Online Access Free Amazon.AWS-DevOps-Engineer-Professional.v2022-01-20.q245 Practice Test (Page 25)

AWS-DevOps-Engineer-Professional Exam Question 116

A company indexes all of its Amazon CloudWatch Logs on Amazon ES and uses Kibana to view a dashboard for actionable insight. The company wants to restrict user access to Kibana by user
Which actions can a DevOps Engineer take to meet this requirement? (Select TWO.)

A.Create a proxy server with AWS IAM user and restrict access of the Amazon ES endpoint to the IAM user

B.Use AWS SSO to offer user name and password protection for Kibana

C.Create a proxy server with user authentication in an Auto Scaling group and restrict access of the Amazon ES endpoint to an Auto Scaling group tag

D.Use Amazon Cognito to offer user name and password protection for Kibana

E.Create a proxy server with user authentication and an Elastic IP address and restrict access of the Amazon ES endpoint to the IP address

AWS-DevOps-Engineer-Professional Exam Question 117

You are doing a load testing exercise on your application hosted on AWS. While testing your Amazon RDS
MySQL DB instance, you notice that when you hit 100% CPU utilization on it, your application becomes non-
responsive. Your application is read-heavy. What are methods to scale your data tier to meet the application's
needs? Choose three answers from the options given below

A.Add Amazon RDS DB read replicas, and have your application direct read queries to them.

B.Add your Amazon RDS DB instance to an Auto Scalinggroup and configure your Cloud Watch metric
based on CPU utilization.

C.Use an Amazon SQS queue to throttle data going to the Amazon RDS DB instance.

D.Use ElastiCache in front of your Amazon RDS DB to cache common queries.

E.Shard your data set among multiple Amazon RDS DB instances.

F.Enable Multi-AZ for your Amazon RDS DB instance.

Correct Answer: A,D,E

Explanation
Amazon RDS Read Replicas provide enhanced performance and durability for database (DB) instances. This
replication feature makes it easy to elastically scale out
beyond the capacity constraints of a single DB Instance for read-heavy database workloads. You can create
one or more replicas of a given source DB Instance and
serve high-volume application read traffic from multiple copies of your data, thereby increasing aggregate read
throughput
For more information on Read Replica's please refer to the below link:
https://aws.amazon.com/rds/details/read-replicas/
Sharding is a common concept to split data across multiple tables in a database For more information on
sharding please refer to the below link:
* https://forums.awsa mazon.com/thread jspa?messagelD=203052
Amazon OastiCache is a web service that makes it easy to deploy, operate, and scale an in-memory data store
or cache in the cloud. The service improves the performance of web applications by allowing you to retrieve
information from fast, managed, in-memory data stores, instead of relying entirely on slower disk-based
databases
Amazon OastiCache is an in-memory key/value store that sits between ycbetappiicipiJGra arcdalie data store
(database) that it accesses. Whenever your application requests data, it first makes the request to the
DastiCache cache. If the data exists in the cache and is current, OastiCache returns the data to your
application. If the data does not exist in the cache, or the data in the cache has expired, your application
requests the data from your data store which returns the data to your application. Your application then writes
the data received from the store to the cache so it can be more quickly retrieved next time it is requested. For
more information on Elastic Cache please refer to the below link:
* https://aws.amazon.com/elasticache/
Option B is not an ideal way to scale a database
Option C is not ideal to store the data which would go into a database because of the message size
Option F is invalid because Multi-AZ feature is only a failover option

AWS-DevOps-Engineer-Professional Exam Question 118

A company discovers that some IAM users have been storing their AWS access keys in configuration files that have been pushed to a Git repository hosting service. Which solution will require the LEAST amount of management overhead while preventing the exposed AWS access keys from being used?

A.Create an AWS Config rule to detect when a key is exposed online. Haw AWS Config send change notifications to an SNS topic. Configure an AWS Lambda function that is subscribed to the SNS topic to check the notification sent by AWS Config, and then disable the access key so it cannot be used.

B.Use Amazon Inspector to detect when a key has been exposed online. Have Amazon Inspector send a notification to an Amazon SNS topic when a key has been exposed. Create an AWS Lambda function subscribed to the SNS topic to disable the IAM user to whom the key belongs, and then delete the key so that it cannot be used.

