QUESTION: 45

A DevOps engineer has automated a web service deployment by using AWS CodePipeline with the following steps:
1. An AWS CodeBuild project compiles the deployment artifact and runs unit tests.
2. An AWS CodeDeploy deployment group deploys the web service to Amazon EC2 instances in the staging environment.
3. A CodeDeploy deployment group deploys the web service to EC2 instances in the production environment. The quality assurance (QA) team requests permission to inspect the build artifact before the deployment to the production environment occurs. The QA team wants to run an internal penetration testing tool to conduct manual tests. The tool will be invoked by a REST API call. Which combination of actions should the DevOps engineer take to ful ll this request? (Choose two.)

Insert a manual approval action between the test actions and deployment actions of the pipeline.
Modify the buildspec.yml le for the compilation stage to require manual approval before completion.
Update the CodeDeploy deployment groups so that they require manual approval to proceed.
Update the pipeline to directly call the REST API for the penetration testing tool.
Update the pipeline to invoke a Lambda function that calls the REST API for the penetration testing tool.

Answer(s): A,E

Reference:

https://docs.aws.amazon.com/codebuild/latest/userguide/sample-codedeploy.html

Reveal Solution Next Question

QUESTION: 46

A DevOps Engineer manages a large commercial website that runs on Amazon EC2. The website uses Amazon Kinesis Data Streams to collect and process web logs. The DevOps Engineer manages the Kinesis consumer application, which also runs on Amazon EC2. Sudden increases of data cause the Kinesis consumer application to fall behind, and the Kinesis data streams drop records before the records can be processed.
The DevOps Engineer must implement a solution to improve stream handling.
Which solution meets these requirements with the MOST operational e ciency?

Modify the Kinesis consumer application to store the logs durably in Amazon S3. Use Amazon EMR to process the data directly on Amazon S3 to derive customer insights. Store the results in Amazon S3.
Horizontally scale the Kinesis consumer application by adding more EC2 instances based on the Amazon CloudWatch GetRecords.IteratorAgeMilliseconds metric. Increase the retention period of the Kinesis Data Streams.
Convert the Kinesis consumer application to run as an AWS Lambda function. Con gure the Kinesis Data Streams as the event source for the Lambda function to process the data streams.
Increase the number of shards in the Kinesis Data Streams to increase the overall throughput so that the consumer application processes data faster.

Answer(s): B

Reveal Solution Next Question

QUESTION: 47

A company uses AWS Organizations to manage multiple accounts. Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant. A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present.
With solution will accomplish this?

Create an AWS CloudFormation template that de nes an AWS Inspector rule to check whether EBS encryption is enabled. Save the template to an Amazon S3 bucket that has been shared with all accounts within the company. Update the account creation script pointing to the CloudFormation template in Amazon S3.
Create an AWS Con g organizational rule to check whether EBS encryption is enabled and deploy the rule using the AWS CLI. Create and apply an SCP to prohibit stopping and deleting AWS Con g across the organization.
Create an SCP in Organizations. Set the policy to prevent the launch of Amazon EC2 instances without encryption on the EBS volumes using a conditional expression. Apply the SCP to all AWS accounts. Use Amazon Athena to analyze the AWS CloudTrail output, looking for events that deny an ec2:RunInstances action.
Deploy an IAM role to all accounts from a single trusted account. Build a pipeline with AWS CodePipeline with a stage in AWS Lambda to assume the IAM role, and list all EBS volumes in the account. Publish a report to Amazon S3.

Answer(s): B

Reveal Solution Next Question

QUESTION: 48

A company develops and maintains a web application using Amazon EC2 instances and an Amazon RDS for SQL Server DB instance in a single Availability
Zone. The resources need to run only when new deployments are being tested using AWS CodePipeline. Testing occurs one or more times a week and each test takes 2-3 hours to run. A DevOps engineer wants a solution that does not change the architecture components. Which solution will meet these requirements in the MOST cost-effective manner?

Convert the RDS database to an Amazon Aurora Serverless database. Use an AWS Lambda function to start and stop the EC2 instances before and after tests.
Put the EC2 instances into an Auto Scaling group. Schedule scaling to run at the start of the deployment tests.
Replace the EC2 instances with EC2 Spot Instances and the RDS database with an RDS Reserved Instance.
Subscribe Amazon CloudWatch Events to CodePipeline to trigger AWS Systems Manager Automation documents that start and stop all EC2 and RDS instances before and after deployment tests.

Answer(s): D

Reference:

https://docs.amazonaws.cn/en_us/elasticbeanstalk/latest/dg/using-features.managing.as.html? lter- select=AWS%20Management%20Console

Reveal Solution Next Question

Free AWS-DEVOPS-ENGINEER-PROFESSIONAL Exam Braindumps (page: 12)

QUESTION: 45

Reference:

QUESTION: 46

QUESTION: 47

QUESTION: 48

Reference: