Question 1

Which of these is not an instrinsic function in AWS CloudFormation?

Accepted Answer

A)  Fn::Equals 
B)  Fn::If 
C)  Fn::Not 
D)  Fn::Parse 
A)  Fn::Equals 
B)  Fn::If 
C)  Fn::Not 
D)  Fn::Parse

Question 2

A company requires that its internally facing web application be highly available. The architecture is made up of one Amazon EC2 web server instance and one NAT instance that provides outbound internet access for updates and accessing public data. Which combination of architecture adjustments should the company implement to achieve high availability? (Choose two.)

Accepted Answer

A)  Add the NAT instance to an EC2 Auto Scaling group that spans multiple Availability Zones. Update the route tables. 
B)  Create additional EC2 instances spanning multiple Availability Zones. Add an Application Load Balancer to split the load between them. 
C)  Configure an Application Load Balancer in front of the EC2 instance. Configure Amazon CloudWatch alarms to recover the EC2 instance upon host failure. 
D)  Replace the NAT instance with a NAT gateway in each Availability Zone. Update the route tables. 
E)  Replace the NAT instances with a NAT gateway that spans multiple Availability Zones. Update the route tables. 
A)  Add the NAT instance to an EC2 Auto Scaling group that spans multiple Availability Zones. Update the route tables. 
B)  Create additional EC2 instances spanning multiple Availability Zones. Add an Application Load Balancer to split the load between them. 
C)  Configure an Application Load Balancer in front of the EC2 instance. Configure Amazon CloudWatch alarms to recover the EC2 instance upon host failure. 
D)  Replace the NAT instance with a NAT gateway in each Availability Zone. Update the route tables. 
E)  Replace the NAT instances with a NAT gateway that spans multiple Availability Zones. Update the route tables.

Question 3

Your application uses Amazon SQS and Auto Scaling to process background jobs. The Auto Scaling policy is based on the number of messages in the queue, with a maximum Instance count of 100. Since the application was launched, the group has never scaled above 50. The Auto Scaling group has now scaled to 100, the queue size is increasing, and very few Jobs are being completed. The number of messages being sent to the queue is at normal levels. What should you do to identify why the queue size is unusually high, and to reduce it?

Accepted Answer

A)  Temporarily increase the Auto Scaling group's desired value to 200. When the queue size has been reduced, reduce it to 50. 
B)  Analyze the application logs to identify possible reasons for message processing failure and resolve the cause for failures. 
C)  Create additional Auto Scaling groups, enabling the processing of the queue to be performed in parallel. 
D)  Analyze CloudTrail logs for Amazon SQS to ensure that the instances' Amazon EC2 role has permission to receive messages from the queue. 
A)  Temporarily increase the Auto Scaling group's desired value to 200. When the queue size has been reduced, reduce it to 50. 
B)  Analyze the application logs to identify possible reasons for message processing failure and resolve the cause for failures. 
C)  Create additional Auto Scaling groups, enabling the processing of the queue to be performed in parallel. 
D)  Analyze CloudTrail logs for Amazon SQS to ensure that the instances' Amazon EC2 role has permission to receive messages from the queue.

Question 4

A DevOps Engineer is deploying an Amazon API Gateway API with an AWS Lambda function providing the backend functionality. The Engineer needs to record the source IP address and response status of every API call. Which combination of actions should the DevOps Engineer take to implement this functionality? (Choose three.)

