Question 1

What needs to be done in order to remotely access a Docker daemon running on Linux?

Accepted Answer

A)  add certificate authentication to the docker API 
B)  change the encryption level to TLS 
C)  enable the TCP socket 
D)  bind the Docker API to a unix socket 
A)  add certificate authentication to the docker API 
B)  change the encryption level to TLS 
C)  enable the TCP socket 
D)  bind the Docker API to a unix socket

Question 2

What is the expected behavior if Ansible is called with 'ansible-playbook -i localhost playbook.yml'?

Accepted Answer

A)  Ansible will attempt to read the inventory file named 'localhost' 
B)  Ansible will run the plays locally. 
C)  Ansible will run the playbook on the host named 'localhost' 
D)  Ansible won't run, this is invalid command line syntax 
A)  Ansible will attempt to read the inventory file named 'localhost' 
B)  Ansible will run the plays locally. 
C)  Ansible will run the playbook on the host named 'localhost' 
D)  Ansible won't run, this is invalid command line syntax

Question 3

Customers have recently been complaining that your web application has randomly stopped responding. During a deep dive of your logs, the team has discovered a major bug in your new Java web application. This bug is causing a memory leak that eventually causes the application to crash. Your web application runs on Amazon EC2 and was built with AWS CloudFormation. Which techniques should you use to help detect these problems faster, as well as help eliminate the server's unresponsiveness? (Choose two.)

Accepted Answer

A)  Update your AWS CloudFormation configuration and enable a CustomResource that uses cfnsignal to detect memory leaks. 
B)  Update your CloudWatch metric granularity config for all Amazon EC2 memory metrics to support five- second granularity. Create a CloudWatch alarm that triggers an Amazon SNS notification to page your team when the application memory becomes too large. 
C)  Update your AWS CloudFormation configuration to take advantage of Auto Scaling groups. Configure an Auto Scaling group policy to trigger off your custom CloudWatch metrics. 
D)  Create a custom CloudWatch metric that you push your JVM memory usage to. Create a Cloudwatch alarm that triggers an Amazon SNS notification to page your team when the application memory usage becomes too large. 
E)  Update your AWS CloudFormation configuration to take advantage of CloudWatch metrics Agent. Configure the CloudWatch Metrics Agent to monitor memory usage and trigger an Amazon SNS alarm. 
A)  Update your AWS CloudFormation configuration and enable a CustomResource that uses cfnsignal to detect memory leaks. 
B)  Update your CloudWatch metric granularity config for all Amazon EC2 memory metrics to support five- second granularity. Create a CloudWatch alarm that triggers an Amazon SNS notification to page your team when the application memory becomes too large. 
C)  Update your AWS CloudFormation configuration to take advantage of Auto Scaling groups. Configure an Auto Scaling group policy to trigger off your custom CloudWatch metrics. 
D)  Create a custom CloudWatch metric that you push your JVM memory usage to. Create a Cloudwatch alarm that triggers an Amazon SNS notification to page your team when the application memory usage becomes too large. 
E)  Update your AWS CloudFormation configuration to take advantage of CloudWatch metrics Agent. Configure the CloudWatch Metrics Agent to monitor memory usage and trigger an Amazon SNS alarm.

Question 4

You manage a three-tier web application consisting of an autoscaled web proxy tier, an autoscaled application tier, and an Amazon RDS database tier. You use a load balancer to distribute requests from end users to the web proxy tier and another, internal load balancer to distribute requests between the web tier and the application tier. After deploying a small database schema update, you notice that all of your web and application instances have been terminated. What may have caused this?

Accepted Answer

A)  Your load balancers use an HTTP health check, and the page relies on retrieving data from your database. 
B)  Your load balancer use TCP health checks to provide application-level health checks. 
C)  The cooldown period of the Auto Scaling group is too short, so the instances do not have enough time to recover from an issue. 
D)  Your Auto Scaling group health check type is set to "EC2" to check that the instances themselves are healthy. 
A)  Your load balancers use an HTTP health check, and the page relies on retrieving data from your database. 
B)  Your load balancer use TCP health checks to provide application-level health checks. 
C)  The cooldown period of the Auto Scaling group is too short, so the instances do not have enough time to recover from an issue. 
D)  Your Auto Scaling group health check type is set to "EC2" to check that the instances themselves are healthy.

Question 5

When thinking of AWS Elastic Beanstalk's model, which is true?

Accepted Answer

A)  Applications have many deployments, deployments have many environments. 
B)  Environments have many applications, applications have many deployments. 
C)  Applications have many environments, environments have many deployments. 
D)  Deployments have many environments, environments have many applications. 
A)  Applications have many deployments, deployments have many environments. 
B)  Environments have many applications, applications have many deployments. 
C)  Applications have many environments, environments have many deployments. 
D)  Deployments have many environments, environments have many applications.

Question 6

A user is creating a new EBS volume from an existing snapshot. The snapshot size shows 10 GB Can the user create a volume of 30 GB from that snapshot?

