DevOps Engineer Professional (Page 25)

A company is running a custom-built application that processes records.All the components run on Amazon EC2 instances that run in an Auto Scaling group.Each record’s processing is a multistep sequential action that is compute-intensive.Each step is always completed in 5 minutes or less.A limitation of the current system is that if any steps fail, the application has to reprocess the record from the beginning.The company wants to update the architecture so that the application must reprocess only the failed steps.What is the MOST operationally efficient solution that meets these requirements?Read More →

A company runs a web application that extends across multiple Availability Zones.The company uses an Application Load Balancer (ALB) for routing, AWS Fargate for the application, and Amazon Aurora for the application data.The company uses AWS CloudFormation templates to deploy the application.The company stores all Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository in the same AWS account and AWS Region.A DevOps engineer needs to establish a disaster recovery (DR) process in another Region.The solution must meet an RPO of 8 hours and an RTO of 2 hours.The company sometimes needs more than 2 hours to build the Docker images from the Dockerfile.Which solution will meet the RTO and RPO requirements MOST cost-effectively?Read More →

A DevOps engineer is architecting a continuous development strategy for a company’s software as a service (SaaS) web application running on AWS.For application and security reasons, users subscribing to this application are distributed across multiple Application Load Balancers (ALBs), each of which has a dedicated Auto Scaling group and fleet of Amazon EC2 instances.The application does not require a build stage, and when it is committed to AWS CodeCommit, the application must trigger a simultaneous deployment to all ALBs, Auto Scaling groups, and EC2 fleets.Which architecture will meet these requirements with the LEAST amount of configuration?Read More →

A company needs to implement failover for its application.The application includes an Amazon CloudFront distribution and a public Application Load Balancer (ALB) in an AWS Region.The company has configured the ALB as the default origin for the distribution.After some recent application outages, the company wants a zero-second RTO.The company deploys the application to a secondary Region in a warm standby configuration.A DevOps engineer needs to automate the failover of the application to the secondary Region so that HTTP GET requests meet the desired RTO.Which solution will meet these requirements?Read More →

An IT team has built an AWS CloudFormation template so others in the company can quickly and reliably deploy and terminate an application.The template creates an Amazon EC2 instance with a user data script to install the application and an Amazon S3 bucket that the application uses to serve static webpages while it is running.All resources should be removed when the CloudFormation stack is deleted.However, the team observes that CloudFormation reports an error during stack deletion, and the S3 bucket created by the stack is not deleted.How can the team resolve the error in the MOST efficient manner to ensure that all resources are deleted without errors?Read More →

A company manages AWS accounts for application teams in AWS Control Tower.Individual application teams are responsible for securing their respective AWS accounts.A DevOps engineer needs to enable Amazon GuardDuty for all AWS accounts in which the application teams have not already enabled GuardDuty.The DevOps engineer is using AWS CloudFormation StackSets from the AWS Control Tower management account.How should the DevOps engineer configure the CloudFormation template to prevent failure during the StackSets deployment?Read More →

A company has an application that runs on current-generation Amazon EC2 instances in a VPC.The EC2 instances run Amazon Linux and are launched in an Amazon EC2 Auto Scaling group.The application retrieves data from an Amazon S3 bucket, processes the data, and uploads the processed data to a different S3 bucket.Recently, the application’s performance worsened.A manual investigation identified that outbound network bandwidth utilization was too high for the type of EC2 instance.The company updated the EC2 instances to a larger EC2 instance size.The company’s DevOps team needs to receive notification from an Amazon CloudWatch alarm if the application attempts to use more outbound network bandwidth than is available to the EC2 instances.Which solution will meet these requirements?Read More →

A company has multiple development teams in different business units that work in a shared single AWS account.All Amazon EC2 resources that are created in the account must include tags that specify who created the resources.The tagging must occur within the first hour of resource creation.A DevOps engineer needs to add tags to the created resources that include the user ID that created the resource and the cost center ID.The DevOps engineer configures an AWS Lambda function with the cost center mappings to tag the resources.The DevOps engineer also sets up AWS CloudTrail in the AWS account.An Amazon S3 bucket stores the CloudTrail event logs.Which solution will meet the tagging requirements?Read More →

A highly regulated company has a policy that DevOps Engineers should not log in to their Amazon EC2 instances except in emergencies.If a DevOps Engineer does log in, the Security team must be notified within 15 minutes of the occurrence.Which solution will meet these requirements?Read More →

A company needs to ensure that flow logs remain configured for all existing and new VPCs in its AWS account.The company uses an AWS CloudFormation stack to manage its VPCs.The company needs a solution that will work for any VPCs that any IAM user creates.Which solution will meet these requirements?Read More →