A Development team creates a build project in AWS CodeBuild. The build project invokes automated tests of modules that access AWS services.
Which of the following will enable the tests to run the MOST securely?

• A.Create a service role in IAM to be assumed by CodeBuild with a policy attached to allow the actions on AWS services. Configure the build project to use the role created.
• B.Generate credentials for an IAM user with a policy attached to allow the actions on AWS services. Store credentials as encrypted environment variables for the build project. As part of the build script, obtain the credentials to run the integration tests.
• C.Use AWS managed credentials. Encrypt the credentials with AWS KMS. As part of the build script, decrypt with AWS KMS and use these credentials to run the integration tests.
• D.Have CodeBuild run only the integration tests as a build job on a Jenkins server. Create a role that has a policy attached to allow the actions on AWS services. Generate credentials for an IAM user that is allowed to assume the role. Configure the credentials as secrets in Jenkins, and allow the build job to use them to run the integration tests.

Comment: *

Name: *

Email: *

Verification: *

Your application's Auto Scaling Group scales up too quickly, too much, and stays scaled when traffic
decreases. What should you do to fix this?

• A.Set a longer cooldown period on the Group, so the system stops overshooting the target capacity. The
  issue is that the scaling system doesn't allow enough time for new instances to begin servicing requests
  before measuring aggregate load again.
• B.Calculate the bottleneck or constraint on the compute layer, then select that as the new metric, and set
  the metric thresholds to the bounding values that begin to affect response latency.
• C.Raise the CloudWatch Alarms threshold associated with your autoscaling group, so the scaling takes
  more of an increase in demand before beginning.
• D.Use larger instances instead of lots of smaller ones, so the Group stops scaling out so much and
  wasting resources as the OS level, since the OS uses a higher proportion of resources on smaller
  instances.

Comment: *

Name: *

Email: *

Verification: *

You have a multi-docker environment that you want to deploy to AWS. Which of the following configuration files can be used to deploy a set of Docker containers as an Elastic Beanstalk application?

• A.Dockerrun.awsjson
• B..ebextensions
• C.Dockerrunjson
• D.Dockerfile

Comment: *

Name: *

Email: *

Verification: *

You have deployed an application to AWS which makes use of Autoscaling to launch new instances. You now want to change the instance type for the new instances. Which of the following is one of the action items to achieve this deployment?

• A.Use Elastic Beanstalk to deploy the new application with the new instance type
• B.Use Cloudformation to deploy the new application with the new instance type
• C.Create a new launch configuration with the new instance type
• D.Create new EC2 instances with the new instance type and attach it to the Autoscaling Group

Comment: *

Name: *

Email: *

Verification: *

A company runs a database on a single Amazon EC2 instance in a development environment. The data is stored on separate Amazon EBS volumes that are attached to the EC2 instance. An Amazon Route 53 A record has been created and configured to point to the EC2 instance. The company would like to automate the recovery of the database instance when an instance or Availability Zone (AZ) fails. The company also wants to keep its costs low. The RTO is 4 hours and the RPO is 12 hours.
Which solution should a DevOps Engineer implement to meet these requirements?

• A.Run the database on two separate EC2 instances in different AZs. Configure one of the instances as a master and the other as a standby. Set up replication between the master and standby instances. Point the Route 53 record to the master. Configure an Amazon CloudWatch Events rule to invoke an AWS Lambda function upon the EC2 instance termination. The Lambda function launches a replacement EC2 instance. If the terminated instance was the active node, the function promotes the standby to master and points the Route 53 record to it.
• B.Run the database in an Auto Scaling group with a minimum and maximum instance count of 1 in multiple AZs. Add a lifecycle hook to the Auto Scaling group and define an Amazon CloudWatch Events rule that is triggered when a lifecycle event occurs. Have the CloudWatch Events rule invoke an AWS Lambda function to detach or attach the Amazon EBS data volumes from the EC2 instance based on the event.
  Configure the EC2 instance UserData to mount the data volumes (retry on failure with a short delay), then start the database and update the Route 53 record.
• C.Run the database on two separate EC2 instances in different AZs with one active and the other as a standby. Attach the data volumes to the active instance. Configure an Amazon CloudWatch Events rule to invoke an AWS Lambda function on EC2 instance termination. The Lambda function launches a replacement EC2 instance. If the terminated instance was the active node, then the function attaches the data volumes to the standby node. Start the database and update the Route 53 record.
• D.Run the database in an Auto Scaling group with a minimum and maximum instance count of 1 in multiple AZs. Create an AWS Lambda function that is triggered by a scheduled Amazon CloudWatch Events rule every 4 hours to take a snapshot of the data volume and apply a tag. Have the instance UserData get the latest snapshot, create a new volume from it, and attach and mount the volume. Then start the database and update the Route 53 record.

Comment: *

Name: *

Email: *

Verification: *