Free guides, interview Q&As, and job responsibility breakdowns — curated by industry veterans to help you crack MNC interviews
Infrastructure Planning
Definition: The process of designing and managing an organization's complete IT environment so operations run smoothly and can grow.
Day-to-Day Example: Like designing a new office building before construction — you plan electrical, plumbing, and space needs upfront instead of tearing down walls later to fix mistakes.
High Availability (HA)
Definition: A design goal where systems stay operational continuously with minimal downtime, using redundancy and failover.
Day-to-Day Example: Like a hospital having a backup generator that kicks in instantly during a power cut — critical equipment never actually stops running.
Horizontal Scaling
Definition: Adding more servers to share a workload, rather than upgrading a single server's hardware.
Day-to-Day Example: Like opening more checkout counters at a busy supermarket during rush hour, instead of trying to make one cashier work faster.
Data Center Tier
Definition: A classification (I–IV) of a data center's redundancy and uptime guarantee, with higher tiers offering more fault tolerance.
Day-to-Day Example: Like hotel star ratings — a 5-star (Tier IV) hotel has backup systems for everything, while a budget motel (Tier I) has just the basics with no backup if something breaks.
Hot Aisle / Cold Aisle
Definition: A data center cooling layout that separates cool intake air from hot exhaust air to improve cooling efficiency.
Day-to-Day Example: Like organizing a kitchen so the fridge (cold side) and the stove exhaust (hot side) are on opposite walls, instead of mixing hot and cold air together inefficiently.
UPS (Uninterruptible Power Supply)
Definition: A battery backup device that keeps equipment running for a short time immediately after a power failure.
Day-to-Day Example: Like a phone's power bank kicking in the instant the wall charger disconnects — it bridges the gap so nothing shuts off abruptly.
RAID 5
Definition: A RAID level that stripes data with parity across disks, balancing performance and redundancy with good storage efficiency.
Day-to-Day Example: Like a group project where everyone keeps partial notes on the same material — if one person's notes get lost, the group can still reconstruct the missing part from what others have.
RAID 10
Definition: A RAID level combining mirroring and striping for both high performance and strong fault tolerance, at higher disk cost.
Day-to-Day Example: Like keeping duplicate copies of important files split across multiple fast external drives — both speed and safety, but you need to buy more drives to get it.
VLAN (Virtual LAN)
Definition: A logical division of a physical network into separate smaller networks to isolate traffic and improve security.
Day-to-Day Example: Like separate WiFi networks for 'Guests' and 'Staff' in the same office building — same physical router, but the two groups' traffic stays separate.
Subnetting
Definition: Dividing a large network into smaller subnetworks for better organization, security, and IP address use.
Day-to-Day Example: Like splitting one huge apartment complex's mailroom into separate mail sections per floor — easier to manage and find things than one giant shared pile.
DHCP
Definition: A protocol that automatically assigns IP addresses and network settings to devices instead of manual configuration.
Day-to-Day Example: Like a hotel automatically assigning you a room number at check-in, instead of you having to pick and claim an empty room yourself.
CIA Triad
Definition: The foundational security model: Confidentiality (only authorized access), Integrity (data stays accurate), Availability (systems stay accessible).
Day-to-Day Example: Like a bank vault: only authorized people can enter (confidentiality), the contents aren't tampered with (integrity), and the bank opens on schedule so you can access your box when needed (availability).
Defense in Depth
Definition: A layered security strategy using multiple controls together, so if one fails, others still protect the system.
Day-to-Day Example: Like a castle with a moat, walls, and guards — even if an attacker crosses the moat, they still have to get through the wall and past the guards.
MFA (Multi-Factor Authentication)
Definition: A login process requiring more than one verification method, such as a password plus a one-time code.
Day-to-Day Example: Like an ATM requiring both your card (something you have) and your PIN (something you know) — one alone isn't enough to get in.
3-2-1 Backup Rule
Definition: A backup strategy: keep 3 copies of data, on 2 different media types, with 1 copy stored offsite.
Day-to-Day Example: Like keeping your passport original at home, a photocopy in your office, and a scanned copy in cloud email — different places, different formats, so no single disaster wipes out all of them.
AD DS (Active Directory Domain Services)
Definition: A Windows Server role providing centralized directory services — authenticating users and managing security policies from one place.
Day-to-Day Example: Like a company's central HR/ID system that every building's door badge reader checks against, instead of each building keeping its own separate employee list.
Domain Controller (DC)
Definition: A server running AD DS that authenticates users, applies Group Policy, and stores the AD database.