Accepted Answer

A)  Configure AWS X-Ray to enable access logging for the API Gateway requests. 
B)  Configure the API Gateway stage to enable access logging and choose a logging format. 
C)  Create a new Amazon CloudWatch Logs log group or choose an existing log group to store the logs. 
D)  Grant API Gateway permission to read and write logs to Amazon CloudWatch through an IAM role. 
E)  Create a new Amazon S3 bucket or choose an existing S3 bucket to store the logs.
F) Configure API Gateway to stream its log data to Amazon Kinesis. 
A)  Configure AWS X-Ray to enable access logging for the API Gateway requests. 
B)  Configure the API Gateway stage to enable access logging and choose a logging format. 
C)  Create a new Amazon CloudWatch Logs log group or choose an existing log group to store the logs. 
D)  Grant API Gateway permission to read and write logs to Amazon CloudWatch through an IAM role. 
E)  Create a new Amazon S3 bucket or choose an existing S3 bucket to store the logs.
F) Configure API Gateway to stream its log data to Amazon Kinesis.

Question 5

Which statement is true about configuring proxy support for Amazon Inspector agent on a Windows-based system?

Accepted Answer

A)  Amazon Inspector agent supports proxy usage on Windows-based systems through the use of the WinHTTP proxy. 
B)  Amazon Inspector agent supports proxy usage on Linux-based systems but not on Windows. 
C)  Amazon Inspector proxy support on Windows-based systems is achieved through installing proxy-enabled version of the agent which comes with preconfigured files that you need to edit to match your environment. 
D)  Amazon Inspector agent supports proxy usage on Windows-based systems through awsagent.env configuration file. 
A)  Amazon Inspector agent supports proxy usage on Windows-based systems through the use of the WinHTTP proxy. 
B)  Amazon Inspector agent supports proxy usage on Linux-based systems but not on Windows. 
C)  Amazon Inspector proxy support on Windows-based systems is achieved through installing proxy-enabled version of the agent which comes with preconfigured files that you need to edit to match your environment. 
D)  Amazon Inspector agent supports proxy usage on Windows-based systems through awsagent.env configuration file.

Question 6

Which resource cannot be defined in an Ansible Playbook?

Accepted Answer

A)  Fact Gathering State 
B)  Host Groups 
C)  Inventory File 
D)  Variables 
A)  Fact Gathering State 
B)  Host Groups 
C)  Inventory File 
D)  Variables

Question 7

You run a 2000-engineer organization. You are about to begin using AWS at a large scale for the first time. You want to integrate with your existing identity management system running on Microsoft Active Directory, because your organization is a power-user of Active Directory. How should you manage your AWS identities in the most simple manner?

Accepted Answer

A)  Use a large AWS Directory Service Simple AD. 
B)  Use a large AWS Directory Service AD Connector. 
C)  Use an Sync Domain running on AWS Directory Service. 
D)  Use an AWS Directory Sync Domain running on AWS Lambda 
A)  Use a large AWS Directory Service Simple AD. 
B)  Use a large AWS Directory Service AD Connector. 
C)  Use an Sync Domain running on AWS Directory Service. 
D)  Use an AWS Directory Sync Domain running on AWS Lambda

Question 8

An Application team is refactoring one of its internal tools to run in AWS instead of on-premises hardware. All of the code is currently written in Python and is standalone. There is also no external state store or relational database to be queried. Which deployment pipeline incurs the LEAST amount of changes between development and production?

Accepted Answer

A)  Developers should use Docker for local development. When dependencies are changed and a new container is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to Amazon ECR. Use AWS CloudFormation with the custom container to deploy the new Amazon ECS. 
B)  Developers should use Docker for local development. Use AWS SMS to import these containers as AMIs for Amazon EC2 whenever dependencies are updated. Use AWS CodePipeline to test new code changes against the Auto Scaling group. 
C)  Developers should use their native Python environment. When Dependencies are changed and a new container is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to the Amazon ECR. Use AWS CloudFormation with the custom container to deploy the new Amazon ECS. 
D)  Developers should use their native Python environment. When Dependencies are changed and a new code is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to the Amazon ECR. Use CodePipeline and CodeBuild with the custom container to test new code changes inside AWS Elastic Beanstalk. 
A)  Developers should use Docker for local development. When dependencies are changed and a new container is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to Amazon ECR. Use AWS CloudFormation with the custom container to deploy the new Amazon ECS. 
B)  Developers should use Docker for local development. Use AWS SMS to import these containers as AMIs for Amazon EC2 whenever dependencies are updated. Use AWS CodePipeline to test new code changes against the Auto Scaling group. 
C)  Developers should use their native Python environment. When Dependencies are changed and a new container is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to the Amazon ECR. Use AWS CloudFormation with the custom container to deploy the new Amazon ECS. 
D)  Developers should use their native Python environment. When Dependencies are changed and a new code is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to the Amazon ECR. Use CodePipeline and CodeBuild with the custom container to test new code changes inside AWS Elastic Beanstalk.

