Amazon DOP-C01 Online Practice Questions and Exam Preparation

Amazon DOP-C01 Online Questions & Answers

• Question 151:

  A company is using several AWS CloudFormation templates for deploying infrastructure as code. In most of the deployments, the company uses Amazon EC2 Auto Scaling groups. A DevOps Engineer needs to update the AMIs for the Auto

  Scaling group in the template if newer AMIs are available.

  How can these requirements be met?

  A. Manage the AMI mappings in the CloudFormation template. Use Amazon CloudWatch Events for detecting new AMIs and updating the mapping in the template. Reference the map in the launch configuration resource block.
  B. Use conditions in the AWS CloudFormation template to check if new AMIs are available and return the AMI ID. Reference the returned AMI ID in the launch configuration resource block.
  C. Use an AWS Lambda-backed custom resource in the template to fetch the AMI IDs. Reference the returned AMI ID in the launch configuration resource block.
  D. Launch an Amazon EC2 m4.small instance and run a script on it to check for new AMIs. If new AMIs are available, the script should update the launch configuration resource block with the new AMI ID.
  D. Launch an Amazon EC2 m4.small instance and run a script on it to check for new AMIs. If new AMIs are available, the script should update the launch configuration resource block with the new AMI ID.

  ---

  Reference:

  https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/walkthrough-customresources- lambda-lookup-amiids.html

• Question 152:

  Which difference between core modules and extra modules is not correct?

  A. Extra modules may one day become core modules
  B. Core modules are supported by the Ansible team
  C. Core modules are shipped by default with Ansible
  D. Extra modules have no support
  D. Extra modules have no support

  ---

  While extra modules are not official modules and thus not supported by the Ansible team, they are indeed supported by their writers and the community.

  Reference: http://docs.ansible.com/ansible/modules_extra.html

• Question 153:

  You need to process long-running jobs once and only once. How might you do this?

  A. Use an SNS queue and set the visibility timeout to long enough for jobs to process.
  B. Use an SQS queue and set the reprocessing timeout to long enough for jobs to process.
  C. Use an SQS queue and set the visibility timeout to long enough for jobs to process.
  D. Use an SNS queue and set the reprocessing timeout to long enough for jobs to process.
  C. Use an SQS queue and set the visibility timeout to long enough for jobs to process.

  ---

  The message timeout defines how long after a successful receive request SQS waits before allowing jobs to be seen by other components, and proper configuration prevents duplicate processing. Reference: http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/ MessageLife cycle.html

• Question 154:

  A company has a mission-critical application on AWS that uses automatic scaling. The company wants the deployment lifecycle to meet the following parameters:

  1.

  The application must be deployed one instance at a time to ensure the remaining fleet continues to serve traffic.

  2.

  The application is CPU intensive and must be closely monitored.

  3.

  The deployment must automatically roll back if the CPU utilization of the deployment instance exceeds 85%.

  Which solution will meet these requirements?

  A. Use AWS CloudFormation to create an AWS Step Functions state machine and Auto Scaling lifecycle hooks to move to one instance at a time into a wait state. Use AWS Systems Manager automation to deploy the update to each instance and move it back into the Auto Scaling group using the heartbeat timeout.
  B. Use AWS CodeDeploy with Amazon EC2 Auto Scaling. Configure an alarm tied to the CPU utilization metric. Use the CodeDeployDefault.OneAtAtime configuration as a deployment strategy. Configure automatic rollbacks within the deployment group to roll back the deployment if the alarm thresholds are breached.
  C. Use AWS Elastic Beanstalk for load balancing and AWS Auto Scaling. Configure an alarm tied to the CPU utilization metric. Configure rolling deployments with a fixed batch size of one instance. Enable enhanced health to monitor the status of the deployment and roll back based on the alarm previously created.
  D. Use AWS Systems Manager to perform a blue/green deployment with Amazon EC2 Auto Scaling. Configure an alarm tied to the CPU utilization metric. Deploy updates one at a time. Configure automatic rollbacks within the Auto Scaling group to roll back the deployment if the alarm thresholds are breached.
  B. Use AWS CodeDeploy with Amazon EC2 Auto Scaling. Configure an alarm tied to the CPU utilization metric. Use the CodeDeployDefault.OneAtAtime configuration as a deployment strategy. Configure automatic rollbacks within the deployment group to roll back the deployment if the alarm thresholds are breached.

