An Amazon Machine Image (AMI) is a template that contains a software configuration (for example, an operating system, an application server, and applications). From an AMI, you launch an instance, which is a copy of the AMI running as a virtual server in the cloud.
You can launch different types of instances from a single AMI. An instance type determines the hardware of the host computer used for your instance. Each instance type offers different compute and memory capabilities.

Explain how the buffer is used in Amazon web services?

Answer: The buffer is used to make the system more robust to manage traffic or load by synchronizing different component.

What is an EC2 instance? How to protect and reuse it?

Answer: Explain that EC2 is a web service that provides resizable computing capacity in the cloud. Describe how to create an AMI, taking EC2 snapshot to backup, and reuse EC2 instance.(Company)

What kind of instances does AWS offer?

Answer: Describe all EC2 instance types. Each EC2 instance type comprises varying combinations of CPU, memory, storage, and networking capacity giving you the flexibility to choose the appropriate mix of resources for your applications.

What uses do API’s have in cloud services?
Application Programming Interface (API) has the following uses:

It eliminates the need to write fully-fledged programs
It provides the instructions to set up communication between one or more applications
It allows easy creation of applications and links the cloud services with other systems.

Is it possible to change the private IP addresses of an EC2 while it is running/stopped in a VPC?

Answer: Primary private IP address is attached with the instance throughout its lifetime and cannot be changed, however secondary private addresses can be unassigned, assigned or moved between interfaces or instances at any point.

Which AWS services are offered for business intelligence?

Answer: Describe each AWS related service, highlight Amazon Redshift as a fast, fully managed, petabyte-scale data warehouse solution that makes it simple and cost-effective to efficiently analyze all your data using your existing business intelligence tools.

From the end-user analytic point of view, there exists a service named Amazon QuickSight which is a very fast, easy-to-use, and cloud-powered business intelligence (BI) service. It makes it easy for all employees within an organization to build visualizations, perform ad-hoc analysis, and quickly get business insights from their data. Amazon QuickSight integrates automatically with AWS data services, enables organizations to scale to hundreds of thousands of users, and delivers fast and responsive query performance to them via the SPICE engine.

What happens if CloudTrail is turned on for my account but my Amazon S3 bucket is not configured with the correct policy?

Answer: CloudTrail files are delivered according to S3 bucket policies. If the bucket is not configured or is misconfigured, CloudTrail might not be able to deliver the log files.

Mention what is the relation between an instance and AMI?

Answer: From a single AMI, you can launch multiple types of instances. An instance type defines the hardware of the host computer used for your instance. Each instance type provides different compute and memory capabilities. Once you launch an instance, it looks like a traditional host, and we can interact with it as we would with any computer.

What do you know about the Shared Responsibility Model established with AWS?

Answer: Because you’re building systems on top of the AWS platform, the security responsibilities will be shared. While AWS manages the security of the cloud, security in the cloud is the responsibility of the customer. Customers retain control of the security they choose to implement to protect their own content, platform, applications, systems, and networks, no differently than they would have for the applications in an on-site datacenter.

What are storage options provided by AWS?

Answer: Describe in detail all the storage options provided by AWS like EBS, S3, Glacier, etc. Remember that AWS offers many different storage services, including Amazon S3, Amazon EBS, Amazon EFS, and Amazon Glacier. Amazon S3 is an object storage service, Amazon EBS is a block storage service, Amazon EFS is a file storage service, and Amazon Glacier is a long-term archive storage service.
Refer depending on scenario what is the best storage option.

How do you choose an Availability Zone?

Answer: Let’s understand this through an example, consider there’s a company which has a user base in India as well as in the US.

So, with reference to the above figure the regions to choose between are, Mumbai and North Virginia. Now let us first compare the pricing, you have hourly prices, which can be converted to your per month figure. Here North Virginia emerges as a winner. But pricing cannot be the only parameter to consider. Performance should also be kept in mind hence, let’s look at latency as well. Latency basically is the time that a server takes to respond to your requests i.e the response time. North Virginia wins again!

What are the best practices for Security in Amazon EC2?

There are several best practices to secure Amazon EC2. A few of them are given below:

Use AWS Identity and Access Management (IAM) to control access to your AWS resources.
Restrict access by only allowing trusted hosts or networks to access ports on your instance.
Review the rules in your security groups regularly, and ensure that you apply the principle of least
Privilege – only open up permissions that you require.
Disable password-based logins for instances launched from your AMI. Passwords can be found or cracked, and are a security risk.
Learn to Use AWS Tools

Section 3: Amazon Storage.

