AWS-DevOps Free Update With 100% Exam Passing Guarantee [2021]
[Sep-2021] Verified Amazon Exam Dumps with AWS-DevOps Exam Study Guide
NEW QUESTION 104
A company is creating a software solution that executes a specific parallel-processing mechanism. The software can scale to tens of servers in some special scenarios. This solution uses a proprietary library that is license-based, requiring that each individual server have a single, dedicated license installed. The company has 200 licenses and is planning to run 200 server nodes concurrently at most.
The company has requested the following features:
- A mechanism to automate the use of the licenses at scale.
- Creation of a dashboard to use in the future to verify which licenses are available at any moment.
What is the MOST effective way to accomplish these requirements'?
- A. Upload the licenses to a private Amazon S3 bucket. Populate an Amazon SQS queue with the list of licenses stored in S3. Create an AWS CloudFormation template that uses an Auto Scaling group to launch the servers. In the user data script acquire an available license from SQS. Create an Auto Scaling lifecycle hook, then use it to put the license back in SQS after the instance is terminated.
- B. Upload the licenses to a private Amazon S3 bucket. Create an AWS CloudFormation template with a Mappings section for the licenses. In the template, create an Auto Scaling group to launch the servers.
In the user data script, acquire an available license from the Mappings section. Create an Auto Scaling lifecycle hook, then use it to update the mapping after the instance is terminated. - C. Upload the licenses to an Amazon DynamoDB table. Create an AWS CloudFormation template that uses an Auto Scaling group to launch the servers. In the user data script, acquire an available license from the DynamoDB table. Create an Auto Scaling litecycle hook, then use it to update the mapping after the instance is terminated.
- D. Upload the licenses to an Amazon DynamoDB table. Create an AWS CLI script to launch the servers by using the parameter --count, with min:max instances to launch. In the user data script, acquire an available license from the DynamoDB table. Monitor each instance and, in case of failure, replace the instance, then manually update the DynamoDB table.
Answer: C
NEW QUESTION 105
A company has 100 GB of log data in an Amazon S3 bucket stored in .csv format. SQL developers want to query this data and generate graphs to visualize it. They also need an efficient, automated way to store metadata from the .csv file.
Which combination of steps should be taken to meet these requirements with the LEAST amount of effort? (Select THREE.)
- A. Filter the data through AWS X-Ray to visualize the data.
- B. Query the data with Amazon Athena.
- C. Query the data with Amazon Redshift.
- D. Filter the data through Amazon QuickSight to visualize the data.
- E. Use Amazon S3 as the persistent metadata store.
- F. Use AWS Glue as the persistent metadata store.
Answer: B,D,F
NEW QUESTION 106
During metric analysis, your team has determined that the company's website during peak hours is experiencing response times higher than anticipated. You currently rely on Auto Scaling to make sure that you are scaling your environment during peak windows. How can you improve your Auto Scaling policy to reduce this high response time? Choose 2 answers.
- A. Push custom metrics to CloudWatch to monitor your CPU and network bandwidth from your servers, which will allow your Auto Scaling policy to have betterfine-grain insight.
- B. IncreaseyourAutoScalinggroup'snumberofmaxservers.
- C. Push custom metrics to CloudWatch for your application that include more detailed information about your web application, such as how many requests it is handling and how many are waiting to be processed.
- D. Create a script that runs and monitors your servers; when it detects an anomaly in load, it posts to an Amazon SNS topic that triggers Elastic Load Balancing to add more servers to the load balancer.
Answer: B,C
Explanation:
Option B makes sense because maybe the max servers is low hence the application cannot handle the peak load.
Option D helps in ensuring Autoscaling can scale the group on the right metrics.
For more information on Autoscaling health checks, please refer to the below document link: from AWS
http://docs.aws.a mazon.com/autoscaling/latest/userguide/healthcheck.html
NEW QUESTION 107
A DevOps Engineer wants to prevent Developers from pushing updates directly to the company's master branch in AWS CodeCommit. These updates should be approved before they are merged.
