Top 50 AWS Interview Questions and Answers

1. Top 50 AWS Interview Questions and Answers About us InfosecTrain is one of the finest Security and Technology Training and Consulting organization, focusing on a range of IT Security Trainings and Information Security Services. InfosecTrain was established in the year 2016 by a team of experienced and enthusiastic professionals, who have more than 15 years of industry experience. We provide professional training, certification & consulting services related to all areas of Information Technology and Cyber Security.

2. The The recent decades have witnessed a significant change in the work environment of organizations and businesses around the world. The Technological advancements and the pioneering of Cloud and cloud computing platforms have been a considerable thrust behind this growth. At present, most businesses are utilizing or are intending to utilize Cloud Computing for their operations, which has led to a gigantic surge in the need for cloud experts. There There are many Cloud service providers in the market. But AWS has emerged as a leading and fastest-growing cloud service provider dominating the cloud marketplace by holding the largest share. It has become the most desirable cloud service providers for all enterprises, irrespective of their size and capacity. This rising popularity of AWS has created excellent opportunities for professionals willing to make a career in the AWS cloud space. However, to kick start your career as an AWS professional, you need to ace up the interview process. Here Here are the most frequently asked AWS interview questions and answers to assist you in cracking the AWS interviews:

3. Q1: Explain AWS and mention its main components? Q1: Explain AWS and mention its main components? Answer: Answer: AWS, also known as Amazon Web Services, is the leading Cloud Computing Platform in the market. It offers reliable, scalable, and affordable Cloud computing services to individuals, companies, and organizations. It follows a pay- as-you-go pricing model, so you only pay for the services you use. There There are many components of AWS, but the main components are: •Compute Services •Serverless Computing •Amazon Cluster •Storage Services •Database Services •Management and Security •Networks •Analytics •Application Services •Implementation and Management •Mobile Services

4. Q2: Explain AMI, and how is it related to the instance? Q2: Explain AMI, and how is it related to the instance? Answer: Answer: AMI, an abbreviation of Amazon Machine Image, contains fundamental information needed to launch an instance, and it is a copy of AMI operating in the Cloud. An An AMI allows you to download as many instances as you want. Instances are virtual servers in the AWS cloud. The instance type defines the hardware of the host computer. All instances are different and offer abilities in computational and storage skills. Q3: What does an AMI consist of? Q3: What does an AMI consist of? Answer: Answer: An AMI mainly consists of the following components: •A template that is the root volume for the AWS instances (example, application server, operating system, or web application) •Launch permissions that ensure which AWS account can use this AMI to set up an instance •Block device mapping specifying the root device volumes that are attached to the AWS instance after launch

5. Q4: Mention the types of AMI offered by AWS. Q4: Mention the types of AMI offered by AWS. Answer: Answer: The two kinds of AMIs provided by AWS are: •EBS backed •Instance store backed Q5: What is Amazon S3? Q5: What is Amazon S3? Answer: Answer: Amazon S3, also called Simple Storage Service, is an object storage service that can be used to store and recover any amount of data from anywhere and anytime on the web. It provides the same access to the developers of highly scalable, reliable, fast, inexpensive data storage infrastructure that are used by Amazon to run its global network of websites. Q6: Explain Glacier. Q6: Explain Glacier. Answer: Answer: Amazon Glacier is one of the most crucial services provided by AWS. It is an online web storage service that offers low cost and effective storage along with security features for archive and data backup. You can use Glacier to store the information effectively for months, years, or even decades.

6. Q7: Define EIP. Q7: Define EIP. Answer: Answer: EIP is the Elastic IP address (EIP). It is a static Ipv4 address provided by AWS to maintain dynamic cloud computing services. If you want a static IPv4 address for your instance, you must connect your AWS account with EIP to be correlated with the EIP, facilitating communication with the internet. Q8: What is Redshift? Q8: What is Redshift? Answer: Answer: Redshift is a big data product that is used as a data warehouse in the Cloud. It is the fast, reliable, and robust product of a big data warehouse. Q9: How will you explain SNS? Q9: How will you explain SNS? Answer: Answer: Amazon SNS stands for Simple Notification Service that is a web service provided by AWS. It facilitates the management and delivery of messages or notifications to the users and clients from any cloud platform. There are two types of clients in SNS, known as Subscribers and Publishers. Publishers’ job is to create and send a message to the subscriber instance via the communication channels. In contrast, the Subscribers receive the publisher’s notification over one of the supported protocols such as Amazon SQS, HTTP, and Lambda.

