Day-8 |AWS Scenario Based Interview Questions on EC2, IAM and VPC |

[@sudhakarsabbana8728]

Hai Abhishek ,You are doing a great job..actually, I never seen the people like you in you tube platform and you explained the concepts and the way of presentation everything is perfect ..I really would like thank to you for your most informative knowledge have been sharing with us that gave more confidence for interview purpose.. And please don't stop the videos its my request because, I am really enthusiastic to watch you videos.

[@AbhishekVeeramalla]

Sure

[@dhritimanbambu]

@@AbhishekVeeramalla ..really its very informative.. keep sharing your knowledge .. doing a great thing ..

[@vback4238]

The best trainer online!!!

[@uzairbagwan4117]

Hats off to the efforts ❤....Soon going to make a project on VPC from the previous video.

[@AbhishekVeeramalla]

Best of luck

[@rveeranki296]

Hi @Abhishek, looks like there is a typo in one question, it should be, what is the difference between NACL and security group and not the subnet 🙂

[@miraclekohli2901]

SG provides the security at the instance level (EC2) whereas NACL provides the security at the entire subnet level.

[@amitmitra8907]

The one is stateless and other is statefull

[@exploresomething1401]

Sir, there is windows os in my PC so should i change into linux or i can use amazon virtual machine with linux please help me in this.

[@AbhishekVeeramalla]

Yes u can use

[@dummymail6029]

great video thanks @abhishek

[@nehamahajan3129]

Thank you so much 🙏

[@sarlapatel5837]

Abhishek please make one video on aws organization topic

[@nallapaneniram766]

perfect that covers a lot.

[@udaykumar-ir7iq]

HI Abhishek, Please explain the vpc tunnel architecture , on premises server migration to aws cloud .

[@sriramulavarshini7083]

We need your help in getting opportunities or openings in ur network if you find any...pls do share us sir.

[@AbhishekVeeramalla]

If there is something I will let u all know

[@charugondlaakhil6851]

Hi Abhishek, the question is diff b/w NACL and security groups. You mentioned it as NACL and subnet and mistakenly you are using the same words in between. i mean its ok for people who are in touch with concept but otherwise might get confused.

[@VIVEKKUMAR-kx1up]

good morning on the community please post the reach of your KZbin SUBSCRIBES growth rate (percentage) currently informative video!! 🙏🙏

[@AbhishekVeeramalla]

Thanks alot ❤️

[@uppulapuraviteja307]

keep going

[@BharathGod]

Tq bro

[@AbhishekVeeramalla]

Welcome

[@aesthetic-kee44]

Moba xterm mein private ec2 krna bta do

[@suhasiniaddanki7304]

Hi Abhishek, I am trying in Azure, so correlating these concepts to Azure. Can we call NACL as Network security group in Azure? If not, what we can call in Azure cloud

[@tech_talks_with_shivi]

Apka content bhut acha hai but content delivery par you can work.. content is very very good but you need to change way of content deliverin

[@AbhishekVeeramalla]

Thanks for the feedback .. I will try

[@workwithmayuresh]

One more awesome video in this series !❤ Thank you so much !❤Just would like to give one correction suggestion for question , at timestamp 16:10 it should be "What is the difference between NACL and Security Groups ? " instead of NACL and SUBNET

[@Madhusudhanreddy-g4p]

its a stateless firewall and it is subnet level security group,while we connecting withe server to server then we give permission in both inbound and outbound rules. subnet is nothing subnetwork of main network for example vpc size is 65536 then we can allocate the size of subnet is 256ips.

[@VijayKumar-bj1hr]

sir one question is this much of knowledge what your teaching of AWS is enough for getting a job as a FRESHER ,if yes its ok but ,no then what more knowledge we want to know for getting a job plzz let me know😇

[@AbhishekVeeramalla]

If u complete this course it should be enough

[@jayvardhanprajapat7596]

You are giving gold to the Devops and cloud community ❤.

[@sibasankarpandit1101]

Hai Abhishek Sir I just wanted to thank you for your AWS Scenario Based Interview Questions on EC2, IAM and VPC video. I found it to be very informative and helpful. I especially appreciated the way you explained the concepts in a clear and concise way.I am currently preparing for an AWS And DevOps Tools interview, and your video has given me a lot of confidence. I feel much more prepared to answer questions about EC2, IAM, and VPC. Thank you again for your great video. I would highly recommend it to anyone who is preparing for an AWS interview.

