AWS Interview Questions and Answer Part – 28

Security Groups are:

• Stateless – traffic strictly filtered
• Stateless – return traffic not allowed (Ans)
• Stateful – return traffic allowed
• Stateful – traffic strictly filtered

Read replicas are synchronously replicated:

• False (Ans)
• True

Multiple ELBs can be deployed per region:

• True (Ans)
• False

What CIDR block range can be configured with a VPC?

• 14 – 26
• 16 – 28 (Ans)
• 18 – 32
• 15 – 36

Amazon S3 and S3 RRS are built with a durability of:

• Standard: 8 nines, RRS: 3 nines
• Standard: 11 nines, RRS: 4 nines (Ans)
• Standard: 10 nines, RRS: 4 nines
• Standard: 12 nines, RRS: 3 nines

Custom metrics are not currently supported with CloudWatch:

• True
• False (Ans)

What is the maximum IOPS/volume for Provisioned IOPS?

• 48,000
• 20,000 (Ans)
• 64,000
• 10,000

VPC Peering allows transitive peering:

• True
• False (Ans)

Which of the following are valid EBS backup options?

• API integration
• Snapshots
• All of the above (Ans)
• Agent-based approach

Which of the following is not a supported RDS database?

• DB2 (Ans)
• Amazon Aurora
• MySQL
• Oracle

AWS ELB’s architecture is region wide.

• True (Ans)
• False

PRDS does not have reserved instance pricing similar to EC2:

• False (Ans)
• True

Amazon S3 is a file system:

• True
• False (Ans)

Port redundancy is available by default for:

• Direct Connect
• Internet-based VPN (Ans)

Which of the following is not a category that Trusted Advisor can report against?

• User Experience (Ans)
• Performance
• Cost
• Security

What is the default delay between EC2 instance deployment when using Auto Scaling groups?

• 200 seconds
• 100 seconds
• 50 seconds
• 300 seconds (Ans)

EBS volumes can be transferred between AZs?

• False
• True (Ans)

Which of the following is not an Auto Scaling Component?

• Amazon CloudWatch (Ans)
• Auto Scaling Groups
• Scaling Plans
• Launch Configuration

How can SSL offload be customized for specific customer needs?

• Enable encryption using HTTPS only listeners.
• Upload a customer security certificate.
• Create a custom security policy. (Ans)
• Deploy IAM policys per customer.

What virtual multifactor authentication protocol choices is required for the root account ?

• The virtual devices must support the time-based, one-time password standard (Ans)
• Open ID connect
• SMS MFA
• SAML 2.0

Each AWS account has two unique IDs. Name them.

• Username and account ID
• Canonical ID and password
• AWS Username and password
• Canonical ID and account ID (Ans)

Rajesh Kumar

I’m Rajesh Kumar, a DevOps, SRE, DevSecOps, Cloud, and Platform Engineering expert passionate about sharing practical knowledge, real-world experiences, and industry best practices. I have worked at Cotocus and regularly write about technology, travel, investing, health, product reviews, and digital marketing through my various platforms.

I publish technical articles at DevOps School, travel stories at Holiday Landmark, stock market insights at Stocks Mantra, health and fitness guidance at My Medic Plus, product reviews at TrueReviewNow, and SEO and digital marketing strategies at Wizbrand.