DevOps Engineering on AWS Certification MCQ Flashcards

Which AWS service enables you to model and provision AWS infrastructure resources using code in a declarative template format?

Answer: AWS CloudFormation

AWS CloudFormation lets you model, provision, and manage AWS resources by treating infrastructure as code using JSON or YAML templates.

A team wants to automatically trigger a pipeline in AWS CodePipeline whenever a developer pushes code to an AWS CodeCommit repository. What is the recommended approach?

Answer: Configure a CloudWatch Events rule to detect repository state changes and trigger the pipeline

Amazon CloudWatch Events (EventBridge) rules detect CodeCommit push events and automatically invoke the CodePipeline execution in near real time.

When using AWS CodeDeploy with an in-place deployment strategy on EC2 instances, what happens to the application during the deployment?

Answer: The application on existing instances is stopped, updated, and restarted

In an in-place deployment, CodeDeploy stops the running application on each instance, installs the new revision, and restarts it on the same instance.

Which metric should a DevOps engineer monitor in Amazon SQS to determine if consumers are keeping up with the message production rate?

Answer: ApproximateAgeOfOldestMessage

ApproximateAgeOfOldestMessage measures how long the oldest unprocessed message has been in the queue, indicating processing lag when the value grows.

A DevOps engineer needs to enforce that all S3 buckets in an AWS account block public access. Which AWS service can automatically detect and remediate non-compliant buckets?

Answer: AWS Config with auto-remediation

AWS Config managed rules can detect S3 buckets that don't block public access, and auto-remediation using SSM Automation documents can fix them automatically.

Which deployment configuration in AWS CodeDeploy ensures that at least half of the instances remain in service during an in-place deployment?

Answer: CodeDeployDefault.HalfAtATime

CodeDeployDefault.HalfAtATime deploys to half the instances at a time, keeping the other half serving traffic throughout the deployment.

An application uses Amazon ECS with the Fargate launch type. A DevOps engineer wants to implement canary deployments. Which feature enables traffic shifting between task revisions?

Answer: AWS CodeDeploy blue/green deployment with an Application Load Balancer

CodeDeploy supports blue/green deployments for ECS Fargate by shifting traffic between two target groups on an ALB using canary, linear, or all-at-once strategies.