Which solution will meet these requirements?
- A. Configure an IAM role for the Developers to use feature branches and create a pull request when a feature is complete. Allow CodeCommit to test all code in the feature branches, and issue a new AWS Security Token Service (STS) token allowing a one-time API call to merge the feature branches into the master. Allow an approver to use CodeCommit to view the changes and approve the pull requests.
- B. Configure an IAM role for the Developers to use feature branches and create a pull request when a feature is complete. Allow CodeCommit to test all code in the feature branches, and dynamically modify the IAM role to allow merging the feature branches into the master. Allow an approver to use CodeCommit to view the changes and approve the pull requests.
- C. Configure an IAM role for the Developers with access to CodeCommit and attach an access policy to the CodeCommit repository that denies the Developers role access when the reference is master.
Allow Developers to use feature branches and create a pull request when a feature is complete.
Allow an approver to use CodeCommit to view the changes and approve the pull requests. - D. Configure an IAM role for the Developers with access to CodeCommit and an explicit deny for write actions when the reference is the master. Allow Developers to use feature branches and create a pull request when a feature is complete. Allow an approver to use CodeCommit to view the changes and approve the pull requests.
Answer: C
NEW QUESTION 108
You run operations for a company that processes digital wallet payments at a very high volume. One
second of downtime, during which you drop payments or are otherwise unavailable, loses you on average
USD 100. You balance the financials of the transaction system once per day. Which database setup is
best suited to address this business risk?
- A. A multi-region, multi-master, active-active DynamoDB configuration using application control-level
BASE design principles with change-stream write queue buffers for replication. - B. A multi-AZ DynamoDB setup with changes streamed to S3 via AWS Kinesis, for highly durable storage
and BASE properties. - C. A multi-AZ RDS deployment with synchronous replication to multiple standbys and read-replicas for
fast failover and ACID properties. - D. A multi-region, multi-master, active-active RDS configuration using database-level ACID design
principles with database trigger writes for replication.
Answer: A
Explanation:
Only the multi-master, multi-region DynamoDB answer makes sense. Multi-AZ deployments do not
provide sufficient availability when a business loses USD 360,000 per hour of unavailability. As RDS does
not natively support multi-region, and ACID does not perform well/at all over large distances between
regions, only the DynamoDB answer works.
Reference:
http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Streams.CrossRegionRepl.html
NEW QUESTION 109
What is a circular dependency in AWS CloudFormation?
- A. When Nested Stacks depend on each other.
- B. When a Template references a region, which references the original Template.
- C. When Resources form a DependOn loop.
- D. When a Template references an earlier version of itself.
Answer: C
Explanation:
To resolve a dependency error, add a DependsOn attribute to resources that depend on other resources in your template. In some cases, you must explicitly declare dependencies so that AWS CloudFormation can create or delete resources in the correct order. For example, if you create an Elastic IP and a VPC with an Internet gateway in the same stack, the Elastic IP must depend on the Internet gateway attachment. For additional information, see DependsOn Attribute.
Reference:
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troubleshooting.html#trouble%20shootin
%20g-errors-dependence-error
NEW QUESTION 110
You work for a startup that has developed a new photo-sharing application for mobile devices.
Over recent months your application has increased in popularity; this has resulted in a decrease in the performance of the application clue to the increased load.
Your application has a two-tier architecture that is composed of an Auto Scaling PHP application tier and a MySQL RDS instance initially deployed with AWS CloudFormation.
Your Auto Scaling group has a min value of 4 and a max value of 8. The desired capacity is now at 8 because of the high CPU utilization of the instances.
After some analysis, you are confident that the performance issues stem from a constraint in CPU capacity, although memory utilization remains low.
You therefore decide to move from the general-purpose M3 instances to the compute-optimized C3 instances.
