Set-A

1. How is Amazon EC2 different from traditional hosting systems? Explain it.

Web hosting is the most common method used by most companies nowadays to create, post, and manage a
web-page or website on the internet. The two broad categories of popular web hosting services
are traditional web hosting services and cloud hosting services. One of the leading contenders in cloud
hosting is Amazon Web Services.
Until now, small developers did not have the capital to acquire massive compute resources and ensure they
had the capacity they needed to handle unexpected spikes in load. Amazon EC2 enables any developer to
leverage Amazon’s own benefits of massive scale with no upfront investment or performance compromises.
Amazon EC2 differ from traditional hosting systems in following points.
1. Scalability
2. Flexibility
3. Cost Effective
4. Understandability
5. Speed

2. Which AWS service would you choose for a data processing project that needs a schemeless
database? Why do you choose? Explain with proper arguments.

Databases needs to organize and retrieve information in an organized way. Traditional relational
databases are well-defined, using a schema to describe every functional element. On the other hand In schemaless
databases, information is stored in JSON-style documents which can have varying sets of fields with different data types for
each field.

Amazon DynamoDB is used for schemaless data processing for below reasons.

• Greater flexibility over data types

By operating without a schema, databases can store, retrieve, and query any data type — perfect for big data analytics
and similar operations

• No pre-defined database schemas

The lack of schema means that your NoSQL database can accept any data type — including those that you do not yet
use. This future-proofs your database, allowing it to grow and change as your data-driven operations change and
mature.

• No data truncation

A schemaless database makes almost no changes to your data; each item is saved in its own document with a partial
schema, leaving the raw information untouched.

• Suitable for real-time analytics functions

With the ability to process unstructured data, applications built on NoSQL databases are better able to process real-time
data, such as readings and measurements from IoT sensors.

• Enhanced scalability and flexibility

With NoSQL, You can query, report, and model information however you choose. And as your requirements
grow, you can keep adding nodes to increase capacity and power.
Short Question:

1. A streaming media company wants to convert English language subtitles into Spanish language
subtitles. As a Cloud Practitioner, which AWS service would you recommend for this use-case?
Answare : Amazon Translate is a neural machine translation service that delivers fast, high-quality,
and affordable language translation.

2. A financial services company wants to migrate from its on-premises data center to AWS Cloud. As a
Cloud Practitioner, which AWS service would you recommend so that the company can compare the
cost of running their IT infrastructure on-premises vs AWS Cloud?
Answare : AWS Total Cost of Ownership calculates the various costs associated with migrating,
hosting, running, and maintaining applications, workloads, and data on the AWS public cloud.

3. Which AWS service can help you analyze your infrastructure to identify unattached or underutilized
EBS volumes?
Answare : AWS Trusted Advisor is another way for you to analyze your infrastructure to identify
unattached, underutilized, and overutilized EBS volumes.

4. Which disaster recovery strategy is well-suited as well as cost-effective for this requirement?
Answare :

5. Which benefit of Cloud Computing allows AWS to offer lower pay-as-you-go prices as usage from
hundreds of thousands of customers is aggregated in the cloud?
Answare : From hundreds of thousands of customers is aggregated in the cloud, Higher economies of
scale makes AWS translates into lower pay as-you-go prices

6. According to the AWS Shared Responsibility Model, which are responsibilities of the customer for
IAM?
Answare : Customers are responsible for managing their data (including encryption options),
classifying their assets, and using IAM tools to apply the appropriate permissions.

7. The QA team at a company wants a tool/service that can provide access to different mobile devices
with variations in firmware and Operating System versions. Which AWS service can address this use
case?
Answare : AWS Device Farm is an application testing service that lets you improve the quality of
your web and mobile apps by testing them across an extensive range of desktop browsers and real
mobile devices; without having to provision and manage any testing infrastructure.

8. Which is best-suited for load-balancing HTTP and HTTPS traffic?

Answare : Application Load Balancer is Ideal for load balancing of HTTP and HTTPS traffic.

9.A social media company wants to have the MOST cost-optimal strategy for deploying EC2 instances.
As a Cloud Practitioner, which available options would you recommend?
Answare : Use reserved instances for predicted usage over the next year and spot instances for ad hoc
jobs
 10. The DevOps team at an IT company wants to centrally manage its servers on AWS Cloud as well as
on-premise data center so that it can collect software inventory, run commands, configure and patch
servers at scale. As a Cloud Practitioner, which AWS service would you recommend for
this use-case?
Answare : AWS Systems Manager, can collect software inventory run command and update patch
management.