7. Q10: How will you define CloudFront? Q10: How will you define CloudFront? Answer: Answer: CloudFront is a content delivery network provided by AWS. It is a fast content delivery network (CDN) service that safely transmits data, applications, and APIs to customers worldwide with low latency, high transfer speeds, all within a developer-friendly environment. AWS offers CDN for less price, and it is best suitable for startups. Q11: How will you differentiate between DynamoDB and SimpleDB? Q11: How will you differentiate between DynamoDB and SimpleDB? Answer: Answer: DynamoDB is a flexible and efficient database model available in Amazon web services for you to have a flexible and faster NoSQL database. While While SimpleDB is one of AWS’s Amazon services, it is a distributed database and a highly available NoSQL data store that offloads database administrators’ work. Q12: Explain VPC and VPC peering connection. Q12: Explain VPC and VPC peering connection. Answer: Answer: VPC, also known as Virtual Private Cloud (VPC), enables you to launch AWS resources into the virtual network. It allows users to design and customize network configurations as per their business requirements. VPC VPC peering connection is a networking connection that creates connections among the VPCs with one another. It allows the route traffic between two VPCs using IPv6 and Ipv4 addresses. Instances within the VPCs act as they are in the same network.

8. Q13: What is Amazon EC2 Root Device Volume? Q13: What is Amazon EC2 Root Device Volume? Answer: Answer: The root device volume is used to boot the instance that contains the image when the developer launches an instance. When a developer introduces the Amazon EC2, all AMIs are propped up by an Amazon EC2 instance store. Q14: Explain the procedure to Q14: Explain the procedure to send a request to Amazon S3? send a request to Amazon S3? Answer: Answer: S3 in Amazon is a REST service, and you can send requests by using the AWS SDK or REST API wrapper libraries. Q15: What is a T2 instance? Q15: What is a T2 instance? Answer: Answer: T2 instance is one of the low-cost Amazon instances that provides a baseline CPU performance level. Q16 Q16: What are the regions and availability zones in Amazon EC2? : What are the regions and availability zones in Amazon EC2? Answer: Answer: The Amazon web service has a comprehensive infrastructure that is spread worldwide and split into availability zones and regions. Each region is fractionated into a geographic area, and it has many isolated locations called availability zones.

9. Q17 Q17: What is Amazon SQS? Name the types of queues in SQS? : What is Amazon SQS? Name the types of queues in SQS? Answer: Answer: Amazon SQS is a Simple Queue Service whose job is to manage the message queue. You can use this service to move the data or message from one application to another even though it is not in the active or running state. SQS can send messages among multiple services, including S3, DynamoDB, EC2 Instance, and it also uses the Java message queue service to deliver the information. A message can be visible in the SQS queue for up to 12 hours. The The two types of queues in SQS are: Standard Queues: Standard Queues: Standard queues are the default queue type. It offers an unlimited number of transactions per second and the option of delivering a message once. FIFO Queues: FIFO Queues: FIFO queues are designed to ensure that the order of messages is received and sent strictly preserved as in the exact order they were sent. Q18: Mention the types of instances available. Q18: Mention the types of instances available. Answer: Answer: There are five types of instances: •General-purpose •Storage optimized •Accelerated computing •Computer-optimized •Memory-optimized

10. Q19: What are the best Q19: What are the best security practices for Amazon EC2? security practices for Amazon EC2? Answer: Answer: The best security practices for Amazon EC2 that must be followed are: •Security and network •Storage •Resource Management •Recovery and Backup Q20: Mention the possible connection issues one might face while connecti Q20: Mention the possible connection issues one might face while connecting to ng to your instance. your instance. Answer: Answer: One can face the following connection issues while connecting to an instance: •Error: User key not recognized by the server •Error: Permission denied, or Authentication failed •Error: Connection timed out •Error: Unprotected private key Q21: Define key Q21: Define key- -pairs in AWS. pairs in AWS. Answer: Answer: Amazon EC2 uses both public and private keys to encrypt and decrypt the login information referred to as key-pairs. The sender avails a public key to encrypt the data, and the receiver uses a private key to decrypt the data. The public key allows you to securely ingress the instance, while a private key can be used as a substitute for a password.

