Online Access Free Amazon.AWS-DevOps-Engineer-Professional.v2022-01-20.q245 Practice Test (Page 42)

AWS-DevOps-Engineer-Professional Exam Question 201

An Information Security policy requires that all publicly accessible systems be patched with critical OS security patches within 24 hours of a patch release. All instances are tagged with the Patch Group key set to 0. Two new AWS Systems Manager patch baselines for Windows and Red Hat Enterprise Linux (RHEL) with zero-day delay for security patches of critical severity were created with an auto-approval rule. Patch Group 0 has been associated with the new patch baselines.
Which two steps will automate patch compliance and reporting? (Select TWO.)

A.Create an AWS Systems Manager Maintenance Window and add a target with Patch Group 0. Add a task that runs the AWS-InstallWindowsUpdates document with a daily schedule.

B.Create an AWS Systems Manager Maintenance Window with a daily schedule and add a target with Patch Group 0. Add a task that runs the AWS-RunPatchBaseline document with the Install action.

C.Create an AWS Systems Manager State Manager configuration. Associate the AWS- RunPatchBaseline task with the configuration and add a target with Patch Group 0.

D.Create an AWS Systems Manager Maintenance Window and add a target with Patch Group 0. Add a task that runs the AWS-ApplyPatchBaseline document with a daily schedule.

E.Use the AWS Systems Manager Run Command to associate the AWS-ApplyPatchBaseline document with instances tagged with Patch Group 0.

AWS-DevOps-Engineer-Professional Exam Question 202

A company has thousands of Amazon EC2 instances as well as hundreds of virtual machines on-premises. Developers routinely sign in to the console for on-premises systems to perform troubleshooting. The developers want to sign in to AWS instances to run performance tools, but are unable to due to the lack of a central console logging system. A DevOps engineer wants to ensure that console access is logged on all systems.
Which combination of steps will meet these requirements? (Select TWO.)

A.Enable AWS Systems Manager Session Manager logging to AWS CloudTrail. Direct developers to continue normal sign-in procedures for on-premises. Use Session Manager for AWS instances.

B.Set up a Site-to-Site VPN connection between the on-premises and AWS networks. Set up a bastion instance to allow developers to sign in to the AWS instances.

C.Attach a role to all AWS instances that contains the appropriate permissions. Create an AWS Systems Manager managed-instance activation. Install and configure Systems Manager Agent on on-premises machines.

D.Install and configure an Amazon CloudWatch Logs agent on all systems. Create an AWS Systems Manager managed-instance activation.

E.Enable AWS Systems Manager Session Manager logging to an Amazon S3 bucket. Direct developers to connect to the systems with Session Manager only.

AWS-DevOps-Engineer-Professional Exam Question 203

You are in charge of designing Cloudformation templates for your company. One of the key requirements is to ensure that if a Cloudformation stack is deleted, a snapshot of the relational database is created which is part of the stack. How can you achieve this in the best possible way?

A.Create a snapshot of the relational database beforehand so that when the cloudformation stack is deleted, the snapshot of the database will be present.

B.Use the Update policy of the cloudformation template to ensure a snapshot is created of the relational database.

C.Use the Deletion policy of the cloudformation template to ensure a snapshot is created of the relational database.

D.Create a new cloudformation template to create a snapshot of the relational database.

AWS-DevOps-Engineer-Professional Exam Question 204

The Deployment team has grown substantially in recent months and so has the number of projects that use separate code repositories. The current process involves configuring AWS CodePipeline manually, and there have been service limit alerts for the count of Amazon S3 buckets.
Which pipeline option will reduce S3 bucket sprawl alerts?

A.Create a new pipeline in a different region for each project to bypass the service limits for S3 buckets in a single region.

B.Create a new pipeline and for S3 bucket for each project by using the AWS API or AWS CLI to bypass the service limits for S3 buckets in a single account.

C.Create new pipelines by using the AWS API or AWS CLI, and configure them to use a single global S3 bucket with separate prefixes for each project.

D.Combine the multiple separate code repositories into a single one, and deploy using a global AWS CodePipeline that has logic for each project.

AWS-DevOps-Engineer-Professional Exam Question 205

Your company has an application hosted on an Elastic beanstalk environment. You have been instructed that whenever application changes occur and new versions need to be deployed that the fastest deployment approach is employed. Which of the following deployment mechanisms will fulfil this requirement?

A.Allatonce

B.Rolling

C.Immutable

D.Rollingwith batch

Other Version: 4546Amazon.AWS-DevOps-Engineer-Professional.v2022-09-28.q291; 53Amazon.Lead2passed.AWS-DevOps-Engineer-Professional.v2022-06-04.by.aries.245q.pdf; 3430Amazon.AWS-DevOps-Engineer-Professional.v2022-01-03.q164; 67Amazon.Vce4plus.AWS-DevOps-Engineer-Professional.v2021-08-13.by.cyril.213q.pdf

Latest Upload: 228Amazon.SAA-C03.v2026-07-25.q425; 130SAP.C_S4PM.v2026-07-25.q43; 224Google.Professional-Data-Engineer.v2026-07-25.q215; 220Microsoft.AZ-104.v2026-07-25.q227; 187Amazon.DOP-C02.v2026-07-25.q201; 154EMC.NCP-AII.v2026-07-25.q60; 153CheckPoint.156-561.v2026-07-25.q83; 231Amazon.AIF-C01.v2026-07-24.q158; 164WGU.Applied-Algebra.v2026-07-24.q46; 161Oracle.1Z0-948.v2026-07-24.q60

AWS-DevOps-Engineer-Professional Exam Question 201

AWS-DevOps-Engineer-Professional Exam Question 202

AWS-DevOps-Engineer-Professional Exam Question 203

AWS-DevOps-Engineer-Professional Exam Question 204

AWS-DevOps-Engineer-Professional Exam Question 205

Download PDF File