Exam AWS DevOps Engineer Professional All Questions

View all questions & answers for the AWS DevOps Engineer Professional exam

Exam AWS DevOps Engineer Professional topic 1 question 1 discussion

Exam question from Amazon's AWS DevOps Engineer Professional

Question #: 1
Topic #: 1

[All AWS DevOps Engineer Professional Questions]

A company wants to migrate its content sharing web application hosted on Amazon EC2 to a serverless architecture. The company currently deploys changes to its application by creating a new Auto Scaling group of EC2 instances and a new Elastic Load Balancer, and then shifting the traffic away using an Amazon Route
53 weighted routing policy.
For its new serverless application, the company is planning to use Amazon API Gateway and AWS Lambda. The company will need to update its deployment processes to work with the new application. It will also need to retain the ability to test new features on a small number of users before rolling the features out to the entire user base.
Which deployment strategy will meet these requirements?

A. Use AWS CDK to deploy API Gateway and Lambda functions. When code needs to be changed, update the AWS CloudFormation stack and deploy the new version of the APIs and Lambda functions. Use a Route 53 failover routing policy for the canary release strategy.
B. Use AWS CloudFormation to deploy API Gateway and Lambda functions using Lambda function versions. When code needs to be changed, update the CloudFormation stack with the new Lambda code and update the API versions using a canary release strategy. Promote the new version when testing is complete.
C. Use AWS Elastic Beanstalk to deploy API Gateway and Lambda functions. When code needs to be changed, deploy a new version of the API and Lambda functions. Shift traffic gradually using an Elastic Beanstalk blue/green deployment.
D. Use AWS OpsWorks to deploy API Gateway in the service layer and Lambda functions in a custom layer. When code needs to be changed, use OpsWorks to perform a blue/green deployment and shift traffic gradually.

Show Suggested Answer

Suggested Answer: B 🗳️

by WhyIronMan at April 2, 2021, 6:59 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

devopp

Highly Voted 3 years, 10 months ago

B noting SAM is built over CloudFormation.

upvoted 12 times

...

b620a50

Highly Voted 2 years, 1 month ago

B is the correct answer This is a Legit dumps I passed my Exam on June 15th, 2023 with a 870 score. I studied both DOP-C01 and DOP-C02, 95% of the questions came from them. Most questions came from DOP-C01 with 80% and DOP-C02 with 15%. Get contributor access to read all comments and maybe access other exams if you plan to take more exams. Go through the questions at least twice or more to get familiar with it!

upvoted 5 times

...

agbor_tambe

Most Recent 10 months, 2 weeks ago

Selected Answer: B

B IS HIGHLY CORRECT

upvoted 1 times

...

mdg3501

2 years, 3 months ago

anyone took the exam lately? is this still valid or should I go ahead with C02?

upvoted 2 times

...

Hamza5

2 years, 6 months ago

B - Canary Deployment

upvoted 1 times

...

Bulti

2 years, 7 months ago

B- Canary deployment of Lambda is done using AWS SAM that comes built in with CodeDeploy. https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/automating-updates-to-serverless-apps.html

upvoted 1 times

...

developer_404

2 years, 10 months ago

Selected Answer: B

Canary Deployment is the use case for this scenario while the other two are Blue green deployment. Option A is using Route53 failover which is not necessary for the scenario.

upvoted 2 times

...

kopper2019

2 years, 11 months ago

New as of September 6th, 2022 NO.265 A company updated the AWS CloudFormation template tor a critical business application. The stack update process Tailed due to an error in me updated template, and CloudFormation automatically began the stack rollback process Later, a DevOps engineer found the application was still unavailable, and that the stack was in the UPDATE_ROLLBACK_FALED state Which combination of actions will allow the stack rollback to complete successful/? (Select 2) A. Attach the AWSCloudFormationFulAccess IAM policy to the CloudFormation role B. Automatically heal the stack resources using CloudFormation drift detection. C. Issue a ContinueUpdateRolback command from the CloudFormation console or AWS CLI D. Manually the resources to match the expectations of the stack. E. Update the existing CloudFormation stack using the original template

upvoted 2 times

awskiid

1 month, 3 weeks ago

b? cause the drigt dec would look to match and see whats out of place and proceed to heal. Look like its just deployment issue

upvoted 1 times

awskiid

1 month, 3 weeks ago

was way off

upvoted 1 times

...

vn_thanhtung

1 year, 3 months ago

ANS: C, D check topic https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-continueupdaterollback.html

upvoted 1 times

...

