Amazon DOP-C01 Online Practice Questions and Exam Preparation

Amazon DOP-C01 Online Questions & Answers

• Question 171:

  Which of the following are not valid sources for OpsWorks custom cookbook repositories?

  A. HTTP(S)
  B. Git
  C. AWS EBS
  D. Subversion
  C. AWS EBS

  ---

  Linux stacks can install custom cookbooks from any of the following repository types: HTTP or Amazon S3 archives. They can be either public or private, but Amazon S3 is typically the preferred option for a private archive. Git and Subversion repositories provide source control and the ability to have multiple versions.

  Reference: http://docs.aws.amazon.com/opsworks/latest/userguide/workingcookbook-installingcustomenable.html

• Question 172:

  You need to create a Route53 record automatically in CloudFormation when not running in production during all launches of a Template. How should you implement this?

  A. Use a Parameter for environment, and add a Condition on the Route53 Resource in the template to create the record only when environment is not production.
  B. Create two templates, one with the Route53 record value and one with a null value for the record. Use the one without it when deploying to production.
  C. Use a Parameter for environment, and add a Condition on the Route53 Resource in the template to create the record with a null string when environment is production.
  D. Create two templates, one with the Route53 record and one without it. Use the one without it when deploying to production.
  A. Use a Parameter for environment, and add a Condition on the Route53 Resource in the template to create the record only when environment is not production.

  ---

  The best way to do this is with one template, and a Condition on the resource. Route53 does not allow null strings for records.

  Reference: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/conditions- sectionstructure.html

• Question 173:

  An Application team is refactoring one of its internal tools to run in AWS instead of on-premises hardware. All of the code is currently written in Python and is standalone. There is also no external state store or relational database to be queried.

  Which deployment pipeline incurs the LEAST amount of changes between development and production?

  A. Developers should use Docker for local development. When dependencies are changed and a new container is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to Amazon ECR. Use AWS CloudFormation with the custom container to deploy the new Amazon ECS.
  B. Developers should use Docker for local development. Use AWS SMS to import these containers as AMIs for Amazon EC2 whenever dependencies are updated. Use AWS CodePipeline to test new code changes against the Auto Scaling group.
  C. Developers should use their native Python environment. When Dependencies are changed and a new container is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to the Amazon ECR. Use AWS CloudFormation with the custom container to deploy the new Amazon ECS.
  D. Developers should use their native Python environment. When Dependencies are changed and a new code is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to the Amazon ECR. Use CodePipeline and CodeBuild with the custom container to test new code changes inside AWS Elastic Beanstalk.
  A. Developers should use Docker for local development. When dependencies are changed and a new container is ready, use AWS CodePipeline and AWS CodeBuild to perform functional tests and then upload the new container to Amazon ECR. Use AWS CloudFormation with the custom container to deploy the new Amazon ECS.

• Question 174:

  A DevOps Engineer has been asked to recommend a tool to deploy the components of a threetier web application. This application will use Amazon DynamoDB as a database Which deployment requires the LEAST amount of operational management?

  A. Use AWS CloudFormation to create a Classic Load Balancer and an Auto Scaling group. Use AWS OpsWorks to create the application and database resources Deploy application updates with OpsWorks using lifecycle events
  B. Use AWS OpsWorks to create a Classic Load Balancer, an Auto Scaling group application, and database resources Deploy application updates using OpsWorks lifecycle events
  C. Use AWS OpsWorks to create a Classic Load Balancer Auto Scaling and application resources Use AWS CloudFormation to create the database resources Deploy application updates using CloudFormation rolling updates
  D. Use AWS CloudFormation to create a Classic Load Balancer an Auto Scaling group and database resources Deploy application updates using CloudFormation rolling updates
  B. Use AWS OpsWorks to create a Classic Load Balancer, an Auto Scaling group application, and database resources Deploy application updates using OpsWorks lifecycle events

• Question 175:

  You are designing a system which needs, at minumum, 8 m4.large instances operating to service traffic. When designing a system for high availability in the us-east-1 region, which has 6 Availability Zones, you company needs to be able to handle death of a full availability zone. How should you distribute the servers, to save as much cost as possible, assuming all of the EC2 nodes are properly linked to an ELB?

  Your VPC account can utilize us-east-1's AZ's a through f, inclusive.

  A. 3 servers in each of AZ's a through d, inclusive.
  B. 8 servers in each of AZ's a and b.
  C. 2 servers in each of AZ's a through e, inclusive.
  D. 4 servers in each of AZ's a through c, inclusive.
  C. 2 servers in each of AZ's a through e, inclusive.

  ---

  You need to design for N+1 redundancy on Availability Zones. ZONE_COUNT = (REQUIRED_INSTANCES / INSTANCE_COUNT_PER_ZONE) + 1. To minimize cost, spread the instances across as many possible zones as you can. By using a though e, you are allocating 5 zones. Using 2 instances, you have 10 total instances. If a single zone fails, you have 4 zones left, with 2 instances each, for a total of 8 instances. By spreading out as much as possible, you have increased cost by only 25% and significantly de-risked an availability zone failure.

  Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts.html

• Question 176:

  Which tool will Ansible not use, even if available, to gather facts?

  A. facter
  B. lsb_release
  C. Ansible setup module
  D. ohai
  B. lsb_release

  ---

  Ansible will use its own `setup' module to gather facts for the local system. Additionally, if ohai or facter are installed, those will also be used and all variables will be prefixed with `ohai_' or `facter_' respectively. `lsb_relase' is a Linux tool for determining distribution information.

  Reference: http://docs.ansible.com/ansible/setup_module.html

• Question 177:

  You want to securely distribute credentials for your Amazon RDS instance to your fleet of web server instances. The credentials are stored in a file that is controlled by a configuration management system. How do you securely deploy the credentials in an automated manner across the fleet of web server instances, which can number in the hundreds, while retaining the ability to roll back if needed?

  A. Store your credential files in an Amazon S3 bucket. Use Amazon S3 server-side encryption on the credential files. Have a scheduled job that pulls down the credential files into the instances every 10 minutes.
  B. Store the credential files in your version-controlled repository with the rest of your code. Have a post- commit action in version control that kicks off a job in your continuous integration system which securely copses the new credential files to all web server instances.
  C. Insert credential files into user data and use an instance lifecycle policy to periodically refresh the file from the user data.
  D. Keep credential files as a binary blob in an Amazon RDS MySQL DB instance, and have a script on each Amazon EC2 instance that pulls the files down from the RDS instance.
  E. Store the credential files in your version-controlled repository with the rest of your code. Use a parallel file copy program to send the credential files from your local machine to the Amazon EC2 instances.
  A. Store your credential files in an Amazon S3 bucket. Use Amazon S3 server-side encryption on the credential files. Have a scheduled job that pulls down the credential files into the instances every 10 minutes.

• Question 178:

  A DevOps Engineer is researching the least-expensive way to implement an image batch processing cluster in AWS. The application cannot run in Docker containers and must run on Amazon EC2. The batch job stores checkpoint data on a Network File System (NFS) and can tolerate interruptions. Configuring the cluster software from a bare EC2 Amazon Linux image takes 30 minutes.

  Which is the MOST cost-effective solution?

  A. Use Amazon EFS for checkpoint data. To complete the job, use an EC2 Auto Scaling group and an On-Demand pricing model to provision EC2 instances temporarily.
  B. Use GlusterFS on EC2 instances for checkpoint data. To run the batch job, configure EC2 instances manually. When the job completes, shut down the instances manually.
  C. Use Amazon EFS for checkpoint data. Use EC2 Fleet to launch EC2 Spot Instances, and use user data to configure the EC2 Amazon Linux instance on startup.
  D. Use Amazon EFS for checkpoint data. Use EC2 Fleet to launch EC2 Spot Instances. Create a standard cluster AMI and use the latest AMI when creating instances.
  D. Use Amazon EFS for checkpoint data. Use EC2 Fleet to launch EC2 Spot Instances. Create a standard cluster AMI and use the latest AMI when creating instances.

• Question 179:

  After a recent audit, a company decided to implement a new disaster recovery strategy for its Amazon S3 data and its MySQL database running on Amazon EC2. Management wants the ability to recover to a secondary AWS Region with an RPO under 5 seconds and an RTO under 1 minute.

  Which actions will meet the requirements while MINIMIZING operational overhead? (Choose two.)

  A. Modify the application to write to both Regions at the same time when uploading objects to Amazon S3.
  B. Migrate the database to an Amazon Aurora multi-master in the primary and secondary Regions.
  C. Migrate the database to Amazon RDS with a read replica in the secondary Region.
  D. Migrate to Amazon Aurora Global Database.
  E. Set up S3 cross-Region replication with a replication SLA for the S3 buckets where objects are being put.
  C. Migrate the database to Amazon RDS with a read replica in the secondary Region.
  E. Set up S3 cross-Region replication with a replication SLA for the S3 buckets where objects are being put.

  ---

  Reference: https://aws.amazon.com/blogs/database/implementing-a-disaster-recovery-strategy-with- amazon-rds/

• Question 180:

  Management has reported an increase in the monthly bill from Amazon web services, and they are extremely concerned with this increased cost. Management has asked you to determine the exact cause of this increase. After reviewing the billing report, you notice an increase in the data transfer cost. How can you provide management with a better insight into data transfer use?

  A. Update your Amazon CloudWatch metrics to use five-second granularity, which will give better detailed metrics that can be combined with your billing data to pinpoint anomalies.
  B. Use Amazon CloudWatch Logs to run a map-reduce on your logs to determine high usage and data transfer.
  C. Deliver custom metrics to Amazon CloudWatch per application that breaks down application data transfer into multiple, more specific data points.
  D. Using Amazon CloudWatch metrics, pull your Elastic Load Balancing outbound data transfer metrics monthly, and include them with your billing report to show which application is causing higher bandwidth usage.
  C. Deliver custom metrics to Amazon CloudWatch per application that breaks down application data transfer into multiple, more specific data points.