How can you speed up data transfer in Snowball?

The data transfer can be increased in the following way:

By performing multiple copy operations at one time i.e., if the workstation is powerful enough, you can initiate multiple cp commands each from different terminals, on the same Snowball device.
Copying from multiple workstations to the same snowball.
Transferring large files or by creating a batch of small file, this will reduce the encryption overhead.
Eliminating unnecessary hops i.e., make a setup where the source machine(s) and the snowball are the only machines active on the switch being used, this can hugely improve performance.

How to create your own resources into the AWS Cloud?

Answer: Describe the Amazon VPC service. Notice that Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS Cloud, where you can launch AWS resources in a virtual network that you define. You have complete control over your virtual networking environment, including the selection of your own IP address range, the creation of subnets, and the configuration of route tables and network gateways.

Highlight VPC security settings using security groups and ACLs for subnets.

Can I vertically scale an Amazon instance? How do you do it?

Answer: Yes. Spinup a new larger instance than the one you are running, then pause that instance to detach the root ebs volume from this server and discard. After that, stop the live instance and detach its root volume. Note the unique device ID and attach that root volume to the new server, and start again. This way you will have scaled vertically.

What is the type of architecture, where half of the workload is on the public load while at the same time half of it is on the local storage?

Hybrid cloud architecture.

Should encryption be used for S3?

Encryption should be considered for sensitive data as S3 is a proprietary technology.

What are the various AMI design options?

Answer: Fully Baked AMI, JeOS (just enough operating system) AMI, and Hybrid AMI.

What does an AMI include?

An AMI includes the following things
A template for the root volume for the instance
Launch permissions decide which AWS accounts can avail the AMI to launch instances
A block device mapping that determines the volumes to attach to the instance when it is launched.

What automation tools can you use to spin up servers?
Any of the following tools can be used:

Roll-your-own scripts, and use the AWS API tools. Such scripts could be written in bash, Perl or another language of your choice.
Use a configuration management and provisioning tools like puppet or its successor Opscode Chef. You can also use a tool like Scalar.
Use a managed solution such as Rightscale.

If an organization is facing a major change, what is your approach as AWS Solution Architect to suggest to face it?

Answer: This reveals if the candidate for AWS Solution Architect position possesses an open interest in a future customer, understand their business model, and recognize actual changes and challenges.

What are the relevant responsibilities of an AWS Solution Architect?

Answer: Describe relevant responsibilities, duties, and challenges for an AWS Solution Architect.

What is Geo Restriction in CloudFront?

Answer: Geo restriction, also known as geo-blocking, is used to prevent users in specific geographic locations from accessing content that you’re distributing through a CloudFront web distribution.

How do you normally take AWS architecture requirements to design?

Answer: Describe your procedures and methodology for establishing relationships and how to understand business requirements from the customer.

What is a Serverless application in AWS?

Answer: The AWS Serverless Application Model (AWS SAM) extends AWS Cloud Formation to provide a simplified way of defining the Amazon API Gateway APIs, AWS Lambda functions, and Amazon DynamoDB tables needed by your serverless application.

What happens if my application stops responding to requests in beanstalk?

Answer: AWS Beanstalk applications have a system in place for avoiding failures in the underlying infrastructure. If an Amazon EC2 instance fails for any reason, Beanstalk will use Auto Scaling to automatically launch a new instance. Beanstalk can also detect if your application is not responding on the custom link, even though the infrastructure appears healthy, it will be logged as an environmental event(e.g a bad version was deployed) so you can take appropriate action.

Why AWS Architect Interview Questions?

Answer: For the 7th straight year, Gartner placed Amazon Web Services in the “Leaders” quadrant. Also, Forbes reported, AWS Certified Solutions Architect Leads the 15 Top Paying IT Certifications. Undoubtedly, AWS Solution Architect position is one of the most sought after amongst IT jobs.

You have a video transcoding application. The videos are processed according to a queue. If the processing of a video is interrupted in one instance, it is resumed in another instance. Currently, there is a huge back-log of videos which needs to be processed, for this you need to add more instances, but you need these instances only until your backlog is reduced. Which of these would be an efficient way to do it?
You should be using an On-Demand instance for the same. Why?

