Regenerate DOP-C01 Real Exam For AWS Certified DevOps Engineer- Professional Certification

NEW QUESTION 1
You meet once per month with your operations team to review the past month's data. During the meeting, you realize that 3 weeks ago, your monitoring system which pings over HTTP from outside AWS recorded a large spike in latency on your 3-tier web service API. You use DynamoDB for the database layer, ELB, EBS, and EC2 for the business logic tier, and SQS, ELB, and EC2 for the presentation layer. Which of the following techniques will NOT help you figure out what happened?

• A. Check your CloudTrail log history around the spike's time for any API calls that caused slowness.
• B. Review CloudWatch Metrics for one minute interval graphs to determine which components) slowed the system down.
• C. Review your ELB access logs in S3 to see if any ELBs in your system saw the latency.
• D. Analyze your logs to detect bursts in traffic at that time.

Answer: B

Explanation:
The Cloudwatch metric retention is as follows. If the data points are of a one minute interval, then the graphs will not be available in Cloudwatch
• Data points with a period of less than 60 seconds are available for 3 hours. These data points are high-resolution custom metrics.
• Data points with a period of 60 seconds (1 minute) are available for 15 days
• Data points with a period of 300 seconds (5 minute) are available for 63 days
• Data points with a period of 3600 seconds (1 hour) are available for 455 days (15 months) For more information on Cloudwatch metrics, please visit the below U RL:
• http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_co ncepts.html

NEW QUESTION 2
You have the following application to be setup in AWS
1) A web tier hosted on EC2 Instances
2) Session data to be written to DynamoDB
3) Log files to be written to Microsoft SQL Server
How can you allow an application to write data to a DynamoDB table?

• A. Add an 1AM user to a running EC2 instance.
• B. Add an 1AM user that allows write access to the DynamoDB table.
• C. Create an 1AM role that allows read access to the DynamoDB table.
• D. Create an 1AM role that allows write access to the DynamoDB table.

Answer: D

Explanation:
I AM roles are designed so that your applications can securely make API requests from your instances, without requiring you to manage the security credentials that
the applications use. Instead of creating and distributing your AWS credentials For more information on 1AM Roles please refer to the below link:
http://docs.aws.amazon.com/AWSCC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

NEW QUESTION 3
You are a Devops Engineer for your company. Your company is using Opswork stack to rollout a collection of web instances. When the instances are launched, a configuration file need to be setup prior to the launching of the web application hosted on these instances. Which of the following steps would you carry out to ensure this requirement gets fulfilled. Choose 2 answers from the options given below

• A. Ensure that the Opswork stack is changed to use the AWS specific cookbooks
• B. Ensure that the Opswork stack is changed to use custom cookbooks
• C. Configure a recipe which sets the configuration file and add it to the ConfigureLifeCycle Event of the specific web layer.
• D. Configure a recipe which sets the configuration file and add it to the Deploy LifeCycleEvent of the specific web layer.

Answer: BC

Explanation:
This is mentioned in the AWS documentation Configure
This event occurs on all of the stack's instances when one of the following occurs:
• An instance enters or leaves the online state.
• You associate an Elastic IP address with an instance or disassociate one from an instance.
• You attach an Elastic Load Balancing load balancer to a layer, or detach one from a layer.
For example, suppose that your stack has instances A, B, and C, and you start a new instance, D. After D has finished running its setup recipes, AWS OpsWorks Stacks triggers the Configure event on A, B, C, and D. If you subsequently stop A, AWS Ops Works Stacks triggers the Configure event on B, C, and
D. AWS OpsWorks Stacks responds to the Configure event by running each layer's Configure recipes, which update the instances' configuration to reflect the current set of online instances. The Configure event is therefore a good time to regenerate configuration files. For example, the HAProxy Configure recipes reconfigure the load balancer to accommodate any changes in the set of online application server instances.
You can also manually trigger the Configure event by using the Configure stack command. For more information on Opswork lifecycle events, please refer to the below URL:
• http://docs.aws.a mazon.com/opsworks/latest/userguide/workingcookbook-events.htm I

NEW QUESTION 4
You were just hired as a DevOps Engineer for a startup. Your startup uses AWS for 100% of their infrastructure. They currently have no automation at all for deployment, and they have had many failures while trying to deploy to production.The company has told you deployment process risk mitigation is the most important thing now, and you have a lot of budget for tools and AWS resources.
Their stack includes a 2-tier API with data stored in DynamoDB or S3, depending on type. The Compute layer is EC2 in Auto Scaling Groups. They use Route53 for DNS pointing to an ELB. An ELB balances load across the EC2 instances. The scaling group properly varies between 4 and 12 EC2 servers. Which of the following approaches, given this company's stack and their priorities, best meets the company's needs?

• A. Model the stack in AWS Elastic Beanstalk as a single Application with multiple Environment
• B. Use Elastic Beanstalk's Rolling Deploy option to progressively roll out application code changes when promoting across environments.
• C. Model the stack in three CloudFormation templates: Data layer, compute layer, and networking laye
• D. Write stack deployment and integration testing automation following Blue-Green methodologie
• E. •>/
• F. Model the stack in AWS OpsWorks as a single Stack, with 1 compute layer and its associated EL
• G. Use Chef and App Deployments to automate Rolling Deployment.
• H. Model the stack in 1 CloudFormation template, to ensure consistency and dependency graph resolutio
• I. Write deployment and integration testingautomation following Rolling Deployment methodologies.

Answer: B

Explanation:
Here you are using 2 of the best practices for deployment, one is Blue Green Deployments and the other is using Nested Cloudformation stacks.
The AWS Documentation mentions the below on nested stacks
As your infrastructure grows, common patterns can emerge in which you declare the same components in each of your templates. You can separate out these common components and create dedicated templates for them. That way, you can mix and match different templates but use nested stacks to create a single,
unified stack. Nested stacks are stacks that create other stacks. To create nested stacks, use the AWS::CloudFormation::Stackresource in your template to reference other templates.
For more information on Cloudformation best practises, please visit the link:
• http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/best-practices. html For more information on Blue Green Deployment, please visit the link:
• https://dOawsstatic.com/whitepapers/AWS_Blue_Green_Deployments.pdf

NEW QUESTION 5
Your company owns multiple AWS accounts. There is currently one development and one production account. You need to grant access to the development team to an S3 bucket in the production account. How can you achieve this?

• A. Createan 1AM user in the Production account that allows users from the Developmentaccount (the trusted account) to access the S3 bucket in the Productionaccount.
• B. When creating the role, define the Development account as a trustedentity and specify a permissions policy that allows trusted users to update theS3 bucket.
• C. Use web identity federation with a third-partyidentity provider with AWS STS to grant temporary credentials and membershipinto the production 1AM user.
• D. Createan 1AM cross account role in the Production account that allows users from theDevelopment account to access the S3 bucket in the Production account.

Answer: D

Explanation:
The AWS Documentation mentions the following on cross account roles
You can use AWS Identity and Access Management (1AM) roles and AWS Security Token Service (STS) to set up cross-account access between AWS accounts. When you assume an 1AM role in another AWS account to obtain cross-account access to services and resources in that account, AWS CloudTrail logs the cross-account activity. For more information on Cross account roles, please visit the below URL
• http://docs.aws.a mazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.htm I

NEW QUESTION 6
You have implemented a system to automate deployments of your configuration and application dynamically after an Amazon EC2 instance in an Auto Scaling group is launched. Your system uses a configuration management tool that works in a standalone configuration, where there is no master node. Due to the volatility of application load, new instances must be brought into service within three minutes of the launch of the instance operating system. The deployment stages take the following times to complete:
1) Installing configuration management agent: 2mins
2) Configuring instance using artifacts: 4mins
3) Installing application framework: 15mins
4) Deploying application code: 1min
What process should you use to automate the deployment using this type of standalone agent configuration?

• A. Configureyour Auto Scaling launch configuration with an Amazon EC2 UserData script toinstall the agent, pull configuration artifacts and application code from anAmazon S3 bucket, and then execute the agent to configure the infrastructureand application.
• B. Builda custom Amazon Machine Image that includes all components pre-installed,including an agent, configuration artifacts, application frameworks, and code.Create a startup script that executes the agent to configure the system onstartu
• C. *t
• D. Builda custom Amazon Machine Image that includes the configuration management agentand application framework pre-installed.Configure your Auto Scaling launchconfiguration with an Amazon EC2 UserData script to pull configurationartifacts and application code from an Amazon S3 bucket, and then execute theagent toconfigure the system.
• E. Createa web service that polls the Amazon EC2 API to check for new instances that arelaunched in an Auto Scaling grou
• F. When it recognizes a new instance, execute aremote script via SSH to install the agent, SCP the configuration artifacts andapplication code, and finally execute the agent to configure the system

Answer: B

Explanation:
Since the new instances need to be brought up in 3 minutes, hence the best option is to pre-bake all the components into an AMI. If you try to user the User Data option, it will just take time, based on the time mentioned in the question to install and configure the various components.
For more information on AMI design please see the below link:
• https://aws.amazon.com/answers/configuration-management/aws-ami-design/

NEW QUESTION 7
Which of the following are true with regard to Opsworks stack Instances? Choose 3 answers from the options given below.