[@AbhishekVeeramalla]

Welcome

[@chandrasekhar7147]

Hi could you share your number , I am also preparing for the interview

[@tharun4767]

same interview questions i had faced in multiple interviews.Thanks for sharing knowledge Abhishek

[@003shamshuddin]

i have seen some roadmaps they don't explicitly tell us to learn about sonarqube and nexus repo isn't this important and also do we need to learn any database like MySQL?

[@AbhishekVeeramalla]

In this roadmap ?

[@003shamshuddin]

@@AbhishekVeeramalla no sir generally speaking in KZbin I have seen some roadmaps they don't mention those tools👆

[@SiddharthMuruganandam]

I think there is a typo at 16:39 NACL and Security group not NACL and subnets !

[@ganeshpathare8814]

Hii Abhishek can you plese add aws lambda service in course...

[@AbhishekVeeramalla]

It is already there

[@JipJop-g2j]

Are going to make video on this topic such as glue athena kinesis redshift

[@AbhishekVeeramalla]

I will try my best to cover what ever posible

[@siddharthtyagi1254]

can these questions help us in aws cloud partitioner and solution architect exam

[@AbhishekVeeramalla]

It may help but this is more job oriented

[@geeth17]

at 5:43 Sir, can the answer be modifying the NACLs for the subnets as u said nacl works at subnet level and the question specially mentions subnets?

[@AbhishekVeeramalla]

Yes NACLs , you are right

[@manukumar-zv5yd]

Hi abhi sir .... I am a commerce student. I learned some DevOps tools ... Can I get job if I have a good skill with DevOps tools .. bcz many people telling DevOps need engineer background so I learnt now I am confusing so plz guid me what can I do now

[@AbhishekVeeramalla]

Yes .. please follow both devops zero to hero and aws zero to hero

[@hussainshaik2673]

differnece between nacl and subnet but most of the times we get the question like Diff b/w NACL & Security Group

[@AbhishekVeeramalla]

The question heading was wrong .. even I explained the diff between nacl and sg

[@vk20924]

Today I have attended for devops interview. They asked me how to troubleshoot the application on aws ? Could you please share the answer to this question?

[@AbhishekVeeramalla]

I have explianed in this series .. please check

[@venkateshgunda]

Bro. I am impressed with your content. I thought you should make some questions on the topics covered. And you did

[@AbhishekVeeramalla]

Haha

[@abhishekvishwakarma9045]

awesome questions, sometimes in between I get confused between NAT gateway and bastion host, but after proper thinking I got the difference NAT gateway -> helps in blocking inbound traffic from the internet, stays in public subnet and helps instances to communicate to the internet by enabling outbound traffic (via network address translation - replacing the private ip of instance with public ip of NAT instance) Bastion host -> if the instance is present in private subnet, then with the help of bastion host we can allow inbound access to known IP addresses from the internet (kind of authentication)

[@AbhishekVeeramalla]

😍

[@farikdk]

Thanks for the informative video. I think there is typo in timestamp 17:00 , difference between subnet and NACL. it should be the difference between NACL and security group :)

[@AbhishekVeeramalla]

Yes, you are right

[@farikdk]

@@AbhishekVeeramalla this implies that you have followers that watches your video carefully 😎🕵️‍♀️ i was wondering if you offer software engineer/ developer coaching session to crack interview and land a job?

[@Cloud-DevOps_Aspirant]

Hi Abhishek, I think you're not including a few of the topics like elastic block storage in this series? Can you mention what those topics are, so that we can study that from the internet.

[@AbhishekVeeramalla]

I will cover them in some projects .. Incase of things not covered I will share the references to study them at the end of the series

[@Cloud-DevOps_Aspirant]

@@AbhishekVeeramalla thanks, thanks alot Abhishek!!

[@princejaiswal823]

Diff b/w NACL and Subnet ❌ Diff b/w NACL and Security Group ✅

[@avengers-g4n]

As iam just started which zero to hero playlist would i pick devops or Aws

[@AbhishekVeeramalla]

U can do both parallely as well

[@rajeshwarbojja5893]

How can I contact you brother I am staying in marathalli

[@vinaybv9710]

For 1st question can we add this point Traffic is handled using load balancer

[@mathewjoseph1348]

auto scaling can can automatically scale number of nodes, that i got. But the application will not be there on new nodes right? so whats the use of high availability. ? like we did on previous video ?