Question 9

An application is deployed on Amazon EC2 instances running in an Auto Scaling group. During the bootstrapping process, the instances register their private IP addresses with a monitoring system. The monitoring system performs health checks frequently by sending ping requests to those IP addresses and sending alerts if an instance becomes non-responsive. The existing deployment strategy replaces the current EC2 instances with new ones. A DevOps Engineer has noticed that the monitoring system is sending false alarms during a deployment, and is tasked with stopping these false alarms. Which solution will meet these requirements without affecting the current deployment method?

Accepted Answer

A)  Define an Amazon CloudWatch Events target, an AWS Lambda function, and a lifecycle hook attached to the Auto Scaling group. Configure CloudWatch Events to invoke Amazon SNS to send a message to the Systems Administrator group for remediation. 
B)  Define an AWS Lambda function and a lifecycle hook attached to the Auto Scaling group. Configure the lifecycle hook to invoke the Lambda function, which removes the entry of the private IP from the monitoring system upon instance termination. 
C)  Define an Amazon CloudWatch Events target, an AWS Lambda function, and a lifecycle hook attached to the Auto Scaling group. Configure CloudWatch Events to invoke the Lambda function, which removes the entry of the private IP from the monitoring system upon instance termination. 
D)  Define an AWS Lambda function that will run a script when instance termination occurs in an Auto Scaling group. The script will remove the entry of the private IP from the monitoring system. 
A)  Define an Amazon CloudWatch Events target, an AWS Lambda function, and a lifecycle hook attached to the Auto Scaling group. Configure CloudWatch Events to invoke Amazon SNS to send a message to the Systems Administrator group for remediation. 
B)  Define an AWS Lambda function and a lifecycle hook attached to the Auto Scaling group. Configure the lifecycle hook to invoke the Lambda function, which removes the entry of the private IP from the monitoring system upon instance termination. 
C)  Define an Amazon CloudWatch Events target, an AWS Lambda function, and a lifecycle hook attached to the Auto Scaling group. Configure CloudWatch Events to invoke the Lambda function, which removes the entry of the private IP from the monitoring system upon instance termination. 
D)  Define an AWS Lambda function that will run a script when instance termination occurs in an Auto Scaling group. The script will remove the entry of the private IP from the monitoring system.

Question 10

An ecommerce company uses a large number of Amazon EBS backed Amazon EC2 instances. To decrease manual work across all the instances, a DevOps Engineer is tasked with automating restart actions when EC2 instance retirement events are scheduled. How can this be accomplished?

Accepted Answer

A)  Create a scheduled Amazon CloudWatch Events rule to execute an AWS Systems Manager automation document that checks if any EC2 instances are scheduled for retirement once a week. If the instance is scheduled for retirement, the automation document will hibernate the instance. 
B)  Enable EC2 Auto Recovery on all of the instances. Create an AWS Config rule to limit the recovery to occur during a maintenance window only. 
C)  Reboot all EC2 instances during an approved maintenance window that is outside of standard business hours. Set up Amazon CloudWatch alarms to send a notification in case any instance is failing EC2 instance status checks. 
D)  Set up an AWS Health Amazon CloudWatch Events rule to execute AWS Systems Manager automation documents that stop and start the EC2 instance when a retirement scheduled event occurs. 
A)  Create a scheduled Amazon CloudWatch Events rule to execute an AWS Systems Manager automation document that checks if any EC2 instances are scheduled for retirement once a week. If the instance is scheduled for retirement, the automation document will hibernate the instance. 
B)  Enable EC2 Auto Recovery on all of the instances. Create an AWS Config rule to limit the recovery to occur during a maintenance window only. 
C)  Reboot all EC2 instances during an approved maintenance window that is outside of standard business hours. Set up Amazon CloudWatch alarms to send a notification in case any instance is failing EC2 instance status checks. 
D)  Set up an AWS Health Amazon CloudWatch Events rule to execute AWS Systems Manager automation documents that stop and start the EC2 instance when a retirement scheduled event occurs.

