Verified AWS-DevOps-Engineer-Professional dumps Q&As 100% Pass in First Attempt Guaranteed Updated Dump from Exam4PDF
Pass AWS Certified DevOps Engineer AWS-DevOps-Engineer-Professional Exam With 275 Questions
Talking about the exam content, it covers six broad domains, which include the following:
- Logging and Monitoring
You will face with about 15% of the questions from this domain during the exam. It evaluates your skills in applying various concepts that are required to automate event management and monitoring of an environment as well as monitor, log, and audit applications, infrastructures, and operating systems. Knowing how to set up the analysis of metrics and logs as well as their storage and aggregation is also important for the potential candidates. They have to also understand the implementation of tagging and other metadata strategies.
- Disaster Recovery, Fault Tolerance, and High Availability
The last section covers 16% of the exam questions, and you will need to possess certain skills. They include your knowledge of the right services based on business needs such as cost or RTO/RPO, your ability to design disaster recovery strategies and automate them, and skills in evaluating the deployment for points of failure. It is also important for you to know how to implement high fault tolerance, scalability, and availability. The usage of the right multi-region versus multi-AZ architectures is also vital.
- Response to Incidents and Events
This is the third largest area of the whole list of topics that covers 18% of the exam content. It is all about troubleshooting of the possible issues and determination of how to restore operations. It also includes the evaluation of your skills in applying different concepts that are required to implement automated healing or set up actions that are event-driven and automated. The knowledge of how to perform an automation process for alerting and event management is also essential.
- Policies and Automation of Standards
This subject will cover only 10% of the exam content. This is the smallest amount of questions that you will encounter during the test. The subtopics of this domain include your understanding of cost optimization through automation, the ways to apply the concepts that are required to implement governance strategies, and your knowledge of which concepts are needed for the enforcement of the standards for security, testing, metrics, monitoring, and logging.
- Infrastructure as Code and Configuration Management
This objective covers about 19% of the whole content. For this section, it is required that you understand all the needed concepts related to the deployment services that are based on deployment needs, infrastructure and app deployment models based on business needs, and the implementation of the lifecycle hooks on the deployment. This area also includes your knowledge of how to apply security concepts in the automation of resource provisioning and your ability to work with the concepts that are needed to manage systems with the use of AWS configuration management tools as well as services.
- SDLC Automation
This section will offer you about 22% of the questions from the whole exam content. This is the biggest area of all that are available. For this topic, you need to have some experience in applying the concepts that are required to automate a CI/CD pipeline, automate and integrate testing, and build and manage artifacts securely. You should also know about the source control strategies and be skillful enough to be able to implement them. It is also will be vital for your role to know what to do with the delivery or deployment strategies, such as Canary, Red/black, Blue/green, A/B, etc.
Prerequisites
Before pursuing the Amazon AWS Certified DevOps Engineer – Professional certification, it is important to make sure that you are the right person for this path. All the Amazon certificates are designed for the specific individuals, so you must fall into this category of people. Otherwise, you will have a tough time passing the associated exam.
The potential candidates for this professional-level certificate are those individuals who perform the DevOps Engineer role. They should have at least 2 years of working experience in managing, operating, and provisioning the AWS environments. Besides that, the test takers should have expertise in coding at least one high-level programming language and possess a good understanding of the latest methodologies, processes, operations, and development.
NEW QUESTION 62
Which of the following are ways to secure data at rest and in transit in AWS. Choose 3 answers from the options given below
- A. Useserver side encryption for S3
- B. UseSSL/HTTPS when using the Elastic Load Balancer
- C. UselOPS volumes when working with EBS volumes on EC2 Instances
- D. Encryptall EBS volumes attached to EC2 Instances
Answer: A,B,D
Explanation:
Explanation
The AWS documentation mentions the following
Amazon CBS encryption offers you a simple encryption solution for your EBS volumes without the need for you to build, maintain, and secure your own key management infrastructure. When you create an encrypted CBS volume and attach it to a supported instance type, the following types of data are encrypted:
Data at rest inside the volume
All data moving between the volume and the instance
All snapshots created from the volume Data protection refers to protecting data while in-transit (as it travels to and from Amazon S3) and at rest (while it is stored on disks in Amazon S3 data centers). You can protect data in transit by using SSL or by using client-side encryption. You have the following options of protecting data at rest in Amazon S3.
