AWS-DevOps-Engineer-Professional Updated Exam Dumps [2022] Practice Valid Exam Dumps Question
AWS-DevOps-Engineer-Professional Sample with Accurate & Updated Questions
Registration procedure of the AWS DevOps Engineer Professional Exam
In order to apply for the AWS DevOps Engineer Professional, You have to follow these steps
- Step 1: Sign in to AWS Training
- Step 2: Click Certification in the top navigation
- Step 3: Click AWS Certification Account Button
- Step 4: Followed by Schedule New Exam
- Step 5: Search the AWS DevOps Engineer Professional exam
- Step 6: Click either the Schedule at PSI or Schedule at Pearson VUE button
- Step 7: Select Date, time and Schedule your test
NEW QUESTION 13
You are designing an enterprise data storage system. Your data management software system requires mountable disks and a real filesystem, so you cannot use S3 for storage. You need persistence, so you will be using AWS EBS Volumes for your system. The system needs as low- cost storage as possible, and access is not frequent or high throughput, and is mostly sequential reads. Which is the most appropriate EBS Volume Type for this scenario?
- A. standard
- B. io1
- C. gp1
- D. gp2
Answer: A
Explanation:
standard volumes, or Magnetic volumes, are best for: Cold workloads where data is infrequently accessed, or scenarios where the lowest storage cost is important.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
NEW QUESTION 14
You have an application which consists of EC2 instances in an Auto Scaling group. Between a particular time frame every day, there is an increase in traffic to your website. Hence users are complaining of a poor response time on the application. You have configured your Auto Scaling group to deploy one new EC2 instance when CPU utilization is greater than 60% for 2 consecutive periods of 5 minutes. What is the least cost-effective way to resolve this problem?
- A. Decrease the threshold CPU utilization percentage at which to deploy a new instance
- B. Increase the minimum number of instances in the Auto Scaling group
- C. Decrease the consecutive number of collection periods
- D. Decrease the collection period to ten minutes
Answer: B
Explanation:
Explanation
If you increase the minimum number of instances, then they will be running even though the load is not high on the website. Hence you are incurring cost even though there is no need.
All of the remaining options are possible options which can be used to increase the number of instances on a high load.
For more information on On-demand scaling, please refer to the below link:
* http://docs.aws.amazon.com/autoscaling/latest/userguide/as-scale-based-on-demand.html
Note: The tricky part where the question is asking for 'least cost effective way". You got the design consideration correctly but need to be careful on how the question is phrased.
NEW QUESTION 15
You have a large number of web servers in an Auto Scaling group behind a load balancer. On an hourly basis, you want to filter and process the logs to collect data on unique visitors, and then put that data in a durable data store in order to run reports. Web servers in the Auto Scaling group are constantly launching and terminating based on your scaling policies, but you do not want to lose any of the log data from these servers during a stop/termination initiated by a user or by Auto Scaling.
What two approaches will meet these requirements?
Choose 2 answers
- A. On the web servers, create a scheduled task that executes a script to rotate and transmit the logs to Amazon Glacier.
Ensure that the operating system shutdown procedure triggers a logs transmission when the Amazon EC2 instance is stopped/terminated.
Use Amazon Data Pipeline to process the data in Amazon Glacier and run reports every hour. - B. On the web servers, create a scheduled task that executes a script to rotate and transmit the logs to an Amazon S3 bucket.
Ensure that the operating system shutdown procedure triggers a logs transmission when the Amazon EC2 instance is stopped/terminated.
Use AWS Data Pipeline to move log data from the Amazon S3 bucket to Amazon Redshift In order to process and run reports every hour. - C. Install an AWS Data Pipeline Logs Agent on every web server during the bootstrap process.
Create a log group object in AWS Data Pipeline, and define Metric Filters to move processed log data directly from the web servers to Amazon Redshift and run reports every hour. - D. Install an Amazon Cloudwatch Logs Agent on every web server during the bootstrap process.
Create a CloudWatch log group and define Metric Filters to create custom metrics that track unique visitors from the streaming web server logs.
Create a scheduled task on an Amazon EC2 instance that runs every hour to generate a new report based on the Cloudwatch custom metrics.
Answer: B,D
NEW QUESTION 16
A DevOps Engineer is building a multi-stage pipeline with AWS CodePipeline to build, verify, stage, test, and deploy an application. There is a manual approval stage required between the test and deploy stages. The development team uses a team chat tool with webhook support. How can the Engineer configure status updates for pipeline activity and approval requests to post to the chat tool?