11. Q22: Explain Elastic Beanstalk and its benefits. Q22: Explain Elastic Beanstalk and its benefits. Answer: Answer: Elastic Beanstalk, also called EBS, is one of the best services offered by AWS for deploying and managing applications that compose various AWS services, including EC2, S3, Simple Notification Service, CloudWatch, autoscaling, and Elastic Load Balancers. It supports the applications developed in various languages such as Java, .Net, Node.js, PHP, Ruby, and Python. Elastic Beanstalk Elastic Beanstalk has many benefits, such as : •Easy and simple: Easy and simple: Elastic Beanstalk allows you to manage and implement the application quickly and efficiently. •Autoscaling: Autoscaling: Beanstalk scales up or down when the application traffic increases and decreases. •Developer productivity: Developer productivity: Developers can deploy the application without any prior knowledge. The application must be maintained in a safe and user- friendly way. •Cost Cost- -effective effective: There are no charges for using Beanstalk. The only Charges you have to pay is for the AWS service resources used by your application. •Customization: Customization: Elastic Beanstalk allows users to select or make changes in the AWS service configurations that users want to use for the development of applications. •Management and updates: Management and updates: Elastic Beanstalk updates the application when it changes the platform. AWS professionals manage the infrastructure and platform update.

12. Q23: Q23: Define NAT gateways. Define NAT gateways. Answer: Answer: NAT, also referred to as Network Address Translation, enables instances to connect with the internet and other services of AWS in a private subnet. NAT averts the internet from having an initial connection with the instances. Q24: How will you define ELB? Q24: How will you define ELB? Answer: Answer: ELB, an abbreviation of Elastic Load Balancer, is a load balancing service provided by AWS. It distributes incoming resources and controls the application traffic to meet traffic demands. Q25: Explain the types of lo Q25: Explain the types of load balancers in EC2. ad balancers in EC2. Answer: Answer: The three types of load balancers in EC2 are: Application Load Balancer: Application Load Balancer: The application load balancer is designed in such a way that it makes routing decisions at the application layer. It also supports dynamic host port mapping and path-based routings. Network Load Balancer: Network Load Balancer: Network load balancer is designed in such a way that it makes routing decisions at the transport layer. It handles millions of requests per second. NLC uses the flow hash routing algorithm to select the target from the groups after receiving a connection from the load balancer. Classic Load Balancer: Classic Load Balancer: Classic load balancer is designed in such a way that it makes routing decisions either at the application layer or transport layer. It requires a fixed relationship between the container instance port and the load balancer port.

13. Q26: Explain Application Load Balancer. Q26: Explain Application Load Balancer. Answer: Answer: An Application Load Balancer functions at the seventh layer of the Open Systems Interconnection (OSI) model that is the application layer. After the load balancer gets a solicitation, it assesses the listener rules in need request to figure out which rule to apply. Afterward, it chooses a target from the target group for the rule action. Q27: Explain the working and benefi Q27: Explain the working and benefits of a Server Load Balancer. ts of a Server Load Balancer. Answer: Answer: The server load balancer works on the following two approaches: •Transport level load balancing: It is a DNS-based approach that acts independently of the application payload. •Application-level load balancing: It uses a traffic load to make balancing decisions, such as with windows server load balancing. The The benefits of server load balancer are: •Increases scalability •Redundancy •Maintenance and performance

14. Q28: Describe the process to secure the data for Q28: Describe the process to secure the data for carrying in the cloud. carrying in the cloud. Answer: Answer: The things that must be considered while carrying the data are: •No one must resize data while it is moving from one point to another. •There must not be any leakage with the security key from the multiple storerooms in the cloud. •To secure the data in the cloud, one must divide the information into different types and encrypt it into valid methods. Q29: Mention the services models in Cloud computing. Q29: Mention the services models in Cloud computing. Answer: Answer: The three service models in cloud computing are as follows: SaaS: SaaS: Software as a Service PaaS: PaaS: Platform as a Service IaaS: IaaS: Infrastructure as a Service Q30: What are the layers available in Cloud Architecture? Q30: What are the layers available in Cloud Architecture? Answer: Answer: We have five different types of layers available, which are: •SC- Storage controller •CC- cluster controller •NC- Node controller •Walrus •CLC- cloud controller

15. Q31: Define Reserved Instances. Q31: Define Reserved Instances. Answer: Answer: Reserved instances are a discount billing notion in which businesses can receive massive discounts compared to the standard “On Demand” cloud computing prices in an account for committing to a specified level of usage. However, the conditions under which a Reserved Instances discount is granted differ from provider to provider. Q32: How will you define Cloud Watch and mention its types? Q32: How will you define Cloud Watch and mention its types? Answer: Answer: Cloud Watch is a tool in Amazon Web services that helps you monitor your organization’s different resources. You can take a look at various things like health, applications, network, etc. There There are two types of cloud watches: •Essential Monitoring •Detailed Monitoring Q33: Mention the Cloud Watch metrics available for EC2 Instance. Q33: Mention the Cloud Watch metrics available for EC2 Instance. Answer: Answer: These are the metrics available for EC2 instance: •Disk reads •CPU utilization •Network PacketsOut •Network PacketsIn •CPUCreditUsage •Disk writes •NetworkOut

