DOP-C01 Training & Certification Get Latest AWS Certified DevOps Engineer Updated on Sep 23, 2021
Certification Training for DOP-C01 Exam Dumps Test Engine
NEW QUESTION 54
You need to monitor specific metrics from your application and send real-time alerts to your Devops Engineer.
Which of the below services will fulfil this requirement? Choose two answers
- A. Amazon CloudWatch
- B. Amazon Simple Email Service
- C. Amazon Simple Queue Service
- D. Amazon Simple Notification Service
Answer: A,D
Explanation:
Explanation
Amazon Cloud Watch monitors your Amazon Web Services (AWS) resources and the applications you run on AWS in real time. You can use Cloud Watch to collect and track metrics, which are variables you can measure for your resources and applications. Cloud Watch alarms send notifications or automatically make changes to the resources you are monitoring based on rules that you define.
For more information on AWS Cloudwatch, please refer to the below document link: from AWS
* http://docs.aws.a
mazon.com/AmazonCloudWatch/latest/monitoring/WhatlsCloud Watch.html
Amazon Cloud Watch uses Amazon SNS to send email. First, create and subscribe to an SNS topic. When you create a CloudWatch alarm, you can add this SNS topic to send an email notification when the alarm changes state For more information on AWS Cloudwatch and SNS, please refer to the below document link: from AWS
* http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/US_SetupSNS.html
NEW QUESTION 55
A social networking service runs a web API that allows its partners to search public posts. Post data is stored in Amazon DynamoDB and indexed by AWS Lambda functions, with an Amazon ES domain storing the indexes and providing search functionality to the application. The service needs to maintain full capacity during deployments and ensure that failed deployments do not cause downtime or reduced capacity, or prevent subsequent deployments.
How can these requirements be met? (Select TWO )
- A. Run the web.application in AWS Elastic Beanstalk with the deployment policy set to Rolling Deploy the Lambda functions, DynamoDB tables, and Amazon ES domain with an AWS CloudFormation template.
- B. Run the web application in AWS Elastic Beanstalk with the deployment policy set to Immutable Deploy the Lambda functions, DynamoDB tables, and Amazon ES domain with an AWS CloudFormation template.
- C. Run the web application in AWS Elastic Beanstalk with the deployment policy set to All at Once.
Deploy the Lambda functions, DynamoDB tables, and Amazon ES domain with an AWS CloudFormation template. - D. Deploy the web application, Lambda functions, DynamoDB tables, and Amazon ES domain in an AWS CloudFormation template. Deploy changes with an AWS CodeDeploy in-place deployment.
- E. Deploy the web application, Lambda functions, DynamoDB tables, and Amazon ES domain in an AWS CloudFormation template. Deploy changes with an AWS CodeDeploy blue/green deployment.
Answer: B,E
NEW QUESTION 56
You are designing a service that aggregates clickstream data in batch and delivers reports to subscribers via email only once per week. Data is extremely spikey, geographically distributed, high-scale, and unpredictable.
How should you design this system?
- A. Use a large RedShift cluster to perform the analysis, and a fleet of Lambdas to perform record inserts into the RedShift tables. Lambda will scale rapidly enough for the traffic spikes.
- B. Use a CloudFront distribution with access log delivery to S3. Clicks should be recorded as querystring GETs to the distribution. Reports are built and sent by periodically running EMRjobs over the access logs in S3.
C Use API Gateway invoking Lambdas which PutRecords into Kinesis, and EMR running Spark performing GetRecords on Kinesis to scale with spikes. Spark on EMR outputs the analysis to S3, which are sent out via email.
D- Use AWS Elasticsearch service and EC2 Auto Scaling groups. The Autoscaling groups scale based on click throughput and stream into the Elasticsearch domain, which is also scalable. Use Kibana to generate reports periodically.
Answer: B
Explanation:
Explanation
When you look at building reports or analyzing data from a large data set, you need to consider CMR because this service is built on the Hadoop framework which is used to processes large data sets.
The ideal approach to getting data onto CMR is to use S3. Since the Data is extremely spikey and geographically distributed, using edge locations via Cloudfront distributions is the best way to fetch the data.
Option A is invalid because RedShift is more of a petabyte storage cluster.
Option C is invalid because having both Kinesis and CMR for the job analysis is redundant.
Option D is invalid because Elastic Search is not an option for processing records.
