ExamGecko
Home Home / Amazon / DOP-C01

Amazon DOP-C01 Practice Test - Questions Answers, Page 19

Question list
Search
Search

List of questions

Search

Related questions












A company is using AWS Organizations to create separate AWS accounts for each of its departments. It needs to automate the following tasks:

Updating the Linux AMIs with new patches periodically and generating a golden image Installing a new version of Chef agents in the golden image, if available Enforcing the use of the newly generated golden AMIs in the department's account Which option requires the LEAST management overhead?

A.
Write a script to launch an Amazon EC2 instance from the previous golden AMI, apply the patch updates, install the new version of the Chef agent, generate a new golden AMI, and then modify the AMI permissions to share only the new image with the departments’ accounts.
A.
Write a script to launch an Amazon EC2 instance from the previous golden AMI, apply the patch updates, install the new version of the Chef agent, generate a new golden AMI, and then modify the AMI permissions to share only the new image with the departments’ accounts.
Answers
B.
Use an AWS Systems Manager Run Command to update the Chef agent first, use Amazon EC2 Systems Manager Automation to generate an updated AMI, and then assume an IAM role to copy the new golden AMI into the departments’ accounts.
B.
Use an AWS Systems Manager Run Command to update the Chef agent first, use Amazon EC2 Systems Manager Automation to generate an updated AMI, and then assume an IAM role to copy the new golden AMI into the departments’ accounts.
Answers
C.
Use AWS Systems Manager Automation to update the Linux AMI using the previous image, provide the URL for the script that will update the Chef agent, and then use AWS Organizations to replace the previous golden AMI into the departments’ accounts.
C.
Use AWS Systems Manager Automation to update the Linux AMI using the previous image, provide the URL for the script that will update the Chef agent, and then use AWS Organizations to replace the previous golden AMI into the departments’ accounts.
Answers
D.
Use AWS Systems Manager Automation to update the Linux AMI from the previous golden image, provide the URL for the script that will update the Chef agent, and then share only the newly generated AMI with the departments’ accounts.
D.
Use AWS Systems Manager Automation to update the Linux AMI from the previous golden image, provide the URL for the script that will update the Chef agent, and then share only the newly generated AMI with the departments’ accounts.
Answers
Suggested answer: D

You work for a company that automatically tags photographs using artificial neural networks (ANNs), which run on GPUs using C++. You receive millions of images at a time, but only 3 times per day on average. These images are loaded into an AWS S3 bucket you control for you in a batch, and then the customer publishes a JSON-formatted manifest into another S3 bucket you control as well. Each image takes 10 milliseconds to process using a full GPU. Your neural network software requires 5 minutes to bootstrap. Image tags are JSON objects, and you must publish them to an S3 bucket. Which of these is the best system architectures for this system?

