Your company has recently extended its datacenter into a VPC on AWS. There is a requirement for
on-premise users manage AWS resources from the AWS console. You don't want to create 1AM users for
them again. Which of the below options will fit your needs for authentication?

• A.UseOAuth 2.0 to retrieve temporary AWS security credentials to enable your membersto sign in to the
  AWS Management Console.
• B.Useweb Identity Federation to retrieve AWS temporary security credentials toenable your members to
  sign in to the AWS Management Console.
• C.Useyour on-premises SAML 2 O-compliant identity provider (IDP) to grant themembers federated
  access to the AWS Management Console via the AWS singlesign-on (SSO) endpoint.
• D.Useyour on-premises SAML2.0-compliant identity provider (IDP) to retrieve temporarysecurity
  credentials to enable members to sign in to the AWS ManagementConsole.

Comment: *

Name: *

Email: *

Verification: *

A large enterprise is deploying a web application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The application stores data in an Amazon RDS Oracle DB instance and Amazon DynamoDB.
There are separate environments for development, testing, and production.
What is the MOST secure and flexible way to obtain password credentials during deployment?

• A.Launch the EC2 instances with an EC2 IAM role to access AWS services. Store the database passwords in an encrypted config file with the application artifacts.
• B.Retrieve an access key from an AWS Systems Manager plaintext parameter to access AWS services.
  Retrieve the database credentials from a Systems Manager SecureString parameter.
• C.Retrieve an access key from an AWS Systems Manager SecureString parameter to access AWS services. Retrieve the database credentials from a Systems Manager SecureString parameter.
• D.Launch the EC2 instances with an EC2 IAM role to access AWS services. Retrieve the database credentials from AWS Secrets Manager.

Comment: *

Name: *

Email: *

Verification: *

You need to create a Route53 record automatically in CloudFormation when not running in production during
all launches of a Template. How should you implement this?

• A.Use a Parameter for environment, and add a Condition on the Route53 Resource in the template to
  create the record only when environment is not production.
• B.Create two templates, one with the Route53 record value and one with a null value for the record. Use
  the one without it when deploying to production.
• C.Use a Parameterfor environment, and add a Condition on the Route53 Resource in the template to create
  the record with a null string when environment is production.
• D.Create two templates, one with the Route53 record and one without it. Use the one without it when
  deploying to production.

Comment: *

Name: *

Email: *

Verification: *

A DevOps Engineer is building a multi-stage pipeline with AWS CodePipeline to build, verify, stage, test, and deploy an application. There is a manual approval stage required between the test and deploy stages. The development team uses a team chat tool with webhook support. How can the Engineer configure status updates for pipeline activity and approval requests to post to the chat tool?

• A.Create an AWS CloudWatch Events rule that filters on "CodePipeline Pipeline Execution State Change." Forward that to an Amazon SNS topic. Subscribe an AWS Lambda function to the Amazon SNS topic and have it forward the event to the chat webhook URL.
• B.Create an AWS CloudWatch Logs subscription that filters on "detail-type": "CodePipeline Pipeline Execution State Change." Forward that to an Amazon SNS topic. Add the chat webhook URL to the SNS topic as a subscriber and complete the subscription validation.
• C.Create an AWS Lambda function that is triggered by the updating of AWS CloudTrail events.
  When a "CodePipeline Pipeline Execution State Change" event is detected in the updated events, send the event details to the chat webhook URL.
• D.Modify the pipeline code to send event details to the chat webhook URL at the end of each stage.
  Parametrize the URL so each pipeline can send to a different URL based on the pipeline environment.

Comment: *

Name: *

Email: *

Verification: *

Which of the following Cache Engines does Opswork have built in support for?

• A.Redis
• B.Memcache
• C.Both Redis and Memcache
• D.There is no built in support as of yet for any cache engine

Comment: *

Name: *

Email: *

Verification: *