DOP-C01 (Page 6)

A company wants to use AWS CloudFormation for infrastructure deployment.The company has strict tagging and resource requirements and wants to limit the deployment to two Regions.Developers will need to deploy multiple versions of the same application.Which solution ensures resources are deployed in accordance with company policy?Read More →

A company has a data ingestion application that runs across multiple AWS accounts.The accounts are in an organization in AWS Organizations.The company needs to monitor the application and consolidate access to the application.Currently, the company is running the application on Amazon EC2 instances from several Auto Scaling groups.The EC2 instances have no access to the internet because the data is sensitive.Engineers have deployed the necessary VPC endpoints.The EC2 instances run a custom AMI that is built specifically for the application.To maintain and troubleshoot the application, system administrators need the ability to log in to the EC2 instances.This access must be automated and controlled centrally.The company’s security team must receive a notification whenever the instances are accessed.Which solution will meet these requirements?Read More →

A company uses AWS CodePipeline pipelines to automate releases of its application.A typical pipeline consists of three stages: build, test, and deployment.The company has been using a separate AWS CodeBuild project to run scripts for each stage.However, the company now wants to use AWS CodeDeploy to handle the deployment stage of the pipelines.The company has packaged the application as an RPM package and must deploy the application to a fleet of Amazon EC2 instances.The EC2 instances are in an EC2 Auto Scaling group and are launched from a common AMI.Which combination of steps should a DevOps engineer perform to meet these requirements? (Choose two.)Read More →

A development team uses AWS CodeCommit, AWS CodePipeline, and AWS CodeBuild to develop and deploy an application.Changes to the code are submitted by pull requests.The development team reviews and merges the pull requests, and then the pipeline builds and tests the application.Over time, the number of pull requests has increased.The pipeline is frequently blocked because of failing tests.To prevent this blockage, the development team wants to run the unit and integration tests on each pull request before it is merged.Which solution will meet these requirements?Read More →

A DevOps engineer needs to apply a core set of security controls to an existing set of AWS accounts.The accounts are in an organization in AWS Organizations.Individual teams will administer individual accounts by using the AdministratorAccess AWS managed policy.For all accounts, AWS CloudTrail and AWS Config must be turned on in all available AWS Regions.Individual account administrators must not be able to edit or delete any of the baseline resources.However, individual account administrators must be able to edit or delete their own CloudTrail trails and AWS Config rules.Which solution will meet these requirements in the MOST operationally efficient way?Read More →

A company is using AWS CodeDeploy to automate software deployment.The deployment must meet these requirements:• A number of instances must be available to serve traffic during the deployment.Traffic must be balanced across those instances, and the instances must automatically heal in the event of failure.• A new fleet of instances must be launched for deploying a new revision automatically, with no manual provisioning.• Traffic must be rerouted to the new environment to half of the new instances at a time.The deployment should succeed if traffic is rerouted to at least half of the instances; otherwise, it should fail.• Before routing traffic to the new fleet of instances, the temporary files generated during the deployment process must be deleted.• At the end of a successful deployment, the original instances in the deployment group must be deleted immediately to reduce costs.How can a DevOps engineer meet these requirements?Read More →

A web application has been deployed using an AWS Elastic Beanstalk application.The application developers are concerned that they are seeing high latency in two different areas of the application:• HTTP client requests to a third-party API• MySQL client library queries to an Amazon RDS databaseA DevOps engineer must gather trace data to diagnose the issues.Which steps will gather the trace information with the LEAST amount of changes and performance impacts to the application?Read More →

A company that uses electronic health records is running a fleet of Amazon EC2 instances with an Amazon Linux operating system.As part of patient privacy requirements, the company must ensure continuous compliance for patches for operating system and applications running on the EC2 instances.How can the deployments of the operating system and application patches be automated using a default and custom repository?Read More →

A mobile application running on eight Amazon EC2 instances is relying on a third-party API endpoint.The third-party service has a high failure rate because of limited capacity which is expected to be resolved in a few weeks.In the meantime, the mobile application developers have added a retry mechanism and are logging failed API requests.A DevOps engineer must automate the monitoring of application logs and count the specific error messages, if there are more than 10 errors within a 1-minute window the system must issue an alert.How can the requirements be met with MINIMAL management overhead?Read More →

An AWS CodePipeline pipeline has implemented a code release process.The pipeline is integrated with AWS CodeDeploy to deploy versions of an application to multiple Amazon EC2 instances for each CodePipeline stage.During a recent deployment, the pipeline failed due to a CodeDeploy issue.The DevOps team wants to improve monitoring and notifications during deployment to decrease resolution times.What should the DevOps Engineer do to create notifications when issues are discovered?Read More →