Home / Amazon / DOP-C01

Amazon DOP-C01 Practice Test - Questions Answers, Page 44

Question list

List of questions

Question 431

(0)

Your application stores sensitive information on an EBS volume attached to your EC2 instance. How can you protect your information? (Choose two.)

Question 432

(0)

You have just come from your Chief Information Security Officer's (CISO) office with the instructions to provide an audit report of all AWS network rules used by the organization's Amazon EC2 instan

Question 433

(0)

You want to pass queue messages that are 1GB each. How should you achieve this?

Question 434

(0)

What is web identity federation?

Question 435

(0)

There is a very serious outage at AWS. EC2 is not affected, but your EC2 instance deployment scripts stopped working in the region with the outage. What might be the issue?

Question 436

(0)

What method should you use to author automation if you want to wait for a CloudFormation stack to finish completing in a script?

Question 437

(0)

An Amazon EC2 instance with no internet access is running in a Virtual Private Cloud (VPC) and needs to download an object from a restricted Amazon S3 bucket. When the DevOps Engineer tries to gain

Question 438

(0)

A company uses a complex system that consists of networking, IAM policies, and multiple three-tier applications. Requirements are still being defined for a new system, so the number of AWS component

Question 439

(0)

You are building a Docker image with the following Dockerfile. How many layers will the resulting image have? FROM scratch CMD /app/hello.sh

Question 440

(0)

A company has an application deployed using Amazon ECS with data stored in an Amazon DynamoDB table. The company wants the application to fail over to another Region in a disaster recovery scenario.

Related questions

Which of these is not an instrinsic function in AWS CloudFormation?

After a daily scrum with your development teams, you've agreed that using Blue/Green style deployments would benefit the team. Which technique should you use to deliver this new requirement?

An application has microservices spread across different AWS accounts and is integrated with an on-premises legacy system for some of its functionality. Because of the segmented architecture and missing logs, every time the application experiences issues, it is taking too long to gather the logs to identify the issues. A DevOps Engineer must fix the log aggregation process and provide a way to centrally analyze the logs. Which is the MOST efficient and cost-effective solution?

A DevOps Engineer must create a Linux AMI in an automated fashion. The newly created AMI identification must be stored in a location where other build pipelines can access the new identification programmatically What is the MOST cost-effective way to do this?

For AWS Auto Scaling, what is the first transition state an existing instance enters after leaving steady state in Standby mode?

A company hosts parts of a Python-based application using AWS Elastic Beanstalk. An Elastic Beanstalk CLI is being used to create and update the environments. The Operations team detected an increase in requests in one of the Elastic Beanstalk environments that caused downtime overnight. The team noted that the policy used for AWS Auto Scaling is NetworkOut. Based on load testing metrics, the team determined that the application needs to scale CPU utilization to improve the resilience of the environments. The team wants to implement this across all environments automatically. Following AWS recommendations, how should this automation be implemented?

If you want CloudFormation stack status updates to show up in a continuous delivery system in as close to real time as possible, how should you achieve this?

A company updated the AWS CloudFormation template for a critical business application. The stack update process failed due to an error in the updated template, and AWS CloudFormation automatically began the stack rollback process. Later, a DevOps engineer discovered that the application was still unavailable and that the stack was in the UPDATE_ROLLBACK_FAILED state. Which combination of actions should the DevOps engineer perform so that the stack rollback can complete successfully? (Choose two.)

A user has attached an EBS volume to a running Linux instance as a "/dev/sdf" device. The user is unable to see the attached device when he runs the command "df -h". What is the possible reason for this?

An application running on a set of Amazon EC2 instances in an Auto Scaling group requires a configuration file to operate. The instances are created and maintained with AWS CloudFormation. A DevOps engineer wants the instances to have the latest configuration file when launched, and wants changes to the configuration file to be reflected on all the instances with a minimal delay when the CloudFormation template is updated. Company policy requires that application configuration files be maintained along with AWS infrastructure configuration files in source control. Which solution will accomplish this?

Question 431

Your application stores sensitive information on an EBS volume attached to your EC2 instance. How can you protect your information? (Choose two.)

Unmount the EBS volume, take a snapshot and encrypt the snapshot. Re-mount the Amazon EBS volume.

It is not possible to encrypt an EBS volume, you must use a lifecycle policy to transfer data to S3 for encryption.

Copy the unencrypted snapshot and check the box to encrypt the new snapshot. Volumes restored from this encrypted snapshot will also be encrypted.

Create and mount a new, encrypted Amazon EBS volume. Move the data to the new volume. Delete the old Amazon EBS volume.