C.Build an application that will create a list of all AWS access keys in the account and search each key on Git repository hosting services. If a match is found, configure the application to disable the associated access key. Then deploy the application to an AWS Elastic Beanstalk worker environment and define a periodic task to invoke the application every hour.

D.Configure AWS Trusted Advisor and create an Amazon CloudWatch Events rule that uses Trusted Advisor as the event source. Configure the CloudWatch Events rule to invoke an AWS Lambda function as the target. If the Lambda function finds the exposed access keys, then have it disable the access key so that it cannot be used.

AWS-DevOps-Engineer-Professional Exam Question 119

A company is deploying a container-based application using AWS CodeBuild. The Security team mandates that all containers are scanned for vulnerabilities prior to deployment using a password- protected endpoint. All sensitive information must be stored securely.
Which solution should be used to meet these requirements?

A.Use the AWS Encryption SDK to encrypt the password and embed in the buildspec.yml file as a variable under the secrets mapping.
Attach a policy to CodeBuild to enable access to the required decryption key.

B.Import the password into an AWS CloudHSM key.
Reference the CloudHSM key in the buildpec.yml file as an environment variable under the variables mapping.
Reference the environment variable to initiate scanning.

C.Encrypt the password using AWS KMS.
Store the encrypted password in the buildspec.yml file as an environment variable under the variables mapping.
Reference the environment variable to initiate scanning.

D.Store the password in the AWS Systems Manager Parameter Store as a secure string.
Add the Parameter Store key to the buildspec.yml file as an environment variable under the parameter-store mapping.
Reference the environment variable to initiate scanning.

AWS-DevOps-Engineer-Professional Exam Question 120

You run a large number of applications on Amazon EC2 instances. Each application has associated metadata, such as cost center, support contact, and application ID.
Many applications usually co-exist on each Amazon EC2 instance, so the amount of metadata per instance can range from 10 to 200 items.
The customer wants to be able to quickly access this metadata using an API without logging into the instances.
Which of the following options will satisfy their requirements? Choose 2 answers

A.Create compound Amazon EC2 tags for the metadata items, where multiple items are joined together in individual tags, and associate them with the Amazon EC2 instances.
Access the metadata by using the ec2-describe-tags API call.

B.Create a DynamoDB table to hold the metadata, and associate it with the Amazon EC2 instance IDs running the applications.
Access the metadata by querying the database via the DynamoDB API.

C.As part of the Amazon EC2 instance bootstrapping process, add the metadata to the Amazon EC2 user data.
Access the metadata by accessing its loopback address from a management instance in the same VPC.

D.As part of the Amazon EC2 Instance bootstrapping process, add the metadata to the Amazon EC2 user data.
Access the metadata by using the ec2-describe-instance API call.

E.Create individual Amazon EC2 tags for each metadata item, and associate them with the Amazon EC2 instances.
Access the metadata by using the ec2-describe-instance API call.

Other Version: 4546Amazon.AWS-DevOps-Engineer-Professional.v2022-09-28.q291; 53Amazon.Lead2passed.AWS-DevOps-Engineer-Professional.v2022-06-04.by.aries.245q.pdf; 3431Amazon.AWS-DevOps-Engineer-Professional.v2022-01-03.q164; 67Amazon.Vce4plus.AWS-DevOps-Engineer-Professional.v2021-08-13.by.cyril.213q.pdf

Latest Upload: 251Amazon.SAA-C03.v2026-07-25.q425; 139SAP.C_S4PM.v2026-07-25.q43; 256Google.Professional-Data-Engineer.v2026-07-25.q215; 236Microsoft.AZ-104.v2026-07-25.q227; 214Amazon.DOP-C02.v2026-07-25.q201; 154EMC.NCP-AII.v2026-07-25.q60; 170CheckPoint.156-561.v2026-07-25.q83; 231Amazon.AIF-C01.v2026-07-24.q158; 164WGU.Applied-Algebra.v2026-07-24.q46; 161Oracle.1Z0-948.v2026-07-24.q60

AWS-DevOps-Engineer-Professional Exam Question 116

AWS-DevOps-Engineer-Professional Exam Question 117

AWS-DevOps-Engineer-Professional Exam Question 118

AWS-DevOps-Engineer-Professional Exam Question 119

AWS-DevOps-Engineer-Professional Exam Question 120

Download PDF File