DevOps Engineer Professional (Page 26)

A DevOps engineer has automated a web service deployment by using AWS CodePipeline with the following steps:1.An AWS CodeBuild project compiles the deployment artifact and runs unit tests.2.An AWS CodeDeploy deployment group deploys the web service to Amazon EC2 instances in the staging environment.3.A CodeDeploy deployment group deploys the web service to EC2 instances in the production environment.The quality assurance (QA) team requests permission to inspect the build artifact before the deployment to the production environment occurs.The QA team wants to run an internal penetration testing tool to conduct manual tests.The tool will be invoked by a REST API call.Which combination of actions should the DevOps engineer take to fulfill this request? (Choose two.)Read More →

A DevOps engineer has created an AWS CloudFormation template that deploys an application on Amazon EC2 instances.The EC2 instances run Amazon Linux.The application is deployed to the EC2 instances by using shell scripts that contain user data.The EC2 instances have an IAM instance profile that has an IAM role with the AmazonSSMManagedinstanceCore managed policy attached.The DevOps engineer has modified the user data in the CloudFormation template to install a new version of the application.The engineer has also applied the stack update.However, the application was not updated on the running EC2 instances.The engineer needs to ensure that the changes to the application are installed on the running EC2 instances.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company uses AWS Organizations to manage multiple accounts.Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant.A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present.With solution will accomplish this?Read More →

A company is migrating from its on-premises data center to AWS.The company currently uses a custom on-premises Cl/CD pipeline solution to build and package software.The company wants its software packages and dependent public repositories to be available in AWS CodeArtifact to facilitate the creation of application-specific pipelines.Which combination of steps should the company take to update the CI/CD pipeline solution and to configure CodeArtifact with the LEAST operational overhead? (Choose two.)Read More →

A company develops and maintains a web application using Amazon EC2 instances and an Amazon RDS for SQL Server DB instance in a single AvailabilityZone.The resources need to run only when new deployments are being tested using AWS CodePipeline.Testing occurs one or more times a week and each test takes 2-3 hours to run.A DevOps engineer wants a solution that does not change the architecture components.Which solution will meet these requirements in the MOST cost-effective manner?Read More →

A DevOps engineer used an AWS CloudFormation custom resource to set up AD Connector.The AWS Lambda function ran and created AD Connector, but CloudFormation is not transitioning from CREATE_IN_PROGRESS to CREATE_COMPLETE.Which action should the engineer take to resolve this issue?Read More →

A company has an on-premises that is written in Go.A DevOps engineer must move the application to AWS.The company’s development team wants to enable blue/green deployments and perform A/B testing.Which solution will meet these requirements?Read More →

A company manages a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The EC2 instances run in an Auto Scaling group across multiple Availability Zones.The application uses an Amazon RDS for MySQL DB instance to store the data.The company has configured Amazon Route 53 with an alias record that points to the ALB.A new company guideline requires a geographically isolated disaster recovery (DR) site with an RTO of 4 hours and an RPO of 15 minutes.Which DR strategy will meet these requirements with the LEAST change to the application stack?Read More →

A DevOps engineer is designing a multi-Region disaster recovery strategy for an application.The application requires an RPO of 1 hour and requires an RTO of 4 hours.The application is deployed with an AWS CloudFormation template that creates an Application Load Balancer (ALB), Amazon EC2 instances in an Auto Scaling group and an Amazon RDS Multi-AZ DB instance with 20 GB of allocated storage.The AMI of the application instance does not contain data and has been copied to the destination Region.Which combination of actions will meet the recovery objectives at the LOWEST cost? (Choose two.)Read More →

A company uses Amazon S3 to store proprietary information.The development team creates buckets for new projects on a daily basis.The security team wants to ensure that all existing and future buckets have encryption, logging, and versioning enabled.Additionally, no buckets should ever be publicly read or write accessible.What should a DevOps engineer do to meet these requirements?Read More →