General Questions
1 How can you add an existing instance to a new Auto Scaling group?
1 How can you add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console
1 How can you add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances
1 How can you add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Choose Actions -> Instance Settings -> Attach to Auto Scaling Group
1 How can you add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Select a new Auto Scaling group Choose Actions -> Instance Settings -> Attach to Auto Scaling Group
1 How can you add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Select a new Auto Scaling group Attach this group to this instance Choose Actions -> Instance Settings -> Attach to Auto Scaling Group
1 How can you add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Select a new Auto Scaling group Attach this group to this instance You can edit the instance if needed Choose Actions -> Instance Settings -> Attach to Auto Scaling Group
1 How can you add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Select a new Auto Scaling group Attach this group to this instance You can edit the instance if needed Choose Actions -> Instance Settings -> Attach to Auto Scaling Group You have successfully added the instance to a new Auto Scaling group
What are the factors you will consider while migrating to Amazon Web Services? 2
What are the factors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Operational Resilience These include the cost of infrastructure, ability to match demand and supply, transparency, etc. Cost Avoidance Business Agility
What are the factors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Operational Resilience Not having to wait for infrastructure and having access to the length and breadth of AWS Cost Avoidance Business Agility
What are the factors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Cost Avoidance Business Agility Operational Resilience Eliminating the need for hardware refreshing and constant maintenance
What are the factors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Operational Resilience Reducing your organization’s risk profile Cost Avoidance Business Agility
What are the factors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Operational Resilience Cost Avoidance Business Agility Migrating to AWS increases your overall operational agility. This is very helpful to your business
3 What is RTO and RPO in AWS?
3 What is RTO and RPO in AWS? Both RTO and RPO are essentials in AWS Disaster Recovery RTO stands for Recovery Time Objective and it is the maximum time your company is willing to wait for the recovery to finish in case of an outage
3 What is RTO and RPO in AWS? Both RTO and RPO are essentials in AWS Disaster Recovery RTO stands for Recovery Time Objective and it is the maximum time your company is willing to wait for the recovery to finish in case of an outage RPO is Recovery Point Objective which is the maximum amount of data loss your company is willing to accept as measured in time
If you would like to transfer huge amounts of data, which is the best option among Snowball, Snowball Edge and Snowmobile?4
If you would like to transfer huge amounts of data, which is the best option among Snowball, Snowball Edge and Snowmobile?4 • AWS Snowball is a data transport solution for moving high volumes of data into and out of a specified AWS region (50TB & 82TB versions) • AWS Snowball Edge adds additional computing functions apart from providing a data transport solution like AWS Snowball (Up to 100 TB) • AWS Snowmobile provides exabyte-scale migration service that allows you to transfer data up to 100 PB (100,000 TB)
AWS CloudFormation Questions
How is AWS CloudFormation different from AWS Elastic Beanstalk? 5
How is AWS CloudFormation different from AWS Elastic Beanstalk? 5 AWS CloudFormation • AWS CloudFormation helps you describe and provision all the infrastructure resources in your cloud environment • It supports the infrastructure needs of many different types of applications such as existing enterprise applications, legacy applications, applications AWS Elastic Beanstalk • AWS Elastic Beanstalk provides an environment to easily deploy and run applications in the cloud • It is combined with developer tools and helps you manage the lifecycle of your applications
What are the elements of an AWS CloudFormation template? 6
What are the elements of an AWS CloudFormation template? 6 AWS CloudFormation templates are JSON or YAML-formatted text files that are comprised of five types of elements: AWS CloudFormation • Optional list of template parameters • An optional list of output values • An optional list of data tables • List of AWS resources and their configuration values • A template file format version number
What are the elements of an AWS CloudFormation template? 6 You can edit parameter values in the AWS Management Console
What are the elements of an AWS CloudFormation template? 6 With parameters, you can customize aspects of your template at run time, when the stack is built You can edit parameter values in the AWS Management Console
What are the elements of an AWS CloudFormation template? 6 With parameters, you can customize aspects of your template at run time, when the stack is built For example, the Amazon RDS database size, Amazon EC2 instance types, database and web server port numbers can be passed to AWS CloudFormation when a stack is created You can edit parameter values in the AWS Management Console
What are the elements of an AWS CloudFormation template? 6 With parameters, you can customize aspects of your template at run time, when the stack is built For example, the Amazon RDS database size, Amazon EC2 instance types, database and web server port numbers can be passed to AWS CloudFormation when a stack is created Each parameter can have a default value and description and may be marked as “NoEcho” in order to hide the actual value You can edit parameter values in the AWS Management Console
What happens when one of the resources in a stack cannot be created successfully? 7
What happens when one of the resources in a stack cannot be created successfully? 7 By default, the “automatic rollback on error” feature is enabled
What happens when one of the resources in a stack cannot be created successfully? 7 By default, the “automatic rollback on error” feature is enabled This will delete all AWS resources that AWS CloudFormation created till the point where an error occured
What happens when one of the resources in a stack cannot be created successfully? 7 By default, the “automatic rollback on error” feature is enabled This will delete all AWS resources that AWS CloudFormation created till the point where an error occured This is useful in cases when you accidentally exceed your limit of Elastic IP addresses or don’t have access to an EC2 AMI
What happens when one of the resources in a stack cannot be created successfully? 7 By default, the “automatic rollback on error” feature is enabled This will delete all AWS resources that AWS CloudFormation created till the point where an error occured This is useful in cases when you accidentally exceed your limit of Elastic IP addresses or don’t have access to an EC2 AMI This feature simplifies system administration and layered solutions built on top of AWS CloudFormation
Elastic Block Storage Questions
How can you automate EC2 backup using EBS? 8
How can you automate EC2 backup using EBS? 8 To automate the EC2 backup, you will need to write a script to automate the below steps by using AWS’ API Below is the step by step process which should be followed in the script: 1. Get the list of instances 2. Connect to AWS through API to list the Amazon EBS volumes that are attached locally to the instance 3. List the snapshots of each volume 4. Assign a retention period to the snapshot 5. Create a snapshot of each volume 6. Delete the snapshot if it is older than the retention period Amazon Elastic Block Storage
What is the difference between EBS and Instance Store? 9
What is the difference between EBS and Instance Store? 9 Instance A Instance B Instance Store Host Computer 01 02 03 04 Instances in EBS volumes can be restored
What is the difference between EBS and Instance Store? 9 Instance A Instance B Instance Store Host Computer 01 02 03 04 Instances in EBS volumes can be restored Instance store provides temporary block-level storage for your instance that is physically attached to a host machine
What is the difference between EBS and Instance Store? 9 Instance A Instance B Instance Store Host Computer 01 02 03 04 Instances in EBS volumes can be restored Instance store provides temporary block-level storage for your instance that is physically attached to a host machine You cannot detach an instance store from one instance and attach it to another
What is the difference between EBS and Instance Store? 9 Instance A Instance B Instance Store Host Computer 01 02 03 04 Instances in EBS volumes can be restored Instance store provides temporary block-level storage for your instance that is physically attached to a host machine Data in an instance store is lost if the disk fails or the instance is stopped or terminated You cannot detach an instance store from one instance and attach it to another
Can you take backup of EFS like EBS. If yes, how ? 10
Can you take backup of EFS like EBS. If yes, how ? 10 Yes, you can use EFS-to-EFS backup solution to recover from unintended changes or deletions in Amazon EFS
Can you take backup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the following steps to take backup of EFS like EBS:
Can you take backup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Click the launch EFS-to-EFS- restore button
Can you take backup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the region selector in the console navigation bar to select region Click the launch EFS-to-EFS- restore button
Can you take backup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the region selector in the console navigation bar to select region Verify if you selected the right template on the Select Template page Click the launch EFS-to-EFS- restore button
Can you take backup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the region selector in the console navigation bar to select region Verify if you selected the right template on the Select Template page Assign a name to your solution stack Click the launch EFS-to-EFS- restore button
Can you take backup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the region selector in the console navigation bar to select region Verify if you selected the right template on the Select Template page Assign a name to your solution stack Review the parameters for the template and modify them if necessary Click the launch EFS-to-EFS- restore button
How do you auto delete old snapshots? 1 1
How do you auto delete old snapshots? 1 1  As per best practices, you will take snapshots of EBS volumes on Amazon S3  You can use AWS Ops Automator to automatically handle all snapshots  It allows you to create, copy and delete Amazon EBS snapshots  You can deploy AWS Ops Automator using AWS CloudFormation  This Automator will use the CloudFormation template to automatically handle all EBS snapshots How to deploy?
