DOP-C01 Free Practice Test

You are a Devops engineerforyourcompany. You have been instructed to deploy docker containers using the Opswork service. How could you achieve this? Choose 2 answers from the options given below

1. A. Usecustom cookbooks for your Opswork stack and provide the Git repository which hasthe chef recipes for the Docker container
2. B. ^
3. C. UseElastic beanstalk to deploy docker containers since this is not possible inOpswor
4. D. Then attach the elastic beanstalk environment as a layer in Opswork.
5. E. UseCloudformation to deploy docker containers since this is not possible inOpswor
6. F. Then attach the Cloudformation resources as a layer in Opswork.
7. G. Inthe App for Opswork deployment, specify the git url for the recipes which willdeploy the applications in the docker environment.

Correct Answer: AD
This is mentioned in the AWS documentation
AWS OpsWorks lets you deploy and manage application of all shapes and sizes. Ops Works layers let you create blueprints for CC2 instances to install and configure any software that you want.
For more information on Opswork and Docker, please refer to the below link:
• https://aws.amazon.com/blogs/devops/running-docker-on-aws-opsworks/

You want to pass queue messages that are 1GB each. How should you achieve this?

1. A. Use Kinesis as a buffer stream for message bodie
2. B. Store the checkpoint id for the placement in the Kinesis Stream in SQS.
3. C. Use the Amazon SQS Extended Client Library for Java and Amazon S3 as a storage mechanism for message bodies.
4. D. Use SQS\'s support for message partitioning and multi-part uploads on Amazon S3.
5. E. Use AWS EFS as a shared pool storage mediu
6. F. Store filesystem pointers to the files on disk in the SQS message bodies.

Correct Answer: B
You can manage Amazon SQS messages with Amazon S3. This is especially useful for storing and consuming messages with a message size of up to 2 GB. To manage
Amazon SQS messages with Amazon S3, use the Amazon SQS Extended Client Library for Java. Specifically, you use this library to:
• Specify whether messages are always stored in Amazon S3 or only when a message\'s size exceeds 256 KB.
• Send a message that references a single message object stored in an Amazon S3 bucket.
• Get the corresponding message object from an Amazon S3 bucket.
• Delete the corresponding message object from an Amazon S3 bucket.
For more information on processing large messages for SQS, please visit the below URL: http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-s3- messages. html

You have an application hosted in AWS. You wanted to ensure that when certain thresholds are reached, a Devops Engineer is notified. Choose 3 answers from the options given below

1. A. Use CloudWatch Logs agent to send log data from the app to CloudWatch Logs from Amazon EC2 instances
2. B. Pipe data from EC2 to the application logs using AWS Data Pipeline and CloudWatch
3. C. Once a CloudWatch alarm is triggered, use SNS to notify the Senior DevOps Engineer.
4. D. Set the threshold your application can tolerate in a CloudWatch Logs group and link a CloudWatch alarm on that threshold.

Correct Answer: ACD
You can use Cloud Watch Logs to monitor applications and systems using log data. For example,
CloudWatch Logs can track the number of errors that occur in your
application logs and send you a notification whenever the rate of errors exceeds a threshold you specify. CloudWatch Logs uses your log data for monitoring; so, no code changes are required. For example, you can monitor application logs for specific literal terms (such as "NullReferenceLxception") or count the number of occurrences of a literal term at a particular position in log data (such as "404" status codes in an Apache access log). When the term you are searching for is found, CloudWatch Logs reports the data to a CloudWatch metric that you specify. For more information on Cloudwatch Logs please refer to the below link:
http://docs.ws.amazon.com/AmazonCloudWatch/latest/logs/WhatlsCloudWatchLogs.html
Amazon CloudWatch uses Amazon SNS to send email. First, create and subscribe to an SNS topic.
When you create a CloudWatch alarm, you can add this SNS topic to send an email notification when the alarm changes state.
For more information on Cloudwatch and SNS please refer to the below link: http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/US_SetupSNS.html

Your development team wants account-level access to production instances in order to do live debugging of a highly secure environment. Which of the following should you do?

1. A. Place the credentials provided by Amazon Elastic Compute Cloud (EC2) into a secure Amazon Sample Storage Service (S3) bucket with encryption enable
2. B. Assign AWS Identity and Access Management (1AM) users to each developer so they can download the credentials file.
3. C. Place an internally created private key into a secure S3 bucket with server-side encryption using customer keys andconfiguration management, create a service account on al I the instances using this private key, and assign I AM users to each developer so they can download the fi le.
4. D. Place each developer\'s own public key into a private S3 bucket, use instance profiles and configuration management to create a user account for each developer on all instances, and place the user\'s public keys into the appropriate accoun
5. E. ^/
6. F. Place the credentials provided by Amazon EC2 onto an MFA encrypted USB drive, and physically share it with each developer so that the private key never leaves the office.

Correct Answer: C
An instance profile is a container for an 1AM role that you can use to pass role information to an CC2 instance when the instance starts.
A private S3 bucket can be created for each developer, the keys can be stored in the bucket and then assigned to the instance profile.
Option A and D are invalid, because the credentials should not be provided by a AWS EC2 Instance. Option B is invalid because you would not create a service account, instead you should create an instance profile.
For more information on Instance profiles, please refer to the below document link: from AWS
• http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-ro le-ec2_instance- profiles.htm I

Which of the following is not a component of Elastic Beanstalk?

1. A. Application
2. B. Environment
3. C. Docker
4. D. ApplicationVersion

Correct Answer: C
Answer - C
The following are the components of Clastic Beanstalk
1) Application - An Clastic Beanstalk application is a logical collection of Clastic Beanstalk components, including environments, versions, and environment configurations. In Clastic Beanstalk an application is conceptually similar to a folder
2) Application version - In Clastic Beanstalk, an application version refers to a specific, labeled iteration of deployable code for a web application
3) environment - An environment is a version that is deployed onto AWS resources. Cach environment runs only a single application version at a time, however you can run the same version or different versions in many environments at the same time.
4) environment Configuration - An environment configuration identifies a collection of parameters and settings that define how an environment and its associated resources behave.
5) Configuration Template - A configuration template is a starting point for creating unique environment configurations. For more information on the components of Clastic beanstalk please refer to the below link
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.components.html