Accepted Answer

A)  Provided the original volume has set the change size attribute to true 
B)  Yes 
C)  Provided the snapshot has the modify size attribute set as true 
D)  No 
A)  Provided the original volume has set the change size attribute to true 
B)  Yes 
C)  Provided the snapshot has the modify size attribute set as true 
D)  No

Question 7

You are designing a service that aggregates clickstream data in batch and delivers reports to subscribers via email only once per week. Data is extremely spikey, geographically distributed, high-scale, and unpredictable. How should you design this system?

Accepted Answer

A)  Use a large RedShift cluster to perform the analysis, and a fleet of Lambdas to perform record inserts into the RedShift tables. Lambda will scale rapidly enough for the traffic spikes. 
B)  Use a CloudFront distribution with access log delivery to S3. Clicks should be recorded as querystring GETs to the distribution. Reports are built and sent by periodically running EMR jobs over the access logs in S3. 
C)  Use API Gateway invoking Lambdas which PutRecords into Kinesis, and EMR running Spark performing GetRecords on Kinesis to scale with spikes. Spark on EMR outputs the analysis to S3, which are sent out via email. 
D)  Use AWS Elasticsearch service and EC2 Auto Scaling groups. The Autoscaling groups scale based on click throughput and stream into the Elasticsearch domain, which is also scalable. Use Kibana to generate reports periodically. 
A)  Use a large RedShift cluster to perform the analysis, and a fleet of Lambdas to perform record inserts into the RedShift tables. Lambda will scale rapidly enough for the traffic spikes. 
B)  Use a CloudFront distribution with access log delivery to S3. Clicks should be recorded as querystring GETs to the distribution. Reports are built and sent by periodically running EMR jobs over the access logs in S3. 
C)  Use API Gateway invoking Lambdas which PutRecords into Kinesis, and EMR running Spark performing GetRecords on Kinesis to scale with spikes. Spark on EMR outputs the analysis to S3, which are sent out via email. 
D)  Use AWS Elasticsearch service and EC2 Auto Scaling groups. The Autoscaling groups scale based on click throughput and stream into the Elasticsearch domain, which is also scalable. Use Kibana to generate reports periodically.

Question 8

A Development team is working on a serverless application in AWS. To quickly identify and remediate potential production issues, the team decides to roll out changes to a small number of users as a test before the full release. The DevOps Engineer must develop a solution to minimize downtime and impact. Which of the following solutions should be used to meet the requirements? (Choose two.)

Accepted Answer

A)  Create an Application Load Balancer with two target groups. Set up the Application Load Balancer for Amazon API Gateway private integration. Associate one target group to the current version and the other target group to the new version. Configure API Gateway to route 10% of incoming traffic to the new version. As the new version becomes stable, configure API Gateway to send all traffic to the new version and detach the old version from the load balancer. 
B)  Create an alias for an AWS Lambda function pointing to both the current and new versions. Configure the alias to route 10% of incoming traffic to the new version. As the new version is considered stable, update the alias to route all traffic to the new version. 
C)  Create a failover record set in AWS Route 53 pointing to the AWS Lambda endpoints for the old and new versions. Configure Route 53 to route 10% of incoming traffic to the new version. As the new version becomes stable, update the DNS record to route all traffic to the new version. 
D)  Create an ELB Network Load Balancer with two target groups. Set up the Network Load Balancer for Amazon API Gateway private integration Associate one target group with the current version and the other target group with the new version. Configure the load balancer to route 10% of incoming traffic to the new version. As the new version becomes stable, detach the old version from the load balancer. 
E)  In Amazon API Gateway, create a canary release deployment by adding canary settings to the stage of a regular deployment. Configure API Gateway to route 10% of the incoming traffic to the canary release. As the canary release is considered stable, promote it to a production release 
A)  Create an Application Load Balancer with two target groups. Set up the Application Load Balancer for Amazon API Gateway private integration. Associate one target group to the current version and the other target group to the new version. Configure API Gateway to route 10% of incoming traffic to the new version. As the new version becomes stable, configure API Gateway to send all traffic to the new version and detach the old version from the load balancer. 
B)  Create an alias for an AWS Lambda function pointing to both the current and new versions. Configure the alias to route 10% of incoming traffic to the new version. As the new version is considered stable, update the alias to route all traffic to the new version. 
C)  Create a failover record set in AWS Route 53 pointing to the AWS Lambda endpoints for the old and new versions. Configure Route 53 to route 10% of incoming traffic to the new version. As the new version becomes stable, update the DNS record to route all traffic to the new version. 
D)  Create an ELB Network Load Balancer with two target groups. Set up the Network Load Balancer for Amazon API Gateway private integration Associate one target group with the current version and the other target group with the new version. Configure the load balancer to route 10% of incoming traffic to the new version. As the new version becomes stable, detach the old version from the load balancer. 
E)  In Amazon API Gateway, create a canary release deployment by adding canary settings to the stage of a regular deployment. Configure API Gateway to route 10% of the incoming traffic to the canary release. As the canary release is considered stable, promote it to a production release

Question 9

A company runs a production application workload in a single AWS account that uses Amazon Route 53, AWS Elastic Beanstalk, and Amazon RDS. In the event of a security incident, the Security team wants the application workload to fail over to a new AWS account. The Security team also wants to block all access to the original account immediately, with no access to any AWS resources in the original AWS account, during forensic analysis. What is the most cost-effective way to prepare to fail over to the second account prior to a security incident?

