DOP-C01問題集と練習テスト(275問題) [Q113-Q135]

Share

(2022)DOP-C01問題集と練習テスト(275問題)

ガイド(2022年最新)リアルなAmazon DOP-C01試験問題


Amazon DOP-C01 認定試験の出題範囲:

トピック出題範囲
トピック 1
  • AWSプラットフォームで高可用性、スケーラブル、自己回復型のシステムを実装する
トピック 2
  • AWSでの継続的デリバリーシステムと方法論の実装と管理
トピック 3
  • イベント駆動型の自動アクションを設定するために必要な概念を適用する
  • マルチAZアーキテクチャとマルチリージョンアーキテクチャの適切な使用を決定する
トピック 4
  • ビジネスニーズに基づいてアプリケーションとインフラストラクチャの導入モデルを決定する
トピック 5
  • 高可用性、スケーラビリティ、およびフォールトトレランスを実装する方法を決定する
  • イベント管理とアラートを自動化する方法を決定する
トピック 6
  • タグ付けやその他のメタデータ戦略を実装する方法を決定する
  • 自動化を通じてコストを最適化する方法を決定する
トピック 7
  • CI
  • CDパイプライン
  • ポリシーと標準の自動化を自動化するために必要な概念を適用する
トピック 8
  • ロギング、メトリクス、モニタリング、テスト、およびセキュリティの標準を実施するために必要な概念を適用する
トピック 9
  • ビジネスニーズに基づいて適切なサービスを決定する
  • ディザスタリカバリ戦略を設計および自動化する方法を決定する
トピック 10
  • セキュリティ制御、ガバナンスプロセス、およびコンプライアンス検証の実装と自動化
トピック 11
  • 運用プロセスを自動化するためのツールを設計、管理、および保守する
トピック 12
  • デプロイ
  • 配信戦略を決定する
  • AWSサービスを使用してそれらを実装する
トピック 13
  • AWSでのモニタリング、メトリクス、ロギングシステムの定義とデプロイ

 

質問 113
You run a SIP-based telephony application that uses Amazon EC2 for its web tier and uses MySQL on Amazon RDS as its database. The application stores only the authentication profile data for its existing users in the database and therefore is read-intensive. Your monitoring system shows that your web instances and the database have high CPU utilization.
Which of the following steps should you take in order to ensure the continual availability of your application?
(Choose two.)

  • A. Vertically scale up the Amazon EC2 instances manually.
  • B. Use multiple Amazon RDS read replicas.
  • C. Set up an Auto Scaling group for the application tier and a policy that scales based on the Amazon RDS CloudWatch CPU utilization metric.
  • D. Set up an Auto Scaling group for the application tier and a policy that scales based on the Amazon EC2 CloudWatch CPU utilization metric.
  • E. Use a CloudFront RTMP download distribution with the application tier as the origin for the distribution.
  • F. Switch to General Purpose (SSD) Storage from Provisioned IOPS Storage (PIOPS) for the Amazon RDS database.

正解: B,D

 

質問 114
Which of the following are ways to ensure that data is secured while in transit when using the AWS Elastic load balancer. Choose 2 answers from the options given below

  • A. Usea TCP front end listener for your ELB
  • B. Usean HTTP front end listener for your ELB
  • C. Usean HTTPS front end listener for your ELB
  • D. Usean SSL front end listenerforyourELB

正解: C,D

解説:
Explanation
The AWS documentation mentions the following
You can create a load balancer that uses the SSL/TLS protocol for encrypted connections (also known as SSL offload). This feature enables traffic encryption between your load balancer and the clients that initiate HTTPS sessions, and for connections between your load balancer and your L~C2 instances.
For more information on Elastic Load balancer and secure listeners, please refer to the below link:
* http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-https-load-balancers.html

 

質問 115
An AWS CodePipeline pipeline has implemented a code release process. The pipeline is integrated with AWS CodeDeploy to deploy versions of an application to multiple Amazon EC2 instances for each CodePipeline stage.
During a recent deployment, the pipeline failed due to a CodeDeploy issue. The DevOps team wants to improve monitoring and notifications during deployment to decrease resolution times.
What should the DevOps Engineer do to create notifications when issues are discovered?

