AWS DevOps工程师专业认证：离线安装策略

需积分: 10 55 浏览量更新于2024-07-16 收藏 218KB PDF 举报

"《Amazon AWS DevOps Engineer Professional Questions & Answers》是一份针对AWS认证DevOps工程师的专业考试资料，适用于有两年以上AWS环境部署、操作和管理经验的人员。这份PDF文件包含了实际考试中可能遇到的问题与解答，版本为1.0。问题1涉及到了一个DevOps工程师在AWS环境中遇到的挑战。他为一个应用程序部署Amazon EC2实例，并使用了公共子网中的公开IP地址。用户数据脚本负责获取应用 artifacts 并在实例启动时安装。然而，随着对安全性的新要求，应用必须在无互联网访问的情况下运行。尽管实例成功启动且显示健康，但应用似乎并未安装。为了解决这个问题，正确的方法是C. 将应用程序artifacts发布到Amazon S3存储桶，并创建一个VPC（虚拟私有云）端点用于S3。这样，可以通过为EC2实例分配一个具有读取权限的IAM（身份和访问管理）实例角色，确保它们可以在私有子网中访问S3，从而安装应用程序，同时遵循新的规则，即限制网络访问。 B选项提到的NAT网关虽然可以将私有子网内的实例暴露给外部网络，但这并不符合新的无互联网访问规则。A选项中使用弹性IP地址的做法也不符合，因为弹性IP地址允许实例保持外部连接，不符合限制条件。因此，最符合要求的解决方案是C，通过VPC端点实现私密且受控的应用部署。"

QUESTION NO: 13

A Development team uses AWS CodeCommit for source code control. Developers apply their

changes to various feature branches and create pull requests to move those changes to the

master branch when they are ready for production. A direct push to the master branch should not

be allowed. The team applied the AWS managed policy AWSCodeCommitPowerUser to the

Developers’ IAM rote, but now members are able to push to the master branch directly on every

repository in the AWS account.

What actions should be taken to restrict this?

Create an additional policy to include a deny rule for the codecommit: GitPush action, and include

a restriction for the specific repositories in the resource statement with a condition for the master

reference.

Remove the IAM policy and add an AWSCodeCommitReadOnlypolicy. Add an allow rule for the

codecommit: GitPush action for the specific repositories in the resource statement with a condition

for the master reference.

Modify the IAM policy and include a deny rule for the codecommit: GitPush action for the specific

repositories in the resource statement with a condition for the master reference.

Create an additional policy to include an allow rule for the codecommit: GitPush action and include

a restriction for the specific repositories in the resource statement with a condition for the feature

branches reference.

Answer: C

Explanation:

QUESTION NO: 14

A Developer is designing a continuous deployment workflow for a new Development team to

facilitate the process for source code promotion in AWS. Developers would like to store and

promote code for deployment from development to production while maintaining the ability to roll

back that deployment if it fails.

Which design will incur the LEAST amount of downtime?

Create one repository in AWS CodeCommit. Create a development branch to hold merged

changes. Use AWS CodeBuild to build and test the code stored in the development branch

triggered on a new commit. Merge to the master and deploy to production by using AWS

Amazon AWS DevOps Engineer Professional Exam

"Leading the way in IT Testing & Certification Tools" - www.testking.com 11

CodeDeploy for a blue/green deployment.

Create one repository for each Developer in AWS CodeCommit and another repository to hold the

production code. Use AWS CodeBuild to merge development and production repositories, and

deploy to production by using AWS CodeDeploy for a blue/green deployment.

Create one repository for development code in AWS CodeCommit and another repository to hold

the production code. Use AWS CodeBuild to merge development and production repositories, and

deploy to production by using AWS CodeDeploy for a blue/green deployment.

Create a shared Amazon S3 bucket for the Development team to store their code. Set up an

Amazon CloudWatch Events rule to trigger an AWS Lambda function that deploys the code to

production by using AWS CodeDeploy for a blue/green deployment.

Answer: D

Explanation:

QUESTION NO: 15

A DevOps Engineer discovered a sudden spike in a website's page load times and found that a

recent deployment occurred. A brief diff of the related commit shows that the URL for an external

API call was altered and the connecting port changed from 80 to 443. The external API has been

verified and works outside the application. The application logs show that the connection is now

timing out, resulting in multiple retries and eventual failure of the call.

