DevOps Engineer Professional (Page 8)

A DevOps Engineer administers an application that manages video files for a video production company.The application runs on Amazon EC2 instances behind an ELB Application Load Balancer.The instances run in an Auto Scaling group across multiple Availability Zones.Data is stored in an Amazon RDS PostgreSQLMulti-AZ DB instance, and the video files are stored in an Amazon S3 bucket.On a typical day, 50 GB of new video are added to the S3 bucket.The Engineer must implement a multi-region disaster recovery plan with the least data loss and the lowest recovery times.The current application infrastructure is already described using AWS CloudFormation.Which deployment option should the Engineer choose to meet the uptime and recovery objectives for the system?Read More →

A consulting company was hired to assess security vulnerabilities within a client company’s application and propose a plan to remediate all identified issues.The architecture is identified as follows: Amazon S3 storage for content, an Auto Scaling group of Amazon EC2 instances behind an Elastic Load Balancer with attached Amazon EBS storage, and an Amazon RDS MySQL database.There are also several AWS Lambda functions that communicate directly with the RDS database using connection string statements in the code.The consultants identified the top security threat as follows: the application is not meeting its requirement to have encryption at rest.What solution will address this issue with the LEAST operational overhead and will provide monitoring for potential future violations?Read More →

A DevOps engineer is using AWS CodeDeploy across a fleet of Amazon EC2 Instances in an EC2 Auto Scaling group.The associated CodeDeploy deployment group, which is integrated with EC2 Auto Scaling, is configured to perform in-place deployments with CodeDeplcyDefault.OneAtATime.During an ongoing new deployment, the engineer discovers that although the overall deployment finished successfully, two out of five instances have the previous application revision deployed.The other three instances have the newest application revision.What is likely causing this issue?Read More →

An application team has three environments for their application: development, pre-production, and production.The team recently adopted AWS CodePipeline.However, the team has had several deployments of misconfigured or nonfunctional development code into the production environment, resulting in user disruption and downtime.The DevOps engineer must review the pipeline and add steps to identify problems with the application before it is deployed.What should the engineer do to identify functional issues during the deployment process? (Choose two.)Read More →

A DevOps engineer is building a multistage pipeline with AWS CodePipeline to build, verify, stage, test, and deploy an application.A manual approval stage is required between the test stage and the deploy stage.The development team uses a custom chat tool with webhook support that requires near-real-time notifications.How should the DevOps engineer configure status updates for pipeline activity and approval requests to post to the chat tool?Read More →

A developer is maintaining a fleet of 50 Amazon EC2 Linux servers.The servers are part of an Amazon EC2 Auto Scaling group, and also use Elastic Load Balancing for load balancing.Occasionally, some application servers are being terminated after failing ELB HTTP health checks.The developer would like to perform a root cause analysis on the issue, but before being able to access application logs, the server is terminated.How can log collection be automated?Read More →

A DevOps engineer wants to implement an automated response that will occur if AWS Trusted Advisor detects an IAM access key in a public source code repository.The automated response must delete the exposed access key and must notify the security team.Which solution will meet these requirements?Read More →

A company updated the AWS CloudFormation template for a critical business application.The stack update process failed due to an error in the updated template, and AWS CloudFormation automatically began the stack rollback process.Later, a DevOps engineer discovered that the application was still unavailable and that the stack was in the UPDATE_ROLLBACK_FAILED state.Which combination of actions should the DevOps engineer perform so that the stack rollback can complete successfully? (Choose two.)Read More →

A company recently launched an application that is more popular than expected.The company wants to ensure the application can scale to meet increasing demands and provide reliability using multiple Availability Zones (AZs).The application runs on a fleet of Amazon EC2 instances behind an Application LoadBalancer (ALB).A DevOps engineer has created an Auto Scaling group across multiple AZs for the application.Instances launched in the newly added AZs are not receiving any traffic for the application.What is likely causing this issue?Read More →

A company requires its internal business teams to launch resources through pre-approved AWS CloudFormation templates only.The security team requires automated monitoring when resources drift from their expected state.Which strategy should be used to meet these requirements?Read More →