Question 1

What method should you use to author automation if you want to wait for a CloudFormation stack to finish completing in a script? A) Event subscription using SQS. B) Event subscription using SNS. C) Poll using ListStacks / list-stacks D) Poll using GetStackStatus / get-stack-status

Accepted Answer

The answer of What method should you use to author...

Question 2

What are the bare minimum requirements for a valid Ansible playbook?
A) The hosts, connection type, fact gathering, vars and tasks.
B) The hosts declaration and tasks
C) A YAML file with a single line containing `---'.
D) At least one play with at least a hosts declaration

Accepted Answer

A valid Ansible playbook must have at least one play, and each play must have a hosts declaration to specify the target machines.

Question 3

When thinking of AWS Elastic Beanstalk, the 'Swap Environment URLs' feature most directly aids in what?
A) Immutable Rolling Deployments
B) Mutable Rolling Deployments
C) Canary Deployments
D) Blue-Green Deployments

Accepted Answer

The 'Swap Environment URLs' feature in AWS Elastic Beanstalk is primarily used to facilitate Blue-Green Deployments, allowing you to switch traffic between two environments seamlessly.

Question 4

To monitor API calls against our AWS account by different users and entities, we can use ________ to create a history of calls in bulk for later review, and use ___________ for reacting to AWS API calls in real-time.
A) AWS Config; AWS Inspector
B) AWS CloudTrail; AWS Config
C) AWS CloudTrail; CloudWatch Events
D) AWS Config; AWS Lambda

Accepted Answer

AWS CloudTrail is used to create a history of API calls for later review, while CloudWatch Events can be used to react to AWS API calls in real-time.

Question 5

If Erin has three clusters of server types that are all managed by Ansible and she needs to provision each cluster so that they are configured with their appropriate NTP server addresses. What is the best method Erin should use in Ansible for managing this?
A) Write a task that scans the network in the target hosts' region for the NTP server, register the resulting address so that the next task can write the NTP configuration.
B) Break down the hosts by region in the Ansible inventory file and assign an inventory group variable the NTP address value for the respective region. The playbook can contain just the single play referencing the NTP variable from the inventory.
C) Create a playbook for each different region and store the NTP address in a variable in the play in the event the NTP server changes.
D) Create three plays, each one has the hosts for their respective regions and set the NTP server address in each task.

Accepted Answer

Using inventory group variables allows for easy management and scalability, as each region's NTP server address can be assigned in the inventory file, simplifying the playbook to reference these variables.

Question 6

Which one of the following is a restriction of AWS EBS Snapshots?
A) Snapshot restorations are restricted to the region in which the snapshots are created.
B) You cannot share unencrypted snapshots.
C) To share a snapshot with a user in other region the snapshot has to be created in that region first.
D) You cannot share a snapshot containing sensitive data such as an AWS Access Key ID or AWS Secret Access Key.

Accepted Answer

The answer of Which one of the following is a...

Question 7

If you are trying to configure an AWS Elastic Beanstalk worker tier for easy debugging if there are problems finishing queue jobs, what should you configure?
A) Configure Rolling Deployments
B) Configure Enhanced Health Reporting
C) Configure Blue-Green Deployments
D) Configure a Dead Letter Queue

Accepted Answer

Configuring a Dead Letter Queue allows you to capture messages that could not be processed successfully, making it easier to debug and analyze issues with queue jobs.

Question 8

You are building a game high score table in DynamoDB. You will store each user's highest score for each game, with many games, all of which have relatively similar usage levels and numbers of players. You need to be able to look up the highest score for any game. What is the best DynamoDB key structure?
A) HighestScore as the hash / only key.
B) GameID as the hash key, HighestScore as the range key.
C) GameID as the hash / only key.
D) GameID as the range / only key.

Accepted Answer

Using GameID as the hash key and HighestScore as the range key allows you to efficiently query the highest score for each game.

Question 9

Your system automatically provisions EIPs to EC2 instances in a VPC on boot. The system provisions the whole VPC and stack at once. You have two of them per VPC. On your new AWS account, your attempt to create a Development environment failed, after successfully creating Staging and Production environments in the same region. What happened?
A) You didn't choose the Development version of the AMI you are using.
B) You didn't set the Development flag to true when deploying EC2 instances.
C) You hit the soft limit of 5 EIPs per region and requested a 6th.
D) You hit the soft limit of 2 VPCs per region and requested a 3rd.

Accepted Answer

AWS has a default soft limit of 5 Elastic IPs (EIPs) per region, and since you have two EIPs per VPC and already created two environments (Staging and Production), you reached the limit when trying to create the Development environment.

