AWS DevOps Safety Systems & Standards 5

Question 1

Which AWS service should a DevOps team use to implement a Web Application Firewall that protects applications deployed behind an Application Load Balancer?

Accepted Answer

AWS WAF

Answer

AWS WAF integrates with Application Load Balancers and CloudFront to filter HTTP traffic using customizable rules that block common web exploits.

Question 2

A pipeline deploys a Lambda function that will process sensitive PII data. Which AWS tool should be used to assess the function's permissions for least-privilege compliance?

Accepted Answer

IAM Access Analyzer

Answer

IAM Access Analyzer analyzes resource-based policies and IAM policies to identify overly permissive access and generate least-privilege policy recommendations.

Question 3

Which deployment strategy minimizes risk by keeping the old environment live while the new version serves a small percentage of production traffic for validation?

Accepted Answer

Canary deployment

Answer

Canary deployments route a small fraction of production traffic to the new version, allowing real-world validation with limited blast radius before full rollout.

Question 4

AWS CodePipeline integrates with AWS CloudTrail. What specific safety benefit does this integration provide in a DevOps context?

Accepted Answer

It provides a tamper-evident audit trail of all pipeline actions and approvals

Answer

CloudTrail records every CodePipeline API call with actor identity and timestamp, creating an immutable audit log for compliance and incident investigation.

Question 5

A security team requires that all data in transit between microservices in an ECS cluster is encrypted. Which approach enforces this at the infrastructure level?

Accepted Answer

Configuring AWS App Mesh with TLS between service proxies

Answer

AWS App Mesh manages service-to-service communication and can enforce mutual TLS (mTLS) encryption between all Envoy proxies in an ECS cluster.

AWS Practice Test

AWS Practice Test

AWS DevOps Safety Systems & Standards 5