Elastic Load Balancing Questions
What are the different types of load balancers in AWS? 12
What are the different types of load balancers in AWS? 12 There are 3 types of load balancers which are supported by Elastic Load Balancing:
What are the different types of load balancers in AWS? 1. Application Load Balancer • An application load balancer makes routing decisions at the application layer (HTTP/HTTPS) • It supports path based routing • It can route requests to one or more ports on each container Application Load Balancer 1 12 There are 3 types of load balancers which are supported by Elastic Load Balancing:
What are the different types of load balancers in AWS? 2. Network Load Balancer • A Network Load Balancer makes router decisions at the transport level • It handles millions of requests per second • After the load balancer receives a connection, it selects a target group for the default rule using a flow hash routing algorithm Network Load Balancer 2 12 There are 3 types of load balancers which are supported by Elastic Load Balancing:
What are the different types of load balancers in AWS? 3. Classic Load Balancer • A Classic Load Balancer makes routing decisions either on the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS) • It requires a fixed relationship between the load balancer port and the container port Classic Load Balancer 3 12 There are 3 types of load balancers which are supported by Elastic Load Balancing:
What are the different uses of the various load balancers in AWS Elastic Load Balancing?13
What are the different uses of the various load balancers in AWS Elastic Load Balancing?13 There are three types of load balancers in AWS Elastic Load Balancing you can select based on your application needs: AWS Elastic Load Balancing
There are three types of load balancers in AWS Elastic Load Balancing you can select based on your application needs: AWS Elastic Load Balancing Application Load Balancer 1 If you need flexible application management and TLS termination What are the different uses of the various load balancers in AWS Elastic Load Balancing?13
There are three types of load balancers in AWS Elastic Load Balancing you can select based on your application needs: AWS Elastic Load Balancing Application Load Balancer 1 Network Load Balancer 2 If you need flexible application management and TLS termination If you require extreme performance and static IPs for your applications What are the different uses of the various load balancers in AWS Elastic Load Balancing?13
There are three types of load balancers in AWS Elastic Load Balancing you can select based on your application needs: AWS Elastic Load Balancing Application Load Balancer 1 Classic Load Balancer 3 Network Load Balancer 2 If you need flexible application management and TLS termination If you require extreme performance and static IPs for your applications If your application is built within the EC2 Classic network What are the different uses of the various load balancers in AWS Elastic Load Balancing?13
Security Questions
14 How can you use AWS WAF in monitoring your AWS applications?
14 How can you use AWS WAF in monitoring your AWS applications? AWS Web Application Firewall protects your web applications from common web exploits 89% Ipsum decided to leave for the far World of because there were AWS WAF helps you control which traffic source to your application should be allowed or blocked You can use AWS WAF to create custom rules that block common attack patterns AWS WAF can be used for 3 cases – allow all requests, block all requests and count all requests for a new policy 04 03 02 01
14 How can you use AWS WAF in monitoring your AWS applications? Some of the characteristics you can mention in AWS WAF are: Origin IP addresses Strings that appear in requests Origin country Length of requests Presence of a malicious script Request headers Presence of malicious SQL code
What are the different AWS IAM categories you can control? 15
What are the different AWS IAM categories you can control? 15 Using AWS IAM you can do the following:
What are the different AWS IAM categories you can control? 15 Create and manage IAM users Using AWS IAM you can do the following:
What are the different AWS IAM categories you can control? 15 Create and manage IAM users Create and manage IAM groups Using AWS IAM you can do the following:
What are the different AWS IAM categories you can control? 15 Create and manage IAM users Create and manage IAM groupsManage users' security credentials Using AWS IAM you can do the following:
What are the different AWS IAM categories you can control? 15 Create and manage IAM users Create and manage IAM groups Create and manage policies to grant access to AWS services and resources Manage users' security credentials Using AWS IAM you can do the following:
What are the policies that you can set for your users’ passwords? 16
What are the policies that you can set for your users’ passwords? 16 Using AWS IAM, you can set the following policies for your users’ passwords: Strong passwords requiring minimum length or at least one number or special character
What are the policies that you can set for your users’ passwords? 16 Using AWS IAM, you can set the following policies for your users’ passwords: Strong passwords requiring minimum length or at least one number or special character Requirements of specific character types, including uppercase letters, lowercase letters, numbers, and non-alphanumeric characters
What are the policies that you can set for your users’ passwords? 16 Using AWS IAM, you can set the following policies for your users’ passwords: Strong passwords requiring minimum length or at least one number or special character Requirements of specific character types, including uppercase letters, lowercase letters, numbers, and non-alphanumeric characters Enforce automatic password expiration, prevent re-use of old passwords and require a password reset upon their next AWS sign-in
What are the policies that you can set for your users’ passwords? 16 Using AWS IAM, you can set the following policies for your users’ passwords: Strong passwords requiring minimum length or at least one number or special character Requirements of specific character types, including uppercase letters, lowercase letters, numbers, and non-alphanumeric characters Enforce automatic password expiration, prevent re-use of old passwords and require a password reset upon their next AWS sign-in Have the AWS users to contact an account administrator when the user has allowed his/her password to expire
What is the difference between an IAM role and an IAM user? 17
What is the difference between an IAM role and an IAM user? 17 An IAM role is an IAM entity that defines a set of permissions for making AWS service requests Trusted entities, such as IAM users, applications, or an AWS service (e.g. EC2) assume roles An IAM user has permanent long-term credentials and is used to directly interact with AWS services Here, the IAM user has full access to all AWS IAM functionalities
What are managed policies in AWS IAM? 18
What are managed policies in AWS IAM? 18 01 02 04 03 Managed policies are IAM resources that express permissions using the IAM policy language
What are managed policies in AWS IAM? 18 01 02 04 03 Managed policies are IAM resources that express permissions using the IAM policy language You can create, edit, and manage them separately from the IAM users, groups, and roles to which they are attached
What are managed policies in AWS IAM? 18 01 02 04 03 Managed policies are IAM resources that express permissions using the IAM policy language You can now update policy in one place and the permissions automatically extend to all attached entities You can create, edit, and manage them separately from the IAM users, groups, and roles to which they are attached
What are managed policies in AWS IAM? 18 01 02 04 03 Managed policies are IAM resources that express permissions using the IAM policy language Managed policies are managed either by you (managed policies) or by AWS (AWS managed policies) You can now update policy in one place and the permissions automatically extend to all attached entities You can create, edit, and manage them separately from the IAM users, groups, and roles to which they are attached
