KPMG India Planning Engineer Interview Questions and Answers

NACL and security groups are both AWS network security features, but NACL operates at the subnet level while security groups operate at the instance level.

• NACL is stateless while security groups are stateful

• NACL can allow or deny traffic based on IP addresses, protocols, and ports while security groups only allow traffic

• NACL rules are evaluated in order while security group rules are evaluated independently

• NACL can be ...read more

Public and private subnets can be identified based on their IP address range and their accessibility from the internet.

• Public subnets have IP addresses that are accessible from the internet.

• Private subnets have IP addresses that are not accessible from the internet.

• Public subnets are typically used for resources that need to be accessed from the internet, such as web servers.

• Private subnets are typically used for resou...read more

S3 is for frequently accessed data while Glacier is for long-term archival storage.

• S3 is designed for frequently accessed data while Glacier is for long-term archival storage.

• S3 has low latency retrieval times while Glacier has higher retrieval times.

• S3 is more expensive than Glacier for storage and retrieval.

• Glacier has a tiered pricing model based on retrieval times and storage duration.

• S3 is suitable for storing dat...read more

AMI is a virtual machine while S3 is a storage service in AWS.

• AMI stands for Amazon Machine Image and is a pre-configured virtual machine that can be used to create EC2 instances.

• S3 stands for Simple Storage Service and is a scalable object storage service that can be used to store and retrieve data.

• AMI is used to create EC2 instances while S3 is used to store and retrieve data.

• AMI is used for computing while S3 is use...read more

The parameter for creating group policy using JSON is a JSON object containing the policy settings.

• The JSON object should include the policy name, description, and settings.

• The settings can include values for registry keys, security options, and other policy settings.

• Example: {"policyName": "Password Policy", "description": "Enforces password complexity requirements", "settings": {"MinimumPasswordLength": 8, "PasswordC