Amazon DOP-C01 Online Practice Questions and Exam Preparation

Amazon DOP-C01 Online Questions & Answers

• Question 251:

  The Security team depends on AWS CloudTrail to detect sensitive security issues in the company's AWS account. The DevOps Engineer needs a solution to auto-remediate CloudTrail being turned off in an AWS account.

  What solution ensures the LEAST amount of downtime for the CloudTrail log deliveries?

  A. Create an Amazon CloudWatch Events rule for the CloudTrail StopLogging event. Create an AWS Lambda function that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLogging was called. Add the Lambda function ARN as a target to the CloudWatch Events rule.
  B. Deploy the AWS-managed CloudTrail-enabled AWS Config rule, set with a periodic interval of 1 hour. Create an Amazon CloudWatch Events rule for AWS Config rules compliance change. Create an AWS Lambda function that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLogging was called. Add the Lambda function ARN as a target to the CloudWatch Events rule.
  C. Create an Amazon CloudWatch Events rule for a scheduled event every 5 minutes. Create an AWS Lambda function that uses the AWS SDK to call StartLogging on a CloudTrail trail in the AWS account. Add the Lambda function ARN as a target to the CloudWatch Events rule.
  D. Launch a t2.nano instance with a script running every 5 minutes that uses the AWS SDK to query CloudTrail in the current account. If the CloudTrail trail is disabled, have the script re-enable the trail.
  A. Create an Amazon CloudWatch Events rule for the CloudTrail StopLogging event. Create an AWS Lambda function that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLogging was called. Add the Lambda function ARN as a target to the CloudWatch Events rule.

• Question 252:

  Which of these is not an intrinsic function in AWS CloudFormation?

  A. Fn::Split
  B. Fn::FindInMap
  C. Fn::Select
  D. Fn::GetAZs
  A. Fn::Split

  ---

  This is the complete list of Intrinsic Functions...: Fn::Base64, Fn::And, Fn::Equals, Fn::If, Fn::Not, Fn::Or, Fn::FindInMap, Fn::GetAtt, Fn::GetAZs, Fn::Join, Fn::Select

  Reference: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-functionreference.html

• Question 253:

  You are creating a new API for video game scores. Reads are 100 times more common than writes, and the top 1% of scores are read 100 times more frequently than the rest of the scores. What's the best design for this system, using DynamoDB?

  A. DynamoDB table with 100x higher read than write throughput, with CloudFront caching.
  B. DynamoDB table with roughly equal read and write throughput, with CloudFront caching.
  C. DynamoDB table with 100x higher read than write throughput, with ElastiCache caching.
  D. DynamoDB table with roughly equal read and write throughput, with ElastiCache caching.
  D. DynamoDB table with roughly equal read and write throughput, with ElastiCache caching.

  ---

  Because the 100x read ratio is mostly driven by a small subset, with caching, only a roughly equal number of reads to writes will miss the cache, since the supermajority will hit the top 1% scores. Knowing we need to set the values roughly

  equal when using caching, we select AWS ElastiCache, because CloudFront cannot directly cache DynamoDB queries, and ElastiCache is an excellent in-memory cache for database queries, rather than a distributed proxy cache for content

  delivery. ... One solution would be to cache these reads at the application layer. Caching is a technique that is used in many high-throughput applications, offloading read activity on hot items to the cache rather than to the database. Your

  application can cache the most popular items in memory, or use a product such as ElastiCache to do the same.

  Reference:

  https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/best-practices.html#%20Guideli% 20nesForTables.CachePopularItem

• Question 254:

  A company is using AWS Organizations to create separate AWS accounts for each of its departments. The company needs to automate the following tasks:

  Update the Linux AMIs with new patches periodically and generate a golden image Install a new version of Chef agents in the golden image, if available Provide the newly generated AMIs to the department's accounts

  Which solution meets these requirements with the LEAST management overhead?

  A. Write a script to launch an Amazon EC2 instance from the previous golden image. Apply the patch updates. Install the new version of the Chef agent, generate a new golden image, and then modify the AMI permissions to share only the new image with the department's accounts.
  B. Use Amazon EC2 Image Builder to create an image pipeline that consists of the base Linux AMI and components to install the Chef agent. Use AWS Resource Access Manager to share EC2 Image Builder images with the department's accounts.
  C. Use an AWS Systems Manager Automation runbook to update the Linux AMI by using the previous image. Provide the URL for the script that will update the Chef agent. Use AWS Organizations to replace the previous golden image in the department's accounts.
  D. Use Amazon EC2 Image Builder to create an image pipeline that consists of the base Linux AMI and components to install the Chef agent. Create a parameter in AWS Systems Manager Parameter Store to store the new AMI ID that can be referenced by the department's accounts.
  A. Write a script to launch an Amazon EC2 instance from the previous golden image. Apply the patch updates. Install the new version of the Chef agent, generate a new golden image, and then modify the AMI permissions to share only the new image with the department's accounts.

• Question 255:

  A DevOps Engineer manages a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an EC2 Auto Scaling group across multiple Availability Zones. The engineer needs to implement a deployment strategy that:

  1.

  Launches a second fleet of instances with the same capacity as the original fleet.

  2.

  Maintains the original fleet unchanged while the second fleet is launched.

