I have passed the AWS CSA 2018 version Today. Questions i have faced are pretty medium level 15 -20 were tricky remaining all are straight forward like which service used in the scenario.
Types of questions
1. VPC - NACL and SG configuration for private subnet communication to the internet .
Bastion host from on-premise to VPC deployment .
Subnet design for the /24 VPC for a Highly Available 2 tier architecture along with ELB.
How to deny IP Addresses - NACL
VPN connection Monitoring - TunnelState Metric
2. EC2 - Based on the reserved EC2 instances types such as scheduled/convertible/Normal
3. ELB - Bottleneck in the given design
Decoupling the users from using the EC2 DNS names
Adding the EC2 to make multi AZ and how can we attain more more scalability - By adding ELB & ASG
3.RDS - Few Multi-AZ scenario questions
Read contention solving using read replicas ( some tricky with wordings)
4. Dynamodb - To store session data
Few scenarios where we have to use Dynamodb for millisecond latency
5. S3 - Cross region replication
Encryption where we have rotate keys - KMS
6. Cloudtrail - Logging KMS Usage
7. Cloudwatch - Custom EC2 metrics such as memory , disk space utilization
8. Lambda - Encrypted Environment variables
9. API Gateway - To enhance functionality of the backend EC2 Instance
10. Cloufront - To limit the traffic from the on premise and vpc resources
11. Route53 - Active-Active Latency based routing
Alias for apex record
Failover to s3 static
Health Checks for On-premise load balancer
12. ALB - Path based routing and websocker support in the scenarios of ECS
To load balance the on-premise servers ( Through the ip address)
13. ECS- Migrate on -premise Docker containers to AWS
14. CLB - For not changing the incoming header ( Not sure whether it can done using NLB as well)
15. EBS - Types of volumes based on the scenario such big data , random I/O , Intensive I/O ( 4 Questions)
16. Kinesis - Analytics & Streams
17. Active Directory - Corporate users using MFA to post the pics to s3
These are few senario based questions that I remember.
I have started with Linux acadmey course (outdated) and Eissa's course from udemy helped to understand AWS in deep dive manner
After going through this Eissa course ( 2 times) i have taken many tests from the LA , ACG , Whizlabs , Braincert where i have scored all the tests somewhere between 85-95%. So it has given me the required confidence to appear the exam. Before going to the exam i have read almost all the servcies FAQ's. On the day of the exam before i have gone through the jayendrapatil blog.
Thank You Thomas for helping me get started with AWS