A.
Create an OpsWorks Stack with two Layers. The first contains lifecycle scripts for launching and bootstrapping an HTTPAPI on G2 instances for ANN image processing, and the second has an alwayson instance which monitors the S3 manifestbucket for new files. When a new file is detected, request instances to boot on the ANN layer. When the instances arebooted and the HTTP APIs are up, submit processing requests to individual instances.
A.
Create an OpsWorks Stack with two Layers. The first contains lifecycle scripts for launching and bootstrapping an HTTPAPI on G2 instances for ANN image processing, and the second has an alwayson instance which monitors the S3 manifestbucket for new files. When a new file is detected, request instances to boot on the ANN layer. When the instances arebooted and the HTTP APIs are up, submit processing requests to individual instances.
Answers
B.
Make an S3 notification configuration which publishes to AWS Lambda on the manifest bucket. Make the Lambda create a CloudFormation Stack which contains the logic to construct an autoscaling worker tier of EC2 G2 instances with the ANN code on each instance. Create an SQS queue of the images in the manifest. Tear the stack down when the queue is empty.
B.
Make an S3 notification configuration which publishes to AWS Lambda on the manifest bucket. Make the Lambda create a CloudFormation Stack which contains the logic to construct an autoscaling worker tier of EC2 G2 instances with the ANN code on each instance. Create an SQS queue of the images in the manifest. Tear the stack down when the queue is empty.
Answers
C.
Deploy your ANN code to AWS Lambda as a bundled binary for the C++ extension. Make an S3 notification configuration on the manifest, which publishes to another AWS Lambda running controller code. This controller code publishes all the images in the manifest to AWS Kinesis. Your ANN code Lambda Function uses the Kinesis as an Event Source. The system automatically scales when the stream contains image events.
C.
Deploy your ANN code to AWS Lambda as a bundled binary for the C++ extension. Make an S3 notification configuration on the manifest, which publishes to another AWS Lambda running controller code. This controller code publishes all the images in the manifest to AWS Kinesis. Your ANN code Lambda Function uses the Kinesis as an Event Source. The system automatically scales when the stream contains image events.
Answers
D.
Create an Auto Scaling, Load Balanced Elastic Beanstalk worker tier Application and Environment. Deploy the ANN code to G2 instances in this tier. Set the desired capacity to 1. Make the code periodically check S3 for new manifests. When a new manifest is detected, push all of the images in the manifest into the SQS queue associated with the Elastic Beanstalk worker tier.
D.
Create an Auto Scaling, Load Balanced Elastic Beanstalk worker tier Application and Environment. Deploy the ANN code to G2 instances in this tier. Set the desired capacity to 1. Make the code periodically check S3 for new manifests. When a new manifest is detected, push all of the images in the manifest into the SQS queue associated with the Elastic Beanstalk worker tier.
Answers
Suggested answer: B

Explanation:

The Elastic Beanstalk option is incorrect because it requires a constantly-polling instance, which may break and costs money. The Lambda fleet option is incorrect because AWS Lambda does not support GPU usage. The OpsWorks stack option both requires a constantly-polling instance, and also requires complex timing and capacity planning logic. The CloudFormation option requires no polling, has no always-on instances, and allows arbitrarily fast processing by simply setting the instance count as high as needed.

Reference: http://docs.aws.amazon.com/lambda/latest/dg/current-supported-versions.html

Your application uses CloudFormation to orchestrate your application's resources. During your testing phase before the application went live, your Amazon RDS instance type was changed and caused the instance to be re-created, resulting In the loss of test data. How should you prevent this from occurring in the future?

A.
Within the AWS CloudFormation parameter with which users can select the Amazon RDS instance type, set AllowedValues to only contain the current instance type.
A.
Within the AWS CloudFormation parameter with which users can select the Amazon RDS instance type, set AllowedValues to only contain the current instance type.
Answers
B.
Use an AWS CloudFormation stack policy to deny updates to the instance. Only allow UpdateStack permission to IAM principals that are denied SetStackPolicy.
B.
Use an AWS CloudFormation stack policy to deny updates to the instance. Only allow UpdateStack permission to IAM principals that are denied SetStackPolicy.
Answers
C.
In the AWS CloudFormation template, set the AWS::RDS::DBInstance's DBlnstanceClass property to be read-only.
C.
In the AWS CloudFormation template, set the AWS::RDS::DBInstance's DBlnstanceClass property to be read-only.
Answers
D.
Subscribe to the AWS CloudFormation notification "BeforeResourceUpdate," and call CancelStackUpdate if the resource identified is the Amazon RDS instance.
D.
Subscribe to the AWS CloudFormation notification "BeforeResourceUpdate," and call CancelStackUpdate if the resource identified is the Amazon RDS instance.
Answers
E.
In the AWS CloudFormation template, set the DeletionPolicy of the AWS::RDS::DBInstance's DeletionPolicy property to "Retain."
E.
In the AWS CloudFormation template, set the DeletionPolicy of the AWS::RDS::DBInstance's DeletionPolicy property to "Retain."
Answers
Suggested answer: E

A company uses Amazon S3 to store proprietary information. The Development team creates buckets for new projects on a daily basis. The Security team wants to ensure that all existing and future buckets have encryption, logging, and versioning enabled. Additionally, no buckets should ever be publicly read or write accessible.

What should a DevOps Engineer do to meet these requirements?

