DOP-C02 (Page 23)

A company needs to adopt a multi-account strategy to deploy its applications and the associated CI/CD infrastructure.The company has created an organization in AWS Organizations that has all features enabled.The company has configured AWS Control Tower and has set up a landing zone.The company needs to use AWS Control Tower controls (guardrails) in all AWS accounts in the organization.The company must create the accounts for a multi-environment application and must ensure that all accounts are configured to an initial baseline.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company uses AWS Organizations to manage its AWS accounts.A DevOps engineer must ensure that all users who access the AWS Management Console are authenticated through the company’s corporate identity provider (IdP).Which combination of steps will meet these requirements? (Choose two.)Read More →

A company has deployed a new platform that runs on Amazon Elastic Kubernetes Service (Amazon EKS).The new platform hosts web applications that users frequently update.The application developers build the Docker images for the applications and deploy the Docker images manually to the platform.The platform usage has increased to more than 500 users every day.Frequent updates, building the updated Docker images for the applications, and deploying the Docker images on the platform manually have all become difficult to manage.The company needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if Docker image scanning returns any HIGH or CRITICAL findings for operating system or programming language package vulnerabilities.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company wants to decrease the time it takes to develop new features.The company uses AWS CodeBuild and AWS CodeDeploy to build and deploy its applications.The company uses AWS CodePipeline to deploy each microservice with its own CI/CD pipeline.The company needs more visibility into the average time between the release of new features and the average time to recover after a failed deployment.Which solution will provide this visibility with the LEAST configuration effort?Read More →

A company uses Amazon EC2 as its primary compute platform.A DevOps team wants to audit the company’s EC2 instances to check whether any prohibited applications have been installed on the EC2 instances.Which solution will meet these requirements with the MOST operational efficiency?Read More →

A company is migrating its product development teams from an on-premises data center to a hybrid environment.The new environment will add four AWS Regions and will give the developers the ability to use the Region that is geographically closest to them.All the development teams use a shared set of Linux applications.The on-premises data center stores the applications on a NetApp ONTAP storage device.The storage volume is mounted read-only on the development on-premises VMs.The company updates the applications on the shared volume once a week.A DevOps engineer needs to replicate the data to all the new Regions.The DevOps engineer must ensure that the data is always up to date with deduplication.The data also must not be dependent on the availability of the on-premises storage device.Which solution will meet these requirements?Read More →

A DevOps engineer needs to implement a solution to install antivirus software on all the Amazon EC2 instances in an AWS account.The EC2 instances run the most recent version of Amazon Linux.The solution must detect all instances and must use an AWS Systems Manager document to install the software if the software is not present.Which solution will meet these requirements?Read More →

A company has an organization in AWS Organizations for its multi-account environment.A DevOps engineer is developing an AWS CodeArtifact based strategy for application package management across the organization.Each application team at the company has its own account in the organization.Each application team also has limited access to a centralized shared services account.Each application team needs full access to download, publish, and grant access to its own packages.Some common library packages that the application teams use must also be shared with the entire organization.Which combination of steps will meet these requirements with the LEAST administrative overhead? (Choose three.)Read More →

An Amazon EC2 Auto Scaling group manages EC2 instances that were created from an AMI.The AMI has the AWS Systems Manager Agent installed.When an EC2 instance is launched into the Auto Scaling group, tags are applied to the EC2 instance.EC2 instances that are launched by the Auto Scaling group must have the correct operating system configuration.Which solution will meet these requirements?Read More →

A DevOps team has created a Custom Lambda rule in AWS Config.The rule monitors Amazon Elastic Container Repository (Amazon ECR) policy statements for ecr:* actions.When a noncompliant repository is detected, Amazon EventBridge uses Amazon Simple Notification Service (Amazon SNS) to route the notification to a security team.When the custom AWS Config rule is evaluated, the AWS Lambda function fails to run.Which solution will resolve the issue?Read More →