Answer: First of all, the workload has to be processed now, meaning it is urgent, secondly you don’t need them once your backlog is cleared, therefore Reserved Instance is out of the picture, and since the work is urgent, you cannot stop the work on your instance just because the spot price spiked, therefore Spot Instances shall also not be used. Hence On-Demand instances shall be the right choice in this case.

When you use more than one Elastic IPs with your instance.
When your Elastic IP is attached to a stopped instance.
When your Elastic IP is not attached to any instance.

What are the different layers of cloud computing?

The three layers are:

Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
Software as a Service (SaaS)

How is a Spot instance different from an On-Demand instance or Reserved Instance?

Answer: First of all, let’s understand that Spot Instance, On-Demand instance, and Reserved Instances are all models for pricing. Moving along, spot instances provide the ability for customers to purchase compute capacity with no upfront commitment, at hourly rates usually lower than the On-Demand rate in each region. Spot instances are just like bidding, the bidding price is called Spot Price. The Spot Price fluctuates based on supply and demand for instances, but customers will never pay more than the maximum price they have specified. If the Spot Price moves higher than a customer’s maximum price, the customer’s EC2 instance will be shut down automatically. But the reverse is not true, if the Spot prices come down again, your EC2 instance will not be launched automatically, one has to do that manually. In Spot and On-demand instance, there is no commitment for the duration from the user side, however in reserved instances one has to stick to the time period that he has chosen.

So, this brings us to the end of the AWS Interview Questions blog.This Tecklearn ‘Top Amazon Web Services (AWS) Interview Questions and Answers’ helps you with commonly asked questions if you are looking out for a job in Cloud Computing Domain. If you wish to learn AWS and build a career in Cloud Computing domain, then check out our interactive, AWS Solution Architect Certification Training, that comes with 24*7 support to guide you throughout your learning period.

https://www.tecklearn.com/course/aws-solutions-architect-certification-training/

AWS Solutions Architect Certification Training

About the Course

Tecklearn’s AWS Architect Certification Training is curated by industry professionals as per the industry requirements and demands. The entire AWS training course is in line with the AWS Certified Solutions Architect exam. You will learn various aspects of AWS like Elastic Cloud Compute, Simple Storage Service, Virtual Private Cloud, Aurora database service, Load Balancing, Auto Scaling and more by working on hands-on projects and case studies. You will master AWS architectural principles and services such as IAM, VPC, EC2, EBS and elevate your career to the cloud, and beyond with this AWS solutions architect course.

Why Should you take AWS Architect Certification Training?

The Average salary of an AWS Certified Solutions Architect is $129k per annum – Indeed.com
AWS market is expected to reach $236 Billion by 2020 at a CAGR of 22% – Forrester
Netflix, Twitter, LinkedIn, Facebook, BBC, Baidu, ESPN & other MNCs worldwide use Amazon AWS Cloud

What you will Learn in this Course?

Overview of Cloud Computing and AWS

What is Cloud Computing
Definition of Cloud Computing
On Premises Vs Service Models
Advantages and Disadvantages of Cloud Computing
Cloud Computing Providers
Why AWS
What is AWS
AWS Benefits
AWS Services
Traditional Vs AWS Components
AWS Global Infrastructure
AWS Availability Zone
AWS Edge Locations
How to Access the AWS Services
AWS architecture
AWS Management Console
AWS offerings Listing (EC2, VPC, AMI, EBS, ELB, Backup)

Amazon Elastic Compute Cloud (EC2)

Overview of EC2
Elastic IP Vs Public IP
Launching of AWS EC2 instance demo
How to access EC2
EC2 Purchasing Options
Amazon Machine Images (AMI)
EC2 Storage for the Root Device
EC2 Creating AMI
EC2 Instance Types
Auto Scaling
Cost of EC2
Best Practices of EC2
EC2 Resizing
Placement Groups
Amazon Backup and various Concepts
EC2 Demo
Hands On

Networking and Monitoring Services: Amazon Virtual Public Cloud

Virtual Private Cloud (VPC) and its benefits
Default and Non-Default VPC
IP Address
CIDR – Classless Inter-domain Routing
Subnet: Subnet Mask and Subnet Mask Classes
Private and Public Subnet
IPv4 v/s IPv6 – As in AWS Infrastructure
Internet Gateway and Route Tables
Security Group with VPC
Access Control List, NACL and Security Group
NAT Devices: NAT Gateway and NAT Instance
Flow Logs
VPC Peering and its working
VPN and Direct Connect
VPC Limitations
Need for Monitoring Services
AWS CloudWatch and it’s working
AWS Command Line Interface
Use Cases
Hands On