Use Server-Side encryption - You request Amazon S3 to encrypt your object before saving it on disks in its data centers and decrypt it when you download the objects.
Use Client-Side Encryption - You can encrypt data client-side and upload the encrypted data to Amazon S3. In this case, you manage the encryption process, the encryption keys, and related tools.
You can create a load balancer that uses the SSL/TLS protocol for encrypted connections (also known as SSL offload). This feature enables traffic encryption between your load balancer and the clients that initiate HTTPS sessions, and for connections between your load balancer and your L~C2 instances. For more information on securing data at rest, please refer to the below link:
* https://dO3wsstatic.com/whitepapers/aws-securing-data-at-rest-with-encryption.pdf
NEW QUESTION 63
A Developer is maintaining a fleet of 50 Amazon EC2 Linux servers. The servers are part of an Amazon EC2 Auto Scaling group, and also use Elastic Load Balancing for load balancing. Occasionally, some application servers are being terminated after failing ELB HTTP health checks. The Developer would like to perform a root cause analysis on the issue, but before being able to access application logs, the server is terminated. How can log collection be automated?
- A. Use Auto Scaling lifecycle hooks to put instances in a Terminating:Wait state. Create an Amazon CloudWatch Events rule for EC2 Instance- and trigger an AWS Lambda function that executes a SSM Run Command script to collect logs, push them to Amazon S3, terminate Lifecycle Action and complete the lifecycle action once logs are collected.
- B. Use Auto Scaling lifecycle hooks to put instances in a Terminating:Wait state. Create a Config rule for EC2 Instance-terminate Lifecycle and trigger a step function that executes a script to collect logs, push them to Amazon S3, and complete the lifecycle action once logs are collected. Action
- C. Use Auto Scaling lifecycle hooks to put instances in a Pending:Wait state. Create an Amazon CloudWatch Alarm for EC2 Instance Terminate and trigger an AWS Lambda function that executes an SSM Run Command script to collect logs, push them to Amazon S3, and complete the Successful lifecycle action once logs are collected.
- D. Use Auto Scaling lifecycle hooks to put instances in a Terminating:Wait state. Create an Amazon CloudWatch subscription filter for EC2 Instance and trigger a CloudWatch agent that executes a script to called logs, push them to Amazon S3, and complete the lifecycle action Terminate Successful once logs are collected.
Answer: A
Explanation:
https://docs.aws.amazon.com/autoscaling/ec2/userguide/lifecycle-hooks.html
NEW QUESTION 64
You are hired as the new head of operations for a SaaS company. Your CTO has asked you to make debugging any part of your entire operation simpler and as fast as possible. She complains that she has no idea what is going on in the complex, service-oriented architecture, because the developers just log to disk, and it's very hard to find errors in logs on so many services. How can you best meet this requirement and satisfy your CTO?
- A. Begin using CloudWatch Logs on every service. Stream all Log Groups into an AWS Elasticsearch Service Domain running Kibana 4 and perform log analysis on a search cluster.
- B. Begin using CloudWatch Logs on every service. Stream all Log Groups into S3 objects. Use AWS EMR cluster jobs to perform ad-hoc MapReduce analysis and write new queries when needed.
- C. Copy all log files into AWS S3 using a cron job on each instance. Use an S3 Notification Configuration on the <code>PutBucket</code> event and publish events to AWS Lambda. Use the Lambda to analyze logs as soon as they come in and flag issues.
- D. Copy all log files into AWS S3 using a cron job on each instance. Use an S3 Notification Configuration on the <code>PutBucket</code> event and publish events to AWS Kinesis. Use Apache Spark on AWS EMR to perform at-scale stream processing queries on the log chunks and flag issues.