For more information on Amazon CMR, please visit the below URL:
* https://aws.amazon.com/emr/
NEW QUESTION 57
Which difference between core modules and extra modules is not correct?
- A. Extra modules may one day become core modules
- B. Core modules are shipped by default with Ansible
- C. Extra modules have no support
- D. Core modules are supported by the Ansible team
Answer: C
Explanation:
While extra modules are not official modules and thus not supported by the Ansible team, they are indeed supported by their writers and the community.
Reference: http://docs.ansible.com/ansible/modules_extra.html
NEW QUESTION 58
You need to deploy a Node.js application and do not have any experience with AWS. Which deployment
method will be the simplest for you to deploy?
- A. AWS EC2
- B. AWSCIoudFormation
- C. AWS Elastic Beanstalk
- D. AWSOpsWorks
Answer: C
Explanation:
Explanation
With Elastic Beanstalk, you can quickly deploy and manage applications in the AWS Cloud without worrying
about the infrastructure that runs those applications.
AWS Elastic Beanstalk reduces management complexity without restricting choice or control. You simply
upload your application, and Elastic Beanstalk automatically handles the details of capacity provisioning, load
balancing, scaling, and application health monitoring
For more information on Elastic beanstalk please refer to the below link:
* http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/Welcome.html
NEW QUESTION 59
You need to run a very large batch data processingjob one time per day. The source data exists entirely in S3, and the output of the processingjob should also be written to S3 when finished. If you need to version control this processingjob and all setup and teardown logic for the system, what approach should you use?.
- A. Model an AWSEMRjob in AWS CloudFormation.
- B. Model an AWS EMRjob in AWS OpsWorks.
- C. Model an AWS EMRjob in AWS CLI Composer.
- D. Model an AWSEMRjob in AWS Elastic Beanstalk.
Answer: A
Explanation:
Explanation
With AWS Cloud Formation, you can update the properties for resources in your existing stacks. These changes can range from simple configuration changes, such as updating the alarm threshold on a Cloud Watch alarm, to more complex changes, such as updating the Amazon Machine Image (AMI) running on an Amazon EC2 instance. Many of the AWS resources in a template can be updated, and we continue to add support for more.
For more information on Cloudformation version control, please visit the below URL:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/updating.stacks.waIkthrough.html
NEW QUESTION 60
A Development team is adding a new country to an e-commerce application. This addition requires that new application features be added to the shipping component of the application. The team has not decided if all new features should be added, as some will take approximately six weeks to build. While the final decision on the shipping component features is being made, other team members are continuing to work on other features of the application. Based on this situation, how should the application feature deployments be managed?
- A. Add the code updates as commits to a feature branch. Merge the commits to a release branch as features are ready.
- B. Add the code updates as commits to the release branch. The team can delay the deployment until all features are ready.
- C. Add the code updates as a single commit when a feature is ready. Tag this commit with "new-country."
- D. Create a new repository named "new-country". Commit all the code changes to the new repository.
Answer: A
NEW QUESTION 61
A Lambda function must execute a query against an Amazon RDS database in a private subnet.
Which steps are required to allow the Lambda function to access the Amazon RDS database? (Select two.)
- A. Create the Lambda function within the Amazon RDS VPC.
- B. Change the ingress rules of the Amazon RDS security group, allowing the Lambda security group.
- C. Add an Internet Gateway (IGW) to the VPC, route the private subnet to the IGW.
- D. Create a VPC Endpoint for Amazon RDS.
- E. Change the ingress rules of Lambda security group, allowing the Amazon RDS security group.
Answer: A,E
NEW QUESTION 62
When storing sensitive data on the cloud which of the below options should be carried out on AWS. Choose 3 answers from the options given below.
- A. Encryptthe file system on an EBS volume using Linux tools
- B. EnableEBS Encryption
- C. WithAWS you do not need to worry about encryption
- D. EnableS3 Encryption
Answer: A,B,D
Explanation:
Explanation
Amazon CBS encryption offers you a simple encryption solution for your CBS volumes without the need for you to build, maintain, and secure your own key management infrastructure. When you create an encrypted CBS volume and attach it to a supported instance type, the following types of data are encrypted:
Data at rest inside the volume
All data moving between the volume and the instance
All snapshots created from the volume For more information on CBS encryption, please refer to the below link:
* http://docs.aws.amazon.com/AWSCC2/latest/UserGuide/CBSCncryption.htrril Data protection refers to protecting data while in-transit (as it travels to and from Amazon S3) and at rest (while it is stored on disks in Amazon S3 data centers). You can protect data in transit by using SSL or by using client-side encryption. For more information on S3 encryption, please refer to the below link:
* http://docs-aws.amazon.com/AmazonS3/latest/dev/UsingCncryption.html
NEW QUESTION 63
You are in charge of designing Cloudformation templates for your company. One of the key requirements is to ensure that if a Cloudformation stack is deleted, a snapshot of the relational database is created which is part of the stack. How can you achieve this in the best possible way?
