Free DevOps Engineering on AWS Certification Questions and Answer

Question 1

Which of the following services may be utilized to determine the health of an application in an AWS Blue Green deployment?

Accepted Answer

AWS CloudWatch

Answer

AWS Code Pipeline

Answer

AWS CloudTrail

Answer

AWS Code Commit

Question 2

You work as a DevOps Engineer for your organization. You've been tasked with developing a continuous integration and continuous delivery model for the application in your firm. You'll need an AWS service to build up the pipelines and describe each stage. Which of the following services is best?

Accepted Answer

AWS Code Pipeline

Answer

AWS Code Commit

Answer

AWS Code Deploy

Answer

AWS SQS

Question 3

You have recently been assigned to manage the Automated resources that your organization has set up in AWS. You want to leverage some of the company's chef recipes for the existing OpsWorks stacks that are already set up in AWS. However, when you get to the recipes area, there is no possibility to add any recipes. What may be the cause of this?

Accepted Answer

The stacks were created without the custom cookbooks option. Just change the stack settings accordingly.

Answer

The stack layers were created without the custom cookbooks option. Just change the layer settings accordingly.

Answer

Once you create a stack, you cannot assign custom recipe's, this needs to be done when the stack is created.

Answer

Once you create layers in the stack, you cannot assign custom recipe's, this needs to be done when the layers are created.

Question 4

Your company has an AWS-hosted application that uses DynamoDB. The IT security department has mandated that all source IP addresses that make calls to the DynamoDB tables be logged. Which of the following services may be utilized to meet this requirement?

Accepted Answer

AWS CLoudTrail

Answer

AWS Code Commit

Answer

AWS CLoudWatch

Answer

AWS Code Pipeline

Question 5

You're working on a personal project. The application is hosted in an Auto Scaling group. There is only one instance in the ASG, and the EC2 instance may be canceled and restarted at any moment. When a new instance is launched in the ASG, the EC2 DNS name and IP address are updated. You own a hosted zone in redirect 53 and intend to construct a record set to redirect internal traffic to the instance. Which approach of dynamically updating the record set is the most cost-effective?

Accepted Answer

Configure a CloudWatch Event rule to monitor the Auto Scaling events. The CloudWatch Event rule triggers a Lambda function to point the CNAME in the record set to the private DNS of the new EC2 instance.

Answer

Create a T2.micro EC2 instance to periodically check the Auto Scaling group. If there is a new EC2 instance launched, update the Route 53 record set with the new IP address.

Answer

Create a network load balancer to point to the Auto Scaling group. Create an Alias record that routes the traffic to the load balancer.

Answer

Create a network load balancer to point to the Auto Scaling group. Create an Alias record that routes the traffic to the load balancer.

Question 6

The "Low Utilization Amazon EC2 Instances" updates in your AWS account are raised by the Trusted Advisor. You verify the EC2 instances and discover that some should be ended since they are no longer in use. You want to automate this process so that anytime Trusted Advisor detects a low usage EC2 instance, the instance ends and you are notified via email. Which of the following approaches is the best?

Accepted Answer

Configure Amazon CloudWatch Event and AWS Lambda to monitor the Low Utilization EC2 instances Trusted Advisor check. Use the Lambda to stop the instances.

Answer

Create an AWS Config rule to check the Trusted Advisor Low Utilization warning status. Configure the remediation action that automatically stops the instances.

Answer

Use CloudFormation to set up a Lambda function that gets the Low Utilization EC2 instances status in Trusted Advisor and stops the instances. Trigger the Lambda function periodically.

Answer

Use CloudFormation to create an Amazon CloudWatch Event. Register the SSM Run Command as its target to shut down the low utilization EC2 instances.

Question 7

You are creating CloudFormation templates for your enterprise. The CloudFormation template creates EC2 Instances in the same region for your development and production environments. Each of these instances will be assigned an Elastic IP and a security group using CloudFormation. Your CloudFormation stack for the development environment is successfully produced, however the production CloudFormation stack fails. Which of the following might be the cause of this?

Accepted Answer

You hit the soft limit of 5 EIPs per region when creating the development environment.

Answer

You hit the soft limit for security groups when creating the development environment.

Answer

You didn't choose the Production version of the AMI you are using  when creating the production stack.

Answer

You have chosen the wrong tags when creating the instances in both environments.