Answer: A
Explanation:
The Elasticsearch and Kibana 4 combination is called the ELK Stack, and is designed specifically for real-time, ad-hoc log analysis and aggregation. All other answers introduce extra delay or require pre-defined queries.
Amazon Elasticsearch Service is a managed service that makes it easy to deploy, operate, and scale Elasticsearch in the AWS Cloud. Elasticsearch is a popular open-source search and analytics engine for use cases such as log analytics, real-time application monitoring, and click stream analytics.
https://aws.amazon.com/elasticsearch-service/
NEW QUESTION 65
You have an Autoscaling Group configured to launch EC2 Instances for your application. But you notice that
the Autoscaling Group is not launching instances in the right proportion. In fact instances are being launched
too fast. What can you do to mitigate this issue? Choose 2 answers from the options given below
- A. Adjust the Memory threshold set forthe Autoscaling scale-in and scale-out process.
- B. Set a custom metric which monitors a key application functionality forthe scale-in and scale-out process.
- C. Adjust the cooldown period set for the Autoscaling Group
- D. Adjust the CPU threshold set for the Autoscaling scale-in and scale-out process.
Answer: B,C
Explanation:
Explanation
The Auto Scaling cooldown period is a configurable setting for your Auto Scaling group that helps to ensure
that Auto Scaling doesn't launch or terminate additional instances before the previous scaling activity takes
effect.
For more information on the cool down period, please refer to the below link:
* http://docs^ws.a
mazon.com/autoscaling/latest/userguide/Cooldown.html
Also it is better to monitor the application based on a key feature and then trigger the scale-in and scale-out
feature accordingly. In the question, there is no mention of CPU or memory causing the issue.
NEW QUESTION 66
You have a high security requirement for your AWS accounts. What is the most rapid and sophisticated setup you can use to react to AWS API calls to your account?
- A. CloudWatch Events Rules which trigger based on all AWS API calls, submitting all events to an AWS Kinesis Stream for arbitrary downstream analysis.
- B. Use a CloudWatch Rule ScheduleExpression to periodically analyze IAM credential logs. Push the deltas for events into an ELK stack and perform ad-hoc analysis there.
- C. Subscription to AWS Config via an SNS Topic. Use a Lambda Function to perform in-flight analysis and reactivity to changes as they occur.
- D. Global AWS CloudTrail setup delivering to S3 with an SNS subscription to the deliver notifications, pushing into a Lambda, which inserts records into an ELK stack for analysis.
Answer: A
Explanation:
CloudWatch Events allow subscription to AWS API calls, and direction of these events into Kinesis Streams. This allows a unified, near real-time stream for all API calls, which can be analyzed with any tool(s) of your choosing downstream.
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/EventTypes.html#api_e vent_ty pe
NEW QUESTION 67
A company is using AWS CodeCommit as its source code repository. After an internal audit, the compliance team mandates that any code change that go into the master branch must be committed by senior developers.
Which solution will meet these requirements?
- A. Create a repository in CodeCommit with a working and master branch. Create separate IAM groups for senior developers and developers. Use an IAM policy to assign each IAM group their corresponding branches. Once the code is merged to the working branch, senior developers can pull the changes from the working branch to the master branch.
- B. Create two repositories in CodeCommit: one for working and another for the master. Create separate IAM groups for senior developers and developers. Assign the resource-level permissions on the repositories tied to the IAM groups. After the code changes are reviewed, sync the approved files to the master code commit repository.
- C. Create a repository in CodeCommit. Create separate IAM groups for senior developers and developers.
Use AWS Lambda triggers on the master branch and get the user name of the developer at the event object of the Lambda function. Validate the user name with the IAM group to approve or deny the commit. - D. Create a repository in CodeCommit. Create separate IAM groups for senior developers and developers.
Assign code commit permissions for both groups, with code merge permissions for the senior developers group. Create a trigger to notify senior developers with a URL link to approve or deny commit requests delivered through Amazon SNS. Once a senior developer approves the code, the code gets merged to the master branch.
