AWS Certified DevOps Engineer – Professional Practice Questions Part 3

Eugene had his application migrate to AWS. This app is in the ap-southeast-1 region. The DevOps team used a warm-standby approach in the disaster recovery strategy and built an additional functional environment in the ap-southeast-2 region. If a production system is inefficient and failure is required, what steps can be seen as effective recovery measures? (Choose 2)

In its AWS account and on-premises, your organization has stored a large amount of data. The data includes daily transactions, data from clients, etc. You have a responsibility to build an AWS QuickSight service that allows other teams to analyze data, view data via dashboards, and find hidden trends through machine learning technologies. What data cannot be supplied for analysis by QuickSight?

Russell has shifted his services to AWS. A failure of the AWS hardware that affected one of the EBS volumes was observed last week. The AWS Personal Health Dashboard warned of this problem but the team needed several hours to process this information. Now, Russell is searching for a solution from the AWS Personal Health Dashboard that notifies the group when an open issue is happening. Which solution are you going to recommend?

You have customized some system and application logs in EC2 instances and delivered them to several Log Groups in CloudWatch Logs. You find that the AWS CloudWatch Logs Console just makes it very difficult to locate useful information. You prefer the logs to a downstream processing system, which can provide the operating team with more reliable and important information. To which services could CloudWatch logs be configured and data streamed? (Choose 2)

An application is deployed in an AWS Auto-scaling group in a financial company. The request traffic is most often quite smooth and the ASG is not scaled in or out. But EC2 instances may fail the Elastic Load Balancer health check, and then be terminated by ASG, as per the latest release. In order to access the instance and solve the problem, the development team has created an ASG life-cycle hook. After the instance, which AWS services can be configured to automatically receive notification in the “Terminating: Wait” state? (Choose 2)

Paul is using the AWS platform to deploy a website using AWS ELB and ASG. The ELB is configured with the following health checks: Ping Target: HTTPS:443/healthcheck.htm, Timeout: 20 seconds, Interval: 30 seconds, Unhealthy threshold: 3 and healthy threshold: 3.
The Auto-scaling group also uses ELB as its health check type. Last weekend, there was very high traffic due to a promotional event. Nonetheless, on launching new instances by ASG, the ELB health check failed because of the traffic congestion and eventually was again terminated by ASG. As a result, it was difficult to launch new instances, which made the matter worse. Which approaches can help resolve this issue under high traffic? (Choose 2)

To perform ad-hoc business analytics queries on well-structured data, the data comes in constantly at a high velocity. Knowing that your business intelligence team understand SQL, which service(s) should you look at first?

A company has given you the task to configure an AWS Elastic Beanstalk work tier for easy debugging but you are facing problems in finishing queue jobs. What should you do to overcome this issue?

The highest possible network performance is required for cluster computing applications. Allen already selected homogenous instance type supporting 10Gb enhanced networking. He made sure that the workload is network bound and put the instances in the placement group. What would be the last optimization that he should make?

Richard wants to automate the 3 layers of large cloud deployment, make it capable of tracking all the changes over time in deployment, and carefully control any alteration. Which is the best way to achieve these requirements?

In the region, ap-southeast-1 Steve has migrated a MySQL premise database to AWS RDS MySQL. Key information like customer number, address, and date of birth have been stored in the database. A read replica in the ap-southeast-2 area was created to decrease the read load in the master DB instance. It can also be supported as a data recovery scheme if the DB source instance fails. In what scenarios can the Read Replica recover data successfully? (Choose 2)

There is a serious outage at AWS. The EC2 is not affected, but the EC2 instance deployment script stopped working with the outage in the region. What can be the reason?

There is an Asynchronous application using Auto-scaling and Amazon SQS. The Auto-scaling scales as per the depth of the queue. This results in the completion velocity going down, and the Auto-scaling group size to be maxed out, but there is no increase in inbound velocity. What is the reason?

All modifications in consumer banking information have to be audited in a file. To save this customer banking information, you need DynamoDB. Due to server failures, it is important not to lose any data. What can you do to achieve this?

