AWS-Certified-DevOps-Engineer-Professional Free Practice Test

A company has an application that is using a MySQL -compatible Amazon Aurora Multi-AZ DB cluster as the database A cross-Region read replica has been created for disaster recovery purposes A DevOps engineer wants to automate the promotion of the replica so it becomes the primary database instance in the event of a failure
Which solution will accomplish this?

1. A. Configure a latency-based Amazon Route 53 CNAME with health checks so it points to both the primary and replica endpoints Subscribe an Amazon SNS topic to Amazon RDS failure notifications from AWS CloudTrail and use that topic to trigger an AWS Lambda function that will promote the replica instance as the master.
2. B. Create an Aurora custom endpoint to point to the primary database instance Configure the application to use this endpoint Configure AWS CloudTrail to run an AWS Lambda function to promote the replica instance and modify the custom endpoint to point to the newly promoted instance.
3. C. Create an AWS Lambda function to modify the application's AWS CloudFormation template to promote the replica, apply the template to update the stack, and pout the application to the newly promoted instance Create an Amazon CloudWatch alarm to trigger this Lambda function after the failure event occurs
4. D. Store the Aurora endpoint in AWS Systems Manager Parameter Store Create an Amazon EventBridge (Amazon CloudWatch Events) event that detects the database failure and runs an AWS Lambdafunction to promote the replica instance and update the endpoint URL stored in AWS Systems Manager Parameter Store Code the application to reload the endpoint from Parameter Store if a database connection fails.

Correct Answer: A

A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts.
The buildspec.yml file contains the following:

The DevOps Engineer has noticed that anybody with an AWS account is able to download the artifacts. What steps should the DevOps Engineer take to stop this?

1. A. Modify the post_build to command to use ""-acl public-read and configure a bucket policy that grants read access to the relevant AWS accounts only.
2. B. Configure a default ACL for the S3 bucket that defines the set of authenticated users as the relevant AWS accounts only and grants read-only access.
3. C. Create an S3 bucket policy that grants read access to the relevant AWS accounts and denies read access to the principal "*"
4. D. Modify the post_build command to remove ""-acl authenticated-read and configure a bucket policy that allows read access to the relevant AWS accounts only.

Correct Answer: D

A DevOps engineer has automated a web service deployment using AWS CodePipelme with the following steps:
• An AWS CodeBuild project compiles the deployment artifact and runs unit tests.
• An AWS CodeDeploy deployment group deploys the web service to Amazon EC2 instances in the staging environment.
• A CodeDeploy deployment group deploys the web service to EC2 instances in the production environment The quality assurance (QA) team has asked for permission to inspect the build artifact before the deployment to the production environment occurs. The OA team wants to run an internal automated penetration testing tool (invoked using a REST API call) to run some manual tests.
Which combination of actions will fulfill this request? (Select TWO.)

1. A. Insert a manual approval action between the test and deployment actions of Jtue pipeline.
2. B. Modify the buildspec.yml file for the compilation stage to require manual approval before completion.
3. C. Update the CodeDeploy deployment group so it requires manual approval to proceed
4. D. Update the pipeline to directly trigger the REST API for the automated penetration testing tool.
5. E. Update the pipeline to invoke a Lambda function that triggers the REST API for the automated penetration testing tool.

Correct Answer: BD

A DevOps Engineer must create a Linux AMI in an automated fashion. The newly created AMI identification must be stored in a location where other build pipelines can access the new identification programmatically
What is the MOST cost-effective way to do this?

1. A. Build a pipeline in AWS CodePipeline to download and save the latest operating system Open Virtualization Format (OVF) image to an Amazon S3 bucket, then customize the image using the guestfish utilit
2. B. Use the virtual machine (VM) import command to convert the OVF to an AMI, and store the AMI identification output as an AWS Systems Manager parameter.
3. C. Create an AWS Systems Manager automation document with values instructing how the image should be create
4. D. Then build a pipeline in AWS CodePipeline to execute the automation document to build the AMI when triggere
5. E. Store the AMI identification output as a Systems Manager parameter.
6. F. Build a pipeline in AWS CodePipeline to take a snapshot of an Amazon EC2 instance running the latest version of the applicatio
7. G. Then start a new EC2 instance from the snapshot and update the running instance using an AWS Lambda functio
8. H. Take a snapshot of the updated instance, then convert it to an AM
9. I. Store the AMI identification output in an Amazon DynamoDB table.
10. J. Launch an Amazon EC2 instance and install Packe
11. K. Then configure a Packer build with values defining how the image should be create
12. L. Build a Jenkins pipeline to invoke the Packer build when triggered to build an AM
13. M. Store the AMI identification output in an Amazon DynamoDB table.

Correct Answer: D

An online company uses Amazon EC2 Auto Scaling extensively to provide an excellent customer experience while minimizing the number of running EC2 instances. The company's self-hosted Puppet environment in the application layer manages the configuration of the instances. The IT manager wants the lowest licensing costs and wants to ensure that whenever the EC2 Auto Scaling group scales down, removed EC2 instances are deregistered from the Puppet master as soon as possible.
How can the requirement be met?

1. A. At instance launch time, use EC2 user data to deploy the AWS CodeDeploy agen
2. B. Use CodeDeploy to install the Puppet agen
3. C. When the Auto Scaling group scales out, run a script to register the newly deployed instances to the Puppet maste
4. D. When the Auto Scaling group scales in, use the EC2 Auto Scaling lifecycle hook to trigger de-registration from the Puppet maste
5. E. EC2_INSTANCE_TERMINATING
6. F. Bake the AWS CodeDeploy agent into the base AM
7. G. When the Auto Scaling group scales out, use CodeDeploy to install the Puppet agent, and execute a script to register the newly deployed instances to the Puppet maste
8. H. When the Auto Scaling group scales in, use the CodeDeploy ApplicationStop lifecycle hook to run a script to de-register the instance from the Puppet master.
9. I. At instance launch time, use EC2 user data to deploy the AWS CodeDeploy agen
10. J. When the Auto Scaling group scales out, use CodeDeploy to install the Puppet agent, and run a script to register the newly deployed instances to the Puppet maste
11. K. When the Auto Scaling group scales in, use the EC2 user data instance stop script to run a script to de-register the instance from the Puppet master.
12. L. Bake the AWS Systems Manager agent into the base AM
13. M. When the Auto Scaling group scales out, use the AWS Systems Manager to install the Puppet agent, and run a script to register the newly deployed instances to the Puppet maste
14. N. When the Auto Scaling group scales in, use the Systems Manager instance stop lifecycle hook to run a script to de-register the instance from the Puppet master.

Correct Answer: C