Goozian

2 years, 11 months ago

D AND E

upvoted 2 times

kopper2019

2 years, 10 months ago

what about the other ones new? thanks

upvoted 1 times

ZZIN

2 years, 9 months ago

Passed with a new question?

upvoted 1 times

...

Goozian

2 years, 10 months ago

it came up in my exam

upvoted 1 times

...

Load full discussion...

...

kopper2019

2 years, 11 months ago

New as of September 6th, 2022 A company's application is running on Amazon EC2 instances in an Auto Scaling group. A DevOps engineer needs to ensure there are at least four application servers running at all times. Whenever an update has to be made to the application, the engineer creates a new AMI with the updated configuration and updates the AWS CloudFormation template with the new AMI ID. After the stack update finishes, the engineer manually terminates the old instances one by one. verifying that the new instance is operational before proceeding. The engineer needs to automate this process. Which action will allow for the LEAST number of manual steps moving forward? A. Update the CloudFormation template to include the UpdatePolicy attribute with the AutoScalingRollingUpdate policy. B. Update the CloudFormation template to include the UpdatePolicy attribute with the AutoScalingReplacingUpdate policy.

upvoted 1 times

kopper2019

2 years, 11 months ago

C. Use an Auto Scaling lifecycle hook to verify that the previous instance is operational before allowing the DevOps engineer's selected instance to terminate. D. Use an Auto Scaling lifecycle hook to confirm there are at least four running instances before allowing the DevOps engineer's selected instance to terminate.

upvoted 1 times

EnWu

2 years, 10 months ago

Ans: A

upvoted 4 times

...

kopper2019

2 years, 11 months ago

New as of September 6th, 2022 A company needs to implement a robust CI/CD pipeline to automate the deployment of an application in AWS. The pipeline must support continuous integration, continuous delivery, and automatic rollback upon deployment failure. The entire CI/CD pipeline must be capable of being re- provisioned in alternate AWS accounts or Regions within minutes. A DevOps engineer has already created an AWS CodeCommit repository to store the source code. Which combination of actions should be taken when building this pipeline to meet these requirements? (Select THREE.) A. Configure an AWS CodePipehne pipeline with a build stage using AWS CodeBuild. B. Copy the build artifact from CodeCommit to Amazon S3. C. Create an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer (ALB) and set the ALB as the deployment target in AWS CodePipeline. D. Create an AWS Elastic Beanstalk environment as the deployment target in AWS CodePipeline. E. Implement an Amazon SQS queue to decouple the pipeline components. F. Provision all resources using AWS CloudFormation.

upvoted 1 times

huynd6793

2 years, 9 months ago

Ans: ADE

upvoted 1 times

huynd6793

2 years, 9 months ago

sr, I think ADF

upvoted 6 times

huyrk102

2 years, 8 months ago

The pipeline must support continuous integration, continuous delivery, and automatic rollback upon deployment failure. => A The entire CI/CD pipeline must be capable of being re- provisioned in alternate AWS accounts or Regions within minutes. => DF

upvoted 3 times

...

kopper2019

2 years, 11 months ago

New as of September 6th, 2022 A company runs several applications across multiple AWS accounts in an organization in AWS Organizations. Some of the resources are not tagged properly, and the company's finance team cannot determine which costs are associated with which applications. A DevOps engineer must remediate this issue and prevent this issue from happening in the future. Which combination of actions should the DevOps engineer take to meet these requirements? (Select TWO.) A. Activate the user-defined cost allocation tags in each AWS account. B. Create and attach an SCP that requires a specific tag. C. Define each line of business (LOB) in AWS Budgets. Assign the required tag to each resource. D. Scan all accounts with Tag Editor. Assign the required tag to each resource. E. Use the budget report to find untagged resources. Assign the required tag to each resource.