• A. Astacks instances can be a combination of both Linux and Windows based operatingsystems.
• B. You can use EC2 Instances that were createdoutisde the boundary of Opswork.
• C. Youcanuseinstancesrunningonyourownhardware.
• D. Youcan start and stop instances manually.

Answer: BCD

Explanation:
The AWS Documentation mentions the following
1) You can start and stop instances manually or have AWS Ops Works Stacks automatically scale the number of instances. You can use time-based automatic scaling with any stack; Linux stacks also can use load-based scaling.
2) In addition to using AWS OpsWorks Stacks to create Amazon L~C2 instances, you can also register instances with a Linux stack that were created outside of AWS Ops Works Stacks. This includes Amazon CC2 instances and instances running on your own hardware. However, they must be running one of the supported Linux distributions. You cannot register Amazon CC2 or on-premises Windows instances.
3) A stack's instances can run either Linux or Windows. A stack can have different Linux versions or distributions on different instances, but you cannot mix Linux and Windows instances.
For more information on Opswork instances, please visit the below url http://docs.aws.a mazon.co m/o psworks/latest/usergu ide/workinginstances-os. html

NEW QUESTION 8
You work for a company that automatically tags photographs using artificial neural networks (ANNs), which run on GPUs using C++. You receive millions of images at a time, but only 3 times per day on average. These images are loaded into an AWS S3 bucket you control for you in a batch, and then the customer publishes a JSON-formatted manifest into another S3 bucket you control as well. Each image takes 10 milliseconds to process using a full GPU. Your neural network software requires 5 minutes to bootstrap. Image tags are JSON objects, and you must publish them to an S3 bucket. Which of these is the best system architectures for this system?

• A. Create an OpsWorks Stack with two Layer
• B. The first contains lifecycle scripts for launching and bootstrapping an HTTP API on G2 instances for image processing, and the second has an always-on instance which monitors the S3 manifest bucket for new file
• C. When a new file is detected, request instances to boot on the artificial neural network laye
• D. When the instances are booted and the HTTP APIs are up, submit processing requests to individual instances.
• E. Make an S3 notification configuration which publishes to AWS Lambda on the manifest bucke
• F. Make the Lambda create a CloudFormation Stack which contains the logic to construct an autoscaling worker tier of EC2 G2 instances with the artificial neural network code on each instanc
• G. Create an SQS queue of the images in the manifes
• H. Tear the stack down when the queue is empty.
• I. Deploy your artificial neural network code to AWS Lambda as a bundled binary for the C++ extensio
• J. Make an S3 notification configuration on the manifest, which publishes to another AWS Lambda running controller cod
• K. This controller code publishes all the images in the manifest to AWS Kinesi
• L. Your ANN code Lambda Function uses the Kinesis as an Event Sourc
• M. The system automatically scales when the stream contains image events.
• N. Create an Auto Scaling Load Balanced Elastic Beanstalk worker tier Application and Environmen
• O. Deploy the artificial neural network code to G2 instances in this tie
• P. Set the desired capacity to 1. Make the code periodically check S3 for new manifest
• Q. When a new manifest is detected, push all of the images in the manifest into the SQS queue associated with the Elastic Beanstalk worker tier.

Answer: B

Explanation:
The best way to get notified when the images get sent to the bucket is the S3 Events. Here you don't need to provision infrastructure beforehand, and also since the source of S3 provides Event Handling, this should be used.
The AWS Documentation mentions the following on AWS S3 and Lambda
Amazon S3 can publish events (for example, when an object is created in a bucket) to AWS Lambda and invoke your Lambda function by passing the event data as a parameter. This integration enables
you to write Lambda functions that process Amazon S3 events. In Amazon S3, you add bucket notification configuration that identifies the type of event that you want Amazon S3 to publish and the Lambda function that you want to invoke.
For more information on AWS Lambda and S3 Events, please visit the link:
• http://docs.aws.amazon.com/lambda/latest/dg/with-s3, html

NEW QUESTION 9
A web-startup runs its very successful social news application on Amazon EC2 with an Elastic Load Balancer, an Auto-Scaling group of Java/Tomcat application-servers, and DynamoDB as data store. The main web application best runs on m2 x large instances since it is highly memory- bound. Each new deployment requires semi-automated creation and testing of a new AMI for the application servers which takes quite a while and is therefore only done once per week. Recently, a new chat feature has been implemented in nodejs and waits to be integrated in the architecture. First tests show that the new component is CPU bound because the company has some experience with using Chef, they decided to streamline the deployment process and use AWS Ops Works as an application life cycle tool to simplify management of the application and reduce the deployment cycles. What configuration in AWS Ops Works is necessary to integrate the new chat module in the most cost- efficient and flexible way?

