DevOps Engineer Professional (Page 30)

A company has its AWS accounts in an organization in AWS Organizations. AWS Config is manually configured in each AWS account. The company needs to implement a solution to centrally configure AWS Config for all accounts in the organization The solution also must record resource changes to a central account.Which combination of actions should a DevOps engineer perform to meet these requirements? (Choose two.)Read More →

A company is hosting a web application in an AWS Region.For disaster recovery purposes, a second region is being used as a standby.Disaster recovery requirements state that session data must be replicated between regions in near-real time and 1% of requests should route to the secondary region to continuously verify system functionality.Additionally, if there is a disruption in service in the main region, traffic should be automatically routed to the secondary region, and the secondary region must be able to scale up to handle all traffic.How should a DevOps engineer meet these requirements?Read More →

A company uses an organization in AWS Organizations to manage several AWS accounts that the company’s developers use.The company requires all data to be encrypted in transit.Multiple Amazon S3 buckets that were created in developer accounts allow unencrypted connections.A DevOps engineer must enforce encryption of data in transit for all existing S3 buckets that are created in accounts in the organization.Which solution will meet these requirements?Read More →

A company has developed a static website hosted on an Amazon S3 bucket.The website is deployed using AWS CloudFormation.The CloudFormation template defines an S3 bucket and a custom resource that copies content into the bucket from a source location.The company has decided that it needs to move the website to a new location, so the existing CloudFormation stack must be deleted and re-created.However, CloudFormation reports that the stack could not be deleted cleanly.What is the MOST likely cause and how can the DevOps engineer mitigate this problem for this and future versions of the website?Read More →

A company wants to deploy a workload on several hundred Amazon EC2 instances.The company will provision the EC2 instances in an Auto Scaling group by using a launch template.The workload will pull files from an Amazon S3 bucket, process the data, and put the results into a different S3 bucket.The EC2 instances must have least-privilege permissions and must use temporary security credentials.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company plans to use Amazon CloudWatch to monitor its Amazon EC2 instances.The company needs to stop EC2 instances when the average of the NetworkPacketsIn metric is less than 5 for at least 3 hours in a 12-hour time window.The company must evaluate the metric every hour.The EC2 instances must continue to run if there is missing data for the NetworkPacketsIn metric during the evaluation period.A DevOps engineer creates a CloudWatch alarm for the NetworkPacketsIn metric.The DevOps engineer configures a threshold value of 5 and an evaluation period of 1 hour.Which set of additional actions should the DevOps engineer take to meet these requirements?Read More →

A company has an application and a CI/CD pipeline.The CI/CD pipeline consists of an AWS CodePipeline pipeline and an AWS CodeBuild project.The CodeBuild project runs tests against the application as part of the build process and outputs a test report.The company must keep the test reports for 90 days.Which solution will meet these requirements?Read More →

A DevOps engineer is building a solution that uses Amazon Simple Queue Service (Amazon SQS) standard queues.The solution also includes an AWS Lambda function and an Amazon DynamoDB table.The Lambda function pulls content from an SQS queue event source and writes the content to the DynamoDB table.The solution must maximize the scalability of Lambda and must prevent successfully processed SQS messages from being processed multiple times.Which solution will meet these requirements?Read More →

A company runs a workload on Amazon EC2 instances.The company needs a control that requires the use of Instance Metadata Service Version 2 (IMDSv2) on all EC2 instances in the AWS account.If an EC2 instance does not prevent the use of Instance Metadata Service Version 1 (IMDSv1), the EC2 instance must be terminated.Which solution will meet these requirements?Read More →

A company recently migrated its application to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that uses Amazon EC2 instances.The company configured the application to automatically scale based on CPU utilization.The application produces memory errors when it experiences heavy loads.The application also does not scale out enough to handle the increased load.The company needs to collect and analyze memory metrics for the application over time.Which combination of steps will meet these requirements? (Choose three.)Read More →