DOP-C01 (Page 7)

A company has a VPC that consists of a public subnet and a private subnet.The company has an application that runs on Amazon EC2 instances that are in the private subnet.An Application Load Balancer is in the public subnet and distributes traffic to the EC2 instances.The company has enabled Amazon GuardDuty for the account.The company’s DevOps team has a list of external IP ranges that is updated each day.The list is stored in an Amazon S3 bucket in the account.A DevOps engineer needs to configure GuardDuty to create a GuardDuty finding when traffic to the application originates from an IP range in the external IP range list.Which solution will meet these requirements?Read More →

A company has containerized all of its in-house quality control applications.The company is running Jenkins on Amazon EC2, which requires patching and upgrading.The compliance officer has requested a DevOps engineer begin encrypting build artifacts since they contain company intellectual property.What should the DevOps engineer do to accomplish this in the MOST maintainable manner?Read More →

An e-commerce company is running a web application in an AWS Elastic Beanstalk environment.In recent months, the average load of the Amazon EC2 instances has been increased to handle more traffic.The company would like to improve the scalability and resilience of the environment.The Development team has been asked to decouple long-running tasks from the environment if the tasks can be executed asynchronously.Examples of these tasks include confirmation emails when users are registered to the platform, and processing images or videos.Also, some of the periodic tasks that are currently running within the web server should be offloaded.What is the MOST time-efficient and integrated way to achieve this?Read More →

A DevOps engineer is developing an application for a company.The application needs to persist files to Amazon S3.The application needs to upload files with different security classifications that the company defines.These classifications include confidential, private, and public.Files that have a confidential classification must not be viewable by anyone other than the user who uploaded them.The application uses the IAM role of the user to call the S3 API operations.The DevOps engineer has modified the application to add a DataClassification tag with the value of confidential and an Owner tag with the uploading user’s ID to each confidential object that is uploaded to Amazon S3.Which set of additional steps must the DevOps engineer take to meet the company’s requirements?Read More →

A healthcare services company is concerned about the growing costs of software licensing for an application for monitoring patient wellness.The company wants to create an audit process to ensure that the application is running exclusively on Amazon EC2 Dedicated Hosts.A DevOps Engineer must create a workflow to audit the application to ensure compliance.What steps should the Engineer take to meet this requirement with the LEAST administrative overhead?Read More →

A company is running an application on Amazon EC2 instances in an Auto Scaling group.Recently, an issue occurred that prevented EC2 instances from launching successfully, and it took several hours for the Support team to discover the issue.The Support team wants to be notified by email whenever an EC2 instance does not start successfully.Which action will accomplish this?Read More →

A company has many applications.Different teams in the company developed the applications by using multiple languages and frameworks.The applications run on premises and on different servers with different operating systems.Each team has its own release protocol and process.The company wants to reduce the complexity of the release and maintenance of these applications.The company is migrating its technology stacks, including these applications, to AWS.The company wants centralized control of source code, a consistent and automatic delivery pipeline, and as few maintenance tasks as possible on the underlying infrastructure.What should a DevOps engineer do to meet these requirements?Read More →

A DevOps engineer is deploying a new version of a company’s application in an AWS CodeDeploy deployment group associated with its Amazon EC2 instances.After some time, the deployment fails.The engineer realizes that all the events associated with the specific deployment ID are in a Skipped status, and code was not deployed in the instances associated with the deployment group.What are valid reasons for this failure? (Choose two.)Read More →

A DevOps Engineer must track the health of a stateless RESTful service sitting behind a Classic Load Balancer.The deployment of new application revisions is through a CI/CD pipeline.If the service’s latency increases beyond a defined threshold, deployment should be stopped until the service has recovered.Which of the following methods allow for the QUICKEST detection time?Read More →

A retail company wants to use AWS Elastic Beanstalk to host its online sales website running on Java.Since this will be the production website the CTO has the following requirements for the deployment strategy:• Zero downtime.While the deployment is ongoing the current Amazon EC2 instances in service should remain in service.No deployment or any other action should be performed on the EC2 instances because they serve production traffic.• A new fleet of instances should be provisioned for deploying the new application version.• Once the new application version is deployed successfully in the new fleet of instances, the new instances should be placed in service and the old ones should be removed.• The rollback should be as easy as possible.If the new fleet of instances fails to deploy the new application version, they should be terminated and the current instances should continue serving traffic as normal.• The resources within the environment (EC2 Auto Scaling group, Elastic Load Balancing, Elastic Beanstalk DNS CNAME) should remain the same and no DNS change should be made.Which deployment strategy will meet the requirements?Read More →