- A. Modify the pipeline code to send event details to the chat webhook URL at the end of each stage.
Parametrize the URL so each pipeline can send to a different URL based on the pipeline environment. - B. Create an AWS Lambda function that is triggered by the updating of AWS CloudTrail events.
When a "CodePipeline Pipeline Execution State Change" event is detected in the updated events, send the event details to the chat webhook URL. - C. Create an AWS CloudWatch Logs subscription that filters on "detail-type": "CodePipeline Pipeline Execution State Change." Forward that to an Amazon SNS topic. Add the chat webhook URL to the SNS topic as a subscriber and complete the subscription validation.
- D. Create an AWS CloudWatch Events rule that filters on "CodePipeline Pipeline Execution State Change." Forward that to an Amazon SNS topic. Subscribe an AWS Lambda function to the Amazon SNS topic and have it forward the event to the chat webhook URL.
Answer: D
NEW QUESTION 17
A company has built a web service that runs on Amazon EC2 instances behind an Application Load Balancer (ALB) the company has deployed the application in us-east-1 Amazon Route 53 provides an external DNS that routes traffic from example.com to the application, created with appropriate health checks.
The company has deployed a second environment for the application in eu-west-1 the company wants traffic to be routed to whichever environment results m the best response time for each user. If there is an outage in one Region, traffic should be directed to the other environment.
Which configuration will achieve this requirements?
- A. A subdomain us.example.com with multivalue answer routing. the US ALB as first and the EU ALB as second Another subdomain eu.example.com with failover routing the EU ALB as first and the US ALB as second Failover routing records for example.com that are aliased to us.example.com and eu.example.com
- B. A subdomain us.example.com with failover routing the US ALB as primary and the EU ALB as secondary Another subdomain eu.example.com with failover routing the EU ALB as primary and the US ALB as secondary Latency-based routing records for example com that are aliased to us example com and eu.example.com
- C. A subdomain us example com with weighted routing the US ALB with weight 2 and the EU ALB with weight 1 Another subdomain eu.example.com with weighted routing the EU ALB with weight 2 and the US ALU with weight 1 Geolocation routing records for example.com North America aliased to us example.com and Europe aliased to eu.example.com
- D. A subdomain us example com with latency-based routing the US ALB as the first target and the EU ALB as the second target.
Another subdomain eu.example.com with latency-based routing. The EU ALB as the first target and the US ALB as the second target.
Failover routing records for example.com aliased to us.example.com as the first target and eu.example.com as the second target.
Answer: A
NEW QUESTION 18
Your application uses Cloud Formation to orchestrate your application's resources. During your testing phase
before the application went live, your Amazon RDS instance type was changed and caused the instance to be
re-created, resulting In the loss of test data. How should you prevent this from occurring in the future?
- A. In the AWS CloudFormation template, set the AWS::RDS::DBInstance's DBInstanceClass property to
be read-only. - B. Within the AWS CloudFormation parameter with which users can select the Amazon RDS instance
type, set AllowedValues to only contain the current instance type. - C. Subscribe to the AWS CloudFormation notification "BeforeResourcellpdate," and call
CancelStackUpdate if the resource identified is the Amazon RDS instance. - D. Update the stack using ChangeSets
- E. Use an AWS CloudFormation stack policy to deny updates to the instance. Only allow UpdateStack
permission to 1AM principals that are denied SetStackPolicy.
Answer: D
Explanation:
Explanation
When you need to update a stack, understanding how your changes will affect running resources before you
implement them can help you update stacks with confidence. Change sets allow you to preview how proposed
changes to a stack might impact your running resources, for example, whether your changes will delete or
replace any critical resources, AWS CloudFormation makes the changes to your stack only when you decide to
execute the change set, allowing you to decide whether to proceed with your proposed changes or explore
other changes by creating another change set
For example, you can use a change set to verify that AWS CloudFormation won't replace your stack's database
instances during an update.
NEW QUESTION 19
Management has reported an increase in the monthly bill from Amazon Web Services, and they are extremely concerned with this increased cost. Management has asked you to determine the exact cause of this increase. After reviewing the billing report, you notice an increase in the data transfer cost. How can you provide management with a better insight into data transfer use?
- A. Using Amazon CloudWatch metrics, pull your Elastic Load Balancing outbound data transfer metrics monthly, and include them with your billing report to show which application is causing higher bandwidth usage.
- B. Use Amazon CloudWatch Logs to run a map-reduce on your logs to determine high usage and data transfer.
