DevOps Engineer Professional (Page 23)

A company uses AWS Organizations to manage hundreds of AWS accounts.The company has a team that is responsible for AWS Identity and Access Management (IAM).The IAM team wants to implement AWS IAM Identity Center (AWS Single Sign-On).The IAM team must have only the minimum needed permissions to manage IAM Identity Center.The IAM team must not be able to gain unneeded access to the Organizations management account.The IAM team must be able to provision new IAM Identity Center permission sets and assignments for existing and new member accounts.Which combination of steps will meet these requirements? (Choose three.)Read More →

A DevOps engineer manages a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The instances run in an EC2 Auto Scaling group across multiple Availability Zones.The engineer needs to implement a deployment strategy that:Launches a second fleet of instances with the same capacity as the original fleet.Maintains the original fleet unchanged while the second fleet is launched.Transitions traffic to the second fleet when the second fleet is fully deployed.Terminates the original fleet automatically 1 hour after transition.Which solution will satisfy these requirements?Read More →

A company needs to adopt a multi-account strategy to deploy its applications and the associated CI/CD infrastructure.The company has created an organization in AWS Organizations that has all features enabled.The company has configured AWS Control Tower and has set up a landing zone.The company needs to use AWS Control Tower controls (guardrails) in all AWS accounts in the organization.The company must create the accounts for a multi-environment application and must ensure that all accounts are configured to an initial baseline.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company uses AWS Organizations to manage its AWS accounts.A DevOps engineer must ensure that all users who access the AWS Management Console are authenticated through the company’s corporate identity provider (IdP).Which combination of steps will meet these requirements? (Choose two.)Read More →

A business has an application that consists of five independent AWS Lambda functions.The DevOps Engineer has built a CI/CD pipeline using AWS CodePipeline and AWS CodeBuild that builds, tests, packages, and deploys each Lambda function in sequence.The pipeline uses an Amazon CloudWatch Events rule to ensure the pipeline execution starts as quickly as possible after a change is made to the application source code.After working with the pipeline for a few months, the DevOps Engineer has noticed the pipeline takes too long to complete.What should the DevOps Engineer implement to BEST improve the speed of the pipeline?Read More →

A company has deployed a new platform that runs on Amazon Elastic Kubernetes Service (Amazon EKS).The new platform hosts web applications that users frequently update.The application developers build the Docker images for the applications and deploy the Docker images manually to the platform.The platform usage has increased to more than 500 users every day.Frequent updates, building the updated Docker images for the applications, and deploying the Docker images on the platform manually have all become difficult to manage.The company needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if Docker image scanning returns any HIGH or CRITICAL findings for operating system or programming language package vulnerabilities.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company is creating a software solution that executes a specific parallel-processing mechanism.The software can scale to tens of servers in some special scenarios.This solution uses a proprietary library that is license-based, requiring that each individual server have a single, dedicated license installed.The company has 200 licenses and is planning to run 200 server nodes concurrently at most.The company has requested the following features:✑ A mechanism to automate the use of the licenses at scale.✑ Creation of a dashboard to use in the future to verify which licenses are available at any moment.What is the MOST effective way to accomplish these requirements?Read More →

A company wants to decrease the time it takes to develop new features.The company uses AWS CodeBuild and AWS CodeDeploy to build and deploy its applications.The company uses AWS CodePipeline to deploy each microservice with its own CI/CD pipeline.The company needs more visibility into the average time between the release of new features and the average time to recover after a failed deployment.Which solution will provide this visibility with the LEAST configuration effort?Read More →

An Amazon EC2 instance is running in a Virtual Private Cloud (VPC) and needs to download an object from a restricted Amazon S3 bucket.When the DevOps engineer tries to download, the object an AccessDenied error is received.What are the possible causes for this error? (Choose two.)Read More →

A company uses Amazon EC2 as its primary compute platform.A DevOps team wants to audit the company’s EC2 instances to check whether any prohibited applications have been installed on the EC2 instances.Which solution will meet these requirements with the MOST operational efficiency?Read More →