Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 62 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02

Question #: 62
Topic #: 1

[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A production account has a requirement that any Amazon EC2 instance that has been logged in to manually must be terminated within 24 hours. All applications in the production account are using Auto Scaling groups with the Amazon CloudWatch Logs agent configured.
How can this process be automated?

A. Create a CloudWatch Logs subscription to an AWS Step Functions application. Configure an AWS Lambda function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned. Create an Amazon EventBridge rule to invoke a second Lambda function once a day that will terminate all instances with this tag.
B. Create an Amazon CloudWatch alarm that will be invoked by the login event. Send the notification to an Amazon Simple Notification Service (Amazon SNS) topic that the operations team is subscribed to, and have them terminate the EC2 instance within 24 hours.
C. Create an Amazon CloudWatch alarm that will be invoked by the login event. Configure the alarm to send to an Amazon Simple Queue Service (Amazon SQS) queue. Use a group of worker instances to process messages from the queue, which then schedules an Amazon EventBridge rule to be invoked.
D. Create a CloudWatch Logs subscription to an AWS Lambda function. Configure the function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned. Create an Amazon EventBridge rule to invoke a daily Lambda function that terminates all instances with this tag.

Show Suggested Answer

Suggested Answer: D 🗳️

by alce2020 at April 16, 2023, 11:05 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Aesthet

1 year ago

Opion D: "with this tag" So, there will be one tag, like ShoudTerminate: true. But by doing so we will terminate ALL instances with a tag - even those created 10 minutes ago. It doesn't seem correct, or am I missing something?

upvoted 1 times

...

fuzzycom

1 year, 1 month ago

D is best answer. hint: question includes "~~Amazon CloudWatch Logs agent configured" Lambda function is keyword.

upvoted 1 times

...

thanhnv142

1 year, 6 months ago

D is correct: A: If using step function, no need to include "Amazon EventBridge rule to invoke a second Lambda function" B: With this method, policy-breaching Ec2 would be terminated manually, which cannot ensure that they are terminated within 24 hours C: no mention of terminating the instances

upvoted 4 times

...

imymoco

1 year, 8 months ago

D is correct; with B, SNS can cause delays.

upvoted 2 times

...

madperro

2 years, 2 months ago

Selected Answer: D

D is the best answer.

upvoted 1 times

...

haazybanj

2 years, 3 months ago

Selected Answer: D

D. Create a CloudWatch Logs subscription to an AWS Lambda function. Configure the function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned. Create an Amazon EventBridge rule to invoke a daily Lambda function that terminates all instances with this tag.

upvoted 3 times

...

alce2020

2 years, 4 months ago

Selected Answer: D

D is the correct answer

upvoted 3 times

...