DOP-C02 (Page 13)

A company has developed a static website hosted on an Amazon S3 bucket.The website is deployed using AWS CloudFormation.The CloudFormation template defines an S3 bucket and a custom resource that copies content into the bucket from a source location.The company has decided that it needs to move the website to a new location, so the existing CloudFormation stack must be deleted and re-created.However, CloudFormation reports that the stack could not be deleted cleanly.What is the MOST likely cause and how can the DevOps engineer mitigate this problem for this and future versions of the website?Read More →

A company wants to deploy a workload on several hundred Amazon EC2 instances.The company will provision the EC2 instances in an Auto Scaling group by using a launch template.The workload will pull files from an Amazon S3 bucket, process the data, and put the results into a different S3 bucket.The EC2 instances must have least-privilege permissions and must use temporary security credentials.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company plans to use Amazon CloudWatch to monitor its Amazon EC2 instances.The company needs to stop EC2 instances when the average of the NetworkPacketsIn metric is less than 5 for at least 3 hours in a 12-hour time window.The company must evaluate the metric every hour.The EC2 instances must continue to run if there is missing data for the NetworkPacketsIn metric during the evaluation period.A DevOps engineer creates a CloudWatch alarm for the NetworkPacketsIn metric.The DevOps engineer configures a threshold value of 5 and an evaluation period of 1 hour.Which set of additional actions should the DevOps engineer take to meet these requirements?Read More →

A company has an application and a CI/CD pipeline.The CI/CD pipeline consists of an AWS CodePipeline pipeline and an AWS CodeBuild project.The CodeBuild project runs tests against the application as part of the build process and outputs a test report.The company must keep the test reports for 90 days.Which solution will meet these requirements?Read More →

A DevOps engineer is building a solution that uses Amazon Simple Queue Service (Amazon SQS) standard queues.The solution also includes an AWS Lambda function and an Amazon DynamoDB table.The Lambda function pulls content from an SQS queue event source and writes the content to the DynamoDB table.The solution must maximize the scalability of Lambda and must prevent successfully processed SQS messages from being processed multiple times.Which solution will meet these requirements?Read More →

A company runs a workload on Amazon EC2 instances.The company needs a control that requires the use of Instance Metadata Service Version 2 (IMDSv2) on all EC2 instances in the AWS account.If an EC2 instance does not prevent the use of Instance Metadata Service Version 1 (IMDSv1), the EC2 instance must be terminated.Which solution will meet these requirements?Read More →

A company recently migrated its application to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that uses Amazon EC2 instances.The company configured the application to automatically scale based on CPU utilization.The application produces memory errors when it experiences heavy loads.The application also does not scale out enough to handle the increased load.The company needs to collect and analyze memory metrics for the application over time.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company has deployed an application in a single AWS Region.The application backend uses Amazon DynamoDB tables and Amazon S3 buckets.The company wants to deploy the application in a secondary Region.The company must ensure that the data in the DynamoDB tables and the S3 buckets persists across both Regions.The data must also immediately propagate across Regions.Which solution will meet these requirements with the MOST operational efficiency?Read More →

A company uses an organization in AWS Organizations to manage its AWS accounts.The company’s DevOps team has developed an AWS Lambda function that calls the Organizations API to create new AWS accounts.The Lambda function runs in the organization’s management account.The DevOps team needs to move the Lambda function from the management account to a dedicated AWS account.The DevOps team must ensure that the Lambda function has the ability to create new AWS accounts only in Organizations before the team deploys the Lambda function to the new account.Which solution will meet these requirements?Read More →

A DevOps engineer has automated a web service deployment by using AWS CodePipeline with the following steps:1.An AWS CodeBuild project compiles the deployment artifact and runs unit tests.2.An AWS CodeDeploy deployment group deploys the web service to Amazon EC2 instances in the staging environment.3.A CodeDeploy deployment group deploys the web service to EC2 instances in the production environment.The quality assurance (QA) team requests permission to inspect the build artifact before the deployment to the production environment occurs.The QA team wants to run an internal penetration testing tool to conduct manual tests.The tool will be invoked by a REST API call.Which combination of actions should the DevOps engineer take to fulfill this request? (Choose two.)Read More →