DevOps Engineer Professional (Page 29)

A development team uses AWS CodeCommit, AWS CodePipeline, and AWS CodeBuild to develop and deploy an application.Changes to the code are submitted by pull requests.The development team reviews and merges the pull requests, and then the pipeline builds and tests the application.Over time, the number of pull requests has increased.The pipeline is frequently blocked because of failing tests.To prevent this blockage, the development team wants to run the unit and integration tests on each pull request before it is merged.Which solution will meet these requirements?Read More →

A company hosts a security auditing application in an AWS account.The auditing application uses an IAM role to access other AWS accounts.All the accounts are in the same organization in AWS Organizations.A recent security audit revealed that users in the audited AWS accounts could modify or delete the auditing application’s IAM role.The company needs to prevent any modification to the auditing application’s IAM role by any entity other than a trusted administrator IAM role.Which solution will meet these requirements?Read More →

A company recently migrated its legacy application from on-premises to AWS.The application is hosted on Amazon EC2 instances behind an Application Load Balancer, which is behind Amazon API Gateway.The company wants to ensure users experience minimal disruptions during any deployment of a new version of the application.The company also wants to ensure it can quickly roll back updates if there is an issue.Which solution will meet these requirements with MINIMAL changes to the application?Read More →

A DevOps engineer is researching the least expensive way to implement an image batch processing cluster on AWS.The application cannot run in Docker containers and must run on Amazon EC2.The batch job stores checkpoint data on an NFS volume and can tolerate interruptions.Configuring the cluster software from a generic EC2 Linux image takes 30 minutes.What is the MOST cost-effective solution?Read More →

A large enterprise is deploying a web application on AWS.The application runs on Amazon EC2 instances behind an Application Load Balancer.The instances run in an Auto Scaling group across multiple Availability Zones.The application stores data in an Amazon RDS for Oracle DB instance and Amazon DynamoDB.There are separate environments for development, testing, and production.What is the MOST secure and flexible way to obtain password credentials during deployment?Read More →

A development team uses AWS CodeCommit for version control for applications.The development team uses AWS CodePipeline, AWS CodeBuild.and AWS CodeDeploy for CI/CD infrastructure.In CodeCommit, the development team recently merged pull requests that did not pass long-running tests in the code base.The development team needed to perform rollbacks to branches in the codebase, resulting in lost time and wasted effort.A DevOps engineer must automate testing of pull requests in CodeCommit to ensure that reviewers more easily see the results of automated tests as part of the pull request review.What should the DevOps engineer do to meet this requirement?Read More →

A company is developing an application that will generate log events.The log events consist of five distinct metrics every one tenth of a second and produce a large amount of data.The company needs to configure the application to write the logs to Amazon Timestream.The company will configure a daily query against the Timestream table.Which combination of steps will meet these requirements with the FASTEST query performance? (Choose three.)Read More →

An application running on a set of Amazon EC2 instances in an Auto Scaling group requires a configuration file to operate.The instances are created and maintained with AWS CloudFormation.A DevOps engineer wants the instances to have the latest configuration file when launched, and wants changes to the configuration file to be reflected on all the instances with a minimal delay when the CloudFormation template is updated.Company policy requires that application configuration files be maintained along with AWS infrastructure configuration files in source control.Which solution will accomplish this?Read More →

A company has an application that runs on Amazon EC2 instances that are in an Auto Scaling group.When the application starts up.the application needs to process data from an Amazon S3 bucket before the application can start to serve requests.The size of the data that is stored in the S3 bucket is growing.When the Auto Scaling group adds new instances, the application now takes several minutes to download and process the data before the application can serve requests.The company must reduce the time that elapses before new EC2 instances are ready to serve requests.Which solution is the MOST cost-effective way to reduce the application startup time?Read More →

A company has an application that runs on a fleet of Amazon EC2 instances.The application requires frequent restarts.The application logs contain error messages when a restart is required.The application logs are published to a log group in Amazon CloudWatch Logs.An Amazon CloudWatch alarm notifies an application engineer through an Amazon Simple Notification Service (Amazon SNS) topic when the logs contain a large number of restart-related error messages.The application engineer manually restarts the application on the instances after the application engineer receives a notification from the SNS topic.A DevOps engineer needs to implement a solution to automate the application restart on the instances without restarting the instances.Which solution will meet these requirements in the MOST operationally efficient manner?Read More →