Question 11

A company is using AWS to deploy an application. The development team must automate the deployments. The team has created an AWS CodePipeline pipeline to deploy the application to Amazon EC2 instances using AWS CodeDeploy after it has been built using AWS CodeBuild. The team wants to add automated testing to the pipeline to confirm that the application is healthy before deploying the code to the EC2 instances. The team also requires a manual approval action before the application is deployed, even if the tests are successful. The testing and approval must be accomplished at the lowest costs, using the simplest management solution. Which solution will meet these requirements?

Accepted Answer

A)  Create a manual approval action after the build action of the pipeline. Use Amazon SNS to inform the team of the stage being triggered. Next, add a test action using CodeBuild to perform the required tests. At the end of the pipeline, add a deploy action to deploy the application to the next stage. 
B)  Create a test action after the CodeBuild build of the pipeline. Configure the action to use CodeBuild to perform the required test. If these tests are successful, mark the action as successful. Add a manual approval action that uses Amazon SNS to notify the team, and add a deploy action to deploy the application to the next stage. 
C)  Create a new pipeline that uses a source action that gets the code from the same repository as the first pipeline. Add a deploy action to deploy the code to a test environment. Use a test action using AWS Lambda to test the deployment. Add a manual approval action by using Amazon SNS to notify the team, and add a deploy action to deploy the application to the next stage. 
D)  Create a test action after the build action. Use a Jenkins server on Amazon EC2 to perform the required tests and mark the action as successful if the tests pass. Create a manual approval action that uses Amazon SQS to notify the team and add a deploy action to deploy the application to the next stage. 
A)  Create a manual approval action after the build action of the pipeline. Use Amazon SNS to inform the team of the stage being triggered. Next, add a test action using CodeBuild to perform the required tests. At the end of the pipeline, add a deploy action to deploy the application to the next stage. 
B)  Create a test action after the CodeBuild build of the pipeline. Configure the action to use CodeBuild to perform the required test. If these tests are successful, mark the action as successful. Add a manual approval action that uses Amazon SNS to notify the team, and add a deploy action to deploy the application to the next stage. 
C)  Create a new pipeline that uses a source action that gets the code from the same repository as the first pipeline. Add a deploy action to deploy the code to a test environment. Use a test action using AWS Lambda to test the deployment. Add a manual approval action by using Amazon SNS to notify the team, and add a deploy action to deploy the application to the next stage. 
D)  Create a test action after the build action. Use a Jenkins server on Amazon EC2 to perform the required tests and mark the action as successful if the tests pass. Create a manual approval action that uses Amazon SQS to notify the team and add a deploy action to deploy the application to the next stage.

Question 12

You need to implement A/B deployments for several multi-tier web applications. Each of them has its Individual infrastructure: Amazon Elastic Compute Cloud (EC2) front-end servers, Amazon ElastiCache clusters, Amazon Simple Queue Service (SQS) queues, and Amazon Relational Database (RDS) Instances. Which combination of services would give you the ability to control traffic between different deployed versions of your application?

