DevOps Engineer Professional (Page 35)

A company uses Amazon RDS for all databases in its AWS accounts.The company uses AWS Control Tower to build a landing zone that has an audit and logging account.All databases must be encrypted at rest for compliance reasons.The company’s security engineer needs to receive notification about any noncompliant databases that are in the company’s accounts.Which solution will meet these requirements with the MOST operational efficiency?Read More →

A company is launching an application.The application must use only approved AWS services.The account that runs the application was created less than 1 year ago and is assigned to an AWS Organizations OU.The company needs to create a new Organizations account structure.The account structure must have an appropriate SCP that supports the use of only services that are currently active in the AWS account.The company will use AWS Identity and Access Management (IAM) Access Analyzer in the solution.Which solution will meet these requirements?Read More →

A DevOps engineer is setting up an Amazon Elastic Container Service (Amazon ECS) blue/green deployment for an application by using AWS CodeDeploy and AWS CloudFormation.During the deployment window, the application must be highly available and CodeDeploy must shift 10% of traffic to a new version of the application every minute until all traffic is shifted.Which configuration should the DevOps engineer add in the CloudFormation template to meet these requirements?Read More →

A cloud team uses AWS Organizations and AWS IAM Identity Center (AWS Single Sign-On) to manage a company’s AWS accounts.The company recently established a research team.The research team requires the ability to fully manage the resources in its account.The research team must not be able to create IAM users.The cloud team creates a Research Administrator permission set in IAM Identity Center for the research team.The permission set has the AdministratorAccess AWS managed policy attached.The cloud team must ensure that no one on the research team can create IAM users.Which solution will meet these requirements?Read More →

A company requires that its internally facing web application be highly available.The architecture is made up of one Amazon EC2 web server instance and one NAT instance that provides outbound internet access for updates and accessing public data.Which combination of architecture adjustments should the company implement to achieve high availability? (Choose two.)Read More →

A company wants to use AWS CloudFormation for infrastructure deployment.The company has strict tagging and resource requirements and wants to limit the deployment to two Regions.Developers will need to deploy multiple versions of the same application.Which solution ensures resources are deployed in accordance with company policy?Read More →

A company has an application that runs on AWS Lambda and sends logs to Amazon CloudWatch Logs.An Amazon Kinesis data stream is subscribed to the log groups in CloudWatch Logs.A single consumer Lambda function processes the logs from the data stream and stores the logs in an Amazon S3 bucket.The company’s DevOps team has noticed high latency during the processing and ingestion of some logs.Which combination of steps will reduce the latency? (Choose three.)Read More →

A company runs an application on one Amazon EC2 instance.Application metadata is stored in Amazon S3 and must be retrieved if the instance is restarted.The instance must restart or relaunch automatically if the instance becomes unresponsive.Which solution will meet these requirements?Read More →

A company’s DevOps engineer uses AWS Systems Manager to perform maintenance tasks during maintenance windows.The company has a few Amazon EC2 instances that require a restart after notifications from AWS Health.The DevOps engineer needs to implement an automated solution to remediate these notifications.The DevOps engineer creates an Amazon EventBridge rule.How should the DevOps engineer configure the EventBridge rule to meet these requirements?Read More →

A DevOps engineer is creating an AWS CloudFormation template to deploy a web service.The web service will run on Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB).The DevOps engineer must ensure that the service can accept requests from clients that have IPv6 addresses.What should the DevOps engineer do with the CloudFormation template so that IPv6 clients can access the web service?Read More →