How would you deploy this change while minimizing any interruption to your end users?
- A. Update the launch configuration specified in the AWS CloudFormation template with the new C3 instance type.
Also add an UpdatePolicy attribute to your Auto Scaling group that specifies AutoScalingRollingUpdate.
Run a stack update with the new template. - B. Sign into the AWS Management Console, and update the existing launch configuration with the new C3 instance type.
Add an UpdatePolicy attribute to your Auto Scaling group that specifies AutoScalingRollingUpdate. - C. Sign into the AWS Management Console, copy the old launch configuration, and create a new launch configuration that specifies the C3 instances.
Update the Auto Scaling group with the new launch configuration.
Auto Scaling will then update the instance type of all running instances. - D. Update the launch configuration specified in the AWS CloudFormation template with the new C3 instance type.
Run a stack update with the new template.
Auto Scaling will then update the instances with the new instance type.
Answer: A
NEW QUESTION 111
What is a circular dependency in AWS CloudFormation?
- A. When Nested Stacks depend on each other.
- B. When a Template references a region, which references the original Template.
- C. When Resources form a DependOn loop.
- D. When a Template references an earlier version of itself.
Answer: C
Explanation:
To resolve a dependency error, add a DependsOn attribute to resources that depend on other resources
in your template. In some cases, you must explicitly declare dependencies so that AWS CloudFormation
can create or delete resources in the correct order. For example, if you create an Elastic IP and a VPC
with an Internet gateway in the same stack, the Elastic IP must depend on the Internet gateway
attachment. For additional information, see DependsOn Attribute.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troubleshooting.html#troubleshootin
g-errors-dependence-error
NEW QUESTION 112
Your company wants to understand where cost is coming from in the company's production AWS account.
There are a number of applications and services running at any given time. Without expending too much initial development time, how best can you give the business a good understanding of which applications cost the most per month to operate?
- A. Use the AWS Price API and constantly running resource inventory scripts to calculate total price based on multiplication of consumed resources over time.
- B. Use custom CloudWatch Metrics in your system, and put a metric data point whenever cost is incurred.
- C. Create an automation script which periodically creates AWS Support tickets requesting detailed intra-month information about your bill.
- D. Use AWS Cost Allocation Tagging for all resources which support it. Use the Cost Explorer to analyze costs throughout the month.
Answer: D
Explanation:
Cost Allocation Tagging is a built-in feature of AWS, and when coupled with the Cost Explorer, provides a simple and robust way to track expenses. You can also use tags to filter views in Cost Explorer. Note that before you can filter views by tags in Cost Explorer, you must have applied tags to your resources and activate them, as described in the following sections. For more information about Cost Explorer, see Analyzing Your Costs with Cost Explorer.
Reference:
http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html
NEW QUESTION 113
You are a Devops engineer for your company. The company hosts a web application that is hosted on a single EC2 Instance. The end users are complaining of slow response times for the application. Which of the following can be used to effectively scale the application?
- A. UseAmazonRDS with the Multi-AZ feature.
- B. UseAutoscaling Groups to launch multiple instances and place them behind an ELB.
- C. UseAutoscaling launch configurations to launch multiple instances and place thembehing an ELB.
- D. UseCloudformation to deploy the app again with an Amazon RDS with the Multi-AZfeature.
Answer: B
Explanation:
Explanation
The AWS Documentation mentions the below
When you use Auto Scaling, you can automatically increase the size of your Auto Scalinggroup when demand goes up and decrease it when demand goes down. As Auto Scaling adds and removes CC2 instances, you must ensure that the traffic for your application is distributed across all of your CC2 instances. The Clastic Load Balancing service automatically routes incoming web traffic across such a dynamically changing number of L~C2 instances. Your load balancer acts as a single point of contact for all incoming traffic to the instances in your Auto Scalinggroup.