19 Can you give an example of an IAM policy and a policy summary?
19 Can you give an example of an IAM policy and a policy summary? { "Version":"2012-10-17", "Statement":[ { "Effect":"Allow", "Action":[ "s3:PutObject", "s3:GetObject", "s3:GetObjectVersion", "s3:DeleteObject", "s3:DeleteObjectVersion" ], "Resource":"arn:aws:s3:::example_bucket/example_folder/*" } ] } The following policy is used to grant access to add, update, and delete objects from a specific folder ‘example_folder’ in a specific bucket ‘example_bucket’
19 Can you give an example of an IAM policy and a policy summary? A policy summary lists the access level, resources and conditions for each service defined in a policy
How does AWS IAM help your business? 20
How does AWS IAM help your business?  IAM enables you to: • Manage IAM users and their access - AWS IAM provides a secure access to multiple users to their AWS resources • Manage access for federated users – AWS allows you to provide a secure access to resources in your AWS account to your employees and applications without creating IAM roles 20 AWS IAM
How does AWS IAM help your business?  IAM enables you to: • Manage IAM users and their access - AWS IAM provides a secure access to multiple users to their AWS resources • Manage access for federated users – AWS allows you to provide a secure access to resources in your AWS account to your employees and applications without creating IAM roles  AWS IAM is a free service and you will only be charged for the use of other services that will use IAM 20 AWS IAM
Amazon Route 53 Questions
What is the difference between Latency Based Routing and Geo DNS? 21
What is the difference between Latency Based Routing and Geo DNS? 21 Geo DNS bases routing decisions on the geographic location of the requests
What is the difference between Latency Based Routing and Geo DNS? 21 Geo DNS bases routing decisions on the geographic location of the requests Latency Based Routing utilizes latency measurements between viewer networks and AWS datacenters. These measurements are used to determine which endpoint to direct users toward
What is the difference between Latency Based Routing and Geo DNS? 21 Geo DNS bases routing decisions on the geographic location of the requests If you have compliance, localization requirements, or other use cases that require stable routing from a specific geography to a specific endpoint, we recommend using Geo DNS Latency Based Routing utilizes latency measurements between viewer networks and AWS datacenters. These measurements are used to determine which endpoint to direct users toward
What is the difference between Latency Based Routing and Geo DNS? 21 Geo DNS bases routing decisions on the geographic location of the requests If you have compliance, localization requirements, or other use cases that require stable routing from a specific geography to a specific endpoint, we recommend using Geo DNS Latency Based Routing utilizes latency measurements between viewer networks and AWS datacenters. These measurements are used to determine which endpoint to direct users toward If your goal is to minimize end-user latency, we recommend using Latency Based Routing
What is the difference between a Domain and a Hosted Zone? 22
What is the difference between a Domain and a Hosted Zone? 22 Domain is a collection of data describing a self- contained administrative and technical unit on the internet www.simplilearn.com is a domain and is a general DNS concept
What is the difference between a Domain and a Hosted Zone? 22 Domain is a collection of data describing a self- contained administrative and technical unit on the internet www.simplilearn.com is a domain and is a general DNS concept Hosted zone is a container that holds information about how you want to route traffic on the internet for a specific domain All resource record sets within a hosted zone must have the hosted zone’s domain name as a suffix. E.g. lms.simplilearn.com
How does Amazon Route 53 provide high availability and low latency? 23
How does Amazon Route 53 provide high availability and low latency? 23 Amazon Route 53
How does Amazon Route 53 provide high availability and low latency? 23 Amazon Route 53 Globally distributed DNS servers The globally distributed nature of servers helps ensure a consistent ability to route end users to your application by avoiding network issues
How does Amazon Route 53 provide high availability and low latency? 23 Amazon Route 53 Globally distributed DNS servers The globally distributed nature of servers helps ensure a consistent ability to route end users to your application by avoiding network issues Dependency Route 53 provides a high level of dependability required by important applications
How does Amazon Route 53 provide high availability and low latency? 23 Amazon Route 53 Globally distributed DNS servers The globally distributed nature of servers helps ensure a consistent ability to route end users to your application by avoiding network issues Dependency Route 53 provides a high level of dependability required by important applications Optimal location It uses a global anycast network to automatically answer queries from the optimal location
How does Amazon Route 53 provide high availability and low latency? 23 “As a result, the service offers high availability and low query latency for your end users” Amazon Route 53 Globally distributed DNS servers The globally distributed nature of servers helps ensure a consistent ability to route end users to your application by avoiding network issues Dependency Route 53 provides a high level of dependability required by important applications Optimal location It uses a global anycast network to automatically answer queries from the optimal location
AWS Config Questions
How does AWS Config work along with AWS CloudTrail? 24
How does AWS Config work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity
How does AWS Config work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements
How does AWS Config work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs)
How does AWS Config work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs) You can use a CI (Config) to answer “What did my AWS resource look like?” at a point in time
How does AWS Config work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs) You can use a CI (Config) to answer “What did my AWS resource look like?” at a point in time You can use AWS CloudTrail to answer “Who made an API call to modify this resource?”
How does AWS Config work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs) You can use a CI (Config) to answer “What did my AWS resource look like?” at a point in time You can use AWS CloudTrail to answer “Who made an API call to modify this resource?” Using CloudTrail, you can detect if a security group was incorrectly configured and by who
Can AWS Config aggregate data across different AWS accounts? 25
Can AWS Config aggregate data across different AWS accounts? 25 Yes, you can set up AWS Config to deliver configuration updates from different accounts to one S3 bucket, once the appropriate IAM policies are applied to the S3 bucket AWS Config
Can AWS Config aggregate data across different AWS accounts? 25 Yes, you can set up AWS Config to deliver configuration updates from different accounts to one S3 bucket, once the appropriate IAM policies are applied to the S3 bucket You can also publish notifications to the one SNS Topic, within the same region, once appropriate IAM policies are applied to the SNS Topic AWS Config
Database Questions
How are reserved instances different from on-demand DB instances? 26
How are reserved instances different from on-demand DB instances? 26 Functionally, reserved instances and on-demand DB instances are exactly the same. The only difference is how your instances are billed:
How are reserved instances different from on-demand DB instances? 26 Functionally, reserved instances and on-demand DB instances are exactly the same. The only difference is how your instances are billed: With Reserved Instances, you purchase a one or three year reservation and in return receive a lower effective hourly usage rate (compared with on-demand DB instances) for the duration of the term
How are reserved instances different from on-demand DB instances? 26 Functionally, reserved instances and on-demand DB instances are exactly the same. The only difference is how your instances are billed: With Reserved Instances, you purchase a one or three year reservation and in return receive a lower effective hourly usage rate (compared with on-demand DB instances) for the duration of the term Unless you purchase reserved instances in a Region, all DB instances will be billed at on- demand hourly rates
Which type of scaling would you recommend for RDS and why? 27
Which type of scaling would you recommend for RDS and why? Vertical Scaling  Here, you can vertically scale up your master database with the press of a button  There are over 18 instance sizes that you can use when resizing your RDS MySQL, PostgreSQL, MariaDB, Oracle and Microsoft SQL Server instances. 27 You can scale either vertically or horizontally
Which type of scaling would you recommend for RDS and why? Horizontal Scaling  You can also increase the performance of a read-heavy database by using read replicas to horizontally scale your RDS databases  RDS MySQL, PostgreSQL and MariaDB can have up to 5 read replicas  Amazon Aurora can have up to 15 read replicas 27
Which type of scaling would you recommend for RDS and why? 27 If you are looking to increase your storage and processing capacity, you can opt for vertical scaling If you are looking at increasing performance of read-heavy database, you can opt for horizontal scaling
What is a maintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28
What is a maintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28 RDS maintenance window lets you decide when DB instance modifications, database engine version upgrades, and software patching have to occur Amazon RDS
What is a maintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28 RDS maintenance window lets you decide when DB instance modifications, database engine version upgrades, and software patching have to occur Automatic scheduling is done only for patches that are security and durability related Amazon RDS
What is a maintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28 RDS maintenance window lets you decide when DB instance modifications, database engine version upgrades, and software patching have to occur Automatic scheduling is done only for patches that are security and durability related By default, a 30 minute default value is assigned as maintenance window Amazon RDS
What is a maintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28 RDS maintenance window lets you decide when DB instance modifications, database engine version upgrades, and software patching have to occur Automatic scheduling is done only for patches that are security and durability related By default, a 30 minute default value is assigned as maintenance window Your DB instance will still be available during these events though you might observe a minimal effect on performance Amazon RDS
What are the consistency models in DynamoDB? 29
What are the consistency models in DynamoDB? 29 • This consistency model maximizes your read throughput • However it might not reflect the results of a recently completed write • All copies of data usually reach consistency within a second
What are the consistency models in DynamoDB? 29 • This consistency model maximizes your read throughput • However it might not reflect the results of a recently completed write • All copies of data usually reach consistency within a second • In addition to eventual consistency, DynamoDB also gives you the flexibility and control to request a strongly consistent read • A strongly consistent read returns a result that reflects all writes that received a successful response before the read
What kind of query functionality does DynamoDB support? 30
What kind of query functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key1
What kind of query functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes 1 2
What kind of query functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key A primary key can be either a single- attribute partition key or a composite partition-sort key DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes 1 3 2
What kind of query functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key A primary key can be either a single- attribute partition key or a composite partition-sort key DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes DynamoDB indexes a composite partition-sort key as a partition key element and a sort key element 1 3 2 4
What kind of query functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key A primary key can be either a single- attribute partition key or a composite partition-sort key Holding the partition key element constant, you can search across the sort key element to retrieve items DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes DynamoDB indexes a composite partition-sort key as a partition key element and a sort key element 1 3 5 2 4
What kind of query functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key A primary key can be either a single- attribute partition key or a composite partition-sort key Holding the partition key element constant, you can search across the sort key element to retrieve items DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes DynamoDB indexes a composite partition-sort key as a partition key element and a sort key element E.g. A composite partition-sort key could be a combination of UserID (partition) and Timestamp (sort) 1 3 5 2 4 6
Multiple Choice Questions
As an AWS Developer, using this pay-per-use service, you can send, store and receive messages between software components. Which of the following is being referred to here? 31
As an AWS Developer, using this pay-per-use service, you can send, store and receive messages between software components. Which of the following is being referred to here? 31 AWS Step Functions Amazon Simple Queue Service Amazon MQ Amazon Simple Notification Service
As an AWS Developer, using this pay-per-use service, you can send, store and receive messages between software components. Which of the following is being referred to here? 31 AWS Step Functions Amazon Simple Queue Service Amazon MQ Amazon Simple Notification Service
If you would like to host a real-time audio and video conferencing application on AWS, this service provides you with a secure and easy-to-use application. What is this services? 32
If you would like to host a real-time audio and video conferencing application on AWS, this service provides you with a secure and easy-to-use application. What is this services? 32 Amazon Chime Amazon MQ Amazon WorkSpaces Amazon AppStream
If you would like to host a real-time audio and video conferencing application on AWS, this service provides you with a secure and easy-to-use application. What is this services? 32 Amazon Chime Amazon MQ Amazon WorkSpaces Amazon AppStream
As your company's AWS Solutions Architect, you are in-charge of designing thousands of individual jobs which are similar. Which of the following service best serves your requirement? 33
As your company's AWS Solutions Architect, you are in-charge of designing thousands of individual jobs which are similar. Which of the following service best serves your requirement? 33 AWS EC2 Auto Scaling AWS Fargate AWS Snowball AWS Batch
As your company's AWS Solutions Architect, you are in-charge of designing thousands of individual jobs which are similar. Which of the following service best serves your requirement? 33 AWS EC2 Auto Scaling AWS Fargate AWS Snowball AWS Batch
You are a machine learning engineer and you are looking for a service that helps you build and train machine learning models in AWS. Which among the following are we referring to? 34
34 Amazon SageMaker Amazon Comprehend AWS DeepLens AWS Device Farm You are a machine learning engineer and you are looking for a service that helps you build and train machine learning models in AWS. Which among the following are we referring to?