Which debug steps should the Engineer take to determine the root cause of the issue'?

Check the VPC Flow Logs looking for denies originating from Amazon EC2 instances that are part

of the web Auto Scaling group. Check the ingress security group rules and routing rules for the

VPC.

Check the existing egress security group rules and network ACLs for the VPC. Also check the

application logs being written to Amazon CloudWatch Logs for debug information.

Check the egress security group rules and network ACLs for the VPC. Also check the VPC flow

logs looking for accepts originating from the web Auto Scaling group.

Check the application logs being written to Amazon CloudWatch Logs for debug information.

Check the ingress security group rules and routing rules for the VPC.

Amazon AWS DevOps Engineer Professional Exam

"Leading the way in IT Testing & Certification Tools" - www.testking.com 12

Answer: C

Explanation:

QUESTION NO: 16

An Engineering team manages a Node.js e-commerce application. The current environment

consists of the following components:

• Amazon S3 buckets for storing content

• Amazon EC2 for the front-end web servers

• AWS Lambda for executing image processing

• Amazon DynamoDB for storing session-related data

The team expects a significant increase in traffic to the site. The application should handle the

additional load without interruption. The team ran initial tests by adding new servers to the EC2

front-end to handle the larger load, but the instances took up to 20 minutes to become fully

configured. The team wants to reduce this configuration time.

What changes will the Engineering team need to implement to make the solution the MOST

resilient and highly available while meeting the expected increase in demand?

Use AWS OpsWorks to automatically configure each new EC2 instance as it is launched.

Configure the EC2 instances by using an Auto Scaling group behind an Application Load Balancer

across multiple Availability Zones. Implement Amazon DynamoDB Auto Scaling. Use Amazon

Route 53 to point the application DNS record to the Application Load Balancer.

Deploy a fleet of EC2 instances, doubling the current capacity, and place them behind an

Application Load Balancer. Increase the Amazon DynamoDB read and write capacity units. Add

an alias record that contains the Application Load Balancer endpoint to the existing Amazon Route

53 DNS record that points to the application.

Configure Amazon CloudFront and have its origin point to Amazon S3 to host the web application.

Implement Amazon DynamoDB Auto Scaling. Use Amazon Route 53 to point the application DNS

record to the CloudFront DNS name.

Use AWS Elastic Beanstalk with a custom AMI including all web components. Deploy the platform

by using an Auto Scaling group behind an Application Load Balancer across multiple Availability

Zones. Implement Amazon DynamoDB Auto Scaling. Use Amazon Route 53 to point the

application DNS record to the Elastic Beanstalk load balancer.

Amazon AWS DevOps Engineer Professional Exam

"Leading the way in IT Testing & Certification Tools" - www.testking.com 13

剩余61页未读，继续阅读

isfufula

粉丝: 1
资源: 2

AWS DevOps工程师专业认证：离线安装策略

免费的防止锁屏小软件，可用于域统一管控下的锁屏机制

Python代码实现带装饰的圣诞树控制台输出

白色大气风格的设计师作品模板下载.zip

电商平台开发需求文档.doc

白色简洁风格的办公室室内设计门户网站模板下载.zip

VB+access干部档案管理系统(源代码+系统)(20246t).7z

VB+ACCESS服装专卖店管理系统设计(源代码+系统+开题报告+答辩PPT)(2024ra).7z

(179065812)基于Android stduio的手机银行开发与设计-用于课程设计

白色大气风格的婚礼现场倒计时模板下载.zip

轮式移动机器人轨迹跟踪的MATHLAB程序，运用运动学和动力学模型的双闭环控制，借鉴自抗扰控制技术结合了非线性ESO，跟踪效果良好，控制和抗扰效果较优，可分享控制结构图 这段程序主要是一个小车的动力

最新资源

轮式移动机器人轨迹跟踪的MATHLAB程序，运用运动学和动力学模型的双闭环控制，借鉴自抗扰控制技术结合了非线性ESO，跟踪效果良好，控制和抗扰效果较优，可分享控制结构图这段程序主要是一个小车的动力