DevOps Engineer Professional (Page 29)

A DevOps engineer is deploying an AWS Service Catalog portfolio using AWS CodePipeline.The pipeline should create products and templates based on a manifest file in either JSON or YAML, and should enforce security requirements on all AWS Service Catalog products managed through the pipeline.Which solution will meet the requirements in an automated fashion?Read More →

A company has multiple development groups working in a single shared AWS account.The senior manager of the groups wants to be alerted via a third-party API call when the creation of resources approaches the service limits for the account.Which solution will accomplish this with the LEAST amount of development effort?Read More →

A company wants to migrate a legacy application to AWS and develop a deployment pipeline that uses AWS services only.A DevOps engineer is migrating all of the application code from a Git repository to AWS CodeCommit while preserving the history of the repository.The DevOps engineer has set all the permissions within CodeCommit, installed the Git client and the AWS CLI on a local computer, and is ready to migrate the repository.Which actions will follow?Read More →

A company is building a web and mobile application that uses a serverless architecture powered by AWS Lambda and Amazon API Gateway.The company wants to fully automate the backend Lambda deployment based on code that is pushed to the appropriate environment branch in an AWS CodeCommit repository.The deployment must have the following:• Separate environment pipelines for testing and production• Automatic deployment that occurs for test environments onlyWhich steps should be taken to meet these requirements?Read More →

A company is deploying a container-based application using AWS CodeBuild.The Security team mandates that all containers are scanned for vulnerabilities prior to deployment using a password-protected endpoint.All sensitive information must be stored securely.Which solution should be used to meet these requirements?Read More →

A company uses AWS CodeCommit for source code control.Developers apply their changes to various feature branches and create pull requests to move those changes to the main branch when the changes are ready for production.The developers should not be able to push changes directly to the main branch.The company applied the AWSCodeCommitPowerUser managed policy to the developers’ IAM role, and now these developers can push changes to the main branch directly on every repository in the AWS account.What should the company do to restrict the developers’ ability to push changes to the main branch directly?Read More →

A company runs a three-tier web application in its production environment, which is built on a single AWS CloudFormation template made up of Amazon EC2 instances behind an ELB Application Load Balancer.The instances run in an EC2 Auto Scaling group across multiple Availability Zones.Data is stored in an Amazon RDS Multi-AZ DB instance with read replicas.Amazon Route 53 manages the application’s public DNS record.A DevOps engineer must create a workflow to mitigate a failed software deployment by rolling back changes in the production environment when a software cutover occurs for new application software.What steps should the engineer perform to meet these requirements with the LEAST amount of downtime?Read More →

A company requires that its internally facing web application be highly available.The architecture is made up of one Amazon EC2 web server instance and one NAT instance that provides outbound internet access for updates and accessing public data.Which combination of architecture adjustments should the company implement to achieve high availability? (Choose two.)Read More →

A company gives its employees limited rights to AWS.DevOps engineers have the ability to assume an administrator role.For tracking purposes, the security team wants to receive a near-real-time notification when the administrator role is assumed.How should this be accomplished?Read More →

A production account has a requirement that any Amazon EC2 instance that has been logged in to manually must be terminated within 24 hours.All applications in the production account are using Auto Scaling groups with the Amazon CloudWatch Logs agent configured.How can this process be automated?Read More →