DOP-C02 (Page 19)

A company’s video streaming platform usage has increased from 10,000 users each day to 50,000 users each day in multiple countries.The company deploys the streaming platform on Amazon Elastic Kubernetes Service (Amazon EKS).The EKS workload scales up to thousands of nodes during peak viewing time.The company’s users report occurrences of unauthorized logins.Users also report sudden interruptions and logouts from the platform.The company wants additional security measures for the entire platform.The company also needs a summarized view of the resource behaviors and interactions across the company’s entire AWS environment.The summarized view must show login attempts, API calls, and network traffic.The solution must permit network traffic analysis while minimizing the overhead of managing logs.The solution must also quickly investigate any potential malicious behavior that is associated with the EKS workload.Which solution will meet these requirements?Read More →

A company is migrating its on-premises Windows applications and Linux applications to AWS.The company will use automation to launch Amazon EC2 instances to mirror the on-premises configurations.The migrated applications require access to shared storage that uses SMB for Windows and NFS for Linux.The company is also creating a pilot light disaster recovery (DR) environment in another AWS Region.The company will use automation to launch and configure the EC2 instances in the DR Region.The company needs to replicate the storage to the DR Region.Which storage solution will meet these requirements?Read More →

A company is running a custom-built application that processes records.All the components run on Amazon EC2 instances that run in an Auto Scaling group.Each record’s processing is a multistep sequential action that is compute-intensive.Each step is always completed in 5 minutes or less.A limitation of the current system is that if any steps fail, the application has to reprocess the record from the beginning.The company wants to update the architecture so that the application must reprocess only the failed steps.What is the MOST operationally efficient solution that meets these requirements?Read More →

A company is developing a web application’s infrastructure using AWS CloudFormation.The database engineering team maintains the database resources in a CloudFormation template, and the software development team maintains the web application resources in a separate CloudFormation template.As the scope of the application grows, the software development team needs to use resources maintained by the database engineering team.However, both teams have their own review and lifecycle management processes that they want to keep.Both teams also require resource-level change-set reviews.The software development team would like to deploy changes to this template using their CI/CD pipeline.Which solution will meet these requirements?Read More →

A company wants to use AWS Systems Manager documents to bootstrap physical laptops for developers.The bootstrap code is stored in GitHub.A DevOps engineer has already created a Systems Manager activation, installed the Systems Manager agent with the registration code, and installed an activation ID on all the laptops.Which set of steps should be taken next?Read More →

A company runs its container workloads in AWS App Runner.A DevOps engineer manages the company’s container repository in Amazon Elastic Container Registry (Amazon ECR).The DevOps engineer must implement a solution that continuously monitors the container repository.The solution must create a new container image when the solution detects an operating system vulnerability or language package vulnerability.Which solution will meet these requirements?Read More →

A developer is using the AWS Serverless Application Model (AWS SAM) to create a prototype for an AWS Lambda function.The AWS SAM template contains an AWS::Serverless::Function resource that has the CodeUri property that points to an Amazon S3 location.The developer wants to identify the correct commands for deployment before creating a CI/CD pipeline.The developer creates an archive of the Lambda function code named package.zip.The developer uploads the .zip file archive to the S3 location specified in the CodeUri property.The developer runs the sam deploy command and deploys the Lambda function.The developer updates the Lambda function code and uses the same steps to deploy the new version of the Lambda function.The sam deploy command fails and returns an error of no changes to deploy.Which solutions will deploy the new version? (Choose two.)Read More →

A company needs a strategy for failover and disaster recovery of its data and application.The application uses a MySQL database and Amazon EC2 instances.The company requires a maximum RPO of 2 hours and a maximum RTO of 10 minutes for its data and application at all times.Which combination of deployment strategies will meet these requirements? (Choose two.)Read More →

A highly regulated company has a policy that DevOps engineers should not log in to their Amazon EC2 instances except in emergencies.If a DevOps engineer does log in, the security team must be notified within 15 minutes of the occurrence.Which solution will meet these requirements?Read More →

A development team wants to use AWS CloudFormation stacks to deploy an application.However, the developer IAM role does not have the required permissions to provision the resources that are specified in the AWS CloudFormation template.A DevOps engineer needs to implement a solution that allows the developers to deploy the stacks.The solution must follow the principle of least privilege.Which solution will meet these requirements?Read More →