How can you achieve a gigabit network throughput on EC2, when you already selected cluster-compute, 10 GB instances with enhanced networking, network-bounded workload but you do not detect a 10-gigabit speed?

Your CTO asked you to ensure that you know what all AWS account users are doing at all times to change the resources. She needs to have a report as wide as possible, on who does what over time, sent to her once a week. How are you going to do that?

A CloudFormation template has been used by a DevOps developer to build an RDS source for a new web app. A PostgreSQL engine was used by the RDS server and encryption is disabled. Nonetheless, the database needs to be updated to enable encryption for certain security considerations. The CloudFormation template is updated accordingly (StorageEncrypted is true). The data should be restored from the latest DB snapshot in order to prevent data losses during the update of the CloudFormation stack. In accordance with that necessity, which two steps should be taken? (Choose 2)

An organization has 2000-engineer and plans to use AWS for the first time on a large scale. Now, the organization wants to integrate its identity management system, which is running on Microsoft active directory with AWS. As you know that the 2000 engineers are the power-users of Active Directory, how can you easily manage AWS Directories?

During regional AWS failures, your API requires the ability to remain online. Stateless API is stored, and you have to add information from other sources as you do not have a DB. How can this Uptime goal be achieved simply but efficiently?

A serverless architecture is included the AWS API Gateway, AWS Lambda, and AWS DynamoDB and experienced a large increase in traffic to a sustained 3000 requests per second, which increased the failure rate. The request on the operation lasts for 500 milliseconds on average. The DynamoDB table did not exceed 50% throughput provision, and primary keys are assigned correctly. What can be the reason for failure?

A CI is needed to build the AMIs with the pre-installed images on every new code push, and you need to do this at a lower cost. How can you do this?

The operation and development team wants a place where it can show both the operation system and application logs. How can you activate this service using AWS? (Choose 2)

The development team is using an access key to develop an application that can access S3 or DynamoDB. A new security policy declared that the credentials should not be older than two months and must be rotated. How can this be achieved?

There is an application deployed using Elastic Beanstalk. Sam has to deploy a new application and ensure that the Elastic Beanstalk has been detached from the current instance and then re-attached to the new instance. But the new instances are not receiving any kind of traffic. What is the case?

James configures AWS Inspector, to continuously evaluate EC2 instances (both Linux and Windows) to determine if there are security-related faults and then fix potential issues in time to improve the security of applications deployed on the company’s AWS platform. When he defined a new AWS Inspector console assessment target, he chose all AWS EC2 instances. The option to install AWS inspector agents in all instances has also been selected. To produce the inspector’s evaluation report, what conditions must be met? (Choose 2)

A large number of EC2 instances in various AWS accounts have been maintained by a company. Some instances have been started and no longer used for testing purposes. To save cost, they need to work out an approach to quickly identify the EC2 instances that have a low utilization rate such as daily CPU utilization is 10% or less for several days. What is the best method to choose from the following?

There is a system, which automatically provisions EIPs to EC2 instances on boot in VPC. The system provisions the whole VPC and stack at once, and you have two of them per VPC. You attempt to create a development environment that failed on your new AWS account after successfully creating a staging and production environment in the same region. What is the cause behind this?

How can Chris pass queue messages that are 1 GB each?

Nick and his team examine existing AWS tools to help them better understand where and how AWS saves and accesses sensitive information. AWS Macie can satisfy the need to analysis, classify and protect data using machine learning. It also offers a dashboard to view various key points of interest such as high-risk S3 items and complete user sessions. Which AWS products are AWS Macie data sources? (Choose 2)

A company needs to build a layer in software stack on AWS that needs to be able to scale depending on demand as quickly as possible. The code is running on an EC2 instance in the Auto-scaling group with ELB. Through which deployment method can this be done?

The app is installed in EC2 and sends AWS CloudWatch with customized metrics. Based on these metric report data, you have configured many AWS CloudWatch alarms. You find that sometimes there are numerous warnings of CloudWatch with the status of “INSUFFICIENT DATA”. With your team of developers, you have agreed that some metric data are only produced intermittently by design. What should you do to ignore these warnings of “INSUFFICIENT DATA”?