For more information on Autoscaling and ELB, please refer to the below link:
* http://docs.aws.a
mazon.com/autoscaling/latest/userguide/autosca I ing-load-balancer.html
NEW QUESTION 114
You are the IT administrator for your company. You have the responsibility of creating development
environments which would confirm to the LAMP development stack. The requirement is that the development
team always gets the latest version of the LAMP stack each time a new instance is launched. Which of the
following is an efficient and effective way to implement this requirement? Choose 2 answers from the options
given below
- A. Create a cloudformation template and use the cloud-init directives to download and the install the
LAMP stack packages. - B. Use the User data section and use a custom script which will be used to download the necessary LAMP
stack packages. - C. Create an EBS Volume with the LAMP stack and attach it to an instance whenever it is required.
- D. Create an AMI with all the artifacts of the LAMP stack and provide an instance to the development team
based on the AMI.
Answer: A,B
Explanation:
Explanation
Using User data and cloud-init directives you can always ensure you download the latest version of the LAMP
stack and give it to the development teams. With AMI's
you will always have the same version and will need to create an AMI everytime the version of the LAMP
stack changes.
The AWS Documentation mentions
When you launch an instance in Amazon CC2, you have the option of passing user data to the instance that
can be used to perform common automated
configuration tasks and even run scripts after the instance starts. You can pass two types of user data to
Amazon CC2: shell scripts and cloud-init directives. You can
also pass this data into the launch wizard as plain text, as a file (this is useful for launching instances using the
command line tools), or as base64-encoded text (for
API calls).
For more information on User data please refer to the below link:
* http://docs.aws.amazon.com/AWSCC2/latest/UserGuide/user-data.
html
NEW QUESTION 115
An application is running on Amazon EC2. It has an attached IAM role that is receiving an AccessDenied error while trying to access a SecureString parameter resource in the AWS Systems Manager Parameter Store. The SecureString parameter is encrypted with a customer-managed Customer Master Key (CMK), What steps should the DevOps Engineer take to grant access to the role while granting least privilege?
(Choose three.)
- A. Set ssm:GetParamterfor the parameter resource in the instance role's IAM policy.
- B. Set kms:Decryptfor the customer-managed CMK resource in the role's IAM policy.
- C. Set kms:Decryptfor the instance role in the customer-managed CMK policy.
- D. Set kms:Decryptfor the parameter resource in the customer-managed CMK policy.
- E. Set ssm:DecryptParameterfor the parameter resource in the instance role IAM policy.
- F. Set kms:GenerateDataKeyfor the user on the AWS managed SSM KMS key.
Answer: A,B,C
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-access.html
NEW QUESTION 116
You are creating a cloudformation templates which takes in a database password as a parameter. How can you
ensure that the password is not visible when anybody tries to describes the stack
- A. Usethe hidden property for the parameter value
- B. Setthe hidden attribute for the Cloudformation resource.
- C. Usethe password attribute for the resource
- D. Usethe NoEcho property for the parameter value
Answer: D
Explanation:
Explanation
The AWS Documentation mentions
For sensitive parameter values (such as passwords), set the NoEcho property to true. That way, whenever
anyone describes your stack, the parameter value is shown
as asterisks (***").
For more information on Cloudformation parameters, please visit the below URL:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/parameters-section-structure.html
NEW QUESTION 117
Management has reported an increase in the monthly bill from Amazon Web Services, and they are extremely concerned with this increased cost. Management has asked you to determine the exact cause of this increase. After reviewing the billing report, you notice an increase in the data transfer cost. How can you provide management with a better insight into data transfer use?
- A. Deliver custom metrics to Amazon CloudWatch per application that breaks down application data transfer into multiple, more specific data points.
D- Using Amazon CloudWatch metrics, pull your Elastic Load Balancing outbound data transfer metrics monthly, and include them with your billing report to show which application is causing higher bandwidth usage. - B. Update your Amazon CloudWatch metrics to use five-second granularity, which will give better detailed metrics that can be combined with your billing data to pinpoint anomalies.
