DOP-C02 (Page 18)

A cloud team uses AWS Organizations and AWS IAM Identity Center (AWS Single Sign-On) to manage a company’s AWS accounts.The company recently established a research team.The research team requires the ability to fully manage the resources in its account.The research team must not be able to create IAM users.The cloud team creates a Research Administrator permission set in IAM Identity Center for the research team.The permission set has the AdministratorAccess AWS managed policy attached.The cloud team must ensure that no one on the research team can create IAM users.Which solution will meet these requirements?Read More →

A company requires that its internally facing web application be highly available.The architecture is made up of one Amazon EC2 web server instance and one NAT instance that provides outbound internet access for updates and accessing public data.Which combination of architecture adjustments should the company implement to achieve high availability? (Choose two.)Read More →

A company wants to use AWS CloudFormation for infrastructure deployment.The company has strict tagging and resource requirements and wants to limit the deployment to two Regions.Developers will need to deploy multiple versions of the same application.Which solution ensures resources are deployed in accordance with company policy?Read More →

A company has an application that runs on AWS Lambda and sends logs to Amazon CloudWatch Logs.An Amazon Kinesis data stream is subscribed to the log groups in CloudWatch Logs.A single consumer Lambda function processes the logs from the data stream and stores the logs in an Amazon S3 bucket.The company’s DevOps team has noticed high latency during the processing and ingestion of some logs.Which combination of steps will reduce the latency? (Choose three.)Read More →

A company’s DevOps engineer uses AWS Systems Manager to perform maintenance tasks during maintenance windows.The company has a few Amazon EC2 instances that require a restart after notifications from AWS Health.The DevOps engineer needs to implement an automated solution to remediate these notifications.The DevOps engineer creates an Amazon EventBridge rule.How should the DevOps engineer configure the EventBridge rule to meet these requirements?Read More →

A DevOps engineer is creating an AWS CloudFormation template to deploy a web service.The web service will run on Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB).The DevOps engineer must ensure that the service can accept requests from clients that have IPv6 addresses.What should the DevOps engineer do with the CloudFormation template so that IPv6 clients can access the web service?Read More →

A development team is using AWS CodeCommit to version control application code and AWS CodePipeline to orchestrate software deployments.The team has decided to use a remote main branch as the trigger for the pipeline to integrate code changes.A developer has pushed code changes to the CodeCommit repository, but noticed that the pipeline had no reaction, even after 10 minutes.Which of the following actions should be taken to troubleshoot this issue?Read More →

A company has an AWS CloudFormation stack that is deployed in a single AWS account.The company has configured the stack to send event notifications to an Amazon Simple Notification Service (Amazon SNS) topic.A DevOps engineer must implement an automated solution that applies a tag to the specific CloudFormation stack instance only after a successful stack update occurs.The DevOps engineer has created an AWS Lambda function that applies and updates this tag for the specific stack instance.Which solution will meet these requirements?Read More →

A company sends its AWS Network Firewall flow logs to an Amazon S3 bucket.The company then analyzes the flow logs by using Amazon Athena.The company needs to transform the flow logs and add additional data before the flow logs are delivered to the existing S3 bucket.Which solution will meet these requirements?Read More →

A company runs an application that uses an Amazon S3 bucket to store images.A DevOps engineer needs to implement a multi-Region strategy for the objects that are stored in the S3 bucket.The company needs to be able to fail over to an S3 bucket in another AWS Region.When an image is added to either S3 bucket, the image must be replicated to the other S3 bucket within 15 minutes.The DevOps engineer enables two-way replication between the S3 buckets.Which combination of steps should the DevOps engineer take next to meet the requirements? (Choose three.)Read More →