{"id":56792,"date":"2023-05-08T08:04:31","date_gmt":"2023-05-08T08:04:31","guid":{"rendered":"https:\/\/www.dumpsbase.com\/freedumps\/?p=56792"},"modified":"2023-05-08T08:04:37","modified_gmt":"2023-05-08T08:04:37","slug":"prepare-for-the-amazon-dop-c02-exam-with-great-dumps-online","status":"publish","type":"post","link":"https:\/\/www.dumpsbase.com\/freedumps\/prepare-for-the-amazon-dop-c02-exam-with-great-dumps-online.html","title":{"rendered":"Prepare For the Amazon DOP-C02 Exam with Great Dumps Online"},"content":{"rendered":"\n<p>The AWS Certified DevOps Engineer &#8211; Professional certification validates your skills in provisioning, operating, and managing distributed application systems on the AWS platform. It also enhances your confidence and credibility with peers, stakeholders, and customers. To earn this certification, you need to take the DOP-C02 exam, which covers various topics related to DevOps practices on AWS. You can prepare for your DOP-C02 exam with our dumps, which include 75 practice exam questions and answers in pdf and software formats. By practicing these questions and answers, you can master each topic and pass the DOP-C02 exam with ease.<\/p>\n<h2>Check DOP-C02 Free Dumps Demo Questions<\/h2>\n<script>\n\t  window.fbAsyncInit = function() {\n\t    FB.init({\n\t      appId            : '622169541470367',\n\t      autoLogAppEvents : true,\n\t      xfbml            : true,\n\t      version          : 'v3.1'\n\t    });\n\t  };\n\t\n\t  (function(d, s, id){\n\t     var js, fjs = d.getElementsByTagName(s)[0];\n\t     if (d.getElementById(id)) {return;}\n\t     js = d.createElement(s); js.id = id;\n\t     js.src = \"https:\/\/connect.facebook.net\/en_US\/sdk.js\";\n\t     fjs.parentNode.insertBefore(js, fjs);\n\t   }(document, 'script', 'facebook-jssdk'));\n\t<\/script><script type=\"text\/javascript\" >\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \nif(!window.jQuery) alert(\"The important jQuery library is not properly loaded in your site. Your WordPress theme is probably missing the essential wp_head() call. You can switch to another theme and you will see that the plugin works fine and this notice disappears. If you are still not sure what to do you can contact us for help.\");\n});\n<\/script>  \n  \n<div  id=\"watupro_quiz\" class=\"quiz-area single-page-quiz\">\n<p id=\"submittingExam7183\" style=\"display:none;text-align:center;\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\"><\/p>\n\n<div class=\"watupro-exam-description\" id=\"description-quiz-7183\"><\/div>\n\n<form action=\"\" method=\"post\" class=\"quiz-form\" id=\"quiz-7183\"  enctype=\"multipart\/form-data\" >\n<div class='watu-question ' id='question-1' style=';'><div id='questionWrap-1'  class='   watupro-question-id-262050'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>1. <\/span>A company uses AWS Organizations to manage multiple accounts. Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant. A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present. <br \/>\r<br>Which solution will accomplish this?<\/div><input type='hidden' name='question_id[]' id='qID_1' value='262050' \/><input type='hidden' id='answerType262050' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262050[]' id='answer-id-1033273' class='answer   answerof-262050 ' value='1033273'   \/><label for='answer-id-1033273' id='answer-label-1033273' class=' answer'><span>Create an AWS CloudFormation template that defines an AWS Inspector rule to check whether EBS encryption is enabled. Save the template to an Amazon S3 bucket that has been shared with all accounts within the company. Update the account creation script pointing to the CloudFormation template in Amazon S3.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262050[]' id='answer-id-1033274' class='answer   answerof-262050 ' value='1033274'   \/><label for='answer-id-1033274' id='answer-label-1033274' class=' answer'><span>Create an AWS Config organizational rule to check whether EBS encryption is enabled and deploy the rule using the AWS CL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262050[]' id='answer-id-1033275' class='answer   answerof-262050 ' value='1033275'   \/><label for='answer-id-1033275' id='answer-label-1033275' class=' answer'><span>Create and apply an SCP to prohibit stopping and deleting AWS Config across the organization.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262050[]' id='answer-id-1033276' class='answer   answerof-262050 ' value='1033276'   \/><label for='answer-id-1033276' id='answer-label-1033276' class=' answer'><span>Create an SCP in Organizations. Set the policy to prevent the launch of Amazon EC2 instances without encryption on the EBS volumes using a conditional expression. Apply the SCP to all AWS accounts. Use Amazon Athena to analyze the AWS CloudTrail output, looking for events that deny an ec2: RunInstances action.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262050[]' id='answer-id-1033277' class='answer   answerof-262050 ' value='1033277'   \/><label for='answer-id-1033277' id='answer-label-1033277' class=' answer'><span>Deploy an IAM role to all accounts from a single trusted account. Build a pipeline with AWS CodePipeline with a stage in AWS Lambda to assume the IAM role, and list all EBS volumes in the account. Publish a report to Amazon S3.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-2' style=';'><div id='questionWrap-2'  class='   watupro-question-id-262051'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>2. <\/span>A company has chosen AWS to host a new application. The company needs to implement a multi-account strategy. A DevOps engineer creates a new AWS account and an organization in AWS Organizations. The DevOps engineer also creates the OU structure for the organization and sets up a landing zone by using AWS Control Tower. <br \/>\r<br>The DevOps engineer must implement a solution that automatically deploys resources for new accounts that users create through AWS Control Tower Account Factory. When a user creates a new account, the solution must apply AWS CloudFormation templates and SCPs that are customized for the OU or the account to automatically deploy all the resources that are attached to the account. All the OUs are enrolled in AWS Control Tower. <br \/>\r<br>Which solution will meet these requirements in the MOST automated way?<\/div><input type='hidden' name='question_id[]' id='qID_2' value='262051' \/><input type='hidden' id='answerType262051' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262051[]' id='answer-id-1033278' class='answer   answerof-262051 ' value='1033278'   \/><label for='answer-id-1033278' id='answer-label-1033278' class=' answer'><span>Use AWS Service Catalog with AWS Control Tower. Create portfolios and products in AWS Service Catalog. Grant granular permissions to provision these resources. Deploy SCPs by using the AWS CLI and JSON documents.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262051[]' id='answer-id-1033279' class='answer   answerof-262051 ' value='1033279'   \/><label for='answer-id-1033279' id='answer-label-1033279' class=' answer'><span>Deploy CloudFormation stack sets by using the required templates. Enable automatic deployment. Deploy stack instances to the required accounts. Deploy a CloudFormation stack set to the organization\u2019s management account to deploy SCPs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262051[]' id='answer-id-1033280' class='answer   answerof-262051 ' value='1033280'   \/><label for='answer-id-1033280' id='answer-label-1033280' class=' answer'><span>Create an Amazon EventBridge rule to detect the CreateManagedAccount event. \r\nConfigure AWS Service Catalog as the target to deploy resources to any new accounts. \r\nDeploy SCPs by using the AWS CLI and JSON documents.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262051[]' id='answer-id-1033281' class='answer   answerof-262051 ' value='1033281'   \/><label for='answer-id-1033281' id='answer-label-1033281' class=' answer'><span>Deploy the Customizations for AWS Control Tower (CfCT) solution. Use an AWS CodeCommit repository as the source. In the repository, create a custom package that includes the CloudFormation templates and the SCP JSON documents.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-3' style=';'><div id='questionWrap-3'  class='   watupro-question-id-262052'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>3. <\/span>A space exploration company receives telemetry data from multiple satellites. Small packets of data are received through Amazon API Gateway and are placed directly into an Amazon Simple Queue Service (Amazon SQS) standard queue. A custom application is subscribed to the queue and transforms the data into a standard format. <br \/>\r<br>Because of inconsistencies in the data that the satellites produce, the application is occasionally unable to transform the data. In these cases, the messages remain in theSQS queue. A DevOps engineer must develop a solution that retains the failed messages and makes them available to scientists for review and future processing. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_3' value='262052' \/><input type='hidden' id='answerType262052' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262052[]' id='answer-id-1033282' class='answer   answerof-262052 ' value='1033282'   \/><label for='answer-id-1033282' id='answer-label-1033282' class=' answer'><span>Configure AWS Lambda to poll the SQS queue and invoke a Lambda function to check whether the queue messages are valid. If validation fails, send a copy of the data that is not valid to an Amazon S3 bucket so that the scientists can review and correct the data. When the data is corrected, amend the message in the SQS queue by using a replay Lambda function with the corrected data.