DevOps Engineer Professional (Page 41)

A company has 100 GB of log data in an Amazon S3 bucket stored in .csv format.SQL developers want to query this data and generate graphs to visualize it.They also need an efficient, automated way to store metadata from the .csv file.Which combination of steps should be taken to meet these requirements with the LEAST amount of effort? (Choose three.)Read More →

A company manages a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The EC2 instances run in an AutoScaling group across multiple Availability Zones.The application uses an Amazon RDS for MySQL DB instance to store the data.The company has configuredAmazon Route 53 with an alias record that points to the ALB.Anew company guideline requires a geographically isolated disaster recovery (DR) site with an RTO of 4 hours and an RPO of 15 minutes.Which DR strategy will meet these requirements with the LEAST change to the application stack?Read More →

A company stores purchase history in an Amazon DynamoDB table.The company needs other workloads that run on AWS to react to data changes in the table.The company has enabled a DynamoDB stream on the table.Three existing AWS Lambda functions have an event source mapping configured for the DynamoDB stream.The company’s application developers plan to add other applications that will need to react to changes in the table.A DevOps engineer must design an architecture that will give the additional consumers this functionality.Which solution will meet these requirements in the MOST operationally efficient way?Read More →

A company is running an application on Amazon EC2 instances.A DevOps engineer needs to aggregate the application logs to a central system for the company’s application team to search.A critical error message periodically appears in the log files.The DevOps engineer needs to notify the application team by email when these error messages occur.Which solution will meet these requirements in the MOST operationally efficient manner?Read More →

A company has developed a serverless web application that is hosted on AWS.The application consists of Amazon S3.Amazon API Gateway, several AWS Lambda functions, and an Amazon RDS for MySQL database.The company is using AWS CodeCommit to store the source code.The source code is a combination of AWS Serverless Application Model (AWS SAM) templates and Python code.A security audit and penetration test reveal that user names and passwords for authentication to the database are hardcoded within CodeCommit repositories.A DevOps engineer must implement a solution to automatically detect and prevent hardcoded secrets.What is the MOST secure solution that meets these requirements?Read More →

During the next CodePipeline run, the pipeline exits with a FAILED state during the build stage.The DevOps engineer verifies that the correct Systems Manager parameter path is in place for the environment variable values that were changed.The DevOps engineer also validates that the environment variable type is Parameter.Why did the pipeline fail?Read More →

A company deploys updates to its Amazon API Gateway API several times a week by using an AWS CodePipeline pipeline.As part of the update process, the company exports the JavaScript SDK for the API from the API Gateway console and uploads the SDK to an Amazon S3 bucket.The company has configured an Amazon CloudFront distribution that uses the S3 bucket as an origin.Web clients then download the SDK by using the CloudFront distribution’s endpoint.A DevOps engineer needs to implement a solution to make the new SDK available automatically during new API deployments.Which solution will meet these requirements?Read More →

A company has a single AWS account where active development occurs.The company’s security team has implemented Amazon GuardDuty, AWS Config, and AWS CloudTrail within the account.The security team wants to receive notifications in near real time for only high-severity findings from GuardDuty.The security team uses an Amazon Simple Notification Service (Amazon SNS) topic for notifications from other security tools in the account.How can a DevOps engineer meet these requirements?Read More →

A company is using an Amazon API Gateway API and an AWS Lambda function to host a microservice.The microservice accesses pricing data in an Amazon DynamoDB table for the company’s online store.Interest in the online store has increased.As a result, latency issues and throttling on the DynamoDB table are occurring when a specific query runs.Some internal services access the DynamoDB table directly.No caching is enabled for the current solution.A DevOps engineer notices that repeat requests to the API are taking the same amount of time as unique requests.The DevOps engineer must reduce the latency for the repeat requests to the API and must reduce the throttling on the DynamoDB table.Which solution will meet these requirements?Read More →

A DevOps engineer is implementing governance controls for a company that requires its infrastructure to be housed within the United States.The engineer must restrict which AWS Regions can be used, and ensure an alert is sent as soon as possible if any activity outside the governance policy takes place.The controls should be automatically enabled on any new Region outside the United States (US).Which combination of actions will meet these requirements? (Choose two.)Read More →