34 Amazon SageMaker Amazon Comprehend AWS DeepLens AWS Device Farm You are a machine learning engineer and you are looking for a service that helps you build and train machine learning models in AWS. Which among the following are we referring to?
Imagine that you are working for your company's IT team. You are designated to adjust the capacity of AWS resources based on the incoming application and network traffic. How would you do it? 35
35 Amazon VPC Amazon Inspector AWS IAM Amazon Elastic Load Balancing Imagine that you are working for your company's IT team. You are designated to adjust the capacity of AWS resources based on the incoming application and network traffic. How would you do it?
35 Amazon VPC Amazon Inspector AWS IAM Amazon Elastic Load Balancing Imagine that you are working for your company's IT team. You are designated to adjust the capacity of AWS resources based on the incoming application and network traffic. How would you do it?
This cross-platform video game development engine that supports PC, XBox, Playstation, iOS and Android platforms allows developers to build and host their games on Amazon's servers. 36
This cross-platform video game development engine that supports PC, XBox, Playstation, iOS and Android platforms allows developers to build and host their games on Amazon's servers. 36 Amazon GameLift Amazon Lumberyard AWS Greengrass Amazon Sumerian
This cross-platform video game development engine that supports PC, XBox, Playstation, iOS and Android platforms allows developers to build and host their games on Amazon's servers. 36 Amazon GameLift Amazon Lumberyard AWS Greengrass Amazon Sumerian
You are the Project Manager of your company's Cloud Architects team. You are required to visualize, understand and manage your AWS costs and usage over time. Which of the following services will be the best fit for this? 37
37 AWS Budgets Amazon WorkMail AWS Cost Explorer Amazon Connect You are the Project Manager of your company's Cloud Architects team. You are required to visualize, understand and manage your AWS costs and usage over time. Which of the following services will be the best fit for this?
37 AWS Budgets Amazon WorkMail AWS Cost Explorer Amazon Connect You are the Project Manager of your company's Cloud Architects team. You are required to visualize, understand and manage your AWS costs and usage over time. Which of the following services will be the best fit for this?
You are the chief Cloud Architect at your company. How can you automatically monitor and adjust computer resources to ensure maximum performance and efficiency of all scalable resources? 38
38 AWS CloudFormation AWS Auto Scaling AWS Aurora Amazon API Gateway You are the chief Cloud Architect at your company. How can you automatically monitor and adjust computer resources to ensure maximum performance and efficiency of all scalable resources?
38 AWS CloudFormation AWS Auto Scaling AWS Aurora Amazon API Gateway You are the chief Cloud Architect at your company. How can you automatically monitor and adjust computer resources to ensure maximum performance and efficiency of all scalable resources?
As a database administrator. you will use a service that is used to setup and manage databases such as MySQL, MariaDB and PostgreSQL. Which service are we referring to? 39
As a database administrator. you will use a service that is used to setup and manage databases such as MySQL, MariaDB and PostgreSQL. Which service are we referring to? 39 Amazon Aurora Amazon Elasticache AWS RDS AWS Database Migration Service
As a database administrator. you will use a service that is used to setup and manage databases such as MySQL, MariaDB and PostgreSQL. Which service are we referring to? 39 Amazon Aurora Amazon Elasticache AWS RDS AWS Database Migration Service
A part of your marketing work requires you to push messages onto Google, Facebook, Windows and Apple through APIs or AWS Management Console, you will use the following service. 40
40 AWS CloudTrail Amazon Chime AWS Config AWS Simple Notification Service A part of your marketing work requires you to push messages onto Google, Facebook, Windows and Apple through APIs or AWS Management Console, you will use the following service.
40 AWS CloudTrail Amazon Chime AWS Config AWS Simple Notification Service A part of your marketing work requires you to push messages onto Google, Facebook, Windows and Apple through APIs or AWS Management Console, you will use the following service.
AWS Interview Questions Part - 2 | AWS Interview Questions And Answers Part - 2 | Simplilearn

AWS Interview Questions Part - 2 | AWS Interview Questions And Answers Part - 2 | Simplilearn

  • 2.
  • 3.
    1 How canyou add an existing instance to a new Auto Scaling group?
  • 4.
    1 How canyou add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console
  • 5.
    1 How canyou add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances
  • 6.
    1 How canyou add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Choose Actions -> Instance Settings -> Attach to Auto Scaling Group
  • 7.
    1 How canyou add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Select a new Auto Scaling group Choose Actions -> Instance Settings -> Attach to Auto Scaling Group
  • 8.
    1 How canyou add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Select a new Auto Scaling group Attach this group to this instance Choose Actions -> Instance Settings -> Attach to Auto Scaling Group
  • 9.
    1 How canyou add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Select a new Auto Scaling group Attach this group to this instance You can edit the instance if needed Choose Actions -> Instance Settings -> Attach to Auto Scaling Group
  • 10.
    1 How canyou add an existing instance to a new Auto Scaling group? We can add an existing instance to a new Auto Scaling group by following the below steps: Open EC2 console Select your instance under Instances Select a new Auto Scaling group Attach this group to this instance You can edit the instance if needed Choose Actions -> Instance Settings -> Attach to Auto Scaling Group You have successfully added the instance to a new Auto Scaling group
  • 11.
    What are thefactors you will consider while migrating to Amazon Web Services? 2
  • 12.
    What are thefactors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Operational Resilience These include the cost of infrastructure, ability to match demand and supply, transparency, etc. Cost Avoidance Business Agility
  • 13.
    What are thefactors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Operational Resilience Not having to wait for infrastructure and having access to the length and breadth of AWS Cost Avoidance Business Agility
  • 14.
    What are thefactors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Cost Avoidance Business Agility Operational Resilience Eliminating the need for hardware refreshing and constant maintenance
  • 15.
    What are thefactors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Operational Resilience Reducing your organization’s risk profile Cost Avoidance Business Agility
  • 16.
