[Jan-2022] Amazon DOP-C01 Exam: Basic Questions With Answers
New 2022 Realistic Free Amazon DOP-C01 Exam Dump Questions & Answer
Incident and Event Response (18%)
- Troubleshooting the issues and defining how to restore the operations.
- Applying the concepts required for implementing automated healing and setting up the event-driven automated actions;
- Defining how to automate event management & alerting;
The AWS Certified DevOps Engineer – Professional or DOP-C01 exam focuses on DevOps engineers, developers, or any other specialist who is familiar with working with AWS software architecture.
NEW QUESTION 75
A company runs a database on a single Amazon EC2 instance in a development environment.
The data is stored on separate Amazon EBS volumes that are attached to the EC2 instance. An Amazon Route 53 A record has been created and configured to point to the EC2 instance. The company would like to automate the recovery of the database instance when an instance or Availability Zone (AZ) fails. The company also wants to keep its costs low. The RTO is 4 hours and RPO is 12 hours. Which solution should a DevOps Engineer implement to meet these requirements?
- A. Run the database on two separate EC2 instances in different AZs with one active and the other as a standby. Attach the data volumes to the active instance. Configure an Amazon CloudWatch Events rule to invoke an AWS Lambda function on EC2 instance termination. The Lambda function launches a replacement EC2 instance. If the terminated instance was the active node, then the function attaches the data volumes to the standby node. Start the database and update the Route 53 record.
- B. Run the database on two separate EC2 instances in different AZs. Configure one of the instances as a master and the other as a standby. Set up replication between the master and standby instances. Point the Route 53 record to the master. Configure an Amazon CloudWatch Events rule to invoke an AWS Lambda function upon the EC2 instance termination. The Lambda function launches a replacement EC2 instance. If the terminated instance was the active node, the function promotes the standby to master and points the Route 53 record to it.
- C. Run the database in an Auto Scaling group with a minimum and maximum instance count of 1 in multiple AZs. Add a lifecycle hook to the Auto Scaling group and define an Amazon CloudWatch Events rule that is triggered when a lifecycle event occurs. Have the CloudWatch Events rule invoke an AWS Lambda function to detach or attach the Amazon EBS data volumes from the EC2 instance based on the event. Configure the EC2 instance UserData to mount the data volumes (retry on failure with a short delay), then start the database and update the Route 53 record.
- D. Run the database in an Auto Scaling group with a minimum and maximum instance count of 1 in multiple AZs. Create an AWS Lambda function that is triggered by a scheduled Amazon CloudWatch Events rule every 4 hours to take a snapshot of the data volume and apply a tag.
Have the instance UserData get the latest snapshot, create a new volume from it, and attach and mount the volume. Then start the database and update the Route 53 record.
Answer: D
Explanation:
It restores EBS volumes from snapshot and snapshot is not AZ independent.
Two instances means more costs.
Also Auto Scaling group with min 1 max 1 IS the preferred method for HA.
NEW QUESTION 76
You are designing an application that contains protected health information. Security and compliance requirements for your application mandate that all protected health information in the application use encryption at rest and in transit. The application uses a three-tier architecture where data flows through the load balancer and is stored on Amazon EBS volumes for processing and the results are stored in Amazon S3 using the AWS SDK.
Which of the following two options satisfy the security requirements? (Select two)
- A. UseSSL termination on the load balancer an SSL listener on the Amazon EC2instances, Amazon EBS encryption on EBS volumes containing PHI and Amazon S3with server-side encryption.
- B. UseTCP load balancing on the load balancer. SSL termination on the Amazon EC2instances. OS-level disk encryption on the Amazon EBS volumes and Amazon S3with server-side encryption.
- C. UseSSL termination with a SAN SSL certificate on the load balancer. Amazon EC2with all Amazon EBS volumes using Amazon EBS encryption, and Amazon S3 withserver-side encryption with customer-managed keys.
- D. UseSSL termination on the load balancer, Amazon EBS encryption on Amazon EC2instances and Amazon S3 with server- side encryption.
- E. UseTCP load balancing on the load balancer. SSL termination on the Amazon EC2instances and Amazon S3 with server-side encryption.
Answer: A,B
Explanation:
Explanation
The AWS Documentation mentions the following:
HTTPS/SSL Listeners
You can create a load balancer with the following security features.
SSL Server Certificates
If you use HTTPS or SSL for your front-end connections, you must deploy an X.509 certificate (SSL server certificate) on your load balancer. The load balancer decrypts requests from clients before sending them to the back-end instances (known as SSL termination). For more information, see SSL/TLS Certificates for Classic Load Balancers.