Accepted Answer

A)  Create one AWS Elastic Beanstalk application and all AWS resources (using configuration files inside the application source bundle) for each web application. New versions would be deployed a-eating Elastic Beanstalk environments and using the Swap URLs feature. 
B)  Using AWS CloudFormation templates, create one Elastic Beanstalk application and all AWS resources (in the same template) for each web application. New versions would be deployed using AWS CloudFormation templates to create new Elastic Beanstalk environments, and traffic would be balanced between them using weighted Round Robin (WRR) records in Amazon Route53. 
C)  Using AWS CloudFormation templates, create one Elastic Beanstalk application and all AWS resources (in the same template) for each web application. New versions would be deployed updating a parameter on the CloudFormation template and passing it to the cfn-hup helper daemon, and traffic would be balanced between them using Weighted Round Robin (WRR) records in Amazon Route 53. 
D)  Create one Elastic Beanstalk application and all AWS resources (using configuration files inside the application source bundle) for each web application. New versions would be deployed updating the Elastic Beanstalk application version for the current Elastic Beanstalk environment. 
A)  Create one AWS Elastic Beanstalk application and all AWS resources (using configuration files inside the application source bundle) for each web application. New versions would be deployed a-eating Elastic Beanstalk environments and using the Swap URLs feature. 
B)  Using AWS CloudFormation templates, create one Elastic Beanstalk application and all AWS resources (in the same template) for each web application. New versions would be deployed using AWS CloudFormation templates to create new Elastic Beanstalk environments, and traffic would be balanced between them using weighted Round Robin (WRR) records in Amazon Route53. 
C)  Using AWS CloudFormation templates, create one Elastic Beanstalk application and all AWS resources (in the same template) for each web application. New versions would be deployed updating a parameter on the CloudFormation template and passing it to the cfn-hup helper daemon, and traffic would be balanced between them using Weighted Round Robin (WRR) records in Amazon Route 53. 
D)  Create one Elastic Beanstalk application and all AWS resources (using configuration files inside the application source bundle) for each web application. New versions would be deployed updating the Elastic Beanstalk application version for the current Elastic Beanstalk environment.

Question 13

For Amazon Inspector's integration with CloudTrail, what information is logged for List* and Describe* APIs?

Accepted Answer

A)  None. Amazon Inspector is an automated service and not monitored by CloudTrail. 
B)  Both request and response information is logged. 
C)  Only request information is logged. 
D)  Request information is always logged. Response information is logged only for Completed assessment runs. 
A)  None. Amazon Inspector is an automated service and not monitored by CloudTrail. 
B)  Both request and response information is logged. 
C)  Only request information is logged. 
D)  Request information is always logged. Response information is logged only for Completed assessment runs.

Question 14

You have an application running a specific process that is critical to the application's functionality, and have added the health check process to your Auto Scaling Group. The instances are showing healthy but the application itself is not working as it should. What could be the issue with the health check, since it is still showing the instances as healthy.

Accepted Answer

A)  You do not have the time range in the health check properly configured 
B)  It is not possible for a health check to monitor a process that involves the application 
C)  The health check is not configured properly 
D)  The health check is not checking the application process 
A)  You do not have the time range in the health check properly configured 
B)  It is not possible for a health check to monitor a process that involves the application 
C)  The health check is not configured properly 
D)  The health check is not checking the application process

Question 15

A DevOps Engineer needs to design and implement a backup mechanism for Amazon EFS. The Engineer is given the following requirements: The backup should run on schedule. The backup should be stopped if the backup window expires. The backup should be stopped if the backup completes before the backup window. The backup logs should be retained for further analysis. The design should support highly available and fault-tolerant paradigms. Administrators should be notified with backup metadata. Which design will meet these requirements?

