DevOps Engineer Professional (Page 22)

A company is adopting AWS CodeDeploy to automate its application deployments for a Java-Apache Tomcat application with an Apache Webserver.The development team started with a proof of concept, created a deployment group for a developer environment, and performed functional tests within the application.After completion, the team will create additional deployment groups for staging and production.The current log level is configured within the Apache settings, but the team wants to change this configuration dynamically when the deployment occurs, so that they can set different log level configurations depending on the deployment group without having a different application revision for each group.How can these requirements be met with the LEAST management overhead and without requiring different script versions for each deployment group?Read More →

A company provides an application to customers.The application has an Amazon API Gateway REST API that invokes an AWS Lambda function.On initialization, the Lambda function loads a large amount of data from an Amazon DynamoDB table.The data load process results in long cold-start times of 8-10 seconds.The DynamoDB table has DynamoDB Accelerator (DAX) configured.Customers report that the application intermittently takes a long time to respond to requests.The application receives thousands of requests throughout the day.In the middle of the day, the application experiences 10 times more requests than at any other time of the day.Near the end of the day, the application’s request volume decreases to 10% of its normal total.A DevOps engineer needs to reduce the latency of the Lambda function at all times of the day.Which solution will meet these requirements?Read More →

A company uses AWS Directory Service for Microsoft Active Directory as its identity provider (IdP).The company requires all infrastructure to be defined and deployed by AWS CloudFormation.A DevOps engineer needs to create a fleet of Windows-based Amazon EC2 instances to host an application.The DevOps engineer has created a CloudFormation template that contains an EC2 launch template, IAM role, EC2 security group, and EC2 Auto Scaling group.The DevOps engineer must implement a solution that joins all EC2 instances to the domain of the AWS Managed Microsoft AD directory.Which solution will meet these requirements with the MOST operational efficiency?Read More →

A company hired a penetration tester to simulate an internal security breach.The tester performed port scans on the company’s Amazon EC2 instances.The company’s security measures did not detect the port scans.The company needs a solution that automatically provides notification when port scans are performed on EC2 instances.The company creates and subscribes to an Amazon Simple Notification Service (Amazon SNS) topic.What should the company do next to meet the requirement?Read More →

A company wants to ensure that their EC2 instances are secure.They want to be notified if any new vulnerabilities are discovered on their instances, and they also want an audit trail of all login activities on the instances.Which solution will meet these requirements?Read More →

A DevOps engineer is deploying a new version of a company’s application in an AWS CodeDeploy deployment group associated with its Amazon EC2 instances.After some time, the deployment fails.The engineer realizes that all the events associated with the specific deployment ID are in a Skipped status, and code was not deployed in the instances associated with the deployment group.What are valid reasons for this failure? (Choose two.)Read More →

A company has multiple accounts in an organization in AWS Organizations.The company’s SecOps team needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if any account in the organization turns off the Block Public Access feature on an Amazon S3 bucket.A DevOps engineer must implement this change without affecting the operation of any AWS accounts.The implementation must ensure that individual member accounts in the organization cannot turn off the notification.Which solution will meet these requirements?Read More →

A company uses AWS Organizations to manage multiple accounts.Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant.A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present.Which solution will accomplish this?Read More →

A DevOps engineer is building a multistage pipeline with AWS CodePipeline to build, verify, stage, test, and deploy an application.A manual approval stage is required between the test stage and the deploy stage.The development team uses a custom chat tool with webhook support that requires near-real-time notifications.How should the DevOps engineer configure status updates for pipeline activity and approval requests to post to the chat tool?Read More →

A company runs an application for multiple environments in a single AWS account.An AWS CodePipeline pipeline uses a development Amazon Elastic Container Service (Amazon ECS) cluster to test an image for the application from an Amazon Elastic Container Registry (Amazon ECR) repository.The pipeline promotes the image to a production ECS cluster.The company needs to move the production cluster into a separate AWS account in the same AWS Region.The production cluster must be able to download the images over a private connection.Which solution will meet these requirements?Read More →