Free Access Amazon.AWS-DevOps.v2025-03-20.q612 Practice Test (Page 2)

Question 1

What is required to achieve gigabit network throughput on EC2? You already selected cluster-compute, 10GB instances with enhanced networking, and your workload is already network-bound, but you are not seeing 10 gigabit speeds.

A.Enable biplex networking on your servers, so packets are non-blocking in both directions and there's no switching overhead.

B.Ensure the instances are in different VPCs so you don't saturate the Internet Gateway on any one VPC.

C.Select PIOPS for your drives and mount several, so you can provision sufficient disk throughput.

D.Use a placement group for your instances so the instances are physically near each other in the same Availability Zone.

Question 2

A company plans to stop using Amazon EC2 key pairs for SSH access, and instead plans to use AWS Systems Manager Session Manager. To further enhance security, access to Session Manager must take place over a private network only.
Which combinations of actions will accomplish this? (Choose two.)

A.Create a VPC endpoint for Systems Manager in the desired Region.

B.Allow inbound access to TCP port 22 in all associated EC2 security groups from the VPC CIDR range.

C.Attach an IAM policy with the necessary Systems Manager permissions to the existing IAM instance profile.

D.Deploy a new EC2 instance that will act as a bastion host to the rest of the EC2 instance fleet.

E.Remove any default routes in the associated route tables.

Question 3

When thinking of AWS OpsWorks, which of the following is true?

A.Stacks have many layers, layers have many instances.

B.Instances have many stacks, stacks have many layers.

C.Layers have many stacks, stacks have many instances.

D.Layers have many instances, instances have many stacks.

Question 4

Which statement is true about configuring proxy support for Amazon Inspector agent on a Windows-based system?

A.Amazon Inspector agent supports proxy usage on Windows-based systems through the use of the WinHTTP proxy.

B.Amazon Inspector agent supports proxy usage on Linux-based systems but not on Windows.

C.Amazon Inspector proxy support on Windows-based systems is achieved through installing proxy-enabled version of the agent which comes with preconfigured files that you need to edit to match your environment.

D.Amazon Inspector agent supports proxy usage on Windows-based systems through awsagent.env configuration file.

Question 5

A company wants to use Amazon ECS to provide a Docker container runtime environment. For compliance reasons, all Amazon EBS volumes used in the ECS cluster must be encrypted. Rolling updates will be made to the cluster instances and the company wants the instances drained of all tasks before being terminated.
How can these requirements be met? (Select TWO.)

A.Modify the default ECS AMI user data to create a script that executes docker rm ""f {id} for all running container instances. Copy the script to the /etc/ init.d/rc.d directory and execute chconfig enabling the script to run during operating system shutdown.

B.Create an Auto Scaling lifecycle hook backed by an AWS Lambda function that uses the AWS SDK to mark a terminating instance as DRAINING. Prevent the lifecycle hook from completing until the running tasks on the instance are zero.

C.Copy the default AWS CloudFormation template that ECS uses to deploy cluster instances. Modify the template resource EBS configuration setting to set "~Encrypted: True' and include the AWS KMS alias:
"~aws/ebs' to encrypt the AMI.

D.Use AWS CodePipeline to build a pipeline that discovers the latest Amazon-provided ECS AMI, then copies the image to an encrypted AMI outputting the encrypted AMI ID. Use the encrypted AMI ID when deploying the cluster.

E.Create an IAM role that allows the action ECS::EncryptedImage. Configure the AWS CLI and a profile to use this role. Start the cluster using the AWS CLI providing the --use-encrypted-image and --kms-key arguments to the create-cluster ECS command.

Other Version: 3958Amazon.AWS-DevOps.v2023-06-13.q288; 2751Amazon.AWS-DevOps.v2022-08-10.q112; 4205Amazon.AWS-DevOps.v2022-05-04.q172; 68Amazon.Passtestking.AWS-DevOps.v2022-01-29.by.ian.270q.pdf

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 292Nokia.4A0-113.v2026-05-01.q69; 251EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 207Salesforce.MC-202.v2026-04-30.q57; 204BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 457EMC.D-AV-DY-23.v2026-04-27.q184; 1109ServiceNow.CSA.v2026-04-27.q483

Question 1

Question 2

Question 3

Question 4

Question 5

Download PDF File