  ---

  Reference: https://aws.amazon.com/about-aws/whats-new/2016/09/aws-codedeploy-introduces- deployment-monitoring-with-amazon-cloudwatch-alarms-and-automatic-deployment-rollback/

• Question 155:

  A mobile application running on eight Amazon EC2 instances is relying on a third-party API endpoint. The third-party service has a high failure rate because of limited capacity, which is expected to be resolved in a few weeks.

  In the meantime, the mobile application developers have added a retry mechanism and are logging failed API requests. A DevOps Engineer must automate the monitoring of application logs and count the specific error messages; if there are more than 10 errors within a 1-minute window, the system must issue an alert.

  How can the requirements be met with MINIMAL management overhead?

  A. Install the Amazon CloudWatch Logs agent on all instances to push the application logs to CloudWatch Logs. Use metric filters to count the error messages every minute, and trigger a CloudWatch alarm if the count exceeds 10 errors.
  B. Install the Amazon CloudWatch Logs agent on all instances to push the access logs to CloudWatch Logs. Create a CloudWatch Events rule to count the error messages every minute, and trigger a CloudWatch alarm if the count exceeds 10 errors.
  C. Install the Amazon CloudWatch Logs agent on all instances to push the application logs to CloudWatch Logs. Use a metric filter to generate a custom CloudWatch metric that records the number of failures and triggers a CloudWatch alarm if the custom metric reaches 10 errors in a 1-minute period.
  D. Deploy a custom script on all instances to check application logs regularly in a cron job. Count the number of error messages every minute, and push a data point to a custom. CloudWatch metric. Trigger a CloudWatch alarm if the custom metric reaches 10 errors in a 1-minute period.
  C. Install the Amazon CloudWatch Logs agent on all instances to push the application logs to CloudWatch Logs. Use a metric filter to generate a custom CloudWatch metric that records the number of failures and triggers a CloudWatch alarm if the custom metric reaches 10 errors in a 1-minute period.

• Question 156:

  A company uses a complex system that consists of networking, IAM policies, and multiple three-tier applications. Requirements are still being defined for a new system, so the number of AWS components present in the final design is not known. The DevOps Engineer needs to begin defining AWS resources using AWS CloudFormation to automate and version-control the new infrastructure. What is the best practice for using CloudFormation to create new environments?

  A. Manually construct the networking layer using Amazon VPC and then define all other resources using CloudFormation.
  B. Create a single template to encompass all resources that are required for the system so there is only one template to version-control.
  C. Create multiple separate templates for each logical part of the system, use cross-stack references in CloudFormation, and maintain several templates in version control.
  D. Create many separate templates for each logical part of the system, and provide the outputs from one to the next using an Amazon EC2 instance running SDK for granular control.
  C. Create multiple separate templates for each logical part of the system, use cross-stack references in CloudFormation, and maintain several templates in version control.

• Question 157:

  A Development team is working on a serverless application in AWS. To quickly identify and remediate potential production issues, the team decides to roll out changes to a small number of users as a test before the full release. The DevOps Engineer must develop a solution to minimize downtime and impact. Which of the following solutions should be used to meet the requirements? (Choose two.)