- C. Use Amazon CloudWatch Logs to run a map-reduce on your logs to determine high usage and data transfer.
Answer: A
Explanation:
You can publish your own metrics to CloudWatch using the AWS CLI or an API. You can view statistical graphs of your published metrics with the AWS Management Console.
CloudWatch stores data about a metric as a series of data points. Each data point has an associated time stamp. You can even publish an aggregated set of data points called a statistic set.
If you have custom metrics specific to your application, you can give a breakdown to the management on the exact issue.
Option A won't be sufficient to provide better insights.
Option B is an overhead when you can make the application publish custom metrics Option D is invalid because just the ELB metrics will not give the entire picture For more information on custom metrics, please refer to the below document link: from AWS
http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/publ ishingMetrics.htmI
NEW QUESTION 118
For AWS Auto Scaling, what is the first transition state an existing instance enters after leaving steady
state in Standby mode?
- A. EnteringStandby
- B. Detaching
- C. Terminating:Wait
- D. Pending
Answer: D
Explanation:
You can put any instance that is in an InService state into a Standby state. This enables you to remove
the instance from service, troubleshoot or make changes to it, and then put it back into service. Instances
in a Standby state continue to be managed by the Auto Scaling group. However, they are not an active
part of your application until you put them back into service.
Reference:
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/AutoScalingGroupLifecycle.html
NEW QUESTION 119
An Information Security policy requires that all publicly accessible systems be patched with critical OS security patches within 24 hours of a patch release. All instances are tagged with the Patch Group key set to 0. Two new AWS Systems Manager patch baselines for Windows and Red Hat Enterprise Linux (RHEL) with zero-day delay for security patches of critical severity were created with an auto-approval rule. Patch Group 0 has been associated with the new patch baselines.
Which two steps will automate patch compliance and reporting? (Select TWO.)
- A. Use the AWS Systems Manager Run Command to associate the AWS-ApplyPatchBaseline document with instances tagged with Patch Group 0.
- B. Create an AWS Systems Manager Maintenance Window and add a target with Patch Group 0. Add a task that runs the AWS-ApplyPatchBaseline document with a daily schedule.
- C. Create an AWS Systems Manager State Manager configuration. Associate the AWS- RunPatchBaseline task with the configuration and add a target with Patch Group 0.
- D. Create an AWS Systems Manager Maintenance Window and add a target with Patch Group 0. Add a task that runs the AWS-InstallWindowsUpdates document with a daily schedule.
- E. Create an AWS Systems Manager Maintenance Window with a daily schedule and add a target with Patch Group 0. Add a task that runs the AWS-RunPatchBaseline document with the Install action.
Answer: C,E
Explanation:
AWS-ApplyPatchBaseline and AWS-InstallWindowsUpdates only support Windows instances.
Only AWS-RunPatchBaseline supports both Windows and Linux systems as well.
https://docs.aws.amazon.com/ja_jp/systems-manager/latest/userguide/patch-manager-about- aws-runpatchbaseline.html
NEW QUESTION 120
A company has a mission-critical application on AWS that uses automatic scaling. The company wants the deployment lifecycle to meet the following parameters:
- The application must be deployed one instance at a time to ensure the remaining fleet continues to serve traffic.
- The application is CPU intensive and must be closely monitored.
- The deployment must automatically roll back if the CPU utilization of the deployment instance exceeds 85%.
Which solution will meet these requirements?
- A. Use AWS CloudFormation to create an AWS Step Functions state machine and Auto Scaling lifecycle hooks to move to one instance at a time into a wait state.
Use AWS Systems Manager automation to deploy the update to each instance and move it back into the Auto Scaling group using the heartbeat timeout. - B. Use AWS CodeDeploy with Amazon EC2 Auto Scaling.
Configure an alarm tied to the CPU utilization metric.
Use the CodeDeployDefault.OneAtAtime configuration as a deployment strategy.