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262052[]' id='answer-id-1033283' class='answer   answerof-262052 ' value='1033283'   \/><label for='answer-id-1033283' id='answer-label-1033283' class=' answer'><span>Convert the SQS standard queue to an SQS FIFO queue. Configure AWS Lambda to poll the SQS queue every 10 minutes by using an Amazon EventBridge schedule. Invoke the Lambda function to identify any messages with a SentTimestamp value that is older than 5 minutes, push the data to the same location as the application's output location, and remove the messages from the queue.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262052[]' id='answer-id-1033284' class='answer   answerof-262052 ' value='1033284'   \/><label for='answer-id-1033284' id='answer-label-1033284' class=' answer'><span>Create an SQS dead-letter queue. Modify the existing queue by including a redrive policy that sets the Maximum Receives setting to 1 and sets the dead-letter queue ARN to the ARN of the newly created queue. Instruct the scientists to use the dead-letter queue to review the data that is not valid. Reprocess this data at a later time.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262052[]' id='answer-id-1033285' class='answer   answerof-262052 ' value='1033285'   \/><label for='answer-id-1033285' id='answer-label-1033285' class=' answer'><span>Configure API Gateway to send messages to different SQS virtual queues that are named for each of the satellites. Update the application to use a new virtual queue for any data that it cannot transform, and send the message to the new virtual queue. Instruct the scientists to use the virtual queue to review the data that is not valid. Reprocess this data at a later time.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-4' style=';'><div id='questionWrap-4'  class='   watupro-question-id-262053'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>4. <\/span>A company has multiple member accounts that are part of an organization in AWS Organizations. The security team needs to review every Amazon EC2 security group and their inbound and outbound rules. The security team wants to programmatically retrieve this information from the member accounts using an AWS Lambda function in the management account of the organization. <br \/>\r<br>Which combination of access changes will meet these requirements? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_4' value='262053' \/><input type='hidden' id='answerType262053' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262053[]' id='answer-id-1033286' class='answer   answerof-262053 ' value='1033286'   \/><label for='answer-id-1033286' id='answer-label-1033286' class=' answer'><span>Create a trust relationship that allows users in the member accounts to assume the management account IAM role.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262053[]' id='answer-id-1033287' class='answer   answerof-262053 ' value='1033287'   \/><label for='answer-id-1033287' id='answer-label-1033287' class=' answer'><span>Create a trust relationship that allows users in the management account to assume the IAM roles of the member accounts.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262053[]' id='answer-id-1033288' class='answer   answerof-262053 ' value='1033288'   \/><label for='answer-id-1033288' id='answer-label-1033288' class=' answer'><span>Create an IAM role in each member account that has access to the AmazonEC2ReadOnlyAccess managed policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262053[]' id='answer-id-1033289' class='answer   answerof-262053 ' value='1033289'   \/><label for='answer-id-1033289' id='answer-label-1033289' class=' answer'><span>Create an I AM role in each member account to allow the sts:AssumeRole action against the management account IAM role's AR<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262053[]' id='answer-id-1033290' class='answer   answerof-262053 ' value='1033290'   \/><label for='answer-id-1033290' id='answer-label-1033290' class=' answer'><span>Create an I AM role in the management account that allows the sts:AssumeRole action against the member account IAM role's AR<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262053[]' id='answer-id-1033291' class='answer   answerof-262053 ' value='1033291'   \/><label for='answer-id-1033291' id='answer-label-1033291' class=' answer'><span>Create an IAM role in the management account that has access to the AmazonEC2ReadOnlyAccess managed policy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-5' style=';'><div id='questionWrap-5'  class='   watupro-question-id-262054'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>5. <\/span>A company uses AWS Key Management Service (AWS KMS) keys and manual key rotation to meet regulatory compliance requirements. The security team wants to be notified when any keys have not been rotated after 90 days. <br \/>\r<br>Which solution will accomplish this?<\/div><input type='hidden' name='question_id[]' id='qID_5' value='262054' \/><input type='hidden' id='answerType262054' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262054[]' id='answer-id-1033292' class='answer   answerof-262054 ' value='1033292'   \/><label for='answer-id-1033292' id='answer-label-1033292' class=' answer'><span>Configure AWS KMS to publish to an Amazon Simple Notification Service (Amazon SNS) topic when keys are more than 90 days old.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262054[]' id='answer-id-1033293' class='answer   answerof-262054 ' value='1033293'   \/><label for='answer-id-1033293' id='answer-label-1033293' class=' answer'><span>Configure an Amazon EventBridge event to launch an AWS Lambda function to call the AWS Trusted Advisor API and publish to an Amazon Simple Notification Service (Amazon SNS) topic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262054[]' id='answer-id-1033294' class='answer   answerof-262054 ' value='1033294'   \/><label for='answer-id-1033294' id='answer-label-1033294' class=' answer'><span>Develop an AWS Config custom rule that publishes to an Amazon Simple Notification Service (Amazon SNS) topic when keys are more than 90 days old.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262054[]' id='answer-id-1033295' class='answer   answerof-262054 ' value='1033295'   \/><label for='answer-id-1033295' id='answer-label-1033295' class=' answer'><span>Configure AWS Security Hub to publish to an Amazon Simple Notification Service (Amazon SNS) topic when keys are more than 90 days old.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-6' style=';'><div id='questionWrap-6'  class='   watupro-question-id-262055'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>6. <\/span>A video-sharing company stores its videos in Amazon S3. The company has observed a sudden increase in video access requests, but the company does not know which videos are most popular. The company needs to identify the general access pattern for the video files. This pattern includes the number of users who access a certain file on a given day, as well as the number of pull requests for certain files. <br \/>\r<br>How can the company meet these requirements with the LEAST amount of effort?<\/div><input type='hidden' name='question_id[]' id='qID_6' value='262055' \/><input type='hidden' id='answerType262055' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262055[]' id='answer-id-1033296' class='answer   answerof-262055 ' value='1033296'   \/><label for='answer-id-1033296' id='answer-label-1033296' class=' answer'><span>Activate S3 server access logging. Import the access logs into an Amazon Aurora database. Use an Aurora SQL query to analyze the access patterns.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262055[]' id='answer-id-1033297' class='answer   answerof-262055 ' value='1033297'   \/><label for='answer-id-1033297' id='answer-label-1033297' class=' answer'><span>Activate S3 server access logging. Use Amazon Athena to create an external table with the log files. Use Athena to create a SQL query to analyze the access patterns.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262055[]' id='answer-id-1033298' class='answer   answerof-262055 ' value='1033298'   \/><label for='answer-id-1033298' id='answer-label-1033298' class=' answer'><span>Invoke an AWS Lambda function for every S3 object access event. Configure the Lambda function to write the file access information, such as user. S3 bucket, and file key, to an Amazon Aurora database. Use an Aurora SQL query to analyze the access patterns.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262055[]' id='answer-id-1033299' class='answer   answerof-262055 ' value='1033299'   \/><label for='answer-id-1033299' id='answer-label-1033299' class=' answer'><span>Record an Amazon CloudWatch Logs log message for every S3 object access event. Configure a CloudWatch Logs log stream to write the file access information, such as user, S3 bucket, and file key, to an Amazon Kinesis Data Analytics for SQL application. Perform a sliding window analysis.