Free PDF Questions For Amazon AWS-Certified-DevOps-Engineer-Professional Exam, 270QAs

At CertsProvider you can get the updated Amazon AWS-Certified-DevOps-Engineer-Professional exam questions of 2025. These actual pdf AWS Certified DevOps Engineer – Professional AWS-Certified-DevOps-Engineer-Professional questions are free for everyone. Updated AWS-Certified-DevOps-Engineer-Professional exam questions that will AWS Certified DevOps Engineer – Professional certification exam are in updated file, (PDF & Online Practice Test). For Pro users you can get premium files for some extra help to practice questions and pass exam instantly.

UNLOCK FULL
AWS-Certified-DevOps-Engineer-Professional Exam Features

In Just $49 You can Access

• All Official Question Types
• Interactive Web-Based Practice Test Software
• No Installation or 3rd Party Software Required
• Customize your practice sessions (Free Demo)
• 24/7 Customer Support

Get Full Access

Page: 1 / 54
Total Questions: 270

Questions & Answers PDF

• Question 1

  

  A company is using tagging to allocate AWS costs. The company has Amazon EC2 instances that run in Auto Scaling groups. The Amazon Elastic Block Store (Amazon EBS) volumes that are attached to the EC2 instances are being created without the appropriate cost center tags. A DevOps engineer must ensure that the new EBS volumes are properly tagged.What is the MOST efficient solution that meets this requirement?

  • Create a lifecycle hook on the autoscaling:EC2_INSTANCE_TERMINATING instance state that attaches the cost center tags to the EBS volumes.
  • Update the Auto Scaling group launch template to include the cost center tags for EBS volumes.
  • Update the Auto Scaling group to include the cost center tags. Set the PropagateAtLaunch property to true.
  • Use Tag Editor to search for EBS volumes that are missing the tags and to add the cost center tags to the volumes.

  Reveal Answer Answer: 2 Next Question

• Question 2

  

  A company's legacy application uses IAM user credentials to access resources in the company's AWS Organizations organization. A DevOps engineer needs to ensure new IAM users cannot be created unless the employee creating the IAM user is on an exception list.Which solution will meet these requirements?

  • Attach an Organizations SCP with an explicit deny for all iam:CreateAccessKey actions with a condition that excludes StringNotEquals for aws:username with a value of the exception list.
  • Attach an Organizations SCP with an explicit deny for all iam:CreateUser actions with a condition that includes StringEquals for aws:username with a value of the exception list.
  • Create an Amazon EventBridge (Amazon CloudWatch Events) rule with a pattern that matches the iam:CreateAccessKey action with an AWS Lambda function target. The function will check the user name account against an exception list. If the user is not in the exception list, the function will delete the user.
  • Create an Amazon EventBridge (Amazon CloudWatch Events) rule with a pattern that matches the iam:CreateUser action with an AWS Lambda function target. The function will check the user name and account against an exception list. If the user is not in the exception list, the function will delete the user.

  Reveal Answer Answer: 1 Next Question

• Question 3

  

  A company is using AWS Organizations and wants to implement a governance strategy with the following requirements:* AWS resource access is restricted to the same two Regions for all accounts.* AWS services are limited to a specific group of authorized services for all accounts.* Authentication is provided by Active Directory.* Access permissions are organized by job function and are identical in each account.Which solution will meet these requirements?

  • Establish an organizational unit (OU) with group policies in the master account to restrict Regions and authorized services. Use AWS Cloud Formation StackSets to provision roles with permissions for each job function, including an IAM trust policy for IAM identity provider authentication in each account.
  • Establish a permission boundary in the master account to restrict Regions and authorized services. Use AWS CloudFormation StackSet to provision roles with permissions for each job function, including an IAM trust policy for IAM identity provider authentication in each account.
  • Establish a service control policy in the master account to restrict Regions and authorized services. Use AWS Resource Access Manager to share master account roles with permissions for each job function, including AWS SSO for authentication in each account.
  • Establish a service control policy in the master account to restrict Regions and authorized services. Use CloudFormation StackSet to provision roles with permissions for each job function, including an IAM trust policy for IAM identity provider authentication in each account.

  Reveal Answer Answer: 4 Next Question

• Question 4

  

  A development team manages website deployments using AWS CodeDeploy blue/green deployments. The application is running on Amazon EC2 instances behind an Application Load Balancer in an Auto Scaling group.When deploying a new revision, the team notices the deployment eventually fails, but it takes a long time to fail. After further inspection, the team discovers the AllowTrafflc lifecycle event ran for an hour and eventually failed without providing any other information. The team wants to ensure failure notices are delivered more quickly while maintaining application availability even upon failure.Which combination of actions should be taken to meet these requirements? (Select TWO.)

  • Change the deployment configuration to CodeDeployDefault.AIIAtOnce to speed up the deployment process by deploying to all of the instances at the same time.
  • Create a CodeDeploy trigger for the deployment failure event and make the deployment fail as soon as a single health check failure is detected.
  • Reduce the HealthChecklntervalSeconds and UnhealthyThresholdCount values within the target group health checks to decrease the amount of time it takes for the application to be considered unhealthy.
  • Use the appspec.yml file to run a script on the AllowTraffic hook to perform lighter health checks on the application instead of making CodeDeploy wait for the target group health checks to pass.
  • Use the appspec.yml file to run a script on the BeforeAllowTraffic hook to perform health checks on the application and fail the deployment if the health checks performed by the script are not successful.

  Reveal Answer Answer: 2,,4 Next Question

• Question 5

  

  A company maintains a stateless web application that is experiencing inconsistent traffic. The company uses AWS CloudFormation to deploy the application. The application runs on Amazon EC2 On-Demand Instances behind an Application Load Balancer (ALB). The instances run across multiple Availability Zones.The company wants to include the use of Spot Instances while continuing to use a small number of On-Demand Instances to ensure that the application remains highly available.What is the MOST cost-effective solution that meets these requirements?

  • Add a Spot block resource to the AWS CloudFormation template. Use the diversified allocation strategy with step scaling behind the ALB.
  • Add a Spot block resource to the AWS CloudFormation template. Use the lowest-price allocation strategy with target tracking scaling behind the ALB.
  • Add a Spot Fleet resource to the AWS CloudFormation template. Use the capacity-optimized allocation strategy with step scaling behind the ALB.
  • Add a Spot Fleet resource to the AWS CloudFormation template. Use the diversified allocation strategy with scheduled scaling behind the ALB

  Reveal Answer Answer: 3 Next Question

Page: 1 / 54
Total Questions: 270

Previous Page Next Page

Share Your Thoughts: Customer Reviews & Feedback on Our Products

Comments