QUESTION: 113

A company is implementing a well-architected design for its globally accessible API stack. The design needs to ensure both high reliability and fast response times for users located in North America and Europe.

The API stack contains the following three tiers:

· Amazon API Gateway
· AWS Lambda
· Amazon DynamoDB

Which solution will meet the requirements?

Con gure Amazon Route 53 to point to API Gateway APIs in North America and Europe using health checks. Con gure the APIs to forward requests to a Lambda function in that Region. Con gure the Lambda functions to retrieve and update the data in a DynamoDB table in the same Region as the Lambda function.
Con gure Amazon Route 53 to point to API Gateway APIs in North America and Europe using latency-based routing and health checks.
Con gure the APIs to forward requests to a Lambda function in that Region. Con gure the Lambda functions to retrieve and update the data in a DynamoDB global table.
Con gure Amazon Route 53 to point to API Gateway in North America, create a disaster recovery API in Europe, and con gure both APIs to forward requests to the Lambda functions in that Region. Retrieve the data from a DynamoDB global table. Deploy a Lambda function to check the North America API health every 5 minutes. In the event of a failure, update Route 53 to point to the disaster recovery API.
Con gure Amazon Route 53 to point to API Gateway API in North America using latency-based routing. Con gure the API to forward requests to the Lambda function in the Region nearest to the user. Con gure the Lambda function to retrieve and updathe data in a DynamoDB table.

Answer(s): B

Reveal Solution Next Question

QUESTION: 114

A company manages an application that stores logs in Amazon CloudWatch Logs. The company wants to archive the logs in Amazon S3. Logs are rarely accessed after 90 days and must be retained for 10 years.

Which combination of steps should a DevOps engineer take to meet these requirements? (Choose two.)

Con gure a CloudWatch Logs subscription lter to use AWS Glue to transfer all logs to an S3 bucket.
Con gure a CloudWatch Logs subscription lter to use Amazon Kinesis Data Firehose to stream all logs to an S3 bucket.
Con gure a CloudWatch Logs subscription lter to stream all logs to an S3 bucket.
Con gure the S3 bucket lifecycle policy to transition logs to S3 Glacier after 90 days and to expire logs after 3,650 days.
Con gure the S3 bucket lifecycle policy to transition logs to Reduced Redundancy after 90 days and to expire logs after 3,650 days.

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 115

A DevOps engineer is building a continuous deployment pipeline for a serverless application that uses AWS Lambda functions. The company wants to reduce the customer impact of an unsuccessful deployment. The company also wants to monitor for issues.

Which deploy stage con guration will meet these requirements?

Use an AWS Serverless Application Model (AWS SAM) template to de ne the serverless application. Use AWS CodeDeploy to deploy the Lambda functions with the Canary10Percent15Minutes Deployment Preference Type. Use Amazon CloudWatch alarms to monitor the health of the functions.
Use AWS CloudFormation to publish a new stack update, and include Amazon CloudWatch alarms on all resources. Set up an AWS CodePipeline approval action for a developer to verify and approve the AWS CloudFormation change set.
Use AWS CloudFormation to publish a new version on every stack update, and include Amazon CloudWatch alarms on all resources. Use the RoutingCon g property of the AWS:: Lambda:: Alias resource to update the tra c routing during the stack update.
Use AWS CodeBuild to add sample event payloads for testing to the Lambda functions. Publish a new version of the functions, and include Amazon CloudWatch alarms. Update the production alias to point to the new version. Con gure rollbacks to occur when an alarm is in the ALARM state.

Answer(s): A

Reveal Solution Next Question

QUESTION: 116

A large enterprise is deploying a web application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The application stores data in an Amazon RDS Oracle DB instance and Amazon DynamoDB. There are separate environments for development, testing, and production.

What is the MOST secure and exible way to obtain password credentials during deployment?

Retrieve an access key from an AWS Systems Manager SecureString parameter to access AWS services. Retrieve the database credentials from a Systems Manager SecureString parameter.
Launch the EC2 instances with an EC2 IAM role to access AWS services. Retrieve the database credentials from AWS Secrets Manager.
Retrieve an access key from an AWS Systems Manager plaintext parameter to access AWS services. Retrieve the database credentials from a Systems Manager SecureString parameter.
Launch the EC2 instances with an EC2 IAM role to access AWS services. Store the database passwords in an encrypted con g le with the application artifacts.

Answer(s): B

Reveal Solution Next Question

Free AWS-DEVOPS-ENGINEER-PROFESSIONAL Exam Braindumps (page: 29)

QUESTION: 113

QUESTION: 114

QUESTION: 115

QUESTION: 116