[@AbhishekVeeramalla]

U should start the application using the instance user data scripts

[@mathewjoseph1348]

@@AbhishekVeeramalla Thanks for the response brother ❤️

[@mantreshkumar2294]

Excellent Video Abhishek Sir. While others are busy in promoting their courses. You're providing much more valuable content than them in Free of Cost. Thank You Sir.

[@AbhishekVeeramalla]

😍

[@jyotirmayadehury8467]

Hello Abhishek, Thank you very much for all your effort to prepare such informative videos. I have one question. Can you please explain how two microservices in same VPC can call their internal/private API endpoints without using private IP address or using service discovery?

[@jhansiraniannangi4124]

how to create private subnets and how to identify whether the subnet is public or private.abhishek

[@AbhishekVeeramalla]

Please watch episodes from day 1. It is already covered.

[@jhansiraniannangi4124]

@@AbhishekVeeramalla yes i do currently at day9.after vpc session i got a doubt of how to create private subnet individually.

[@asharma741]

I had the confusion at 7:02 question between internet gateway and NAT, when I google it, the difference comes based off public and private subnet. Google explanation: IgW allows instances with public IPs to access the internet whereas NAT Gateway allows instances with private IPs to access internet.

[@AbhishekVeeramalla]

Also NAT gateway does the network address translation , so that the server does not know the ip address of private instance

[@rakeshpindi]

Hi Abhishek, Regarding 8 question, was it difference between NACL vs Security Group or NACL vs Subnet ?

[@vickyeee4232]

regarding the Q2: removing the default route from routing table for the subnet, will also stop inbound access from internet gateway to the subnet right? how it can only stop outbound internet access of the subnet ?? And, the question does not say whether they want the restriction for the public subnet or private subnet?

[@anushas4680]

Sir what is the difference between NAT gateway and bastionhost both doing the same role

[@AbhishekVeeramalla]

No they are totally different, NAT does the network address translation

[@asharma741]

Copying the answer from above, this is really awesome. awesome questions, sometimes in between I get confused between NAT gateway and bastion host, but after proper thinking I got the difference NAT gateway -> helps in blocking inbound traffic from the internet, stays in public subnet and helps instances to communicate to the internet by enabling outbound traffic (via network address translation - replacing the private ip of instance with public ip of NAT instance) Bastion host -> if the instance is present in private subnet, then with the help of bastion host we can allow inbound access to known IP addresses from the internet (kind of authentication)

[@amritpoudel6929]

Waiting For This. Though I Expect S3 Bucket Video As Per Repo. But Practising The Interview Question Is Also Essential 👍🎉🎉

[@AbhishekVeeramalla]

yes

[@samuelude6858]

So bro, @3:19/25:49, if load balancing does not fall under highly available or scalable, which term exactly does it fall under? Could it be under highly resilient/robust/reliable? Please kindly reply as this is so important to differentiate the terms. Thanks so much, hats off and God bless you richly.

[@subhasissahu6876]

I have faced a question where in I was asked. 2 applications are launched in 2 different regions in respective datacenters. However, only is facing latency issue while other is functioning fine. What could be the reason and how would you troubleshoot ?

[@swarnalatha6019]

Hi @abhishekh, m following ur series and currently in day 8 today, thanku so much for explaining things in detail, can you please help me with one concept, I'm unable to understand this source and target in route section, in the 2nd question in this day 8 video, the simple solution was to remove the igw route associated with that subnet, by removing , outbound s getting blocked is fine, how about the inbound traffic, is the inbound traffic configured in load balancer and internet gateway?

[@nishalsreekanta7802]

Hey Abhishiek, Can we create a VPC inside a VPC (I know about VPC peering, but leaving that) can we? Thank you

[@saicharan8035]

in difference between nacl and subnet question the things that you mentioned for subnet are wrong because nacl is at subnet level and security group is at instance level and stateful and stateless are related to security group and nacl subnets in AWS are not inherently stateful or stateless.

[@rubeenazabin5863]

Ii think scenario 8 what s difference between NACL and security group correct me if iam wrong???

[@IshitaChivate]

Also want to ask u that R u going to take mock interview ? Means for d students who r from non IT background & for them if u take d registration for mock interview then d company technical interview will be easy for them.

