Amazon Amazon Certifications DOP-C02 Questions & Answers

• Question 321:

  You have deployed an application to AWS which makes use of Autoscaling to launch new instances. You now want to change the instance type for the new instances. Which of the following is one of the action items to achieve this deployment?

  A. Use Elastic Beanstalk to deploy the new application with the new instance type

  B. Use Cloudformation to deploy the new application with the new instance type

  C. Create a new launch configuration with the new instance type

  D. Create new EC2 instances with the new instance type and attach it to the Autoscaling Group

  Correct Answer: C

  The ideal way is to create a new launch configuration, attach it to the existing Auto Scaling group, and terminate the running instances. Option A is invalid because Clastic beanstalk cannot launch new instances on demand. Since the current scenario requires Autoscaling, this is not the ideal option Option B is invalid because this will be a maintenance overhead, since you just have an Autoscaling Group. There is no need to create a whole Cloudformation template for this. Option D is invalid because Autoscaling Group will still launch CC2 instances with the older launch configuration.

• Question 322:

  You have an application running a specific process that is critical to the application's functionality, and have added the health check process to your Auto Scaling Group. The instances are showing healthy but the application itself is not working as it should. What could be the issue with the health check, since it is still showing the instances as healthy.

  A. You do not have the time range in the health check properly configured

  B. It is not possible for a health check to monitor a process that involves the application

  C. The health check is not configured properly

  D. The health check is not checking the application process

  Correct Answer: D

  If you have custom health checks, you can send the information from your health checks to Auto Scaling so that Auto Scaling can use this information. For example, if you determine that an instance is not functioning as expected, you can set the health status of the instance to Unhealthy. The next time that Auto Scaling performs a health check on the instance, it will determine that the instance is unhealthy and then launch a replacement instance.

• Question 323:

  You currently have the following setup in AWS:

  1) An Elastic Load Balancer 2) Auto Scaling Group which launches EC2 Instances 3) AMIs with your code pre-installed You want to deploy the updates of your app to only a certain number of users. You want to have a cost-effective solution. You should also be able to revert back quickly.

  Which of the below solutions is the most feasible one?

  A. Create a second ELB, and a new Auto Scaling Group assigned a new Launch Configuration. Create a new AMI with the updated app. Use Route53 Weighted Round Robin records to adjust the proportion of traffic hitting the two ELBs.

  B. Create new AMIs with the new app. Then use the new EC2 instances in half proportion to the older instances.

  C. Redeploy with AWS Elastic Beanstalk and Elastic Beanstalk versions. Use Route 53 Weighted Round Robin records to adjust the proportion of traffic hitting the two ELBs

  D. Create a full second stack of instances, cut the DNS over to the new stack of instances, and change the DNS back if a rollback is needed.

  Correct Answer: A

  The Weighted Routing policy of Route53 can be used to direct a proportion of traffic to your application. The best option is to create a second CLB, attach the new Autoscaling Group and then use Route53 to divert the traffic. Option B is wrong because just having EC2 instances running with the new code will not help. Option C is wrong because Clastic beanstalk is good for development environments, and also there is no mention of having 2 environments where environment urls can be swapped. Option D is wrong because you still need Route53 to split the traffic.

• Question 324:

  What is the default maximum number of Roles per AWS account?

  A. 500

  B. 250

  C. 100

  D. There is no limit.

  Correct Answer: B

  The default maximum number of Roles per AWS account is 250.

  Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.htm

• Question 325:

  You have an application which consists of EC2 instances in an Auto Scaling group. Between a particular time frame every day, there is an increase in traffic to your website. Hence users are complaining of a poor response time on the

  application. You have configured your Auto Scaling group to deploy one new EC2 instance when CPU utilization is greater than 60% for 2 consecutive periods of 5 minutes.

  What is the least cost-effective way to resolve this problem?

  A. Decrease the consecutive number of collection periods

  B. Increase the minimum number of instances in the Auto Scaling group

  C. Decrease the collection period to ten minutes

  D. Decrease the threshold CPU utilization percentage at which to deploy a new instance

  Correct Answer: B

  If you increase the minimum number of instances, then they will be running even though the load is not high on the website. Hence you are incurring cost even though there is no need. All of the remaining options are possible options which can be used to increase the number of instances on a high load. For more information on On-demand scaling, please refer to the below link.

