Question 1

A company runs an application on one Amazon EC2 instance. Application metadata is stored in Amazon S3 and must be retrieved if the instance is restarted instance must restart or relaunch automatically if the instance becomes unresponsive.

Which solution will meet these requirements?

Accepted Answer

https://aws.amazon.com/blogs/mt/how-to-set-up-aws-opsworks-stacks-auto-healing-notifications-in-amazon-cloudwatch-events/

Question 2

A DevOps engineer is building an application that uses an AWS Lambda function to query an Amazon Aurora MySQL DB cluster. The Lambda function performs only read queries. Amazon EventBridge events invoke the Lambda function.

As more events invoke the Lambda function each second, the database's latency increases and the database's throughput decreases. The DevOps engineer needs to improve the performance of the application.

Which combination of steps will meet these requirements? (Select THREE.)

Accepted Answer

To improve the performance of the application, the DevOps engineer should use Amazon RDS Proxy, implement the database connection opening outside the Lambda event handler code, and connect to the proxy endpoint from the Lambda function. References:

- ? Amazon RDS Proxy is a fully managed, highly available database proxy for Amazon Relational Database Service (RDS) that makes applications more scalabl more resilient to database failures, and more secure1. By using Amazon RDS Proxy, the DevOps engineer can reduce the overhead of opening and closing connections to the database, which can improve latency and throughput2.

? The DevOps engineer should connect the proxy to the Aurora cluster reader

- endpoint, which allows read-only connections to one of the Aurora Replicas in the DB cluster3. This can help balance the load across multiple read repli improve performance for read-intensive workloads4.
- ? The DevOps engineer should implement the database connection opening outside the Lambda event handler code, which means using a global variable to sto the database connection object5. This can enable connection reuse across multiple invocations of the Lambda function, which can reduce latency and impro performance.
- ? The DevOps engineer should connect to the proxy endpoint from the Lambda function, which is a unique URL that represents the proxy. This can allow the Lambda function to access the database through the proxy, which can provide benefits such as connection pooling, load balancing, failover handling, and enhanced security.
- ? The other options are incorrect because:

Question 3

A company's DevOps engineer uses AWS Systems Manager to perform maintenance tasks during maintenance windows. The company has a few Amazon EC2 instances that require a restart after notifications from AWS Health. The DevOps engineer needs to implement an automated solution to remediate these notifications. The DevOps engineer creates an Amazon EventBridge rule.

How should the DevOps engineer configure the EventBridge rule to meet these requirements?

Accepted Answer

AWS Health provides real-time events and information related to your AWS infrastructure. It can be integrated with Amazon EventBridge to act upon the h events automatically. If the maintenance notification from AWS Health indicates that an EC2 instance requires a restart, you can set up an EventBridge r respond to such events. In this case, the target of this rule would be a Lambda function that would trigger a Systems Manager automation to restart the instance during a maintenance window. Remember, AWS Health is the source of the events (not EC2 or Systems Manager), and AWS Lambda can be used to execute complex remediation tasks, such as scheduling maintenance tasks via Systems Manager.

## Certshared now are offering 100% pass ensure AWS-Certified-DevOps-Engineer-Professional dumps!

https://www.certshared.com/exam/AWS-Certified-DevOps-Engineer-Professional/ (136 Q&As)

The following are the steps involved in configuring the EventBridge rule to meet these requirements:

- ? Configure an event source of AWS Health, a service of EC2, and an event type that indicates instance maintenance.
- ? Target a newly created AWS Lambda function that registers an automation task to restart the EC2 instance during a maintenance window. The AWS Lambda function will be triggered by the event from AWS Health. The function will then register an automation task to restart the EC2 instance d the next maintenance window.

Question 4

A company is building a new pipeline by using AWS CodePipeline and AWS CodeBuild in a build account. The pipeline consists of two stages. The first stag CodeBuild job to build and package an AWS Lambda function. The second stage consists of deployment actions that operate on two different AWS accounts a development environment account and a production environment account. The deployment stages use the AWS Cloud Format ion action that CodePipeline invokes to deploy the infrastructure that the Lambda function requires.

A DevOps engineer creates the CodePipeline pipeline and configures the pipeline to encrypt build artifacts by using the AWS Key Management Service (AWS KMS) AWS managed key for Amazon S3 (the aws/s3 key). The artifacts are stored in an S3 bucket When the pipeline runs, the Cloud Formation actions fail w an access denied error.