16. Q34: What are the minimum and maximum sizes of the individual objects you can Q34: What are the minimum and maximum sizes of the individual objects you can store in S3? store in S3? Answer: Answer: The minimum size of the object you can store in S3 is 0 bytes, and the maximum length of an object that you can save is 5TB. Q35: Introduce the various storage classes available in S3. Q35: Introduce the various storage classes available in S3. Answer: Answer: The storage classes available in S3 are as follows: •Standard frequency accessed •One-zone infrequency accessed •RRS – reduced redundancy storage •Standard infrequency accessed •Glacier •Glacier Deep Archive Q36: State the methods to encrypt the data in S3. Q36: State the methods to encrypt the data in S3. Answer: Answer: The available methods for encrypting the data in S3 are mentioned below: •Client-Side Encryption •Server-Side Encryption – S3 •Server-Side Encryption – KMS

17. Q37: How is the pricing of S3 decided? Q37: How is the pricing of S3 decided? Answer: Answer: The pricing for S3 is decided based on: •Data transfer •Storage used •Number of requests •Transfer acceleration •Storage management Q38: Does Amazon VPC Q38: Does Amazon VPC support the property of broadcast or multicast? support the property of broadcast or multicast? Answer: Answer: No, Amazon VPC does not support the property of broadcast or multicast. Q39: How many IP addresses does the AWS account allow? Q39: How many IP addresses does the AWS account allow? Answer: Answer: Each AWS account can have 5 elastic addresses by default Q40: How will you define Edge Location? Q40: How will you define Edge Location? Answer: Answer: An edge location is where end-users access services located at AWS. It is the place where the actual content is cached for use with CloudFront CDN. A user can find the content being searched at the Edge Location.

18. Q41: Define Snowball. Q41: Define Snowball. Answer: Answer: Snowball is used to transfer data in AWS. The data can be transferred into AWS and out of it with the help of snowball. It helps us in transporting a massive amount of data from the source to the destination. It also lowers the networking expense. Q42: Mention the advantages of auto Q42: Mention the advantages of auto- -scaling. scaling. Answer: Answer: The advantages of autoscaling are: •Better availability •Better cost management •High fault-tolerant Q43: Explain the subnet and mention the Q43: Explain the subnet and mention the number of subnets we can have per VPC. number of subnets we can have per VPC. Answer: Answer: Subnets are the small chunks created by splitting a considerable amount of IP addresses. You can have 200 subnets per VPC. Q44: Define AWS CloudTrail. Q44: Define AWS CloudTrail. Answer: Answer: An AWS service that helps you enable logging, governance, risk auditing, and compliance of your AWS account can be referred to as AWS CloudTrail. It records events when actions are taken by the role, user, or an AWS service. Events include when measures are taken by AWS command-line interface, AWS management console, APIs, and AWS SDKs.

19. Q45: How will you explain Elasticache? Q45: How will you explain Elasticache? Answer: Answer: Elasticache can be defined as a web service that proffers the path more effortlessly to deploy and save the data in the cloud quickly. Q46: How much boot time does an instance stored Q46: How much boot time does an instance stored- -backend AMI take? backend AMI take? Answer: Answer: The boot-time for the instance stored-backend AMI is less than 5 minutes. Q47: Introduce the key features of Amazon Cloud Search. Q47: Introduce the key features of Amazon Cloud Search. Answer: Answer: The key features of Amazon cloud search are as follows: •Prefixes Searches •Enter text search •Boolean searches •Range searches •Autocomplete Advice Q48: What is AWS Q48: What is AWS Lambda? Lambda? Answer: Answer: AWS Lambda is a serverless computational service that permits you to run code without keeping up any servers. It naturally executes the code whenever required. You are needed to pay for the time that you have utilized it for. Lambda empowers you to run the code virtually for any application without managing any servers.

20. Q49: Define Amazon EMR. Q49: Define Amazon EMR. Answer: Answer: Amazon EMR is a trained cluster platform that explains running big data frameworks with the tools, such as Apache Hadoop and Apache Spark, on AWS to process and identify the massive amounts of data. One can use the data for making analytical goals through apache hive and other relevant open source technologies. Q50: Explain Security Group. Q50: Explain Security Group. Answer: Answer: Security Groups are the virtual firewalls that control the in and out traffic to instances. They enable you to manage traffic based on several perspectives, such as protocol, port, and source destination.