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-7' style=';'><div id='questionWrap-7'  class='   watupro-question-id-262056'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>7. <\/span>A company has deployed an application in a production VPC in a single AWS account. The application is popular and is experiencing heavy usage. The company\u2019s security team wants to add additional security, such as AWS WAF, to the application deployment. However, the application's product manager is concerned about cost and does not want to approve the change unless the security team can prove that additional security is necessary. <br \/>\r<br>The security team believes that some of the application's demand might come from users that have IP addresses that are on a deny list. The security team provides the deny list to a <br \/>\r<br>DevOps engineer. If any of the IP addresses on the deny list access the application, the security team wants to receive automated notification in near real time so that the security team can document that the application needs additional security. The DevOps engineer creates a VPC flow log for the production VPC. <br \/>\r<br>Which set of additional steps should the DevOps engineer take to meet these requirements MOST cost-effectively?<\/div><input type='hidden' name='question_id[]' id='qID_7' value='262056' \/><input type='hidden' id='answerType262056' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262056[]' id='answer-id-1033300' class='answer   answerof-262056 ' value='1033300'   \/><label for='answer-id-1033300' id='answer-label-1033300' class=' answer'><span>Create a log group in Amazon CloudWatch Logs. Configure the VPC flow log to capture accepted traffic and to send the data to the log group. Create an Amazon CloudWatch metric filter for IP addresses on the deny list. Create a CloudWatch alarmwith the metric filter as input. Set the period to 5 minutes and the datapoints to alarm to 1. Use an Amazon Simple Notification Service (Amazon SNS) topic to send alarm notices to the security team.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262056[]' id='answer-id-1033301' class='answer   answerof-262056 ' value='1033301'   \/><label for='answer-id-1033301' id='answer-label-1033301' class=' answer'><span>Create an Amazon S3 bucket for log files. Configure the VPC flow log to capture all traffic and to send the data to the S3 bucket. Configure Amazon Athena to return all log files in the S3 bucket for IP addresses on the deny list. Configure Amazon QuickSight to accept data from Athena and to publish the data as a dashboard that the security team can access. Create a threshold alert of 1 for successful access. Configure the alert to automatically notify the security team as frequently as possible when the alert threshold is met.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262056[]' id='answer-id-1033302' class='answer   answerof-262056 ' value='1033302'   \/><label for='answer-id-1033302' id='answer-label-1033302' class=' answer'><span>Create an Amazon S3 bucket for log files. Configure the VPC flow log to capture accepted traffic and to send the data to the S3 bucket. Configure an Amazon OpenSearch Service cluster and domain for the log files. Create an AWS Lambda function to retrieve the logs from the S3 bucket, format the logs, and load the logs into the OpenSearch Service cluster. Schedule the Lambda function to run every 5 minutes. Configure an alert and condition in OpenSearch Service to send alerts to the security team through an Amazon Simple Notification Service (Amazon SNS) topic when access from the IP addresses on the deny list is detected.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262056[]' id='answer-id-1033303' class='answer   answerof-262056 ' value='1033303'   \/><label for='answer-id-1033303' id='answer-label-1033303' class=' answer'><span>Create a log group in Amazon CloudWatch Logs. Create an Amazon S3 bucket to hold query results. Configure the VPC flow log to capture all traffic and to send the data to the log group. Deploy an Amazon Athena CloudWatch connector in AWS Lambda. Connect the connector to the log group. Configure Athena to periodically query for all accepted traffic from the IP addresses on the deny list and to store the results in the S3 bucket. Configure an S3 event notification to automatically notify the security team through an Amazon Simple Notification Service (Amazon SNS) topic when new objects are added to the S3 bucket.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-8' style=';'><div id='questionWrap-8'  class='   watupro-question-id-262057'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>8. <\/span>An online retail company based in the United States plans to expand its operations to Europe and Asia in the next six months. Its product currently runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. All data is stored in an Amazon Aurora database instance. <br \/>\r<br>When the product is deployed in multiple regions, the company wants a single product catalog across all regions, but for compliance purposes, its customer information and purchases must be kept in each region. <br \/>\r<br>How should the company meet these requirements with the LEAST amount of application changes?<\/div><input type='hidden' name='question_id[]' id='qID_8' value='262057' \/><input type='hidden' id='answerType262057' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262057[]' id='answer-id-1033304' class='answer   answerof-262057 ' value='1033304'   \/><label for='answer-id-1033304' id='answer-label-1033304' class=' answer'><span>Use Amazon Redshift for the product catalog and Amazon DynamoDB tables for the customer information and purchases.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262057[]' id='answer-id-1033305' class='answer   answerof-262057 ' value='1033305'   \/><label for='answer-id-1033305' id='answer-label-1033305' class=' answer'><span>Use Amazon DynamoDB global tables for the product catalog and regional tables for the customer information and purchases.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262057[]' id='answer-id-1033306' class='answer   answerof-262057 ' value='1033306'   \/><label for='answer-id-1033306' id='answer-label-1033306' class=' answer'><span>Use Aurora with read replicas for the product catalog and additional local Aurora instances in each region for the customer information and purchases.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262057[]' id='answer-id-1033307' class='answer   answerof-262057 ' value='1033307'   \/><label for='answer-id-1033307' id='answer-label-1033307' class=' answer'><span>Use Aurora for the product catalog and Amazon DynamoDB global tables for the customer information and purchases.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-9' style=';'><div id='questionWrap-9'  class='   watupro-question-id-262058'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>9. <\/span>A company's application is currently deployed to a single AWS Region. Recently, the company opened a new office on a different continent. The users in the new office are experiencing high latency. The company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) and uses Amazon DynamoDB as the database layer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones. A DevOps engineer is tasked with minimizing application response times and improving availability for users in both Regions. <br \/>\r<br>Which combination of actions should be taken to address the latency issues? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_9' value='262058' \/><input type='hidden' id='answerType262058' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262058[]' id='answer-id-1033308' class='answer   answerof-262058 ' value='1033308'   \/><label for='answer-id-1033308' id='answer-label-1033308' class=' answer'><span>Create a new DynamoDB table in the new Region with cross-Region replication enabled.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262058[]' id='answer-id-1033309' class='answer   answerof-262058 ' value='1033309'   \/><label for='answer-id-1033309' id='answer-label-1033309' class=' answer'><span>Create new ALB and Auto Scaling group global resources and configure the new ALB to direct traffic to the new Auto Scaling group.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262058[]' id='answer-id-1033310' class='answer   answerof-262058 ' value='1033310'   \/><label for='answer-id-1033310' id='answer-label-1033310' class=' answer'><span>Create new ALB and Auto Scaling group resources in the new Region and configure the new ALB to direct traffic to the new Auto Scaling group.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262058[]' id='answer-id-1033311' class='answer   answerof-262058 ' value='1033311'   \/><label for='answer-id-1033311' id='answer-label-1033311' class=' answer'><span>Create Amazon Route 53 records, health checks, and latency-based routing policies to route to the AL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262058[]' id='answer-id-1033312' class='answer   answerof-262058 ' value='1033312'   \/><label for='answer-id-1033312' id='answer-label-1033312' class=' answer'><span>Create Amazon Route 53 aliases, health checks, and failover routing policies to route to the AL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262058[]' id='answer-id-1033313' class='answer   answerof-262058 ' value='1033313'   \/><label for='answer-id-1033313' id='answer-label-1033313' class=' answer'><span>Convert the DynamoDB table to a global table.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-10' style=';'><div id='questionWrap-10'  class='   watupro-question-id-262059'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>10. <\/span>A company wants to use AWS CloudFormation for infrastructure deployment. The company has strict tagging and resource requirements and wants to limit the deployment to two Regions. Developers will need to deploy multiple versions of the same application. <br \/>\r<br>Which solution ensures resources are deployed in accordance with company policy?<\/div><input type='hidden' name='question_id[]' id='qID_10' value='262059' \/><input type='hidden' id='answerType262059' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262059[]' id='answer-id-1033314' class='answer   answerof-262059 ' value='1033314'   \/><label for='answer-id-1033314' id='answer-label-1033314' class=' answer'><span>Create AWS Trusted Advisor checks to find and remediate unapproved CloudFormation StackSets.