Which combination of actions must the DevOps engineer perform to resolve this error? (Select TWO.)

Accepted Answer

Correct answer: BE

Question 5

A company is migrating its on-premises Windows applications and Linux applications to AWS. The company will use automation to launch Amazon EC2 instance to mirror the on- premises configurations. The migrated applications require access to shared storage that uses SMB for Windows and NFS for Linux.

The company is also creating a pilot light disaster recovery (DR) environment in another AWS Region. The company will use automation to launch and confi the EC2 instances in the DR Region. The company needs to replicate the storage to the DR Region. Which storage solution will meet these requirements?

Accepted Answer

To meet the requirements of migrating its on-premises Windows and Linux applications to AWS and creating a pilot light DR environment in another AWS Reg the company should use Amazon FSx for NetApp ONTAP for the application storage. Amazon FSx for NetApp ONTAP is a fully managed service that provides highly reliable, scalable, high- performing, and feature-rich file storage built on NetApp's popular ONTAP file system. FSx for ONTAP supports multiple including SMB for Windows and NFS for Linux, so the company can access the shared storage from both types of applications. FSx for ONTAP also supports NetApp SnapMirror replication, which enables the company to replicate the storage to the DR Region. NetApp SnapMirror replication is efficient, secure, incremental, and it preserves the data deduplication and compression benefits of FSx for ONTAP. The company can use automation to launch and configure t EC2 instances in the DR Region and then use NetApp SnapMirror to restore the data from the primary Region.

The other options are not correct because they do not meet the requirements or follow best practices. Using Amazon S3 for the application storage is not option because S3 is an object storage service that does not support SMB or NFS protocols natively. The company would need to use additional services or software to mount S3 buckets as file systems, which would add complexity and cost. Using Amazon EBS for the application storage is also not a good optio because EBS is a block storage service that does not support SMB or NFS protocols natively. The company would need to set up and manage file servers on instances to provide shared access to the EBS volumes, which would add overhead and maintenance. Using a Volume Gateway in AWS Storage Gateway for the application storage is not a valid option because Volume Gateway does not support SMB protocol. Volume Gateway only supports iSCSI protocol, which means that only Linux applications can access the shared storage.

References:

- ? 1: What is Amazon FSx for NetApp ONTAP? - FSx for ONTAP
- ? 2: Amazon FSx for NetApp ONTAP
- ? 3: Amazon FSx for NetApp ONTAP | NetApp
- ? 4: AWS Announces General Availability of Amazon FSx for NetApp ONTAP
- ? : Replicating Data with NetApp SnapMirror - FSx for ONTAP
- ? : What Is Amazon S3? - Amazon Simple Storage Service
- ? : What Is Amazon Elastic Block Store (Amazon EBS)? - Amazon Elastic Compute Cloud
- ? : What Is AWS Storage Gateway? - AWS Storage Gateway

Question 6

A company has an application that runs on a fleet of Amazon EC2 instances. The application requires frequent restarts. The application logs contain erro messages when a restart is required. The application logs are published to a log group in Amazon CloudWatch Logs.

## Certshared now are offering 100% pass ensure AWS-Certified-DevOps-Engineer-Professional dumps!

https://www.certshared.com/exam/AWS-Certified-DevOps-Engineer-Professional/ (136 Q&As)

An Amazon CloudWatch alarm notifies an application engineer through an Amazon Simple Notification Service (Amazon SNS) topic when the logs contain a lar number of restart- related error messages. The application engineer manually restarts the application on the instances after the application engineer re notification from the SNS topic.

A DevOps engineer needs to implement a solution to automate the application restart on the instances without restarting the instances. Which solution will meet these requirements in the MOST operationally efficient manner?

Accepted Answer

This solution meets the requirements in the most operationally efficient manner by automating the application restart process on the instances without them. When the CloudWatch alarm enters the ALARM state, the EventBridge rule is triggered, which in turn invokes the Systems Manager Automation runbook that contains the script to restart the application on the instances.

Question 7

A company is developing an application that will generate log events. The log events consist of five distinct metrics every one tenth of a second and pr large amount of data The company needs to configure the application to write the logs to Amazon Time stream The company will configure a daily query aga the Timestream table.

Which combination of steps will meet these requirements with the FASTEST query performance? (Select THREE.)