    What are thefactors you will consider while migrating to Amazon Web Services? 2 You will consider the following: Operational Costs Workforce Productivity Operational Resilience Cost Avoidance Business Agility Migrating to AWS increases your overall operational agility. This is very helpful to your business
  • 17.
    3 What isRTO and RPO in AWS?
  • 18.
    3 What isRTO and RPO in AWS? Both RTO and RPO are essentials in AWS Disaster Recovery RTO stands for Recovery Time Objective and it is the maximum time your company is willing to wait for the recovery to finish in case of an outage
  • 19.
    3 What isRTO and RPO in AWS? Both RTO and RPO are essentials in AWS Disaster Recovery RTO stands for Recovery Time Objective and it is the maximum time your company is willing to wait for the recovery to finish in case of an outage RPO is Recovery Point Objective which is the maximum amount of data loss your company is willing to accept as measured in time
  • 20.
    If you wouldlike to transfer huge amounts of data, which is the best option among Snowball, Snowball Edge and Snowmobile?4
  • 21.
    If you wouldlike to transfer huge amounts of data, which is the best option among Snowball, Snowball Edge and Snowmobile?4 • AWS Snowball is a data transport solution for moving high volumes of data into and out of a specified AWS region (50TB & 82TB versions) • AWS Snowball Edge adds additional computing functions apart from providing a data transport solution like AWS Snowball (Up to 100 TB) • AWS Snowmobile provides exabyte-scale migration service that allows you to transfer data up to 100 PB (100,000 TB)
  • 22.
  • 23.
    How is AWSCloudFormation different from AWS Elastic Beanstalk? 5
  • 24.
    How is AWSCloudFormation different from AWS Elastic Beanstalk? 5 AWS CloudFormation • AWS CloudFormation helps you describe and provision all the infrastructure resources in your cloud environment • It supports the infrastructure needs of many different types of applications such as existing enterprise applications, legacy applications, applications AWS Elastic Beanstalk • AWS Elastic Beanstalk provides an environment to easily deploy and run applications in the cloud • It is combined with developer tools and helps you manage the lifecycle of your applications
  • 25.
    What are theelements of an AWS CloudFormation template? 6
  • 26.
    What are theelements of an AWS CloudFormation template? 6 AWS CloudFormation templates are JSON or YAML-formatted text files that are comprised of five types of elements: AWS CloudFormation • Optional list of template parameters • An optional list of output values • An optional list of data tables • List of AWS resources and their configuration values • A template file format version number
  • 27.
    What are theelements of an AWS CloudFormation template? 6 You can edit parameter values in the AWS Management Console
  • 28.
    What are theelements of an AWS CloudFormation template? 6 With parameters, you can customize aspects of your template at run time, when the stack is built You can edit parameter values in the AWS Management Console
  • 29.
    What are theelements of an AWS CloudFormation template? 6 With parameters, you can customize aspects of your template at run time, when the stack is built For example, the Amazon RDS database size, Amazon EC2 instance types, database and web server port numbers can be passed to AWS CloudFormation when a stack is created You can edit parameter values in the AWS Management Console
  • 30.
    What are theelements of an AWS CloudFormation template? 6 With parameters, you can customize aspects of your template at run time, when the stack is built For example, the Amazon RDS database size, Amazon EC2 instance types, database and web server port numbers can be passed to AWS CloudFormation when a stack is created Each parameter can have a default value and description and may be marked as “NoEcho” in order to hide the actual value You can edit parameter values in the AWS Management Console
  • 31.
    What happens whenone of the resources in a stack cannot be created successfully? 7
  • 32.
    What happens whenone of the resources in a stack cannot be created successfully? 7 By default, the “automatic rollback on error” feature is enabled
  • 33.
    What happens whenone of the resources in a stack cannot be created successfully? 7 By default, the “automatic rollback on error” feature is enabled This will delete all AWS resources that AWS CloudFormation created till the point where an error occured
  • 34.
    What happens whenone of the resources in a stack cannot be created successfully? 7 By default, the “automatic rollback on error” feature is enabled This will delete all AWS resources that AWS CloudFormation created till the point where an error occured This is useful in cases when you accidentally exceed your limit of Elastic IP addresses or don’t have access to an EC2 AMI
  • 35.
    What happens whenone of the resources in a stack cannot be created successfully? 7 By default, the “automatic rollback on error” feature is enabled This will delete all AWS resources that AWS CloudFormation created till the point where an error occured This is useful in cases when you accidentally exceed your limit of Elastic IP addresses or don’t have access to an EC2 AMI This feature simplifies system administration and layered solutions built on top of AWS CloudFormation
  • 36.
  • 37.
    How can youautomate EC2 backup using EBS? 8
  • 38.
    How can youautomate EC2 backup using EBS? 8 To automate the EC2 backup, you will need to write a script to automate the below steps by using AWS’ API Below is the step by step process which should be followed in the script: 1. Get the list of instances 2. Connect to AWS through API to list the Amazon EBS volumes that are attached locally to the instance 3. List the snapshots of each volume 4. Assign a retention period to the snapshot 5. Create a snapshot of each volume 6. Delete the snapshot if it is older than the retention period Amazon Elastic Block Storage
  • 39.
    What is thedifference between EBS and Instance Store? 9
  • 40.
    What is thedifference between EBS and Instance Store? 9 Instance A Instance B Instance Store Host Computer 01 02 03 04 Instances in EBS volumes can be restored
  • 41.
    What is thedifference between EBS and Instance Store? 9 Instance A Instance B Instance Store Host Computer 01 02 03 04 Instances in EBS volumes can be restored Instance store provides temporary block-level storage for your instance that is physically attached to a host machine
  • 42.
    What is thedifference between EBS and Instance Store? 9 Instance A Instance B Instance Store Host Computer 01 02 03 04 Instances in EBS volumes can be restored Instance store provides temporary block-level storage for your instance that is physically attached to a host machine You cannot detach an instance store from one instance and attach it to another
  • 43.
    What is thedifference between EBS and Instance Store? 9 Instance A Instance B Instance Store Host Computer 01 02 03 04 Instances in EBS volumes can be restored Instance store provides temporary block-level storage for your instance that is physically attached to a host machine Data in an instance store is lost if the disk fails or the instance is stopped or terminated You cannot detach an instance store from one instance and attach it to another
  • 44.
    Can you takebackup of EFS like EBS. If yes, how ? 10
  • 45.
    Can you takebackup of EFS like EBS. If yes, how ? 10 Yes, you can use EFS-to-EFS backup solution to recover from unintended changes or deletions in Amazon EFS
  • 46.
    Can you takebackup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the following steps to take backup of EFS like EBS:
  • 47.
    Can you takebackup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Click the launch EFS-to-EFS- restore button
  • 48.
    Can you takebackup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the region selector in the console navigation bar to select region Click the launch EFS-to-EFS- restore button
  • 49.
    Can you takebackup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the region selector in the console navigation bar to select region Verify if you selected the right template on the Select Template page Click the launch EFS-to-EFS- restore button
  • 50.
    Can you takebackup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the region selector in the console navigation bar to select region Verify if you selected the right template on the Select Template page Assign a name to your solution stack Click the launch EFS-to-EFS- restore button
  • 51.
    Can you takebackup of EFS like EBS. If yes, how ? 10 2 3 1 5 4 6 Sign in to the AWS Management Console Use the region selector in the console navigation bar to select region Verify if you selected the right template on the Select Template page Assign a name to your solution stack Review the parameters for the template and modify them if necessary Click the launch EFS-to-EFS- restore button
  • 52.
    How do youauto delete old snapshots? 1 1
  • 53.
    How do youauto delete old snapshots? 1 1  As per best practices, you will take snapshots of EBS volumes on Amazon S3  You can use AWS Ops Automator to automatically handle all snapshots  It allows you to create, copy and delete Amazon EBS snapshots  You can deploy AWS Ops Automator using AWS CloudFormation  This Automator will use the CloudFormation template to automatically handle all EBS snapshots How to deploy?
  • 54.
  • 55.
    What are thedifferent types of load balancers in AWS? 12
  • 56.
    What are thedifferent types of load balancers in AWS? 12 There are 3 types of load balancers which are supported by Elastic Load Balancing:
  • 57.
    What are thedifferent types of load balancers in AWS? 1. Application Load Balancer • An application load balancer makes routing decisions at the application layer (HTTP/HTTPS) • It supports path based routing • It can route requests to one or more ports on each container Application Load Balancer 1 12 There are 3 types of load balancers which are supported by Elastic Load Balancing:
  • 58.