Accepted Answer

A)  Use AWS Lambda with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in an Auto Scaling group. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading backup logs to Amazon S3. Use Amazon SNS to notify administrators with backup activity metadata. 
B)  Use Amazon SWF with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in an Auto Scaling group. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading backup logs to Amazon Redshift. Use CloudWatch Alarms to notify administrators with backup activity metadata. 
C)  Use AWS Data Pipeline with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in a single Availability Zone. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading the backup logs to Amazon RDS. Use Amazon SNS to notify administrators with backup activity metadata. 
D)  Use AWS CodePipeline with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in a single Availability Zone. Use Auto Scaling lifecycle hooks and the SSM Run Command on Amazon EC2 for uploading backup logs to Amazon S3. Use Amazon SES to notify admins with backup activity metadata. 
A)  Use AWS Lambda with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in an Auto Scaling group. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading backup logs to Amazon S3. Use Amazon SNS to notify administrators with backup activity metadata. 
B)  Use Amazon SWF with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in an Auto Scaling group. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading backup logs to Amazon Redshift. Use CloudWatch Alarms to notify administrators with backup activity metadata. 
C)  Use AWS Data Pipeline with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in a single Availability Zone. Use Auto Scaling lifecycle hooks and the SSM Run Command on EC2 for uploading the backup logs to Amazon RDS. Use Amazon SNS to notify administrators with backup activity metadata. 
D)  Use AWS CodePipeline with an Amazon CloudWatch Events rule for scheduling the start/stop of backup activity. Run backup scripts on Amazon EC2 in a single Availability Zone. Use Auto Scaling lifecycle hooks and the SSM Run Command on Amazon EC2 for uploading backup logs to Amazon S3. Use Amazon SES to notify admins with backup activity metadata.

Question 16

A DevOps Engineer has a single Amazon DynamoDB table that receives shipping orders and tracks inventory. The Engineer has three AWS Lambda functions reading from a DymamoDB stream on that table. The Lambda functions perform various functions such as doing an item count, moving items to Amazon Kinesis Data Firehose, monitoring inventory levels, and creating vendor orders when parts are low. While reviewing logs, the Engineer notices the Lambda functions occasionally fail under increased load, receiving a stream throttling error. Which is the MOST cost-effective solution that requires the LEAST amount of operational management?

Accepted Answer

A)  Use AWS Glue integration to ingest the DynamoDB stream, then migrate the Lambda code to an AWS Fargate task. 
B)  Use Amazon Kinesis streams instead of DynamoDB streams, then use Kinesis analytics to trigger the Lambda functions. 
C)  Create a fourth Lambda function and configure it to be the only Lambda reading from the stream. Then use this Lambda function to pass the payload to the other three Lambda functions. 
D)  Have the Lambda functions query the table directly and disable DynamoDB streams. Then have the Lambda functions query from a global secondary index. 
A)  Use AWS Glue integration to ingest the DynamoDB stream, then migrate the Lambda code to an AWS Fargate task. 
B)  Use Amazon Kinesis streams instead of DynamoDB streams, then use Kinesis analytics to trigger the Lambda functions. 
C)  Create a fourth Lambda function and configure it to be the only Lambda reading from the stream. Then use this Lambda function to pass the payload to the other three Lambda functions. 
D)  Have the Lambda functions query the table directly and disable DynamoDB streams. Then have the Lambda functions query from a global secondary index.

Question 17

A company hosts parts of a Python-based application using AWS Elastic Beanstalk. An Elastic Beanstalk CLI is being used to create and update the environments. The Operations team detected an increase in requests in one of the Elastic Beanstalk environments that caused downtime overnight. The team noted that the policy used for AWS Auto Scaling is NetworkOut . Based on load testing metrics, the team determined that the application needs to scale CPU utilization to improve the resilience of the environments. The team wants to implement this across all environments automatically. Following AWS recommendations, how should this automation be implemented?