[@ArqamNoor29]

Hi Abhishek sir, I found your videos very interesting and full of knowledge. And thank you for such a wonderful initiative and wonderful series on k8s and AWS. Just one suggestion + Request: Can you please use some diagrammatical representation of such answers rather than only text. For example, first question related to VPC design. I feel I could understand it in more better way if it was presented along with diagram (May be on paint or some free tool) + answer Text. What is your opinion?

[@AbhishekVeeramalla]

Thanks for the feedback

[@vishugondaliya7644]

I think the question should be what's the difference between a security group and nacl not subnet and nacl

[@jeelanimuddebihal7540]

I think it is difference between NACL and Security Group not subnet 18:23

[@rasalavenkatesh6481]

Hii sir just I want to know where I can get AWS document? Please tell me

[@seelamkishore]

Even the other question is wrong difference between NACL and Subnet…it should be difference between NACL and Security Groups. And the explanation also you some timers Mixed with the subnets with security groups.

[@AbhishekVeeramalla]

While talking, I sometimes used the wrong word.

[@rohita9689]

Papa you are truly my inspiration. Whatever I am facing right now you are uploading videos on that topic only. Today I had given oodles technologies interview coz of your grace I was able to answer kubernetes questions. One request just wanted to have more videos on linux real interviews. Thanks

[@AbhishekVeeramalla]

Thanks alot

[@joemathan6101]

Most needed video. Able to visualise and connect the dots now. Appreciate your time and efforts for making these videos.🎉

[@AbhishekVeeramalla]

Awesome

[@SuprabathKristam]

Hi Abhishek there is one question in the video explain the difference between NACL and Subnets. I guess the question should be explain difference between NACL's and Security Groups Please correct me If I am wrong TIA

[@AbhishekVeeramalla]

Yes u r right

[@anjalipandey4664]

Can someone explain question number 2 in detail here? I was not able to follow it.

[@rahulchoudhari8412]

To access s3 from ec2 can we create role and attach some policy of s3 and then attach that role to ec2???

[@Lovenature-i3n]

Fantastic video, with crisp explanations. Thank you. I just had a question. For the second question, at 5:41 can we configure NACL in both subnets so that one subnet has outbound internet access and the other does not?

[@AshokSaha-f3c]

Very very very very very... helpful. I have no words to say thank you. Abhishek you are excellent. you are my AWS Guru.. I pray to god for your bright future and fulfill your all dream. Jai Shree Ram ****************THANK YOU AHISHEK😀******************

[@AbhishekVeeramalla]

Thanks alot 😍

[@sohamkasar7218]

17:03 Difference between NACL and Security group

[@mohammadfurquan241]

Sir aap ne AWS ki pehle wali playlist hide kr diye kya channel se???

[@AbhishekVeeramalla]

No .. check the playlists .. everything is available

[@mohammadfurquan241]

Sorry sir that was different KZbin channel but I went through your comment section and content I found it very useful. I will follow your AWS 30 Days series. It's like in search of gold i found Diamond 💎. By the way I am preparing for Data Engineer role. Thank you sir 😊

[@maheshghagare4940]

its difference between NACL and security groups 😀

[@vinaysharma1538]

For second question can we use NACL to prevent and allow internet in subnets?

[@venkatrajeshtalasila7919]

Please change question text what difference between NACL and security group?, as it was referring subnet instead of security group

[@AbhishekVeeramalla]

Thanks for identifying

[@venkatrajeshtalasila7919]

@abhishekVeeramalla How to upgrade our kubernetes manifest with the latest kubernetes version. Let say any kubernetes api version changed, how to update our manifests with latest version

[@krishnapusuluri1421]

time: 16:50) Hope the question saying diff between NACL & SUBNET , innsted of NACL & SG Because NACL can implemented on SUBNET level and SG can implement on EC2 level

[@AbhishekVeeramalla]

Yes

[@ranineogadhikary5652]

Cant say thank you enough for detailed explanation . I think you are the most detailed oriented DevOps guy on KZbin who can make anything so easy to understand. Thank you! Thank you! Thank you!

[@Learner-hg4hj]

Awesome as always sir! Appreciate your help to the community 🙏 ❤️ 👍

[@AbhishekVeeramalla]

Thanks

[@venkataniranjanreddymudiya398]

"Kudos, @AbhishekVeeramalla". Your videos are more informative.