- A. Use the Update policy of the cloudformation template to ensure a snapshot is created of the relational database.
- B. Use the Deletion policy of the cloudformation template to ensure a snapshot is created of the relational database.
- C. Create a snapshot of the relational database beforehand so that when the cloudformation stack is deleted, the snapshot of the database will be present.
- D. Create a new cloudformation template to create a snapshot of the relational database.
Answer: B
Explanation:
Explanation
The AWS documentation mentions the following
With the Deletion Policy attribute you can preserve or (in some cases) backup a resource when its stack is deleted. You specify a DeletionPolicy attribute for each resource that you want to control. If a resource has no DeletionPolicy attribute, AWS Cloud Formation deletes the resource by default. Note that this capability also applies to update operations that lead to resources being removed.
For more information on the Deletion policy, please visit the below URL:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/aws-attri bute-deletionpolicy.html
NEW QUESTION 64
You are currently using Elastic Beanstalk to host your production environment. You need to rollout updates to your application hosted on this environment. This is a critical application which is why there is a requirement that the rollback, if required, should be carried out with the least amount of downtime. Which of the following deployment strategies would ideally help achieve this purpose
- A. Use Rolling updates in Elastic Beanstalk so that if the deployment fails, the rolling updates feature would roll back to the last deployment.
- B. Create another parallel environment in elastic beanstalk. Use the Swap URL feature.
- C. Create a Cloudformation template with the same resources as those in the Elastic beanstalk environment.
If the deployment fails, deploy the Cloudformation template. - D. Create another parallel environment in elastic beanstalk. Create a new Route53 Domain name for the new environment and release that url to the users.
Answer: B
Explanation:
Explanation
Since the requirement is to have the least amount of downtime, the ideal way is to create a blue green deployment environment and then use the Swap URL feature to swap environments for the new deployment and then do the swap back, incase the deployment fails.
The AWS Documentation mentions the following on the SWAP url feature of Elastic Beanstalk Because Elastic Beanstalk performs an in-place update when you update your application versions, your application may become unavailable to users for a short period of time. It is possible to avoid this downtime by performing a blue/green deployment, where you deploy the new version to a separate environment, and then swap CNAMCs of the two environments to redirect traffic to the new version instantly.
NEW QUESTION 65
You need to migrate 10 million records in one hour into DynamoDB. All records are 1.5KB in size.
The data is evenly distributed across the partition key. How many write capacity units should you provision during this batch load?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
You need 2 units to make a 1.5KB write, since you round up. You need 20 million total units to perform this load. You have 3600 seconds to do so. Divide and round up for 5556.
http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/HowItWorks.ProvisionedT hroughp ut.html
NEW QUESTION 66
A company is implementing AWS CodePipeline to automate its testing process. The company wants to be notified when the execution state fails and used the following custom event pattern in Amazon CloudWatch:
Which type of events will match this event pattern?
- A. All rejected or failed approval actions across all the pipelines.
- B. All the events across all pipelines.
- C. Failed deploy and build actions across all the pipelines.
- D. Approval actions across all the pipelines.
Answer: D
NEW QUESTION 67
You need your CI to build AM Is with code pre-installed on the images on every new code push. You need to
do this as cheaply as possible. How do you do this?
- A. Have the CI launch a new on-demand EC2 instance when new commits come in, perform all instance
configuration and setup, then create an AMI based on the on-demand instance. - B. Purchase a Light Utilization Reserved Instance to save money on the continuous integration machine.
Use these credits whenever your create AMIs on instances. - C. Bid on spot instances just above the asking price as soon as new commits come in, perform all instance
configuration and setup, then create an AM I based on the spot instance. - D. When the CI instance receives commits, attach a new EBS volume to the CI machine. Perform all setup
on this EBS volume so you don't need
Answer: C
Explanation:
Explanation
Amazon CC2 Spot instances allow you to bid on spare Amazon CC2 computing capacity. Since Spot instances
are often available at a discount compared to On-
Demand pricing, you can significantly reduce the cost of running your applications, grow your application's
compute capacity and throughput for the same budget,
and enable new types of cloud computing applications.