  • A. Implement AWS CloudWatch Logs for CodePipeline and CodeDeploy, create an AWS Config rule to evaluate code deployment issues, and create an Amazon SNS topic to notify stakeholders of deployment issues.
  • B. Implement AWS CloudWatch Events for CodePipeline and CodeDeploy, create an AWS Lambda function to evaluate code deployment issues, and create an Amazon SNS topic to notify stakeholders of deployment issues.
  • C. Implement AWS CloudWatch Events for CodePipeline and CodeDeploy, create an Amazon Inspector assessment target to evaluate code deployment issues, and create an Amazon SNS topic to notify stakeholders of deployment issues.
  • D. Implement AWS CloudTrail to record CodePipeline and CodeDeploy API call information, create an AWS Lambda function to evaluate code deployment issues, and create an Amazon SNS topic to notify stakeholders of deployment issues.

正解: B

 

質問 116
Of the 6 available sections on a Cloud Formation template (Template Description Declaration, Template Format Version Declaration, Parameters, Resources, Mappings, Outputs), which is the only one required for a CloudFormation template to be accepted? Choose an answer from the options below

  • A. Mappings
  • B. Resources
  • C. Template Declaration
  • D. Parameters

正解: B

解説:
Explanation
If you refer to the documentation, you will see that Resources is the only mandatory field Specifies the stack resources and their properties, such as an Amazon Elastic Compute Cloud instance or an Amazon Simple Storage Service bucket.
For more information on cloudformation templates, please refer to the below link:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/template-anatomy.html

 

質問 117
An application is running on Amazon EC2. It has an attached IAM role that is receiving an AccessDenied error while trying to access a SecureString parameter resource in the AWS Systems Manager Parameter Store.
The SecureString parameter is encrypted with a customer-managed Customer Master Key (CMK), What steps should the DevOps Engineer take to grant access to the role while granting least privilege? (Select three.)

  • A. Set kms:Decrypt for the customer-managed CMK resource in the role's IAM policy.
  • B. Set kms:Decrypt for the parameter resource in the customer-managed CMK policy.
  • C. Set kms:GenerateDataKey for the user on the AWS managed SSM KMS key.
  • D. Set kms:Decrypt for the instance role in the customer-managed CMK policy.
  • E. Set ssm:DecryptParameter for the parameter resource in the instance role IAM policy.
  • F. Set ssm:GetParamter for the parameter resource in the instance role's IAM policy.

正解: B,D,F

 

質問 118
You work for an insurance company and are responsible for the day-to-day operations of your company's
online quote system used to provide insurance quotes to members of the public. Your company wants to use
the application logs generated by the system to better understand customer behavior. Industry, regulations also
require that you retain all application logs for the system indefinitely in order to investigate fraudulent claims
in the future. You have been tasked with designing a log management system with the following requirements:
- All log entries must be retained by the system, even during unplanned instance failure.
- The customer insight team requires immediate access to the logs from the past seven days.
- The fraud investigation team requires access to all historic logs, but will wait up to 24 hours before these logs
are available.
How would you meet these requirements in a cost-effective manner? Choose three answers from the options
below

  • A. Create an Amazon S3 lifecycle configuration to move log files from Amazon S3 to Amazon Glacier
    after seven days.
  • B. Configure your application to write logs to a separate Amazon EBS volume with the "delete on
    termination" field set to false. Create a script that moves the logs from the instance to Amazon S3 once
    an hour.
  • C. Create a housekeeping script that runs on a T2 micro instance managed by an Auto Scaling group for
    high availability. The script uses the AWS API to identify any unattached Amazon EBS volumes
    containing log files. Your housekeeping script will mount the Amazon EBS volume, upload all logs to
    Amazon S3, and then delete the volume.
  • D. Write a script that is configured to be executed when the instance is stopped or terminated and that will
    upload any remaining logs on the instance to Amazon S3.
  • E. Configure your application to write logs to the instance's ephemeral disk, because this storage is free and
    has good write performance. Create a script that moves the logs from the instance to Amazon S3 once an
    hour.
  • F. Configure your application to write logs to the instance's default Amazon EBS boot volume, because
    this storage already exists. Create a script that moves the logs from the instance to Amazon S3 once an
    hour.

