DevOps Engineer Professional (Page 16)

A company builds an application that uses an Application Load Balancer in front of Amazon EC2 instances that are in an Auto Scaling group.The application is stateless.The Auto Scaling group uses a custom AMI that is fully prebuilt.The EC2 instances do not have a custom bootstrapping process.The AMI that the Auto Scaling group uses was recently deleted.The Auto Scaling group’s scaling activities show failures because the AMI ID does not exist.Which combination of steps should a DevOps engineer take to meet these requirements? (Choose three.)Read More →

A video-sharing company stores its videos in Amazon S3.The company has observed a sudden increase in video access requests, but the company does not know which videos are most popular.The company needs to identify the general access pattern for the video files.This pattern includes the number of users who access a certain file on a given day, as well as the number of pull requests for certain files.How can the company meet these requirements with the LEAST amount of effort?Read More →

A company has a mission-critical application on AWS that uses automatic scaling.The company wants the deployment lifecycle to meet the following parameters:• The application must be deployed one instance at a time to ensure the remaining fleet continues to serve traffic.• The application is CPU intensive and must be closely monitored.• The deployment must automatically roll back if the CPU utilization of the deployment instance exceeds 85%.Which solution will meet these requirements?Read More →

A company is migrating Docker repositories to Amazon Elastic Container Registry (Amazon ECR) in an existing AWS account.A DevOps engineer needs to automate the management of images that are uploaded to the repositories.The solution must limit the number of image versions.As a first step, the DevOps engineer creates a private repository in Amazon ECR for each repository that the company will migrate.What should the DevOps engineer do next to meet the requirements in the MOST operationally efficient manner?Read More →

A company manages a multi-tenant environment in its VPC and has configured Amazon GuardDuty for the corresponding AWS account.The company sends all GuardDuty findings to AWS Security Hub.Traffic from suspicious sources is generating a large number of findings.A DevOps engineer needs to implement a solution to automatically deny traffic across the entire VPC when GuardDuty discovers a new suspicious source.Which solution will meet these requirements?Read More →

A company has a single AWS account that runs hundreds of Amazon EC2 instances in a single AWS Region.New EC2 instances are launched and terminated each hour in the account.The account also includes existing EC2 instances that have been running for longer than a week.The company’s security policy requires all running EC2 instances to use an EC2 instance profile.If an EC2 instance does not have an instance profile attached, the EC2 instance must use a default instance profile that has no IAM permissions assigned.A DevOps engineer reviews the account and discovers EC2 instances that are running without an instance profile.During the review, the DevOps engineer also observes that new EC2 instances are being launched without an instance profile.Which solution will ensure that an instance profile is attached to all existing and future EC2 instances in the Region?Read More →

A DevOps team is merging code revisions for an application that uses an Amazon RDS Multi-AZ DB cluster for its production database.The DevOps team uses continuous integration to periodically verify that the application works.The DevOps team needs to test the changes before the changes are deployed to the production database.Which solution will meet these requirements?Read More →

A company that runs many workloads on AWS has an Amazon EBS spend that has increased over time.The DevOps team notices there are many unattachedEBS volumes.Although there are workloads where volumes are detached, volumes over 14 days old are stale and no longer needed.A DevOps engineer has been tasked with creating automation that deletes unattached EBS volumes that have been unattached for 14 days.Which solution will accomplish this?Read More →

A company is using an organization in AWS Organizations to manage multiple AWS accounts.The company’s development team wants to use AWS Lambda functions to meet resiliency requirements and is rewriting all applications to work with Lambda functions that are deployed in a VPC.The development team is using Amazon Elastic File System (Amazon EFS) as shared storage in Account A in the organization.The company wants to continue to use Amazon EFS with Lambda.Company policy requires all serverless projects to be deployed in Account B.A DevOps engineer needs to reconfigure an existing EFS file system to allow Lambda functions to access the data through an existing EFS access point.Which combination of steps should the DevOps engineer take to meet these requirements? (Choose three.)Read More →

A company uses AWS Storage Gateway in file gateway mode in front of an Amazon S3 bucket that is used by multiple resources.In the morning when business begins, users do not see the objects processed by a third party the previous evening.When a DevOps engineer looks directly at the S3 bucket, the data is there, but it is missing in Storage Gateway.Which solution ensures that all the updated third-party files are available in the morning?Read More →