- C. Update your Amazon CloudWatch metrics to use five-second granularity, which will give better detailed metrics that can be combined with your billing data to pinpoint anomalies.
- D. Deliver custom metrics to Amazon CloudWatch per application that breaks down application data transfer into multiple, more specific data points.
Answer: D
Explanation:
You can publish your own metrics to CloudWatch using the AWS CLI or an API. You can view statistical graphs of your published metrics with the AWS Management Console. CloudWatch stores data about a metric as a series of data points. Each data point has an associated time stamp. You can even publish an aggregated set of data points called a statistic set. If you have custom metrics specific to your application, you can give a breakdown to the management on the exact issue.
Option A won't be sufficient to provide better insights. Option B is an overhead when you can make the application publish custom metrics Option D is invalid because just the ELB metrics will not give the entire picture.
For more information on custom metrics, please refer to the below document link: from AWS
http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/publ ishingMetrics.htmI
NEW QUESTION 20
A Developer is designing a continuous deployment workflow for a new Development team to facilitate the process for source code promotion in AWS. Developers would like to store and promote code for deployment from development to production while maintaining the ability to roll back that deployment if it fails. Which design will incur the LEAST amount of downtime?
- A. Create one repository for each Developer in AWS CodeCommit and another repository to hold the production code. Use AWS CodeBuild to merge development and production repositories, and deploy to production by using AWS CodeDeploy for a blue/green deployment.
- B. Create one repository for development code in AWS CodeCommit and another repository to hold the production code. Use AWS CodeBuild to merge development and production repositories, and deploy to production by using AWS CodeDeploy for a blue/green deployment.
- C. Create one repository in AWS CodeCommit. Create a development branch to hold merged changes. Use AWS CodeBuild to build and test the code stored in the development branch triggered on a new commit. Merge to the master and deploy to production by using AWS CodeDeploy for a blue/green deployment.
- D. Create a shared Amazon S3 bucket for the Development team to store their code. Set up an Amazon CloudWatch Events rule to trigger an AWS Lambda function that deploys the code to production by using AWS CodeDeploy for a blue/green deployment.
Answer: C
NEW QUESTION 21
Which of the following Dockerfile commands cannot be overridden at runtime?
- A. VOLUME
- B. USER
- C. CMD
- D. ADD
Answer: D
Explanation:
When a developer builds an image from a Dockerfile or when she commits it, the developer can set a number of default parameters that take effect when the image starts up as a container. Four of the Dockerfile commands cannot be overridden at runtime: FROM, MAINTAINER, RUN, and ADD. Everything else has a corresponding override in docker run. We'll go through what the developer might have set in each Dockerfile instruction and how the operator can override that setting.
Reference:
https://docs.docker.com/engine/reference/run/#overriding-dockerfile-image-defaults
NEW QUESTION 22
You are responsible for an application that leverages the Amazon SDK and Amazon EC2 roles for storing and retrieving data from Amazon S3, accessing multiple DynamoDB tables, and exchanging message with Amazon SQS queues. Your VP of Compliance is concerned that you are not following security best practices for securing all of this access. He has asked you to verify that the application's AWS access keys are not older than six months and to provide control evidence that these keys will be rotated a minimum of once every six months.
Which option will provide your VP with the requested information?
- A. Createa script to query the 1AM list-access keys API to get your application accesskey creation date and create a batch process to periodically create acompliance report for your VP.
- B. Createa new set of instructions for your configuration management tool that willperiodically create and rotate the application's existing access keys andprovide a compliance report to your VP.
- C. Updateyour application to log changes to its AWS access key credential file and use aperiodic Amazon EMR job to create a compliance report for your VP
- D. Provideyour VP with a link to 1AM AWS documentation to address the VP's key rotationconcerns.
Answer: D
Explanation:
Explanation
The question is focusing on 1AM roles rather than using access keys for accessing the services, AWS will take care of the temporary credentials provided through the roles in accessing these services.
NEW QUESTION 23
A customer has a production application that frequently overwrites and deletes data, the application requires
the most up-to-date version of the data every time it is requested.
Which storage should a Solutions Architect recommend to bet accommodate this use case?
- A. Amazon RedShift
- B. Amazon RDS
- C. Amazon S3
- D. AWS Storage Gateway
Answer: C
NEW QUESTION 24
A company has migrated its container-based applications to Amazon EKS and wants to establish automated email notifications. The notifications sent to each email address are for specific activities related to EKS components. The solution will include Amazon SNS topics and an AWS Lambda function to evaluate incoming log events and publish messages to the correct SNS topic.