正解: A,B,C

解説:
Explanation
Since all logs need to be stored indefinitely. Glacier is the best option for this. One can use Lifecycle events to
stream the data from S3 to Glacier
Lifecycle configuration enables you to specify the lifecycle management of objects in a bucket. The
configuration is a set of one or more rules, where each rule
defines an action for Amazon S3 to apply to a group of objects. These actions can be classified as follows:
* Transition actions - In which you define when objects transition to another storage class. For example, you
may choose to transition objects to the STANDARDJA QK for infrequent access) storage class 30 days after
creation, or archive objects to the GLACIER storage class one year after creation.
* Expiration actions - In which you specify when the objects expire. Then Amazon S3 deletes the expired
objects on your behalf. For more information on Lifecycle events, please refer to the below link:
* http://docs.aws.a
mazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.htm I You can use scripts to put the logs onto a new
volume and then transfer those logs to S3.
Note:
Moving the logs from CBS volume to S3 we have some custom scripts running in the background.
Inorder to ensure the minimum memory requirements for the OS and the applications for the script to execute
we can use a cost effective ec2 instance.
Considering the computing resource requirements of the instance and the cost factor a tZmicro instance can be
used in this case.
The following link provides more information on various t2 instances.
https://docs.aws.amazon.com/AWSCC2/latest/WindowsGuide/t2-instances.html
Question is "How would you meet these requirements in a cost-effective manner? Choose three answers from
the options below"
So here user has to choose the 3 options so that the requirement is fulfilled. So in the given 6 options, options
C, C and F fulfill the requirement.
" The CC2s use CBS volumes and the logs are stored on CBS volumes those are marked for non-termination"
- is one of the way to fulfill requirement. So this shouldn't be a issue.

 

質問 119
Which of the following resource is used in Cloudformation to create nested stacks

  • A. AWS::CloudFormation::StackNest
  • B. AWS::CloudFormation::Nested
  • C. AWS::CloudFormation::Stack
  • D. AWS::CloudFormation::NestedStack

正解: C

解説:
Explanation
The AWS Documentation mentions the following
A nested stack is a stack that you create within another stack by using the AWS:: Cloud Formation:: Stack resource. With nested stacks, you deploy and manage all resources from a single stack. You can use outputs from one stack in the nested stack group as inputs to another stack in the group For more information on AWS::CloudFormation::Stack resource, please refer to the below link:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/using-cfn-stack-exports.html

 

質問 120
An IT team has built an AWS CloudFormation template so others in the company can quickly and reliably deploy and terminate an application. The template creates an Amazon EC2 instance with a user data script to install the application and an Amazon S3 bucket that the application uses to serve static webpages while it is running.
All resources should be removed when the CloudFormation stack is deleted. However, the team observes that CloudFormation reports an error during stack deletion, and the S3 bucket created by the stack is not deleted.
How can the team resolve the error in the MOST efficient manner to ensure that all resources are deleted without errors?

  • A. Add DeletionPolicy attribute to the S3 bucket resource, with the value Delete forcing the bucket to be removed when the stack is deleted.
  • B. Identify the resource that was not deleted. From the S3 console, empty the S3 bucket and then delete it.
  • C. Replace the EC2 and S3 bucket resources with a single AWS OpsWorks Stacks resource. Define a custom recipe for the stack to create and delete the EC2 instance and the S3 bucket.
  • D. Add a custom resource when an AWS Lambda function with the DependsOn attribute specifying the S3 bucket, and an IAM role. Writhe the Lambda function to delete all objects from the bucket when the is Delete.
    RequestType

正解: D

解説:
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute- dependson.html

 

質問 121
A DevOps Engineer is reviewing a system that uses Amazon EC2 instances in an Auto Scaling group. This system uses a configuration management tool that runs locally on each EC2 instance. Because of the volatility of the application load, new instances must be fully functional within 3 minutes of entering a running state. Current setup tasks include:
- Installing the configuration management agent - 2 minutes
- Installing the application framework - 15 minutes
- Copying configuration data from Amazon S3 - 2 minutes
- Running the configuration management agent to configure instances - 1 minute
- Deploying the application code from Amazon S3 - 2 minutes
How should the Engineer set up system so it meets the launch time requirement?