Answer: A
NEW QUESTION 68
You are doing a load testing exercise on your application hosted on AWS. While testing your Amazon RDS
MySQL DB instance, you notice that when you hit 100% CPU utilization on it, your application becomes non-
responsive. Your application is read-heavy. What are methods to scale your data tier to meet the application's
needs? Choose three answers from the options given below
- A. Use ElastiCache in front of your Amazon RDS DB to cache common queries.
- B. Enable Multi-AZ for your Amazon RDS DB instance.
- C. Add Amazon RDS DB read replicas, and have your application direct read queries to them.
- D. Shard your data set among multiple Amazon RDS DB instances.
- E. Use an Amazon SQS queue to throttle data going to the Amazon RDS DB instance.
- F. Add your Amazon RDS DB instance to an Auto Scalinggroup and configure your Cloud Watch metric
based on CPU utilization.
Answer: A,C,D
Explanation:
Explanation
Amazon RDS Read Replicas provide enhanced performance and durability for database (DB) instances. This
replication feature makes it easy to elastically scale out
beyond the capacity constraints of a single DB Instance for read-heavy database workloads. You can create
one or more replicas of a given source DB Instance and
serve high-volume application read traffic from multiple copies of your data, thereby increasing aggregate read
throughput
For more information on Read Replica's please refer to the below link:
https://aws.amazon.com/rds/details/read-replicas/
Sharding is a common concept to split data across multiple tables in a database For more information on
sharding please refer to the below link:
* https://forums.awsa mazon.com/thread jspa?messagelD=203052
Amazon OastiCache is a web service that makes it easy to deploy, operate, and scale an in-memory data store
or cache in the cloud. The service improves the performance of web applications by allowing you to retrieve
information from fast, managed, in-memory data stores, instead of relying entirely on slower disk-based
databases
Amazon OastiCache is an in-memory key/value store that sits between ycbetappiicipiJGra arcdalie data store
(database) that it accesses. Whenever your application requests data, it first makes the request to the
DastiCache cache. If the data exists in the cache and is current, OastiCache returns the data to your
application. If the data does not exist in the cache, or the data in the cache has expired, your application
requests the data from your data store which returns the data to your application. Your application then writes
the data received from the store to the cache so it can be more quickly retrieved next time it is requested. For
more information on Elastic Cache please refer to the below link:
* https://aws.amazon.com/elasticache/
Option B is not an ideal way to scale a database
Option C is not ideal to store the data which would go into a database because of the message size
Option F is invalid because Multi-AZ feature is only a failover option
NEW QUESTION 69
You are a Devops Enginneer in your company. You have been instructed to ensure there is an automated
backup solution in place for EBS Volumes. These snapshots need to be retained only for a period of 20 days.
How can you achieve this requirement in an efficient manner?
- A. Use Amazon Data Lifecycle Manager to automate the process.
- B. UseLifecycle policies to push the EBS Volumes to Amazon Glacier. Then use furtherlifecycle policies
to delete the snapshots after 20 days. - C. UseLifecycle policies to push the EBS Volumes to Amazon S3. Then use further lifecyclepolicies to
delete the snapshots after 20 days. - D. Usethe aws ec2 create-volume API to create a snapshot of the EBS Volume. The usethe
describe-volume to see those snapshots which are greater than 20 days andthen delete them accordingly
using the delete-volume API call.
Answer: A
Explanation:
Explanation
Use Amazon Data Lifecycle Manager (Amazon DLM) to automate the creation, retention, and deletion of
snapshots taken to back up your Amazon EBS volumes.
Automating snapshot management helps you to:
*
Protect valuable data by enforcing a regular backup schedule.
Retain backups as required by auditors or internal compliance.
*
Reduce storage costs by deleting outdated backups.
For more Information, Please check the below AWS Docs:
* https://docs.aws.amazon.com/AWSCC2/latest/UserGuide/snapshot-lifecycle.html
NEW QUESTION 70
A DevOps Engineer needs to design and implement a backup mechanism for Amazon EFS. The Engineer is given the following requirements:
- The backup should run on schedule.
- The backup should be stopped if the backup window expires.
