DevOps Engineer Professional (Page 30)

A company hosts a multi-tenant application on Amazon EC2 instances behind an Application Load Balancer.The instances run Windows Server and are in an Auto Scaling group.The application uses a license file on the instances that can be updated on the instances without customer disruption.When a new customer purchases access to the application, the company’s licensing team adds a new license key to a file in an Amazon S3 bucket.After the license file is updated, the operations team manually updates the EC2 instances.A DevOps engineer needs to automate the EC2 instance file update process.The automated process must decrease the time for EC2 instances to get the updated license file and must notify the operations team about success or failure of the update process.The DevOps engineer creates a resource group in AWS Resource Groups.The resource group uses a tag that the Auto Sealing group applies to the EC2 instances.What should the DevOps engineer do next to meet the requirements MOST cost-effectively?Read More →

A DevOps engineer is working on a data archival project that requires the migration of on-premises data to an Amazon S3 bucket.The DevOps engineer develops a script that incrementally archives on-premises data that is older than 1 month to Amazon S3.Data that is transferred to Amazon S3 is deleted from the on-premises location.The script uses the S3 PutObject operation.During a code review, the DevOps engineer notices that the script does not verify whether the data was successfully copied to Amazon S3.The DevOps engineer must update the script to ensure that data is not corrupted during transmission.The script must use MD5 checksums to verify data integrity before the on-premises data is deleted.Which solutions for the script will meet these requirements? (Choose two.)Read More →

A security review has identified that an AWS CodeBuild project is downloading a database population script from an Amazon S3 bucket using an unauthenticated request.The security team does not allow unauthenticated requests to S3 buckets for this project.How can this issue be corrected in the MOST secure manner?Read More →

A company is using AWS CodePipeline to automate its release pipeline.AWS CodeDeploy is being used in the pipeline to deploy an application to Amazon ECS using the blue/green deployment model.The company wants to implement scripts to test the green version of the application before shifting traffic.These scripts will complete in 5 minutes or less.If errors are discovered during these tests, the application must be rolled back.Which strategy will meet these requirements?Read More →

A development team wants to use AWS CloudFormation stacks to deploy an application.However, the developer IAM role does not have the required permissions to provision the resources that are specified in the AWS CloudFormation template.A DevOps engineer needs to implement a solution that allows the developers to deploy the stacks.The solution must follow the principle of least privilege.Which solution will meet these requirements?Read More →

A company wants to use AWS Systems Manager documents to bootstrap physical laptops for developers.The bootstrap code is stored in GitHub.A DevOps engineer has already created a Systems Manager activation, installed the Systems Manager agent with the registration code, and installed an activation ID on all the laptops.Which set of steps should be taken next?Read More →

A space exploration company receives telemetry data from multiple satellites.Small packets of data are received through Amazon API Gateway and are placed directly into an Amazon Simple Queue Service (Amazon SOS) standard queue.A custom application is subscribed to the queue and transforms the data into a standard format.Because of inconsistencies in the data that the satellites produce, the application is occasionally unable to transform the data.In these cases, the messages remain in the SQS queue.A DevOps engineer must develop a solution that retains the failed messages and makes them available to scientists for review and future processing.Which solution will meet these requirements?Read More →

A DevOps engineer is setting up a container-based architecture.The engineer has decided to use AWS CloudFormation to automatically provision an Amazon ECS cluster and an Amazon EC2 Auto Scaling group to launch the EC2 container instances.After successfully creating the CloudFormation stack, the engineer noticed that, even though the ECS cluster and the EC2 instances were created successfully and the stack finished the creation, the EC2 instances were associating with a different cluster.How should the DevOps engineer update the CloudFormation template to resolve this issue?Read More →

A company hosts an application in North America.The application uses an Amazon Aurora PostgreSQL DB cluster.A team of analysts in Europe generates real- time reports by using the DB cluster.The analysts must have access to the most up-to-date data.A DevOps engineer discovers that the generation of reports is much slower for users in Europe than for users in North America.What should the DevOps engineer do to resolve this issue?Read More →

A company has developed a Node.js web application which provides REST services to store and retrieve time series data.The web application is built by the development team on company laptops, tested locally, and manually deployed to a single on-premises server, which accesses a local MySQL database.The company is starting a trial in two weeks, during which the application will undergo frequent updates based on customer feedback.The following requirements must be met:• The team must be able to reliably build, test, and deploy new updates on a daily basis, without downtime or degraded performance.• The application must be able to scale to meet an unpredictable number of concurrent users during the trial.Which action will allow the team to quickly meet these objectives?Read More →