  • A. Build a custom AMI that includes the configuration management agent, application framework, and configuration data. Write a bootstrap script to run the agent to configure the instance and deploy the application from Amazon S3.
  • B. Build a custom AMI that includes the configuration management agent and application framework.
    Write a bootstrap script to pull configuration data from Amazon S3, run the agent to configure the instance, and deploy the application from S3.
  • C. Trigger an AWS Lambda function from an Amazon CloudWatch Events rule when a new EC2 instance launches. Have the function install the configuration management agent and the application framework, pull configuration data from Amazon S3, run the agent to configure the instance, and deploy the application from S3.
  • D. Write a bootstrap script to install the configuration management agent, install and the application framework, pull configuration data from Amazon S3, run the agent to configure the instance, and deploy the application from S3.

正解: A

解説:
https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ec2-instance-metadata.html

 

質問 122
Which tool will Ansible not use, even if available, to gather facts?

  • A. lsb_release
  • B. ohai
  • C. facter
  • D. Ansible setup module

正解: A

解説:
Ansible will use it's own `setup' module to gather facts for the local system. Additionally, if ohai or facter are installed, those will also be used and all variables will be prefixed with `ohai_' or
`facter_' respectively. `lsb_relase' is a Linux tool for determining distribution information.
Reference: http://docs.ansible.com/ansible/setup_module.html

 

質問 123
Which of the following is incorrect when it comes to using the instances in an Opswork stack?

  • A. You can start and stop instances manually in a stack
  • B. You can use time-based automatic scaling with any stack
  • C. In a stack you can use a mix of both Windowsand Linux operating systems
  • D. You can use custom AMI'S as long as they are based on one of the AWS OpsWorks Stacks-supported
    AMIs

正解: C

解説:
Explanation
The AWS documentation mentions the following about Opswork stack
* A stack's instances can run either Linux or Windows.
A stack can have different Linux versions or distributions on different instances, but you cannot mix Linux
and Windows instances.
* You can use custom AMIs (Amazon Machine Images), but they must be based on one of the AWS Ops
Works Stacks-supported AMIs
* You can start and stop instances manually or have AWS OpsWorks Stacks automatically scale the number of
instances. You can use time-based automatic scaling with any stack; Linux stacks also can use load-based
scaling.
* In addition to using AWS OpsWorks Stacks to create Amazon EC2 instances, you can also register instances
with a Linux stack that were created outside of AWS OpsWorks Stacks.
For more information on Opswork stacks, please visit the below link:
* http://docs.aws.amazon.com/opsworks/latest/userguide/workinginstances-os.
html

 

質問 124
There is a company website that is going to be launched in the coming weeks. There is a probability that the traffic will be quite high in the first couple of weeks. I n the event of a load failure, how can you set up DNS failover to a static website? Choose the correct answer from the options given below.

  • A. Duplicatethe exact application architecture in another region and configure DNSweight-based routing B- Enablefailover to an on-premise data center to the application hosted there.
  • B. UseRoute 53 with the failover option to failover to a static S3 website bucket orCloudFront distribution.
  • C. Addmore servers in case the application fails.

正解: C

解説:
Explanation
Amazon Route 53 health checks monitor the health and performance of your web applications, web servers, and other resources.
If you have multiple resources that perform the same function, you can configure DNS failover so that Amazon Route 53 will route your traffic from an unhealthy resource to a healthy resource. For example, if you have two web servers and one web server becomes unhealthy, Amazon Route 53 can route traffic to the other web server. So you can route traffic to a website hosted on S3 or to a cloudfront distribution.
For more information on DNS failover using Route53, please refer to the below link:
* http://docs.aws.a
mazon.com/Route53/latest/DeveloperGuide/dns-fa ilover.html

 

質問 125
A company is reviewing its IAM policies. One policy written by the DevOps Engineer has been flagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: Nonproduction over the weekend. The current policy is: What changes should the Engineer make to achieve a policy of least permission? (Select THREE.)