Amazon Storage Services: Elastic Block Storage

What is Storage Services
What is Elastic Block Storage (EBS)
Persistent Storage
EBC Features
EBS Benefits
EBS Types
EBS Pricing
EBS Life Cycle
EBS Snapshot
EBS General Purposed SSD
EBS Provisioned IOPS SSD
EBS Throughput Optimized HDD
EBS Cold HDD
EBS Comparison
EBS Previous Generation Volumes
EBS How Incremental Snapshots Work
EBS Deleting an Amazon EBS Snapshot
EBS Summary
Hands On

Amazon Storage Services: Simple Storage Services (S3)

What is Amazon AWS S3
Simple Storage Services (S3) Advantages
S3 Buckets, Objects, Keys and Endpoints
S3 Data Consistency Model
S3 Transfer Acceleration
S3 Storage Types
S3 Versioning
S3 Life Cycle Management
S3 Data Protection
S3 Cross-Region Replication
S3 Hosting a Static Website
Hands On

Amazon Storage Services

Amazon Glacier Storage
Amazon Storage Gateway
Amazon Snowball (Data Import /Export)
Billing with Amazon CloudWatch
Hands On

AWS Database Services: Relational Database Service (RDS)

Overview of Databases and Relational Database Service (RDS)
What is Amazon RDS
AWS RDS Components
AWS RDS: Interface
AWS RDS: Charges
AWS RDS Multi-AZ: Benefits
AWS RDS Multi-AZ: Failover Process
NoSQL Database: Amazon DynamoDB
Overview of DynamoDB
DynamoDB Benefits
Hands On

AWS Database Services Continued

Data Warehouse: Amazon Redshift
Overview of Amazon Redshift
Redshift Architecture
Amazon Redshift features
In Memory Cache: Amazon ElasticCache
Redis Vs MemCache
Amazon ElasticCache Cluster
Database Migration: AWS Database Migration Service

Load Balancing in AWS

What is Fault Tolerant System
Features of Elastic Load Balancing
What is AWS ELB (Elastic Load Balancer)
Types of Load Balancer: Classic, Application and Network
Classic Load Balancer: Features, Health Check Configuration, Cross-Zone, Connection Draining, Sticky Sessions, Access Logs, Limitation
Application Load Balancer: Features, Application Flow, Limitation
Network Load Balancer
Access Elastic Load Balancing: AWS Management Console, AWS CLI, AWS SDKs, HTTPS Query API

Amazon Route 53

What is Amazon Route 53
Domain Name Registration
Routing Internet Traffic to Resources
Automated check of the health of Resources + Data Pipeline

AWS Identity and Access Management (IAM) – Control user access

Authentication (Who can use) and Authorization (Level of Access)
IAM Policies – JSON Structure
Users, Groups and their Roles
AWS IAM Features
User Sign-in to Account
Switch Role
Role to EC2 Instance
Password Policy
How to Access AWS
Multi-Factor Authentication (MFA)
Permissions and Permission Types
Policies Structure
User Based Policies
Resource Based Policies
Resource Based Permission
Policies Types
Request Flow
Limitations
IAM HTTPS API
Logging IAM Events with AWS CloudTail
Hands On

Amazon CloudWatch

What is Amazon CloudWatch
Features and Benefits
CloudWatch Architecture
Hands On

AWS Auto Scaling

What is AWS Auto Scaling
Auto Scaling Components
Auto Scaling Group
Auto Scaling Launch Configuration
Auto Scaling Benefits
Auto Scaling Lifecycle
Auto Scaling Plans
Manual Scaling
Schedule Scaling
Dynamic Scaling
Auto Scaling Step Adjustment
Auto Scaling Termination Policy
Default Termination Policy
Health Check
Hands On

Amazon Application Services

Elastic BeanStalk
Simple Email Services (SES)
Simple Queue Service (SQS)
Simple Notification Services (SNS)
AWS Lambda
Introduction to Elastic OpWorks
Hands On

About AWS Solution Architect Associate Exam

Got a question for us? Please mention it in the comments section and we will get back to you.

706