If you don't want the load balancer to handle the SSL termination (known as SSL offloading), you can use TCP for both the front-end and back-end connections, and deploy certificates on the registered instances handling requests.
Reference Link:
http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-listener-config.html
Create a Classic Load Balancer with an HTTPS Listener A load balancer takes requests from clients and distributes them across the EC2 instances that are registered with the load balancer.
You can create a toad balancer that listens on both the HTTP (80) and HTTPS (443) ports. If you specify that the HTTPS listener sends requests to the instances on port 80, the load balancer terminates the requests and communication from the load balancer to the instances is not encrypted. If the HTTPS listener sends requests to the instances on port 443, communication from the load balancer to the instances is encrypted.
Reference Link:
* http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-create-https-ssl-load-balancer.html
Option A & B are incorrect because they are missing encryption in transit between ELB and EC2 instances.
Option D is incorrect because it is missing encryption at rest on the data associated with the EC2 instances.
NEW QUESTION 77
To override an allow in an IAM policy, you set the Effect element to ______.
- A. Stop
- B. Allow
- C. Block
- D. Deny
Answer: D
Explanation:
By default, access to resources is denied. To allow access to a resource, you must set the Effect element to Allow. To override an allow (for example, to override an allow that is otherwise in force), you set the Effect element to Deny.
Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPolicyLanguage_ElementDescriptions.
html
NEW QUESTION 78
For AWS Auto Scaling, what is the first transition state a new instance enters after leaving steady state when scaling out due to increased load?
- A. Detaching
- B. Pending
- C. EnteringStandby
- D. Terminating:Wait
Answer: B
Explanation:
When a scale out event occurs, the Auto Scaling group launches the required number of EC2 instances, using its assigned launch configuration. These instances start in the Pending state.
If you add a lifecycle hook to your Auto Scaling group, you can perform a custom action here.
For more information, see Lifecycle Hooks.
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/AutoScalingGroupLifecycle.html
NEW QUESTION 79
A company is using AWS CodeCommit as its source code repository. After an internal audit, the compliance team mandates that any code change that go into the master branch must be committed by senior developers.
Which solution will meet these requirements?
- A. Create a repository in CodeCommit with a working and master branch. Create separate IAM groups for senior developers and developers. Use an IAM policy to assign each IAM group their corresponding branches. Once the code is merged to the working branch, senior developers can pull the changes from the working branch to the master branch.
- B. Create two repositories in CodeCommit: one for working and another for the master. Create separate IAM groups for senior developers and developers. Assign the resource-level permissions on the repositories tied to the IAM groups. After the code changes are reviewed, sync the approved files to the master code commit repository.
- C. Create a repository in CodeCommit. Create separate IAM groups for senior developers and developers.
Use AWS Lambda triggers on the master branch and get the user name of the developer at the event object of the Lambda function. Validate the user name with the IAM group to approve or deny the commit. - D. Create a repository in CodeCommit. Create separate IAM groups for senior developers and developers.
Assign code commit permissions for both groups, with code merge permissions for the senior developers group. Create a trigger to notify senior developers with a URL link to approve or deny commit requests delivered through Amazon SNS. Once a senior developer approves the code, the code gets merged to the master branch.
Answer: A
NEW QUESTION 80
A company is running an application on Amazon EC2 instances behind an ELB Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones.
After a recent application update, users are getting HTTP 502 Bad Gateway errors from the application URL.
The DevOps Engineer cannot analyze the problem because Auto Scaling is terminating all EC2 instances shortly after launch for being unhealthy.
What steps will allow the DevOps Engineer access to one of the unhealthy instances to troubleshoot the deployed application?
- A. Edit the Auto Scaling group to enable termination protection as this will protect unhealthy instances from being terminated.
- B. As soon as a new instance is created by AutoScaling, put the instance into a Standbystate as this will prevent the instance from being terminated.
- C. Create an image from the terminated instance and create a new instance from that image. The Application team can then log into the new instance.
- D. Add a lifecycle hook to your Auto Scaling group to move instances in the Terminatingstate to the Terminating:Waitstate.
Answer: D
NEW QUESTION 81
Which statement is true about configuring proxy support for Amazon Inspector agent on a Windows-based system?
- A. Amazon Inspector agent supports proxy usage on Linux-based systems but not on Windows.
- B. Amazon Inspector proxy support on Windows-based systems is achieved through installing proxy-enabled version of the agent which comes with preconfigured files that you need to edit to match your environment.
