Online Access Free Amazon.AWS-DevOps-Engineer-Professional.v2022-01-20.q245 Practice Test (Page 37)

AWS-DevOps-Engineer-Professional Exam Question 176

A company uses AWS Organizations lo manage multiple accounts. Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant. A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present.
Which solution will accomplish this?

A.Create an SCP in Organizations. Set the policy to prevent the launch of Amazon EC2 instances without encryption on the EBS volumes using a conditional expression Apply the SCP to all AWS accounts. Use Amazon Athena to analyze the AWS CloudTrail output, looking for events that deny an ec2: Run instances action.

B.Create an AWS Config organizational rule lo check whether EBS encryption is enabled and deploy the rule using the AWS CLI. Create and apply an SCP lo prohibit slopping and deleting AWS Config across the organization.

C.Deploy an IAM role to all accounts from a single trusted account. Build a pipeline with AWS CodePipeline with a stage m AWS Lambda to assume (he IAM role, and list all EBS volumes in the account Publish a report to Amazon S3.

D.Create an AWS CloudFormation template that defines an AWS Inspector rule to check whether EBS encryption is enabled. Save the template to an Amazon S3 bucket that has been shared with all accounts within the company. Update the account creation script pointing to the CloudFormation template in Amazon S3.

AWS-DevOps-Engineer-Professional Exam Question 177

A rapidly growing company wants to scale for Developer demand for AWS development environments.
Development environments are created manually in the AWS Management Console. The Networking team uses AWS CloudFormation to manage the networking infrastructure, exporting stack output values for the Amazon VPC and all subnets. The development environments have common standards, such as Application Load Balancers, Amazon EC2 Auto Scaling groups, security groups, and Amazon DynamoDB tables.
To keep up with the demand, the DevOps Engineer wants to automate the creation of development environments. Because the infrastructure required to support the application is expected to grow, there must be a way to easily update the deployed infrastructure. CloudFormation will be used to create a template for the development environments.
Which approach will meet these requirements and quickly provide consistent AWS environments for Developers?

A.Use Fn:ImportValueintrinsic functions in the Resources section of the template to retrieve Virtual Private Cloud (VPC) and subnet values. Use CloudFormation StackSets for the development environments, using the Count inputparameter to indicate the number of environments needed. use the UpdateStackSetcommand to update existing development environments.

B.Use nested stacks to define common infrastructure components. To access the exported values, use TemplateURLto reference the Networking team's template. To retrieve Virtual Private Cloud (VPC) and subnet values, use Fn::ImportValueintrinsic functions in the Parameters section of the master template. Use the CreateChangeSetand ExecuteChangeSetcommands to update existing development environments.

C.Use nested stacks to define common infrastructure components. Use Fn::ImportValueintrinsic functions with the resources of the nested stack to retrieve Virtual Private Cloud (VPC) and subnet values.
Use the CreateChangeSetand ExecuteChangeSetcommands to update existing development environments.

D.Use Fn:ImportValueintrinsic functions in the Parameters section of the master template to retrieve Virtual Private Cloud (VPC) and subnet values. Define the development resources in the order they need to be created in the CloudFormation nested stacks. Use the CreateChangeSetand ExecuteChangeSet commands to update existing development environments.

AWS-DevOps-Engineer-Professional Exam Question 178

Which of the following CLI commands is used to spin up new EC2 Instances?

A.awsec2 run-instances
B- awsec2 create-instances

B.awsec2 new-instances
D- awsec2 launch-instances

AWS-DevOps-Engineer-Professional Exam Question 179

A company requires that its internally facing web application be nighty available The architecture is made up of one Amazon EC2 web server instance and one NAT instance that provides outbound internet access for updates and accessing public data Which combination of architecture adjustments should the company implement to achieve high availability?
(Select TWO.)

A.Configure an Application Load Balancer in front of the EC2 instance Configure Amazon CloudWatch alarms to recover the EC2 instance upon host failure

B.Add the NAT instance to an EC2 Auto Scaling group that spans multiple Availability Zones Update the route tables

C.Replace the NAT instance with a NAT gateway in each Availability Zone Update the route tables

D.Create additional EC2 instances spanning multiple Availability Zones Add an Application Load Balancer to split the load between them

E.Replace the NAT instance with a NAT gateway that spans multiple Availability Zones Update the route tables

AWS-DevOps-Engineer-Professional Exam Question 180

You are creating an application which stores extremely sensitive financial information. All information in the system must be encrypted at rest and in transit. Which of these is a violation of this policy?

A.ELB SSL termination.

B.ELB Using Proxy Protocol v1.

C.CloudFront Viewer Protocol Policy set to HTTPS redirection.

D.Telling S3 to use AES256 on the server-side.

Other Version: 4546Amazon.AWS-DevOps-Engineer-Professional.v2022-09-28.q291; 53Amazon.Lead2passed.AWS-DevOps-Engineer-Professional.v2022-06-04.by.aries.245q.pdf; 3430Amazon.AWS-DevOps-Engineer-Professional.v2022-01-03.q164; 67Amazon.Vce4plus.AWS-DevOps-Engineer-Professional.v2021-08-13.by.cyril.213q.pdf

Latest Upload: 238Amazon.SAA-C03.v2026-07-25.q425; 130SAP.C_S4PM.v2026-07-25.q43; 234Google.Professional-Data-Engineer.v2026-07-25.q215; 227Microsoft.AZ-104.v2026-07-25.q227; 198Amazon.DOP-C02.v2026-07-25.q201; 154EMC.NCP-AII.v2026-07-25.q60; 163CheckPoint.156-561.v2026-07-25.q83; 231Amazon.AIF-C01.v2026-07-24.q158; 164WGU.Applied-Algebra.v2026-07-24.q46; 161Oracle.1Z0-948.v2026-07-24.q60

AWS-DevOps-Engineer-Professional Exam Question 176

AWS-DevOps-Engineer-Professional Exam Question 177

AWS-DevOps-Engineer-Professional Exam Question 178

AWS-DevOps-Engineer-Professional Exam Question 179

AWS-DevOps-Engineer-Professional Exam Question 180

Download PDF File