Online Access Free Amazon.AWS-DevOps-Engineer-Professional.v2022-01-20.q245 Practice Test (Page 17)

AWS-DevOps-Engineer-Professional Exam Question 76

A company wants to implement a Cl/CD pipeline for an application that is deployed on AWS. The company also has a source-code analysis tool hosted on premises that checks for security flaws. The tool has not yet been migrated to AWS and can be accessed only on premises. The company wants to run checks against the source code as part of the pipeline before the code is compiled. The checks take anywhere from minutes to an hour to complete.
How can a DevOps Engineer meet these requirements'?

A.Use AWS CodePipeline to create a pipeline. Add a step after the source stage to make an HTTPS request to the on-premises hosted web service that invokes a test with the source code analysis tool.
When the analysis is complete, the web service sends the results back by putting the results in an Amazon S3 output location provided by CodePipeline.

B.Use AWS CodePipeline to create a pipeline, then create a custom action type. Create a job worker for the custom action that runs on hardware hosted on premises. The job worker handles running security checks with the on-premises code analysis tool and then returns the job results to CodePipeline. Have the pipeline invoke the custom action after the source stage.

C.Use AWS CodePipeline to create a pipeline. Add an action to the pipeline to invoke an AWS Lambda function after the source stage. Have the Lambda function invoke the source-code analysis tool on premises against the source input from CodePipeline. The function then waits for the execution to complete and places the output in a specified Amazon S3 location.

D.Use AWS CodePipeline to create a pipeline. Create a shell script that copies the input source code to a location on premises. Invoke the source code analysis tool and return the results to CodePipeline. Invoke the shell script by adding a custom script action after the source stage.

AWS-DevOps-Engineer-Professional Exam Question 77

You have a high security requirement for your AWS accounts. What is the most rapid and sophisticated setup you can use to react to AWS API calls to your account?

A.Subscription to AWS Config via an SNS Topic. Use a Lambda Function to perform in-flight analysis and reactivity to changes as they occur.

B.Global AWS CloudTrail setup delivering to S3 with an SNS subscription to the deliver notifications, pushing into a Lambda, which inserts records into an ELK stack for analysis.

C.Use a CloudWatch Rule ScheduleExpression to periodically analyze IAM credential logs. Push the deltas for events into an ELK stack and perform ad-hoc analysis there.

D.CloudWatch Events Rules which trigger based on all AWS API calls, submitting all events to an AWS Kinesis Stream for arbitrary downstream analysis.

AWS-DevOps-Engineer-Professional Exam Question 78

Your mobile application includes a photo-sharing service that is expecting tens of thousands of users at launch.
You will leverage Amazon Simple Storage Service (S3) for storage of the user Images, and you must decide
how to authenticate and authorize your users for access to these images. You also need to manage the storage
of these images. Which two of the following approaches should you use? Choose two answers from the
options below

A.Create an Amazon S3 bucket per user, and use your application to generate the S3 URI for the
appropriate content.

B.Use AWS Identity and Access Management (1AM) user accounts as your application-level user
database, and offload the burden of authentication from your application code.

C.Authenticate your users at the application level, and use AWS Security Token Service (STS) to grant
token-based authorization to S3 objects.

D.Authenticate your users at the application level, and send an SMS token message to the user. Create an
Amazon S3 bucket with the same name as the SMS message token, and move the user's objects to that
bucket.

E.Use a key-based naming scheme comprised from the user IDs for all user objects in a single Amazon S3
bucket.

AWS-DevOps-Engineer-Professional Exam Question 79

A startup company is developing a web application on AWS. It plans to use Amazon RDS for persistence and deploy the application to Amazon EC2 with an Auto Scaling group. The company would also like to separate the environments for development, testing, and production. What is the MOST secure and flexible approach to manage the application configuration?

A.Create a property file for each environment to include the environment-specific configuration.
Create a private Amazon S3 bucket and save the property files in the bucket. Save the encrypted passwords in the AWS Systems Manager Parameter Store. Create an environment tag for the EC2 instances and tag the instances respectively. The application will read the needed property values from the environment-specific property file in the S3 bucket and the parameter store.

B.Create a property file for each environment to include the environment-specific configuration and an encrypted password. Check in the property files to the source repository. During deployment, use only the environment-specific property file with the application. The application will read the needed property values from the deployed property file.

C.Create a property file to include the configuration and the encrypted passwords. Check in the property file to the source repository, package the property file with the application, and deploy the application.
Create an environment tag for the EC2 instances and tag the instances respectively. The application will extract the necessary property values based on the environment tag.

D.Create a property file for each environment to include the environment-specific configuration.
Create a private Amazon S3 bucket and save the property files in the bucket. Save the passwords in the bucket with AWS KMS encryption. During deployment, the application will read the needed property values from the environment-specific property file in the S3 bucket.

AWS-DevOps-Engineer-Professional Exam Question 80

You are a Devops Engineer and are designing an Opswork stack in AWS. The company has some custom recipes that are part of their on-premise Chef configuration. These same recipes need to be run whenever an instance is launched in Opsworks. Which of the following steps need to be carried out to to ensure this requirement gets fulfilled. Choose 2 answers from the options given below

A.Ensurethe custom cookbooks option is set in Opswork stack.

B.Ensurethe custom cookbooks option is set in Opswork layer.

C.Ensurethe recipe is placed as part of the Setup Lifecycle event as part of the Layersetting.

D.Ensurethe recipe is placed as part of the Setup Lifecycle event as part of the Stacksetting.

Other Version: 4546Amazon.AWS-DevOps-Engineer-Professional.v2022-09-28.q291; 53Amazon.Lead2passed.AWS-DevOps-Engineer-Professional.v2022-06-04.by.aries.245q.pdf; 3430Amazon.AWS-DevOps-Engineer-Professional.v2022-01-03.q164; 67Amazon.Vce4plus.AWS-DevOps-Engineer-Professional.v2021-08-13.by.cyril.213q.pdf

Latest Upload: 238Amazon.SAA-C03.v2026-07-25.q425; 130SAP.C_S4PM.v2026-07-25.q43; 234Google.Professional-Data-Engineer.v2026-07-25.q215; 227Microsoft.AZ-104.v2026-07-25.q227; 198Amazon.DOP-C02.v2026-07-25.q201; 154EMC.NCP-AII.v2026-07-25.q60; 163CheckPoint.156-561.v2026-07-25.q83; 231Amazon.AIF-C01.v2026-07-24.q158; 164WGU.Applied-Algebra.v2026-07-24.q46; 161Oracle.1Z0-948.v2026-07-24.q60

AWS-DevOps-Engineer-Professional Exam Question 76

AWS-DevOps-Engineer-Professional Exam Question 77

AWS-DevOps-Engineer-Professional Exam Question 78

AWS-DevOps-Engineer-Professional Exam Question 79

AWS-DevOps-Engineer-Professional Exam Question 80

Download PDF File