2021 Latest AWS-DevOps Exam Dumps Recently Updated 275 Questions
Amazon AWS-DevOps Real 2021 Braindumps Mock Exam Dumps
Incident and Event Response (18%)
- Defining how to automate event management & alerting;
- Troubleshooting the issues and defining how to restore the operations.
- Applying the concepts required for implementing automated healing and setting up the event-driven automated actions;
Career Opportunities
These were some important things that you need to know about the Amazon AWS Certified DevOps Engineer – Professional certification and its corresponding exam. You should understand that getting this certificate comes with a lot of benefits. The companies are becoming more and more reliant on AWS and that is why they need people who will be able to work for them. If you have this Amazon certification, it will allow you to land a better job with a decent salary. The certified specialists can choose between different job roles, including an AWS Cloud Engineer, a Remote Senior DevOps Engineer, a Cloud Operations Engineer, a DevOps Engineer, and Senior Linux Engineer, among others. The average salary can be up to $120,000 per annum, depending on your job title, related tasks, and working experience.
What Are Topics That AWS DOP-C01 Certification Exam Covers?
The AWS DOP-C01 exam is quite a difficult one as it takes candidates through six different topics, as follows:
- Event Response and Incident;
- Automation Policies and Standards;
- Monitoring and Logging;
- SDLC Automation;
- Configuration Management and Infrastructure as Code;
- Disaster Recovery, Fault Tolerance, High Availability.
The first topic teaches candidates how to apply the correct concepts to ensure CI/CD pipeline automation. Also, they will become skilled in identifying source control strategies and implement them properly. Another ability developed in this domain would be related to testing integration and automation. Candidates should be ready to learn more about how to manage artifacts in a secure way and determine the right delivery and deployment strategies using AWS Services.
The second domain shows candidates the proper strategies to deploy services and applications based on business needs. Also, they will become pros in applying security concepts to ensure the automation of resource provisioning. Within this area, examinees will learn how to implement and deploy lifecycle hooks. Finally, they will understand more about the concepts necessary to manage different systems with the help of AWS configuration management services and tools.
The third chapter handles monitoring and logging principles. The specialists interested to learn more for their AWS DevOps Engineer – Professional exam should develop the abilities to apply concepts and services necessary for monitoring automation, event management, audit, logging, and monitoring of operating systems and AWS infrastructures. Also, they will learn how to develop and determine metadata strategies, metrics, aggregation, and logs storage.
Within the fourth section, candidates will understand more about the concepts related to logging, metrics, security, and monitoring of AWS services. Also, they will get to know more about determining cost optimization through automation. Another concept related to this chapter deals with governance strategies implementation.
Incident and Event Response is the fifth domain that is tested in the AWS DevOps Engineer – Professional certification. Those who are determined to take DOP-C01 will learn how to troubleshoot different issues and identify solutions to restore operations. They will become proficient in determining event management and alerting automation. The final subtopics included here are connected to automated healing implementation and event-driven automated actions set up.
Last but not least, high availability and disaster recovery are essential for success in your certification exam. It is important for candidates to know how to determine the differences between multi-AZ and multi-region concepts and how to implement them correctly. Also, applicants will learn how to implement fault tolerance, availability, and scalability AWS features. Another essential subtopic included in this chapter talks about choosing the right AWS services for different business needs. Candidates will as well learn how to evaluate the failure deployment and determine how to automate and design disaster recovery strategies.
NEW QUESTION 13
A company has migrated its container-based applications to Amazon EKS and want to establish automated email notifications. The notifications sent to each email address are for specific activities related to EXS components. The solution will include Amazon SNS topics and an AWS Lambda function to evaluate incoming log events and publish messages to the correct SNS topic.
Which logging solution will support these requirements?
- A. Enable Amazon S3 logging for the EKS components. Configure an Amazon CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
- B. Enable Amazon S3 logging for the EKS components. Configure S3 PUT Object event notifications with AWS Lambda as the destination.
- C. Enable Amazon CloudWatch Logs to log the EKS components. Create a CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
- D. Enable Amazon CloudWatch Logs to log the EKS components. Create CloudWatch Logs Insights queries linked to Amazon CloudWatch Events events that trigger Lambda.
Answer: D
NEW QUESTION 14
Your team is responsible for an AWS Elastic Beanstalk application.
The business requires that you move to a continuous deployment model, thus releasing updates to the application multiple times per day with zero downtime.
What should you do to enable this and still be able to roll back to the previous version almost immediately in an emergency?
- A. Create a second Elastic Beanstalk environment that runs the new application version, and swap the environment CNAMEs
- B. Enable roiling updates in the Elastic Beanstalk environment and set an appropriate pause time for application startup.