For a new application, Daniel has created a new Auto-scaling group that sets the minimum capacity to 1 and the maximum capacity to 20. ASG has been running smoothly for two weeks, though some instances have not been successfully resolved recently. If an instance fails to terminate, Daniel must work out a way that notifies his team via email. What is the easiest way to do that?

There is a Java program, which deploys an Auto-scaling group in AWS with EC2 instances that are m5.large type instances. The application’s response time has recently been increased due to several new functions because of the high rate of use of the CPU. To resolve this issue, you must change the EC2 instance form to c5.large. What is the best way to do so?

For building a high score game table in DynamoDB that will store each user’s highest score of players, what will be the DynamoDB structure?

You have 10% of the written and 90% of readings in your web application. All requests are currently being served to an AWS ELB, which is in the front route of the EC2 Auto-scaling group via a Route53 Alias Record. When traffic spikes occur during certain news events, many more people ask to read the same data from your application, all at the same time, making your system become extremely costly. What can you do to reduce costs and scale spikes in the simplest and cheapest way?

A small IT company has an operating budget for AWS infrastructure that is minimal and therefore spot EC2 instances are always recommended. A new application is introduced through a load balancer and Auto-scaling group. Since this software controls the authentication of all other goods of the business, only spot instances are unacceptable in this regard. According to you, what is the best way to make the Auto-scaling group possible with a combination of on-demand and spot instances?

Your Auto-scaling group scales too quickly, too much, and scales when the traffic is decreasing. What should you do to fix this?

George has created a DynamoDB table called “Global Temperature” to monitor the highest/lowest temperatures in many cities of different countries. The things in the table had a partition key (CountryId) listed and there was no sort key. Recently, more features have been created and some queries need to be conducted based on a new partition key (CityId). How can George do this?

On a new feature, Tony is currently working on to build with an RDS MySQL server. The feature uses the database to store customer data for email transactions. Automated snapshots are designed and function correctly for the server. A new snapshot has to be exchanged and used in another AWS account due to business requirements. How can Tony share this RDS snapshot automatically?

An organization has multiple applications in the AWS account, and wants to identify the cost per month to operate for a good understanding of the business as it does not want to expend initial development time. What can be done to achieve this?

During total regional AWS failure, Christopher needs API backup by DynamoDB to stay online. Christopher can only tolerate a few minutes of failure or slowness, but the system should recover those minutes with normal operation. How can he achieve this?

To get CloudFormation stack status updates to show up in a continues delivery system as close to real time as possible, what should you do?

George builds an application of photo posting and then images of this application are stored in S3. Now, he wants a system that is simple and cost effective for the application. From the following option, which will be helpful in implementing authentication and authorization to build photo sharing application?

Your team will start continuous delivery using CloudFormation so that entire, versioned stacks or stack layers can be created and deployed automatically. You have a mission-critical system of 3 levels. What is NOT the best practice for the use of CloudFormation in continuous delivery?

To deploy multiple stacks of AWS in a repeatable manner in multiple environments, you selected CloudFormation. Now you found that there is a type of resource that you need to create and model, but it is unsupported by CloudFormation. What is the strategy to overcome this challenge?

Christian met his operation team to discuss last month’s data. During the meeting, he realized that three weeks ago, his monitoring system, which pings over HTTP from outside the AWS recorded a large spike in latency on his 3 tier web service API. DynamoDB is used for database layer, EBS, ELB, EC2 for the business logic tiers and SQS, EC2, and ELB for the presentation layer. Which technique will not figure out what happened?

A vendor requires access to the S3 bucket in your account. The vendor already has an AWS account. How can you provide access to the bucket?

An application is deployed, which uses Auto-scaling for launching the new instances. To change the instance type of the new instances, which of the action is deployed?

There is an application hosted on AWS, on EC2 instance behind a load balancer. You add new features on this application, which causes the sites to slow down, and now you are receiving complains. How can you recover from this issue?

A team is assisting you in creating a new application with the AWS Aurora data base. The application’s users are mainly from Europe and North America. You suggest configuring a global Aurora database. The primary server is in the eu-west-1 area and the secondary one in the us-east-1 zone. What are the benefits of Amazon Aurora Online Database? (Choose 2)