Accepted Answer

A)  Using ebextensions, place a command within the container_commands key to perform an API call to modify the scaling metric to CPUUtilization for the Auto Scaling configuration. Use leader_only to execute this command in only the first instance launched within the environment. Using ebextensions, place a command within the container_commands key to perform an API call to modify the scaling metric to CPUUtilization for the Auto Scaling configuration. Use leader_only to execute this command in only the first instance launched within the environment. 
B)  Using ebextensions, create a custom resource that modifies the AWSEBAutoScalingScaleUpPolicy and AWSEBAutoScalingScaleDownPolicy resources to use CPUUtilization as a metric to scale for the Auto Scaling group. Using ebextensions, create a custom resource that modifies the AWSEBAutoScalingScaleUpPolicy and AWSEBAutoScalingScaleDownPolicy resources to use as a metric to scale for the Auto Scaling group. 
C)  Using ebextensions, configure the option setting MeasureName to CPUUtilization within the aws: autoscaling : trigger namespace. Using ebextensions, configure the option setting MeasureName to within the aws: autoscaling : trigger namespace. 
D)  Using ebextensions, place a script within the files key and place it in /opt/elasticbeanstalk/hooks/appdeploy/pre to perform an API call to modify the scaling metric to CPUUtilization for the Auto Scaling configuration. Use leader_only to place this script in only the first instance launched within the environment. Using ebextensions, place a script within the files key and place it in /opt/elasticbeanstalk/hooks/appdeploy/pre to perform an API call to modify the scaling metric to to place this script in only the first instance launched within the environment. 
A)  Using ebextensions, place a command within the container_commands key to perform an API call to modify the scaling metric to CPUUtilization for the Auto Scaling configuration. Use leader_only to execute this command in only the first instance launched within the environment. Using ebextensions, place a command within the container_commands key to perform an API call to modify the scaling metric to CPUUtilization for the Auto Scaling configuration. Use leader_only to execute this command in only the first instance launched within the environment. 
B)  Using ebextensions, create a custom resource that modifies the AWSEBAutoScalingScaleUpPolicy and AWSEBAutoScalingScaleDownPolicy resources to use CPUUtilization as a metric to scale for the Auto Scaling group. Using ebextensions, create a custom resource that modifies the AWSEBAutoScalingScaleUpPolicy and AWSEBAutoScalingScaleDownPolicy resources to use as a metric to scale for the Auto Scaling group. 
C)  Using ebextensions, configure the option setting MeasureName to CPUUtilization within the aws: autoscaling : trigger namespace. Using ebextensions, configure the option setting MeasureName to within the aws: autoscaling : trigger namespace. 
D)  Using ebextensions, place a script within the files key and place it in /opt/elasticbeanstalk/hooks/appdeploy/pre to perform an API call to modify the scaling metric to CPUUtilization for the Auto Scaling configuration. Use leader_only to place this script in only the first instance launched within the environment. Using ebextensions, place a script within the files key and place it in /opt/elasticbeanstalk/hooks/appdeploy/pre to perform an API call to modify the scaling metric to to place this script in only the first instance launched within the environment.

Question 18

A company runs an application with an Amazon EC2 and on-premises configuration. A DevOps Engineer needs to standardize patching across both environments. Company policy dictates that patching only happens during non-business hours. Which combination of actions will meet these requirements? (Choose three.)

Accepted Answer

A)  Add the physical machines into AWS Systems Manager using Systems Manager Hybrid Activations. 
B)  Attach an IAM role to the EC2 instances, allowing them to be managed by AWS Systems Manager. 
C)  Create IAM access keys for the on-premises machines to interact with AWS Systems Manager. 
D)  Execute an AWS Systems Manager Automation document to patch the systems every hour. 
E)  Use Amazon CloudWatch Events scheduled events to schedule a patch window.
F) Use AWS Systems Manager Maintenance Windows to schedule a patch window. 
A)  Add the physical machines into AWS Systems Manager using Systems Manager Hybrid Activations. 
B)  Attach an IAM role to the EC2 instances, allowing them to be managed by AWS Systems Manager. 
C)  Create IAM access keys for the on-premises machines to interact with AWS Systems Manager. 
D)  Execute an AWS Systems Manager Automation document to patch the systems every hour. 
E)  Use Amazon CloudWatch Events scheduled events to schedule a patch window.
F) Use AWS Systems Manager Maintenance Windows to schedule a patch window.

