AWS Cloud Interview questions and answers | AWS Practitioner : Core Services, Architecture, & Security

AWS Cloud Practitioner Challenge: Core Services, Architecture, & Security

Test your knowledge of **AWS Core Services (EC2, S3, Lambda)**, networking fundamentals, and essential architecture concepts. **Pass with 80% to proceed to the next difficulty level.**

Level 1: Core Services & Fundamentals: 0/10 (0%)

Level 2: Networking & Compute (EC2, VPC): 0/10 (0%)

Level 3: Storage, Serverless, & Security: 0/10 (0%)

Level 1: Core Services & Fundamentals

1.1 What is the foundational compute service in AWS that provides resizable capacity in the cloud?

A. Amazon S3 B. Amazon EC2 C. AWS Lambda

**Correct Answer: B. Amazon EC2**. EC2 (Elastic Compute Cloud) provides virtual servers (instances) for running applications.

1.2 Which AWS service is an object storage service offering high scalability, data availability, security, and performance?

A. Amazon EBS B. Amazon Glacier C. Amazon S3

**Correct Answer: C. Amazon S3**. S3 (Simple Storage Service) is ideal for storing unstructured data like backups, images, and videos.

1.3 A collection of logically grouped AWS data centers that are isolated from failures in other locations is called a(n):

A. Data Center B. Availability Zone (AZ) C. Edge Location

**Correct Answer: B. Availability Zone (AZ)**. AZs are distinct locations within a Region that are isolated from failures in other AZs.

1.4 What does the acronym VPC stand for in the context of AWS networking?

A. Virtual Processing Core B. Vendor Provisioned Cloud C. Virtual Private Cloud

**Correct Answer: C. Virtual Private Cloud**. A VPC is a logically isolated virtual network where you launch AWS resources.

1.5 The pricing model where you pay only for the compute time you consume, with no charge when your code isn't running, is characteristic of which service?

A. Amazon EC2 B. Amazon RDS C. AWS Lambda

**Correct Answer: C. AWS Lambda**. AWS Lambda is a serverless, event-driven compute service.

1.6 Which service is a fully managed relational database service that supports multiple database engines (e.g., MySQL, PostgreSQL)?

A. Amazon DynamoDB B. Amazon RDS C. Amazon Redshift

**Correct Answer: B. Amazon RDS**. RDS (Relational Database Service) simplifies the setup, operation, and scaling of relational databases.

1.7 What is the service used to manage user access to AWS resources, providing authentication and authorization?

A. AWS Config B. AWS IAM C. AWS CloudTrail

**Correct Answer: B. AWS IAM**. IAM (Identity and Access Management) allows you to securely control access to AWS services and resources.

1.8 To ensure your application can recover quickly from a major disaster (e.g., an entire Region failure), you should design it to use:

A. Multiple EC2 instances within one AZ B. Multiple AWS Regions C. A single Availability Zone

**Correct Answer: B. Multiple AWS Regions**. Multi-Region deployment provides the highest level of disaster recovery.

1.9 What resource is a serverless, NoSQL database service designed for single-digit millisecond performance at any scale?

A. Amazon RDS B. Amazon Aurora C. Amazon DynamoDB

**Correct Answer: C. Amazon DynamoDB**. It's AWS's fully managed key-value and document database.

1.10 The concept that AWS is responsible for the security of the cloud, while the customer is responsible for security in the cloud, is called:

A. Security Compliance Model B. Shared Responsibility Model C. Global Infrastructure Model

**Correct Answer: B. Shared Responsibility Model**. A core tenet of AWS security.

**End of Core Services & Fundamentals. Click "Next Level" to continue.**

Level 2: Networking & Compute (EC2, VPC)

2.1 Within a VPC, what is the layer of security that acts as a stateless filter for subnet traffic?

A. Security Group B. Network ACL (NACL) C. WAF (Web Application Firewall)

**Correct Answer: B. Network ACL (NACL)**. NACLs operate at the subnet level and are stateless; they don't remember previous traffic.

2.2 Which type of Elastic Load Balancer (ELB) operates at the application layer (Layer 7) and supports path-based and host-based routing?

A. Classic Load Balancer B. Application Load Balancer (ALB) C. Network Load Balancer (NLB)

**Correct Answer: B. Application Load Balancer (ALB)**. ALBs are best for HTTP/HTTPS traffic and offer advanced routing features.

2.3 You need to ensure a new EC2 instance receives the same private IP address every time it is launched. How should you configure its networking?

