Trianz AWS Devops Engineer Interview Questions and Answers

Q1. Share Your experience on Creating AWS resources. GUI or using IAC tool?
Ans. 
I primarily use IAC tools like Terraform to create AWS resources for consistency, version control, and automation.
• I prefer using IAC tools like Terraform for creating AWS resources as it allows for infrastructure as code, version control, and automation.

• Using IAC tools ensures consistency in resource creation across environments.

• GUI can be useful for quick prototyping or exploring AWS services, but IAC is more efficien...read more
Answered by AI
Add your answer
Q2. Have you got any issues in pod, while creating or monitoring pods in the kubernetes cluster?
Ans. 
Yes, I have faced issues while creating or monitoring pods in a Kubernetes cluster.
• One common issue is pods getting stuck in a pending state due to resource constraints or scheduling issues.

• Another issue is pods crashing frequently due to misconfigured settings or incompatible container images.

• Monitoring pods can be challenging, especially when dealing with a large number of pods and trying to track their health and pe...read more
Answered by AI
Add your answer
Q3. What are use of Versioning in S3? Have you got any issues in working using S3?
Ans. 
Versioning in S3 allows for preserving, retrieving, and restoring every version of an object stored in a bucket.
• Enables recovery from unintended user actions or application failures

• Helps in maintaining different versions of objects for audit or compliance purposes

• Prevents accidental deletion or overwriting of objects

• Useful for tracking changes and rolling back to previous versions if needed
Answered by AI
Add your answer
Q4. What are the Devops tools, you have experience on?
Ans. 
I have experience with various DevOps tools including Jenkins, Docker, Ansible, and Terraform.
• Jenkins

• Docker

• Ansible

• Terraform
Answered by AI
Add your answer

Q1. Questions on Network Part
Add your answer

Q1. If i delete an instance on the console and then i deploy the same instance terraform template how will terraform behave?
Ans. 
Terraform will recreate the instance as per the template
• Terraform will detect that the instance is missing and recreate it based on the template

• The new instance will have the same configuration as defined in the template

• Any changes made to the instance outside of Terraform will be lost
Answered by AI
Add your answer
Q2. If i have an instance configuration terraform template, and i manually add an ebs to it through console and then give terraform apply how will terraform behave?
Add your answer
Q3. What will be the IP range if i need 500 IPs?
Ans. 
The IP range for 500 IPs would typically be a /23 subnet.
• For 500 IPs, you would need at least a /23 subnet.

• A /23 subnet provides 512 IP addresses (2^9 = 512), with 510 usable IPs after subtracting network and broadcast addresses.

• The IP range for a /23 subnet would be from x.x.x.0 to x.x.x.255.
Answered by AI
Add your answer
Q4. Python coding on string manipulation
Add your answer
Q5. What are the health checks after creating instances - 2/2? What do they mean?
Ans. 
Health checks after creating instances ensure the instances are functioning properly.
• Instance status checks ensure the instance is reachable and responding to traffic.

• System status checks ensure the underlying hardware is functioning properly.

• Example: If an instance fails the system status check, it may indicate a problem with the underlying host hardware.
Answered by AI
Add your answer
Q6. How to deploy microservices?
Ans. 
Microservices can be deployed using containerization tools like Docker and orchestration tools like Kubernetes.
• Use containerization tools like Docker to package each microservice along with its dependencies into a container image.

• Leverage orchestration tools like Kubernetes to manage and deploy multiple microservices across a cluster of machines.

• Implement continuous integration and continuous deployment (CI/CD) pipelin...read more
Answered by AI
Add your answer
Q7. Write terraform code to launch an ec2 instance in a vpc and attach a role to it
Ans. 
Launch an EC2 instance in a VPC and attach a role using Terraform
• Define a VPC resource in Terraform

• Define a subnet resource within the VPC

• Create a security group for the EC2 instance

• Define an IAM role for the EC2 instance

• Launch an EC2 instance within the subnet and attach the IAM role
Answered by AI
Add your answer

Q1. Day to day activities
Add your answer
Q2. Why do you learn various technologies?
Add your answer
Q3. How will it be beneficial for you to learn various technologies because you will be working with limited technologies?
Add your answer
Q4. Your project workflow, and how do you manage your tasks
Add your answer

Q1. What is docker File ? Explain
Ans. 
Dockerfile is a text document that contains all the commands a user could call on the command line to assemble an image.
• Dockerfile is used to build Docker images by specifying a series of instructions.

