DOP-C02

A DevOps engineer is setting up a container-based architecture.The engineer has decided to use AWS CloudFormation to automatically provision an Amazon ECS cluster and an Amazon EC2 Auto Scaling group to launch the EC2 container instances.After successfully creating the CloudFormation stack, the engineer noticed that, even though the ECS cluster and the EC2 instances were created successfully and the stack finished the creation, the EC2 instances were associating with a different cluster.How should the DevOps engineer update the CloudFormation template to resolve this issue?Read More →

A company has configured an Amazon S3 event source on an AWS Lambda function.The company needs the Lambda function to run when a new object is created or an existing object is modified in a particular S3 bucket.The Lambda function will use the S3 bucket name and the S3 object key of the incoming event to read the contents of the created or modified S3 object.The Lambda function will parse the contents and save the parsed contents to an Amazon DynamoDB table.The Lambda function’s execution role has permissions to read from the S3 bucket and to write to the DynamoDB table.During testing, a DevOps engineer discovers that the Lambda function does not run when objects are added to the S3 bucket or when existing objects are modified.Which solution will resolve this problem?Read More →

A company deploys a web application on Amazon EC2 instances that are behind an Application Load Balancer (ALB).The company stores the application code in an AWS CodeCommit repository.When code is merged to the main branch, an AWS Lambda function invokes an AWS CodeBuild project.The CodeBuild project packages the code, stores the packaged code in AWS CodeArtifact, and invokes AWS Systems Manager Run Command to deploy the packaged code to the EC2 instances.Previous deployments have resulted in defects, EC2 instances that are not running the latest version of the packaged code, and inconsistencies between instances.Which combination of actions should a DevOps engineer take to implement a more reliable deployment solution? (Choose two.)Read More →

A company builds an application that uses an Application Load Balancer in front of Amazon EC2 instances that are in an Auto Scaling group.The application is stateless.The Auto Scaling group uses a custom AMI that is fully prebuilt.The EC2 instances do not have a custom bootstrapping process.The AMI that the Auto Scaling group uses was recently deleted.The Auto Scaling group’s scaling activities show failures because the AMI ID does not exist.Which combination of steps should a DevOps engineer take to meet these requirements? (Choose three.)Read More →

A company has a mission-critical application on AWS that uses automatic scaling.The company wants the deployment lifecycle to meet the following parameters:• The application must be deployed one instance at a time to ensure the remaining fleet continues to serve traffic.• The application is CPU intensive and must be closely monitored.• The deployment must automatically roll back if the CPU utilization of the deployment instance exceeds 85%.Which solution will meet these requirements?Read More →

A company manages a multi-tenant environment in its VPC and has configured Amazon GuardDuty for the corresponding AWS account.The company sends all GuardDuty findings to AWS Security Hub.Traffic from suspicious sources is generating a large number of findings.A DevOps engineer needs to implement a solution to automatically deny traffic across the entire VPC when GuardDuty discovers a new suspicious source.Which solution will meet these requirements?Read More →

A DevOps team is merging code revisions for an application that uses an Amazon RDS Multi-AZ DB cluster for its production database.The DevOps team uses continuous integration to periodically verify that the application works.The DevOps team needs to test the changes before the changes are deployed to the production database.Which solution will meet these requirements?Read More →

A company is using an organization in AWS Organizations to manage multiple AWS accounts.The company’s development team wants to use AWS Lambda functions to meet resiliency requirements and is rewriting all applications to work with Lambda functions that are deployed in a VPC.The development team is using Amazon Elastic File System (Amazon EFS) as shared storage in Account A in the organization.The company wants to continue to use Amazon EFS with Lambda.Company policy requires all serverless projects to be deployed in Account B.A DevOps engineer needs to reconfigure an existing EFS file system to allow Lambda functions to access the data through an existing EFS access point.Which combination of steps should the DevOps engineer take to meet these requirements? (Choose three.)Read More →

A DevOps engineer needs to configure a blue/green deployment for an existing three-tier application.The application runs on Amazon EC2 instances and uses an Amazon RDS database.The EC2 instances run behind an Application Load Balancer (ALB) and are in an Auto Scaling group.The DevOps engineer has created a launch template and an Auto Scaling group for the blue environment.The DevOps engineer also has created a launch template and an Auto Scaling group for the green environment.Each Auto Scaling group deploys to a matching blue or green target group.The target group also specifies which software, blue or green, gets loaded on the EC2 instances.The ALB can be configured to send traffic to the blue environment’s target group or the green environment’s target group.An Amazon Route 53 record for www.example.com points to the ALB.The deployment must move traffic all at once between the software on the blue environment’s EC2 instances to the newly deployed software on the green environment’s EC2 instances.What should the DevOps engineer do to meet these requirements?Read More →

A company deploys its corporate infrastructure on AWS across multiple AWS Regions and Availability Zones.The infrastructure is deployed on Amazon EC2 instances and connects with AWS IoT Greengrass devices.The company deploys additional resources on on-premises servers that are located in the corporate headquarters.The company wants to reduce the overhead involved in maintaining and updating its resources.The company’s DevOps team plans to use AWS Systems Manager to implement automated management and application of patches.The DevOps team confirms that Systems Manager is available in the Regions that the resources are deployed in.Systems Manager also is available in a Region near the corporate headquarters.Which combination of steps must the DevOps team take to implement automated patch and configuration management across the company’s EC2 instances, IoT devices, and on-premises infrastructure? (Choose three.)Read More →