  • A. Option B
  • B. Option E
  • C. Option F
  • D. Option C
  • E. Option A
  • F. Option D

正解: A,B,F

解説:
https://docs.aws.amazon.com/ja_jp/IAM/latest/UserGuide/reference_policies_variables.html https://aws.amazon.com/jp/premiumsupport/knowledge-center/restrict-ec2-iam/

 

質問 126
A DevOps Engineer is deploying a new web application. The company chooses AWS Elastic Beanstalk for deploying and managing the web application, and Amazon RDS MySQL to handle persistent data. The company requires that new deployments have minimal impact if they fail.
The application resources must be at full capacity during deployment, and rolling back a deployment must also be possible.
Which deployment sequence will meet these requirements?

  • A. Deploy the application using Elastic Beanstalk, and include RDS MySQL as part of the environment.
    Use Elastic Beanstalk immutable updates for application deployments.
  • B. Deploy the application using Elastic Beanstalk, and include RDS MySQL as part of the environment.
    Use default Elastic Beanstalk behavior to deploy changes to the application, and let rolling updates deploy changes to the application.
  • C. Deploy the application using Elastic Beanstalk, and connect to an external RDS MySQL instance using Elastic Beanstalk environment properties. Use Elastic Beanstalk immutable updates for application deployments.
  • D. Deploy the application using Elastic Beanstalk and connect to an external RDS MySQL instance using Elastic Beanstalk environment properties. Use Elastic Beanstalk features for a blue/green deployment to deploy the new release to a separate environment, and then swap the CNAME in the two environments to redirect traffic to the new version.

正解: D

 

質問 127
A Solutions Architect is designing solution with AWS Lambda where different environments require different
database passwords.
What should the Architect do to accomplish this in a secure and scalable way?

  • A. Implement a dedicated Lambda function for distributing variables.
  • B. Create a Lambda function for each individual environment.
  • C. Use Amazon DynamoDB to store environmental variables.
  • D. Use encrypted AWS Lambda environmental variables.

正解: D

 

質問 128
An online retail company based in the United States plans to expand its operations to Europe and Asia in the next six months. Its product currently runs on Amazon EC2 instances behind an Application Load Balancer.
The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. All data is stored in an Amazon Aurora database instance.
When the product is deployed in multiple regions, the company wants a single product catalog across all regions, but for compliance purposes, its customer information and purchases must be kept in each region.
How should the company meet these requirements with the LEAST amount of application changes?

  • A. Use Amazon Redshift for the product catalog and Amazon DynamoDB tables for the customer information and purchases.
  • B. Use Amazon DynamoDB global tables for the product catalog and regional tables for the customer information and purchases
  • C. Use Aurora with read replicas for the product catalog and additional local Aurora instances in each region for the customer information and purchases.
  • D. Use Aurora for the product catalog and Amazon DynamoDB global tables for the customer information and purchases.

正解: C

 

質問 129
You're responsible for a popular file sharing application that uses Elastic Load Balancing to distribute traffic to an Amazon EC2 application tier deployed in an Auto Scaling group that runs across multiple Availability Zones.
You currently record the number of user file transfers to a log file on the application server, and then write data points from the logs to an Amazon RDS MySQL instance.
You aren't happy with how your application scales, and want to implement a new scaling policy based on the average number of user file transfers in a 10-minute period instead of average CPU utilization in the last five minutes.
What steps should you take to ensure that your application tier scales based on this new policy?
Choose 2 answers

  • A. Create a new CloudWatch alarm based on a custom metric streaming from the Amazon RDS MySQL instance that triggers an Auto Scaling action to scale the application tier.
  • B. Create a new CloudWatch alarm based on a custom metric published from file transfer logs streaming to CloudWatch that triggers an Auto Scaling action to scale the application tier.
  • C. Create a new Auto Scaling launch configuration for the application tier that scales based on an Auto Scaling policy that reads the file transfer log data from the Amazon RIDS MySQL instance.
  • D. Create a new Auto Scaling launch configuration that includes an Amazon EC2 user data script that installs an Amazon RDS Logs Agent on newly launched instances in the application tier. The agent will be configured to stream the file transfer data points to the Auto Scaling group.
  • E. Create a new Auto Scaling launch configuration that includes an Amazon EC2 user data script that installs a CloudWatch Logs Agent on newly launched instances in the application tier. The agent will be configured to stream the file transfers log tile to CloudWatch.
  • F. Create a new CloudWatch alarm based on the Elastic Load Balancing "RequestCount" metric that triggers an Auto Scaling action to scale the application tier.

正解: B,E

 

質問 130
A company is implementing a well-architected design for its globally accessible API stack. The design needs to ensure both high reliability and fast response times for users located in North America and Europe.
The API stack contains the following three tiers:
* Amazon API Gateway
* AWS Lambda
* Amazon DynamoDB
Which solution will meet the requirements?

  • A. Configure Amazon Route 53 to point to API Gateway API in North America using latency-based routing. Configure the API to forward requests to the Lambda function in the Region nearest to the user.
    Configure the Lambda function to retrieve and update the data in a DynamoDB table.
  • B. Configure Amazon Route 53 to point to API Gateway APIs in North America and Europe using health checks. Configure the APIs to forward requests to a Lambda function in that Region. Configure the Lambda functions to retrieve and update the data in a DynamoDB table in the same Region as the Lambda function.
  • C. Configure Amazon Route 53 to point to API Gateway APIs in North America and Europe using latency-based routing and health checks. Configure the APIs to forward requests to a Lambda function in that Region. Configure the Lambda functions to retrieve and update the data in a DynamoDB global table.
  • D. Configure Amazon Route 53 to point to API Gateway in North America, create a disaster recovery API in Europe, and configure both APIs to forward requests to the Lambda functions in that Region.
    Retrieve the data from a DynamoDB global table. Deploy a Lambda function to check the North America API health every 5 minutes. In the event of a failure, update Route 53 to point to the disaster recovery API.

正解: B

 

質問 131
Company policies require that information about IP traffic going between instances in the production Amazon VPC is captured. The capturing mechanism must always be enabled and the Security team must be notified when any changes in configuration occur.
What should be done to ensure that these requirements are met?

  • A. Configure a new trail using AWS CloudTrail service. Using the UserData section of an AWS CloudFormation template, install tcpdump on every provisioned Amazon EC2 instance. Connect Amazon Athena to the CloudTrail and write an AWS Lambda function that monitors for a flow log disable event. Once the CloudTrail entry has been spotted, alert the security organization.
  • B. Using the UserData section of an AWS CloudFormation template, install tcpdump on every provisioned Amazon EC2 instance. The output of the tool is sent to Amazon EFS for aggregation and querying. In addition, scheduling an Amazon CloudWatch Events rule calls an AWS Lambda function to check whether tcpdump is up and running and sends an email to the security organization when there is an exception.
  • C. Create a flow log for the production VPC. Create a new rule using AWS Config that is triggered by configuration changes of resources of type `EC2:VPC'. As part of configuring the rule, create an AWS Lambda function that looks up flow logs for a given VPC. If the VPC flow logs are not configured, return a `NON_COMPLIANT' status and notify the security organization.
  • D. Create a flow log for the production VPC and assign an Amazon S3 bucket as a destination for delivery. Using Amazon S3 Event Notification, set up an AWS Lambda function that is triggered when a new log file gets delivered. This Lambda function updates an entry in Amazon DynamoDB, which is periodically checked by scheduling an Amazon CloudWatch Events rule to notify security when logs have not arrived.

正解: C

 

質問 132
An application runs on Amazon EC2 instances behind an Application Load Balancer. Amazon RDS MySOL is used on the backend. The instances run in an Auto Scaling group across multiple Availability Zones. The Application Load Balancer health check ensures the web servers are operating and able to make read/write SQL connections. Amazon Route 53 provides DNS functionality with a record pointing to the Application Load Balancer. A new policy requires a geographically isolated disaster recovery site with an RTO of 4 hours and an RPO of 15 minutes.
Which disaster recovery strategy will require the LEAST amount of changes to the application stack?

  • A. Launch a replica stack of everything except RDS in a different region. Upon failure, copy the snapshot over from the primary region to the disaster recovery region. Adjust the Amazon Route 53 record set to point to the disaster recovery region's Application Load Balancer.
  • B. Launch a replica stack of everything except RDS in a different Availability Zone. Create an RDS read-only replica in a new Availability Zone and configure the new stack to point to the local RDS instance. Add the new stack to the Route 53 record set with a failover routing policy.
  • C. Launch a replica stack of everything except RDS in a different region. Create an RDS read-only replica in a new region and configure the new stack to point to the local RDS instance. Add the new stack to the Route 53 record set with a latency routing policy.
  • D. Launch a replica stack of everything except RDS in a different region. Create an RDS read-only replica in a new region and configure the new stack to point to the local RDS instance. Add the new stack to the Amazon Route 53 record set with a failover routing policy.

正解: B

 

質問 133
You run accounting software in the AWS cloud. This software needs to be online continuously during the day every day of the week, and has a very static requirement for compute resources.
You also have other, unrelated batch jobs that need to run once per day at any time of your choosing. How should you minimize cost?

  • A. Purchase a Medium Utilization Reserved Instance to run the accounting software. Turn it off after hours.
    Run the batch jobs with the same instance class, so the Reserved Instance credits are also applied to the batch jobs.
  • B. Purchase a Full Utilization Reserved Instance to run the accounting software. Turn it off after hours.
    Run the batch jobs with the same instance class, so the Reserved Instance credits are also applied to the batch jobs.
  • C. Purchase a Light Utilization Reserved Instance to run the accounting software. Turn it off after hours.
    Run the batch jobs with the same instance class, so the Reserved Instance credits are also applied to the batch jobs.
  • D. Purchase a Heavy Utilization Reserved Instance to run the accounting software. Turn it off after hours.
    Run the batch jobs with the same instance class, so the Reserved Instance credits are also applied to the batch jobs.

正解: D

解説:
Because the instance will always be online during the day, in a predictable manner, and there are a sequence of batch jobs to perform at any time, we should run the batch jobs when the account software is off. We can achieve Heavy Utilization by alternating these times, so we should purchase the reservation as such, as this represents the lowest cost. There is no such thing a
"Full" level utilization purchases on EC2.
https://d0.awsstatic.com/whitepapers/Cost_Optimization_with_AWS.pdf

 

質問 134
You are administering a continuous integration application that polls version control for changes and then launches new Amazon EC2 instances for a full suite of build tests. What should you do to ensure the lowest overall cost while being able to run as many tests in parallel as possible?

  • A. Perform syntax checking on the continuous integration system before launching a new Amazon EC2 instance for build test, unit and integration tests.
  • B. Perform syntax and build tests on the continuous integration system before launching the new Amazon EC2 instance unit and integration tests.
  • C. Perform syntax checking on the continuous integration system before launching a new AWS Data Pipeline for coordinating the output of unit, integration, and build tests.
  • D. Perform all tests on the continuous integration system, using AWS OpsWorks for unit, integration, and build tests.

正解: B

解説:
Explanation
Continuous Integration (CI) is a development practice that requires developers to integrate code into a shared repository several times a day. Each check-in is then verified by an automated build, allowing teams to detect problems early.
Option A and D are invalid because you can do build tests on a CI system and not only Syntax tests. And Syntax tests are normally done during coding time and not during the build time.
Option C is invalid because Opswork is ideally not used for build and integration tests.
For an example of a Continuous integration system, please refer to the Jenkins system via the url below
* https://jenkins.io/

 

質問 135
......

DOP-C01試験問題集パスできる2022年最新の認証された試験問題:https://www.goshiken.com/Amazon/DOP-C01-mondaishu.html

DOP-C01試験問題リアルな最新問題PDF:https://drive.google.com/open?id=1_aA39vfrntNlyyAH6u0OFw5UFlNpj8UB