upvoted 2 times

EnWu

2 years, 10 months ago

Ans: BD

upvoted 4 times

huyrk102

2 years, 8 months ago

remediate this issue => D prevent this issue from happening in the future. => B

upvoted 1 times

...

kopper2019

2 years, 11 months ago

New as of September 6th, 2022 A company is using AWS Organizations and wants to implement a governance strategy with the following requirements: - AWS resource access is restricted to the same two Regions for all accounts. - AWS services are limited to a specific group of authorized services for all accounts. - Authentication is provided by Active Directory. - Access permissions are organized by job function and are identical in each account. Which solution will meet these requirements? A. Establish an organizational unit (OU) with group policies in the master account to restrict Regions and authorized services. Use AWS Cloud Formation StackSets to provision roles with permissions for each job function, including an IAM trust policy for IAM identity provider authentication in each account.

upvoted 1 times

kopper2019

2 years, 11 months ago

B. Establish a permission boundary in the master account to restrict Regions and authorized services. Use AWS CloudFormation StackSet to provision roles with permissions for each job function, including an IAM trust policy for IAM identity provider authentication in each account. C. Establish a service control policy in the master account to restrict Regions and authorized services. Use AWS Resource Access Manager to share master account roles with permissions for each job function, including AWS SSO for authentication in each account. C. Establish a service control policy in the master account to restrict Regions and authorized services. Use CloudFormation StackSet to provision roles with permissions for each job function, including an IAM trust policy for IAM identity provider authentication in each account.

upvoted 1 times

EnWu

2 years, 10 months ago

Ans: D

upvoted 3 times

huyrk102

2 years, 8 months ago

Agree D

upvoted 1 times

...

z_inderjot

1 year, 8 months ago

C has to be the answer , since D does not support use of Active Directory , but C has AWS SSO for authencation which leverage Active Directory for authentication . While both RAM and StackSet can be used to share role and permessions

upvoted 1 times

vn_thanhtung

1 year, 3 months ago

RAM to share resource not policy i think

upvoted 1 times

...

kopper2019

2 years, 11 months ago

NEw Q as of September 6th, 2022 A DevOps engineer is currently running a container-based workload on-premises The engineer wants to move the application to AWS, but needs to keep the on-premises solution active because not all APIs will move at the same time. The traffic between AWS and the on-premises network should be secure and encrypted at all times. Low management overload is also a requirement. Which combination of actions will meet these criteria? (Select THREE.) Create a Network Load Balancer and. for each service, create a listener that points to the correct set of containers either in AWS or on-premises. Create an Application Load Balancer and, for each service, create a listener that points to the correct set of containers either in AWS or on-premises.

upvoted 1 times

kopper2019

2 years, 11 months ago

A. Create a Network Load Balancer and. for each service, create a listener that points to the correct set of containers either in AWS or on-premises. B . Create an Application Load Balancer and, for each service, create a listener that points to the correct set of containers either in AWS or on-premises. C. Host the AWS containers in Amazon ECS with an EC2 launch type. (D). Host the AWS containers in Amazon ECS with a Fargate launch type D. Use Amazon API Gateway to front the workload, and create a VPC link so API Gateway can forward API calls to the on-premises network through a VPN connection. E. Use Amazon API Gateway to front the workload, and set up public endpoints for the on-premises APIs so API Gateway can access them.

upvoted 1 times

huynd6793

2 years, 9 months ago

B: Create an Application Load Balancer and, for each service, create a listener that points to the correct set of containers either in AWS or on-premises. D: Host the AWS containers in Amazon ECS with a Fargate launch type E. Use Amazon API Gateway to front the workload, and create a VPC link so API Gateway can forward API calls to the on-premises network through a VPN connection.

upvoted 5 times