AWS-DevOps-Engineer-Professional Exam Question 86

A company's web application will be migrated to AWS. The application is designed so that there is no server-side code required. As part of the migration, the company would like to improve the security of the application by adding HTTP response headers, following the Open Web Application Security Project (OWASP) secure headers recommendations.
How can this solution be implemented to meet the security requirements using best practices?
  • AWS-DevOps-Engineer-Professional Exam Question 87

    A DevOps engineer is troubleshooting deployments to a new application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones. Instances sometimes come online before they are ready, which is leading to increased error rates among users. The current health check configuration gives instances a 60-second grace period and considers instances healthy after two 200 response codes from /index.php, a page that may respond intermittently during the deployment process. The development team wants instances to come online as soon as possible.
    Which strategy would address this issue?
  • AWS-DevOps-Engineer-Professional Exam Question 88

    When thinking of AWS Elastic Beanstalk, the 'Swap Environment URLs' feature most directly aids in what?
  • AWS-DevOps-Engineer-Professional Exam Question 89

    Your company needs to automate 3 layers of a large cloud deployment. You want to be able to track this deployment's evolution as it changes over time, and carefully control any alterations. What is a good way to automate a stack to meet these requirements?
  • AWS-DevOps-Engineer-Professional Exam Question 90

    Your company has an application sitting on EC2 Instances behind an Elastic Load balancer. The EC2 Instances are being launched as part of an Autoscaling Group. Which of the following is an example of Blue Green Deployments in AWS?