Question 19

A DevOps engineer used an AWS CloudFormation custom resource to set up AD Connector. The AWS Lambda function executed and created AD Connector, but CloudFormation is not transitioning from CREATE_IN_PROGRESS to CREATE_COMPLETE. Which action should the engineer take to resolve this issue?

Accepted Answer

A)  Ensure the Lambda function code has exited successfully. 
B)  Ensure the Lambda function code returns a response to the pre-signed URL. 
C)  Ensure the Lambda function IAM role has cloudformation:UpdateStack permissions for the stack ARN. 
D)  Ensure the Lambda function IAM role has ds:ConnectDirectory permissions for the AWS account. 
A)  Ensure the Lambda function code has exited successfully. 
B)  Ensure the Lambda function code returns a response to the pre-signed URL. 
C)  Ensure the Lambda function IAM role has cloudformation:UpdateStack permissions for the stack ARN. 
D)  Ensure the Lambda function IAM role has ds:ConnectDirectory permissions for the AWS account.

Question 20

Your system automatically provisions EIPs to EC2 instances in a VPC on boot. The system provisions the whole VPC and stack at once. You have two of them per VPC. On your new AWS account, your attempt to create a Development environment failed, after successfully creating Staging and Production environments in the same region. What happened?

Accepted Answer

A)  You didn't choose the Development version of the AMI you are using. 
B)  You didn't set the Development flag to true when deploying EC2 instances. 
C)  You hit the soft limit of 5 EIPs per region and requested a 6th. 
D)  You hit the soft limit of 2 VPCs per region and requested a 3rd. 
A)  You didn't choose the Development version of the AMI you are using. 
B)  You didn't set the Development flag to true when deploying EC2 instances. 
C)  You hit the soft limit of 5 EIPs per region and requested a 6th. 
D)  You hit the soft limit of 2 VPCs per region and requested a 3rd.

Which of these is not an instrinsic function in AWS CloudFormation?

Which statement is true about configuring proxy support for Amazon Inspector agent on a Windows-based system?

Which resource cannot be defined in an Ansible Playbook?

An ecommerce company uses a large number of Amazon EBS backed Amazon EC2 instances. To decrease manual work across all the instances, a DevOps Engineer is tasked with automating restart actions when EC2 instance retirement events are scheduled. How can this be accomplished?

For Amazon Inspector's integration with CloudTrail, what information is logged for List* and Describe* APIs?

A DevOps engineer used an AWS CloudFormation custom resource to set up AD Connector. The AWS Lambda function executed and created AD Connector, but CloudFormation is not transitioning from CREATE_IN_PROGRESS to CREATE_COMPLETE. Which action should the engineer take to resolve this issue?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS Certified SysOps Administrator (SOA-C01)

Filters

Exam 12: AWS DevOps Engineer - Professional (DOP-C01)

Which of these is not an instrinsic function in AWS CloudFormation?

Which statement is true about configuring proxy support for Amazon Inspector agent on a Windows-based system?

Which resource cannot be defined in an Ansible Playbook?

An ecommerce company uses a large number of Amazon EBS backed Amazon EC2 instances. To decrease manual work across all the instances, a DevOps Engineer is tasked with automating restart actions when EC2 instance retirement events are scheduled. How can this be accomplished?

For Amazon Inspector's integration with CloudTrail, what information is logged for List* and Describe* APIs?

A DevOps engineer used an AWS CloudFormation custom resource to set up AD Connector. The AWS Lambda function executed and created AD Connector, but CloudFormation is not transitioning from CREATE_IN_PROGRESS to CREATE_COMPLETE. Which action should the engineer take to resolve this issue?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS Certified SysOps Administrator (SOA-C01)

Filters