    What are thedifferent types of load balancers in AWS? 2. Network Load Balancer • A Network Load Balancer makes router decisions at the transport level • It handles millions of requests per second • After the load balancer receives a connection, it selects a target group for the default rule using a flow hash routing algorithm Network Load Balancer 2 12 There are 3 types of load balancers which are supported by Elastic Load Balancing:
  • 59.
    What are thedifferent types of load balancers in AWS? 3. Classic Load Balancer • A Classic Load Balancer makes routing decisions either on the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS) • It requires a fixed relationship between the load balancer port and the container port Classic Load Balancer 3 12 There are 3 types of load balancers which are supported by Elastic Load Balancing:
  • 60.
    What are thedifferent uses of the various load balancers in AWS Elastic Load Balancing?13
  • 61.
    What are thedifferent uses of the various load balancers in AWS Elastic Load Balancing?13 There are three types of load balancers in AWS Elastic Load Balancing you can select based on your application needs: AWS Elastic Load Balancing
  • 62.
    There are threetypes of load balancers in AWS Elastic Load Balancing you can select based on your application needs: AWS Elastic Load Balancing Application Load Balancer 1 If you need flexible application management and TLS termination What are the different uses of the various load balancers in AWS Elastic Load Balancing?13
  • 63.
    There are threetypes of load balancers in AWS Elastic Load Balancing you can select based on your application needs: AWS Elastic Load Balancing Application Load Balancer 1 Network Load Balancer 2 If you need flexible application management and TLS termination If you require extreme performance and static IPs for your applications What are the different uses of the various load balancers in AWS Elastic Load Balancing?13
  • 64.
    There are threetypes of load balancers in AWS Elastic Load Balancing you can select based on your application needs: AWS Elastic Load Balancing Application Load Balancer 1 Classic Load Balancer 3 Network Load Balancer 2 If you need flexible application management and TLS termination If you require extreme performance and static IPs for your applications If your application is built within the EC2 Classic network What are the different uses of the various load balancers in AWS Elastic Load Balancing?13
  • 65.
  • 66.
    14 How canyou use AWS WAF in monitoring your AWS applications?
  • 67.
    14 How canyou use AWS WAF in monitoring your AWS applications? AWS Web Application Firewall protects your web applications from common web exploits 89% Ipsum decided to leave for the far World of because there were AWS WAF helps you control which traffic source to your application should be allowed or blocked You can use AWS WAF to create custom rules that block common attack patterns AWS WAF can be used for 3 cases – allow all requests, block all requests and count all requests for a new policy 04 03 02 01
  • 68.
    14 How canyou use AWS WAF in monitoring your AWS applications? Some of the characteristics you can mention in AWS WAF are: Origin IP addresses Strings that appear in requests Origin country Length of requests Presence of a malicious script Request headers Presence of malicious SQL code
  • 69.
    What are thedifferent AWS IAM categories you can control? 15
  • 70.
    What are thedifferent AWS IAM categories you can control? 15 Using AWS IAM you can do the following:
  • 71.
    What are thedifferent AWS IAM categories you can control? 15 Create and manage IAM users Using AWS IAM you can do the following:
  • 72.
    What are thedifferent AWS IAM categories you can control? 15 Create and manage IAM users Create and manage IAM groups Using AWS IAM you can do the following:
  • 73.
    What are thedifferent AWS IAM categories you can control? 15 Create and manage IAM users Create and manage IAM groupsManage users' security credentials Using AWS IAM you can do the following:
  • 74.
    What are thedifferent AWS IAM categories you can control? 15 Create and manage IAM users Create and manage IAM groups Create and manage policies to grant access to AWS services and resources Manage users' security credentials Using AWS IAM you can do the following:
  • 75.
    What are thepolicies that you can set for your users’ passwords? 16
  • 76.
    What are thepolicies that you can set for your users’ passwords? 16 Using AWS IAM, you can set the following policies for your users’ passwords: Strong passwords requiring minimum length or at least one number or special character
  • 77.
    What are thepolicies that you can set for your users’ passwords? 16 Using AWS IAM, you can set the following policies for your users’ passwords: Strong passwords requiring minimum length or at least one number or special character Requirements of specific character types, including uppercase letters, lowercase letters, numbers, and non-alphanumeric characters
  • 78.
    What are thepolicies that you can set for your users’ passwords? 16 Using AWS IAM, you can set the following policies for your users’ passwords: Strong passwords requiring minimum length or at least one number or special character Requirements of specific character types, including uppercase letters, lowercase letters, numbers, and non-alphanumeric characters Enforce automatic password expiration, prevent re-use of old passwords and require a password reset upon their next AWS sign-in
  • 79.
    What are thepolicies that you can set for your users’ passwords? 16 Using AWS IAM, you can set the following policies for your users’ passwords: Strong passwords requiring minimum length or at least one number or special character Requirements of specific character types, including uppercase letters, lowercase letters, numbers, and non-alphanumeric characters Enforce automatic password expiration, prevent re-use of old passwords and require a password reset upon their next AWS sign-in Have the AWS users to contact an account administrator when the user has allowed his/her password to expire
  • 80.
    What is thedifference between an IAM role and an IAM user? 17
  • 81.
    What is thedifference between an IAM role and an IAM user? 17 An IAM role is an IAM entity that defines a set of permissions for making AWS service requests Trusted entities, such as IAM users, applications, or an AWS service (e.g. EC2) assume roles An IAM user has permanent long-term credentials and is used to directly interact with AWS services Here, the IAM user has full access to all AWS IAM functionalities
  • 82.
    What are managedpolicies in AWS IAM? 18
  • 83.
    What are managedpolicies in AWS IAM? 18 01 02 04 03 Managed policies are IAM resources that express permissions using the IAM policy language
  • 84.
    What are managedpolicies in AWS IAM? 18 01 02 04 03 Managed policies are IAM resources that express permissions using the IAM policy language You can create, edit, and manage them separately from the IAM users, groups, and roles to which they are attached
  • 85.
    What are managedpolicies in AWS IAM? 18 01 02 04 03 Managed policies are IAM resources that express permissions using the IAM policy language You can now update policy in one place and the permissions automatically extend to all attached entities You can create, edit, and manage them separately from the IAM users, groups, and roles to which they are attached
  • 86.
    What are managedpolicies in AWS IAM? 18 01 02 04 03 Managed policies are IAM resources that express permissions using the IAM policy language Managed policies are managed either by you (managed policies) or by AWS (AWS managed policies) You can now update policy in one place and the permissions automatically extend to all attached entities You can create, edit, and manage them separately from the IAM users, groups, and roles to which they are attached
  • 87.
    19 Can yougive an example of an IAM policy and a policy summary?
  • 88.
    19 Can yougive an example of an IAM policy and a policy summary? { "Version":"2012-10-17", "Statement":[ { "Effect":"Allow", "Action":[ "s3:PutObject", "s3:GetObject", "s3:GetObjectVersion", "s3:DeleteObject", "s3:DeleteObjectVersion" ], "Resource":"arn:aws:s3:::example_bucket/example_folder/*" } ] } The following policy is used to grant access to add, update, and delete objects from a specific folder ‘example_folder’ in a specific bucket ‘example_bucket’
  • 89.
    19 Can yougive an example of an IAM policy and a policy summary? A policy summary lists the access level, resources and conditions for each service defined in a policy
  • 90.
    How does AWSIAM help your business? 20
  • 91.
    How does AWSIAM help your business?  IAM enables you to: • Manage IAM users and their access - AWS IAM provides a secure access to multiple users to their AWS resources • Manage access for federated users – AWS allows you to provide a secure access to resources in your AWS account to your employees and applications without creating IAM roles 20 AWS IAM
  • 92.
    How does AWSIAM help your business?  IAM enables you to: • Manage IAM users and their access - AWS IAM provides a secure access to multiple users to their AWS resources • Manage access for federated users – AWS allows you to provide a secure access to resources in your AWS account to your employees and applications without creating IAM roles  AWS IAM is a free service and you will only be charged for the use of other services that will use IAM 20 AWS IAM
  • 93.
    Amazon Route 53Questions
  • 94.
