DevOps Engineer Professional (Page 28)

A company is migrating Docker repositories to Amazon Elastic Container Registry (Amazon ECR) in an existing AWS account.A DevOps engineer needs to automate the management of images that are uploaded to the repositories.The solution must limit the number of image versions.As a first step, the DevOps engineer creates a private repository in Amazon ECR for each repository that the company will migrate.What should the DevOps engineer do next to meet the requirements in the MOST operationally efficient manner?Read More →

A company has a mission-critical application on AWS that uses automatic scaling.The company wants the deployment lifecycle to meet the following parameters:• The application must be deployed one instance at a time to ensure the remaining fleet continues to serve traffic.• The application is CPU intensive and must be closely monitored.• The deployment must automatically roll back if the CPU utilization of the deployment instance exceeds 85%.Which solution will meet these requirements?Read More →

A video-sharing company stores its videos in Amazon S3.The company has observed a sudden increase in video access requests, but the company does not know which videos are most popular.The company needs to identify the general access pattern for the video files.This pattern includes the number of users who access a certain file on a given day, as well as the number of pull requests for certain files.How can the company meet these requirements with the LEAST amount of effort?Read More →

A company builds an application that uses an Application Load Balancer in front of Amazon EC2 instances that are in an Auto Scaling group.The application is stateless.The Auto Scaling group uses a custom AMI that is fully prebuilt.The EC2 instances do not have a custom bootstrapping process.The AMI that the Auto Scaling group uses was recently deleted.The Auto Scaling group’s scaling activities show failures because the AMI ID does not exist.Which combination of steps should a DevOps engineer take to meet these requirements? (Choose three.)Read More →

A DevOps engineer needs to grant several external contractors access to a legacy application that runs on an Amazon Linux Amazon EC2 instance.The application server is available only in a private subnet.The contractors are not authorized for VPN access.What should the DevOps engineer do to grant the contactors access to the application server?Read More →

A company deploys a web application on Amazon EC2 instances that are behind an Application Load Balancer (ALB).The company stores the application code in an AWS CodeCommit repository.When code is merged to the main branch, an AWS Lambda function invokes an AWS CodeBuild project.The CodeBuild project packages the code, stores the packaged code in AWS CodeArtifact, and invokes AWS Systems Manager Run Command to deploy the packaged code to the EC2 instances.Previous deployments have resulted in defects, EC2 instances that are not running the latest version of the packaged code, and inconsistencies between instances.Which combination of actions should a DevOps engineer take to implement a more reliable deployment solution? (Choose two.)Read More →

An application has microservices spread across different AWS accounts and is integrated with an on-premises legacy system for some of its functionality.Because of the segmented architecture and missing logs, every time the application experiences issues, it is taking too long to gather the logs to identify the issues.A DevOps Engineer must fix the log aggregation process and provide a way to centrally analyze the logs.Which is the MOST efficient and cost-effective solution?Read More →

A company has configured an Amazon S3 event source on an AWS Lambda function.The company needs the Lambda function to run when a new object is created or an existing object is modified in a particular S3 bucket.The Lambda function will use the S3 bucket name and the S3 object key of the incoming event to read the contents of the created or modified S3 object.The Lambda function will parse the contents and save the parsed contents to an Amazon DynamoDB table.The Lambda function’s execution role has permissions to read from the S3 bucket and to write to the DynamoDB table.During testing, a DevOps engineer discovers that the Lambda function does not run when objects are added to the S3 bucket or when existing objects are modified.Which solution will resolve this problem?Read More →

A company’s DevOps engineer is working in a multi-account environment.The company uses AWS Transit Gateway to route all outbound traffic through a network operations account.In the network operations account, all account traffic passes through a firewall appliance for inspection before the traffic goes to an internet gateway.The firewall appliance sends logs to Amazon CloudWatch Logs and includes event severities of CRITICAL, HIGH, MEDIUM, LOW, and INFO.The security team wants to receive an alert if any CRITICAL events occur.What should the DevOps engineer do to meet these requirements?Read More →

A DevOps engineer is setting up a container-based architecture.The engineer has decided to use AWS CloudFormation to automatically provision an Amazon ECS cluster and an Amazon EC2 Auto Scaling group to launch the EC2 container instances.After successfully creating the CloudFormation stack, the engineer noticed that, even though the ECS cluster and the EC2 instances were created successfully and the stack finished the creation, the EC2 instances were associating with a different cluster.How should the DevOps engineer update the CloudFormation template to resolve this issue?Read More →