• A. Createone AWS Ops Works stack, create one AWS Ops Works layer, create one customrecipe
• B. Createone AWS Ops Works stack create two AWS Ops Works layers create one customrecipe
• C. Createtwo AWS Ops Works stacks create two AWS Ops Works layers create one customrecipe
• D. Createtwo AWS Ops Works stacks create two AWS Ops Works layers create two customrecipe

Answer: B

Explanation:
You can just have one Opswork stack and multiple layers, one for Node js and the other for the standard application.
An AWS OpsWorks Stack defines the configuration of your entire application: the load balancers, server software, database, etc. You control every part of the stack by buildin layers that define the software packages deployed to your instances and other configuration details such as Clastic IPs and security groups. You can also deploy your software onto layers by identifying the repository and optionally using Chef Recipes to automate everything Chef can do, such as creating directories and users, configuring databases, etc. You can use OpsWorks Stacks' built-in automation to scale your application and automatically recover from instance failures.
You can control who can view and manage the resources that are used by your application, including ssh access to the instances that your application uses.
For more information on Ops work, please visit the below URL
• https://aws.amazon.com/opsworks/stacks/faqs/

NEW QUESTION 10
You are currently planning on using Autoscaling to launch instances which have an application installed. Which of the following methods will help ensure the instances are up and running in the shortest span of time to take in traffic from the users?

• A. Loginto each instance and install the software.
• B. UseUserData to launch scripts to install the software.
• C. UseDocker containers to launch the software.
• D. UseAMI's which already have the software installed.

Answer: D

Explanation:
The AM I will be the fatest because it will already have the software installed. You can customize the instance that you launch from a public AMI and then save that configuration as a custom AMI for your own use. Instances that you launch from your AMI use all the custom izations that you've made.
For more information on AMI'S please refer to the below link http://docs.aws.amazon.com/AWSCC2/latest/UserGuide/AMIs.html

NEW QUESTION 11
Which of the following is not a supported platform on Elastic Beanstalk?

• A. PackerBuilder
• B. Go
• C. Nodejs
• D. JavaSE
• E. Kubernetes

Answer: E

Explanation:
Answer-C
Below is the list of supported platforms
*Packer Builder
*Single Container Docker
*Multicontainer Docker
*Preconfigured Docker
*Go
*Java SE
*Java with Tomcat
*NET on Windows Server with I IS
*Nodejs
*PHP
*Python
*Ruby
For more information on the supported platforms please refer to the below link
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.platforms. Html

NEW QUESTION 12
You have a requirement to automate the creation of EBS Snapshots. Which of the following can be
used to achieve this in the best way possible?

• A. Createa powershell script which uses the AWS CLI to get the volumes and then run thescript as a cron job.
• B. Usethe A WSConf ig service to create a snapshot of the AWS Volumes
• C. Usethe AWS CodeDeploy service to create a snapshot of the AWS Volumes
• D. UseCloudwatch Events to trigger the snapshots of EBS Volumes

Answer: D

Explanation:
The best is to use the inbuilt sen/ice from Cloudwatch, as Cloud watch Events to automate the creation of CBS Snapshots. With Option A, you would be restricted to
running the powrshell script on Windows machines and maintaining the script itself And then you have the overhead of having a separate instance just to run that script.
When you go to Cloudwatch events, you can use the Target as EC2 CreateSnapshot API call as shown below.

The AWS Documentation mentions
Amazon Cloud Watch Cvents delivers a near real-time stream of system events that describe changes in Amazon Web Services (AWS) resources. Using simple rules that you can quickly set up, you can match events and route them to one or more target functions or streams. Cloud Watch Cvents becomes aware of operational changes as they occur. Cloud Watch Cvents responds to these operational changes and takes corrective action as necessary, by sending messages to respond to the environment, activating functions, making changes, and capturing state information.
For more information on Cloud watch Cvents, please visit the below U RL:
• http://docs.aws.amazon.com/AmazonCloudWatch/latest/events/WhatlsCloudWatchCvents.htmI

NEW QUESTION 13
You have a current Clouformation template defines in AWS. You need to change the current alarm threshold defined in the Cloudwatch alarm. How can you achieve this?