Question 10

Which status represents a failure state in AWS CloudFormation? A) UPDATE_COMPLETE_CLEANUP_IN_PROGRESS B) DELETE_COMPLETE_WITH_ARTIFACTS C) ROLLBACK_IN_PROGRESS D) ROLLBACK_FAILED

Accepted Answer

The ROLLBACK_FAILED status represents a failure state in AWS CloudFormation. This status indicates that the stack update or deletion operation failed and the stack is in a failed state.

Question 11

You are creating an application which stores extremely sensitive financial information. All information in the system must be encrypted at rest and in transit. Which of these is a violation of this policy?
A) ELB SSL termination.
B) ELB Using Proxy Protocol v1.
C) CloudFront Viewer Protocol Policy set to HTTPS redirection.
D) Telling S3 to use AES256 on the server-side.

Accepted Answer

ELB SSL termination decrypts the data at the load balancer, which means data is not encrypted in transit between the load balancer and the application servers, violating the policy of encryption in transit.

Question 12

For AWS Auto Scaling, what is the first transition state an existing instance enters after leaving steady state in Standby mode?
A) Detaching
B) Terminating:Wait
C) Pending
D) EnteringStandby

Accepted Answer

The answer of For AWS Auto Scaling, what is the...

Question 13

You run accounting software in the AWS cloud. This software needs to be online continuously during the day every day of the week, and has a very static requirement for compute resources. You also have other, unrelated batch jobs that need to run once per day at any time of your choosing. How should you minimize cost?
A) Purchase a Heavy Utilization Reserved Instance to run the accounting software. Turn it off after hours. Run the batch jobs with the same instance class, so the Reserved Instance credits are also applied to the batch jobs.
B) Purchase a Medium Utilization Reserved Instance to run the accounting software. Turn it off after hours. Run the batch jobs with the same instance class, so the Reserved Instance credits are also applied to the batch jobs.
C) Purchase a Light Utilization Reserved Instance to run the accounting software. Turn it off after hours. Run the batch jobs with the same instance class, so the Reserved Instance credits are also applied to the batch jobs.
D) Purchase a Full Utilization Reserved Instance to run the accounting software. Turn it off after hours. Run the batch jobs with the same instance class, so the Reserved Instance credits are also applied to the batch jobs.

Accepted Answer

A Heavy Utilization Reserved Instance provides the greatest discount, and can be turned off after hours to save even more money. The batch jobs can run on the same instance class to take advantage of the Reserved Instance credits.

Question 14

You are designing a service that aggregates clickstream data in batch and delivers reports to subscribers via email only once per week. Data is extremely spikey, geographically distributed, high-scale, and unpredictable. How should you design this system?
A) Use a large RedShift cluster to perform the analysis, and a fleet of Lambdas to perform record inserts into the RedShift tables. Lambda will scale rapidly enough for the traffic spikes.
B) Use a CloudFront distribution with access log delivery to S3. Clicks should be recorded as querystring GETs to the distribution. Reports are built and sent by periodically running EMR jobs over the access logs in S3.
C) Use API Gateway invoking Lambdas which PutRecords into Kinesis, and EMR running Spark performing GetRecords on Kinesis to scale with spikes. Spark on EMR outputs the analysis to S3, which are sent out via email.
D) Use AWS Elasticsearch service and EC2 Auto Scaling groups. The Autoscaling groups scale based on click throughput and stream into the Elasticsearch domain, which is also scalable. Use Kibana to generate reports periodically.

Accepted Answer

The answer of You are designing a service that aggregates...

Question 15

Which of the following is an invalid variable name in Ansible?
A) host1st_ref
B) host-first-ref
C) Host1stRef
D) host_first_ref

Accepted Answer

Variable names in Ansible cannot contain hyphens.

Question 16

You have a high security requirement for your AWS accounts. What is the most rapid and sophisticated setup you can use to react to AWS API calls to your account?
A) Subscription to AWS Config via an SNS Topic. Use a Lambda Function to perform in-flight analysis and reactivity to changes as they occur.
B) Global AWS CloudTrail setup delivering to S3 with an SNS subscription to the deliver notifications, pushing into a Lambda, which inserts records into an ELK stack for analysis.
C) Use a CloudWatch Rule ScheduleExpression to periodically analyze IAM credential logs. Push the deltas for events into an ELK stack and perform ad-hoc analysis there.
D) CloudWatch Events Rules which trigger based on all AWS API calls, submitting all events to an AWS Kinesis Stream for arbitrary downstream analysis.