- C. Configure the application to poll for a new application version in your code repository; download and install the new version to each running Elastic Beanstalk instance.
- D. Create a second Elastic Beanstalk environment with the new application version, and configure the old environment to use the HTTP 301 response code to redirect clients to the new environment.
Answer: A
NEW QUESTION 15
You have an Opswork stack setup in AWS. You want to install some updates to the Linux instances in the
stack. Which of the following can be used to publish those updates. Choose 2 answers from the options given
below
- A. Delete the stack and create a new stack with the instances and their relavant updates
- B. Use Auto-scaling to launch new instances and then delete the older instances
- C. Create and start new instances to replace your current online instances. Then delete the current
instances. - D. On Linux-based instances in Chef 11.10 or older stacks, run the Update Dependencies stack command
Answer: C,D
Explanation:
Explanation
As per AWS documentation.
By default, AWS OpsWorks Stacks automatically installs the latest updates during setup, after an instance
finishes booting. AWS OpsWorks Stacks does not automatically install updates after an instance is online, to
avoid interruptions such as restarting application servers. Instead, you manage updates to your online instances
yourself, so you can minimize any disruptions.
We recommend that you use one of the following to update your online instances.
*
Create and start new instances to replace your current online instances. Then delete the current instances.
The new instances will have the latest set of security patches installed during setup.
*
On Linux-based instances in Chef 11.10 or older stacks, run the Update Dependencies stack command, which
installs the current set of security patches and other updates
on the specified instances.
More information is available at:
* https://docs.aws.amazon.com/opsworks/latest/userguide/workingsecurity-updates.html
NEW QUESTION 16
For auditing, analytics, and troubleshooting purposes, a DevOps Engineer for a data analytics application needs to collect all of the application and Linux system logs from the Amazon EC2 instances before termination. The company, on average, runs 10,000 instances in an Auto Scaling group. The company requires the ability to quickly find logs based on instance IDs and date ranges.
Which is the MOST cost-effective solution?
- A. Create an EC2 Instance-terminate Lifecycle Action on the group, create an Amazon CloudWatch Events rule based on it to trigger an AWS Lambda function for storing the logs in Amazon S3, and create a catalog of log files in an Amazon DynamoDB table with the primary key being Instance ID and sort key being Instance Termination Date.
- B. Create an EC2 Instance-terminate Lifecycle Action on the group, write a termination script for pushing logs into Amazon CloudWatch Logs, create a CloudWatch Events rule to trigger an AWS Lambda function to create a catalog of log files in an Amazon DynamoDB table with the primary key being Instance ID and sort key being Instance Termination Date.
- C. Create an EC2 Instance-terminate Lifecycle Action on the group, push the logs into Amazon Kinesis Data Firehouse, and select Amazon ES as the destination for providing storage and search capability.
- D. Create an EC2 Instance-terminate Lifecycle Action on the group, write a termination script for pushing logs into Amazon S3, and trigger an AWS Lambda function based on S3 PUT to create a catalog of log files in an Amazon DynamoDB table with the primary key being Instance ID and sort key being Instance Termination Date.
Answer: A
Explanation:
Explanation
https://docs.aws.amazon.com/autoscaling/ec2/userguide/lifecycle-hooks.html
NEW QUESTION 17
A company indexes all of its Amazon CloudWatch Logs on Amazon ES and uses Kibana to view a dashboard for actionable insight. The company wants to restrict user access to Kibana by user Which actions can a DevOps Engineer take to meet this requirement? (Select TWO.)
- A. Create a proxy server with user authentication in an Auto Scaling group and restrict access of the Amazon ES endpoint to an Auto Scaling group tag
- B. Use Amazon Cognito to offer user name and password protection for Kibana
- C. Create a proxy server with AWS 1AM user and restrict access of the Amazon ES endpoint to the 1AM user
- D. Create a proxy server with user authentication and an Elastic IP address and restrict access of the Amazon ES endpoint to the IP address
- E. Use AWS SSO to offer user name and password protection for Kibana
Answer: B,D
NEW QUESTION 18
A company wants to use Amazon DynamoDB for maintaining metadata on its forums. See the sample data set in the image below.
A DevOps Engineer is required to define the table schema with the partition key, the sort key, the local secondary index, projected attributes, and fetch operations. The schema should support the following example searches using the least provisioned read capacity units to minimize cost.
-Search within ForumName for items where the subject starts with 'a'.
-Search forums within the given LastPostDateTime time frame.
-Return the thread value where LastPostDateTime is within the last three months.
