DevOps Engineer Professional (Page 19)

A company needs to implement failover for its application.The application includes an Amazon CloudFront distribution and a public Application Load Balancer (ALB) in an AWS Region.The company has configured the ALB as the default origin for the distribution.After some recent application outages, the company wants a zero-second RTO.The company deploys the application to a secondary Region in a warm standby configuration.A DevOps engineer needs to automate the failover of the application to the secondary Region so that HTTP GET requests meet the desired RTO.Which solution will meet these requirements?Read More →

A DevOps engineer is architecting a continuous development strategy for a company’s software as a service (SaaS) web application running on AWS.For application and security reasons, users subscribing to this application are distributed across multiple Application Load Balancers (ALBs), each of which has a dedicated Auto Scaling group and fleet of Amazon EC2 instances.The application does not require a build stage, and when it is committed to AWS CodeCommit, the application must trigger a simultaneous deployment to all ALBs, Auto Scaling groups, and EC2 fleets.Which architecture will meet these requirements with the LEAST amount of configuration?Read More →

A company runs a web application that extends across multiple Availability Zones.The company uses an Application Load Balancer (ALB) for routing, AWS Fargate for the application, and Amazon Aurora for the application data.The company uses AWS CloudFormation templates to deploy the application.The company stores all Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository in the same AWS account and AWS Region.A DevOps engineer needs to establish a disaster recovery (DR) process in another Region.The solution must meet an RPO of 8 hours and an RTO of 2 hours.The company sometimes needs more than 2 hours to build the Docker images from the Dockerfile.Which solution will meet the RTO and RPO requirements MOST cost-effectively?Read More →

A company is running a custom-built application that processes records.All the components run on Amazon EC2 instances that run in an Auto Scaling group.Each record’s processing is a multistep sequential action that is compute-intensive.Each step is always completed in 5 minutes or less.A limitation of the current system is that if any steps fail, the application has to reprocess the record from the beginning.The company wants to update the architecture so that the application must reprocess only the failed steps.What is the MOST operationally efficient solution that meets these requirements?Read More →

A DevOps team has created a Custom Lambda rule in AWS Config.The rule monitors Amazon Elastic Container Repository (Amazon ECR) policy statements for ecr:* actions.When a noncompliant repository is detected, Amazon EventBridge uses Amazon Simple Notification Service (Amazon SNS) to route the notification to a security team.When the custom AWS Config rule is evaluated, the AWS Lambda function fails to run.Which solution will resolve the issue?Read More →

A DevOps engineer is building a continuous deployment pipeline for a serverless application that uses AWS Lambda functions.The company wants to reduce the customer impact of an unsuccessful deployment.The company also wants to monitor for issues.Which deploy stage configuration will meet these requirements?Read More →

An Amazon EC2 Auto Scaling group manages EC2 instances that were created from an AMI.The AMI has the AWS Systems Manager Agent installed.When an EC2 instance is launched into the Auto Scaling group, tags are applied to the EC2 instance.EC2 instances that are launched by the Auto Scaling group must have the correct operating system configuration.Which solution will meet these requirements?Read More →

A company wants to use a grid system for proprietary enterprise in-memory data store on top of AWS.The system can run in multiple server nodes in any Linux-based distribution.The system must be able to reconfigure the entire cluster every time a node is added or removed.When adding or removing nodes, an /etc/cluster/nodes.config file must be updated listing the IP addresses of the current node member of that cluster.The company wants to automate the task of adding new nodes to a cluster.What can a DevOps engineer do to meet these requirements?Read More →

A company has an organization in AWS Organizations for its multi-account environment.A DevOps engineer is developing an AWS CodeArtifact based strategy for application package management across the organization.Each application team at the company has its own account in the organization.Each application team also has limited access to a centralized shared services account.Each application team needs full access to download, publish, and grant access to its own packages.Some common library packages that the application teams use must also be shared with the entire organization.Which combination of steps will meet these requirements with the LEAST administrative overhead? (Choose three.)Read More →

A company uses Amazon S3 to store proprietary information.The development team creates buckets for new projects on a daily basis.The security team wants to ensure that all existing and future buckets have encryption, logging, and versioning enabled.Additionally, no buckets should ever be publicly read or write accessible.What should a DevOps engineer do to meet these requirements?Read More →