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262059[]' id='answer-id-1033315' class='answer   answerof-262059 ' value='1033315'   \/><label for='answer-id-1033315' id='answer-label-1033315' class=' answer'><span>Create a Cloud Formation drift detection operation to find and remediate unapproved CloudFormation StackSets.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262059[]' id='answer-id-1033316' class='answer   answerof-262059 ' value='1033316'   \/><label for='answer-id-1033316' id='answer-label-1033316' class=' answer'><span>Create CloudFormation StackSets with approved CloudFormation templates.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262059[]' id='answer-id-1033317' class='answer   answerof-262059 ' value='1033317'   \/><label for='answer-id-1033317' id='answer-label-1033317' class=' answer'><span>Create AWS Service Catalog products with approved CloudFormation templates.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-11' style=';'><div id='questionWrap-11'  class='   watupro-question-id-262060'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>11. <\/span>A company wants to migrate its content sharing web application hosted on Amazon EC2 to a serverless architecture. The company currently deploys changes to its application by creating a new Auto Scaling group of EC2 instances and a new Elastic Load Balancer, and then shifting the traffic away using an Amazon Route 53 weighted routing policy. <br \/>\r<br>For its new serverless application, the company is planning to use Amazon API Gateway and AWS Lambda. The company will need to update its deployment processes to work with the new application. It will also need to retain the ability to test new features on a small number of users before rolling the features out to the entire user base. <br \/>\r<br>Which deployment strategy will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_11' value='262060' \/><input type='hidden' id='answerType262060' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262060[]' id='answer-id-1033318' class='answer   answerof-262060 ' value='1033318'   \/><label for='answer-id-1033318' id='answer-label-1033318' class=' answer'><span>Use AWS CDK to deploy API Gateway and Lambda functions. When code needs to be changed, update the AWS CloudFormation stack and deploy the new version of the APIs and Lambda functions. Use a Route 53 failover routing policy for the canary release strategy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262060[]' id='answer-id-1033319' class='answer   answerof-262060 ' value='1033319'   \/><label for='answer-id-1033319' id='answer-label-1033319' class=' answer'><span>Use AWS CloudFormation to deploy API Gateway and Lambda functions using Lambda function versions. When code needs to be changed, update the CloudFormation stack with the new Lambda code and update the API versions using a canary release strategy. Promote the new version when testing is complete.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262060[]' id='answer-id-1033320' class='answer   answerof-262060 ' value='1033320'   \/><label for='answer-id-1033320' id='answer-label-1033320' class=' answer'><span>Use AWS Elastic Beanstalk to deploy API Gateway and Lambda functions. When code needs to be changed, deploy a new version of the API and Lambda functions. Shift traffic gradually using an Elastic Beanstalk blue\/green deployment.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262060[]' id='answer-id-1033321' class='answer   answerof-262060 ' value='1033321'   \/><label for='answer-id-1033321' id='answer-label-1033321' class=' answer'><span>Use AWS OpsWorks to deploy API Gateway in the service layer and Lambda functions in a custom layer. When code needs to be changed, use OpsWorks to perform a blue\/green deployment and shift traffic gradually.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-12' style=';'><div id='questionWrap-12'  class='   watupro-question-id-262061'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>12. <\/span>A company runs an application on Amazon EC2 instances. The company uses a series of AWS CloudFormation stacks to define the application resources. A developer performs updates by building and testing the application on a laptop and then uploading the build output and CloudFormation stack templates to Amazon S3. The developer's peers review the changes before the developer performs the CloudFormation stack update and installs a new version of the application onto the EC2 instances. <br \/>\r<br>The deployment process is prone to errors and is time-consuming when the developer updates each EC2 instance with the new application. The company wants to automate as much of the application deployment process as possible while retaining a final manual approval step before the modification of the application or resources. <br \/>\r<br>The company already has moved the source code for the application and the CloudFormation templates to AWS CodeCommit. The company also has created an AWS CodeBuild project to build and test the application. <br \/>\r<br>Which combination of steps will meet the company\u2019s requirements? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_12' value='262061' \/><input type='hidden' id='answerType262061' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262061[]' id='answer-id-1033322' class='answer   answerof-262061 ' value='1033322'   \/><label for='answer-id-1033322' id='answer-label-1033322' class=' answer'><span>Create an application group and a deployment group in AWS CodeDeploy. Install the CodeDeploy agent on the EC2 instances.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262061[]' id='answer-id-1033323' class='answer   answerof-262061 ' value='1033323'   \/><label for='answer-id-1033323' id='answer-label-1033323' class=' answer'><span>Create an application revision and a deployment group in AWS CodeDeploy. Create an environment in CodeDeploy. Register the EC2 instances to the CodeDeploy environment.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262061[]' id='answer-id-1033324' class='answer   answerof-262061 ' value='1033324'   \/><label for='answer-id-1033324' id='answer-label-1033324' class=' answer'><span>Use AWS CodePipeline to invoke the CodeBuild job, run the CloudFormation update, and pause for a manual approval step. After approval, start the AWS CodeDeploy deployment.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262061[]' id='answer-id-1033325' class='answer   answerof-262061 ' value='1033325'   \/><label for='answer-id-1033325' id='answer-label-1033325' class=' answer'><span>Use AWS CodePipeline to invoke the CodeBuild job, create CloudFormation change sets for each of the application stacks, and pause for a manual approval step. After approval, run the CloudFormation change sets and start the AWS CodeDeploy deployment.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262061[]' id='answer-id-1033326' class='answer   answerof-262061 ' value='1033326'   \/><label for='answer-id-1033326' id='answer-label-1033326' class=' answer'><span>Use AWS CodePipeline to invoke the CodeBuild job, create CloudFormation change sets for each of the application stacks, and pause for a manual approval step. After approval, start the AWS CodeDeploy deployment.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-13' style=';'><div id='questionWrap-13'  class='   watupro-question-id-262062'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>13. <\/span>A company is implementing an Amazon Elastic Container Service (Amazon ECS) cluster to run its workload. The company architecture will run multiple ECS services on the cluster. The architecture includes an Application Load Balancer on the front end and uses multiple target groups to route traffic. <br \/>\r<br>A DevOps engineer must collect application and access logs. The DevOps engineer then needs to send the logs to an Amazon S3 bucket for near-real-time analysis. <br \/>\r<br>Which combination of steps must the DevOps engineer take to meet these requirements? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_13' value='262062' \/><input type='hidden' id='answerType262062' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262062[]' id='answer-id-1033327' class='answer   answerof-262062 ' value='1033327'   \/><label for='answer-id-1033327' id='answer-label-1033327' class=' answer'><span>Download the Amazon CloudWatch Logs container instance from AW<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262062[]' id='answer-id-1033328' class='answer   answerof-262062 ' value='1033328'   \/><label for='answer-id-1033328' id='answer-label-1033328' class=' answer'><span>Configure this instance as a task. Update the application service definitions to include the logging task.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262062[]' id='answer-id-1033329' class='answer   answerof-262062 ' value='1033329'   \/><label for='answer-id-1033329' id='answer-label-1033329' class=' answer'><span>Install the Amazon CloudWatch Logs agent on the ECS instances. Change the logging driver in the ECS task definition to awslogs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262062[]' id='answer-id-1033330' class='answer   answerof-262062 ' value='1033330'   \/><label for='answer-id-1033330' id='answer-label-1033330' class=' answer'><span>Use Amazon EventBridge to schedule an AWS Lambda function that will run every 60 seconds and will run the Amazon CloudWatch Logs create-export-task command. Then point the output to the logging S3 bucket.