Which schema meets the requirements?
- A. Use ForumName as the primary key and Subject as the sort key. Have LSI with LastPostDateTime as the sort key and the projected attribute thread.
- B. Use ForumName as the primary key and Subject as the sort key. Have LSI with Thread as the sort key and the projected attribute LastPostDateTime.
- C. Use Subject as the primary key and ForumName as the sort key. Have LSI with LastPostDateTime as the sort key and fetch operations for thread.
- D. Use Subject as the primary key and ForumName as the sort key. Have LSI with Thread as the sort key and fetch operations for LastPostDateTime.
Answer: C
NEW QUESTION 19
A software company wants to automate the build process for a project where the code is stored in GitHub. When the repository is updated, source code should be compiled, tested, and pushed to Amazon S3.
Which combination of steps would address these requirements? (Select THREE.)
- A. Provision an Amazon EC2 instance to perform the build.
- B. Create an AWS OpsWorks deployment with the install dependencies command.
- C. Add a buildspec.yml file to the source code with build instructions.
- D. Create an AWS CodeDeploy application with the Amazon EC2/On-Premises compute platform.
- E. Configure a GitHub webhook to trigger a build every time a code change is pushed to the repository.
- F. Create an AWS CodeBuild project with GitHub as the source repository.
Answer: C,D,F
NEW QUESTION 20
A company runs a production application workload in a single AWS account that uses Amazon Route 53, AWS Elastic Beanstalk, and Amazon RDS. In the event of a security incident, the Security team wants the application workload to fail over to a new AWS account. The Security team also wants to block all access to the original account immediately, with no access to any AWS resources in the original AWS account, during forensic analysis.
What is the most cost-effective way to prepare to fail over to the second account prior to a security incident?
- A. Save/copy the Amazon Route 53 configurations for use in a different AWS account after an incident.
Save/copy Elastic Beanstalk configuration files to a different account. Enable the RDS database read replica in a different account. - B. Migrate the Amazon Route 53 configuration to a dedicated AWS account. Save/copy the Elastic Beanstalk configuration files in a different AWS account. Copy snapshots of the RDS Database to a different account.
- C. Migrate the Amazon Route 53 configuration to a dedicated AWS account. Mirror the Elastic Beanstalk configuration in a different account. Enable RDS Database Read Replicas in a different account.
- D. Save/copy the Amazon Route 53 configurations for use in a different AWS account after an incident.
Mirror the configuration of Elastic Beanstalk in a different account. Copy snapshots of the RDS database to a different account.
Answer: B
Explanation:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/environment-configuration- savedconfig.html
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/hosted-zones-migrating.html
NEW QUESTION 21
A DevOps Engineer is deploying a new web application. The company chooses AWS Elastic Beanstalk for deploying and managing the web application, and Amazon RDS MySQL to handle persistent data. The company requires that new deployments have minimal impact if they fail.
The application resources must be at full capacity during deployment, and rolling back a deployment must also be possible.
Which deployment sequence will meet these requirements?
- A. Deploy the application using Elastic Beanstalk, and connect to an external RDS MySQL instance using Elastic Beanstalk environment properties. Use Elastic Beanstalk immutable updates for application deployments.
- B. Deploy the application using Elastic Beanstalk, and include RDS MySQL as part of the environment.
Use default Elastic Beanstalk behavior to deploy changes to the application, and let rolling updates deploy changes to the application. - C. Deploy the application using Elastic Beanstalk and connect to an external RDS MySQL instance using Elastic Beanstalk environment properties. Use Elastic Beanstalk features for a blue/green deployment to deploy the new release to a separate environment, and then swap the CNAME in the two environments to redirect traffic to the new version.
- D. Deploy the application using Elastic Beanstalk, and include RDS MySQL as part of the environment.
Use Elastic Beanstalk immutable updates for application deployments.
Answer: C
Explanation:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.RDS.html
NEW QUESTION 22
A company is creating a software solution that executes a specific parallel-processing mechanism. The software can scale to tens of servers in some special scenarios. This solution uses a proprietary library that is license-based, requiring that each individual server have a single, dedicated license installed. The company has 200 licenses and is planning to run 200 server nodes concurrently at most. The company has requested the following features: " A mechanism to automate the use of the licenses at scale. " Creation of a dashboard to use in the future to verify which licenses are available at any moment. What is the MOST effective way to accomplish these requirements?
- A. Upload the licenses to an Amazon DynamoDB table. Create an AWS CLI script to launch the servers by using the parameter --count, with min:max instances to launch. In the user data script, acquire an available license from the DynamoDB table. Monitor each instance and, in case of failure, replace the instance, then manually update the DynamoDB table.