Day-to-Day Example: Like the security desk at a company's main entrance that checks everyone's ID badge before letting them into any part of the building.
RODC (Read-Only Domain Controller)
Definition: A Domain Controller holding a read-only copy of AD, used in locations with limited physical security.
Day-to-Day Example: Like giving a branch office a read-only copy of the company directory instead of the master file — useful for lookups, but they can't edit the original records.
FSMO Roles
Definition: Special Active Directory roles assigned to specific Domain Controllers to handle operations that must not be performed by multiple DCs at once.
Day-to-Day Example: Like a company having exactly one person authorized to sign off on payroll — even in a big company, that specific task can't be duplicated across multiple people at the same time.
PDC Emulator
Definition: The FSMO role that handles password changes, account lockouts, and time synchronization — the busiest of the five roles.
Day-to-Day Example: Like the one front-desk phone line that handles all urgent same-day requests (password resets, lockouts) while other tasks can wait in a slower queue.
1. Vertical Scaling vs. Horizontal Scaling
Feature Vertical Scaling Horizontal Scaling Method Add resources (CPU/RAM) to one server Add more servers Limit Capped by hardware limits Scales much further Complexity Simple More complex (load balancing needed) Fault tolerance Single point of failure remains Better — spread across servers
2. Data Center Tier III vs. Tier IV
Feature Tier III Tier IV Maintainability Concurrently maintainable Concurrently maintainable + fault tolerant Redundancy Multiple power/cooling paths Fully redundant, no single point of failure Uptime ~99.982% ~99.995% Cost High Highest
3. RAID 1 vs. RAID 5 vs. RAID 10
Feature RAID 1 RAID 5 RAID 10 Method Mirroring Striping + parity Mirroring + striping Storage efficiency 50% Better than RAID 1 50% Performance Good read, moderate write Good balance Best overall Best for Simple redundancy needs General file servers Databases / virtualization hosts
4. Layer 2 Switch vs. Layer 3 Switch
Feature Layer 2 Switch Layer 3 Switch Operates using MAC addresses MAC addresses + IP routing Same-VLAN switching Yes Yes Inter-VLAN routing No Yes
5. IDS vs. IPS
Feature IDS (Intrusion Detection System) IPS (Intrusion Prevention System) Action taken Detects and alerts only Detects and actively blocks Placement Monitors traffic passively Sits inline with traffic flow Response speed Manual response needed Automatic, real-time blocking
6. Domain vs. Tree vs. Forest
Feature Domain Tree Forest Definition Basic administrative boundary Group of domains sharing a namespace Top-level AD structure Scope Single admin boundary Contiguous DNS namespace Ultimate security boundary Contains Users, computers, OUs Multiple domains One or more trees
7. Writable Domain Controller vs. RODC
Feature Writable DC RODC Can make AD changes Yes No (read-only) Typical location HQ / secure data center Branch offices with weaker physical security Security risk if compromised Higher (full write access) Lower (read-only limits damage)
8. Forest-Level vs. Domain-Level FSMO Roles
Feature Forest-Level Roles Domain-Level Roles Roles included Schema Master, Domain Naming Master RID Master, PDC Emulator, Infrastructure Master Number per forest/domain One of each per forest One of each per domain Example task Extending the AD schema Handling password changes (PDC Emulator)
9. Confidentiality vs. Integrity vs. Availability (CIA Triad)
Aspect Confidentiality Integrity Availability Goal Only authorized access Data stays accurate/unmodified Systems stay accessible Achieved via Encryption, MFA, access control Hashing, digital signatures, audit logs Backups, redundancy, HA clustering Threat example Data breach / leak Unauthorized data tampering DDoS attack / outage
10. UPS vs. Generator
Feature UPS Generator Power duration Short-term (minutes) Long-term (hours+) Response time Instant (battery) Takes time to start Role Bridges the gap until generator starts Sustains power during extended outages
Q1. What is Infrastructure Planning, and why is it important?
Answer: It is the process of designing and managing an organization's complete IT environment so operations run smoothly. Without it, organizations risk downtime, data loss, security breaches, and high costs.
Q2. What is High Availability (HA), and how is it achieved?
Answer: HA means systems stay operational with minimal downtime. It's achieved with redundant servers, failover clustering, load balancing, backup power, and disaster recovery sites.
Q3. What is the difference between Vertical and Horizontal Scaling?
Answer: Vertical scaling increases resources (CPU/RAM) within an existing server — simple but limited by hardware. Horizontal scaling adds more servers to share the load — more scalable but harder to manage.
Q4. What are Data Center Tier Levels, and how do they differ?
