QUESTION: 61

A company wants to use AWS development tools to replace its current bash deployment scripts. The company currently deploys a LAMP application to a group of
Amazon EC2 instances behind an Application Load Balancer (ALB). During the deployments, the company unit tests the committed application, stops and starts services, unregisters and re-registers instances with the load balancer, and updates le permissions. The company wants to maintain the same deployment functionality through the shift to using AWS services.
Which solution will meet these requirements?

Use AWS CodeBuild to test the application. Use bash scripts invoked by AWS CodeDeploy's appspec.yml le to restart services, and deregister and register instances with the ALB. Use the appspec.yml le to update le permissions without a custom script.
Use AWS CodePipeline to move the application from the AWS CodeCommit repository to AWS CodeDeploy. Use CodeDeploy's deployment group to test the application, unregister and re-register instances with the ALB, and restart services. Use the appspec.yml le to update the permissions without a custom script.
Use AWS CodePipeline to move the application source code from the AWS CodeCommit repository to AWS CodeDeploy. Use CodeDeploy to test the application. Use CodeDeploy's appspec.yml le to restart services and update permissions without a custom script. Use AWS CodeBuild to unregister and re- register instances with the ALB.
Use AWS CodePipeline to trigger AWS CodeBuild to test the application. Use bash scripts invoked by AWS CodeDeploy's appspec.yml le to restart services. Unregister and re-register the instances in the AWS CodeDeploy deployment group with the ALB. Update the appspec.yml le to update le permissions without a custom script.

Answer(s): D

Reveal Solution Next Question

QUESTION: 62

A company gives its employees limited rights to AWS. DevOps engineers have the ability to assume an administrator role. For tracking purposes, the security team wants to receive a near-real-time noti cation when the administrator role is assumed.
How should this be accomplished?

Con gure AWS Con g to publish logs to an Amazon S3 bucket. Use Amazon Athena to query the logs and send a noti cation to the security team when the administrator role is assumed.
Con gure Amazon GuardDuty to monitor when the administrator role is assumed and send a noti cation to the security team.
Create an Amazon EventBridge (Amazon CloudWatch Events) event rule using an AWS Management Console sign-in events event pattern that publishes a message to an Amazon SNS topic if the administrator role is assumed.
Create an Amazon EventBridge (Amazon CloudWatch Events) events rule using an AWS API call that uses an AWS CloudTrail event pattern to trigger an AWS Lambda function that publishes a message to an Amazon SNS topic if the administrator role is assumed.

Answer(s): D

Reference:

https://docs.aws.amazon.com/eventbridge/latest/userguide/user-guide.pdf

Reveal Solution Next Question

QUESTION: 63

An ecommerce company uses a large number of Amazon EBS backed Amazon EC2 instances. To decrease manual work across all the instances, a DevOps
Engineer is tasked with automating restart actions when EC2 instance retirement events are scheduled.
How can this be accomplished?

Create a scheduled Amazon CloudWatch Events rule to execute an AWS Systems Manager automation document that checks if any EC2 instances are scheduled for retirement once a week. If the instance is scheduled for retirement, the automation document will hibernate the instance.
Enable EC2 Auto Recovery on all of the instances. Create an AWS Con g rule to limit the recovery to occur during a maintenance window only.
Reboot all EC2 instances during an approved maintenance window that is outside of standard business hours. Set up Amazon CloudWatch alarms to send a noti cation in case any instance is failing EC2 instance status checks.
Set up an AWS Health Amazon CloudWatch Events rule to execute AWS Systems Manager automation documents that stop and start the EC2 instance when a retirement scheduled event occurs.

Answer(s): D

Reference:

https://aws.amazon.com/blogs/mt/automate-remediation-actions-for-amazon-ec2-noti cations-and-beyond-using-ec2-systems-manager- automation- and-aws-health/

Reveal Solution Next Question

QUESTION: 64

A company that runs many workloads on AWS has an Amazon EBS spend that has increased over time. The DevOps team notices there are many unattached
EBS volumes. Although there are workloads where volumes are detached, volumes over 14 days old are stale and no longer needed. A DevOps engineer has been tasked with creating automation that deletes unattached EBS volumes that have been unattached for 14 days.
Which solution will accomplish this?

Con gure the AWS Con g ec2-volume-inuse-check managed rule with a con guration changes trigger type and an Amazon EC2 volume resource target. Create a new Amazon CloudWatch Events rule scheduled to execute an AWS Lambda function in 14 days to delete the speci ed EBS volume.
Use Amazon EC2 and Amazon Data Lifecycle Manager to con gure a volume lifecycle policy. Set the interval period for unattached EBS volumes to 14 days and set the retention rule to delete. Set the policy target volumes as *.
Create an Amazon CloudWatch Events rule to execute an AWS Lambda function daily. The Lambda function should nd unattached EBS volumes and tag them with the current date, and delete unattached volumes that have tags with dates that are more than 14 days old.
Use AWS Trusted Advisor to detect EBS volumes that have been detached for more than 14 days. Execute an AWS Lambda function that creates a snapshot and then deletes the EBS volume.

Answer(s): C

Reveal Solution Next Question

Free AWS-DEVOPS-ENGINEER-PROFESSIONAL Exam Braindumps (page: 16)

QUESTION: 61

QUESTION: 62

Reference:

QUESTION: 63

Reference:

QUESTION: 64