Question 1

A company builds an application that uses an Application Load Balancer in front of Amazon EC2 instances

that are in an Auto Scaling group. The

application is stateless. The Auto Scaling group uses a custom AMI that is fully prebuilt. The EC2 instances

do not have a custom bootstrapping process.

The AMI that the Auto Scaling group uses was recently deleted. The Auto Scaling group's scaling activities

show failures because the AMI ID does not exist.

Which combination of steps should a DevOps engineer take to meet these requirements? (Select THREE.)

Options :

A : Create a new launch template that uses the new AMI.

B : Update the Auto Scaling group to use the new launch template.

C : Reduce the Auto Scaling group-s desired capacity to O.

D : Increase the Auto Scaling group-s desired capacity by I.

E : Create a new AMI from a running EC2 instance in the Auto Scaling group.

F :

Create a new AMI by copying the most recent public AMI of the operating system that the EC2 instances use.

Answer: A,B,F

Question 2

A DevOps engineer is working on a project that is hosted on Amazon Linux and has failed a security review. The DevOps manager has been asked to review the company buildspec.yaml file for an AWS CodeBuild project and provide recommendations. The buildspec.yaml file is configured as follows:

What changes should be recommended to comply with AWS security best practices? (Choose three.)

Options :

A : Add a post-build command to remove the temporary files from the container before termination to ensure they cannot be seen by other CodeBuild users.

B : Update the CodeBuild project role with the necessary permissions and then remove the AWS credentials from the environment variable.

C : Store the DB_PASSWORD as a SecureString value in AWS Systems Manager Parameter Store and then remove the DB_PASSWORD from the environment variables.

D : Move the environment variables to the ‘db-deploy-bucket’ Amazon S3 bucket, add a prebuild stage to download, then export the variables.

E : Use AWS Systems Manager run command versus scp and ssh commands directly to the instance.

F : Scramble the environment variables using XOR followed by Base64, add a section to install, and then run XOR and Base64 to the build phase.

Answer: A,B,D

Question 3

A government agency is planning to launch a distributed system in AWS that processes thousands of transactions every day. The agency purchased a proprietary software with 100 licenses, which can be used by a maximum of 100 application servers. A DevOps Engineer needs to set up an automated solution that dynamically allocates the software licenses to the application servers. The Engineer also needs to provide a way to see the list of available licenses that are not in use.

Which of the following options below is the MOST suitable way to accomplish this task?

Options :

A : Prepare a CloudFormation template that uses an Auto Scaling group to launch the EC2 instances with an associated lifecycle hook for Instance Terminate. Store the 100 license codes to AWS Certificate Manager (ACM). Pull an available license from ACM using the User Data script of the instance upon launch. Use the lifecycle hook to update the license mapping after the instance is terminated.

B : Prepare a CloudFormation template that uses an Auto Scaling group to launch the EC2 instances with an associated lifecycle hook for Instance Terminate. Store the 100 license codes to a public S3 bucket. Pull an available license from the bucket using the User Data script of the instance upon launch. Use the lifecycle hook to update the license mapping after the instance is terminated.

C : Prepare a CloudFormation template that uses an Auto Scaling group to launch the EC2 instances with an associated lifecycle hook for Instance Terminate. Store the 100 license codes to a DynamoDB table. Pull an available license from the DynamoDB table using the User Data script of the instance upon launch. Use the lifecycle hook to update the license mapping after the instance is terminated.

D : Prepare a CloudFormation template that uses an Auto Scaling group to launch the EC2 instances. Store the 100 license codes to AWS Systems Manager Parameter Store. Pull an available license from the Systems manager using the instance metadata script of the instance upon launch. Configure the metadata script to update the license mapping after the instance is terminated.

Answer: C

Question 4

A leading telecommunications company is using CloudFormation templates to deploy enterprise applications to their production, staging, and development environments in AWS. Their current process involves manual changes to their CloudFormation templates in order to specify the configuration variables and static attributes for each environment. The DevOps Engineer was tasked to set up automated deployments using AWS CodePipeline and ensure that the CloudFormation template is reusable across multiple pipelines.

How should the DevOps Engineer satisfy this requirement?

Options :

A : Set up a Lambda-backed custom resource in the CloudFormation templates. Configure the custom resource to monitor the status of the pipeline in AWS CodePipeline in order to detect which environment was launched. Use the cfn-init helper script to modify the launch configuration of each application stack based on its environment.

B : Launch a new pipeline using AWS CodePipeline that has multiple stages for each environment and configure it to use input parameters. Switch the associated UserData of the EC2 instances to match the environment where the application stack is being launched using CloudFormation mappings. Specify parameter overrides for AWS CloudFormation actions.

C : Manually configure the CloudFormation templates to use input parameters. Add a configuration that whenever the CloudFormation stack is updated, it will dynamically modify the LaunchConfiguration and UserData sections of the EC2 instances.

D : Launch a new pipeline using AWS CodePipeline for each environment with multiple stages for each application. Trigger the CloudFormation deployments using a Lambda function to dynamically modify the UserData of the EC2 instances that were launched in each environment.

Answer: B

Question 5

Your API servers are hosted on a cluster of EC2 instances deployed using Elastic Beanstalk. You need to deploy a new version and also change the instance type of the instances from m4.large to m4.xlarge. Since this is a production workload already operating at 80?pacity, you want to ensure that the workload on the current EC2 instances does not increase while doing the deployment.

Which of the following deployment policy will you implement which will incur the LEAST amount of cost?

Options :

A : Use Immutable as deployment policy to deploy the new version with complete capacity.

B : Use Rolling as the deployment policy to maintain the capacity of the cluster during the deployment.

C : Use All at once as deployment policy to deploy the new version with complete capacity.

D : Use Rolling with additional batch as deployment policy to maintain the capacity of the cluster during the deployment.

Answer: D