Free Access Amazon.AWS-DevOps.v2022-05-04.q172 Practice Test (Page 2)

Question 1

A company is building a solution for storing files containing Personally Identifiable Information (PII) on AWS. Requirements state: *All data must be encrypted at rest and in transit. *All data must be replicated in at least two locations that are at least 500 miles apart. Which solution meets these requirements?

A.Create primary and secondary Amazon S3 buckets in two separate AWS Regions that are at least 500 miles apart. Use an IAM role to enforce access to the buckets only through HTTPS. Use a bucket policy to enforce Amazon S3-Managed Keys (SSE-S3) on all objects uploaded to the bucket. Configure cross- region replication between the two buckets.

B.Create primary and secondary Amazon S3 buckets in two separate AWS Regions that are at least 500 miles apart. Use a bucket policy to enforce access to the buckets only through HTTPS. Use a bucket policy to enforce S3-Managed Keys (SSE-S3) on all objects uploaded to the bucket. Configure cross-region replication between the two buckets.

C.Create primary and secondary Amazon S3 buckets in two separate Availability Zones that are at least 500 miles apart. Use a bucket policy to enforce access to the buckets only through HTTPS. Use a bucket policy to enforce AWS KMS encryption on all objects uploaded to the bucket. Configure cross-region replication between the two buckets. Create a KMS Customer Master Key (CMK) in the primary region for encrypting objects.

D.Create primary and secondary Amazon S3 buckets in two separate Availability Zones that are at least 500 miles apart. Use a bucket policy to enforce access to the buckets only through HTTPS. Use a bucket policy to enforce Amazon S3 SSE-C on all objects uploaded to the bucket. Configure cross-region replication between the two buckets.

Question 2

You are building a Ruby on Rails application for internal, non-production use which uses MySQL as a
database. You want developers without very much AWS experience to be able to deploy new code with a
single command line push. You also want to set this up as simply as possible. Which tool is ideal for this
setup?

A.AWSCIoudFormation

B.AWSOpsWorks

C.AWS ELB+ EC2 with CLI Push

D.AWS Elastic Beanstalk

Question 3

A DevOps engineer is writing an AWS CloudFormation template to stand up a web service that will run on Amazon EC2 instances in a private subnet behind an ELB Application Load Balancer. The Engineer must ensure that the service can accept requests from clients that have IPv6 addresses. Which configuration items should the Engineer incorporate into the CloudFormation template to allow IPv6 clients to access the web service?

A.Create a target group and add the EC2 instances as targets. Create a listener on port 443 of the Application Load Balancer. Associate the newly created target group as the default target group. Select a dual stack IP address, and create a rule in the security group that allows inbound traffic from anywhere.

B.Associate an IPv6 CIDR block with the Amazon VPC and subnets where the EC2 instances will live. Create route table entries for the IPv6 network, use EC2 instance types that support IPv6, and assign IPv6 addresses to each EC2 instance.

C.Assign each EC2 instance an IPv6 Elastic IP address. Create a target group and add the EC2 instances as targets. Create a listener on port 443 of the Application Load Balancer, and associate the newly created target group as the default target group.

D.Replace the Application Load Balancer with a Network Load Balancer. Associate an IPv6 CIDR block with the Virtual Private Cloud (VPC) and subnets where the Network Load Balancer lives, and assign the Network Load Balancer an IPv6 Elastic IP address.

Question 4

You have implemented a system to automate deployments of your configuration and application dynamically
after an Amazon EC2 instance in an Auto Scaling group is launched. Your system uses a configuration
management tool that works in a standalone configuration, where there is no master node. Due to the volatility
of application load, new instances must be brought into service within three minutes of the launch of the
instance operating system. The deployment stages take the following times to complete:
1) Installing configuration management agent: 2mins
2) Configuring instance using artifacts: 4mins
3) Installing application framework: 15mins
4) Deploying application code: 1min
What process should you use to automate the deployment using this type of standalone agent configuration?

A.Configureyour Auto Scaling launch configuration with an Amazon EC2 UserData script toinstall the
agent, pull configuration artifacts and application code from anAmazon S3 bucket, and then execute the
agent to configure the infrastructureand application.

B.Builda custom Amazon Machine Image that includes all components pre-installed,including an agent,
configuration artifacts, application frameworks, and code.Create a startup script that executes the agent
to configure the system onstartup. *t

C.Builda custom Amazon Machine Image that includes the configuration management agentand
application framework pre-installed.
Configure your Auto Scaling launchconfiguration with an Amazon EC2 UserData script to pull
configurationartifacts and application code from an Amazon S3 bucket, and then execute theagent to
configure the system.

D.Createa web service that polls the Amazon EC2 API to check for new instances that arelaunched in an
Auto Scaling group. When it recognizes a new instance, execute aremote script via SSH to install the
agent, SCP the configuration artifacts andapplication code, and finally execute the agent to configure the
system

Question 5

A company used AWS CloudFormation to deploy a three-tier web application that stores data in an Amazon RDS MySOL Multi-AZ DB instance. A DevOps Engineer must upgrade the RDS instance to the latest major version of MySQL while incurring minimal downtime. How should the Engineer upgrade the instance while minimizing downtime?

A.Update the EngineVersion property of the AWS::RDS::DBInstance resource type in the CloudFormation template to the latest version, and perform an operation. Update Stack

B.Update the DBEngineVersion property of the AWS:: RDS::DBInstance resource type in the CloudFormation template to the latest desired version. Perform an Update Stack operation. Create a new RDS Read Replicas resource with the same properties as the instance to be upgraded. Perform a second Update Stack operation.

C.Update the DBEngineVersion property of the AWS::RDS::DBInstance resource type in the CloudFormation template to the latest desired version. Create a new RDS Read Replicas resource with the same properties as the instance to be upgraded. Perform an Update Stack operation.

D.Update the EngineVersion property of the AWS::RDS::DBInstance resource type in the CloudFormation template to the latest desired version. Launch a second stack and make the new RDS instance a read replica.

Other Version: 3784Amazon.AWS-DevOps.v2025-03-20.q612; 3958Amazon.AWS-DevOps.v2023-06-13.q288; 2751Amazon.AWS-DevOps.v2022-08-10.q112; 68Amazon.Passtestking.AWS-DevOps.v2022-01-29.by.ian.270q.pdf

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 292Nokia.4A0-113.v2026-05-01.q69; 251EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 207Salesforce.MC-202.v2026-04-30.q57; 204BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 457EMC.D-AV-DY-23.v2026-04-27.q184; 1109ServiceNow.CSA.v2026-04-27.q483

Question 1

Question 2

Question 3

Question 4

Question 5

Download PDF File