A. Assign a Public IP B. Assign a Primary Private IP C. Attach an Elastic IP

**Correct Answer: B. Primary Private IP**. The primary private IP is associated with the Network Interface (ENI) and remains with the instance upon stop/start.

2.4 A mechanism that allows an EC2 instance to assume permissions via an IAM policy without managing access keys is called a(n):

A. IAM User B. Access Group C. IAM Role

**Correct Answer: C. IAM Role**. Roles are the preferred way to grant permissions to AWS services like EC2.

2.5 Which EC2 purchase option is best suited for workloads that can tolerate interruptions and offer the greatest cost savings?

A. Reserved Instances B. On-Demand C. Spot Instances

**Correct Answer: C. Spot Instances**. Spot Instances offer up to a 90% discount but can be reclaimed by AWS with a two-minute notice.

2.6 What is the main function of an Internet Gateway attached to a VPC?

A. Connects two VPCs together B. Translates private IP to public IP C. Enables communication between the VPC and the internet

**Correct Answer: C. Enables communication**. It's a horizontally scaled, redundant, and highly available VPC component that allows traffic from the internet.

2.7 Which AWS service is used to automatically adjust the number of EC2 instances in a group based on observed demand?

A. Elastic Load Balancer B. AWS Auto Scaling C. Amazon CloudWatch

**Correct Answer: B. AWS Auto Scaling**. Auto Scaling automatically provisions and terminates EC2 instances to maintain performance and manage costs.

2.8 What is a Security Group and how does it primarily differ from a Network ACL?

A. Stateless and operates at the subnet level B. Operates at the subnet level C. Stateful and operates at the instance level

**Correct Answer: C. Stateful and operates at the instance level**. Security Groups filter traffic *to* or *from* an EC2 instance and remember connections (stateful).

2.9 When you provision a new EC2 instance, the primary persistent block-level storage for the OS drive is provided by:

A. Amazon S3 B. Amazon EBS C. Instance Store

**Correct Answer: B. Amazon EBS**. EBS (Elastic Block Store) volumes are network-attached disks that persist independently of the EC2 instance.

2.10 Which component of a VPC dictates which traffic is allowed to route between subnets or to the Internet Gateway?

A. Security Group B. Network ACL C. Route Table

**Correct Answer: C. Route Table**. A Route Table contains a set of rules, called routes, that determine where network traffic from a subnet is directed.

**End of Networking & Compute. Click "Next Level" to continue.**

Level 3: Storage, Serverless, & Security

3.1 What is the most cost-effective S3 storage class for data that is infrequently accessed but requires millisecond retrieval when needed?

A. S3 Standard B. Glacier Deep Archive C. S3 Standard-IA (Infrequent Access)

**Correct Answer: C. S3 Standard-IA**. It's cheaper to store than Standard but incurs a retrieval fee, making it ideal for infrequently used data.

3.2 Which service is a central repository for monitoring and managing the configuration of your AWS resources, ensuring compliance?

A. AWS Trusted Advisor B. AWS Config C. AWS CloudFormation

**Correct Answer: B. AWS Config**. It continuously tracks and records configuration changes for auditing and compliance.

3.3 When building a Serverless application, which two services are commonly used together for event-driven processing?

A. EC2 & RDS B. S3 & Lambda C. ALB & Auto Scaling

**Correct Answer: B. S3 & Lambda**. Events like a new file upload to S3 can automatically trigger a Lambda function to process that file.

3.4 What is the primary difference between Amazon SQS (Simple Queue Service) and Amazon SNS (Simple Notification Service)?

A. SQS uses HTTPS; SNS uses TCP B. SQS is serverless; SNS is not C. SQS is a message queue; SNS is a publish/subscribe system

**Correct Answer: C. SQS is a queue; SNS is pub/sub**. SQS allows a service to pull messages; SNS pushes messages to multiple subscribers simultaneously.

3.5 To automate the process of provisioning and managing your AWS infrastructure using code (Infrastructure as Code), you would use:

A. AWS Config B. AWS CloudFormation C. AWS Organizations

**Correct Answer: B. AWS CloudFormation**. It allows you to model and provision all your infrastructure resources with a declarative template.

3.6 Which service provides free, personalized recommendations to help you follow AWS best practices for cost optimization, performance, security, and fault tolerance?

A. AWS Config B. AWS CloudTrail C. AWS Trusted Advisor

**Correct Answer: C. AWS Trusted Advisor**. This service scans your environment and provides tailored, actionable guidance.

3.7 Which service provides a detailed record of API calls made within your AWS account for security analysis and troubleshooting?

