Which of the following tools does not directly support AWS OpsWorks, for monitoring your stacks?

• A.AWSConfig
• B.Amazon CloudWatch Metrics
• C.AWSCIoudTrail
• D.Amazon CloudWatch Logs

Comment: *

Name: *

Email: *

Verification: *

A company uses a complex system that consists of networking, IAM policies, and multiple three-tier applications. Requirements are still being defined for a new system, so the number of AWS components present in the final design is not known. The DevOps Engineer needs to begin defining AWS resources using AWS CloudFormation to automate and version-control the new infrastructure.
What is the best practice for using CloudFormation to create new environments?

• A.Manually construct the networking layer using Amazon VPC and then define all other resources using CloudFormation.
• B.Create multiple separate templates for each logical part of the system, use cross-stack references in CloudFormation, and maintain several templates in version control.
• C.Create a single template to encompass all resources that are required for the system so there is only one template to version-control.
• D.Create many separate templates for each logical part of the system, and provide the outputs from one to the next using an Amazon EC2 instance running SDK for granular control.

Comment: *

Name: *

Email: *

Verification: *

What does the Docker network docker_gwbridge do?

• A.allows communication between containers on the same host
• B.allows communication between swarm nodes on different hosts
• C.allows communication between swarm nodes on the same host
• D.allows communication between containers on the different hosts

Comment: *

Name: *

Email: *

Verification: *

A DevOps Engineer is working on a project that is hosted on Amazon Linux and has failed a security review.
The DevOps Manager has been asked to review the company buildspec.yaml file for an AWS CodeBuild project and provide recommendations. The buildspec.yaml file is configured as follows:

What changes should be recommended to comply with AWS security best practices? (Choose three.)

• A.Add a post-build command to remove the temporary files from the container before termination to ensure they cannot be seen by other CodeBuild users.
• B.Update the CodeBuild project role with the necessary permissions and then remove the AWS credentials from the environment variable.
• C.Store the DB_PASSWORD as a SecureString value in AWS Systems Manager Parameter Store and then remove the DB_PASSWORD from the environment variables.
• D.Move the environment variables to the 'db-deploy-bucket' Amazon S3 bucket, add a prebuild stage to download, then export the variables.
• E.Use AWS Systems Manager run command versus scp and ssh commands directly to the instance.
• F.Scramble the environment variables using XOR followed by Base64, add a section to install, and then run XOR and Base64 to the build phase.

Comment: *

Name: *

Email: *

Verification: *

After reviewing the last quarter's monthly bills, management has noticed an increase in the overall bill from Amazon. After researching this increase in cost, you discovered that one of your new services is doing a lot of GET Bucket API calls to Amazon S3 to build a metadata cache of all objects in the applications bucket. Your boss has asked you to come up with a new cost-effective way to help reduce the amount of these new GET Bucket API calls. What process should you use to help mitigate the cost?

• A.Update your Amazon S3 buckets' lifecycle policies to automatically push a list of objects to a new bucket, and use this list to view objects associated with the application's bucket.
• B.Create a new DynamoDB table. Use the new DynamoDB table to store all metadata about all objects uploaded to Amazon S3. Any time a new object is uploaded, update the application's internal Amazon S3 object metadata cache from DynamoDB.
  C Using Amazon SNS, create a notification on any new Amazon S3 objects that automatical ly updates a new DynamoDB table to store all metadata about the new object. Subscribe the application to the Amazon SNS topic to update its internal Amazon S3 object metadata cache from the DynamoDB table. ^/
• C.Upload all files to an ElastiCache file cache server. Update your application to now read all file metadata from the ElastiCache file cache server, and configure the ElastiCache policies to push all files to Amazon S3 for long-term storage.

Comment: *

Name: *

Email: *

Verification: *