• A. Currently, there is no option to change what is already defined in Cloudformation templates.
• B. Update the template and then update the stack with the new templat
• C. Automatically all resources will be changed in the stack.
• D. Update the template and then update the stack with the new templat
• E. Only those resources that need to be changed will be change
• F. All other resources which do not need to be changed will remain as they are.
• G. Delete the current cloudformation templat
• H. Create a new one which will update the current resources.

Answer: C

Explanation:
Option A is incorrect because Cloudformation templates have the option to update resources.
Option B is incorrect because only those resources that need to be changed as part of the stack update are actually updated.
Option D is incorrect because deleting the stack is not the ideal option when you already have a change option available.
When you need to make changes to a stack's settings or change its resources, you update the stack instead of deleting it and creating a new stack. For example, if you
have a stack with an EC2 instance, you can update the stack to change the instance's AMI ID.
When you update a stack, you submit changes, such as new input parameter values or an updated template. AWS CloudFormation compares the changes you submit with the current state of your stack and updates only the changed resources
For more information on stack updates please refer to the below link:
• http://docs.aws.a mazon.com/AWSCIoudFormation/latest/UserGuide/using-cfn-updating- stacks.htmI

NEW QUESTION 14
You are a Devops Engineer and are designing an Opswork stack in AWS. The company has some custom recipes that are part of their on-premise Chef configuration. These same recipes need to be run whenever an instance is launched in Opsworks. Which of the following steps need to be carried out to to ensure this requirement gets fulfilled. Choose 2 answers from the options given below

• A. Ensurethe custom cookbooks option is set in Opswork stack.
• B. Ensurethe custom cookbooks option is set in Opswork layer.
• C. Ensurethe recipe is placed as part of the Setup Lifecycle event as part of the Layersetting.
• D. Ensurethe recipe is placed as part of the Setup Lifecycle event as part of the Stacksetting.

Answer: AC

Explanation:
The AWS Documentation mentions the below
Each layer has a set of built-in recipes assigned to each lifecycle event, although some layers lack Undeploy recipes. When a lifecycle event occurs on an instance,
AWS OpsWorks Stacks runs the appropriate set of recipes for the associated layer.
The below diagram shows a snapshot in the stack settings where you can enable custom cookbooks

For more information on automating recipe's, please visit the below URL: http://docs.aws.amazon.com/opsworks/latest/userguide/workingcookbook-assigningcustom.html

NEW QUESTION 15
Your company wants to understand where cost is coming from in the company's production AWS account. There are a number of applications and services running at any given time. Without expending too much initial development time.how best can you give the business a good understanding of which applications cost the most per month to operate?

• A. Create an automation script which periodically creates AWS Support tickets requesting detailed intra-month information about your bill.
• B. Use custom CloudWatch Metrics in your system, and put a metric data point whenever cost is incurred.
• C. Use AWS Cost Allocation Taggingfor all resources which support i
• D. Use the Cost Explorer to analyze costs throughout the month.
• E. Use the AWS Price API and constantly running resource inventory scripts to calculate total price based on multiplication of consumed resources over time.

Answer: C

Explanation:
A tag is a label that you or AWS assigns to an AWS resource. Each tag consists of a Areyand a value. A key can have more than one value. You can use tags to organize your resources, and cost allocation tags to track your AWS costs on a detailed level. After you activate cost allocation tags, AWS uses the cost allocation tags to organize your resource costs on your cost allocation report, to make it easier
for you to categorize and track your AWS costs. AWS provides two types of cost allocation tags, an A WS-generated tagand user-defined tags. AWS defines, creates, and applies the AWS-generated tag for you, and you define, create, and apply user-defined tags. You must activate both types of tags separately before they can appear in Cost Explorer or on a cost allocation report.
For more information on Cost Allocation tags, please visit the below URL: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloctags.html

NEW QUESTION 16
Your development team is developing a mobile application that access resources in AWS. The users accessing this application will be logging in via Facebook and Google. Which of the following AWS mechanisms would you use to authenticate users for the application that needs to access AWS resou rces

• A. Useseparate 1AM users that correspond to each Facebook and Google user
• B. Useseparate 1AM Roles that correspond to each Facebook and Google user
• C. UseWeb identity federation to authenticate the users
• D. UseAWS Policies to authenticate the users

