AWS-DevOps-Engineer-Professional Exam Question 31
If Ansible encounters a resource that does not meet the requirements specified in the play it makes the necessary changes to the resource; however if the resource is already in the desired state Ansible will do nothing. This is an example of which methodology?
AWS-DevOps-Engineer-Professional Exam Question 32
You have an Auto Scaling group of Instances that processes messages from an Amazon Simple Queue Service
(SQS) queue. The group scales on the size of the queue. Processing Involves calling a third-party web service.
The web service is complaining about the number of failed and repeated calls it is receiving from you. You
have noticed that when the group scales in, instances are being terminated while they are processing. What
cost-effective solution can you use to reduce the number of incomplete process attempts?
(SQS) queue. The group scales on the size of the queue. Processing Involves calling a third-party web service.
The web service is complaining about the number of failed and repeated calls it is receiving from you. You
have noticed that when the group scales in, instances are being terminated while they are processing. What
cost-effective solution can you use to reduce the number of incomplete process attempts?
AWS-DevOps-Engineer-Professional Exam Question 33
Which of the following are true with regard to Opsworks stack Instances? Choose 3 answers from the options given below.
AWS-DevOps-Engineer-Professional Exam Question 34
A company uses AWS CodePipeline to manage and deploy infrastructure as code. The infrastructure is defined in AWS CloudFormation templates and is primarily comprised of multiple Amazon EC2 instances and Amazon RDS databases. The Security team has observed many operators creating inbound security group rules with a source CIDR of 0 0 0 0/0 and would like to proactively stop the deployment of rules with open CIDRs The DevOps Engineer will implement a predeptoyment step that runs some security checks over the CloudFormation template before the pipeline processes it. This check should allow only inbound security group rules with a source CIDR of 0.0.0.0/0 if the rule has the description "Security Approval Ref XXXXX (where XXXXX is a preallocated reference). The pipeline step should fail if this condition is not met and the deployment should be blocked How should this be accomplished?
AWS-DevOps-Engineer-Professional Exam Question 35
You need to deploy a new application version to production. Because the deployment is high-risk, you
need to roll the new version out to users over a number of hours, to make sure everything is working
correctly. You need to be able to control the proportion of users seeing the new version of the application
down to the percentage point.
You use ELB and EC2 with Auto Scaling Groups and custom AMIs with your code pre-installed assigned
to Launch Configurations. There are no database-level changes during your deployment. You have been
told you cannot spend too much money, so you must not increase the number of EC2 instances much at
all during the deployment, but you also need to be able to switch back to the original version of code
quickly if something goes wrong. What is the best way to meet these requirements?
need to roll the new version out to users over a number of hours, to make sure everything is working
correctly. You need to be able to control the proportion of users seeing the new version of the application
down to the percentage point.
You use ELB and EC2 with Auto Scaling Groups and custom AMIs with your code pre-installed assigned
to Launch Configurations. There are no database-level changes during your deployment. You have been
told you cannot spend too much money, so you must not increase the number of EC2 instances much at
all during the deployment, but you also need to be able to switch back to the original version of code
quickly if something goes wrong. What is the best way to meet these requirements?