For more information on Spot Instances, please visit the below URL:
* https://aws.amazon.com/ec2/spot/
NEW QUESTION 68
You are hosting multiple environments in multiple regions and would like to use Amazon Inspector for regular security assessments on your AWS resources across all regions. Which statement about Amazon Inspector's operation across regions is true?
- A. Amazon Inspector is hosted within AWS regions behind a public endpoint. All regions are isolated from each other, and the telemetry and findings for all assessments performed within a region remain in that region and are not distributed by the service to other Amazon Inspector locations.
- B. Amazon Inspector is a global service that is not region-bound. You can include AWS resources from multiple regions in the same assessment target.
- C. Amazon Inspector is hosted in each supported region separately. You have to create assessment targets using the same name and tags in each region and Amazon Inspector will run against each assessment target in each region.
- D. Amazon Inspector is hosted in each supported region. Telemetry data and findings are shared across regions to provide complete assessment reports.
Answer: A
Explanation:
At this time, Amazon Inspector supports assessment services for EC2 instances in only the following AWS regions:
US West (Oregon)
US East (N. Virginia)
EU (Ireland)
Asia Pacific (Seoul)
Asia Pacific (Mumbai)
Asia Pacific (Tokyo)
Asia Pacific (Sydney)
Amazon Inspector is hosted within AWS regions behind a public endpoint. All regions are isolated from each other, and the telemetry and findings for all assessments performed within a region remain in that region and are not distributed by the service to other Amazon Inspector locations.
Reference:
https://docs.aws.amazon.com/inspector/latest/userguide/inspector_supported_os_regions.html#in%
20spector_supported-regions
NEW QUESTION 69
You have an application consisting of a stateless web server tier running on Amazon EC2 instances behind load balancer, and are using Amazon RDS with read replicas. Which of the following methods should you use to implement a self-healing and cost-effective architecture? Choose 2 answers from the optionsgiven below
- A. Set up an Auto Scalinggroup for the web server tier along with an Auto Scaling policy that uses the Amazon RDS DB CPU utilization Cloud Watch metric to scale the instances.
- B. Set up an Auto Scalinggroup for the database tier along with an Auto Scaling policy that uses the Amazon RDS read replica lag CloudWatch metric to scale out the Amazon RDS read replicas.
- C. Set up scripts on each Amazon EC2 instance to frequently send ICMP pings to the load balancer in order to determine which instance is unhealthy and replace it.
- D. Use a larger Amazon EC2 instance type for the web server tier and a larger DB instance type for the data storage layer to ensure that they don't become unhealthy.
- E. Set up an Auto Scalinggroup for the web server tier along with an Auto Scaling policy that uses the Amazon EC2 CPU utilization CloudWatch metric to scale the instances.
- F. Use an Amazon RDS Multi-AZ deployment.
- G. Set up a third-party monitoring solution on a cluster of Amazon EC2 instances in order to emit custom Cloud Watch metrics to trigger the termination of unhealthy Amazon EC2 instances.
Answer: E,F
Explanation:
The scaling of CC2 Instances in the Autoscaling group is normally done with the metric of the CPU utilization of the current instances in the Autoscaling group For more information on scaling in your Autoscaling Group, please refer to the below link:
* http://docs.aws.a mazon.com/autoscaling/latest/userguide/as-scaling-si mple-step.html Amazon RDS Multi-AZ deployments provide enhanced availability and durability for Database (DB) Instances, making them a natural fit for production database workloads. When you provision a Multi-AZ DB Instance, Amazon RDS automatically creates a primary DB Instance and synchronously replicates the data to a standby instance in a different Availability Zone (AZ). Cach AZ runs on its own physically distinct, independent infrastructure, and is engineered to be highly reliable. In case of an infrastructure failure, Amazon RDS performs an automatic failover to the standby for to a read replica in the case of Amazon Aurora), so that you can resume database operations as soon as the failover is complete. For more information on RDS Multi-AZ please refer to the below link:
https://aws.amazon.com/rds/details/multi-az/
Option A is invalid because if you already have in-built metrics from Cloudwatch, why would you want to spend more in using a a third-party monitoring solution.
Option B is invalid because health checks are already a feature of AWS CLB Option C is invalid because the database CPU usage should not be used to scale the web tier.