Set-B

1. According to the Shared Responsibility Model, which common things are both the responsibility of
AWS and the customer? Explain with proper arguments.
Answare : Security and Compliance is a shared responsibility between AWS and the customer it
depends on which type of service. AWS is responsible for protecting the infrastructure that runs all of the
services offered in the AWS Cloud. Customer responsibility will be determined by the AWS Cloud services
that a customer selects.
For example, a service such as Amazon Elastic Compute Cloud (Amazon EC2) is categorized as
Infrastructure as a Service (IaaS) and, as such, requires the customer to perform all of the necessary
security configuration and management tasks. Customers that deploy an Amazon EC2 instance are
responsible for management of the guest operating system (including updates and security patches), any
application software or utilities installed by the customer on the instances, and the configuration of the
AWS-provided firewall (called a security group) on each instance. For abstracted services, such as Amazon
S3 and Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and platforms,
and customers access the endpoints to store and retrieve data. Customers are responsible for managing
their data (including encryption options), classifying their assets, and using IAM tools to apply the
appropriate permissions.
2. A production company would like to establish an AWS managed VPN service between its on-
premises network and AWS. Which item needs to be set up on the company's side? Give a detail
explanation with illustration.
Answare : AWS Client VPN is a managed client-based VPN service that enables securely access AWS
resources and resources reside on-premises. With Client VPN, user can access resources from any
location using an OpenVPN-based VPN client.

The following diagram represents the configuration of your VPC and Client VPN endpoint after you've
completed this tutorial.
Steps

• Step 1: Generate server and client certificates and keys

• Step 2: Create a Client VPN endpoint
• Step 3: Associate a target network
• Step 4: Add an authorization rule for the VPC
• Step 5: Provide access to the internet
• Step 6: Verify security group requirements
• Step 7: Download the Client VPN endpoint configuration file
• Step 8: Connect to the Client VPN endpoint

1. A company needs to use a secure online data transfer tool/service that can automate the
ongoing transfers from on-premises systems into AWS while providing support for incremental
data backups. Which AWS tool/service is an optimal fit for this requirement?
Answare : AWS DataSync is an online data movement and discovery service that simplifies and
accelerates data migrations to AWS as well as moving data between on-premises storage, edge
locations, other clouds, and AWS Storage.
2. Which types of monitoring can be provided by Amazon CloudWatch?
Answare : Amazon CloudWatch can monitor AWS resources such as Amazon EC2 instances, Amazon
DynamoDB tables, and Amazon RDS DB instances, as well as custom metrics generated by your
applications and services, and any log files your applications generate.
 3. A media company wants to enable customized content suggestions for the users of its movies
streaming platform. Which AWS service can provide these personalized recommendations
based on the historic data?
Answare : Amazon Personalize - Amazon Personalize enables developers to build applications with
the same machine learning (ML) technology used by Amazon.com for real-time personalized
recommendations.
4. Which AWS serverless service allows you to prepare data for analytics?
Answare : AWS Glue is a serverless data integration service that makes it easy to prepare data for
analytics, machine learning, and application development
5. Which AWS tool/service will help you define your cloud infrastructure using popular
programming languages such as Python and JavaScript?
Answare : The AWS Cloud Development Kit (AWS CDK) is an open-source software development
framework to define your cloud application resources using familiar programming languages.
6. A company would like to reserve EC2 compute capacity for three years to reduce costs. The
company also plans to increase their workloads during this period. As a Cloud Practitioner,
which EC2 Reserved Instance type would you recommend?
Answare : Use spot instances for increased workloads.

7. Mention some of the benefits of using AWS Elastic Load Balancing (ELB).
Answare : Elastic Load Balancing automatically distributes your incoming traffic across multiple
targets, such as EC2 instances, containers, and IP addresses, in one or more Availability Zones
8. A multinational company has just moved its infrastructure to AWS Cloud and has employees
traveling to different offices around the world. How should the company set the AWS
accounts?
Answare : Traveling employee access can be controlled IAM as IAM is a global service
9. A company would like to define a set of rules to manage objects cost-effectively between
storage classes. As a Cloud Practitioner, which Amazon S3 feature would you use?
Answare : I would like to use intelligent tiering policy to move data in different type storage.
10. The IT infrastructure at a university is deployed on AWS Cloud and it's experiencing a read-
intensive workload. As a Cloud Practitioner, which AWS service would you use to take the load
off databases?
Answare : I would use read replica for database for increased database load