A company wants to use AWS CloudFormation for infrastructure deployment. The company has strict tagging and resource requirements and wants to limit the deployment to two Regions. Developers will need to deploy multiple versions of the same application.
Which solution ensures resources are deployed in accordance with company policy?

1. A. Create AWS Trusted Advisor checks to find and remediate unapproved CloudFormation StackSets.
2. B. Create a CloudFormation drift detection operation to find and remediate unapproved CloudFormation StackSets.
3. C. Create CloudFormation StackSets with approved CloudFormation templates.
4. D. Create AWS Service Catalog products with approved CloudFormation templates.

Correct Answer: C

A company needs to implement a robust CI/CD pipeline to automate the deployment of an application in AWS. The pipeline must support continuous integration, continuous delivery, and automatic rollback upon deployment failure. The entire CI/CD pipeline must be capable of being re-provisioned in alternate AWS accounts or Regions within minutes. A DevOps engineer has already created an AWS CodeCommit repository to store the source code.
Which combination of actions should be taken when building this pipeline to meet these requirements? (Select THREE.)

1. A. Configure an AWS CodePipehne pipeline with a build stage using AWS CodeBuild.
2. B. Copy the build artifact from CodeCommit to Amazon S3.
3. C. Create an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer (ALB) and set the ALB as the deployment target in AWS CodePipeline.
4. D. Create an AWS Elastic Beanstalk environment as the deployment target in AWS CodePipeline.
5. E. Implement an Amazon SQS queue to decouple the pipeline components.
6. F. Provision all resources using AWS CloudFormation.

Correct Answer: ABD

A DevOps Engineer is working with an application deployed to 12 Amazon EC2 instances across 3 Availability Zones. New instances can be started from an AMI image. On a typical day, each EC2 instance has 30% utilization during business hours and 10% utilization after business hours. The CPU utilization has an immediate spike in the first few minutes of business hours. Other increases in CPU utilization rise gradually.
The Engineer has been asked to reduce costs while retaining the same or higher reliability. Which solution meets these requirements?

1. A. Create two Amazon CloudWatch Events rules with schedules before and after business hours begin and en
2. B. Create two AWS Lambda functions, one invoked by each rul
3. C. The first function should stop nine instances after business hours end, the second function should restart the nine instances before the business day begins.
4. D. Create an Amazon EC2 Auto Scaling group using the AMI image, with a scaling action based on the Auto Scaling group's CPU Utilization average with a target of 75%. Create a scheduled action for the group to adjust the minimum number of instances to three after business hours end and reset to six before business hours begin.
5. E. Create two Amazon CloudWatch Events rules with schedules before and after business hours begin and en
6. F. Create an AWS CloudFormation stack, which creates an EC2 Auto Scaling group, with a parameter for the number of instance
7. G. Invoke the stack from each rule, passing a parameter value of three in the morning, and six in the evening.
8. H. Create an EC2 Auto Scaling group using the AMI image, with a scaling action based on the Auto Scaling group's CPU Utilization average with a target of 75%. Create a scheduled action to terminate nine instances each evening after the close of business.

Correct Answer: B

A company has deployed several applications globally. Recently, Security Auditors found that few Amazon EC2 instances were launched without Amazon EBS disk encryption. The Auditors have requested a report detailing all EBS volumes that were not encrypted in multiple AWS accounts and regions. They also want to be notified whenever this occurs in future.
How can this be automated with the LEAST amount of operational overhead?

1. A. Create an AWS Lambda function to set up an AWS Config rule on all the target account
2. B. Use AWS Config aggregators to collect data from multiple accounts and region
3. C. Export the aggregated report to an Amazon S3 bucket and use Amazon SNS to deliver the notifications.
4. D. Set up AWS CloudTrail to deliver all events to an Amazon S3 bucket in a centralized accoun
5. E. Use the S3 event notification feature to invoke an AWS Lambda function to parse AWS CloudTrail logs whenever logs are delivered to the S3 bucke
6. F. Publish the output to an Amazon SNS topic using the same Lambda function.
7. G. Create an AWS CloudFormation template that adds an AWS Config managed rule for EBS encryption.Use a CloudFormation stack set to deploy the template across all accounts and region
8. H. Store consolidated evaluation results from config rules in Amazon S3. Send a notification using Amazon SNS when non- compliant resources are detected.
9. I. Using AWS CLI, run a script periodically that invokes the aws ec2 describe-volumes query with a JMESPATH query filte
10. J. Then, write the output to an Amazon S3 bucke
11. K. Set up an S3 event notification to send events using Amazon SNS when new data is written to the S3 bucket.

Correct Answer: C
https://aws.amazon.com/blogs/aws/aws-config-update-aggregate-compliance-data-across-accounts-regions/ https://docs.aws.amazon.com/config/latest/developerguide/aws-config-managed-rules-cloudformation-templates

A Development team is adding a new country to an e-commerce application. This addition requires that new application features be added to the shipping component of the application. The team has not decided if all new features should be added, as some will take approximately six weeks to build. While the final decision on the shipping component features is being made, other team members are continuing to work on other features of the application.
Based on this situation, how should the application feature deployments be managed?

1. A. Add the code updates as commits to the release branc
2. B. The team can delay the deployment until all features are ready.
3. C. Add the code updates as commits to a feature branc
4. D. Merge the commits to a release branch as features are ready.
5. E. Add the code updates as a single commit when a feature is read
6. F. Tag this commit with "new-country."
7. G. Create a new repository named "new-country". Commit all the code changes to the new repository.

Correct Answer: B