DevOps Engineer Professional (Page 21)

A company uses AWS Organizations to manage its AWS accounts.A DevOps engineer must ensure that all users who access the AWS Management Console are authenticated through the company’s corporate identity provider (IdP).Which combination of steps will meet these requirements? (Choose two.)Read More →

A company needs to adopt a multi-account strategy to deploy its applications and the associated CI/CD infrastructure.The company has created an organization in AWS Organizations that has all features enabled.The company has configured AWS Control Tower and has set up a landing zone.The company needs to use AWS Control Tower controls (guardrails) in all AWS accounts in the organization.The company must create the accounts for a multi-environment application and must ensure that all accounts are configured to an initial baseline.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A DevOps engineer manages a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances run in an EC2 Auto Scaling group across multiple Availability Zones.The engineer needs to implement a deployment strategy that:Launches a second fleet of instances with the same capacity as the original fleet.Maintains the original fleet unchanged while the second fleet is launched.Transitions traffic to the second fleet when the second fleet is fully deployed.Terminates the original fleet automatically 1 hour after transition.Which solution will satisfy these requirements?Read More →

A company uses AWS Organizations to manage hundreds of AWS accounts.The company has a team that is responsible for AWS Identity and Access Management (IAM).The IAM team wants to implement AWS IAM Identity Center (AWS Single Sign-On).The IAM team must have only the minimum needed permissions to manage IAM Identity Center.The IAM team must not be able to gain unneeded access to the Organizations management account.The IAM team must be able to provision new IAM Identity Center permission sets and assignments for existing and new member accounts.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company uses containers for its applications.The company learns that some container images are missing required security configurations.A DevOps engineer needs to implement a solution to create a standard base image.The solution must publish the base image weekly to the us-west-2 Region, us-east-2 Region, and eu-central-1 Region.Which solution will meet these requirements?Read More →

A company’s application runs on Amazon EC2 instances.The application writes to a log file that records the username, date, time, and source IP address of the login.The log is published to a log group in Amazon CloudWatch Logs.The company is performing a root cause analysis for an event that occurred on the previous day.The company needs to know the number of logins for a specific user from the past 7 days.Which solution will provide this information?Read More →

A company’s security team requires that all external Application Load Balancers (ALBs) and Amazon API Gateway APIs are associated with AWS WAF web ACLs.The company has hundreds of AWS accounts, all of which are included in a single organization in AWS Organizations.The company has configured AWS Config for the organization.During an audit, the company finds some externally facing ALBs that are not associated with AWS WAF web ACLs.Which combination of steps should a DevOps engineer take to prevent future violations? (Choose two.)Read More →

A company uses AWS CodePipeline pipelines to automate releases of its application A typical pipeline consists of three stages build, test, and deployment. The company has been using a separate AWS CodeBuild project to run scripts for each stage. However, the company now wants to use AWS CodeDeploy to handle the deployment stage of the pipelines.The company has packaged the application as an RPM package and must deploy the application to a fleet of Amazon EC2 instances. The EC2 instances are in an EC2 Auto Scaling group and are launched from a common AMI.Which combination of steps should a DevOps engineer perform to meet these requirements? (Choose two.)Read More →

A company is using an Amazon Aurora cluster as the data store for its application.The Aurora cluster is configured with a single DB instance.The application performs read and write operations on the database by using the cluster’s instance endpoint.The company has scheduled an update to be applied to the cluster during an upcoming maintenance window.The cluster must remain available with the least possible interruption during the maintenance window.What should a DevOps engineer do to meet these requirements?Read More →

A company requires its developers to tag all Amazon Elastic Block Store (Amazon EBS) volumes in an account to indicate a desired backup frequency.This requirement Includes EBS volumes that do not require backups.The company uses custom tags named Backup_Frequency that have values of none, dally, or weekly that correspond to the desired backup frequency.An audit finds that developers are occasionally not tagging the EBS volumes.A DevOps engineer needs to ensure that all EBS volumes always have the Backup_Frequency tag so that the company can perform backups at least weekly unless a different value is specified.Which solution will meet these requirements?Read More →