- The backup should be stopped if the backup completes before the
backup window.
- The backup logs should be retained for further analysis.
- The design should support highly available and fault-tolerant
paradigms.
- Administrators should be notified with backup metadata.
Which design will meet these requirements?
- A. Use AWS Lambda with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in an Auto Scaling group. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading backup logs to Amazon S3.
Use Amazon SNS to notify administrators with backup activity metadata. - B. Use AWS Data Pipeline with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in a single Availability Zone. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading the backup logs to Amazon RDS.
Use Amazon SNS to notify administrators with backup activity metadata. - C. Use Amazon SWF with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in an Auto Scaling group. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading backup logs to Amazon Redshift. Use CloudWatch Alarms to notify administrators with backup activity metadata.
- D. Use AWS CodePipeline with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in a single Availability Zone. Use Auto Scaling lifecycle hooks and the SSM Run Command on Amazon EC2 for uploading backup logs to Amazon S3.
Use Amazon SES to notify admins with backup activity metadata.
Answer: A
Explanation:
https://aws.amazon.com/solutions/implementations/efs-to-efs-backup-solution/
NEW QUESTION 71
A company has developed a Node.js web application which provides REST services to store and retrieve time series data. The web application is built by the Development team on company laptops, tested locally, and manually deployed to a single on-premises server, which accesses a local MySQL database. The company is starting a trial in two weeks, during which the application will undergo frequent updates based on customer feedback. The following requirements must be met:
*The team must be able to reliably build, test, and deploy new updates on a daily basis, without downtime or degraded performance.
*The application must be able to scale to meet an unpredictable number of concurrent users during the trial.
Which action will allow the team to quickly meet these objectives?
- A. Configure AWS Elastic Beanstalk to automatically build the application using AWS CodeBuild and to deploy it to a test environment that is configured to support auto scaling. Create a second Elastic Beanstalk environment for production. Use Amazon RDS to store data. When new versions of the applications have passed all tests, use Elastic Beanstalk "~swap cname' to promote the test environment to production.
- B. Develop an AWS CloudFormation template to create an Application Load Balancer and two Amazon EC2 instances with Amazon EBS (SSD) volumes in an Auto Scaling group with rolling updates enabled. Use AWS CodeBuild to build and test the Node.js application and store it in an Amazon S3 bucket. Use user- data scripts to install the application and the MySQL database on each EC2 instance.
Update the stack to deploy new application versions. - C. Create two Amazon Lightsail virtual private servers for Node.js; one for test and one for production.
Build the Node.js application using existing process and upload it to the new Lightsail test server using the AWS CLI. Test the application, and if it passes all tests, upload it to the production server. During the trial, monitor the production server usage, and if needed, increase performance by upgrading the instance type. - D. Modify the application to use Amazon DynamoDB instead of a local MySQL database. Use AWS OpsWorks to create a stack for the application with a DynamoDB layer, an Application Load Balancer layer, and an Amazon EC2 instance layer. Use a Chef recipe to build the application and a Chef recipe to deploy the application to the EC2 instance layer. Use custom health checks to run unit tests on each instance with rollback on failure.
Answer: A
NEW QUESTION 72
You are running a Docker daemon on a Linux host and it becomes unresponsive. Which signal, when sent to a Docker process with the kill command, forces the full stack trace to be logged for debugging purposes?
- A. -TRACE
- B. -IOTRACE
- C. -KILLTRACE
- D. -SIGUSER1
Answer: D
Explanation:
If the daemon is unresponsive, you can force a full stack trace to be logged by sending a SIGUSR1 signal to the daemon.
Linux:
$ sudo kill -SIGUSR1 $(pidof dockerd)
Windows Server:
Download docker-signal.
Run the executable with the flag --pid=<PID of daemon>.
Reference:
https://docs.docker.com/engine/admin/#force-a-stack-trace-to-be-logged
NEW QUESTION 73
You are in charge of designing Cloudformation templates for your company. One of the key requirements is to ensure that if a Cloudformation stack is deleted, a snapshot of the relational database is created which is part of the stack. How can you achieve this in the best possible way?
