DevOps Engineer Professional (Page 35)

A company grants external users access to its AWS account by creating an IAM user for each external user.A DevOps engineer must implement a solution to revoke access from IAM users that have not accessed the account in 90 days.Which solution will meet these requirements?Read More →

A company has a single developer writing code for an automated deployment pipeline.The developer is storing source code in an Amazon S3 bucket for each project.The company wants to add more developers to the team but is concerned about code conflicts and lost work.The company also wants to build a test environment to deploy newer versions of code for testing and allow developers to automatically deploy to both environments when code is changed in the repository.What is the MOST efficient way to meet these requirements?Read More →

A software-as-a-service (SaaS) company is using AWS Elastic Beanstalk to deploy its primary .NET application.The Elastic Beanstalk environment is configured to use Amazon EC2 Auto Scaling and Elastic Load Balancing (ELB) for its underlying Amazon EC2 instances.The company is experiencing incidents in which EC2 instances are marked unhealthy and are terminated by Auto Scaling groups after a failed ELB health check.The company’s DevOps team must build a solution that will notify the operations team whenever an Auto Scaling group terminates EC2 instances for any existing client environments.What should the DevOps team do to meet this requirement?Read More →

A DevOps engineer is tasked with creating a more stable deployment solution for a web application in AWS.Previous deployments have resulted in user-facing bugs, premature user traffic, and inconsistencies between web servers running behind an Application Load Balancer.The current strategy uses AWS CodeCommit to store the code for the application.When developers push to the main branch of the repository, CodeCommit triggers an AWS Lambda deploy function, which invokes an AWS Systems Manager run command to build and deploy the new code to all Amazon EC2 instances.Which combination of actions should be taken to implement a more stable deployment solution? (Choose two.)Read More →

A company requires its internal business teams to launch resources through pre-approved AWS CloudFormation templates only.The security team requires automated monitoring when resources drift from their expected state.Which strategy should be used to meet these requirements?Read More →

A company recently launched an application that is more popular than expected.The company wants to ensure the application can scale to meet increasing demands and provide reliability using multiple Availability Zones (AZs).The application runs on a fleet of Amazon EC2 instances behind an Application LoadBalancer (ALB).A DevOps engineer has created an Auto Scaling group across multiple AZs for the application.Instances launched in the newly added AZs are not receiving any traffic for the application.What is likely causing this issue?Read More →

A company updated the AWS CloudFormation template for a critical business application.The stack update process failed due to an error in the updated template, and AWS CloudFormation automatically began the stack rollback process.Later, a DevOps engineer discovered that the application was still unavailable and that the stack was in the UPDATE_ROLLBACK_FAILED state.Which combination of actions should the DevOps engineer perform so that the stack rollback can complete successfully? (Choose two.)Read More →

A DevOps engineer wants to implement an automated response that will occur if AWS Trusted Advisor detects an IAM access key in a public source code repository.The automated response must delete the exposed access key and must notify the security team.Which solution will meet these requirements?Read More →

A developer is maintaining a fleet of 50 Amazon EC2 Linux servers.The servers are part of an Amazon EC2 Auto Scaling group, and also use Elastic Load Balancing for load balancing.Occasionally, some application servers are being terminated after failing ELB HTTP health checks.The developer would like to perform a root cause analysis on the issue, but before being able to access application logs, the server is terminated.How can log collection be automated?Read More →

A DevOps engineer is building a multistage pipeline with AWS CodePipeline to build, verify, stage, test, and deploy an application.A manual approval stage is required between the test stage and the deploy stage.The development team uses a custom chat tool with webhook support that requires near-real-time notifications.How should the DevOps engineer configure status updates for pipeline activity and approval requests to post to the chat tool?Read More →