FREE DevOps Engineering on AWS Certification Questions and Answer

You have recently been assigned to manage the Automated resources that your organization has set up in AWS. You want to leverage some of the company's chef recipes for the existing OpsWorks stacks that are already set up in AWS. However, when you get to the recipes area, there is no possibility to add any recipes. What may be the cause of this?

The stack layers were created without the custom cookbooks option. Just change the layer settings accordingly.

Once you create a stack, you cannot assign custom recipe's, this needs to be done when the stack is created.

The stacks were created without the custom cookbooks option. Just change the stack settings accordingly.

Once you create layers in the stack, you cannot assign custom recipe's, this needs to be done when the layers are created.

Correct! Wrong!

AWS OpsWorks for Chef Automate allows you establish AWS-managed Chef servers with Chef Automate premium capabilities and manage them with the Chef DK and other Chef tools. A Chef server controls nodes in your environment, records node information, and acts as a central repository for your Chef cookbooks. The cookbooks include recipes that are executed by the Chef Infra client (chef-client) agent on each Chef-managed node. Chef tools such as knife and Test Kitchen may be used to manage nodes and cookbooks on a Chef server under the AWS OpsWorks for Chef Automate service.

You're working on a personal project. The application is hosted in an Auto Scaling group. There is only one instance in the ASG, and the EC2 instance may be canceled and restarted at any moment. When a new instance is launched in the ASG, the EC2 DNS name and IP address are updated. You own a hosted zone in redirect 53 and intend to construct a record set to redirect internal traffic to the instance. Which approach of dynamically updating the record set is the most cost-effective?

Create a T2.micro EC2 instance to periodically check the Auto Scaling group. If there is a new EC2 instance launched, update the Route 53 record set with the new IP address.

Configure a CloudWatch Event rule to monitor the Auto Scaling events. The CloudWatch Event rule triggers a Lambda function to point the CNAME in the record set to the private DNS of the new EC2 instance.

Create a network load balancer to point to the Auto Scaling group. Create an Alias record that routes the traffic to the load balancer.

Correct! Wrong!

In this case, a low-cost technique is necessary. Option A is wrong because Option B is more affordable since the T2.micro EC2 instance is not essential for the combos of CloudWatch Event + Lambda Function.

You are creating CloudFormation templates for your enterprise. The CloudFormation template creates EC2 Instances in the same region for your development and production environments. Each of these instances will be assigned an Elastic IP and a security group using CloudFormation. Your CloudFormation stack for the development environment is successfully produced, however the production CloudFormation stack fails. Which of the following might be the cause of this?

You hit the soft limit for security groups when creating the development environment.

You didn't choose the Production version of the AMI you are using when creating the production stack.

You have chosen the wrong tags when creating the instances in both environments.

You hit the soft limit of 5 EIPs per region when creating the development environment.

Correct! Wrong!

The most likely explanation is that you have reached the region's Elastic IP limit.

You work as a DevOps Engineer for your organization. You've been tasked with developing a continuous integration and continuous delivery model for the application in your firm. You'll need an AWS service to build up the pipelines and describe each stage. Which of the following services is best?

AWS Code Pipeline

AWS Code Commit

AWS Code Deploy

AWS SQS

Correct! Wrong!

AWS Code Pipeline is a continuous delivery service that allows you to model, visualize, and automate the procedures necessary for software release. The various steps of a software release process may be simply modeled and configured. Code Pipeline improves the actions needed to continually build software modifications.

Your company has an AWS-hosted application that uses DynamoDB. The IT security department has mandated that all source IP addresses that make calls to the DynamoDB tables be logged. Which of the following services may be utilized to meet this requirement?

AWS Code Commit

AWS CLoudWatch

AWS Code Pipeline

AWS CLoudTrail

Correct! Wrong!

When you create an AWS account, CloudTrail is activated. When something happens in your AWS account, it's logged as a CloudTrail event. In the CloudTrail console, browse to Event history to examine the last 90 days of recorded API activity (management events) in an AWS Region.

The "Low Utilization Amazon EC2 Instances" updates in your AWS account are raised by the Trusted Advisor. You verify the EC2 instances and discover that some should be ended since they are no longer in use. You want to automate this process so that anytime Trusted Advisor detects a low usage EC2 instance, the instance ends and you are notified via email. Which of the following approaches is the best?

Create an AWS Config rule to check the Trusted Advisor Low Utilization warning status. Configure the remediation action that automatically stops the instances.

Use CloudFormation to set up a Lambda function that gets the Low Utilization EC2 instances status in Trusted Advisor and stops the instances. Trigger the Lambda function periodically.

Configure Amazon CloudWatch Event and AWS Lambda to monitor the Low Utilization EC2 instances Trusted Advisor check. Use the Lambda to stop the instances.

Use CloudFormation to create an Amazon CloudWatch Event. Register the SSM Run Command as its target to shut down the low utilization EC2 instances.

Correct! Wrong!

With CloudWatch Events and AWS Lambda, users may automatically stop EC2 instances that have low usage as indicated by Trusted Advisor.

Which of the following services may be utilized to determine the health of an application in an AWS Blue Green deployment?

AWS Code Pipeline

AWS CloudTrail

AWS CloudWatch

AWS Code Commit

Correct! Wrong!

Amazon CloudWatch is a service that monitors AWS resources and applications. CloudWatch gathers and visualizes data, ingests and monitors log files, and creates alarms. It gives system-wide insight into resource use, application performance, and operational health, all of which are critical for detecting application health early in blue/green deployments.

FREE DevOps Engineering on AWS Certification Questions and Answer

You work as a DevOps Engineer for your organization. You've been tasked with developing a continuous integration and continuous delivery model for the application in your firm. You'll need an AWS service to build up the pipelines and describe each stage. Which of the following services is best?

Your company has an AWS-hosted application that uses DynamoDB. The IT security department has mandated that all source IP addresses that make calls to the DynamoDB tables be logged. Which of the following services may be utilized to meet this requirement?

Which of the following services may be utilized to determine the health of an application in an AWS Blue Green deployment?

Related Post