DevOps Engineer Professional (Page 34)

A company wants to migrate its content sharing web application hosted on Amazon EC2 to a serverless architecture.The company currently deploys changes to its application by creating a new Auto Scaling group of EC2 instances and a new Elastic Load Balancer, and then shifting the traffic away using an Amazon Route53 weighted routing policy.For its new serverless application, the company is planning to use Amazon API Gateway and AWS Lambda.The company will need to update its deployment processes to work with the new application.It will also need to retain the ability to test new features on a small number of users before rolling the features out to the entire user base.Which deployment strategy will meet these requirements?Read More →

A company’s application is currently deployed to a single AWS Region.Recently, the company opened a new office on a different continent.The users in the new office are experiencing high latency.The company’s application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) and uses AmazonDynamoDB as the database layer.The instances run in an EC2 Auto Scaling group across multiple Availability Zones.A DevOps Engineer is tasked with minimizing application response times and improving availability for users in both Regions.Which combination of actions should be taken to address the latency issues? (Choose three.)Read More →

A DevOps engineer must create a Linux AMI in an automated fashion.The newly created AMI identification must be stored in a location where other build pipelines can access the new identification programmatically.What is the MOST cost-effective way to do this?Read More →

A DevOps engineer is creating a CI/CD pipeline for an Amazon ECS service.The ECS container instances run behind an Application Load Balancer as the web tier of a three-tier application.An acceptance criterion for a successful deployment is the verification that the web tier can communicate with the database and middleware tiers of the application upon deployment.How can this be accomplished in an automated fashion?Read More →

A company is using AWS Database Migration Service (AWS DMS) to replicate data from a source database in a data center to a target Amazon Aurora PostgreSQL database.The company has created a DMS replication task with change data capture (CDC).The replication instance sometimes gets interrupted and affects critical functionality.The company must improve the replication instance’s resiliency and receive notifications about interruptions.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is using AWS Organizations to create separate AWS accounts for each of its departments.The company needs to automate the following tasks:✑ Update the Linux AMIs with new patches periodically and generate a golden image✑ Install a new version of Chef agents in the golden image, if available✑ Provide the newly generated AMIs to the department’s accountsWhich solution meets these requirements with the LEAST management overhead?Read More →

A company is implementing an Amazon Elastic Container Service (Amazon ECS) cluster to run its workload.The company architecture will run multiple ECS services on the cluster.The architecture includes an Application Load Balancer on the front end and uses multiple target groups to route traffic.A DevOps engineer must collect application and access logs.The DevOps engineer then needs to send the logs to an Amazon S3 bucket for near-real-time analysis.Which combination of steps must the DevOps engineer take to meet these requirements? (Choose three.)Read More →

A company has developed a static website hosted on an Amazon S3 bucket.The website is deployed using AWS CloudFormation.The Cloud Formation template defines an S3 bucket and a custom resource that copies content into the bucket from a source location.The company has decided that it needs to move the website to a new location, so the existing CloudFormation stack must be deleted and re-created.However, CloudFormation reports that the stack could not be deleted cleanly.What is the MOST likely cause and how can the DevOps engineer mitigate this problem for this and future versions of the website?Read More →

A company has multiple child accounts that are part of an organization in AWS Organizations.The security team needs to review every Amazon EC2 security group and their inbound and outbound rules.The security team wants to programmatically retrieve this information from the child accounts using an AWS Lambda function in the management account of the organization.Which combination of access changes will meet these requirements? (Choose three.)Read More →

A company has provided an externally hosted third-party vendor product with access to the company’s AWS account.The vendor product performs various AWS actions in the AWS account and requires various IAM permissions.The company granted the access by creating an IAM user, associating IAM policies and inserting the IAM user credentials into the vendor product.A security review reveals that the vendor’s access is overly permissive.The company wants to apply the principle of least privilege and wants to continue giving the vendor permissions to perform only the actions that the vendor has performed in the last 6 months.Which solution will meet these requirements with the LEAST effort?Read More →