DOP-C01 Free Practice Test

You have a web application composed of an Auto Scaling group of web servers behind a load balancer, and create a new AMI for each application version for deployment. You have a new version to release, and you want to use the Blue-Green deployment technique to migrate users over in a controlled manner while the size of the fleet remains constant over a period of 6 hours, to ensure that the new version is performing well. What option should you choose to enable this technique while being able to roll back easily? Choose 2 answers from the options given below. Each answer presents part of the solution

1. A. Createan Auto Scaling launch configuration with the new AMI to use the new launchconfiguration and to register instances with the new load balancer S
2. B. Createan Auto Scaling launch configuration with the new AMI to use the new launchconfiguration and to register instances with the existing load balancer
3. C. UseAmazon RouteS3 weighted Round Robin to varythe proportion of requests sent tothe load balancer
4. D. -^
5. E. ConfigureElastic Load Balancing to varythe proportion of requests sent to instancesrunningthe two application versions.

Correct Answer: AC
The AWS documentation gives this example of a Blue Green deployment
<>>>•

You are trying to debug the creation of Cloudformation stack resources. Which of the following can be used to help in the debugging process?
Choose 2 answers from the options below

1. A. UseCloudtrail to debugall the API call\'s sent by the Cloudformation stack.
2. B. Usethe AWS CloudFormation console to view the status of yourstack.
3. C. Seethe logs in the/var/log directory for Linux instances
4. D. UseAWSConfig to debug all the API call\'s sent by the Cloudformation stack.

Correct Answer: BC
The AWS Documentation mentions
Use the AWS Cloud Formation console to view the status of your stack. In the console, you can view a list of stack events while your stack is being created, updated, or
deleted. From this list, find the failure event and then view the status reason for that event.
For Amazon CC2 issues, view the cloud-init and cfn logs. These logs are published on the Amazon CC2 instance in the /var/log/ directory. These logs capture processes and command outputs while AWS Cloud Formation is setting up your instance. For Windows, view the L~C2Configure service and cfn logs
in %ProgramFiles%\\Amazon\\CC2ConfigService and C:\\cfn\\log.
For more information on Cloudformation Troubleshooting, please visit the below URL: http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/troubleshooting.html

Your company uses an application hosted in AWS which conists of EC2 Instances. The logs of the EC2 instances need to be processed and analyzed in real time, since this is a requirement from the IT Security department. Which of the following can be used to process the logs in real time.

1. A. UseCloudwatch logs to process and analyze the logs in real time
2. B. UseAmazon Glacier to store the logs and then use Amazon Kinesis to process andanalyze the logs in real time
3. C. UseAmazon S3 to store the logs and then use Amazon Kinesis to process and analyzethe logs inreal time
4. D. Useanother EC2 Instance with a larger instance type to process the logs

Correct Answer: C
The AWS Documentation mentions the below Real-time metrics and reporting
You can use data collected into Kinesis Streams for simple data analysis and reporting in real time. For example, your data-processing application can work on metrics and reporting for system and application logs as the data is streaming in, rather than wait to receive batches of data.
Real-time data analytics
This combines the power of parallel processing with the value of real-time data. For example, process website clickstreams in real time, and then analyze site usability engagement using multiple different Kinesis Streams applications running in parallel.
Amazon Glacier is meant for Archival purposes and should not be used for storing the logs for real time processing.
For more information on Amazon Kinesis, please refer to the below link:
• http://docs.aws.amazon.com/streams/latest/dev/introduction.html

Your CTO has asked you to make sure that you know what all users of your AWS account are doing to change resources at all times. She wants a report of who is doing what over time, reported to her once per week, for as broad a resource type group as possible. How should you do this?

1. A. Create a global AWS CloudTrail Trai
2. B. Configure a script to aggregate the log data delivered to S3 once per week and deliver this to the CTO.
3. C. Use CloudWatch Events Rules with an SNS topic subscribed to all AWS API call
4. D. Subscribe the CTO to an email type delivery on this SNS Topic.
5. E. Use AWS 1AM credential reports to deliver a CSV of all uses of 1AM UserTokens overtime to the CTO.
6. F. Use AWS Config with an SNS subscription on a Lambda, and insert these changes over time into a DynamoDB tabl
7. G. Generate reports based on the contents of this table.

Correct Answer: A
AWS CloudTrail is an AWS service that helps you enable governance, compliance, and operational and risk auditing of your AWS account. Actions taken by a user, role, or an AWS service are recorded as events in CloudTrail. Events include actions taken in the AWS Management Console, AWS Command Line Interface, and AWS SDKs and APIs.
Visibility into your AWS account activity is a key aspect of security and operational best practices. You can use CloudTrail to view, search, download, archive, analyze, and respond to account activity across your AWS infrastructure. You can identify who or what took which action, what resources were acted upon, when the event occurred, and other details to help you analyze and respond to activity in your AWS account.
For more information on Cloudtrail, please visit the below URL:
• http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html

What would you set in your CloudFormation template to fire up different instance sizes based off of environment type? i.e. (If this is for prod, use m1.large instead of t1.micro)

1. A. Outputs
2. B. Resources
3. C. Mappings
4. D. conditions

Correct Answer: D
The optional Conditions section includes statements that define when a resource is created or when a property is defined. For example, you can compare whether a value is equal to another value. Based on the result of that condition, you can conditionally create resources. If you have multiple conditions, separate them with commas.
For more information on Cloudformation conditions please visit the below link
http://docs^ws.a mazon.com/AWSCIoudFormation/latest/UserGuide/cond itions-section- structure.htm I