- B. Upload the licenses to a private Amazon S3 bucket. Populate an Amazon SQS queue with the list of licenses stored in S3. Create an AWS CloudFormation template that uses an Auto Scaling group to launch the servers. In the user data script acquire an available license from SQS. Create an Auto Scaling lifecycle hook, then use it to put the license back in SQS after the instance is terminated.
- C. Upload the licenses to an Amazon DynamoDB table. Create an AWS CloudFormation template that uses an Auto Scaling group to launch the servers. In the user data script, acquire an available license from the DynamoDB table. Create an Auto Scaling lifecycle hook, then use it to update the mapping after the instance is terminated.
- D. Upload the licenses to a private Amazon S3 bucket. Create an AWS CloudFormation template with a Mappings section for the licenses. In the template, create an Auto Scaling group to launch the servers. In the user data script, acquire an available license from the Mappings section. Create an Auto Scaling lifecycle hook, then use it to update the mapping after the instance is terminated.
Answer: A
NEW QUESTION 23
You need to perform ad-hoc business analytics queries on well-structured data. Data comes in constantly at a high velocity. Your business intelligence team can understand SQL. What AWS service(s) should you look to first?
- A. Kinesis Firehose + RDS
- B. EMR running Apache Spark
- C. Kinesis Firehose + RedShift
- D. EMR using Hive
Answer: C
Explanation:
Kinesis Firehose provides a managed service for aggregating streaming data and inserting it into RedShift. RedShift also supports ad-hoc queries over well-structured data using a SQL-compliant wire protocol, so the business team should be able to adopt this system easily.
https://aws.amazon.com/kinesis/firehose/details/
NEW QUESTION 24
Which of the following are advantages of using AWS CodeCommit over hosting your own source code repository system?
- A. No specific restriction on files andbranches
- B. Reduction in fees paid over licensing
- C. All of the above
- D. Reduction in hardware maintenance costs
Answer: C
Explanation:
Explanation
The AWS Documentation mentions the following on CodeCommit
Self-hosted version control systems have many potential drawbacks, including:
Expensive per-developer licensing fees.
High hardware maintenance costs.
High support staffing costs.
Limits on the amount and types of files that can be stored and managed.
Limits on the number of branches, the amount of version history, and other related metadata that can be stored.
For more information on CodeCommit please refer to the below link
* http://docs.aws.amazon.com/codecommit/latest/userguide/welcome.html
NEW QUESTION 25
Your application is currently running on Amazon EC2 instances behind a load balancer.
Your management has decided to use a Blue/Green deployment strategy.
How should you implement this for each deployment?
- A. Create a new load balancer with new Amazon EC2 instances, carry out the deployment, and then switch DNS over to the new load balancer using Amazon Route 53 after testing.
- B. Set up Amazon Route 53 health checks to fail over from any Amazon EC2 instance that is currently being deployed to.
- C. Launch more Amazon EC2 instances to ensure high availability, de-register each Amazon EC2 instance from the load balancer, upgrade it, and test it, and then register it again with the load balancer.
- D. Using AWS CloudFormation, create a test stack for validating the code, and then deploy the code to each production Amazon EC2 instance.
Answer: A
NEW QUESTION 26
Management has reported an increase in the monthly bill from Amazon Web Services, and they are extremely concerned with this increased cost. Management has asked you to determine the exact cause of this increase.
After reviewing the billing report, you notice an increase in the data transfer cost. How can you provide management with a better insight into data transfer use?
- A. Use Amazon CloudWatch Logs to run a map-reduce on your logs to determine high usage and data transfer.
- B. Deliver custom metrics to Amazon CloudWatch per application that breaks down application data transfer into multiple, more specific data points.
D- Using Amazon CloudWatch metrics, pull your Elastic Load Balancing outbound data transfer metrics monthly, and include them with your billing report to show which application is causing higher bandwidth usage. - C. Update your Amazon CloudWatch metrics to use five-second granularity, which will give better detailed metrics that can be combined with your billing data to pinpoint anomalies.
Answer: B
Explanation:
Explanation
You can publish your own metrics to CloudWatch using the AWS CLI or an API. You can view statistical graphs of your published metrics with the AWS Management Console.
CloudWatch stores data about a metric as a series of data points. Each data point has an associated time stamp.
You can even publish an aggregated set of data points called a statistic set.
If you have custom metrics specific to your application, you can give a breakdown to the management on the exact issue.
Option A won't be sufficient to provide better insights.
