DevOps Engineer Professional (Page 22)

A company hired a penetration tester to simulate an internal security breach.The tester performed port scans on the company’s Amazon EC2 instances.The company’s security measures did not detect the port scans.The company needs a solution that automatically provides notification when port scans are performed on EC2 instances.The company creates and subscribes to an Amazon Simple Notification Service (Amazon SNS) topic.What should the company do next to meet the requirement?Read More →

A company uses AWS Directory Service for Microsoft Active Directory as its identity provider (IdP).The company requires all infrastructure to be defined and deployed by AWS CloudFormation.A DevOps engineer needs to create a fleet of Windows-based Amazon EC2 instances to host an application.The DevOps engineer has created a CloudFormation template that contains an EC2 launch template, IAM role, EC2 security group, and EC2 Auto Scaling group.The DevOps engineer must implement a solution that joins all EC2 instances to the domain of the AWS Managed Microsoft AD directory.Which solution will meet these requirements with the MOST operational efficiency?Read More →

A company provides an application to customers.The application has an Amazon API Gateway REST API that invokes an AWS Lambda function.On initialization, the Lambda function loads a large amount of data from an Amazon DynamoDB table.The data load process results in long cold-start times of 8-10 seconds.The DynamoDB table has DynamoDB Accelerator (DAX) configured.Customers report that the application intermittently takes a long time to respond to requests.The application receives thousands of requests throughout the day.In the middle of the day, the application experiences 10 times more requests than at any other time of the day.Near the end of the day, the application’s request volume decreases to 10% of its normal total.A DevOps engineer needs to reduce the latency of the Lambda function at all times of the day.Which solution will meet these requirements?Read More →

A company is adopting AWS CodeDeploy to automate its application deployments for a Java-Apache Tomcat application with an Apache Webserver.The development team started with a proof of concept, created a deployment group for a developer environment, and performed functional tests within the application.After completion, the team will create additional deployment groups for staging and production.The current log level is configured within the Apache settings, but the team wants to change this configuration dynamically when the deployment occurs, so that they can set different log level configurations depending on the deployment group without having a different application revision for each group.How can these requirements be met with the LEAST management overhead and without requiring different script versions for each deployment group?Read More →

A company requires its developers to tag all Amazon Elastic Block Store (Amazon EBS) volumes in an account to indicate a desired backup frequency.This requirement Includes EBS volumes that do not require backups.The company uses custom tags named Backup_Frequency that have values of none, dally, or weekly that correspond to the desired backup frequency.An audit finds that developers are occasionally not tagging the EBS volumes.A DevOps engineer needs to ensure that all EBS volumes always have the Backup_Frequency tag so that the company can perform backups at least weekly unless a different value is specified.Which solution will meet these requirements?Read More →

A company is using an Amazon Aurora cluster as the data store for its application.The Aurora cluster is configured with a single DB instance.The application performs read and write operations on the database by using the cluster’s instance endpoint.The company has scheduled an update to be applied to the cluster during an upcoming maintenance window.The cluster must remain available with the least possible interruption during the maintenance window.What should a DevOps engineer do to meet these requirements?Read More →

A company uses AWS CodePipeline pipelines to automate releases of its application A typical pipeline consists of three stages build, test, and deployment. The company has been using a separate AWS CodeBuild project to run scripts for each stage. However, the company now wants to use AWS CodeDeploy to handle the deployment stage of the pipelines.The company has packaged the application as an RPM package and must deploy the application to a fleet of Amazon EC2 instances. The EC2 instances are in an EC2 Auto Scaling group and are launched from a common AMI.Which combination of steps should a DevOps engineer perform to meet these requirements? (Choose two.)Read More →

A company’s security team requires that all external Application Load Balancers (ALBs) and Amazon API Gateway APIs are associated with AWS WAF web ACLs.The company has hundreds of AWS accounts, all of which are included in a single organization in AWS Organizations.The company has configured AWS Config for the organization.During an audit, the company finds some externally facing ALBs that are not associated with AWS WAF web ACLs.Which combination of steps should a DevOps engineer take to prevent future violations? (Choose two.)Read More →

A company’s application runs on Amazon EC2 instances.The application writes to a log file that records the username, date, time, and source IP address of the login.The log is published to a log group in Amazon CloudWatch Logs.The company is performing a root cause analysis for an event that occurred on the previous day.The company needs to know the number of logins for a specific user from the past 7 days.Which solution will provide this information?Read More →

A company uses containers for its applications.The company learns that some container images are missing required security configurations.A DevOps engineer needs to implement a solution to create a standard base image.The solution must publish the base image weekly to the us-west-2 Region, us-east-2 Region, and eu-central-1 Region.Which solution will meet these requirements?Read More →