Configure automatic rollbacks within the deployment group to roll back the deployment if the alarm thresholds are breached. - C. Use AWS Elastic Beanstalk for load balancing and AWS Auto Scaling.
Configure an alarm tied to the CPU utilization metric.
Configure rolling deployments with a fixed batch size of one instance.
Enable enhanced health to monitor the status of the deployment and roll back based on the alarm previously created. - D. Use AWS Systems Manager to perform a blue/green deployment with Amazon EC2 Auto Scaling.
Configure an alarm tied to the CPU utilization metric.
Deploy updates one at a time.
Configure automatic rollbacks within the Auto Scaling group to roll back the deployment if the alarm thresholds are breached.
Answer: B
Explanation:
https://aws.amazon.com/about-aws/whats-new/2016/09/aws-codedeploy-introduces-deployment- monitoring-with-amazon-cloudwatch-alarms-and-automatic-deployment-rollback/
NEW QUESTION 121
Which of these techniques enables the fastest possible rollback times in the event of a failed deployment?
- A. Rolling; Immutable
- B. Canary or A/B
- C. Blue-Green
- D. Rolling; Mutable
Answer: C
Explanation:
AWS specifically recommends Blue-Green for super-fast, zero-downtime deploys - and thus rollbacks, which are redeploying old code.
You use various strategies to migrate the traffic from your current application stack (blue) to a new version of the application (green). This is a popular technique for deploying applications with zero downtime. https://d0.awsstatic.com/whitepapers/overview-of-deployment-options-on- aws.pdf
NEW QUESTION 122
You need to run a very large batch data processingjob one time per day. The source data exists entirely in S3, and the output of the processingjob should also be written to S3 when finished. If you need to version control this processingjob and all setup and teardown logic for the system, what approach should you use?.
- A. Model an AWSEMRjob in AWS CloudFormation.
- B. Model an AWS EMRjob in AWS OpsWorks.
- C. Model an AWS EMRjob in AWS CLI Composer.
- D. Model an AWSEMRjob in AWS Elastic Beanstalk.
Answer: A
Explanation:
Explanation
With AWS Cloud Formation, you can update the properties for resources in your existing stacks. These changes can range from simple configuration changes, such as updating the alarm threshold on a Cloud Watch alarm, to more complex changes, such as updating the Amazon Machine Image (AMI) running on an Amazon EC2 instance. Many of the AWS resources in a template can be updated, and we continue to add support for more.
For more information on Cloudformation version control, please visit the below URL:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/updating.stacks.waIkthrough.html
NEW QUESTION 123
You run a SIP-based telephony application that uses Amazon EC2 for its web tier and uses MySQL on Amazon RDS as its database.
The application stores only the authentication profile data for its existing users in the database and therefore is read-intensive.
Your monitoring system shows that your web instances and the database have high CPU utilization.
Which of the following steps should you take in order to ensure the continual availability of your application? Choose 2 answers
- A. Switch to General Purpose (SSD) Storage from Provisioned IOPS Storage (PIOPS) for the Amazon RDS database.
- B. Set up an Auto Scaling group for the application tier and a policy that scales based on the Amazon EC2 CloudWatch CPU utilization metric.
- C. Vertically scale up the Amazon EC2 instances manually.
- D. Use multiple Amazon RDS read replicas.
- E. Set up an Auto Scaling group for the application tier and a policy that scales based on the Amazon RDS CloudWatch CPU utilization metric.
- F. Use a CloudFront RTMP download distribution with the application tier as the origin for the distribution.
Answer: B,D
NEW QUESTION 124
......
Authentic Best resources for AWS-DevOps Online Practice Exam: https://www.passcollection.com/AWS-DevOps_real-exams.html
AWS-DevOps Test Engine Practice Exam: https://drive.google.com/open?id=1XXszKbGPUpZUX4cI9Ywbl37KJonMDjeL