- C. Amazon Inspector agent supports proxy usage on Windows-based systems through awsagent.env configuration file.
- D. Amazon Inspector agent supports proxy usage on Windows-based systems through the use of the WinHTTP proxy.
Answer: D
Explanation:
Proxy support for AWS agents is achieved through the use of the WinHTTP proxy.
Reference:
https://docs.aws.amazon.com/inspector/latest/userguide/inspector_agents-on-win.html#inspector- agent-proxy
NEW QUESTION 82
Which statement is true about configuring proxy support for Amazon Inspector agent on Linux- based systems?
- A. Amazon Inspector agent proxy settings on Linux-based systems are configured through WinHTTP proxy.
- B. Amazon Inspector proxy support on Linux-based systems is achieved through installing proxy- enabled version of the agent which comes with pre-configured files that you need to edit to match your environment.
- C. Amazon Inspector agent does NOT support the use of proxy on Linux-based systems.
- D. Amazon Inspector proxy configuration on Linux-based system is included in awsagent.env file under /etc/init.d/
Answer: D
Explanation:
To install an AWS agent on an EC2 instance that uses a proxy server Create a file called awsagent.env and save it in the /etc/init.d/ directory. Edit awsagent.env to include these environment variables in the following format:
export https_proxy=https://hostname:port
export http_proxy=http://hostname:port
export no_proxy= 123.456.789.111
Reference:
https://docs.aws.amazon.com/inspector/latest/userguide/inspector_agents-on-win.html#inspector- agent-proxy
NEW QUESTION 83
A company has several AWS accounts. The accounts are shared and used across multiple teams globally, primarily for Amazon EC2 instances. Each EC2 instance has tags for team, environment, and cost center to ensure accurate cost allocations.
How should a DevOps Engineer help the teams audit their costs and automate infrastructure cost optimization across multiple shared environments and accounts?
- A. Create a separate Amazon CloudWatch dashboard for EC2 instance tags based on cost center, environment, and team, and publish the instance tags out using unique links for each team. For each team, set up a CloudWatch Events rule with the CloudWatch dashboard as the source, and set up a trigger to initiate an AWS Lambda function to reduce underutilized instances.
- B. Use AWS Systems Manager to track instance utilization and report underutilized instances to Amazon CloudWatch. Filter data in CloudWatch based on tags for team, environment, and cost center. Set up triggers from CloudWatch into AWS Lambda to reduce underutilized instances
- C. Set up a scheduled script on the EC2 instances to report utilization and store the instances in an Amazon DynamoDB table. Create a dashboard in Amazon QuickSight with DynamoDB as the source data to find underutilized instances. Set up triggers from Amazon QuickSight in AWS Lambda to reduce underutilized instances.
- D. Create an Amazon CloudWatch Events rule with AWS Trusted Advisor as the source for low utilization EC2 instances. Trigger an AWS Lambda function that filters out reported data based on tags for each team, environment, and cost center, and store the Lambda function in Amazon S3.
Set up a second trigger to initiate a Lambda function to reduce underutilized instances.
Answer: C
NEW QUESTION 84
A company is running an application on Amazon EC2 instances behind an ELB Application Load Balancer.
The instances run in an EC2 Auto Scaling group across multiple Availability Zones.
After a recent application update, users are getting HTTP 502 Bad Gateway errors from the application URL.
The DevOps Engineer cannot analyze the problem because Auto Scaling is terminating all EC2 instances shortly after launch for being unhealthy.
What steps will allow the DevOps Engineer access to one of the unhealthy instances to troubleshoot the deployed application?
- A. Edit the Auto Scaling group to enable termination protection as this will protect unhealthy instances from being terminated.
- B. As soon as a new instance is created by AutoScaling, put the instance into a Standby state as this will prevent the instance from being terminated.
- C. Add a lifecycle hook to your Auto Scaling group to move instances in the Terminating state to the Terminating:Wait state.
- D. Create an image from the terminated instance and create a new instance from that image. The Application team can then log into the new instance.
Answer: D
NEW QUESTION 85
A company has developed an AWS Lambda function that handles orders received through an API. The company is using AWS CodeDeploy to deploy the Lambda function as the final stage of a CI/CD pipeline.
A DevOps Engineer has notices there are intermittent failures of the ordering API for a few seconds after deployment. After some investigation, the DevOps Engineer believes the failures are due to database changes not having fully propagated before the lambda function begins executing.
How should the DevOps Engineer overcome this?
