DevOps Engineer Professional (Page 17)

A DevOps engineer needs to configure a blue/green deployment for an existing three-tier application.The application runs on Amazon EC2 instances and uses an Amazon RDS database.The EC2 instances run behind an Application Load Balancer (ALB) and are in an Auto Scaling group.The DevOps engineer has created a launch template and an Auto Scaling group for the blue environment.The DevOps engineer also has created a launch template and an Auto Scaling group for the green environment.Each Auto Scaling group deploys to a matching blue or green target group.The target group also specifies which software, blue or green, gets loaded on the EC2 instances.The ALB can be configured to send traffic to the blue environment’s target group or the green environment’s target group.An Amazon Route 53 record for www.example.com points to the ALB.The deployment must move traffic all at once between the software on the blue environment’s EC2 instances to the newly deployed software on the green environment’s EC2 instances.What should the DevOps engineer do to meet these requirements?Read More →

A company has deployed an application in a production VPC in a single AWS account.The application is popular and is experiencing heavy usage.The company’s security team wants to add additional security, such as AWS WAF, to the application deployment.However, the application’s product manager is concerned about cost and does not want to approve the change unless the security team can prove that additional security is necessary.The security team believes that some of the application’s demand might come from users that have IP addresses that are on a deny list.The security team provides the deny list to a DevOps engineer.If any of the IP addresses on the deny list access the application, the security team wants to receive automated notification in near real time so that the security team can document that the application needs additional security.The DevOps engineer creates a VPC flow log for the production VPC.Which set of additional steps should the DevOps engineer take to meet these requirements MOST cost-effectively?Read More →

A company deploys its corporate infrastructure on AWS across multiple AWS Regions and Availability Zones.The infrastructure is deployed on Amazon EC2 instances and connects with AWS IoT Greengrass devices.The company deploys additional resources on on-premises servers that are located in the corporate headquarters.The company wants to reduce the overhead involved in maintaining and updating its resources.The company’s DevOps team plans to use AWS Systems Manager to implement automated management and application of patches.The DevOps team confirms that Systems Manager is available in the Regions that the resources are deployed in.Systems Manager also is available in a Region near the corporate headquarters.Which combination of steps must the DevOps team take to implement automated patch and configuration management across the company’s EC2 instances, IoT devices, and on-premises infrastructure? (Choose three.)Read More →

An application running on a set of Amazon EC2 instances in an Auto Scaling group requires a configuration file to operate.The instances are created and maintained with AWS CloudFormation.A DevOps engineer wants the instances to have the latest configuration file when launched, and wants changes to the configuration file to be reflected on all the instances with a minimal delay when the CloudFormation template is updated.Company policy requires that application configuration files be maintained along with AWS infrastructure configuration files in source control.Which solution will accomplish this?Read More →

A company uses Amazon S3 to store proprietary information.The development team creates buckets for new projects on a daily basis.The security team wants to ensure that all existing and future buckets have encryption, logging, and versioning enabled.Additionally, no buckets should ever be publicly read or write accessible.What should a DevOps engineer do to meet these requirements?Read More →

A DevOps engineer is designing a multi-Region disaster recovery strategy for an application.The application requires an RPO of 1 hour and requires an RTO of 4 hours.The application is deployed with an AWS CloudFormation template that creates an Application Load Balancer (ALB), Amazon EC2 instances in an Auto Scaling group and an Amazon RDS Multi-AZ DB instance with 20 GB of allocated storage.The AMI of the application instance does not contain data and has been copied to the destination Region.Which combination of actions will meet the recovery objectives at the LOWEST cost? (Choose two.)Read More →

A company manages a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The EC2 instances run in an Auto Scaling group across multiple Availability Zones.The application uses an Amazon RDS for MySQL DB instance to store the data.The company has configured Amazon Route 53 with an alias record that points to the ALB.A new company guideline requires a geographically isolated disaster recovery (DR) site with an RTO of 4 hours and an RPO of 15 minutes.Which DR strategy will meet these requirements with the LEAST change to the application stack?Read More →

A company has an on-premises that is written in Go.A DevOps engineer must move the application to AWS.The company’s development team wants to enable blue/green deployments and perform A/B testing.Which solution will meet these requirements?Read More →

A DevOps engineer used an AWS CloudFormation custom resource to set up AD Connector.The AWS Lambda function ran and created AD Connector, but CloudFormation is not transitioning from CREATE_IN_PROGRESS to CREATE_COMPLETE.Which action should the engineer take to resolve this issue?Read More →

A company develops and maintains a web application using Amazon EC2 instances and an Amazon RDS for SQL Server DB instance in a single AvailabilityZone.The resources need to run only when new deployments are being tested using AWS CodePipeline.Testing occurs one or more times a week and each test takes 2-3 hours to run.A DevOps engineer wants a solution that does not change the architecture components.Which solution will meet these requirements in the MOST cost-effective manner?Read More →