- A. Create a new cloudformation template to create a snapshot of the relational database.
- B. Use the Update policy of the cloudformation template to ensure a snapshot is created of the relational database.
- C. Use the Deletion policy of the cloudformation template to ensure a snapshot is created of the relational database.
- D. Create a snapshot of the relational database beforehand so that when the cloudformation stack is deleted, the snapshot of the database will be present.
Answer: C
Explanation:
Explanation
The AWS documentation mentions the following
With the Deletion Policy attribute you can preserve or (in some cases) backup a resource when its stack is deleted. You specify a DeletionPolicy attribute for each resource that you want to control. If a resource has no DeletionPolicy attribute, AWS Cloud Formation deletes the resource by default. Note that this capability also applies to update operations that lead to resources being removed.
For more information on the Deletion policy, please visit the below URL:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html
NEW QUESTION 74
Which is the proper syntax for referencing a variable's value in an Ansible task?
- A. { variable_name }
- B. "{{ variable_name }}"
- C. ${variable_name}
- D. @variable_name
Answer: B
Explanation:
We use the variable's name to reference the variable which we encapsulate in curly brackets
`{{ }}'; however, the YAML syntax dictates that a string beginning with a curly bracket denotes a dictionary value. To get around this it's proper to wrap the variable declaration in quotes.
Reference: http://docs.ansible.com/ansible/playbooks_variables.html#hey-wait-a-yaml-gotcha
NEW QUESTION 75
You are using Autoscaling for managing the instances in your AWS environment. You need to deploy a new version of your application. You'd prefer to use all new instances if possible, but you cannot have any downtime. You also don't want to swap any environment urls. Which of the following deployment methods would you implement
- A. Using "All at once" deployment method.
- B. Using"RollingUpdates"deploymentmethod.
- C. Using "Blue Green" with "All at once" deployment method.
- D. Using "Blue Green" deployment method.
Answer: B
Explanation:
Explanation
In Rolling deployment, you can mention a new set of servers which can replace the existing set of servers.
This replacement will happen in a phased out manner.
Since there is a requirement to not swap URL's, you must not use Blue Green deployments.
For more information on the differences between Rolling Updates and Blue Green deployments, please refer to the below URL:
* https://cloudnative.io/docs/blue-green-deployment/
NEW QUESTION 76
A company is using AWS CodeDeploy to automate software deployment. The deployment must meet these requirements: *A number of instances must be available to serve traffic during the deployment. Traffic must be balanced across those instances, and the instances must automatically heal in the event of failure. *A new fleet of instances must be launched for deploying a new revision automatically, with no manual provisioning. *Traffic must be rerouted to the new environment to half of the new instances at a time. The deployment should succeed if traffic is rerouted to at least half of the instances; otherwise, it should fail. *Before routing traffic to the new fleet of instances, the temporary files generated during the deployment process must be deleted. *At the end of a successful deployment, the original instances in the deployment group must be deleted immediately to reduce costs. How can a DevOps Engineer meet these requirements?
- A. Use an Application Load Balancer and an in-place deployment. Associate the Auto Scaling group with the deployment group. Use the Automatically copy option, and use CodeDeployDefault.OneAtAtime as the deployment configuration. Instruct AWS CodeDeploy to terminate the original Auto Scaling group instances in the deployment group, and use the AllowTraffic hook within appspec.yml to delete the temporary files.
- B. Use an Application Load Balancer and a blue/green deployment. Associate the Auto Scaling group and the Application Load Balancer target group with the deployment group. Use the Automatically copy Auto Scaling group option, and use CodeDeployDefault HalfAtAtime as the deployment configuration. Instruct AWS CodeDeploy to terminate the original isntances in the deployment group, and use the BeforeAllowTraffic hook within appspec.yml to delete the temporary files.