A.
Enable AWS CloudTrail and configure automatic remediation using AWS Lambda.
A.
Enable AWS CloudTrail and configure automatic remediation using AWS Lambda.
Answers
B.
Enable AWS Config rules and configure automatic remediation using AWS Systems Manager documents.
B.
Enable AWS Config rules and configure automatic remediation using AWS Systems Manager documents.
Answers
C.
Enable AWS Trusted Advisor and configure automatic remediation using Amazon CloudWatch Events.
C.
Enable AWS Trusted Advisor and configure automatic remediation using Amazon CloudWatch Events.
Answers
D.
Enable AWS Systems Manager and configure automatic remediation using Systems Manager documents.
D.
Enable AWS Systems Manager and configure automatic remediation using Systems Manager documents.
Answers
Suggested answer: B

Explanation:

Reference: https://aws.amazon.com/blogs/aws/aws-config-update-new-managed-rules-to-secure-s3-buckets/

Using the AWS CLI, which command retrieves CloudTrail trail settings, including the status of the trail itself?

A.
aws cloudtrail return-trails
A.
aws cloudtrail return-trails
Answers
B.
aws cloudtrail validate-settings
B.
aws cloudtrail validate-settings
Answers
C.
aws cloudtrail get-settings
C.
aws cloudtrail get-settings
Answers
D.
aws cloudtrail describe-trails
D.
aws cloudtrail describe-trails
Answers
Suggested answer: D

Explanation:

You can retrieve trail settings and status using the cloudtrail describe-trails command. It will generate output similar to the example below.

Reference: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-create-and-update-a-trailby-using-the-aws-cli.htm

You are designing a system which needs, at minumum, 8 m4.large instances operating to service traffic. When designing a system for high availability in the us-east-1 region, which has 6 Availability Zones, you company needs to be able to handle death of a full availability zone. How should you distribute the servers, to save as much cost as possible, assuming all of the EC2 nodes are properly linked to an ELB? Your VPC account can utilize us-east-1's AZ's a through f, inclusive.

A.
3 servers in each of AZ's a through d, inclusive.
A.
3 servers in each of AZ's a through d, inclusive.
Answers
B.
8 servers in each of AZ's a and b.
B.
8 servers in each of AZ's a and b.
Answers
C.
2 servers in each of AZ's a through e, inclusive.
C.
2 servers in each of AZ's a through e, inclusive.
Answers
D.
4 servers in each of AZ's a through c, inclusive.
D.
4 servers in each of AZ's a through c, inclusive.
Answers
Suggested answer: C

Explanation:

You need to design for N+1 redundancy on Availability Zones. ZONE_COUNT = (REQUIRED_INSTANCES / INSTANCE_COUNT_PER_ZONE) + 1. To minimize cost, spread the instances across as many possible zones as you can. By using a though e, you are allocating 5 zones. Using 2 instances, you have 10 total instances. If a single zone fails, you have 4 zones left, with 2 instances each, for a total of 8 instances. By spreading out as much as possible, you have increased cost by only 25% and significantly de-risked an availability zone failure. Reference:

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts.html

Your company operates an application consisting of an AWS CloudFormation stack that contains a load balancer, an Auto Scaling group of web servers, and an Amazon RDS instance. To save time and costs, you update the current test stack when testing minor changes, and create a new stack for major changes. As part of the testing procedure of your application, each version needs to be registered once and only once with a Configuration Management Database (CMDB).

What cost-effective solution should you choose to perform this registration?

A.
Use Auto Scaling Leader Node functionality to notify the registration application from the UserData script of a single Instance. Use the AWS CloudFormation cfn-hup helper application to receive template updates on the leader node, which then notifies the CMDB.
A.
Use Auto Scaling Leader Node functionality to notify the registration application from the UserData script of a single Instance. Use the AWS CloudFormation cfn-hup helper application to receive template updates on the leader node, which then notifies the CMDB.
Answers
B.
Define an AWS: :CloudFormation::CustomResource in the AWS CloudFormation template, with the application version as one of its properties. Modify the CMDB to subscribe to the resource's creation and update notifications.
B.
Define an AWS: :CloudFormation::CustomResource in the AWS CloudFormation template, with the application version as one of its properties. Modify the CMDB to subscribe to the resource's creation and update notifications.
Answers
C.
Define an AWS::CloudFormation::HttpRequest in the AWS CloudFormation template, and configure it to notify the CMDBon stack creation and update.
C.
Define an AWS::CloudFormation::HttpRequest in the AWS CloudFormation template, and configure it to notify the CMDBon stack creation and update.
Answers
D.
Define an AWS::EC2::Instance resource in the AWS CloudFormation template that is configured to run a UserData script to notify the CMDB and then terminate itself on completion.
D.
Define an AWS::EC2::Instance resource in the AWS CloudFormation template that is configured to run a UserData script to notify the CMDB and then terminate itself on completion.
Answers
Suggested answer: B

