Pentagon System and Services AWS Cloud Engineer Interview Questions, Process, and Tips

Transit Gateway is a service that allows for centralized management of multiple VPCs and VPN connections in AWS.

• Acts as a hub that connects multiple VPCs and on-premises networks

• Simplifies network architecture by reducing the number of connections needed

• Supports VPN connections, Direct Connect, and inter-region peering

• Allows for routing between connected networks using route tables

Public IP is accessible from the internet while private IP is only accessible within a private network.

• Public IP is assigned by the internet service provider and is unique globally.

• Private IP is assigned by the network administrator and is unique within the private network.

• Public IP is used to communicate with devices outside the private network.

• Private IP is used to communicate within the private network.

• Examples of p...read more

EC2 can access the network through Elastic Network Interfaces (ENIs) and Security Groups.

• EC2 instances are launched in a VPC and can be assigned one or more ENIs.

• ENIs provide a virtual network interface, including a private IP address, security groups, and MAC address.

• Security Groups act as a virtual firewall, controlling inbound and outbound traffic to the EC2 instance.

• EC2 instances can also be assigned Elastic IP add

Active Directory can be installed using the Server Manager or PowerShell.

• Open Server Manager and select Add Roles and Features

• Select Active Directory Domain Services and follow the wizard

• Alternatively, use PowerShell command Install-WindowsFeature AD-Domain-Services

• Configure the domain and add users and groups as needed

Domain is a logical group of computers while forest is a collection of domains.

• Domain is a security boundary within which users, computers, and other resources are managed.

• Forest is a collection of one or more domains that share a common schema, configuration, and global catalog.

• Domains can be organized into a hierarchy, while forests cannot.

• Domains can have different security policies, while forests have a common secu...read more

No, files cannot be directly stored in S3 Glacier

• S3 Glacier is designed for long-term archival storage of data

• Files must first be stored in S3 Standard or S3 Infrequent Access before transitioning to Glacier

• Transitioning to Glacier incurs additional costs and retrieval times

There are 3 availability zones in Mumbai and 2 in Hyderabad regions.

• Mumbai region has 3 availability zones named ap-south-1a, ap-south-1b, and ap-south-1c.

• Hyderabad region has 2 availability zones named ap-south-2a and ap-south-2b.

• Availability zones are distinct locations within a region that are engineered to be isolated from failures in other availability zones.