Accepted Answer

A comprehensive and detailed explanation is:

- ? Option A is correct because using batch writes to write multiple log events in a single write operation is a recommended practice for optimizing the p and cost of data ingestion in Timestream. Batch writes can reduce the number of network round trips and API calls, and can also take advantage of parall processing by Timestream. Batch writes can also improve the compression ratio of data in the memory store and the magnetic store, which can reduce the s costs and improve the query performance1.
- ? Option B is incorrect because writing each log event as a single write operation is not a recommended practice for optimizing the performance and cost ingestion in Timestream. Writing each log event as a single write operation would increase the number of network round trips and API calls, and would al the compression ratio of data in the memory store and the magnetic store. This would increase the storage costs and degrade the query performance1.
- ? Option C is incorrect because treating each log as a single-measure record is not a recommended practice for optimizing the query performance in Times Treating each log as a single-measure record would result in creating multiple records for each timestamp, which would increase the storage size and the latency. Moreover, treating each log as a single-measure record would require using joins to query multiple measures for the same timestamp, which would complexity and overhead to the query processing2.

? Option D is correct because treating each log as a multi-measure record is a recommended practice for optimizing the query performance in Timestream. Treating each log as a multi-measure record would result in creating a single record for each timestamp, which would reduce the storage size and the que latency. Moreover, treating each log as a multi-measure record would allow querying multiple measures for the same timestamp without using joins, which simplify and speed up the query processing2.

- ? Option E is incorrect because configuring the memory store retention period to be longer than the magnetic store retention period is not a valid optio Timestream. The memory store retention period must always be shorter than or equal to the magnetic store retention period. This ensures that data is mov the memory store to the magnetic store before it expires out of the memory store3.

? Option F is correct because configuring the memory store retention period to be shorter than the magnetic store retention period is a valid option in The memory store retention period determines how long data is kept in the memory store, which is optimized for fast point-in-time queries. The magnetic retention period determines how long data is kept in the magnetic store, which is optimized for fast analytical queries. By configuring these retention appropriately, you can balance your storage costs and query performance according to your application needs3.

## References:

- ? 1: Batch writes
- ? 2: Multi-measure records vs. single-measure records
- ? 3: Storage

Question 8

A development team uses AWS CodeCommit, AWS CodePipeline, and AWS CodeBuild to develop and deploy an application. Changes to the code are submitted by pull requests. The development team reviews and merges the pull requests, and then the pipeline builds and tests the application.

Over time, the number of pull requests has increased. The pipeline is frequently blocked because of failing tests. To prevent this blockage, the develop wants to run the unit and integration tests on each pull request before it is merged.

Which solution will meet these requirements?

Accepted Answer

CodeCommit generates events in CloudWatch, CloudWatch triggers the CodeBuild https://aws.amazon.com/es/blogs/devops/complete-ci-cd-with-awscodecommit-aws-codebuild-aws-codedeploy-and-aws-codepipeline/

Question 9

A company is launching an application that stores raw data in an Amazon S3 bucket. Three applications need to access the data to generate reports. The d must be redacted differently for each application before the applications can access the data.

Which solution will meet these requirements?

Accepted Answer

- ? The best solution is to use S3 Object Lambda1, which allows you to add your own code to S3 GET, LIST, and HEAD requests to modify and process data as returned to an application2. This way, you can redact the data differently for each application without creating and storing multiple copies of the data proxies.
- ? The other solutions are less efficient or scalable because they require replicating the data to multiple buckets, streaming the data through Kinesis, data in S3 access points.

References: 1: Amazon S3 Features | Object Lambda | AWS 2: Transforming objects with S3 Object Lambda - Amazon Simple Storage Service

Question 10

A development team uses AWS CodeCommit for version control for applications. The development team uses AWS CodePipeline, AWS CodeBuild. and AWS CodeDeploy for CI/CD infrastructure. In CodeCommit, the development team recently merged pull requests that did not pass long-running tests in the code base. The development team needed to perform rollbacks to branches in the codebase, resulting in lost t wasted effort.

A DevOps engineer must automate testing of pull requests in CodeCommit to ensure that reviewers more easily see the results of automated tests as part o pull request review.

What should the DevOps engineer do to meet this requirement?

Accepted Answer

https://aws.amazon.com/es/blogs/devops/complete-ci-cd-with-aws-codecommit-aws-codebuild-aws-codedeploy-and-aws-codepipeline/