Which logging solution will support these requirements?
- A. Enable Amazon CloudWatch Logs to log the EKS components. Create a CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
- B. Enable Amazon S3 logging for the EKS components. Configure S3 PUT Object event notifications with AWS Lambda as the destination.
- C. Enable Amazon CloudWatch Logs to log the EKS components. Create CloudWatch Logs Insights queries linked to Amazon CloudWatch Events events that trigger Lambda.
- D. Enable Amazon S3 logging for the EKS components. Configure an Amazon CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
Answer: A
NEW QUESTION 25
You are building a mobile app for consumers to post cat pictures online.
You will be storing the images in AWS S3. You want to run the system very cheaply and simply.
Which one of these options allows you to build a photo sharing application without needing to worry about scaling expensive uploads processes, authentication/authorization and so forth?
- A. Build the application out using AWS Cognito and web identity federation to allow users to log in using Facebook or Google Accounts. Once they are logged in, the secret token passed to that user is used to directly access resources on AWS, like AWS S3.
- B. Use JWT or SAML compliant systems to build authorization policies. Users log in with a username and password, and are given a token they can use indefinitely to make calls against the photo infrastructure.
- C. Create an AWS oAuth Service Domain ad grant public signup and access to the domain. During setup, add at least one major social media site as a trusted Identity Provider for users.
- D. Use AWS API Gateway with a constantly rotating API Key to allow access from the client-side.
Construct a custom build of the SDK and include S3 access in it.
Answer: A
Explanation:
The short answer is that Amazon Cognito is a superset of the functionality provided by web identity federation. It supports the same providers, and you configure your app and authenticate with those providers in the same way. But Amazon Cognito includes a variety of additional features. For example, it enables your users to start using the app as a guest user and later sign in using one of the supported identity providers.
https://blogs.aws.amazon.com/security/post/Tx3SYCORF5EKRC0/How-Does-Amazon-Cognito- Relate-to-Existing-Web-Identity-Federatio
NEW QUESTION 26
You have a web application composed of an Auto Scaling group of web servers behind a load balancer, and create a new AMI for each application version for deployment. You have a new version to release, and you want to use the A/B deployment technique to migrate users over in a controlled manner while the size of the fleet remains constant over a period of 12 hours, to ensure that the new version is performing well.
What option should you choose to enable this technique while being able to roll back easily?
- A. Createa load balancer. Create an Auto Scaling launch configuration with the new AMIto use the new launch configuration and to register instances with the new loadbalancer. Use Amazon Route53 weighted Round Robin to vary the proportion ofrequests sent to the load balancers.
- B. Createan Auto scaling launch configuration with the new AMI. Configure the AutoScalinggroup with the new launch configuration. Use the Auto Scaling rollingupdates feature to migrate to the new version.
- C. Createan Auto Scaling launch configuration with the new AMI. Create an Auto Scalinggroup configured to use the new launch configuration and to register instanceswith the same load balancer. Vary the desired capacity of each group tomigrate.
- D. Launchnew instances using the new AMI and attach them to the Auto Scalinggroup.Configure Elastic Load Balancing to vary the proportion of requests sent toinstances running the two application versions.
- E. Createan Auto scaling launch configuration with the new AMI. Configure Auto Scalingto vary the proportion of instances launched from the two launchconfigurations.
Answer: A
Explanation:
Explanation
Since you want to control the usage to the new application in a controlled manner, the best way is to use Route53 weighted method. The AWS documentation mentions the following on this method Weighted routing lets you associate multiple resources with a single domain name (example.com) or subdomain name (acme.example.com) and choose how much traffic is routed to each resource. This can be useful for a variety of purposes, including load balancing and testing new versions of software.
For more information on Weighted Round Robin method, please visit the link:
* http://docs^ws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html/rrouting-policy-weighted
NEW QUESTION 27
If I want CloudFormation stack status updates to show up in a continuous delivery system in as close to
real time as possible, how should I achieve this?
- A. Use a long-poll on the <code>ListStacks</code>API call for your CloudFormation stack and display
those state changes in the UI for the system. - B. Use a long-poll on the Resources object in your CloudFormation stack and display those state changes
in the UI for the system. - C. Subscribe your continuous delivery system to an SQS queue that you also tell your CloudFormation
stack to publish events into. - D. Subscribe your continuous delivery system to an SNS topic that you also tell your CloudFormation
stack to publish events into.