Accepted Answer

A)  Migrate the Amazon Route 53 configuration to a dedicated AWS account. Mirror the Elastic Beanstalk configuration in a different account. Enable RDS Database Read Replicas in a different account. 
B)  Migrate the Amazon Route 53 configuration to a dedicated AWS account. Save/copy the Elastic Beanstalk configuration files in a different AWS account. Copy snapshots of the RDS Database to a different account. 
C)  Save/copy the Amazon Route 53 configurations for use in a different AWS account after an incident. Save/copy Elastic Beanstalk configuration files to a different account. Enable the RDS database read replica in a different account. 
D)  Save/copy the Amazon Route 53 configurations for use in a different AWS account after an incident. Mirror the configuration of Elastic Beanstalk in a different account. Copy snapshots of the RDS database to a different account. 
A)  Migrate the Amazon Route 53 configuration to a dedicated AWS account. Mirror the Elastic Beanstalk configuration in a different account. Enable RDS Database Read Replicas in a different account. 
B)  Migrate the Amazon Route 53 configuration to a dedicated AWS account. Save/copy the Elastic Beanstalk configuration files in a different AWS account. Copy snapshots of the RDS Database to a different account. 
C)  Save/copy the Amazon Route 53 configurations for use in a different AWS account after an incident. Save/copy Elastic Beanstalk configuration files to a different account. Enable the RDS database read replica in a different account. 
D)  Save/copy the Amazon Route 53 configurations for use in a different AWS account after an incident. Mirror the configuration of Elastic Beanstalk in a different account. Copy snapshots of the RDS database to a different account.

Question 10

You run a SIP-based telephony application that uses Amazon EC2 for its web tier and uses MySQL on Amazon RDS as its database. The application stores only the authentication profile data for its existing users in the database and therefore is read-intensive. Your monitoring system shows that your web instances and the database have high CPU utilization. Which of the following steps should you take in order to ensure the continual availability of your application? (Choose two.)

Accepted Answer

A)  Use a CloudFront RTMP download distribution with the application tier as the origin for the distribution. 
B)  Set up an Auto Scaling group for the application tier and a policy that scales based on the Amazon EC2 CloudWatch CPU utilization metric. 
C)  Vertically scale up the Amazon EC2 instances manually. 
D)  Set up an Auto Scaling group for the application tier and a policy that scales based on the Amazon RDS CloudWatch CPU utilization metric. 
E)  Switch to General Purpose (SS
D)  Storage from Provisioned IOPS Storage (PIOPS) for the Amazon RDS database.
F) Use multiple Amazon RDS read replicas. 
A)  Use a CloudFront RTMP download distribution with the application tier as the origin for the distribution. 
B)  Set up an Auto Scaling group for the application tier and a policy that scales based on the Amazon EC2 CloudWatch CPU utilization metric. 
C)  Vertically scale up the Amazon EC2 instances manually. 
D)  Set up an Auto Scaling group for the application tier and a policy that scales based on the Amazon RDS CloudWatch CPU utilization metric. 
E)  Switch to General Purpose (SS
D)  Storage from Provisioned IOPS Storage (PIOPS) for the Amazon RDS database.
F) Use multiple Amazon RDS read replicas.

What needs to be done in order to remotely access a Docker daemon running on Linux?

What is the expected behavior if Ansible is called with 'ansible-playbook -i localhost playbook.yml'?

When thinking of AWS Elastic Beanstalk's model, which is true?

A user is creating a new EBS volume from an existing snapshot. The snapshot size shows 10 GB Can the user create a volume of 30 GB from that snapshot?

You are designing a service that aggregates clickstream data in batch and delivers reports to subscribers via email only once per week. Data is extremely spikey, geographically distributed, high-scale, and unpredictable. How should you design this system?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS Certified SysOps Administrator (SOA-C01)

Filters

Exam 12: AWS DevOps Engineer - Professional (DOP-C01)

What needs to be done in order to remotely access a Docker daemon running on Linux?

What is the expected behavior if Ansible is called with 'ansible-playbook -i localhost playbook.yml'?

When thinking of AWS Elastic Beanstalk's model, which is true?

A user is creating a new EBS volume from an existing snapshot. The snapshot size shows 10 GB Can the user create a volume of 30 GB from that snapshot?

You are designing a service that aggregates clickstream data in batch and delivers reports to subscribers via email only once per week. Data is extremely spikey, geographically distributed, high-scale, and unpredictable. How should you design this system?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS Certified SysOps Administrator (SOA-C01)

Filters