[@AbhishekVeeramalla]

Thank you so much 🙂

[@venkataniranjanreddymudiya398]

@@AbhishekVeeramalla Have you got any experience with Apache Nifi please?

[@p.narasimhareddy4471]

Hi Sir, Here I have a doubt at the time 16:11, The question should be what is the difference between NACL and Security Groups, forgive me if I'm wrong as you are discussing which one is stateful and which one is not?

[@rohiththokala6537]

Nacl is an optional security layer for inbounding or outbounding traffic

[@madinenitejaswini9310]

Thanks anna....Anthakante em chepagalam......Thanks for the efforts you keep for every single video🤗

[@raghuvarun3540]

Most worth, i am learning a lot Sir

[@AbhishekVeeramalla]

Thanks

[@thehulk2773]

Sir please make more videos on scenario based questions and answers which will help us to clear interview

[@AbhishekVeeramalla]

sure

[@rasalavenkatesh6481]

Please tell anyone where i can get AWS document?

[@vinodchandra2206]

Thanks for the simple explanation,

[@healthinsurance59]

Supposed to be S3 today why interview based questions

[@AbhishekVeeramalla]

because I thought it is important for people learn scenario based questions. These days to crack interview it is important

[@healthinsurance59]

@@AbhishekVeeramalla when will be S3

[@SalpaRadhikaKanumuri]

Hello Abhishek, looks like there is a typo in 8th question, it is supposed to be what is the difference between NACL and security group, but not subnet.

[@AbhishekVeeramalla]

Yes

[@SolankePandu-d9t]

Hi bro getting error in Mobaxtrean (connection time out) how to solve it

[@dheerajk5276]

17:53 you mean security groups instead of subnets?

[@Coderama]

Hey Abhishek can you make a video on EC2 Instance Connect Endpoint , they say now there is no need of bastion host

[@AbhishekVeeramalla]

Yes it is a recent addition but organisations have to adopt that yet

[@chayandeokar3938]

Sir Is this VPC service and LB service are paid or do they charge anything? If i want to do practical i can do sir ?

[@AbhishekVeeramalla]

Lb and nat gateways are paid

[@periviliaishwarya7705]

Hi Abhishek i have a doubt in order to restrict the outbound internet access can we do it by using the NACLs as these NACLs are used to restrict the traffic at the subnet level can we create a custom NACL and associate the subnet to which the internet access needs to be restricted?? And also i have an other doubt if we remove the default route which is pointing to the internet gateway we will not be able to access that ip from our end as well right how can we over come it? Kindly answer my question

[@AbhishekVeeramalla]

1. Yes 2. If you remove the IGW, the subnet will not be public anymore. so Why do you want to do that ?

[@humdanalfatmi5417]

When someone want to learn DevOps in depth with clearity... this series is best for them... Unmatchable energy, dedication with lot of knowledge - Salute to Mr. Abhishek Veeramalla

[@AbhishekVeeramalla]

Thanks alot

[@shyamsundardharmarapu6181]

This is the right channel and you are the right person to learn DevOps and cloud (AWS and Azure etc) in youtube. Thank you brother. I have been referring this channel to many of my friends.

[@AbhishekVeeramalla]

My pleasure!

[@Ashuji-wm1qh]

dont wanted sound like buttering ....but abhishek bhai. ek hi to dil hai kitni bar jeetoge... wanted to resist myself commenting here but couldnt❤

[@AbhishekVeeramalla]

😍😍😍

[@Sarahjohn-ju7ly]

3rd question is bit confusing pls explain sir

[@ygrace5062]

Really awesome idea sir u helped a lots of people TQ once again

[@AbhishekVeeramalla]

Thanks

[@NareshReddyPutikam]

Great ! love you ❤️❤️❤️ for your commitment

[@AbhishekVeeramalla]

Welcome

[@2KDxCOMMONER]

done for the day with this video. Got to know one thing, that need to have grip on each and everything inorder to answer scenario based questions.

[@AbhishekVeeramalla]

😍

[@bhargavarisetty5109]

@Abhishekveeramalla Your effort to collect all these questions is an inspiration to many people bro

[@AbhishekVeeramalla]

🤩

[@s_s_n_k]

Linux meedha kooda ela cheyandi bro

[@nusz_]

Thank you abhishek. You explained the concepts very well and I appreciate your efforts to teach us. ❤

[@AbhishekVeeramalla]

My pleasure 😊