• It includes commands like FROM, RUN, COPY, CMD, etc.

• Each instruction in the Dockerfile creates a layer in the image.

• Dockerfile is used to automate the process of creating Docker containers.

• Example: FROM ubuntu:latest, RUN
Answered by AI
Add your answer
Q2. What is webhook & why??
Ans. 
Webhook is a method of augmenting or altering the behavior of a web page, or web application, with custom callbacks.
• Webhook is a way for an application to provide other applications with real-time information.

• It allows developers to receive instant notifications when a specific event occurs.

• Webhooks are commonly used in automation, continuous integration, and deployment processes.

• Examples include receiving notification...read more
Answered by AI
Add your answer

How aws vs verulation.

Q1. Nacl vs security group?
Ans. 
Nacl is a stateless firewall while security group is a stateful firewall in AWS.
• NACL operates at the subnet level, while security groups operate at the instance level.

• NACL rules are evaluated in order, while security group rules are evaluated independently.

• NACLs are stateless, meaning you must create rules for both inbound and outbound traffic, while security groups are stateful.

• NACLs are more flexible in terms of allo...read more
Answered by AI
Add your answer
Q2. Aws cloudformation
Add your answer

Q1. Reason for change
Add your answer
Q2. Salary discuss how much excellent
Add your answer

Q1. What is Kubernetes networking and how does it work
Ans. 
Kubernetes networking is the way in which different pods and services communicate with each other within a Kubernetes cluster.
• Kubernetes networking allows pods to communicate with each other across nodes in the cluster.

• It uses a flat network model where each pod gets its own IP address.

• Kubernetes networking can be implemented using various plugins like Calico, Flannel, or Cilium.

• Network policies can be defined to contr...read more
Answered by AI
Add your answer
Q2. How does a pod communicate with other pods
Ans. 
Pods communicate with other pods through network communication within the same Kubernetes cluster.
• Pods can communicate with each other using services, which provide a stable endpoint for communication.

• Pods can use DNS names to communicate with other pods within the same cluster.

• Pods can also communicate directly using IP addresses within the cluster network.

• Communication between pods can be secured using network polici...read more
Answered by AI
Add your answer
Q3. What is ingress controller and how it is used in kubernetes networking
Ans. 
Ingress controller is a Kubernetes resource that manages external access to services within a cluster.
• Ingress controller acts as a traffic manager, routing incoming traffic to the appropriate services based on rules defined in the Ingress resource.

• It allows for the configuration of HTTP and HTTPS routing, load balancing, SSL termination, and more.

• Popular Ingress controllers include Nginx Ingress Controller, Traefik, an...read more
Answered by AI
Add your answer
Q4. What is the difference between ingress and service
Ans. 
Ingress controls the external access to services in a cluster, while service defines a set of pods and how they can be accessed.
• Ingress manages external access to services in a cluster

• Service defines a set of pods and how they can be accessed

• Ingress can provide load balancing, SSL termination, and routing based on hostnames or paths

• Service can be of type ClusterIP, NodePort, LoadBalancer, or ExternalName
Answered by AI
Add your answer

Q1. How to give access of s3 bucket to user in a secure way?
Ans. 
Grant access to S3 bucket securely by using IAM policies and roles.
• Create an IAM policy with specific permissions for the S3 bucket

• Attach the IAM policy to an IAM role

• Assign the IAM role to the user or group that needs access

• Use bucket policies for more granular control if needed
Answered by AI
Add your answer
Q2. Difference between iam role and iam group?
Ans. 
IAM role is used to grant permissions to entities, while IAM group is used to group users with similar permissions.
• IAM role is used to delegate permissions to entities like EC2 instances or Lambda functions

• IAM group is used to group users with similar permissions for easier management

• IAM role can be assumed by trusted entities, while IAM group is used for managing user permissions
Answered by AI
Add your answer