DevOps Engineer Professional (Page 24)

A company has deployed an application in a production VPC in a single AWS account.The application is popular and is experiencing heavy usage.The company’s security team wants to add additional security, such as AWS WAF, to the application deployment.However, the application’s product manager is concerned about cost and does not want to approve the change unless the security team can prove that additional security is necessary.The security team believes that some of the application’s demand might come from users that have IP addresses that are on a deny list.The security team provides the deny list to a DevOps engineer.If any of the IP addresses on the deny list access the application, the security team wants to receive automated notification in near real time so that the security team can document that the application needs additional security.The DevOps engineer creates a VPC flow log for the production VPC.Which set of additional steps should the DevOps engineer take to meet these requirements MOST cost-effectively?Read More →

A company is implementing a well-architected design for its globally accessible API stack.The design needs to ensure both high reliability and fast response times for users located in North America and Europe.The API stack contains the following three tiers:Amazon API Gateway -AWS Lambda -Amazon DynamoDB -Which solution will meet the requirements?Read More →

A video-sharing company stores its videos in Amazon S3.The company has observed a sudden increase in video access requests, but the company does not know which videos are most popular.The company needs to identify the general access pattern for the video files.This pattern includes the number of users who access a certain file on a given day, as well as the number of pull requests for certain files.How can the company meet these requirements with the LEAST amount of effort?Read More →

A company manages 500 AWS accounts that are in an organization in AWS Organizations.The company discovers many unattached Amazon Elastic Block Store (Amazon EBS) volumes in all the accounts.The company wants to automatically tag the unattached EBS volumes for investigation.A DevOps engineer needs to deploy an AWS Lambda function to all the AWS accounts.The Lambda function must run every 30 minutes to tag all the EBS volumes that have been unattached for a period of 7 days or more.Which solution will meet these requirements in the MOST operationally efficient manner?Read More →

A space exploration company receives telemetry data from multiple satellites.Small packets of data are received through Amazon API Gateway and are placed directly into an Amazon Simple Queue Service (Amazon SQS) standard queue.A custom application is subscribed to the queue and transforms the data into a standard format.Because of inconsistencies in the data that the satellites produce, the application is occasionally unable to transform the data.In these cases, the messages remain in the SQS queue.A DevOps engineer must develop a solution that retains the failed messages and makes them available to scientists for review and future processing.Which solution will meet these requirements?Read More →

A company is implementing an Amazon Elastic Container Service (Amazon ECS) cluster to run its workload.The company architecture will run multiple ECS services on the cluster.The architecture includes an Application Load Balancer on the front end and uses multiple target groups to route traffic.A DevOps engineer must collect application and access logs.The DevOps engineer then needs to send the logs to an Amazon S3 bucket for near-real-time analysis.Which combination of steps must the DevOps engineer take to meet these requirements? (Choose three.)Read More →

A company has migrated its container-based applications to Amazon EKS and want to establish automated email notifications.The notifications sent to each email address are for specific activities related to EKS components.The solution will include Amazon SNS topics and an AWS Lambda function to evaluate incoming log events and publish messages to the correct SNS topic.Which logging solution will support these requirements?Read More →

A company is using AWS CodePipeline to automate its release pipeline.AWS CodeDeploy is being used in the pipeline to deploy an application to Amazon Elastic Container Service (Amazon ECS) using the blue/green deployment model.The company wants to implement scripts to test the green version of the application before shifting traffic.These scripts will complete in 5 minutes or less.If errors are discovered during these tests, the application must be rolled back.Which strategy will meet these requirements?Read More →

A company has an on-premises application that is written in Go.A DevOps engineer must move the application to AWS.The company’s development team wants to enable blue/green deployments and perform A/B testing.Which solution will meet these requirements?Read More →

A DevOps engineer is working on a data archival project that requires the migration of on-premises data to an Amazon S3 bucket.The DevOps engineer develops a script that incrementally archives on-premises data that is older than 1 month to Amazon S3.Data that is transferred to Amazon S3 is deleted from the on-premises location.The script uses the S3 PutObject operation.During a code review, the DevOps engineer notices that the script does not verify whether the data was successfully copied to Amazon S3.The DevOps engineer must update the script to ensure that data is not corrupted during transmission.The script must use MD5 checksums to verify data integrity before the on-premises data is deleted.Which solutions for the script will meet these requirements? (Choose two.)Read More →