- A. Add an AfterAllowTraffic hook to the AppSpec file that forces traffic to wait for any pending database changes before allowing the new version of the Lambda function to respond
- B. Add a ValidateService hook to the AppSpec file that inspects incoming traffic and rejects the payload if dependent services such as the database are not yet ready
- C. Add a BeforeInstall hook to the AppSpec file that tests and waits for any necessary database changes before deploying the new version of the Lambda function
- D. Add a BeforeAllowTraffic hook to the AppSpec file that tests and waits for any necessary database changes before traffic can flow to the new version of the Lambda function
Answer: A
NEW QUESTION 86
An e-commerce company is running a web application in an AWS Elastic Beanstalk environment.
In recent months, the average load of the Amazon EC2 instances has been increased to handle more traffic. The company would like to improve the scalability and resilience of the environment.
The Development team has been asked to decouple long-running tasks from the environment if the tasks can be executed asynchronously. Examples of these tasks include confirmation emails when users are registered to the platform, and processing images or videos. Also, some of the periodic tasks that are currently running within the web server should be offloaded.
What is the most time-efficient and integrated way to achieve this?
- A. Create an Amazon SQS queue and send the tasks that should be decoupled from the Elastic Beanstalk web server environment to the SQS queue. Create a fleet of EC2 instances under an Auto Scaling group. Use an AMI that contains the application to process the asynchronous tasks, configure the application to listen for messages within the SQS queue, and create periodic tasks by placing those into the cron in the operating system. Create an environment variable within the Elastic Beanstalk environment with a value pointing to the SQS queue endpoint.
- B. Create an Amazon SQS queue and send the tasks that should be decoupled from the Elastic Beanstalk web server environment to the SQS queue. Create a fleet of EC2 instances under an Auto Scaling group. Install and configure the application to listen for messages within the SQS queue from UserData and create periodic tasks by placing those into the cron in the operating system. Create an environment variable within the Elastic Beanstalk web server environment with a value pointing to the SQS queue endpoint.
- C. Create a second Elastic Beanstalk worker tier environment and deploy the application to process the asynchronous tasks there. Send the tasks that should be decoupled from the original Elastic Beanstalk web server environment to the auto-generated Amazon SQS queue by the Elastic Beanstalk worker environment. Place a cron.yaml file within the root of the application source bundle for the worker environment periodic tasks. Use environment links to link the web server environment with the worker environment.
- D. Create a second Elastic Beanstalk web server tier environment and deploy the application to process the asynchronous tasks. Send the tasks that should be decoupled from the original Elastic Beanstalk web server to the auto-generated Amazon SQS queue by the Elastic Beanstalk web server tier environment. Place a cron.yaml file within the root of the application source bundle for the second web server tier environment with the necessary periodic tasks. Use environment links to link both web server environments.
Answer: D
NEW QUESTION 87
Two teams are working together on different portions of an architecture and are using AWS CloudFormation to manage their resources. One team administers operating system-level updates and patches, while the other team manages application-level dependencies and updates. The Application team must take the most recent AMI when creating new instances and deploying the application.
What is the MOST scalable method for linking these two teams and processes?
- A. The Operating System team uses CloudFormation stack to create an AWS CodePipeline pipeline that builds new AMIs. The team then places the AMI ARNs as parameters in AWS Systems Manager Parameter Store as part of the pipeline output. The Application team specifies a parameter of type SSMin their CloudFormation stack to obtain the most recent AMI ARN from the Parameter Store.
- B. The Operating System team maintains a nested stack that includes both the operating system and Application team templates. The Operating System team uses a stack update to deploy updates to the application stack whenever the Application team changes the application code.
- C. The Operating System team uses CloudFormation to create new versions of their AMIs and lists the Amazon Resource Names (ARNs) of the AMIs in an encrypted Amazon S3 object as part of the stack output section. The Application team uses a cross-stack reference to load the encrypted S3 object and obtain the most recent AMI ARNs.
- D. The Operating System team uses CloudFormation stack to create an AWS CodePipeline pipeline that builds new AMIs, then places the latest AMI ARNs in an encrypted Amazon S3 object as part of the pipeline output. The Application team uses a cross-stack reference within their own CloudFormation template to get that S3 object location and obtain the most recent AMI ARNs to use when deploying their application.
Answer: A
NEW QUESTION 88
A Developer is designing a continuous deployment workflow for a new Development team to facilitate the process for source code promotion in AWS. Developers would like to store and promote code for deployment from development to production while maintaining the ability to roll back that deployment if it fails.
Which design will incur the LEAST amount of downtime?
