DOP-C01 (Page 12)

A rapidly growing company wants to scale for Developer demand for AWS development environments.Development environments are created manually in theAWS Management Console.The Networking team uses AWS CloudFormation to manage the networking infrastructure, exporting stack output values for theAmazon VPC and all subnets.The development environments have common standards, such as Application Load Balancers, Amazon EC2 Auto Scaling groups, security groups, and Amazon DynamoDB tables.To keep up with the demand, the DevOps Engineer wants to automate the creation of development environments.Because the infrastructure required to support the application is expected to grow, there must be a way to easily update the deployed infrastructure.CloudFormation will be used to create a template for the development environments.Which approach will meet these requirements and quickly provide consistent AWS environments for Developers?Read More →

A company uses a series of individual Amazon CloudFormation templates to deploy its multi-Region applications.These templates must be deployed in a specific order.The company is making more changes to the templates than previously expected and wants to deploy new templates more efficiently.Additionally, the data engineering team must be notified of all changes to the templates.What should the company do to accomplish these goals?Read More →

A company has deployed a new Amazon API Gateway API that retrieves the cost of items for the company’s online store.An AWS Lambda function supports the API and retrieves the data from an Amazon DynamoDB table.The API’s latency increases during times of peak usage each day.However, the latency of the DynamoDB table reads is constant throughout the day.A DevOps engineer configures DynamoDB Accelerator (DAX) for the DynamoDB table, and the API latency decreases throughout the day.The DevOps engineer then configures Lambda provisioned concurrency with a limit of two concurrent invocations.This change reduces the latency during normal usage.However, the company is still experiencing higher latency during times of peak usage than during times of normal usage.Which set of additional steps should the DevOps engineer take to produce the LARGEST decrease in API latency?Read More →

A media company has several thousand Amazon EC2 instances in an AWS account.The company is using Slack and a shared email inbox for team communications and important updates.A DevOps engineer needs to send all AWS-scheduled EC2 maintenance notifications to the Slack channel and the shared inbox.The solution must include the instances’ Name and Owner tags.Which solution will meet these requirements?Read More →

A company uses a single AWS account to test applications on Amazon EC2 instances.The company has turned on AWS Config in the AWS account and has activated the restricted-ssh AWS Config managed rule.The company needs an automated monitoring solution that will provide a customized notification in real time if any security group in the account is not compliant with the restricted-ssh rule.The customized notification must contain the name and ID of the noncompliant security group.A DevOps engineer creates an Amazon Simple Notification Service (Amazon SNS) topic in the account and subscribes the appropriate personnel to the topic.What should the DevOps engineer do next to meet these requirements?Read More →

A company has an organization in AWS Organizations.The company has configured AWS Single Sign-On (AWS SSO) to centrally manage access to the AWS accounts in the organization.A DevOps engineer needs to ensure that all users sign in by using multi-factor authentication (MFA).Users must be allowed to manage their own MFA devices.Users also must be prompted for MFA every time they sign in.What should the DevOps engineer do to meet these requirements?Read More →

The security team depends on AWS CloudTrail to detect sensitive security issues in the company’s AWS account The DevOps engineer needs a solution to auto-remediate CloudTrail being turned off in an AWS account.What solution ensures the LEAST amount of downtime for the CloudTrail log deliveries?Read More →

A company has a guideline that every Amazon EC2 instance must be launched from an AMI that the company’s security team produces.Every month, the security team sends an email message with the latest approved AMIs to all the development teams.The development teams use AWS CloudFormation to deploy their applications.When developers launch a new service, they have to search their email for the latest AMIs that the security department sent.A DevOps engineer wants to automate the process that the security team uses to provide the AMI IDs to the development teams.What is the MOST scalable solution that meets these requirements?Read More →

A company has microservices running in AWS Lambda that read data from Amazon DynamoDB.The Lambda code is manually deployed by developers after successful testing.The company now needs the tests and deployments be automated and run in the cloud.Additionally, traffic to the new versions of each microservice should be incrementally shifted over time after deployment.What solution meets all the requirements, ensuring the MOST developer velocity?Read More →

A security team is concerned that a developer can unintentionally attach an Elastic IP address to an Amazon EC2 instance in production.No developer should be allowed to attach an Elastic IP address to an instance.The security team must be notified if any production server has an Elastic IP address at any time.How can this task be automated?Read More →