  3.

  Transitions traffic to the second fleet when the second fleet is fully deployed.

  4.

  Terminates the original fleet automatically 1 hour after transition.

  Which solution will satisfy these requirements?

  A. Use an AWS CloudFormation template with a retention policy for the ALB set to 1 hour. Update the Amazon Route 53 record to reflect the new ALB.
  B. Use two AWS Elastic Beanstalk environments to perform a blue/green deployment from the original environment to the new one. Create an application version lifecycle policy to terminate the original environment in 1 hour.
  C. Use AWS CodeDeploy with a deployment group configured with a blue/green deployment configuration. Select the option Terminate the original instances in the deployment group with a waiting period of 1 hour.
  D. Use AWS Elastic Beanstalk with the configuration set to Immutable. Create an .ebextension using the Resources key that sets the deletion policy of the ALB to 1 hour, and deploy the application.
  C. Use AWS CodeDeploy with a deployment group configured with a blue/green deployment configuration. Select the option Terminate the original instances in the deployment group with a waiting period of 1 hour.

• Question 256:

  An ecommerce company is receiving reports that its order history page is experiencing delays in reflecting the processing status of orders. The order processing system consists of an AWS Lambda function using reserved concurrency. The Lambda function processes order messages from an Amazon SQS queue and inserts processed orders into an Amazon DynamoDB table. The DynamoDB table has Auto Scaling enabled for read and write capacity.

  Which actions will diagnose and resolve the delay? (Choose two.)

  A. Check the ApproximateAgeOfOldestMessage metric for the SQS queue and increase the Lambda function concurrency limit.
  B. Check the ApproximateAgeOfOldestMessage metric for the SQS queue and configure a redrive policy on the SQS queue.
  C. Check the NumberOfMessagesSent metric for the SQS queue and increase the SQS queue visibility timeout.
  D. Check the ThrottledWriteRequests metric for the DynamoDB table and increase the maximum write capacity units for the table's Auto Scaling policy.
  E. Check the Throttles metric for the Lambda function and increase the Lambda function timeout.
  C. Check the NumberOfMessagesSent metric for the SQS queue and increase the SQS queue visibility timeout.
  E. Check the Throttles metric for the Lambda function and increase the Lambda function timeout.

• Question 257:

  A DevOps engineer is tasked with migrating Docker containers used for a workload to AWS. The solution must allow for changes to be deployed into development and test environments automatically by updating each container and checking it into a container registry. Once the containers are pushed, they must be deployed automatically.

  Which solution will meet these requirements?

  A. Store container images in Amazon S3. Run the containers in AWS Elastic Beanstalk using a multicontainer Docker environment. Configure Elastic Beanstalk to redeploy the containers if it detects a new version in Amazon S3.
  B. Store container images in AWS Artifact. Use AWS CodePipeline to trigger a deployment if a new container version is created. Use AWS CodeDeploy to deploy new containers to Amazon EKS.
  C. Store container images in Amazon ECR. Use AWS CodePipeline to trigger a deployment if a new container version is created. Use AWS CodeDeploy to deploy the image to AWS Fargate.
  D. Store container images in Docker Hub. Install Docker on an Amazon EC2 instance and use AWS CodePipeline and AWS CodeDeploy to deploy any new containers.
  C. Store container images in Amazon ECR. Use AWS CodePipeline to trigger a deployment if a new container version is created. Use AWS CodeDeploy to deploy the image to AWS Fargate.

• Question 258:

  What is the maximum supported single-volume throughput on EBS?

  A. 320MiB/s
  B. 160MiB/s
  C. 40MiB/s
  D. 640MiB/s
  A. 320MiB/s

  ---

  The ceiling throughput for PIOPS on EBS is 320MiB/s.

  Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html

• Question 259:

  Your company needs to automate 3 layers of a large cloud deployment. You want to be able to track this deployment's evolution as it changes over time, and carefully control any alterations. What is a good way to automate a stack to meet these requirements?

  A. Use OpsWorks Stacks with three layers to model the layering in your stack.
  B. Use CloudFormation Nested Stack Templates, with three child stacks to represent the three logical layers of your cloud.
  C. Use AWS Config to declare a configuration set that AWS should roll out to your cloud.
  D. Use Elastic Beanstalk Linked Applications, passing the important DNS entires between layers using the metadata interface.
  B. Use CloudFormation Nested Stack Templates, with three child stacks to represent the three logical layers of your cloud.

  ---

  Only CloudFormation allows source controlled, declarative templates as the basis for stack automation. Nested Stacks help achieve clean separation of layers while simultaneously providing a method to control all layers at once when

  needed.

  Reference:

  https://blogs.aws.amazon.com/application-management/post/Tx1T9JYQOS8AB9I/Use-Nested-Stacks-to- Create-Reusable-Templates-and-Support-Role-Specialization

• Question 260:

  Which of these is not a CloudFormation Helper Script?

  A. cfn-signal
  B. cfn-hup
  C. cfn-request
  D. cfn-get-metadata
  C. cfn-request

  ---

  This is the complete list of CloudFormation Helper Scripts: cfn-init, cfn-signal, cfn-get-metadata, cfn-hup

  Reference: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-helper-scriptsreference.html