- A. Create one repository for development code in AWS CodeCommit and another repository to hold the production code. Use AWS CodeBuild to merge development and production repositories, and deploy to production by using AWS CodeDeploy for a blue/green deployment.
- B. Create one repository in AWS CodeCommit. Create a development branch to hold merged changes. Use AWS CodeBuild to build and test the code stored in the development branch triggered on a new commit.
Merge to the master and deploy to production by using AWS CodeDeploy for a blue/green deployment. - C. Create a shared Amazon S3 bucket for the Development team to store their code. Set up an Amazon CloudWatch Events rule to trigger an AWS Lambda function that deploys the code to production by using AWS CodeDeploy for a blue/green deployment.
- D. Create one repository for each Developer in AWS CodeCommit and another repository to hold the production code. Use AWS CodeBuild to merge development and production repositories, and deploy to production by using AWS CodeDeploy for a blue/green deployment.
Answer: C
NEW QUESTION 89
What are the benefits when you implement a Blue Green deployment for your infrastructure or application level changes. Choose 3 answers from the options given below
- A. Betterrollback capabilities
- B. Nearzero-downtime release for new changes
- C. Abilityto deploy with higher risk
- D. Goodturnaround time for application deployments
Answer: A,B,D
Explanation:
Explanation
The AWS Documentation mentions the following
Blue/green deployments provide near zero-downtime release and rollback capabilities. The fundamental idea behind blue/green deployment is to shift traffic between two identical environments that are running different versions of your application. The blue environment represents the current application version serving production traffic. In parallel, the green environment is staged running a different version of your application.
After the green environment is ready and tested, production traffic is redirected from blue to green.
For more information on Blue Green deployments please see the below link:
* https://dOawsstatic.com/whitepapers/AWS_Blue_Green_Deployments.pdf
NEW QUESTION 90
......
What Are Topics That AWS DOP-C01 Certification Exam Covers?
The AWS DOP-C01 exam is quite a difficult one as it takes candidates through six different topics, as follows:
- Disaster Recovery, Fault Tolerance, High Availability.
- Event Response and Incident;
- SDLC Automation;
- Configuration Management and Infrastructure as Code;
- Monitoring and Logging;
- Automation Policies and Standards;
The first topic teaches candidates how to apply the correct concepts to ensure CI/CD pipeline automation. Also, they will become skilled in identifying source control strategies and implement them properly. Another ability developed in this domain would be related to testing integration and automation. Candidates should be ready to learn more about how to manage artifacts in a secure way and determine the right delivery and deployment strategies using AWS Services.
The second domain shows candidates the proper strategies to deploy services and applications based on business needs. Also, they will become pros in applying security concepts to ensure the automation of resource provisioning. Within this area, examinees will learn how to implement and deploy lifecycle hooks. Finally, they will understand more about the concepts necessary to manage different systems with the help of AWS configuration management services and tools.
The third chapter handles monitoring and logging principles. The specialists interested to learn more for their AWS DevOps Engineer – Professional exam should develop the abilities to apply concepts and services necessary for monitoring automation, event management, audit, logging, and monitoring of operating systems and AWS infrastructures. Also, they will learn how to develop and determine metadata strategies, metrics, aggregation, and logs storage.
Within the fourth section, candidates will understand more about the concepts related to logging, metrics, security, and monitoring of AWS services. Also, they will get to know more about determining cost optimization through automation. Another concept related to this chapter deals with governance strategies implementation.
Incident and Event Response is the fifth domain that is tested in the AWS DevOps Engineer – Professional certification. Those who are determined to take DOP-C01 will learn how to troubleshoot different issues and identify solutions to restore operations. They will become proficient in determining event management and alerting automation. The final subtopics included here are connected to automated healing implementation and event-driven automated actions set up.
Last but not least, high availability and disaster recovery are essential for success in your certification exam. It is important for candidates to know how to determine the differences between multi-AZ and multi-region concepts and how to implement them correctly. Also, applicants will learn how to implement fault tolerance, availability, and scalability AWS features. Another essential subtopic included in this chapter talks about choosing the right AWS services for different business needs. Candidates will as well learn how to evaluate the failure deployment and determine how to automate and design disaster recovery strategies.
Guaranteed Success in AWS Certified DevOps Engineer DOP-C01 Exam Dumps: https://www.preppdf.com/Amazon/DOP-C01-prepaway-exam-dumps.html
DOP-C01 Practice Test Engine: Try These 275 Exam Questions: https://drive.google.com/open?id=1DSxeHpY95xxFFkcHKMIWgoKhfgZC_UJa