- C. Use an Application Load Balancer and a blue/green deployment. Associate the Auto Scaling group and the Application Load Balancer target group with the deployment group. Use the Automatically copy Auto Scaling group option, create a custom deployment configuration with minimum healthy hosts defined as 50%, and assign the configuration to the deployment group. Instruct AWS CodeDeploy to terminate the original instances in the deployment group, and use the BeforeBlock Traffic hook within appsec.yml to delete the temporary files.
- D. Use an Application Load Balancer and an in-place deployment. Associate the Auto Scaling group and Application Load Balancer target group with the deployment group. Use the Automatically copy Auto Scaling group option, and use CodeDeployDefault AllatOnce as a deployment configuration. Instruct AWS CodeDeploy to terminate the original instances in the deployment group, and use the BlockTraffic hook within appsec.yml to delete the temporary files.
Answer: B
Explanation:
https://docs.aws.amazon.com/codedeploy/latest/userguide/deployment-configurations.html
https://docs.aws.amazon.com/codedeploy/latest/APIReference/API_BlueGreenDeploymentConfiguration.html
NEW QUESTION 77
You have an ELB setup in AWS with EC2 instances running behind it. You have been requested to monitor the incoming connections to the ELB. Which of the below options can suffice this requirement?
- A. Create a custom metric CloudWatch filter on your load balancer
- B. Use a CloudWatch Logs Agent
- C. UseAWSCIoudTrail with your load balancer
- D. Enable access logs on the load balancer
Answer: D
Explanation:
Explanation
Clastic Load Balancing provides access logs that capture detailed information about requests sent to your load balancer. Cach log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and to troubleshoot issues.
Option A is invalid because this service will monitor all AWS services
Option C and D are invalid since CLB already provides a logging feature.
For more information on ELB access logs, please refer to the below document link: from AWS
* http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/access-log-collection.html
NEW QUESTION 78
A company runs a three-tier web application in its production environment, which is built on a single AWS CloudFormation template made up of Amazon EC2 instances behind an ELB Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones. Data is stored in an Amazon RDS Multi-AZ DB instance with read replicas.
Amazon Route 53 manages the application's public DNS record.
A DevOps Engineer must create a workflow to mitigate a failed software deployment by rolling back changes in the production environment when a software cutover occurs for new application software. What steps should the Engineer perform to meet these requirements with the LEAST amount of downtime?
- A. Use CloudFormation to deploy an additional staging environment and configure the Route 53 DNS with weighted records. During cutover, change the Route 53 A record weights to achieve an even traffic distribution between the two environments. Validate the traffic in the new environment and immediately terminate the old environment if tests are successful.
- B. Use a single AWS Elastic Beanstalk environment and an AWS OpsWorks environment to deploy the staging and production environments. Update the environment by uploading the ZIP file with the new application code into the Elastic Beanstalk environment deployed with the OpsWorks stack. Validate the traffic in the new environment and immediately terminate the old environment if tests are successful.
- C. Use a single AWS Elastic Beanstalk environment to deploy the staging and production environments.
Update the environment by uploading the ZIP file with the new application code. Swap the Elastic Beanstalk environment CNAME. Validate the traffic in the new environment and immediately terminate the old environment if tests are successful. - D. Use AWS CloudFormation to deploy an additional staging environment, and configure the Route
53 DNS with weighted records. During cutover, increase the weight distribution to have more traffic directed to the new staging environment as workloads are successfully validated. Keep the old production environment in place until the new staging environment handles all traffic.
Answer: D
NEW QUESTION 79
Your company is concerned with EBS volume backup on Amazon EC2 and wants to ensure they have proper backups and that the data is durable. What solution would you implement and why? Choose the correct answer from the options below
- A. Writea cronjob that uses the AWS CLI to take a snapshot of production EBS volumes. The data is durable because EBS snapshots are stored on the Amazon S3 standard storage class
- B. Writea cronjob on the server that compresses the data that needs to be backed upusing gzip compression, then use AWS CLI to copy the data into an S3 bucket for durability
- C. ConfigureAmazon Storage Gateway with EBS volumes as the data source and store thebackups on premise through the storage gateway
- D. Usea lifecycle policy to back up EBS volumes stored on Amazon S3 for durability
Answer: A
Explanation:
Explanation
You can take snapshots of CBS volumes and to automate the process you can use the CLI. The snapshots are automatically stored on S3 for durability.
