DevOps Engineer Professional (Page 18)

A company is migrating from its on-premises data center to AWS.The company currently uses a custom on-premises Cl/CD pipeline solution to build and package software.The company wants its software packages and dependent public repositories to be available in AWS CodeArtifact to facilitate the creation of application-specific pipelines.Which combination of steps should the company take to update the CI/CD pipeline solution and to configure CodeArtifact with the LEAST operational overhead? (Choose two.)Read More →

A company uses AWS Organizations to manage multiple accounts.Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant.A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present.With solution will accomplish this?Read More →

A DevOps engineer has created an AWS CloudFormation template that deploys an application on Amazon EC2 instances.The EC2 instances run Amazon Linux.The application is deployed to the EC2 instances by using shell scripts that contain user data.The EC2 instances have an IAM instance profile that has an IAM role with the AmazonSSMManagedinstanceCore managed policy attached.The DevOps engineer has modified the user data in the CloudFormation template to install a new version of the application.The engineer has also applied the stack update.However, the application was not updated on the running EC2 instances.The engineer needs to ensure that the changes to the application are installed on the running EC2 instances.Which combination of steps will meet these requirements? (Choose two.)Read More →

A DevOps engineer has automated a web service deployment by using AWS CodePipeline with the following steps:1.An AWS CodeBuild project compiles the deployment artifact and runs unit tests.2.An AWS CodeDeploy deployment group deploys the web service to Amazon EC2 instances in the staging environment.3.A CodeDeploy deployment group deploys the web service to EC2 instances in the production environment.The quality assurance (QA) team requests permission to inspect the build artifact before the deployment to the production environment occurs.The QA team wants to run an internal penetration testing tool to conduct manual tests.The tool will be invoked by a REST API call.Which combination of actions should the DevOps engineer take to fulfill this request? (Choose two.)Read More →

A company needs to ensure that flow logs remain configured for all existing and new VPCs in its AWS account.The company uses an AWS CloudFormation stack to manage its VPCs.The company needs a solution that will work for any VPCs that any IAM user creates.Which solution will meet these requirements?Read More →

A highly regulated company has a policy that DevOps Engineers should not log in to their Amazon EC2 instances except in emergencies.If a DevOps Engineer does log in, the Security team must be notified within 15 minutes of the occurrence.Which solution will meet these requirements?Read More →

A company has multiple development teams in different business units that work in a shared single AWS account.All Amazon EC2 resources that are created in the account must include tags that specify who created the resources.The tagging must occur within the first hour of resource creation.A DevOps engineer needs to add tags to the created resources that include the user ID that created the resource and the cost center ID.The DevOps engineer configures an AWS Lambda function with the cost center mappings to tag the resources.The DevOps engineer also sets up AWS CloudTrail in the AWS account.An Amazon S3 bucket stores the CloudTrail event logs.Which solution will meet the tagging requirements?Read More →

A company has an application that runs on current-generation Amazon EC2 instances in a VPC.The EC2 instances run Amazon Linux and are launched in an Amazon EC2 Auto Scaling group.The application retrieves data from an Amazon S3 bucket, processes the data, and uploads the processed data to a different S3 bucket.Recently, the application’s performance worsened.A manual investigation identified that outbound network bandwidth utilization was too high for the type of EC2 instance.The company updated the EC2 instances to a larger EC2 instance size.The company’s DevOps team needs to receive notification from an Amazon CloudWatch alarm if the application attempts to use more outbound network bandwidth than is available to the EC2 instances.Which solution will meet these requirements?Read More →

A company manages AWS accounts for application teams in AWS Control Tower.Individual application teams are responsible for securing their respective AWS accounts.A DevOps engineer needs to enable Amazon GuardDuty for all AWS accounts in which the application teams have not already enabled GuardDuty.The DevOps engineer is using AWS CloudFormation StackSets from the AWS Control Tower management account.How should the DevOps engineer configure the CloudFormation template to prevent failure during the StackSets deployment?Read More →

An IT team has built an AWS CloudFormation template so others in the company can quickly and reliably deploy and terminate an application.The template creates an Amazon EC2 instance with a user data script to install the application and an Amazon S3 bucket that the application uses to serve static webpages while it is running.All resources should be removed when the CloudFormation stack is deleted.However, the team observes that CloudFormation reports an error during stack deletion, and the S3 bucket created by the stack is not deleted.How can the team resolve the error in the MOST efficient manner to ensure that all resources are deleted without errors?Read More →