Answer: Tier Levels (I–IV) define a data center's reliability, redundancy, and uptime. Tier I has no redundancy; Tier IV is fully fault tolerant with no single point of failure, but is the most expensive.
Q5. What is the Hot Aisle / Cold Aisle design, and why is it used?
Answer: A cooling layout where cold air supplies the front of server racks and hot exhaust air is collected at the rear, preventing hot/cold air mixing and improving cooling efficiency.
Q6. What is RAID, and why is it used?
Answer: RAID combines multiple physical disks to improve performance, redundancy, and fault tolerance for server storage.
Q7. Why is RAID 10 commonly used for databases and virtualization hosts?
Answer: RAID 10 combines mirroring and striping, giving very high performance and excellent fault tolerance — ideal where both speed and reliability matter, despite higher disk cost.
Q8. What is a VLAN, and why is it important?
Answer: A VLAN logically divides one physical network into separate networks (e.g., per department), reducing broadcast traffic and improving security isolation.
Q9. What is DHCP, and what does it provide automatically?
Answer: DHCP automatically assigns IP address, subnet mask, default gateway, and DNS server info to devices, reducing manual work and preventing IP conflicts.
Q10. What is the CIA Triad?
Answer: The foundation of information security: Confidentiality (only authorized access), Integrity (data stays accurate/unmodified), and Availability (systems stay accessible when needed).
Q11. What is the difference between IDS and IPS?
Answer: IDS monitors and alerts on suspicious activity. IPS goes further and actively blocks malicious traffic in real time.
Q12. What is the 3-2-1 Backup Rule?
Answer: Keep 3 copies of data, store them on 2 different media types, and keep 1 copy offsite — protecting against hardware failure, ransomware, and site-level disasters.
Q13. What is the difference between a Domain, Tree, and Forest?
Answer: A Domain is the basic administrative boundary. A Tree is a group of domains sharing a contiguous namespace. A Forest is the top-level structure containing one or more trees and is AD's ultimate security boundary.
Q14. What are FSMO roles, and why are they needed?
Answer: Special AD roles assigned to specific Domain Controllers to handle operations that must not be performed by multiple DCs simultaneously, preventing conflicts.
Q1. A growing e-commerce company expects 5x traffic during an upcoming sale and their single web server already struggles on regular days. What scaling approach should they use, and why?
Answer: Use Horizontal Scaling — add multiple web servers behind a load balancer so traffic is distributed and capacity can grow elastically, rather than being capped by one server's hardware limits.
Q2. A bank wants zero disruption during maintenance but the budget doesn't stretch to full Tier IV. What data center tier fits, and why?
Answer: Tier III — it is concurrently maintainable, meaning maintenance can happen without shutting down operations, at a lower cost than Tier IV's full fault-tolerant design.
Q3. During a power outage, a company's servers shut down abruptly before the generator starts, corrupting a database. What was likely missing?
Answer: A properly configured UPS — it should provide instant battery backup to keep servers running during the gap between power loss and generator startup, preventing sudden shutdown and data corruption.
Q4. An organization is deploying a database server that must survive a single disk failure without losing performance. Which RAID level fits best, and why?
Answer: RAID 10 — it combines mirroring and striping, giving both high performance and strong fault tolerance, which RAID 5 alone cannot match at the same speed.
Q5. A mid-size company has HR, Finance, and IT all on the same physical switch, and a broadcast storm from one department slowed the entire network. What should be changed?
Answer: Implement VLAN segmentation to isolate each department's traffic into its own broadcast domain, using Inter-VLAN routing via a Layer 3 switch for controlled communication between them when needed.
Q6. A branch office frequently loses connectivity with HQ, and staff can't log in because the only domain controller is at HQ. What should be deployed at the branch, and why?
Answer: Deploy an RODC at the branch — it allows local authentication even if the WAN link to HQ goes down, while limiting the security risk of a full writable DC in a location with weaker physical security.
Q7. A company suffers a ransomware attack that encrypts both production data and its only backup, stored on the same server. What rule was violated, and what should be fixed?
Answer: They violated the 3-2-1 Backup Rule by keeping backups on the same system as production data. They should keep 3 copies on 2 different media types, with at least 1 copy stored offsite.
Q8. An administrator tries to create new user accounts, but account creation fails with SID-related errors. Which FSMO role is most likely responsible?
Answer: The RID Master — if its RID pool allocation fails or the role holder is unavailable and the local DC's pool is exhausted, new security principals can't be created since they can't get a unique SID.
Related: Azure System Administration - Job Ready Internship Program