    What is thedifference between Latency Based Routing and Geo DNS? 21
  • 95.
    What is thedifference between Latency Based Routing and Geo DNS? 21 Geo DNS bases routing decisions on the geographic location of the requests
  • 96.
    What is thedifference between Latency Based Routing and Geo DNS? 21 Geo DNS bases routing decisions on the geographic location of the requests Latency Based Routing utilizes latency measurements between viewer networks and AWS datacenters. These measurements are used to determine which endpoint to direct users toward
  • 97.
    What is thedifference between Latency Based Routing and Geo DNS? 21 Geo DNS bases routing decisions on the geographic location of the requests If you have compliance, localization requirements, or other use cases that require stable routing from a specific geography to a specific endpoint, we recommend using Geo DNS Latency Based Routing utilizes latency measurements between viewer networks and AWS datacenters. These measurements are used to determine which endpoint to direct users toward
  • 98.
    What is thedifference between Latency Based Routing and Geo DNS? 21 Geo DNS bases routing decisions on the geographic location of the requests If you have compliance, localization requirements, or other use cases that require stable routing from a specific geography to a specific endpoint, we recommend using Geo DNS Latency Based Routing utilizes latency measurements between viewer networks and AWS datacenters. These measurements are used to determine which endpoint to direct users toward If your goal is to minimize end-user latency, we recommend using Latency Based Routing
  • 99.
    What is thedifference between a Domain and a Hosted Zone? 22
  • 100.
    What is thedifference between a Domain and a Hosted Zone? 22 Domain is a collection of data describing a self- contained administrative and technical unit on the internet www.simplilearn.com is a domain and is a general DNS concept
  • 101.
    What is thedifference between a Domain and a Hosted Zone? 22 Domain is a collection of data describing a self- contained administrative and technical unit on the internet www.simplilearn.com is a domain and is a general DNS concept Hosted zone is a container that holds information about how you want to route traffic on the internet for a specific domain All resource record sets within a hosted zone must have the hosted zone’s domain name as a suffix. E.g. lms.simplilearn.com
  • 102.
    How does AmazonRoute 53 provide high availability and low latency? 23
  • 103.
    How does AmazonRoute 53 provide high availability and low latency? 23 Amazon Route 53
  • 104.
    How does AmazonRoute 53 provide high availability and low latency? 23 Amazon Route 53 Globally distributed DNS servers The globally distributed nature of servers helps ensure a consistent ability to route end users to your application by avoiding network issues
  • 105.
    How does AmazonRoute 53 provide high availability and low latency? 23 Amazon Route 53 Globally distributed DNS servers The globally distributed nature of servers helps ensure a consistent ability to route end users to your application by avoiding network issues Dependency Route 53 provides a high level of dependability required by important applications
  • 106.
    How does AmazonRoute 53 provide high availability and low latency? 23 Amazon Route 53 Globally distributed DNS servers The globally distributed nature of servers helps ensure a consistent ability to route end users to your application by avoiding network issues Dependency Route 53 provides a high level of dependability required by important applications Optimal location It uses a global anycast network to automatically answer queries from the optimal location
  • 107.
    How does AmazonRoute 53 provide high availability and low latency? 23 “As a result, the service offers high availability and low query latency for your end users” Amazon Route 53 Globally distributed DNS servers The globally distributed nature of servers helps ensure a consistent ability to route end users to your application by avoiding network issues Dependency Route 53 provides a high level of dependability required by important applications Optimal location It uses a global anycast network to automatically answer queries from the optimal location
  • 108.
  • 109.
    How does AWSConfig work along with AWS CloudTrail? 24
  • 110.
    How does AWSConfig work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity
  • 111.
    How does AWSConfig work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements
  • 112.
    How does AWSConfig work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs)
  • 113.
    How does AWSConfig work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs) You can use a CI (Config) to answer “What did my AWS resource look like?” at a point in time
  • 114.
    How does AWSConfig work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs) You can use a CI (Config) to answer “What did my AWS resource look like?” at a point in time You can use AWS CloudTrail to answer “Who made an API call to modify this resource?”
  • 115.
    How does AWSConfig work along with AWS CloudTrail? 24 AWS Config AWS CloudTrail AWS CloudTrail records user API activity on your account and allows you to access information about this activity Using CloudTrail, you get full details about API actions, such as identity of the caller, time of API call, request parameters and response elements AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs) You can use a CI (Config) to answer “What did my AWS resource look like?” at a point in time You can use AWS CloudTrail to answer “Who made an API call to modify this resource?” Using CloudTrail, you can detect if a security group was incorrectly configured and by who
  • 116.
    Can AWS Configaggregate data across different AWS accounts? 25
  • 117.
    Can AWS Configaggregate data across different AWS accounts? 25 Yes, you can set up AWS Config to deliver configuration updates from different accounts to one S3 bucket, once the appropriate IAM policies are applied to the S3 bucket AWS Config
  • 118.
    Can AWS Configaggregate data across different AWS accounts? 25 Yes, you can set up AWS Config to deliver configuration updates from different accounts to one S3 bucket, once the appropriate IAM policies are applied to the S3 bucket You can also publish notifications to the one SNS Topic, within the same region, once appropriate IAM policies are applied to the SNS Topic AWS Config
  • 119.
  • 120.
    How are reservedinstances different from on-demand DB instances? 26
  • 121.
    How are reservedinstances different from on-demand DB instances? 26 Functionally, reserved instances and on-demand DB instances are exactly the same. The only difference is how your instances are billed:
  • 122.
    How are reservedinstances different from on-demand DB instances? 26 Functionally, reserved instances and on-demand DB instances are exactly the same. The only difference is how your instances are billed: With Reserved Instances, you purchase a one or three year reservation and in return receive a lower effective hourly usage rate (compared with on-demand DB instances) for the duration of the term
  • 123.
    How are reservedinstances different from on-demand DB instances? 26 Functionally, reserved instances and on-demand DB instances are exactly the same. The only difference is how your instances are billed: With Reserved Instances, you purchase a one or three year reservation and in return receive a lower effective hourly usage rate (compared with on-demand DB instances) for the duration of the term Unless you purchase reserved instances in a Region, all DB instances will be billed at on- demand hourly rates
  • 124.
    Which type ofscaling would you recommend for RDS and why? 27
  • 125.
    Which type ofscaling would you recommend for RDS and why? Vertical Scaling  Here, you can vertically scale up your master database with the press of a button  There are over 18 instance sizes that you can use when resizing your RDS MySQL, PostgreSQL, MariaDB, Oracle and Microsoft SQL Server instances. 27 You can scale either vertically or horizontally
  • 126.
    Which type ofscaling would you recommend for RDS and why? Horizontal Scaling  You can also increase the performance of a read-heavy database by using read replicas to horizontally scale your RDS databases  RDS MySQL, PostgreSQL and MariaDB can have up to 5 read replicas  Amazon Aurora can have up to 15 read replicas 27
  • 127.
    Which type ofscaling would you recommend for RDS and why? 27 If you are looking to increase your storage and processing capacity, you can opt for vertical scaling If you are looking at increasing performance of read-heavy database, you can opt for horizontal scaling
  • 128.
    What is amaintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28
  • 129.
    What is amaintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28 RDS maintenance window lets you decide when DB instance modifications, database engine version upgrades, and software patching have to occur Amazon RDS
  • 130.
    What is amaintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28 RDS maintenance window lets you decide when DB instance modifications, database engine version upgrades, and software patching have to occur Automatic scheduling is done only for patches that are security and durability related Amazon RDS
  • 131.
    What is amaintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28 RDS maintenance window lets you decide when DB instance modifications, database engine version upgrades, and software patching have to occur Automatic scheduling is done only for patches that are security and durability related By default, a 30 minute default value is assigned as maintenance window Amazon RDS
  • 132.
    What is amaintenance window in Amazon RDS? Will your DB instance be available during maintenance events?28 RDS maintenance window lets you decide when DB instance modifications, database engine version upgrades, and software patching have to occur Automatic scheduling is done only for patches that are security and durability related By default, a 30 minute default value is assigned as maintenance window Your DB instance will still be available during these events though you might observe a minimal effect on performance Amazon RDS
  • 133.
    What are theconsistency models in DynamoDB? 29
  • 134.
