AWS-Certified-DevOps-Engineer-Professional Free Practice Test

A startup company is developing a web application on AWS. It plans to use Amazon RDS for persistence and deploy the application to Amazon EC2 with an Auto Scaling group. The company would also like to separate the environments for development, testing, and production.
What is the MOST secure and flexible approach to manage the application configuration?

1. A. Create a property file to include the configuration and the encrypted password
2. B. Check in the property file to the source repository, package the property file with the application, and deploy the applicatio
3. C. Create an environment tag for the EC2 instances and tag the instances respectivel
4. D. The application will extract the necessary property values based on the environment tag.
5. E. Create a property file for each environment to include the environment-specific configuration and an encrypted passwor
6. F. Check in the property files to the source repositor
7. G. During deployment, use only the environment-specific property file with the applicatio
8. H. The application will read the needed property values from the deployed property file.
9. I. Create a property file for each environment to include the environment-specific configuratio
10. J. Create a private Amazon S3 bucket and save the property files in the bucke
11. K. Save the passwords in the bucket with AWS KMS encryptio
12. L. During deployment, the application will read the needed property values from the environment-specific property file in the S3 bucket.
13. M. Create a property file for each environment to include the environment-specific configuratio
14. N. Create a private Amazon S3 bucket and save the property files in the bucke
15. O. Save the encrypted passwords in the AWS Systems Manager Parameter Stor
16. P. Create an environment tag for the EC2 instances and tag the instances respectivel
17. Q. The application will read the needed property values from theenvironment-specific property file in the S3 bucket and the parameter store.

Correct Answer: D

An Application team has three environments for their application: development, pre-production, and production. The team recently adopted AWS CodePipeline.
However, the team has had several deployments of misconfigured or nonfunctional development code into the production environment, resulting in user disruption and downtime. The DevOps Engineer must review the pipeline and add steps to identify problems with the application before it is deployed.
What should the Engineer do to identify functional issues during the deployment process? (Choose two.)

1. A. Use Amazon Inspector to add a test action to the pipelin
2. B. Use the Amazon Inspector Runtime Behavior Analysis Inspector rules package to check that the deployed code complies with company security standards before deploying it to production.
3. C. Using AWS CodeBuild to add a test action to the pipeline to replicate common user activities and ensure that the results are as expected before progressing to production deployment.
4. D. Create an AWS CodeDeploy action in the pipeline with a deployment configuration that automatically deploys the application code to a limited number of instance
5. E. The action then pauses the deployment so that the QA team can review the application functionalit
6. F. When the review is complete, CodeDeploy resumes and deploys the application to the remaining production Amazon EC2 instances.
7. G. After the deployment process is complete, run a testing activity on an Amazon EC2 instance in a different region that accesses the application to simulate user behavio
8. H. If unexpected results occur, the testing activity sends a warning to an Amazon SNS topi
9. I. Subscribe to the topic to get updates.
10. J. Add an AWS CodeDeploy action in the pipeline to deploy the latest version of the development code to pre-productio
11. K. Add a manual approval action in the pipeline so that the QA team can test and confirm the expected functionalit
12. L. After the manual approval action, add a second CodeDeploy action that deploys the approved code to the production environment.

Correct Answer: BE
https://docs.aws.amazon.com/codepipeline/latest/userguide/integrations-action-type.html#integrations-test https://docs.aws.amazon.com/codepipeline/latest/userguide/integrations-action-type.html#integrations-deploy

A Security team is concerned that a Developer can unintentionally attach an Elastic IP address to an Amazon EC2 instance in production. No Developer should be allowed to attach an Elastic IP address to an instance. The Security team must be notified if any production server has an Elastic IP address at any time.
How can this task be automated?

1. A. Use Amazon Athena to query AWS CloudTrail logs to check for any associate-address attempt
2. B. Create an AWS Lambda function to dissociate the Elastic IP address from the instance, and alert the Security team.
3. C. Attach an IAM policy to the Developer's IAM group to deny associate-address permission
4. D. Create a custom AWS Config rule to check whether an Elastic IP address is associated with any instance tagged as production, and alert the Security team.
5. E. Ensure that all IAM groups are associated with Developers do not have associate-address permissions.Create a scheduled AWS Lambda function to check whether an Elastic IP address is associated with any instance tagged as production, and alert the Security team if an instance has an Elastic IP address associated with it.
6. F. Create an AWS Config rule to check that all production instances have the EC2 IAM roles that include deny associate-address permission
7. G. Verify whether there is an Elastic IP address associated with any instance, and alert the Security team if an instance has an Elastic IP address associated with it.

Correct Answer: B
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-migrate-ipv6.html#vpc-migrate-ipv6-sg-rules

A DevOps engineer is writing an AWS CloudFormation template to stand up a web service that will run on Amazon EC2 instances in a private subnet behind an ELB Application Load Balancer. The Engineer must ensure that the service can accept requests from clients that have IPv6 addresses.
Which configuration items should the Engineer incorporate into the CloudFormation template to allow IPv6 clients to access the web service?

1. A. Associate an IPv6 CIDR block with the Amazon VPC and subnets where the EC2 instances will live.Create route table entries for the IPv6 network, use EC2 instance types that support IPv6, and assign IPv6 addresses to each EC2 instance.
2. B. Replace the Application Load Balancer with a Network Load Balance
3. C. Associate an IPv6 CIDR block with the Virtual Private Cloud (VPC) and subnets where the Network Load Balancer lives, and assign the Network Load Balancer an IPv6 Elastic IP address.
4. D. Assign each EC2 instance an IPv6 Elastic IP addres
5. E. Create a target group and add the EC2 instances as target
6. F. Create a listener on port 443 of the Application Load Balancer, and associate the newly created target group as the default target group.
7. G. Create a target group and add the EC2 instances as target
8. H. Create a listener on port 443 of the Application Load Balance
9. I. Associate the newly created target group as the default target grou
10. J. Select a dual stack IP address, and create a rule in the security group that allows inbound traffic from anywhere.

Correct Answer: D

A DevOps engineer is assisting with a multi-Region disaster recovery solution for a new application. The application consists of Amazon EC2 instances running in an Auto Scaling group and an Amazon Aurora MySQL DB cluster. The application must be available with an RTO of 120 minutes and an RPO of 60 minutes.
What is the MOST cost-effective way to meet these requirements?

1. A. Launch an Aurora DB cluster as an Aurora Replica in a different Regio
2. B. Create an AWS CloudFormation template for all compute resources and create a stack in two Region
3. C. Write a script that promotes the Aurora Replica to the primary instance in the event of a failure.
4. D. Launch an Aurora DB cluster as an Aurora Replica in a different Region and configure automatic cross-Region failove
5. E. Create an AWS CloudFormation template that includes an Auto Scaling group, and create a stack in two Region
6. F. Write a script that updates the CloudFormation stack in the disaster recovery Region to increase the number of instances.
7. G. Use AWS Lambda to create and copy a snapshot of the Aurora DB cluster to the destination Region hourl
8. H. Create an AWS CloudFormation template that includes an Auto Scaling group, and create a stack in two Region
9. I. Restore the Aurora DB cluster from a snapshot and update the Auto Scaling group to start launching instances.
10. J. Configure Amazon DynamoDB cross-Region replicatio
11. K. Create an AWS CloudFormation template that includes an Auto Scaling group, and create a stack in two Region
12. L. Write a script that will update the CloudFormation stack in the disaster recovery Region and promote the DynamoDB replica to the primary instance in the event of a failure.

Correct Answer: D