For more information on CBS snapshots, please refer to the below link:
* http://docs.aws.amazon.com/AWSCC2/latest/UserGuide/CBSSnapshots.html
NEW QUESTION 80
A mobile application running on eight Amazon EC2 instances is relying on a third-party API endpoint. The third-party service has a high failure rate because of limited capacity, which is expected to be resolved in a few weeks.
In the meantime, the mobile application developers have added a retry mechanism and are logging failed API requests. A DevOps Engineer must automate the monitoring of application logs and count the specific error messages; if there are more than 10 errors within a 1-minute window, the system must issue an alert.
How can the requirements be met with MINIMAL management overhead?
- A. Install the Amazon CloudWatch Logs agent on all instances to push the application logs to CloudWatch Logs. Use metric filters to count the error messages every minute, and trigger a CloudWatch alarm if the count exceeds 10 errors.
- B. Install the Amazon CloudWatch Logs agent on all instances to push the access logs to CloudWatch Logs. Create CloudWatch Events rule to count the error messages every minute, and trigger a CloudWatch alarm if the count exceeds 10 errors.
- C. Deploy a custom script on all instances to check application logs regularly in a cron job. Count the number of error messages every minute, and push a data point to a custom. CloudWatch metric.
Trigger a CloudWatch alarm if the custom metric reaches 10 errors in a 1-minute period. - D. Install the Amazon CloudWatch Logs agent on all instances to push the application logs to CloudWatchLogs. Use a metric filter to generate a custom CloudWatch metric that records the number of failures and triggers a CloudWatch alarm if the custom metric reaches 10 errors in a 1- minute period.
Answer: D
NEW QUESTION 81
You are building a game high score table in DynamoDB. You will store each user's highest score for each game, with many games, all of which have relatively similar usage levels and numbers of players. You need to be able to look up the highest score for any game. What's the best DynamoDB key structure?
- A. HighestScore as the hash / only key.
- B. GameID as the hash / only key.
- C. GameID as the hash key, HighestScore as the range key.
- D. GameID as the range / only key.
Answer: C
Explanation:
Since access and storage for games is uniform, and you need to have ordering within each game for the scores (to access the highest value), your hash (partition) key should be the GameID, and there should be a range key for HighestScore.
http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/GuidelinesForTables.html# Guideli nesForTables.Partitions
NEW QUESTION 82
You have decided that you need to change the instance type of your production instances which are running as part of an AutoScaling group. The entire architecture is deployed using CloudFormation Template. You currently have 4 instances in Production. You cannot have any interruption in service and need to ensure 2 instances are always runningduring the update? Which of the options below listed can be used for this?
- A. AutoScalingScheduledAction
- B. AutoScalingRollingUpdate
- C. AutoScalinglntegrationUpdate
- D. AutoScalingReplacingUpdate
Answer: B
Explanation:
Explanation
The AWS::AutoScaling::AutoScalingGroup resource supports an UpdatePoIicy attribute. This is used to define how an Auto Scalinggroup resource is updated when an update to the Cloud Formation stack occurs. A common approach to updating an Auto Scaling group is to perform a rolling update, which is done by specifying the AutoScalingRollingUpdate policy. This retains the same Auto Scaling group and replaces old instances with new ones, according to the parameters specified. For more information on Autoscaling updates, please refer to the below link:
* https://aws.amazon.com/premiumsupport/knowledge-center/auto-scaling-group-rolling-updates/
NEW QUESTION 83
......
Ultimate Guide to Prepare Free AWS-DevOps-Engineer-Professional Exam Questions & Answer: https://drive.google.com/open?id=1zqojnOgeo1YzaRCRNx6s85WeY52Am42I
Pass AWS-DevOps-Engineer-Professional Tests Engine pdf - All Free Dumps: https://www.exam4pdf.com/AWS-DevOps-Engineer-Professional-dumps-torrent.html