Show Answer Comment (0)

You have just come from your Chief Information Security Officer's (CISO) office with the instructions to provide an audit report of all AWS network rules used by the organization's Amazon EC2 instances. You have discovered that a single Describe-Security-Groups API call will return all of an account's security groups and rules within a region. You create the following pseudo-code to create the required report:

- Parse "aws ec2 describe-security-groups" output

- For each security group

- Create report of ingress and egress rules

Which two additional pieces of logic should you include to meet the CISO's requirements? (Choose two.)

Parse security groups in each region.

Parse security groups in each Availability Zone and region.

Evaluate VPC network access control lists.

Evaluate AWS CloudTrail logs.

Evaluate Elastic Load Balancing access control lists.

Parse CloudFront access control lists.

Show Answer Comment (0)

Question 433

You want to pass queue messages that are 1GB each. How should you achieve this?

Use Kinesis as a buffer stream for message bodies. Store the checkpoint id for the placement in the Kinesis Stream in SQS.

Use the Amazon SQS Extended Client Library for Java and Amazon S3 as a storage mechanism for message bodies.

Use SQS's support for message partitioning and multi-part uploads on Amazon S3.

Use AWS EFS as a shared pool storage medium. Store filesystem pointers to the files on disk in the SQS message bodies.

Show Answer Comment (0)

Question 434

What is web identity federation?

Use of an identity provider like Google or Facebook to become an AWS IAM User.

Use of an identity provider like Google or Facebook to exchange for temporary AWS security credentials.

Use of AWS IAM User tokens to log in as a Google or Facebook user.

Use of AWS STS Tokens to log in as a Google or Facebook user.

Show Answer Comment (0)

Question 435

There is a very serious outage at AWS. EC2 is not affected, but your EC2 instance deployment scripts stopped working in the region with the outage. What might be the issue?

The AWS Console is down, so your CLI commands do not work.

S3 is unavailable, so you can't create EBS volumes from a snapshot you use to deploy new volumes.

AWS turns off the DeployCode API call when there are major outages, to protect from system floods.

None of the other answers make sense. If EC2 is not affected, it must be some other issue.

Show Answer Comment (0)

Question 436

What method should you use to author automation if you want to wait for a CloudFormation stack to finish completing in a script?

Event subscription using SQS.

Event subscription using SNS.

Poll using ListStacks / list-stacks

Poll using GetStackStatus / get-stack-status

Show Answer Comment (0)

Question 437

An Amazon EC2 instance with no internet access is running in a Virtual Private Cloud (VPC) and needs to download an object from a restricted Amazon S3 bucket. When the DevOps Engineer tries to gain access to the object, an

AccessDenied error is received. What are the possible causes for this error? (Choose three.)

The S3 bucket default encryption is enabled.

There is an error in the S3 bucket policy.

There is an error in the VPC endpoint policy.

The object has been moved to Amazon Glacier.

There is an error in the IAM role configuration.

S3 versioning is enabled.

Show Answer Comment (0)

Question 438

A company uses a complex system that consists of networking, IAM policies, and multiple three-tier applications. Requirements are still being defined for a new system, so the number of AWS components present in the final design is not known. The DevOps Engineer needs to begin defining AWS resources using AWS CloudFormation to automate and versioncontrol the new infrastructure. What is the best practice for using CloudFormation to create new environments?

Manually construct the networking layer using Amazon VPC and then define all other resources using CloudFormation.

Create a single template to encompass all resources that are required for the system so there is only one template to version-control.

Create multiple separate templates for each logical part of the system, use cross-stack references in CloudFormation, and maintain several templates in version control.

Create many separate templates for each logical part of the system, and provide the outputs from one to the next using an Amazon EC2 instance running SDK for granular control.

Show Answer Comment (0)

Question 439

You are building a Docker image with the following Dockerfile. How many layers will the resulting image have? FROM scratch

CMD /app/hello.sh

Show Answer Comment (0)

Question 440

A company has an application deployed using Amazon ECS with data stored in an Amazon DynamoDB table. The company wants the application to fail over to another Region in a disaster recovery scenario. The application must also efficiently recover from any accidental data loss events. The RPO for the application is 1 hour and the RTO is 2 hours. Which highly available solution should a DevOps engineer recommend?

Change the configuration of the existing DynamoDB table. Enable this as a global table and specify the second Region that will be used. Enable DynamoDB point-in-time recovery.

Enable DynamoDB Streams for the table and create an AWS Lambda function to write the stream data to an S3 bucket in the second Region. Schedule a job for every 2 hours to use AWS Data Pipeline to restore the database to the failover Region.

Export the DynamoDB table every 2 hours using AWS Data Pipeline to an Amazon S3 bucket in the second Region. Use Data Pipeline in the second Region to restore the export from S3 into the second DynamoDB table.

Use AWS DMS to replicate the data every hour. Set the original DynamoDB table as the source and the new DynamoDB table as the target.

Show Answer Comment (0)

Total 557 questions

42 43 44 45 46

Go to page: of 56