QUESTION: 69

An application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). A DevOps Engineer is using AWS CodeDeploy to release a new version. The deployment fails during the AllowTra c lifecycle event, but a cause for the failure is not indicated in the deployment logs.
What would cause this?

The appspec.yml le contains an invalid script to execute in the AllowTra c lifecycle hook.
The user who initiated the deployment does not have the necessary permissions to interact with the AL
The health checks speci ed for the ALB target group are miscon gured.
The CodeDeploy agent was not installed in the EC2 instances that are part of the ALB target group.

Answer(s): C

Reference:

https://docs.amazonaws.cn/en_us/codedeploy/latest/userguide/codedeploy-user.pdf (399)

Reveal Solution Next Question

QUESTION: 70

A company has a single developer writing code for an automated deployment pipeline. The developer is storing source code in an Amazon S3 bucket for each project. The company wants to add more developers to the team but is concerned about code con icts and lost work. The company also wants to build a test environment to deploy newer versions of code for testing and allow developers to automatically deploy to both environments when code is changed in the repository.
What is the MOST e cient way to meet these requirements?

Create an AWS CodeCommit repository for each project, use the main branch for production code, and create a testing branch for code deployed to testing. Use feature branches to develop new features and pull requests to merge code to testing and main branches.
Create another S3 bucket for each project for testing code, and use an AWS Lambda function to promote code changes between testing and production buckets. Enable versioning on all buckets to prevent code con icts.
Create an AWS CodeCommit repository for each project, and use the main branch for production and test code with different deployment pipelines for each environment. Use feature branches to develop new features.
Enable versioning and branching on each S3 bucket, use the main branch for production code, and create a testing branch for code deployed to testing. Have developers use each branch for developing in each environment.

Answer(s): A

Reference:

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.AuroraHighAvailability.html

Reveal Solution Next Question

QUESTION: 71

A development team is building an ecommerce application and is using Amazon Simple Noti cation Service (Amazon SNS) to send order messages to multiple endpoints. One of the endpoints is an external HTTP endpoint that is not always available. The development team needs to receive a noti cation if an order message is not delivered to the HTTP endpoint.
What should a DevOps engineer do to meet these requirements?

Create an Amazon Simple Queue Service (Amazon SQS) queue. On the SNS topic, con gure a redrive policy that sends undelivered messages to the SQS queue. Create an Amazon CloudWatch alarm for the new SQS queue to notify the development team when messages are delivered to the queue.
Create an Amazon Simple Queue Service (Amazon SQS) queue. On the HTTP endpoint subscription of the SNS topic, con gure a redrive policy that sends undelivered messages to the SQS queue. Create an Amazon CloudWatch alarm for the new SQS queue to notify the development team when messages are delivered to the queue.
On the SNS topic, con gure an HTTPS delivery policy that will retry delivery until the order message is delivered successfully. Con gure the backoffFunction parameter in the policy to notify the development team when a message cannot be delivered within the set constraints.
On the HTTP endpoint subscription of the SNS topic, con gure an HTTPS delivery policy that will retry delivery until the order message is delivered successfully. Con gure the backoffFunction parameter in the policy to notify the development team when a message cannot be delivered within the set constraints.

Answer(s): B

Explanation:

Reference:

https://docs.aws.amazon.com/sns/latest/dg/sns-message-delivery-retries.html

Reveal Solution Next Question

QUESTION: 72

A company is deploying a container-based application using AWS CodeBuild. The Security team mandates that all containers are scanned for vulnerabilities prior to deployment using a password-protected endpoint. All sensitive information must be stored securely.
Which solution should be used to meet these requirements?

Encrypt the password using AWS KMS. Store the encrypted password in the buildspec.yml le as an environment variable under the variables mapping. Reference the environment variable to initiate scanning.
Import the password into an AWS CloudHSM key. Reference the CloudHSM key in the buildpec.yml le as an environment variable under the variables mapping. Reference the environment variable to initiate scanning.
Store the password in the AWS Systems Manager Parameter Store as a secure string. Add the Parameter Store key to the buildspec.yml le as an environment variable under the parameter-store mapping. Reference the environment variable to initiate scanning.
Use the AWS Encryption SDK to encrypt the password and embed in the buildspec.yml le as a variable under the secrets mapping. Attach a policy to CodeBuild to enable access to the required decryption key.

Answer(s): C

Reveal Solution Next Question

Free AWS-DEVOPS-ENGINEER-PROFESSIONAL Exam Braindumps (page: 18)

QUESTION: 69

Reference:

QUESTION: 70

Reference:

QUESTION: 71

Explanation:

Reference:

QUESTION: 72