  A. Create an Application Load Balancer with two target groups. Set up the Application Load Balancer for Amazon API Gateway private integration. Associate one target group to the current version and the other target group to the new version. Configure API Gateway to route 10% of incoming traffic to the new version. As the new version becomes stable, configure API Gateway to send all traffic to the new version and detach the old version from the load balancer.
  B. Create an alias for an AWS Lambda function pointing to both the current and new versions. Configure the alias to route 10% of incoming traffic to the new version. As the new version is considered stable, update the alias to route all traffic to the new version.
  C. Create a failover record set in AWS Route 53 pointing to the AWS Lambda endpoints for the old and new versions. Configure Route 53 to route 10% of incoming traffic to the new version. As the new version becomes stable, update the DNS record to route all traffic to the new version.
  D. Create an ELB Network Load Balancer with two target groups. Set up the Network Load Balancer for Amazon API Gateway private integration Associate one target group with the current version and the other target group with the new version. Configure the load balancer to route 10% of incoming traffic to the new version. As the new version becomes stable, detach the old version from the load balancer.
  E. In Amazon API Gateway, create a canary release deployment by adding canary settings to the stage of a regular deployment. Configure API Gateway to route 10% of the incoming traffic to the canary release. As the canary release is considered stable, promote it to a production release
  B. Create an alias for an AWS Lambda function pointing to both the current and new versions. Configure the alias to route 10% of incoming traffic to the new version. As the new version is considered stable, update the alias to route all traffic to the new version.
  E. In Amazon API Gateway, create a canary release deployment by adding canary settings to the stage of a regular deployment. Configure API Gateway to route 10% of the incoming traffic to the canary release. As the canary release is considered stable, promote it to a production release

• Question 158:

  Which command will start an assessment run?

  A. aws inspector start-assessment-run --assessment-template-arn
  B. aws inspector start-assessment-run --assessment-run-name examplerun --assessment-target
  C. aws inspector start-assessment-run --assessment-run-name examplerun
  D. aws inspector start-assessment-run --assessment-run-name examplerun --assessment-duration
  A. aws inspector start-assessment-run --assessment-template-arn

  ---

  start-assessment-run command requires --assessment-template-arn, other parameters are optional

  start-assessment-run

  --assessment-template-arn

  [--assessment-run-name ]

  [--cli-input-json ]

  [--generate-cli-skeleton ]

  Reference:

  http://docs.aws.amazon.com/cli/latest/reference/inspector/start-assessment-run.html

• Question 159:

  Which answer is the proper syntax for specifying two target hosts on the command line when running an Ansible Playbook?

  A. ansible-playbook -h host1.example.com -i all playbook.yml
  B. ansible-playbook -i host1.example.com playbook.yml
  C. ansible-playbook -h host1.example.com,host2.example.com playbook.yml
  D. ansible-playbook -i host1.example.com,host2.example.com playbook.yml
  D. ansible-playbook -i host1.example.com,host2.example.com playbook.yml

  ---

  Ansible uses the `-i' flag for accepting an inventory file or host. To allow Ansible to determine if you are passing a host list versus an inventory file the list must be comma separated. If a single host is specified, a trailing comma must be present.

  Reference: http://docs.ansible.com/ansible/intro_inventory.html#inventory

• Question 160:

  You are hosting multiple environments in multiple regions and would like to use Amazon Inspector for regular security assessments on your AWS resources across all regions. Which statement about Amazon Inspector's operation across regions is true?

  A. Amazon Inspector is a global service that is not region-bound. You can include AWS resources from multiple regions in the same assessment target.
  B. Amazon Inspector is hosted within AWS regions behind a public endpoint. All regions are isolated from each other, and the telemetry and findings for all assessments performed within a region remain in that region and are not distributed by the service to other Amazon Inspector locations.
  C. Amazon Inspector is hosted in each supported region. Telemetry data and findings are shared across regions to provide complete assessment reports.
  D. Amazon Inspector is hosted in each supported region separately. You have to create assessment targets using the same name and tags in each region and Amazon Inspector will run against each assessment target in each region.
  B. Amazon Inspector is hosted within AWS regions behind a public endpoint. All regions are isolated from each other, and the telemetry and findings for all assessments performed within a region remain in that region and are not distributed by the service to other Amazon Inspector locations.

  ---

  At this time, Amazon Inspector supports assessment services for EC2 instances in only the following AWS regions:

  US West (Oregon)

  US East (N. Virginia)

  EU (Ireland)

  Asia Pacific (Seoul)

  Asia Pacific (Mumbai)

  Asia Pacific (Tokyo)

  Asia Pacific (Sydney)

  Amazon Inspector is hosted within AWS regions behind a public endpoint. All regions are isolated from each other, and the telemetry and findings for all assessments performed within a region remain in that region and are not distributed by

  the service to other Amazon Inspector locations.

  Reference:

  https://docs.aws.amazon.com/inspector/latest/userguide/inspector_supported_os_regions.html#in%20spector_supported-regions