Option C is invalid because increasing the instance size does not always guarantee that the solution will not become unhealthy.
Option F is invalid because increasing Read-Replica's will not suffice for write operations if the primary DB fails.
NEW QUESTION 70
When thinking of AWS OpsWorks, which of the following is true?
- A. Layers have many stacks, stacks have many instances.
- B. Instances have many stacks, stacks have many layers.
- C. Layers have many instances, instances have many stacks.
- D. Stacks have many layers, layers have many instances.
Answer: D
Explanation:
The stack is the core AWS OpsWorks component. It is basically a container for AWS resources-Amazon
EC2 instances, Amazon RDS database instances, and so on-that have a common purpose and should
be logically managed together. You define the stack's constituents by adding one or more layers. A layer
represents a set of Amazon EC2 instances that serve a particular purpose, such as serving applications
or hosting a database server. An instance represents a single computing resource, such as an Amazon
EC2 instance.
Reference: http://docs.aws.amazon.com/opsworks/latest/userguide/welcome.html
NEW QUESTION 71
A company develops and maintains a web application using Amazon EC2 instances and an Amazon RDS for SQL Server DB instance in a single Availability Zone The resources need to run only when new deployments are being tested using AWS CodePipeline. Testing occurs one or more times a week and each test takes 2-3 hours to run. A DovOps engineer wants a solution that does not change the architecture components.
Which solution will meet these requirements in the MOST cost-effective manner?
- A. Put the EC2 instances into an Auto Scaling group. Schedule scaling to run at the start of the deployment tests.
- B. Subscribe Amazon CloudWatch Events to CodePipeline to trigger AWS Systems Manager Automation documents that start and stop all EC2 and RDS instances before and after deployment tests.
- C. Convert the RDS database to an Amazon Aurora Serverless database Use an AWS Lambda function to start and stop the EC2 instances before and after tests
- D. Replace the EC2 instances with EC2 Spot Instances and the RDS database with an RDS Reserved Instance.
Answer: C
NEW QUESTION 72
One of your engineers has written a web application in the Go Programming language and has asked your
DevOps team to deploy it to AWS. The application code is hosted on a Git repository.
What are your options? (Select Two)
- A. Create a new AWS Elastic Beanstalk application and configure a Go environment to host your
application, Using Git check out the latest version of the code, once the local repository for Elastic
Beanstalk is configured use "eb create" command to create an environment and then use "eb deploy"
command to deploy the application. - B. Writea Dockerf ile that installs the Go base image and uses Git to fetch yourapplication. Create a new
AWS OpsWorks stack that contains a Docker layer thatuses the Dockerrun.aws.json file to deploy your
container and then use theDockerfile to automate the deployment. - C. Writea Dockerfile that installs the Go base image and fetches your application usingGit, Create an AWS
CloudFormation template that creates and associates an AWS::EC2::lnstanceresource type with an
AWS::EC2::Container resource type. - D. Writea Dockerfile that installs the Go base image and fetches your application usingGit, Create a new
AWS Elastic Beanstalk application and use this Dockerfile toautomate the deployment.
Answer: A,D
Explanation:
Explanation
Opsworks works with Chef recipes and not with Docker containers so Option B and C are invalid.
There is no AWS::CC2::Container resource for Cloudformation so Option D is invalid.
Below is the documentation on Clastic beanstalk and Docker
Clastic Beanstalk supports the deployment of web applications from Docker containers. With Docker
containers, you can define your own runtime environment. You
can choose your own platform, programming language, and any application dependencies (such as package
managers or tools), that aren't supported by other
platforms. Docker containers are self-contained and include all the configuration information and software
your web application requires to run.
For more information on Clastic beanstalk and Docker, please visit the link:
* http://docs.aws.a
mazon.com/elasticbeanstalk/latest/dg/create_deploy_docker.html
* https://docs.aws.a mazon.com/elasticbeanstalk/latest/dg/eb-cl i3-getting-started.htm I
* https://docs^ws.a mazon.com/elasticbeanstalk/latest/dg/eb3-cli-git. html
NEW QUESTION 73
......
Step by Step Guide to Prepare for DOP-C01 Exam: https://www.guidetorrent.com/DOP-C01-pdf-free-download.html
AWS Certified DevOps Engineer DOP-C01 Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1m_MIjDpHLfcsfUkA_l1b6la4iuXtrjbk