    What are theconsistency models in DynamoDB? 29 • This consistency model maximizes your read throughput • However it might not reflect the results of a recently completed write • All copies of data usually reach consistency within a second
  • 135.
    What are theconsistency models in DynamoDB? 29 • This consistency model maximizes your read throughput • However it might not reflect the results of a recently completed write • All copies of data usually reach consistency within a second • In addition to eventual consistency, DynamoDB also gives you the flexibility and control to request a strongly consistent read • A strongly consistent read returns a result that reflects all writes that received a successful response before the read
  • 136.
    What kind ofquery functionality does DynamoDB support? 30
  • 137.
    What kind ofquery functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key1
  • 138.
    What kind ofquery functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes 1 2
  • 139.
    What kind ofquery functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key A primary key can be either a single- attribute partition key or a composite partition-sort key DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes 1 3 2
  • 140.
    What kind ofquery functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key A primary key can be either a single- attribute partition key or a composite partition-sort key DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes DynamoDB indexes a composite partition-sort key as a partition key element and a sort key element 1 3 2 4
  • 141.
    What kind ofquery functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key A primary key can be either a single- attribute partition key or a composite partition-sort key Holding the partition key element constant, you can search across the sort key element to retrieve items DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes DynamoDB indexes a composite partition-sort key as a partition key element and a sort key element 1 3 5 2 4
  • 142.
    What kind ofquery functionality does DynamoDB support? 30 DynamoDB supports GET/PUT operations by using a user-defined primary key A primary key can be either a single- attribute partition key or a composite partition-sort key Holding the partition key element constant, you can search across the sort key element to retrieve items DynamoDB provides flexible querying by letting you query on non-primary key attributes using global secondary indexes and local secondary indexes DynamoDB indexes a composite partition-sort key as a partition key element and a sort key element E.g. A composite partition-sort key could be a combination of UserID (partition) and Timestamp (sort) 1 3 5 2 4 6
  • 143.
  • 144.
    As an AWSDeveloper, using this pay-per-use service, you can send, store and receive messages between software components. Which of the following is being referred to here? 31
  • 145.
    As an AWSDeveloper, using this pay-per-use service, you can send, store and receive messages between software components. Which of the following is being referred to here? 31 AWS Step Functions Amazon Simple Queue Service Amazon MQ Amazon Simple Notification Service
  • 146.
    As an AWSDeveloper, using this pay-per-use service, you can send, store and receive messages between software components. Which of the following is being referred to here? 31 AWS Step Functions Amazon Simple Queue Service Amazon MQ Amazon Simple Notification Service
  • 147.
    If you wouldlike to host a real-time audio and video conferencing application on AWS, this service provides you with a secure and easy-to-use application. What is this services? 32
  • 148.
    If you wouldlike to host a real-time audio and video conferencing application on AWS, this service provides you with a secure and easy-to-use application. What is this services? 32 Amazon Chime Amazon MQ Amazon WorkSpaces Amazon AppStream
  • 149.
    If you wouldlike to host a real-time audio and video conferencing application on AWS, this service provides you with a secure and easy-to-use application. What is this services? 32 Amazon Chime Amazon MQ Amazon WorkSpaces Amazon AppStream
  • 150.
    As your company'sAWS Solutions Architect, you are in-charge of designing thousands of individual jobs which are similar. Which of the following service best serves your requirement? 33
  • 151.
    As your company'sAWS Solutions Architect, you are in-charge of designing thousands of individual jobs which are similar. Which of the following service best serves your requirement? 33 AWS EC2 Auto Scaling AWS Fargate AWS Snowball AWS Batch
  • 152.
    As your company'sAWS Solutions Architect, you are in-charge of designing thousands of individual jobs which are similar. Which of the following service best serves your requirement? 33 AWS EC2 Auto Scaling AWS Fargate AWS Snowball AWS Batch
  • 153.
    You are amachine learning engineer and you are looking for a service that helps you build and train machine learning models in AWS. Which among the following are we referring to? 34
  • 154.
    34 Amazon SageMaker Amazon Comprehend AWSDeepLens AWS Device Farm You are a machine learning engineer and you are looking for a service that helps you build and train machine learning models in AWS. Which among the following are we referring to?
  • 155.
    34 Amazon SageMaker Amazon Comprehend AWSDeepLens AWS Device Farm You are a machine learning engineer and you are looking for a service that helps you build and train machine learning models in AWS. Which among the following are we referring to?
  • 156.
    Imagine that youare working for your company's IT team. You are designated to adjust the capacity of AWS resources based on the incoming application and network traffic. How would you do it? 35
  • 157.
    35 Amazon VPC Amazon Inspector AWSIAM Amazon Elastic Load Balancing Imagine that you are working for your company's IT team. You are designated to adjust the capacity of AWS resources based on the incoming application and network traffic. How would you do it?
  • 158.
    35 Amazon VPC Amazon Inspector AWSIAM Amazon Elastic Load Balancing Imagine that you are working for your company's IT team. You are designated to adjust the capacity of AWS resources based on the incoming application and network traffic. How would you do it?
  • 159.
    This cross-platform videogame development engine that supports PC, XBox, Playstation, iOS and Android platforms allows developers to build and host their games on Amazon's servers. 36
  • 160.
    This cross-platform videogame development engine that supports PC, XBox, Playstation, iOS and Android platforms allows developers to build and host their games on Amazon's servers. 36 Amazon GameLift Amazon Lumberyard AWS Greengrass Amazon Sumerian
  • 161.
    This cross-platform videogame development engine that supports PC, XBox, Playstation, iOS and Android platforms allows developers to build and host their games on Amazon's servers. 36 Amazon GameLift Amazon Lumberyard AWS Greengrass Amazon Sumerian
  • 162.
    You are theProject Manager of your company's Cloud Architects team. You are required to visualize, understand and manage your AWS costs and usage over time. Which of the following services will be the best fit for this? 37
  • 163.
    37 AWS Budgets Amazon WorkMail AWSCost Explorer Amazon Connect You are the Project Manager of your company's Cloud Architects team. You are required to visualize, understand and manage your AWS costs and usage over time. Which of the following services will be the best fit for this?
  • 164.
    37 AWS Budgets Amazon WorkMail AWSCost Explorer Amazon Connect You are the Project Manager of your company's Cloud Architects team. You are required to visualize, understand and manage your AWS costs and usage over time. Which of the following services will be the best fit for this?
  • 165.
    You are thechief Cloud Architect at your company. How can you automatically monitor and adjust computer resources to ensure maximum performance and efficiency of all scalable resources? 38
  • 166.
    38 AWS CloudFormation AWS AutoScaling AWS Aurora Amazon API Gateway You are the chief Cloud Architect at your company. How can you automatically monitor and adjust computer resources to ensure maximum performance and efficiency of all scalable resources?
  • 167.
    38 AWS CloudFormation AWS AutoScaling AWS Aurora Amazon API Gateway You are the chief Cloud Architect at your company. How can you automatically monitor and adjust computer resources to ensure maximum performance and efficiency of all scalable resources?
  • 168.
    As a databaseadministrator. you will use a service that is used to setup and manage databases such as MySQL, MariaDB and PostgreSQL. Which service are we referring to? 39
  • 169.
    As a databaseadministrator. you will use a service that is used to setup and manage databases such as MySQL, MariaDB and PostgreSQL. Which service are we referring to? 39 Amazon Aurora Amazon Elasticache AWS RDS AWS Database Migration Service
  • 170.
    As a databaseadministrator. you will use a service that is used to setup and manage databases such as MySQL, MariaDB and PostgreSQL. Which service are we referring to? 39 Amazon Aurora Amazon Elasticache AWS RDS AWS Database Migration Service
  • 171.
    A part ofyour marketing work requires you to push messages onto Google, Facebook, Windows and Apple through APIs or AWS Management Console, you will use the following service. 40
  • 172.
    40 AWS CloudTrail Amazon Chime AWSConfig AWS Simple Notification Service A part of your marketing work requires you to push messages onto Google, Facebook, Windows and Apple through APIs or AWS Management Console, you will use the following service.
  • 173.
    40 AWS CloudTrail Amazon Chime AWSConfig AWS Simple Notification Service A part of your marketing work requires you to push messages onto Google, Facebook, Windows and Apple through APIs or AWS Management Console, you will use the following service.

Editor's Notes