  Reference: http://docs.aws.amazon.com/autoscaling/latest/userguide/as-scale-based-on-demand.html

• Question 326:

  You have decided that you need to change the instance type of your production instances which are running as part of an AutoScaling group. The entire architecture is deployed using CloudFormation Template. You currently have 4 instances in Production. You cannot have any interruption in service and need to ensure 2 instances are always runningduring the update. Which of the options below listed can be used for this?

  A. AutoScalingRollingUpdate

  B. AutoScalingScheduledAction

  C. AutoScalingReplacingUpdate

  D. AutoScalinglntegrationUpdate

  Correct Answer: A

  The AWS::AutoScaling::AutoScalingGroup resource supports an UpdatePoIicy attribute. This is used to define how an Auto Scalinggroup resource is updated when an update to the Cloud Formation stack occurs. A common approach to updating an Auto Scaling group is to perform a rolling update, which is done by specifying the AutoScalingRollingUpdate policy. This retains the same Auto Scaling group and replaces old instances with new ones, according to the parameters specified. For more information on Autoscaling updates, please refer to the below link.

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/auto-scaling-group-rolling-updates/

• Question 327:

  Which statement is true about configuring proxy support for Amazon Inspector agent on a Windows-based system?

  A. Amazon Inspector agent supports proxy usage on Windows-based systems through the use of the WinHTTP proxy.

  B. Amazon Inspector agent supports proxy usage on Linux-based systems but not on Windows.

  C. Amazon Inspector proxy support on Windows-based systems is achieved through installing proxy-enabled version of the agent which comes with preconfigured files that you need to edit to match your environment.

  D. Amazon Inspector agent supports proxy usage on Windows-based systems through awsagent.env configuration file.

  Correct Answer: A

  Proxy support for AWS agents is achieved through the use of the WinHTTP proxy.

  Reference: https://docs.aws.amazon.com/inspector/latest/userguide/inspector_agents-on-win.html#inspectoragent-proxy

• Question 328:

  A user is defining a policy for an IAM user. Which of the below mentioned options is a valid version defined for the policy?

  A. "Version":"2014-01-01"

  B. "Version":"2011-10-17"

  C. "Version":"2013-10-17"

  D. "Version":"2012-10-17"

  Correct Answer: D

  When defining an IAM Policy, the version element specifies the policy language version. Only the following values are allowed:

  2012-10-17. This is the current version of the policy language, and the user should use this version number for all the policies. 2008-10-17. This was an earlier version of the policy language. The user might see this version on the existing

  policies. Do not use this version for any new policies or any existing policies that are being updated.

  If a version element is not included, the value defaults to 2008-10-17.

  Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPolicyLanguage_ElementDescriptions.html

• Question 329:

  Which command will start an assessment run?

  A. aws inspector start-assessment-run --assessment-template-arn

  B. aws inspector start-assessment-run --assessment-run-name examplerun --assessment-target

  C. aws inspector start-assessment-run --assessment-run-name examplerun

  D. aws inspector start-assessment-run --assessment-run-name examplerun --assessment-duration

  Correct Answer: A

  start-assessment-run command requires --assessment-template-arn, other parameters are optional

  start-assessment-run

  --assessment-template-arn

  [--assessment-run-name ]

  [--cli-input-json ]

  [--generate-cli-skeleton ]

  Reference:

  http://docs.aws.amazon.com/cli/latest/reference/inspector/start-assessment-run.html

• Question 330:

  A root owner is trying to create an IAM user of the various departments. The owner has created groups for each department, but wants to still delineate the user based on the sub division level. E.g. The two users from different sub departments should be identified separately and have separate permissions. How can the root owner configure this?

  A. Create a hierarchy of the IAM users which are separated based on the department

  B. Create a nested group

  C. Use the paths to separate the users of the same group

  D. It is not possible to delineate within a group

  Correct Answer: C

  The path functionality within an IAM group and user allows them to delineate by further levels. In this case the user needs to use the path with each user or group so that the ARN of the user will look similar to: arn:aws:iam::123456789012:user/division_abc/subdivision_xyz/user1 arn:aws:iam::123456789012:user/division_abc/subdivision_xyz/user2

  Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html#Identifiers_ARNs