Answer: D
Explanation:
Use NotificationARNs.member.N when making a CreateStack call to push stack events into SNS in nearly
real-time.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-monitor-s
tack.html
NEW QUESTION 28
You run a clustered NoSQL database on AWS EC2 using AWS EBS. You need to reduce latency for database response times. Performance is the most important concern, not availability. You did not perform the initial setup, someone without much AWS knowledge did, so you are not sure if they configured everything optimally. Which of the following is NOT likely to be an issue contributing to increased latency?
- A. The EC2 instances are not EBS Optimized.
- B. The database is not running in a placement group.
- C. The database and requesting system are both in the wrong Availability Zone.
- D. The EBS Volumes are not using PIOPS.
Answer: C
Explanation:
For the highest possible performance, all instances in a clustered database like this one should be in a single Availability Zone in a placement group, using EBS optimized instances, and using PIOPS SSD EBS Volumes. The particular Availability Zone the system is running in should not be important, as long as it is the same as the requesting resources.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html
NEW QUESTION 29
A company is deploying a new mobile game on AWS for its customers around the world. The Development team uses AWS Code services and must meet the following requirements:
- Clients need to send/receive real-time playing data from the backend frequently and with minimal latency
- Game data must meet the data residency requirement
Which strategy can a DevOps Engineer implement to meet their needs?
- A. Deploy the backend application to multiple regions. Any update to the code repository triggers a two-stage build and deployment pipeline. A successful deployment in one region invokes an AWS Lambda function to copy the build artifacts to an Amazon S3 bucket in another region. After the artifact is copied, it triggers a deployment pipeline in the new region.
- B. Deploy the backend application to multiple regions. Any update to the code repository triggers a two-stage build-and-deployment pipeline in the region. After a successful deployment in the region, the pipeline invokes the pipeline in another region and passes the build artifact location. The pipeline uses the artifact location and deploys applications in the new region.
- C. Deploy the backend application to multiple regions. Use AWS Direct Connect to serve the application backend to global customers. Any update to the code repository triggers a two-stage build-and-deployment pipeline in the region. After a successful deployment in the region, the pipeline continues to deploy the artifact to another region.
- D. Deploy the backend application to multiple Availability Zones in a single region. Create an Amazon CloudFront distribution to serve the application backend to global customers. Any update to the code repository triggers a two-stage build-and-deployment pipeline. The pipeline deploys the backend application to all Availability Zones.
Answer: C
NEW QUESTION 30
A user is trying to save some cost on the AWS services. Which of the below mentioned options will not help him save cost?
- A. Delete the AWS ELB after the instances are terminated
- B. Release the elastic IP if not required once the instance is terminated
- C. Delete the AutoScaling launch configuration after the instances are terminated
- D. Delete the unutilized EBS volumes once the instance is terminated
Answer: C
Explanation:
Explanation
Option A is wrong because CBS volumes does have a costing aspect and hence deleting the volumes will save on cost Option C is wrong because Elastic IP will consume cost if not removed.
Option D is wrong because CLB also incur costs.
Only Autoscaling groups are free of cost. It's only the underlying resources which you are charged for.
For more information on AWS Pricing, please visit the link:
* https://aws.amazon.com/pricing/services/
NEW QUESTION 31
An online retail company based in the United States plans to expand its operations to Europe and Asia in the next six months. Its product currently runs on Amazon EC2 instances behind an Application Load Balancer.
The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. All data is stored in an Amazon Aurora database instance.
When the product is deployed in multiple regions, the company wants a single product catalog across all regions, but for compliance purposes, its customer information and purchases must be kept in each region.
How should the company meet these requirements with the LEAST amount of application changes?
- A. Use Amazon Redshift for the product catalog and Amazon DynamoDB tables for the customer information and purchases.
- B. Use Amazon DynamoDB global tables for the product catalog and regional tables for the customer information and purchases
- C. Use Aurora with read replicas for the product catalog and additional local Aurora instances in each region for the customer information and purchases.
- D. Use Aurora for the product catalog and Amazon DynamoDB global tables for the customer information and purchases.
Answer: C
NEW QUESTION 32
......
Pass Amazon AWS-DevOps-Engineer-Professional Premium Files Test Engine pdf - Free Dumps Collection: https://www.examdumpsvce.com/AWS-DevOps-Engineer-Professional-valid-exam-dumps.html
AWS-DevOps-Engineer-Professional Exam Info and Free Practice Test | ExamDumpsVCE: https://drive.google.com/open?id=1QnHqK8kpxm_zn1Fx8rxr9gdV3o0mJOdc
