DevOps Engineer Professional (Page 5)

A developer is creating a proof of concept for a new software as a service (SaaS) application.The application is in a shared development AWS account that is part of an organization in AWS Organizations.The developer needs to create service-linked IAM roles for the AWS services that are being considered for the proof of concept.The solution needs to give the developer the ability to create and configure the service-linked roles only.Which solution will meet these requirements?Read More →

A company uses an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to host its machine learning (ML) application.As the ML model and the container image size grow, the time that new pods take to start up has increased to several minutes.A DevOps engineer needs to reduce the startup time to seconds.The solution must also reduce the startup time to seconds when the pod runs on nodes that were recently added to the cluster.The DevOps engineer creates an Amazon EventBridge rule that invokes an automation in AWS Systems Manager.The automation prefetches the container images from an Amazon Elastic Container Registry (Amazon ECR) repository when new images are pushed to the repository.The DevOps engineer also configures tags to be applied to the cluster and the node groups.What should the DevOps engineer do next to meet the requirements?Read More →

An ecommerce company uses a large number of Amazon Elastic Block Store (Amazon EBS) backed Amazon EC2 instances.To decrease manual work across all the instances, a DevOps engineer is tasked with automating restart actions when EC2 instance retirement events are scheduled.How can this be accomplished?Read More →

A company has a new AWS account that teams will use to deploy various applications.The teams will create many Amazon S3 buckets for application-specific purposes and to store AWS CloudTrail logs.The company has enabled Amazon Macie for the account.A DevOps engineer needs to optimize the Macie costs for the account without compromising the account’s functionality.Which solutions will meet these requirements? (Choose two.)Read More →

A company uses an organization in AWS Organizations to manage its AWS accounts.The company recently acquired another company that has standalone AWS accounts.The acquiring company’s DevOps team needs to consolidate the administration of the AWS accounts for both companies and retain full administrative control of the accounts.The DevOps team also needs to collect and group findings across all the accounts to implement and maintain a security posture.Which combination of steps should the DevOps team take to meet these requirements? (Choose two.)Read More →

A company has deployed a critical application in two AWS Regions.The application uses an Application Load Balancer (ALB) in both Regions.The company has Amazon Route 53 alias DNS records for both ALBs.The company uses Amazon Route 53 Application Recovery Controller to ensure that the application can fail over between the two Regions.The Route 53 ARC configuration includes a routing control for both Regions.The company uses Route 53 ARC to perform quarterly disaster recovery (DR) tests.During the most recent DR test, a DevOps engineer accidentally turned off both routing controls.The company needs to ensure that at least one routing control is turned on at all times.Which solution will meet these requirements?Read More →

A DevOps engineer is planning to deploy a Ruby-based application to production.The application needs to interact with an Amazon RDS for MySQL database and should have automatic scaling and high availability.The stored data in the database is critical and should persist regardless of the state of the application stack.The DevOps engineer needs to set up an automated deployment strategy for the application with automatic rollbacks.The solution also must alert the application team when a deployment fails.Which combination of steps will meet these requirements? (Choose three.)Read More →

A company is using AWS CodePipeline to deploy an application.According to a new guideline, a member of the company’s security team must sign off on any application changes before the changes are deployed into production.The approval must be recorded and retained.Which combination of actions will meet these requirements? (Choose two.)Read More →

A company has multiple development groups working in a single shared AWS account.The senior manager of the groups wants to be alerted via a third-party API call when the creation of resources approaches the service limits for the account.Which solution will accomplish this with the LEAST amount of development effort?Read More →

A DevOps team uses AWS CodePipeline, AWS CodeBuild, and AWS CodeDeploy to deploy an application.The application is a REST API that uses AWS Lambda functions and Amazon API Gateway.Recent deployments have introduced errors that have affected many customers.The DevOps team needs a solution that reverts to the most recent stable version of the application when an error is detected.The solution must affect the fewest customers possible.Which solution will meet these requirements with the MOST operational efficiency?Read More →