DOP-C02 (Page 24)

A DevOps engineer is building an application that uses an AWS Lambda function to query an Amazon Aurora MySQL DB cluster.The Lambda function performs only read queries.Amazon EventBridge events invoke the Lambda function.As more events invoke the Lambda function each second, the database’s latency increases and the database’s throughput decreases.The DevOps engineer needs to improve the performance of the application.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company uses AWS Organizations to manage its AWS accounts.The company has a root OU that has a child OU.The root OU has an SCP that allows all actions on all resources.The child OU has an SCP that allows all actions for Amazon DynamoDB and AWS Lambda, and denies all other actions.The company has an AWS account that is named vendor-data in the child OU.A DevOps engineer has an IAM user that is attached to the Administrator Access IAM policy in the vendor-data account.The DevOps engineer attempts to launch an Amazon EC2 instance in the vendor-data account but receives an access denied error.Which change should the DevOps engineer make to launch the EC2 instance in the vendor-data account?Read More →

A company uses AWS WAF to protect its cloud infrastructure.A DevOps engineer needs to give an operations team the ability to analyze log messages from AWS WAF.The operations team needs to be able to create alarms for specific patterns in the log output.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company wants to use AWS development tools to replace its current bash deployment scripts.The company currently deploys a LAMP application to a group of Amazon EC2 instances behind an Application Load Balancer (ALB).During the deployments, the company unit tests the committed application, stops and starts services, unregisters and re-registers instances with the load balancer, and updates file permissions.The company wants to maintain the same deployment functionality through the shift to using AWS services.Which solution will meet these requirements?Read More →

A production account has a requirement that any Amazon EC2 instance that has been logged in to manually must be terminated within 24 hours.All applications in the production account are using Auto Scaling groups with the Amazon CloudWatch Logs agent configured.How can this process be automated?Read More →

A DevOps engineer is designing an application that integrates with a legacy REST API.The application has an AWS Lambda function that reads records from an Amazon Kinesis data stream.The Lambda function sends the records to the legacy REST API.Approximately 10% of the records that the Lambda function sends from the Kinesis data stream have data errors and must be processed manually.The Lambda function event source configuration has an Amazon Simple Queue Service (Amazon SQS) dead-letter queue as an on-failure destination.The DevOps engineer has configured the Lambda function to process records in batches and has implemented retries in case of failure.During testing, the DevOps engineer notices that the dead-letter queue contains many records that have no data errors and that already have been processed by the legacy REST API.The DevOps engineer needs to configure the Lambda function’s event source options to reduce the number of errorless records that are sent to the dead-letter queue.Which solution will meet these requirements?Read More →

A DevOps engineer needs to implement integration tests into an existing AWS CodePipeline CI/CD workflow for an Amazon Elastic Container Service (Amazon ECS) service.The CI/CD workflow retrieves new application code from an AWS CodeCommit repository and builds a container image.The Cl/CD workflow then uploads the container image to Amazon Elastic Container Registry (Amazon ECR) with a new image tag version.The integration tests must ensure that new versions of the service endpoint are reachable and that various API methods return successful response data.The DevOps engineer has already created an ECS cluster to test the service.Which combination of steps will meet these requirements with the LEAST management overhead? (Choose three.)Read More →

A company uses the AWS Cloud Development Kit (AWS CDK) to define its application.The company uses a pipeline that consists of AWS CodePipeline and AWS CodeBuild to deploy the CDK application.The company wants to introduce unit tests to the pipeline to test various infrastructure components.The company wants to ensure that a deployment proceeds if no unit tests result in a failure.Which combination of steps will enforce the testing requirement in the pipeline? (Choose two.)Read More →

To run an application, a DevOps engineer launches an Amazon EC2 instance with public IP addresses in a public subnet.A user data script obtains the application artifacts and installs them on the instances upon launch.A change to the security classification of the application now requires the instances to run with no access to the internet.While the instances launch successfully and show as healthy, the application does not seem to be installed.Which of the following should successfully install the application while complying with the new rule?Read More →

An ecommerce company has chosen AWS to host its new platform.The company’s DevOps team has started building an AWS Control Tower landing zone.The DevOps team has set the identity store within AWS IAM Identity Center (AWS Single Sign-On) to external identity provider (IdP) and has configured SAML 2.0.The DevOps team wants a robust permission model that applies the principle of least privilege.The model must allow the team to build and manage only the team’s own resources.Which combination of steps will meet these requirements? (Choose three.)Read More →