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262062[]' id='answer-id-1033331' class='answer   answerof-262062 ' value='1033331'   \/><label for='answer-id-1033331' id='answer-label-1033331' class=' answer'><span>Activate access logging on the AL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262062[]' id='answer-id-1033332' class='answer   answerof-262062 ' value='1033332'   \/><label for='answer-id-1033332' id='answer-label-1033332' class=' answer'><span>Then point the ALB directly to the logging S3 bucket.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262062[]' id='answer-id-1033333' class='answer   answerof-262062 ' value='1033333'   \/><label for='answer-id-1033333' id='answer-label-1033333' class=' answer'><span>Activate access logging on the target groups that the ECS services use. Then send the logs directly to the logging S3 bucket.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262062[]' id='answer-id-1033334' class='answer   answerof-262062 ' value='1033334'   \/><label for='answer-id-1033334' id='answer-label-1033334' class=' answer'><span>Create an Amazon Kinesis Data Firehose delivery stream that has a destination of the logging S3 bucket. Then create an Amazon CloudWatch Logs subscription filter for Kinesis Data Firehose.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-14' style=';'><div id='questionWrap-14'  class='   watupro-question-id-262063'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>14. <\/span>A company has an on-premises application that is written in Go. A DevOps engineer must move the application to AWS. The company's development team wants to enable blue\/green deployments and perform A\/B testing. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_14' value='262063' \/><input type='hidden' id='answerType262063' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262063[]' id='answer-id-1033335' class='answer   answerof-262063 ' value='1033335'   \/><label for='answer-id-1033335' id='answer-label-1033335' class=' answer'><span>Deploy the application on an Amazon EC2 instance, and create an AMI of the instance. Use the AMI to create an automatic scaling launch configuration that is used in an Auto \r\nScaling group. Use Elastic Load Balancing to distribute traffic. When changes are made to the application, a new AMI will be created, which will initiate an EC2 instance refresh.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262063[]' id='answer-id-1033336' class='answer   answerof-262063 ' value='1033336'   \/><label for='answer-id-1033336' id='answer-label-1033336' class=' answer'><span>Use Amazon Lightsail to deploy the application. Store the application in a zipped format in an Amazon S3 bucket. Use this zipped version to deploy new versions of the application to Lightsail. Use Lightsail deployment options to manage the deployment.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262063[]' id='answer-id-1033337' class='answer   answerof-262063 ' value='1033337'   \/><label for='answer-id-1033337' id='answer-label-1033337' class=' answer'><span>Use AWS CodeArtifact to store the application code. Use AWS CodeDeploy to deploy the application to a fleet of Amazon EC2 instances. Use Elastic Load Balancing to distribute the traffic to the EC2 instances. When making changes to the application, upload a new version to CodeArtifact and create a new CodeDeploy deployment.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262063[]' id='answer-id-1033338' class='answer   answerof-262063 ' value='1033338'   \/><label for='answer-id-1033338' id='answer-label-1033338' class=' answer'><span>Use AWS Elastic Beanstalk to host the application. Store a zipped version of the application in Amazon S3. Use that location to deploy new versions of the application. Use Elastic Beanstalk to manage the deployment options.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-15' style=';'><div id='questionWrap-15'  class='   watupro-question-id-262064'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>15. <\/span>A company runs an application on one Amazon EC2 instance. Application metadata is stored in Amazon S3 and must be retrieved if the instance is restarted. The instance must restart or relaunch automatically if the instance becomes unresponsive. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_15' value='262064' \/><input type='hidden' id='answerType262064' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262064[]' id='answer-id-1033339' class='answer   answerof-262064 ' value='1033339'   \/><label for='answer-id-1033339' id='answer-label-1033339' class=' answer'><span>Create an Amazon CloudWatch alarm for the StatusCheckFailed metric. Use the recover action to stop and start the instance. Use an S3 event notification to push the metadata to the instance when the instance is back up and running.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262064[]' id='answer-id-1033340' class='answer   answerof-262064 ' value='1033340'   \/><label for='answer-id-1033340' id='answer-label-1033340' class=' answer'><span>Configure AWS OpsWorks, and use the auto healing feature to stop and start the instance. Use a lifecycle event in OpsWorks to pull the metadata from Amazon S3 and update it on the instance.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262064[]' id='answer-id-1033341' class='answer   answerof-262064 ' value='1033341'   \/><label for='answer-id-1033341' id='answer-label-1033341' class=' answer'><span>Use EC2 Auto Recovery to automatically stop and start the instance in case of a failure. Use an S3 event notification to push the metadata to the instance when the instance is back up and running.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262064[]' id='answer-id-1033342' class='answer   answerof-262064 ' value='1033342'   \/><label for='answer-id-1033342' id='answer-label-1033342' class=' answer'><span>Use AWS CloudFormation to create an EC2 instance that includes the UserData property for the EC2 resource. Add a command in UserData to retrieve the application metadata from Amazon S3.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-16' style=';'><div id='questionWrap-16'  class='   watupro-question-id-262065'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>16. <\/span>An ecommerce company has chosen AWS to host its new platform. The company's <br \/>\r<br>DevOps team has started building an AWS Control Tower landing zone. The DevOps team has set the identity store within AWS IAM Identity Center (AWS Single Sign-On) to external identity provider (IdP) and has configured SAML 2.0. <br \/>\r<br>The DevOps team wants a robust permission model that applies the principle of least privilege. The model must allow the team to build and manage only the team's own resources. <br \/>\r<br>Which combination of steps will meet these requirements? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_16' value='262065' \/><input type='hidden' id='answerType262065' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262065[]' id='answer-id-1033343' class='answer   answerof-262065 ' value='1033343'   \/><label for='answer-id-1033343' id='answer-label-1033343' class=' answer'><span>Create IAM policies that include the required permissions. Include the aws:PrincipalTag condition key.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262065[]' id='answer-id-1033344' class='answer   answerof-262065 ' value='1033344'   \/><label for='answer-id-1033344' id='answer-label-1033344' class=' answer'><span>Create permission sets. Attach an inline policy that includes the required permissions and uses the aws:PrincipalTag condition key to scope the permissions.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262065[]' id='answer-id-1033345' class='answer   answerof-262065 ' value='1033345'   \/><label for='answer-id-1033345' id='answer-label-1033345' class=' answer'><span>Create a group in the Id<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262065[]' id='answer-id-1033346' class='answer   answerof-262065 ' value='1033346'   \/><label for='answer-id-1033346' id='answer-label-1033346' class=' answer'><span>Place users in the group. Assign the group to accounts and the permission sets in IAM Identity Center.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262065[]' id='answer-id-1033347' class='answer   answerof-262065 ' value='1033347'   \/><label for='answer-id-1033347' id='answer-label-1033347' class=' answer'><span>Create a group in the Id<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262065[]' id='answer-id-1033348' class='answer   answerof-262065 ' value='1033348'   \/><label for='answer-id-1033348' id='answer-label-1033348' class=' answer'><span>Place users in the group. Assign the group to OUs and IAM policies.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262065[]' id='answer-id-1033349' class='answer   answerof-262065 ' value='1033349'   \/><label for='answer-id-1033349' id='answer-label-1033349' class=' answer'><span>Enable attributes for access control in IAM Identity Center. Apply tags to users. Map the tags as key-value pairs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262065[]' id='answer-id-1033350' class='answer   answerof-262065 ' value='1033350'   \/><label for='answer-id-1033350' id='answer-label-1033350' class=' answer'><span>Enable attributes for access control in IAM Identity Center. Map attributes from the IdP as key-value pairs.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-17' style=';'><div id='questionWrap-17'  class='   watupro-question-id-262066'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>17. <\/span>A DevOps engineer at a company is supporting an AWS environment in which all users use AWS IAM Identity Center (AWS Single Sign-On). The company wants to immediately disable credentials of any new IAM user and wants the security team to receive a notification. <br \/>\r<br>Which combination of steps should the DevOps engineer take to meet these requirements? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_17' value='262066' \/><input type='hidden' id='answerType262066' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262066[]' id='answer-id-1033351' class='answer   answerof-262066 ' value='1033351'   \/><label for='answer-id-1033351' id='answer-label-1033351' class=' answer'><span>Create an Amazon EventBridge rule that reacts to an IAM CreateUser API call in AWS CloudTrail.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262066[]' id='answer-id-1033352' class='answer   answerof-262066 ' value='1033352'   \/><label for='answer-id-1033352' id='answer-label-1033352' class=' answer'><span>Create an Amazon EventBridge rule that reacts to an IAM GetLoginProfile API call in AWS CloudTrail.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262066[]' id='answer-id-1033353' class='answer   answerof-262066 ' value='1033353'   \/><label for='answer-id-1033353' id='answer-label-1033353' class=' answer'><span>Create an AWS Lambda function that is a target of the EventBridge rule. Configure the Lambda function to disable any access keys and delete the login profiles that are associated with the IAM user.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262066[]' id='answer-id-1033354' class='answer   answerof-262066 ' value='1033354'   \/><label for='answer-id-1033354' id='answer-label-1033354' class=' answer'><span>Create an AWS Lambda function that is a target of the EventBridge rule. Configure the Lambda function to delete the login profiles that are associated with the IAM user.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262066[]' id='answer-id-1033355' class='answer   answerof-262066 ' value='1033355'   \/><label for='answer-id-1033355' id='answer-label-1033355' class=' answer'><span>Create an Amazon Simple Notification Service (Amazon SNS) topic that is a target of the EventBridge rule. Subscribe the security team's group email address to the topic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262066[]' id='answer-id-1033356' class='answer   answerof-262066 ' value='1033356'   \/><label for='answer-id-1033356' id='answer-label-1033356' class=' answer'><span>Create an Amazon Simple Queue Service (Amazon SQS) queue that is a target of the Lambda function. Subscribe the security team's group email address to the queue.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-18' style=';'><div id='questionWrap-18'  class='   watupro-question-id-262067'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>18. <\/span>A company's developers use Amazon EC2 instances as remote workstations. The company is concerned that users can create or modify EC2 security groups to allow unrestricted inbound access. <br \/>\r<br>A DevOps engineer needs to develop a solution to detect when users create unrestricted security group rules. The solution must detect changes to security group rules in near real time, remove unrestricted rules, and send email notifications to the security team. The DevOps engineer has created an AWS Lambda function that checks for security group ID from input, removes rules that grant unrestricted access, and sends notifications through Amazon Simple Notification Service (Amazon SNS). <br \/>\r<br>What should the DevOps engineer do next to meet the requirements?<\/div><input type='hidden' name='question_id[]' id='qID_18' value='262067' \/><input type='hidden' id='answerType262067' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262067[]' id='answer-id-1033357' class='answer   answerof-262067 ' value='1033357'   \/><label for='answer-id-1033357' id='answer-label-1033357' class=' answer'><span>Configure the Lambda function to be invoked by the SNS topic. Create an AWS CloudTrail subscription for the SNS topic. Configure a subscription filter for security group modification events.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262067[]' id='answer-id-1033358' class='answer   answerof-262067 ' value='1033358'   \/><label for='answer-id-1033358' id='answer-label-1033358' class=' answer'><span>Create an Amazon EventBridge scheduled rule to invoke the Lambda function. Define a schedule pattern that runs the Lambda function every hour.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262067[]' id='answer-id-1033359' class='answer   answerof-262067 ' value='1033359'   \/><label for='answer-id-1033359' id='answer-label-1033359' class=' answer'><span>Create an Amazon EventBridge event rule that has the default event bus as the source. Define the rule\u2019s event pattern to match EC2 security group creation and modification events. Configure the rule to invoke the Lambda function.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262067[]' id='answer-id-1033360' class='answer   answerof-262067 ' value='1033360'   \/><label for='answer-id-1033360' id='answer-label-1033360' class=' answer'><span>Create an Amazon EventBridge custom event bus that subscribes to events from all AWS services. Configure the Lambda function to be invoked by the custom event bus.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-19' style=';'><div id='questionWrap-19'  class='   watupro-question-id-262068'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>19. <\/span>A company is hosting a web application in an AWS Region. For disaster recovery purposes, a second region is being used as a standby. Disaster recovery requirements state that session data must be replicated between regions in near-real time and 1% of requests should route to the secondary region to continuously verify system functionality. Additionally, if there is a disruption in service in the main region, traffic should be automatically routed to the secondary region, and the secondary region must be able to scale up to handle all traffic. <br \/>\r<br>How should a DevOps engineer meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_19' value='262068' \/><input type='hidden' id='answerType262068' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262068[]' id='answer-id-1033361' class='answer   answerof-262068 ' value='1033361'   \/><label for='answer-id-1033361' id='answer-label-1033361' class=' answer'><span>In both regions, deploy the application on AWS Elastic Beanstalk and use Amazon DynamoDB global tables for session data. Use an Amazon Route 53 weighted routing policy with health checks to distribute the traffic across the regions.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262068[]' id='answer-id-1033362' class='answer   answerof-262068 ' value='1033362'   \/><label for='answer-id-1033362' id='answer-label-1033362' class=' answer'><span>In both regions, launch the application in Auto Scaling groups and use DynamoDB for session data. Use a Route 53 failover routing policy with health checks to distribute the traffic across the regions.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262068[]' id='answer-id-1033363' class='answer   answerof-262068 ' value='1033363'   \/><label for='answer-id-1033363' id='answer-label-1033363' class=' answer'><span>In both regions, deploy the application in AWS Lambda, exposed by Amazon API Gateway, and use Amazon RDS for PostgreSQL with cross-region replication for session data. Deploy the web application with client-side logic to call the API Gateway directly.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262068[]' id='answer-id-1033364' class='answer   answerof-262068 ' value='1033364'   \/><label for='answer-id-1033364' id='answer-label-1033364' class=' answer'><span>In both regions, launch the application in Auto Scaling groups and use DynamoDB global tables for session data. Enable an Amazon CloudFront weighted distribution across regions. Point the Amazon Route 53 DNS record at the CloudFront distribution.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-20' style=';'><div id='questionWrap-20'  class='   watupro-question-id-262069'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>20. <\/span>A company must encrypt all AMIs that the company shares across accounts. A DevOps engineer has access to a source account where an unencrypted custom AMI has been built. The DevOps engineer also has access to a target account where an Amazon EC2 Auto Scaling group will launch EC2 instances from the AMI. The DevOps engineer must share the AMI with the target account. <br \/>\r<br>The company has created an AWS Key Management Service (AWS KMS) key in the source account. <br \/>\r<br>Which additional steps should the DevOps engineer perform to meet the requirements? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_20' value='262069' \/><input type='hidden' id='answerType262069' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262069[]' id='answer-id-1033365' class='answer   answerof-262069 ' value='1033365'   \/><label for='answer-id-1033365' id='answer-label-1033365' class=' answer'><span>In the source account, copy the unencrypted AMI to an encrypted AM<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262069[]' id='answer-id-1033366' class='answer   answerof-262069 ' value='1033366'   \/><label for='answer-id-1033366' id='answer-label-1033366' class=' answer'><span>Specify the KMS key in the copy action.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262069[]' id='answer-id-1033367' class='answer   answerof-262069 ' value='1033367'   \/><label for='answer-id-1033367' id='answer-label-1033367' class=' answer'><span>In the source account, copy the unencrypted AMI to an encrypted AM<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262069[]' id='answer-id-1033368' class='answer   answerof-262069 ' value='1033368'   \/><label for='answer-id-1033368' id='answer-label-1033368' class=' answer'><span>Specify the default Amazon Elastic Block Store (Amazon EBS) encryption key in the copy action.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262069[]' id='answer-id-1033369' class='answer   answerof-262069 ' value='1033369'   \/><label for='answer-id-1033369' id='answer-label-1033369' class=' answer'><span>In the source account, create a KMS grant that delegates permissions to the Auto Scaling group service-linked role in the target account.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262069[]' id='answer-id-1033370' class='answer   answerof-262069 ' value='1033370'   \/><label for='answer-id-1033370' id='answer-label-1033370' class=' answer'><span>In the source account, modify the key policy to give the target account permissions to create a grant. In the target account, create a KMS grant that delegates permissions to the Auto Scaling group service-linked role.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262069[]' id='answer-id-1033371' class='answer   answerof-262069 ' value='1033371'   \/><label for='answer-id-1033371' id='answer-label-1033371' class=' answer'><span>In the source account, share the unencrypted AMI with the target account.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262069[]' id='answer-id-1033372' class='answer   answerof-262069 ' value='1033372'   \/><label for='answer-id-1033372' id='answer-label-1033372' class=' answer'><span>In the source account, share the encrypted AMI with the target account.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-21' style=';'><div id='questionWrap-21'  class='   watupro-question-id-262070'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>21. <\/span>A DevOps engineer needs to back up sensitive Amazon S3 objects that are stored within an S3 bucket with a private bucket policy using S3 cross-Region replication functionality. The objects need to be copied to a target bucket in a different AWS Region and account. <br \/>\r<br>Which combination of actions should be performed to enable this replication? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_21' value='262070' \/><input type='hidden' id='answerType262070' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262070[]' id='answer-id-1033373' class='answer   answerof-262070 ' value='1033373'   \/><label for='answer-id-1033373' id='answer-label-1033373' class=' answer'><span>Create a replication IAM role in the source account<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262070[]' id='answer-id-1033374' class='answer   answerof-262070 ' value='1033374'   \/><label for='answer-id-1033374' id='answer-label-1033374' class=' answer'><span>Create a replication I AM role in the target account.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262070[]' id='answer-id-1033375' class='answer   answerof-262070 ' value='1033375'   \/><label for='answer-id-1033375' id='answer-label-1033375' class=' answer'><span>Add statements to the source bucket policy allowing the replication IAM role to replicate objects.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262070[]' id='answer-id-1033376' class='answer   answerof-262070 ' value='1033376'   \/><label for='answer-id-1033376' id='answer-label-1033376' class=' answer'><span>Add statements to the target bucket policy allowing the replication IAM role to replicate objects.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262070[]' id='answer-id-1033377' class='answer   answerof-262070 ' value='1033377'   \/><label for='answer-id-1033377' id='answer-label-1033377' class=' answer'><span>Create a replication rule in the source bucket to enable the replication.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-262070[]' id='answer-id-1033378' class='answer   answerof-262070 ' value='1033378'   \/><label for='answer-id-1033378' id='answer-label-1033378' class=' answer'><span>Create a replication rule in the target bucket to enable the replication.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-22' style=';'><div id='questionWrap-22'  class='   watupro-question-id-262071'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>22. <\/span>A developer is maintaining a fleet of 50 Amazon EC2 Linux servers. The servers are part of an Amazon EC2 Auto Scaling group, and also use Elastic Load Balancing for load balancing. <br \/>\r<br>Occasionally, some application servers are being terminated after failing ELB HTTP health checks. The developer would like to perform a root cause analysis on the issue, but before being able to access application logs, the server is terminated. <br \/>\r<br>How can log collection be automated?<\/div><input type='hidden' name='question_id[]' id='qID_22' value='262071' \/><input type='hidden' id='answerType262071' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262071[]' id='answer-id-1033379' class='answer   answerof-262071 ' value='1033379'   \/><label for='answer-id-1033379' id='answer-label-1033379' class=' answer'><span>Use Auto Scaling lifecycle hooks to put instances in a Pending:Wait state. Create an Amazon CloudWatch alarm for EC2 Instance Terminate Successful and trigger an AWS Lambda function that invokes an SSM Run Command script to collect logs, push them to Amazon S3, and complete the lifecycle action once logs are collected.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262071[]' id='answer-id-1033380' class='answer   answerof-262071 ' value='1033380'   \/><label for='answer-id-1033380' id='answer-label-1033380' class=' answer'><span>Use Auto Scaling lifecycle hooks to put instances in a Terminating:Wait state. Create an AWS Config rule for EC2 Instance-terminate Lifecycle Action and trigger a step function \r\nthat invokes a script to collect logs, push them to Amazon S3, and complete the lifecycle action once logs are collected.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262071[]' id='answer-id-1033381' class='answer   answerof-262071 ' value='1033381'   \/><label for='answer-id-1033381' id='answer-label-1033381' class=' answer'><span>Use Auto Scaling lifecycle hooks to put instances in a Terminating:Wait state. Create an Amazon CloudWatch subscription filter for EC2 Instance Terminate Successful and trigger a CloudWatch agent that invokes a script to collect logs, push them to Amazon S3, and complete the lifecycle action once logs are collected.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262071[]' id='answer-id-1033382' class='answer   answerof-262071 ' value='1033382'   \/><label for='answer-id-1033382' id='answer-label-1033382' class=' answer'><span>Use Auto Scaling lifecycle hooks to put instances in a Terminating:Wait state. Create an Amazon EventBridge rule for EC2 Instance-terminate Lifecycle Action and trigger an AWS Lambda function that invokes an SSM Run Command script to collect logs, push them to Amazon S3, and complete the lifecycle action once logs are collected.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-23' style=';'><div id='questionWrap-23'  class='   watupro-question-id-262072'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>23. <\/span>A company has multiple accounts in an organization in AWS Organizations. The company's SecOps team needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if any account in the organization turns off the Block Public Access feature on an Amazon S3 bucket. A DevOps engineer must implement this change without affecting the operation of any AWS accounts. The implementation must ensure that individual member accounts in the organization cannot turn off the notification. <br \/>\r<br>Which solution will meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_23' value='262072' \/><input type='hidden' id='answerType262072' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262072[]' id='answer-id-1033383' class='answer   answerof-262072 ' value='1033383'   \/><label for='answer-id-1033383' id='answer-label-1033383' class=' answer'><span>Designate an account to be the delegated Amazon GuardDuty administrator account. Turn on GuardDuty for all accounts across the organization. In the GuardDuty administrator account, create an SNS topic. Subscribe the SecOps team's email address to the SNS topic. In the same account, create an Amazon EventBridge rule that uses an event pattern for GuardDuty findings and a target of the SNS topic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262072[]' id='answer-id-1033384' class='answer   answerof-262072 ' value='1033384'   \/><label for='answer-id-1033384' id='answer-label-1033384' class=' answer'><span>Create an AWS CloudFormation template that creates an SNS topic and subscribes the SecOps team\u2019s email address to the SNS topic. In the template, include an Amazon EventBridge rule that uses an event pattern of CloudTrail activity for \r\ns3:PutBucketPublicAccessBlock and a target of the SNS topic. Deploy the stack to every account in the organization by using CloudFormation StackSets.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262072[]' id='answer-id-1033385' class='answer   answerof-262072 ' value='1033385'   \/><label for='answer-id-1033385' id='answer-label-1033385' class=' answer'><span>Turn on AWS Config across the organization. In the delegated administrator account, create an SNS topic. Subscribe the SecOps team's email address to the SNS topic. Deploy a conformance pack that uses the s3-bucket-level-public-access-prohibited AWS Config managed rule in each account and uses an AWS Systems Manager document to publish an event to the SNS topic to notify the SecOps team.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262072[]' id='answer-id-1033386' class='answer   answerof-262072 ' value='1033386'   \/><label for='answer-id-1033386' id='answer-label-1033386' class=' answer'><span>Turn on Amazon Inspector across the organization. In the Amazon Inspector delegated administrator account, create an SNS topic. Subscribe the SecOps team\u2019semail address to the SNS topic. In the same account, create an Amazon EventBridge rule that uses an event pattern for public network exposure of the S3 bucket and publishes an event to the SNS topic to notify the SecOps team.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-24' style=';'><div id='questionWrap-24'  class='   watupro-question-id-262073'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>24. <\/span>A development team is using AWS CodeCommit to version control application code and AWS CodePipeline to orchestrate software deployments. The team has decided to use a remote main branch as the trigger for the pipeline to integrate code changes. A developer has pushed code changes to the CodeCommit repository, but noticed that the pipeline had no reaction, even after 10 minutes. <br \/>\r<br>Which of the following actions should be taken to troubleshoot this issue?<\/div><input type='hidden' name='question_id[]' id='qID_24' value='262073' \/><input type='hidden' id='answerType262073' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262073[]' id='answer-id-1033387' class='answer   answerof-262073 ' value='1033387'   \/><label for='answer-id-1033387' id='answer-label-1033387' class=' answer'><span>Check that an Amazon EventBridge rule has been created for the main branch to trigger the pipeline.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262073[]' id='answer-id-1033388' class='answer   answerof-262073 ' value='1033388'   \/><label for='answer-id-1033388' id='answer-label-1033388' class=' answer'><span>Check that the CodePipeline service role has permission to access the CodeCommit repository.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262073[]' id='answer-id-1033389' class='answer   answerof-262073 ' value='1033389'   \/><label for='answer-id-1033389' id='answer-label-1033389' class=' answer'><span>Check that the developer\u2019s IAM role has permission to push to the CodeCommit repository.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262073[]' id='answer-id-1033390' class='answer   answerof-262073 ' value='1033390'   \/><label for='answer-id-1033390' id='answer-label-1033390' class=' answer'><span>Check to see if the pipeline failed to start because of CodeCommit errors in Amazon CloudWatch Logs.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-25' style=';'><div id='questionWrap-25'  class='   watupro-question-id-262074'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>25. <\/span>A company has an application that runs on Amazon EC2 instances that are in an Auto Scaling group. When the application starts up. the application needs to process data from an Amazon S3 bucket before the application can start to serve requests. <br \/>\r<br>The size of the data that is stored in the S3 bucket is growing. When the Auto Scaling group adds new instances, the application now takes several minutes to download and process the data before the application can serve requests. The company must reduce the time that elapses before new EC2 instances are ready to serve requests. <br \/>\r<br>Which solution is the MOST cost-effective way to reduce the application startup time?<\/div><input type='hidden' name='question_id[]' id='qID_25' value='262074' \/><input type='hidden' id='answerType262074' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262074[]' id='answer-id-1033391' class='answer   answerof-262074 ' value='1033391'   \/><label for='answer-id-1033391' id='answer-label-1033391' class=' answer'><span>Configure a warm pool for the Auto Scaling group with warmed EC2 instances in the Stopped state. Configure an autoscaling:EC2_INSTANCE_LAUNCHING lifecycle hook on the Auto Scaling group. Modify the application to complete the lifecycle hook when the application is ready to serve requests.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262074[]' id='answer-id-1033392' class='answer   answerof-262074 ' value='1033392'   \/><label for='answer-id-1033392' id='answer-label-1033392' class=' answer'><span>Increase the maximum instance count of the Auto Scaling group. Configure an autoscaling:EC2_INSTANCE_LAUNCHING lifecycle hook on the Auto Scaling group. \r\nModify the application to complete the lifecycle hook when the application is ready to serve requests.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262074[]' id='answer-id-1033393' class='answer   answerof-262074 ' value='1033393'   \/><label for='answer-id-1033393' id='answer-label-1033393' class=' answer'><span>Configure a warm pool for the Auto Scaling group with warmed EC2 instances in the Running state. Configure an autoscaling:EC2_INSTANCE_LAUNCHING lifecycle hook on the Auto Scaling group. Modify the application to complete the lifecycle hook when the application is ready to serve requests.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-262074[]' id='answer-id-1033394' class='answer   answerof-262074 ' value='1033394'   \/><label for='answer-id-1033394' id='answer-label-1033394' class=' answer'><span>Increase the maximum instance count of the Auto Scaling group. Configure an autoscaling:EC2_INSTANCE_LAUNCHING lifecycle hook on the Auto Scaling group. Modify the application to complete the lifecycle hook and to place the new instance in the Standby state when the application is ready to serve requests.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div style='display:none' id='question-26'>\n\t<div class='question-content'>\n\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading...\" title=\"Loading...\" \/>&nbsp;Loading...\t<\/div>\n<\/div>\n\n<br \/>\n\t\n\t\t\t<div class=\"watupro_buttons flex \" id=\"watuPROButtons7183\" >\n\t\t  <div id=\"prev-question\" style=\"display:none;\"><input type=\"button\" value=\"&lt; Previous\" onclick=\"WatuPRO.nextQuestion(event, 'previous');\"\/><\/div>\t\t  \t\t  \t\t   \n\t\t   \t  \t\t<div><input type=\"button\" name=\"action\" class=\"watupro-submit-button\" onclick=\"WatuPRO.submitResult(event)\" id=\"action-button\" value=\"View Results\"  \/>\n\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<input type=\"hidden\" name=\"quiz_id\" value=\"7183\" id=\"watuPROExamID\"\/>\n\t<input type=\"hidden\" name=\"start_time\" id=\"startTime\" value=\"2026-05-11 13:20:33\" \/>\n\t<input type=\"hidden\" name=\"start_timestamp\" id=\"startTimeStamp\" value=\"1778505633\" \/>\n\t<input type=\"hidden\" name=\"question_ids\" value=\"\" \/>\n\t<input type=\"hidden\" name=\"watupro_questions\" value=\"262050:1033273,1033274,1033275,1033276,1033277 | 262051:1033278,1033279,1033280,1033281 | 262052:1033282,1033283,1033284,1033285 | 262053:1033286,1033287,1033288,1033289,1033290,1033291 | 262054:1033292,1033293,1033294,1033295 | 262055:1033296,1033297,1033298,1033299 | 262056:1033300,1033301,1033302,1033303 | 262057:1033304,1033305,1033306,1033307 | 262058:1033308,1033309,1033310,1033311,1033312,1033313 | 262059:1033314,1033315,1033316,1033317 | 262060:1033318,1033319,1033320,1033321 | 262061:1033322,1033323,1033324,1033325,1033326 | 262062:1033327,1033328,1033329,1033330,1033331,1033332,1033333,1033334 | 262063:1033335,1033336,1033337,1033338 | 262064:1033339,1033340,1033341,1033342 | 262065:1033343,1033344,1033345,1033346,1033347,1033348,1033349,1033350 | 262066:1033351,1033352,1033353,1033354,1033355,1033356 | 262067:1033357,1033358,1033359,1033360 | 262068:1033361,1033362,1033363,1033364 | 262069:1033365,1033366,1033367,1033368,1033369,1033370,1033371,1033372 | 262070:1033373,1033374,1033375,1033376,1033377,1033378 | 262071:1033379,1033380,1033381,1033382 | 262072:1033383,1033384,1033385,1033386 | 262073:1033387,1033388,1033389,1033390 | 262074:1033391,1033392,1033393,1033394\" \/>\n\t<input type=\"hidden\" name=\"no_ajax\" value=\"0\">\t\t\t<\/form>\n\t<p>&nbsp;<\/p>\n<\/div>\n\n<script type=\"text\/javascript\">\n\/\/jQuery(document).ready(function(){\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \t\nvar question_ids = \"262050,262051,262052,262053,262054,262055,262056,262057,262058,262059,262060,262061,262062,262063,262064,262065,262066,262067,262068,262069,262070,262071,262072,262073,262074\";\nWatuPROSettings[7183] = {};\nWatuPRO.qArr = question_ids.split(',');\nWatuPRO.exam_id = 7183;\t    \nWatuPRO.post_id = 56792;\nWatuPRO.store_progress = 0;\nWatuPRO.curCatPage = 1;\nWatuPRO.requiredIDs=\"0\".split(\",\");\nWatuPRO.hAppID = \"0.73990200 1778505633\";\nvar url = \"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/show_exam.php\";\nWatuPRO.examMode = 1;\nWatuPRO.siteURL=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-admin\/admin-ajax.php\";\nWatuPRO.emailIsNotRequired = 0;\nWatuPROIntel.init(7183);\nWatuPRO.inCategoryPages=1;});    \t \n<\/script>\n\n\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[175,15684],"tags":[15681,15683,15682],"class_list":["post-56792","post","type-post","status-publish","format-standard","hentry","category-amazon","category-aws-certified-professional","tag-dop-c02","tag-dop-c02-exam-dumps","tag-dop-c02-exam-questions"],"_links":{"self":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/56792","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/comments?post=56792"}],"version-history":[{"count":1,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/56792\/revisions"}],"predecessor-version":[{"id":56796,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/56792\/revisions\/56796"}],"wp:attachment":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/media?parent=56792"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/categories?post=56792"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/tags?post=56792"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}