Answer: C

Explanation:
The AWS documentation mentions the following
You can directly configure individual identity providers to access AWS resources using web identity federation. AWS currently supports authenticating users using web identity federation through several identity providers: Login with Amazon
Facebook Login
Google Sign-in For more information on Web identity federation please visit the below URL:
• http://docs.aws.amazon.com/sdk-for-javascript/v2/developer-guide/load ing-browser- credentials-federated-id.htm I

NEW QUESTION 17
Your company currently has a set of EC2 Instances running a web application which sits behind an Elastic Load Balancer. You also have an Amazon RDS instance which is used by the web application. You have been asked to ensure that this arhitecture is self healing in nature and cost effective. Which of the following would fulfil this requirement. Choose 2 answers from the option given below

• A. UseCloudwatch metrics to check the utilization of the web laye
• B. Use AutoscalingGroup to scale the web instances accordingly based on the cloudwatch metrics.
• C. UseCloudwatch metrics to check the utilization of the databases server
• D. UseAutoscaling Group to scale the database instances accordingly based on thecloudwatch metrics.
• E. Utilizethe Read Replica feature forthe Amazon RDS layer
• F. Utilizethe Multi-AZ feature for the Amazon RDS layer

Answer: AD

Explanation:
The following diagram from AWS showcases a self-healing architecture where you have a set of CC2 servers as Web server being launched by an Autoscaling Group.

The AWS Documentation mentions the following
Amazon RDS Multi-A2 deployments provide enhanced availability and durability for Database (DB) Instances, making them a natural fit for production database workloads. When you provision a Multi- AZ DB Instance, Amazon RDS automatically creates a primary DB Instance and synchronously replicates the data to a standby instance in a different Availability Zone (AZ). Cach AZ runs on its own physically distinct, independent infrastructure, and is engineered to be highly reliable. In case of an infrastructure failure, Amazon RDS performs an automatic failover to the standby (or to a read replica
in the case of Amazon Aurora), so that you can resume database operations as soon as the failover is complete. Since the endpoint for your DB Instance remains the same after a failover, your application can resume database operation without the need for manual administrative intervention. For more information on Multi-AZ RDS, please refer to the below link:
◆ https://aws.amazon.com/rds/details/multi-az/

NEW QUESTION 18
You have written a CloudFormation template that creates 1 elastic load balancer fronting 2 EC2 instances. Which section of the template should you edit so that the DNS of the load balancer is returned upon creation of the stack?

• A. Resources
• B. Parameters
• C. Outputs
• D. Mappings

Answer: C

Explanation:
The below example shows a simple Cloud Formation template. It creates an CC2 instance based on the AMI - ami-d6f32ab5. When the instance is created, it will output the A2 in which it is created.

To understand more on Cloud Formation, please visit the URL:
• https://aws.amazon.com/cloudformation/

NEW QUESTION 19
You have an ELB setup in AWS with EC2 instances running behind it. You have been requested to monitor the incoming connections to the ELB. Which of the below options can suffice this requirement?

• A. UseAWSCIoudTrail with your load balancer
• B. Enable access logs on the load balancer
• C. Use a CloudWatch Logs Agent
• D. Create a custom metric CloudWatch filter on your load balancer

Answer: B

Explanation:
Clastic Load Balancing provides access logs that capture detailed information about requests sent to your load balancer. Cach log contains information such as the
time the request was received, the client's IP address, latencies, request paths, and server responses.
You can use these access logs to analyze traffic patterns and to troubleshoot issues.
Option A is invalid because this service will monitor all AWS services Option C and D are invalid since CLB already provides a logging feature.
For more information on ELB access logs, please refer to the below document link: from AWS http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/access-log-collection.html

NEW QUESTION 20
Which of the following can be used in Cloudformation to coordinate the creation of stack resources. Choose 2 answers from the options given below

• A. AWS::CloudFormation::HoldCondition
• B. AWS::CloudFormation::WaitCondition
• C. HoldPolicyattribute
• D. CreationPolicyattribute

Answer: BD

Explanation:
The AWS Documentation mentions the following
Using the AWS::CloudFormation::WaitCondition resource and Creation Pol icy attribute, you can do the following:
Coordinate stack resource creation with other configuration actions that are external to the stack creation
Track the status of a configuration process For more information on wait conditions, please refer to the below link:
• http://docs.ws.amazon.com/AWSCIoudFormation/latest/UserGuide/using-cfn-waitcond ition.html

NEW QUESTION 21
......