Accepted Answer

The answer of You have a high security requirement for...

Question 17

You need to create a simple, holistic check for your system's general availablity and uptime. Your system presents itself as an HTTP-speaking API. What is the most simple tool on AWS to achieve this with?
A) Route53 Health Checks
B) CloudWatch Health Checks
C) AWS ELB Health Checks
D) EC2 Health Checks

Accepted Answer

Route53 Health Checks can be used to monitor the availability and performance of your HTTP-speaking API by sending requests to the endpoint and checking for a successful response. This is a simple and effective way to ensure your system's general availability and uptime.

Question 18

If designing a single playbook to run across multiple Linux distributions that have distribution specific commands, what would be the best method to allow a successful run?
A) Enable fact gathering and use the `when' conditional to match the distribution to the task.
B) This is not possible, a separate playbook for each target Linux distribution is required.
C) Use `ignore_errors: true' in the tasks.
D) Use the `shell' module to write your own checks for each command that is ran.

Accepted Answer

Enable fact gathering and use the `when` conditional to match the distribution to the task allows you to conditionally execute tasks based on the specific Linux distribution, ensuring compatibility across different systems.

Question 19

Fill the blanks: __________ helps us track AWS API calls and transitions, _________ helps to understand what resources we have now, and ________ allows auditing credentials and logins.
A) AWS Config, CloudTrail, IAM Credential Reports
B) CloudTrail, IAM Credential Reports, AWS Config
C) CloudTrail, AWS Config, IAM Credential Reports
D) AWS Config, IAM Credential Reports, CloudTrail

Accepted Answer

CloudTrail helps track AWS API calls and transitions, AWS Config helps understand current resources, and IAM Credential Reports allow auditing credentials and logins.

Question 20

You want to pass queue messages that are 1GB each. How should you achieve this?
A) Use Kinesis as a buffer stream for message bodies. Store the checkpoint id for the placement in the Kinesis Stream in SQS.
B) Use the Amazon SQS Extended Client Library for Java and Amazon S3 as a storage mechanism for message bodies.
C) Use SQS's support for message partitioning and multi-part uploads on Amazon S3.
D) Use AWS EFS as a shared pool storage medium. Store filesystem pointers to the files on disk in the SQS message bodies.

Accepted Answer

The Amazon SQS Extended Client Library for Java allows you to send message payloads larger than the SQS limit by storing the payloads in Amazon S3 and sending a reference to the SQS queue.

Exam 12: AWS DevOps Engineer - Professional (DOP-C01)

What method should you use to author automation if you want to wait for a CloudFormation stack to finish completing in a script?

What are the bare minimum requirements for a valid Ansible playbook?

When thinking of AWS Elastic Beanstalk, the 'Swap Environment URLs' feature most directly aids in what?

To monitor API calls against our AWS account by different users and entities, we can use to create a history of calls in bulk for later review, and use ___ for reacting to AWS API calls in real-time.

If Erin has three clusters of server types that are all managed by Ansible and she needs to provision each cluster so that they are configured with their appropriate NTP server addresses. What is the best method Erin should use in Ansible for managing this?

Which one of the following is a restriction of AWS EBS Snapshots?

If you are trying to configure an AWS Elastic Beanstalk worker tier for easy debugging if there are problems finishing queue jobs, what should you configure?

Which status represents a failure state in AWS CloudFormation?

You are creating an application which stores extremely sensitive financial information. All information in the system must be encrypted at rest and in transit. Which of these is a violation of this policy?

For AWS Auto Scaling, what is the first transition state an existing instance enters after leaving steady state in Standby mode?

You are designing a service that aggregates clickstream data in batch and delivers reports to subscribers via email only once per week. Data is extremely spikey, geographically distributed, high-scale, and unpredictable. How should you design this system?

Which of the following is an invalid variable name in Ansible?

You have a high security requirement for your AWS accounts. What is the most rapid and sophisticated setup you can use to react to AWS API calls to your account?

You need to create a simple, holistic check for your system's general availablity and uptime. Your system presents itself as an HTTP-speaking API. What is the most simple tool on AWS to achieve this with?

If designing a single playbook to run across multiple Linux distributions that have distribution specific commands, what would be the best method to allow a successful run?

Fill the blanks: ______ helps us track AWS API calls and transitions, _ helps to understand what resources we have now, and ____ allows auditing credentials and logins.

You want to pass queue messages that are 1GB each. How should you achieve this?