Option B is an overhead when you can make the application publish custom metrics Option D is invalid because just the ELB metrics will not give the entire picture For more information on custom metrics, please refer to the below document link: from AWS
* http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/publ
ishingMetrics.htmI
NEW QUESTION 27
You run a small online consignment marketplace. Interested sellers complete an online application in order to allow them to sell their products on your website.
Once approved, they can post their product using a custom interface.
From that pant, you manage the shopping cart process so that when a buyer decides to buy a product, you handle the billing and coordinate the shipping.
Part of this process requires sending emails to the buyer and the seller at different stages.
Your system has been running on AWS for a few months.
Occasionally, products are shipped before payment cleared and emails are sent out of order.
Furthermore, sometimes credit cards are being charged twice. How can you resolve these problems?
- A. Use the Amazon Simple Workflow Service (SWF), and use a different set of workers for each task.
- B. Use the Simple Email Service (SES) to control the correct order of email delivery.
- C. Use the Amazon Simple Queue Service (SQS), and use a single set of workers for each task.
- D. Use the AWS Data Pipeline service to control the process flow of the various tasks.
- E. Use the Amazon Simple Queue Service (SQS), and use a different set of workers for each task.
Answer: A
NEW QUESTION 28
Your company wants to understand where cost is coming from in the company's production AWS account.
There are a number of applications and services running at any given time. Without expending too much initial development time.how best can you give the business a good understanding of which applications cost the most per month to operate?
- A. Use the AWS Price API and constantly running resource inventory scripts to calculate total price based on multiplication of consumed resources over time.
- B. Use custom CloudWatch Metrics in your system, and put a metric data point whenever cost is incurred.
- C. Use AWS Cost Allocation Taggingfor all resources which support it. Use the Cost Explorer to analyze costs throughout the month.
- D. Create an automation script which periodically creates AWS Support tickets requesting detailed intra-month information about your bill.
Answer: C
Explanation:
Explanation
A tag is a label that you or AWS assigns to an AWS resource. Each tag consists of a Areyand a value. A key can have more than one value. You can use tags to organize your resources, and cost allocation tags to track your AWS costs on a detailed level. After you activate cost allocation tags, AWS uses the cost allocation tags to organize your resource costs on your cost allocation report, to make it easier for you to categorize and track your AWS costs. AWS provides two types of cost allocation tags, an A WS-generated tagand user-defined tags. AWS defines, creates, and applies the AWS-generated tag for you, and you define, create, and apply user-defined tags. You must activate both types of tags separately before they can appear in Cost Explorer or on a cost allocation report.
For more information on Cost Allocation tags, please visit the below URL:
* http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloctags.html
NEW QUESTION 29
You currently have an Auto Scaling group with an Elastic Load Balancer and need to phase out all instances and replace with a new instance type. What are 2 ways in which this can be achieved.
- A. Attach an additional ELB to your Auto Scaling configuration and phase in newer instances while removing older instances.
- B. Use Newest In stance to phase out all instances that use the previous configuration.
- C. Use OldestLaunchConfiguration to phase out all instances that use the previous configuration. V
- D. Attach an additional Auto Scaling configuration behind the ELB and phase in newer instances while removing older instances.
Answer: C,D
Explanation:
Explanation
When using the OldestLaunchConfiguration policy Auto Scaling terminates instances that have the oldest launch configuration. This policy is useful when you're updating a group and phasing out the instances from a previous configuration.
For more information on Autoscaling instance termination, please visit the below URL:
* http://docs.aws.amazon.com/autoscaling/latest/userguide/as-instance-termi nation.html Option D is an example of Blue Green Deployments.
A blue group carries the production load while a green group is staged and deployed with the new code. When if s time to deploy, you simply attach the green group to the existing load balancer to introduce traffic to the new environment. For HTTP/HTTP'S listeners, the load balancer favors the green Auto Scaling group because it uses a least outstanding requests routing algorithm As you scale up the green Auto Scaling group, you can take blue Auto Scaling group instances out of service by either terminating them or putting them in Standby state.
For more information on Blue Green Deployments, please refer to the below document link: from AWS
* https://dOawsstatic.com/whitepapers/AWS_Blue_Green_Deployments.pdf
NEW QUESTION 30
......
Verified AWS-DevOps Exam Dumps Q&As - Provide AWS-DevOps with Correct Answers: https://www.passexamdumps.com/AWS-DevOps-valid-exam-dumps.html
AWS-DevOps Exam Questions | Real AWS-DevOps Practice Dumps: https://drive.google.com/open?id=1PL-EyHXEs_Tz363Cw7MUpEk2a88NLHrk