A. AWS Config B. AWS CloudTrail C. AWS CloudWatch

**Correct Answer: B. AWS CloudTrail**. CloudTrail logs all API activity (who did what, where, and when), which is crucial for security.

3.8 What is the benefit of using EFS (Elastic File System) over a standard EBS volume?

A. Lower cost for primary storage B. Can be shared concurrently by thousands of EC2 instances across multiple AZs C. Better for boot volumes

**Correct Answer: B. Can be shared across AZs**. EFS is an NFS file system that can be mounted by many instances simultaneously, offering high durability and availability.

3.9 What AWS service can be used to manage domain names and acts as a highly available and scalable DNS web service?

A. Amazon Route 53 B. Amazon CloudFront C. AWS Global Accelerator

**Correct Answer: A. Amazon Route 53**. It's named after the standard DNS port 53 and is central to directing internet traffic to AWS resources.

3.10 Which service is a Content Delivery Network (CDN) that securely delivers data, videos, applications, and APIs globally with low latency?

A. AWS Global Accelerator B. Amazon CloudFront C. Amazon Route 53

**Correct Answer: B. Amazon CloudFront**. CloudFront caches your content at Edge Locations around the world, speeding up delivery to users.

**AWS Basics Mastered! Click "Finish Quiz" to see your final summary.**

Final Quiz Summary 📋

Related Topics & Tags

AWS EC2 S3 VPC Lambda IAM CloudFormation Serverless Networking Security

Awk command with simple examples

Now, we are going to learn very interesting and Most important in Linux Why late lets know about Awk command,one of the mostly used command in scripting. awk command used to manipulate data | using this AWK command we can generate specified reports as per our requirement. Syntax : awk ‘BEGIN {start_action} {action} END {stop_action}’ filename let me explain about awk command with simple examples Example 1: How to print entire data of the file cat filename | awk '{print}' cat filename | awk '{print$0}' both " awk '{print}' and awk '{print$0}' " used to print entire date Example 2: How to print very first column cat filename| awk '{print$1}' awk '{print$1}' used to print very first column awk '{print$1}' used to print second column Example 3: How to print p attern Matching Technique in Awk. free -m | awk '{/Mem/print}' here, we are matching Mem using awk '{...

Learn Linux in Telugu | Linux complete Free Course in Telugu by 7Hills

Hello, Here we are going to learn complete Linux course freely & Simply way. Why Linux? Linux is an heart the operating system, Based on the Linux Kernel their are different types of Linux flavors available i.e.. RedHat, Centos, Fedora, Mint Debian, Kali, OpenSUSE...etc Features of Linux Open source. Multi-user. Multitasking. Hierarchical file system. Portable. Wide hardware support. No need to worry, we explained each and every topic clearly just click on the below links for watch on Youtube. 1. Linux outline in Telugu 2. Linux introduction In Telugu 3. Linux architecture In Telugu 4. Linux Directory Structure In Telugu 5. Linux Basic Commands In Telugu 6. ...

Hey! Well come back! Here, we are going to learn very useful command rsync. basically rsync is used to sync file system with same structure. It also used to data backup/copy. rsync is free command line utility & In most of the system it available defiantly. We can install rsync utility in debian based system using below command apt-get install rsync We can install rsync utility in redhat based system using below command yum install rsync Below command used to copy files without using option rsync /root/Desktop/original/* /root/Desktop/backup/ Below command used for recursive copy, it means with sub folders. rsync -avhr /root/Desktop/original/* /root/Desktop/backup/ Here -a is used for archive data. -v is used for show output. -h is used for show copied data in MB's,it means human readable format. Below command used for include or exclude rsync -avz --in...

Now we are going to learn very useful & interesting topic "How to reduce/extend LVM size" with real time example.hope this article very helpful for you. For example scenario, I have added some storage space to linux machine,we need to scan hosts to display in linux machine, we can scan all hots/LUN's by using below commands at the time. ------------------------------------------------------ Use below command to scan hosts/LUN's. ls /sys/class/scsi_host/ | while read host ; do echo "- - -" > /sys/class/scsi_host/$host/scan ; done Use below command to verify newly added device/stroage #lsblk Use below command to format /dev/sdb #fdisk /dev/sdb Below commands helpful for complete format. #n #p enter enter #t #8e p #wq Below command used to update partition info to kernal. partprobe /dev/sdb1 try below command to create pv(Physical volume) #pvcreate /dec/sdb1 Try below command to create volume group #vgcreate VG0...