DevOps Engineer Professional (Page 18)

A company has an application that runs on Amazon EC2 instances.The company uses an AWS CodePipeline pipeline to deploy the application into multiple AWS Regions.The pipeline is configured with a stage for each Region.Each stage contains an AWS CloudFormation action for each Region.When the pipeline deploys the application to a Region, the company wants to confirm that the application is in a healthy state before the pipeline moves on to the next Region.Amazon Route 53 record sets are configured for the application in each Region.A DevOps engineer creates a Route 53 health check that is based on an Amazon CloudWatch alarm for each Region where the application is deployed.What should the DevOps engineer do next to meet the requirements?Read More →

AnyCompany is using AWS Organizations to create and manage multiple AWS accounts.AnyCompany recently acquired a smaller company, Example Corp.During the acquisition process, Example Corp’s single AWS account joined AnyCompany’s management account through an Organizations invitation.AnyCompany moved the new member account under an OU that is dedicated to Example Corp.AnyCompany’s DevOps engineer has an IAM user that assumes a role that is named OrganizationAccountAccessRole to access member accounts.This role is configured with a full access policy.When the DevOps engineer tries to use the AWS Management Console to assume the role in Example Corp’s new member account, the DevOps engineer receives the following error message: “Invalid information in one or more fields.Check your information or contact your administrator.”Which solution will give the DevOps engineer access to the new member account?Read More →

A company deploys an application on on-premises devices in the company’s on-premises data center.The company uses an AWS Direct Connect connection between the data center and the company’s AWS account.During initial setup of the on-premises devices and during application updates, the application needs to retrieve configuration files from an Amazon Elastic File System (Amazon EFS) file system.All traffic from the on-premises devices to Amazon EFS must remain private and encrypted.The on-premises devices must follow the principle of least privilege for AWS access.The company’s DevOps team needs the ability to revoke access from a single device without affecting the access of the other devices.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company’s DevOps team manages a set of AWS accounts that are in an organization in AWS Organizations.The company needs a solution that ensures that all Amazon EC2 instances use approved AM Is that the DevOps team manages.The solution also must remediate the usage of AMIs that are not approved.The individual account administrators must not be able to remove the restriction to use approved AMIs.Which solution will meet these requirements?Read More →

A company recently created a new AWS Control Tower landing zone in a new organization in AWS Organizations.The landing zone must be able to demonstrate compliance with the Center for Internet Security (CIS) Benchmarks for AWS Foundations.The company’s security team wants to use AWS Security Hub to view compliance across all accounts.Only the security team can be allowed to view aggregated Security Hub findings.In addition, specific users must be able to view findings from their own accounts within the organization.All accounts must be enrolled in Security Hub after the accounts are created.Which combination of steps will meet these requirements in the MOST automated way? (Choose three.)Read More →

A DevOps engineer is building a continuous deployment pipeline for a serverless application that uses AWS Lambda functions.The company wants to reduce the customer impact of an unsuccessful deployment.The company also wants to monitor for issues.Which deploy stage configuration will meet these requirements?Read More →

A company has an organization in AWS Organizations.The organization includes workload accounts that contain enterprise applications.The company centrally manages users from an operations account.No users can be created in the workload accounts.The company recently added an operations team and must provide the operations team members with administrator access to each workload account.Which combination of actions will provide this access? (Choose three.)Read More →

A DevOps team manages an API running on-premises that serves as a backend for an Amazon API Gateway endpoint.Customers have been complaining about high response latencies, which the development team has verified using the API Gateway latency metrics in Amazon CloudWatch.To identify the cause, the team needs to collect relevant data without introducing additional latency.Which actions should be taken to accomplish this? (Choose two.)Read More →

A company hosts its staging website using an Amazon EC2 instance backed with Amazon EBS storage.The company wants to recover quickly with minimal data losses in the event of network connectivity issues or power failures on the EC2 instance.Which solution will meet these requirements?Read More →

A company runs an application with an Amazon EC2 and on-premises configuration.A DevOps engineer needs to standardize patching across both environments.Company policy dictates that patching only happens during non-business hours.Which combination of actions will meet these requirements? (Choose three.)Read More →