A DevOps Engineer just joined a new company that is already running workloads on Amazon EC2 instances. AWS has been adopted incrementally with no central governance. The Engineer must now assess how well the existing deployments comply with the following requirements:
- EC2 instances are running only approved AMIs.
- Amazon EBS volumes are encrypted.
- EC2 instances have an Owner tag.
- Root login over SSH is disabled on EC2 instances.
Which services should the Engineer use to perform this assessment with the LEAST amount of effort? (Select TWO.)

• A.AWS Config
• B.Amazon GuardDuty
• C.AWS System Manager
• D.AWS Directory Service
• E.Amazon Inspector

Comment: *

Name: *

Email: *

Verification: *

You need to deploy an AWS stack in a repeatable manner across multiple environments. You have
selected CloudFormation as the right tool to accomplish this, but have found that there is a resource type
you need to create and model, but is unsupported by CloudFormation. How should you overcome this
challenge?

• A.Use a CloudFormation Custom Resource Template by selecting an API call to proxy for create, update,
  and delete actions. CloudFormation will use the AWS SDK, CLI, or API method of your choosing as the
  state transition function for the resource type you are modeling.
• B.Submit a ticket to the AWS Forums. AWS extends CloudFormation Resource Types by releasing
  tooling to the AWS Labs organization on GitHub. Their response time is usually 1 day, and they complete
  requests within a week or two.
• C.Instead of depending on CloudFormation, use Chef, Puppet, or Ansible to author Heat templates,
  which are declarative stack resource definitions that operate over the OpenStack hypervisor and cloud
  environment.
• D.Create a CloudFormation Custom Resource Type by implementing create, update, and delete
  functionality, either by subscribing a Custom Resource Provider to an SNS topic, or by implementing the
  logic in AWS Lambda.

Comment: *

Name: *

Email: *

Verification: *

You are in charge of designing Cloudformation templates for your company. One of the key requirements is to ensure that if a Cloudformation stack is deleted, a snapshot of the relational database is created which is part of the stack. How can you achieve this in the best possible way?

• A.Create a snapshot of the relational database beforehand so that when the cloudformation stack is deleted, the snapshot of the database will be present.
• B.Use the Update policy of the cloudformation template to ensure a snapshot is created of the relational database.
• C.Use the Deletion policy of the cloudformation template to ensure a snapshot is created of the relational database.
• D.Create a new cloudformation template to create a snapshot of the relational database.

Comment: *

Name: *

Email: *

Verification: *

A user has created a new EBS volume from an existing snapshot. The user mounts the volume on the instance to which it is attached. Which of the below mentioned options is a required step before the user can mount the volume?

• A.Run a cyclic check on the device for data consistency
• B.Create the file system of the volume
• C.Resize the volume as per the original snapshot size
• D.No step is required. The user can directly mount the device

Comment: *

Name: *

Email: *

Verification: *

A company has developed a static website hosted on an Amazon S3 bucket. The website is deployed using AWS CloudFormation. The CloudFormation template defines an S3 bucket and a custom resource that copies content into the bucket from a source location. The company has decided that it needs to move the website to a new location, so the existing CloudFormation stack must be deleted and re-created. However, CloudFormation reports that the stack could not be deleted cleanly.
What is the MOST likely cause and how can the DevOps Engineer mitigate this problem for this and future versions of the website?

• A.Deletion has failed because the custom resource does not define a deletion policy. Add a DeletionPolicy property to the custom resource definition with a value of RemoveOnDeletion.
• B.Deletion has failed because the S3 bucket is not empty. Modify the custom resource's AWS Lambda function code to recursively empty the bucket when RequestType is Delete.
• C.Deletion has failed because the S3 bucket has an active website configuration. Modify the CloudFormation template to remove the Website Configuration properly from the S3 bucket resource.
• D.Deletion has failed because the S3 bucket is not empty. Modify the S3 bucket resource in the CloudFormation template to add a DeletionPolicy property with a value of Empty.

Comment: *

Name: *

Email: *

Verification: *