QUESTION: 65

A company has multiple child accounts that are part of an organization in AWS Organizations. The security team needs to review every Amazon EC2 security group and their inbound and outbound rules. The security team wants to programmatically retrieve this information from the child accounts using an AWS Lambda function in the management account of the organization. Which combination of access changes will meet these requirements? (Choose three.)

Create a trust relationship that allows users in the child accounts to assume the management account IAM role.
Create a trust relationship that allows users in the management account to assume the IAM roles of the child accounts.
Create an IAM role in each child account that has access to the AmazonEC2ReadOnlyAccess managed policy.
Create an IAM role in each child account to allow the sts:AssumeRole action against the management account IAM role's ARN.
Create an IAM role in the management account that allows the sts:AssumeRole action against the child account IAM role's ARN.
Create an IAM role in the management account that has access to the AmazonEC2ReadOnlyAccess managed policy.

Answer(s): B,C,E

Explanation:

Reference:

https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html

Reveal Solution Next Question

QUESTION: 66

An application is deployed on Amazon EC2 instances running in an Auto Scaling group. During the bootstrapping process, the instances register their private IP addresses with a monitoring system. The monitoring system performs health checks frequently by sending ping requests to those IP addresses and sending alerts if an instance becomes non-responsive.
The existing deployment strategy replaces the current EC2 instances with new ones. A DevOps Engineer has noticed that the monitoring system is sending false alarms during a deployment, and is tasked with stopping these false alarms. Which solution will meet these requirements without affecting the current deployment method?

De ne an Amazon CloudWatch Events target, an AWS Lambda function, and a lifecycle hook attached to the Auto Scaling group. Con gure CloudWatch Events to invoke Amazon SNS to send a message to the Systems Administrator group for remediation.
De ne an AWS Lambda function and a lifecycle hook attached to the Auto Scaling group. Con gure the lifecycle hook to invoke the Lambda function, which removes the entry of the private IP from the monitoring system upon instance termination.
De ne an Amazon CloudWatch Events target, an AWS Lambda function, and a lifecycle hook attached to the Auto Scaling group. Con gure CloudWatch Events to invoke the Lambda function, which removes the entry of the private IP from the monitoring system upon instance termination.
De ne an AWS Lambda function that will run a script when instance termination occurs in an Auto Scaling group. The script will remove the entry of the private IP from the monitoring system.

Answer(s): C

Reference:

https://aws.amazon.com/blogs/compute/using-aws-lambda-with-auto-scaling-lifecycle-hooks/

Reveal Solution Next Question

QUESTION: 67

An e-commerce company is running a web application in an AWS Elastic Beanstalk environment. In recent months, the average load of the Amazon EC2 instances has been increased to handle more tra c.
The company would like to improve the scalability and resilience of the environment. The Development team has been asked to decouple long- running tasks from the environment if the tasks can be executed asynchronously. Examples of these tasks include con rmation emails when users are registered to the platform, and processing images or videos. Also, some of the periodic tasks that are currently running within the web server should be o oaded.
What is the MOST time-e cient and integrated way to achieve this?

Create an Amazon SQS queue and send the tasks that should be decoupled from the Elastic Beanstalk web server environment to the SQS queue. Create a eet of EC2 instances under an Auto Scaling group. Use an AMI that contains the application to process the asynchronous tasks, con gure the application to listen for messages within the SQS queue, and create periodic tasks by placing those into the cron in the operating system. Create an environment variable within the Elastic Beanstalk environment with a value pointing to the SQS queue endpoint.
Create a second Elastic Beanstalk worker tier environment and deploy the application to process the asynchronous tasks there. Send the tasks that should be decoupled from the original Elastic Beanstalk web server environment to the auto-generated Amazon SQS queue by the Elastic Beanstalk worker environment. Place a cron.yaml le within the root of the application source bundle for the worker environment for periodic tasks. Use environment links to link the web server environment with the worker environment.
Create a second Elastic Beanstalk web server tier environment and deploy the application to process the asynchronous tasks. Send the tasks that should be decoupled from the original Elastic Beanstalk web server to the auto-generated Amazon SQS queue by the second Elastic Beanstalk web server tier environment. Place a cron.yaml le within the root of the application source bundle for the second web server tier environment with the necessary periodic tasks. Use environment links to link both web server environments.
Create an Amazon SQS queue and send the tasks that should be decoupled from the Elastic Beanstalk web server environment to the SQS queue. Create a eet of EC2 instances under an Auto Scaling group. Install and con gure the application to listen for messages within the SQS queue from UserData and create periodic tasks by placing those into the cron in the operating system. Create an environment variable within the Elastic Beanstalk web server environment with a value pointing to the SQS queue endpoint.

Answer(s): B

Reveal Solution Next Question

QUESTION: 68

A company has an on-premises that is written in Go. A DevOps engineer must move the application to AWS. The company's development team wants to enable blue/green deployments and perform A/B testing.
Which solution will meet these requirements?

Deploy the application on an Amazon EC2 instance and create an AMI of this instance. Use this AMI to create an automatic scaling launch con guration that is used in an Auto Scaling group. Use an Elastic Load Balancer to distribute tra c. When changes are made to the application, a new AMI will be created, which will initiate an EC2 instance refresh.
Use Amazon Lightsail to deploy the application. Store the application in a zipped format in an Amazon S3 bucket. Use this zipped version to deploy new versions of the application to Lightsail. Use Lightsail deployment options to manage the deployment.
Use AWS CodeArtifact to store the application code. Use AWS CodeDeploy to deploy the application to a eet of Amazon EC2 instances.
Use Elastic Load Balancing to distribute the tra c to the EC2 instances. When making changes to the application, upload a new version to CodeArtifact and create a new CodeDeploy deployment.
Use AWS Elastic Beanstalk to host the application. Store a zipped version of the application in Amazon S3, and use that location to deploy new versions of the application using Elastic Beanstalk to manage the deployment options.

Answer(s): D

Reference:

https://docs.aws.amazon.com/codedeploy/latest/userguide/integrations-aws-auto-scaling.html

Reveal Solution Next Question

Free AWS-DEVOPS-ENGINEER-PROFESSIONAL Exam Braindumps (page: 17)

QUESTION: 65

Explanation:

Reference:

QUESTION: 66

Reference:

QUESTION: 67

QUESTION: 68

Reference: