Question 1

A company is implementing AWS CodePipeline to automate its testing process. The company wants to be notified when the execution state fails and used the following custom event pattern in Amazon EventBridge:

Which type of events will match this event pattern?

Options :

A : Failed deploy and build actions across all the pipelines

B : All rejected or failed approval actions across all the pipelines

C : All the events across all pipelines

D : Approval actions across all the pipelines

Answer: B

Question 2

A company recently launched multiple applications that use Application Load Balancers. Application response time often slows down when the applications experience problems A DevOps engineer needs to Implement a monitoring solution that alerts the company when the applications begin to perform slowly The DevOps engineer creates an Amazon Simple Notification Semce (Amazon SNS) topic and subscribe the company's email address to the topic What should the DevOps engineer do next to meet the requirements?

Options :

A : Create an Amazon EventBridge rule that invokes an AWS Lambda function to query the applications on a 5-minute interval Configure the Lambda function to publish a notification to the SNS topic when the applications return errors.

B : Create an Amazon CloudWatch Synthetics canary that runs a custom script to query the applications on a 5-minute interval. Configure the canary to use the SNS topic when the applications return errors.

C : Create an Amazon CloudWatch alarm that uses the AWS/AppljcabonELB namespace RequestCountPerTarget metric Configure the CloudWatch alarm to send a notification when the number of connections becomes greater than the configured number of threads that the application supports Configure the CloudWatch alarm to use the SNS topic.

D : Create an Amazon CloudWatch alarm that uses the AWS/ApplicationELB namespace RequestCountPerTarget metric Configure the CloudWatch alarm to send a notification when the average response time becomes greater than the longest response time that the application supports Configure the CloudWatch alarm to use the SNS topic

Answer: B

Question 3

An online data analytics application is launched to 12 On-Demand EC2 instances across three Availability Zones using a golden AMI in AWS. Each instance has only 10% utilization after business hours but increases to 30% utilization during peak hours. There are also some third-party applications that use the application from all over the globe with no specific schedule. In the morning, there is always a sudden CPU utilization increase on the EC2 instances due to the number of users logging in to use the application. However, its CPU utilization usually stabilizes after a few hours. A DevOps Engineer has been instructed to reduce costs and improve the overall reliability of the system.

Which among the following options provides the MOST suitable solution in this scenario?

Options :

A : Launch a group of Scheduled Reserved Instances that regularly run before and after the peak hours. Integrate CloudWatch Events and AWS Lambda to regularly stop nine instances after the peak hours every day and restart the nine instances before the business day begins.

B : Set up two Amazon Eventbridge rules and two Lambda functions. Configure each Amazon Eventbridge rule to invoke a Lambda function and regularly run before and after the peak hours. The first function should stop nine instances after the peak hours end while the second function should restart the nine instances before the business day begins

C : Set up an Auto Scaling group using the golden AMI with a scaling action based on the CPU Utilization average. Configure a scheduled action for the group to adjust the minimum number of Amazon EC2 instances to three after business hours end, and reset to six before business hours begin.

D : Set up two AWS Config rules and two Lambda functions. Configure each rule to invoke a Lambda function and regularly run before and after the peak hours. The first function should stop nine instances after the peak hours end while the second function should restart the nine instances before the business day begins.

Answer: C

Question 4

A JavaScript-based online salary calculator hosted on-premises is slated to be migrated to AWS. The application has no server-side code and is just composed of a UI powered by Vue.js and Bootstrap. Since the online calculator may contain sensitive financial data, adding HTTP response headers such as X-Content-Type-Options, X-Frame-Options and X-XSS-Protection should be implemented to comply with the Open Web Application Security Project (OWASP) standards.

Which of the following is the MOST suitable solution that you should implement?

Options :

A : Host the application on an S3 bucket configured for website hosting then set up server access logging on the Amazon S3 bucket to track user activity. Enable Amazon S3 client-side encryption and configure it to return the required security headers.

B : Host the application on an S3 bucket configured for website hosting then set up server access logging on the S3 bucket to track user activity. Configure the bucket policy of the S3 bucket to return the required security headers.

C : Host the application on an S3 bucket configured for website hosting. Set up a CloudFront web distribution and set the S3 bucket as the origin. Set a custom Request and Response Behavior in CloudFront that automatically adds the required security headers in the HTTP response.

D : Host the application on an S3 bucket configured for website hosting. Set up a CloudFront web distribution and set the S3 bucket as the origin with the origin response event set to trigger a Lambda@Edge function. Add the required security headers in the HTTP response using the Lambda function.

Answer: D

Question 5

A company runs its container workloads in AWS App Runner. A DevOps engineer manages the company's container repository in Amazon Elastic Container Registry (Amazon ECR). The DevOps engineer must implement a solution that continuously monitors the container repository. The solution must create a new container image when the solution detects an operating system vulnerability or language package vulnerability. Which solution will meet these requirements?

Options :

A : Use EC2 Image Builder to create a container image pipeline. Use Amazon ECR as the target repository. Turn on enhanced scanning on the ECR repository. Create an Amazon EventBridge rule to capture an Inspector2 finding event. Use the event to invoke the image pipeline. Re-upload the container to the repository.

B : Use EC2 Image Builder to create a container image pipeline. Use Amazon ECR as the target repository. Enable Amazon GuardDuty Malware Protection on the container workload. Create an Amazon EventBridge rule to capture a GuardDuty finding event. Use the event to invoke the image pipeline.

C : Create an AWS CodeBuild project to create a container image. Use Amazon ECR as the target repository. Turn on basic scanning on the repository. Create an Amazon EventBridge rule to capture an ECR image action event. Use the event to invoke the CodeBuild project. Re-upload the container to the repository.

D : Create an AWS CodeBuild project to create a container image. Use Amazon ECR as the target repository. Configure AWS Systems Manager Compliance to scan all managed nodes. Create an Amazon EventBridge rule to capture a configuration compliance state change event. Use the event to invoke the CodeBuild project.

Answer: A

Confidently Practice Online with Free DOP-C02 Exam Cram

Buying Options: