DevOps Engineer Professional (Page 25)

A company uses AWS Key Management Service (AWS KMS) keys and manual key rotation to meet regulatory compliance requirements.The security team wants to be notified when any keys have not been rotated after 90 days.Which solution will accomplish this?Read More →

A company is performing vulnerability scanning for all Amazon EC2 instances across many accounts.The accounts are in an organization in AWS Organizations.Each account’s VPCs are attached to a shared transit gateway.The VPCs send traffic to the internet through a central egress VPC.The company has enabled Amazon Inspector in a delegated administrator account and has enabled scanning for all member accounts.A DevOps engineer discovers that some EC2 instances are listed in the “not scanning” tab in Amazon Inspector.Which combination of actions should the DevOps engineer take to resolve this issue? (Choose three.)Read More →

An online retail company based in the United States plans to expand its operations to Europe and Asia in the next six months.Its product currently runs on Amazon EC2 instances behind an Application Load Balancer.The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones.All data is stored in an Amazon Aurora database instance.When the product is deployed in multiple regions, the company wants a single product catalog across all regions, but for compliance purposes, its customer information and purchases must be kept in each region.How should the company meet these requirements with the LEAST amount of application changes?Read More →

A company has chosen AWS to host a new application.The company needs to implement a multi-account strategy.A DevOps engineer creates a new AWS account and an organization in AWS Organizations.The DevOps engineer also creates the OU structure for the organization and sets up a landing zone by using AWS Control Tower.The DevOps engineer must implement a solution that automatically deploys resources for new accounts that users create through AWS Control Tower Account Factory.When a user creates a new account, the solution must apply AWS CloudFormation templates and SCPs that are customized for the OU or the account to automatically deploy all the resources that are attached to the account.All the OUs are enrolled in AWS Control Tower.Which solution will meet these requirements in the MOST automated way?Read More →

A company runs an application with an Amazon EC2 and on-premises configuration.A DevOps engineer needs to standardize patching across both environments.Company policy dictates that patching only happens during non-business hours.Which combination of actions will meet these requirements? (Choose three.)Read More →

A company hosts its staging website using an Amazon EC2 instance backed with Amazon EBS storage.The company wants to recover quickly with minimal data losses in the event of network connectivity issues or power failures on the EC2 instance.Which solution will meet these requirements?Read More →

A DevOps team manages an API running on-premises that serves as a backend for an Amazon API Gateway endpoint.Customers have been complaining about high response latencies, which the development team has verified using the API Gateway latency metrics in Amazon CloudWatch.To identify the cause, the team needs to collect relevant data without introducing additional latency.Which actions should be taken to accomplish this? (Choose two.)Read More →

A company has an organization in AWS Organizations.The organization includes workload accounts that contain enterprise applications.The company centrally manages users from an operations account.No users can be created in the workload accounts.The company recently added an operations team and must provide the operations team members with administrator access to each workload account.Which combination of actions will provide this access? (Choose three.)Read More →

A DevOps engineer is building a continuous deployment pipeline for a serverless application that uses AWS Lambda functions.The company wants to reduce the customer impact of an unsuccessful deployment.The company also wants to monitor for issues.Which deploy stage configuration will meet these requirements?Read More →

A company recently created a new AWS Control Tower landing zone in a new organization in AWS Organizations.The landing zone must be able to demonstrate compliance with the Center for Internet Security (CIS) Benchmarks for AWS Foundations.The company’s security team wants to use AWS Security Hub to view compliance across all accounts.Only the security team can be allowed to view aggregated Security Hub findings.In addition, specific users must be able to view findings from their own accounts within the organization.All accounts must be enrolled in Security Hub after the accounts are created.Which combination of steps will meet these requirements in the MOST automated way? (Choose three.)Read More →