What is a circular dependency in AWS CloudFormation?

A.
When a Template references an earlier version of itself.
A.
When a Template references an earlier version of itself.
Answers
B.
When Nested Stacks depend on each other.
B.
When Nested Stacks depend on each other.
Answers
C.
When Resources form a DependOn loop.
C.
When Resources form a DependOn loop.
Answers
D.
When a Template references a region, which references the original Template.
D.
When a Template references a region, which references the original Template.
Answers
Suggested answer: C

Explanation:

To resolve a dependency error, add a DependsOn attribute to resources that depend on other resources in your template. In some cases, you must explicitly declare dependencies so that AWS CloudFormation can create or delete resources in the correct order. For example, if you create an Elastic IP and a VPC with an Internet gateway in the same stack, the Elastic IP must depend on the Internet gateway attachment. For additional information, see DependsOn Attribute.

Reference:

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troubleshooting.html#trouble%20shootin%20g-errorsdependence-error

Your application uses Amazon SQS and Auto Scaling to process background jobs. The Auto Scaling policy is based on the number of messages in the queue, with a maximum Instance count of 100. Since the application was launched, the group has never scaled above 50. The Auto Scaling group has now scaled to 100, the queue size is increasing, and very few Jobs are being completed. The number of messages being sent to the queue is at normal levels. What should you do to identify why the queue size is unusually high, and to reduce it?

A.
Temporarily increase the Auto Scaling group's desired value to 200. When the queue size has been reduced, reduce it to 50.
A.
Temporarily increase the Auto Scaling group's desired value to 200. When the queue size has been reduced, reduce it to 50.
Answers
B.
Analyze the application logs to identify possible reasons for message processing failure and resolve the cause for failures.
B.
Analyze the application logs to identify possible reasons for message processing failure and resolve the cause for failures.
Answers
C.
Create additional Auto Scaling groups, enabling the processing of the queue to be performed in parallel.
C.
Create additional Auto Scaling groups, enabling the processing of the queue to be performed in parallel.
Answers
D.
Analyze CloudTrail logs for Amazon SQS to ensure that the instances' Amazon EC2 role has permission to receive messages from the queue.
D.
Analyze CloudTrail logs for Amazon SQS to ensure that the instances' Amazon EC2 role has permission to receive messages from the queue.
Answers
Suggested answer: B

An application that runs on Amazon EC2 instances behind an Application Load Balancer is deployed using AWS Elastic Beanstalk. During a recent rolling deployment, users experienced application errors even though application health checks were passing on all instances. A log analysis shows that the errors were caused by user requests being processed by two different versions of the application behind the same load balancer. The analysis also shows a recent change made the responses backward incompatible.

Which deployment method will address these issues?

A.
Update Elastic Beanstalk to deploy using the all at once method.
A.
Update Elastic Beanstalk to deploy using the all at once method.
Answers
B.
Update Elastic Beanstalk to deploy using the blue/green method.
B.
Update Elastic Beanstalk to deploy using the blue/green method.
Answers
C.
Update Elastic Beanstalk to deploy using the immutable method.
C.
Update Elastic Beanstalk to deploy using the immutable method.
Answers
D.
Update Elastic Beanstalk to deploy using the rolling with additional batch method.
D.
Update Elastic Beanstalk to deploy using the rolling with additional batch method.
Answers
Suggested answer: D

Explanation:

Reference: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.html

Total 557 questions
Go to page: of 56