exam questions

Exam AWS DevOps Engineer Professional All Questions

View all questions & answers for the AWS DevOps Engineer Professional exam

Exam AWS DevOps Engineer Professional topic 1 question 99 discussion

Exam question from Amazon's AWS DevOps Engineer Professional
Question #: 99
Topic #: 1
[All AWS DevOps Engineer Professional Questions]

A company's primary AWS Region contains the following infrastructure:

• An Amazon S3 bucket that contains an object package that is used in instance user data to configure an application.
• Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) with an instance profile that grants s3:Get* access on the S3 bucket.

The company has the following infrastructure in a backup Region:

• An S3 bucket with the same configuration as the S3 bucket in the primary AWS Region, but without any objects.
• EC2 instances in an Auto Scaling group behind an ALB that run with the same configuration as in the primary AWS Region.

To simulate a disaster recovery scenario, the company turns off all access to Amazon S3 and sets the Auto Scaling group's minimum, maximum, and desired instances to 0 in the primary Region. When the instances in the backup Region scale out, they do not pass Amazon Route 53 health checks.

Which combination of steps should the company take to resolve this issue? (Choose three.)

  • A. Update the Amazon EC2 Auto Scaling service-linked role to allow access to both S3 buckets.
  • B. Set up S3 Cross-Region Replication from the S3 bucket in the primary Region to the S3 bucket in the backup Region.
  • C. Update the instance user data to reference the S3 bucket in the primary Region.
  • D. Increase the timeout for the target group health check.
  • E. Update the EC2 instance profile to allow s3:list* actions.
  • F. Update the EC2 instance profile to allow read access to both S3 buckets.
Show Suggested Answer Hide Answer
Suggested Answer: BDF 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
jaxsbr
Highly Voted 2 years, 5 months ago
Selected Answer: BDF
B - To ensure the secondary S3 contains the required files needed D - Provide enough time to download the S3 file and run user data F - Since it's a DR scenario and the primary S3 can't be read from we should read from secondary S3. Providing the instance profile read access to both allows it to be used seamlessly before and during the DR scenario
upvoted 17 times
...
merki
Most Recent 2 years, 1 month ago
Selected Answer: BCF
Chatgpt said: BCF. The three steps that the company should take to resolve this issue are: B. Set up S3 Cross-Region Replication from the S3 bucket in the primary Region to the S3 bucket in the backup Region. This will ensure that the objects in the primary Region's S3 bucket are automatically replicated to the backup Region's S3 bucket. C. Update the instance user data to reference the S3 bucket in the primary Region. Since the objects have been replicated to the backup Region, updating the instance user data to reference the S3 bucket in the primary Region will ensure that the instances in the backup Region are configured correctly. F. Update the EC2 instance profile to allow read access to both S3 buckets. This will ensure that the instances in the backup Region have the necessary permissions to read objects from both the primary and backup Regions' S3 buckets. The other options do not address the issue
upvoted 1 times
...
easytoo
2 years, 1 month ago
B - Set up S3 Cross-Region Replication from the S3 bucket in the primary Region to the S3 bucket in the backup Region to ensure the backup S3 bucket has the necessary objects needed by the instances to function properly. D - Increase the timeout for the target group health check to provide enough time for the instances to download the object package from S3 and run the user data. F - Update the EC2 instance profile to allow read access to both S3 buckets to ensure the EC2 instances have the necessary permissions to access the object package in the S3 bucket.
upvoted 1 times
...
DerekKey
2 years, 3 months ago
Selected Answer: BDF
BDF A - wrong - auto scaling will not work with S3, this is EC2 that needs to download the package C - wrong - S3 in the primary region will be unavailable E - wrong - you don't need to list the content of S3, you need to get from it
upvoted 2 times
...
Piccaso
2 years, 3 months ago
Selected Answer: ABF
The reason can be 1. The backup S3 bucket does not have objects. 2. The backup EC2 instances read the primary S3 bucket 3. Permission
upvoted 1 times
...
Bulti
2 years, 3 months ago
Selected Answer: BDF
BDF for the reasons provided by jaxsbr
upvoted 2 times
...
Chaiyaporn
2 years, 5 months ago
BDF for me.
upvoted 4 times
...
SatenderRathee
2 years, 5 months ago
Selected Answer: BCE
Set up S3 Cross-Region Replication from the S3 bucket in the primary Region to the S3 bucket in the backup Region. This will ensure that the S3 bucket in the backup Region contains the necessary object package needed to configure the application. Update the instance user data to reference the S3 bucket in the primary Region. This will ensure that the instances in the backup Region are configured to use the object package from the S3 bucket in the primary Region. Option D, increasing the timeout for the target group health check, may also be a helpful step to take, as it may give the instances in the backup Region more time to pass the health check. However, the other options are not necessary for resolving this issue.
upvoted 3 times
...
nsvijay04b1
2 years, 5 months ago
Selected Answer: BDE
options need access to both s3 buckets ruled out on DR region you need access to that region bucket with CCR enabled from primary region bucket. As we need 3rd option also to select, increasing timeout on R53 selected.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago