A DevOps Engineer is designing a deployment strategy for a web application. The application will use an Auto Scaling group to launch Amazon EC2 instances using an AMI. The same infrastructure will be deployed in multiple environments (development, test, and quality assurance). The deployment strategy should meet the following requirements: "¢ Minimize the startup time for the instance "¢ Allow the same AMI to work in multiple environments "¢ Store secrets for multiple environments securely
How should this be accomplished?

1. A. Preconfigure the AMI using an AWS Lambda function that launches an Amazon EC2 instance, and then runs a script to install the software and create the AM
2. B. Configure an Auto Scaling lifecycle hook to determine which environment the instance is launched in, and, based on that finding, run a configuration scrip
3. C. Save the secrets on an .ini file and store them in Amazon S3. Retrieve the secrets using a configuration script in EC2 user data.
4. D. Preconfigure the AMI by installing all the software using AWS Systems Manager automation and configure Auto Scaling to tag the instances at launch with their specific environmen
5. E. Then use a bootstrap script in user data to read the tags and configure settings for the environmen
6. F. Use the AWS Systems Manager Parameter Store to store the secrets using AWS KMS.
7. G. Use a standard AMI from the AWS Marketplac
8. H. Configure Auto Scaling to detect the current environmen
9. I. Install the software using a script in Amazon EC2 user dat
10. J. Use AWS Secrets Manager to store the credentials for all environments.
11. K. Preconfigure the AMI by installing all the software and configuration for all environment
12. L. Configure Auto Scaling to tag the instances at launch with their environmen
13. M. Use the Amazon EC2 user data to trigger an AWS Lambda function that reads the instance ID and then reconfigures the setting for the proper environmen
14. N. Use the AWS Systems Manager Parameter Store to store the secrets using AWS KMS.

Correct Answer: A

A healthcare provider has a hybrid architecture that includes 120 on-premises VMware servers running RedHat and 50 Amazon EC2 instances running Amazon Linux. The company is in the middle of an all-in migration to AWS and wants to implement a solution for collecting information from the on-premises virtual machines and the EC2 instances for data analysis. The information includes:
- Operating system type and version
- Data for installed applications
- Network configuration information, such as MAC and IP addresses
- Amazon EC2 instance AMI ID and IAM profile
How can these requirements be met with the LEAST amount of administration?

1. A. Write a shell script to run as a cron job on EC2 instances to collect and push the data to Amazon S3. For on-premises resources, use VMware vSphere to collect the data and write it into a file gateway forstoring the data in S3. Finally, use Amazon Athena on the S3 bucket for analytics.
2. B. Use a script on the on-premises virtual machines as well as the EC2 instances to gather and push the data into Amazon S3, and then use Amazon Athena for analytics.
3. C. Install AWS Systems Manager agents on both the on-premises virtual machines and the EC2 instances.Enable inventory collection and configure resource data sync to an Amazon S3 bucket to analyze the data with Amazon Athena.
4. D. Use AWS Application Discovery Service for deploying Agentless Discovery Connector in the VMware environment and Discovery Agents on the EC2 instances for collecting the dat
5. E. Then use the AWS Migration Hub Dashboard for analytics.

Correct Answer: C

A company has multiple child accounts that are part of an organization in AWS Organizations. The security team needs to review every Amazon EC2 security group and their inbound and outbound rules. The security team wants to programmatically retrieve this information from the child accounts using an AWS Lambda function in the master account of the organization.
Which combination of access changes will meet these requirements? (Select THREE.)

1. A. Create a trust relationship that allows users in the child accounts to assume the master account IAM role.
2. B. Create a trust relationship that allows users in the master account to assume the IAM roles of the child accounts.
3. C. Create an IAM role in each child account that has access to the AmazonEC2ReadOnlyAccess managed policy.
4. D. Create an IAM role in each child account to allow the sts:AssumeRole action against the master account IAM role's ARN.
5. E. Create an IAM role in the master account that allows the sts:AssumeRole action against the child account IAM role's ARN.
6. F. Create an IAM role in the master account that has access to the AmazonEC2ReadOnlyAccess managed policy.

Correct Answer: ADF

A company wants to implement a CI/CD pipeline for building and testing its mobile apps. A DevOps Engineer has been given the following requirements: Use AWS CodePipeline to orchestrate the workflow. Test the application on real devices. Trigger a notification. Stage the application binary on a production bucket in a different account. Make the application binary publicly accessible. Which sequence of actions should the Engineer perform in the pipeline to meet the requirements?

1. A. Use AWS CodeCommit as the code source and AWS CodeDeploy to compile and package the applicatio
2. B. Use CodeDeploy to deploy the application binary to an AWS Lambda function for testin
3. C. Use a third-party library on AWS Lambda to simulate the device platfor
4. D. Allow a Lambda role to upload to the production Amazon S3 bucke
5. E. Make the binary publicly accessibl
6. F. Trigger notifications using Amazon SNS.
7. G. Use GitHub as the code source and AWS Lambda to compile and package the applicatio
8. H. Use another Lambda function to run unit tests and deliver the application binary to a development bucke
9. I. Use the binary from the development bucket and install the application on a personal device for testin
10. J. Deliver the binary to the production bucket after approva
11. K. Trigger notifications using Amazon SNS.
12. L. Use an Amazon S3 bucket as the code source and AWS CodeBuild to compile and package the applicatio
13. M. Use AWS CodeDeploy to deploy the application binary to a device farm for testin
14. N. Deliver the binary to the production S3 bucke
15. O. Use an S3 bucket policy to allow public read on the productionS3 bucke
16. P. Trigger notifications using an Amazon CloudWatch Events rule with Amazon SNS.
17. Q. Use AWS CodeCommit as the code source and AWS CodeBuild to compile and package the applicatio
18. R. Invoke an AWS Lambda function that uploads the application binary to a device farm for testin
19. S. Deliver the binary to the production Amazon S3 bucke
20. T. Use an S3 bucket policy to allow public read on the production S3 bucke
21. . Trigger notifications by using an Amazon CloudWatch Events rule.

Correct Answer: D

A company is required to collect user consent to a privacy agreement. An application is deployed in six AWS Regions with two in North America, two in Europe, and two in Asia with a user base of 20-30 million users. The company needs to read and write data related to each user’s response, and ensure the responses are available in all six Regions.
What solution will satisfy these requirements while MINIMIZING latency?

1. A. Implement Amazon Aurora Global Database in each of the six Regions.
2. B. Implement Amazon DocumentDB (with MongoDB compatibility) in each of the six Regions.
3. C. Implement Amazon DynamoDB global tables in each of the six Regions.
4. D. Implement Amazon ElastiCache for Redis replication group in each of the six Regions.

Correct Answer: C