A company wants to use a grid system for a proprietary enterprise in-memory data store on top of AWS. This system can run in multiple server nodes in any Linux-based distribution. The system must be able to reconfigure the entire cluster every time a node is added or removed. When adding or removing nodes, an / etc./cluster/nodes.config file must be updated, listing the IP addresses of the current node members of that cluster
The company wants to automate the task of adding new nodes to a cluster. What can a DevOps Engineer do to meet these requirements?

1. A. Use AWS OpsWorks Stacks to layer the server nodes of that cluste
2. B. Create a Chef recipe that populates the content of the /etc/cluster/nodes.config file and restarts the service by using the current members of the laye
3. C. Assign that recipe to the Configure lifecycle event.
4. D. Put the file nodes.config in version contro
5. E. Create an AWS CodeDeploy deployment configuration and deployment group based on an Amazon EC2 tag value for the cluster node
6. F. When adding a new node to the cluster, update the file with all tagged instances, and make a commit in version contro
7. G. Deploy the new file and restart the services.
8. H. Create an Amazon S3 bucket and upload a version of the etc/cluster/nodes.config fil
9. I. Create a crontab script that will poll for that S3 file and download it frequentl
10. J. Use a process manager, such as Monit or systemd, to restart the cluster services when it detects that the new file was modifie
11. K. When adding a node to the cluster, edit the file's most recent member
12. L. Upload the new file to the S3 bucket.
13. M. Create a user data script that lists all members of the current security group of the cluster and automatically updates the /etc/cluster/nodes.config file whenever a new instance is added to the cluster

Correct Answer: A
https://docs.aws.amazon.com/opsworks/latest/userguide/workingcookbook-events.html

A DevOps engineer used an AWS CloudFormation custom resource to set up AD Connector. The AWS Lambda function executed and created AD Connector, but CloudFormation is not transitioning from CREATE_IN_PROGRESS to CREATE.COMPLETE.
Which action should the engineer take to resolve this issue?

1. A. Ensure the Lambda function code has exiled successfully.
2. B. Ensure the Lambda function code returns a response to the pre-signed URL.
3. C. Ensure the Lambda function IAM role has cloudformation:UpdateStack permissions for the stack ARN.
4. D. Ensure the Lambda function IAM role has ds:ConnectDirectory permissions for the AWS account.

Correct Answer: A

Your application stores sensitive information on an EBS volume attached to your EC2 instance. How can you protect your information? Choose two answers from the options given below

1. A. Unmount the EBS volume, take a snapshot and encrypt the snapsho
2. B. Re-mount the Amazon EBS volume
3. C. It is not possible to encrypt an EBS volume, you must use a lifecycle policy to transfer data to S3 for encryption.
4. D. Copy the unencrypted snapshot and check the box to encrypt the new snapsho
5. E. Volumes restored from this encrypted snapshot will also be encrypted.
6. F. Create and mount a new, encrypted Amazon EBS volum
7. G. Move the data to the new volum
8. H. Delete the old Amazon EBS volume *t

Correct Answer: CD
These steps are given in the AWS documentation
To migrate data between encrypted and unencrypted volumes
1) Create your destination volume (encrypted or unencrypted, depending on your need).
2) Attach the destination volume to the instance that hosts the data to migrate.
3) Make the destination volume available by following the procedures in Making an Amazon EBS Volume Available for Use. For Linux instances, you can create a mount point at /mnt/destination and mount the destination volume there.
4) Copy the data from your source directory to the destination volume. It may be most convenient to use a bulk-copy utility for this.
To encrypt a volume's data by means of snapshot copying
1) Create a snapshot of your unencrypted CBS volume. This snapshot is also unencrypted.
2) Copy the snapshot while applying encryption parameters. The resulting target snapshot is encrypted.
3) Restore the encrypted snapshot to a new volume, which is also encrypted.
For more information on EBS Encryption, please refer to the below document link: from AWS
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ EBSEncryption.html

A company has an application that has predictable peak traffic times. The company wants the application instances to scale up only during the peak times. The application stores state in Amazon DynamoDB. The application environment uses a standard Node.js application stack and custom Chef recipes stored in a private Git repository.
Which solution is MOST cost-effective and requires the LEAST amount of management overhead when performing rolling updates of the application environment?

1. A. Create a custom AMI with the Node.js environment and application stack using Chef recipe
2. B. Use the AMI in an Auto Scaling group and set up scheduled scaling for the required times, then set up an Amazon EC2 IAM role that provides permission to access DynamoDB.
3. C. Create a Docker file that uses the Chef recipes for the application environment based on an official Node.js Docker imag
4. D. Create an Amazon ECS cluster and a service for the application environment, then create a task based on this Docker imag
5. E. Use scheduled scaling to scale the containers at the appropriate times and attach a task-level IAM role that provides permission to access DynamoDB.
6. F. Configure AWS OpsWorks stacks and use custom Chef cookbook
7. G. Add the Git repository information where the custom recipes are stored, and add a layer in OpsWorks for the Node.js application serve
8. H. Then configure the custom recipe to deploy the application in the deploy ste
9. I. Configure time-based instances and attach an Amazon EC2 IAM role that provides permission to access DynamoDB.
10. J. Configure AWS OpsWorks stacks and push the custom recipes to an Amazon S3 bucket and configure custom recipes to point to the S3 bucke
11. K. Then add an application layer type for a standard Node.js application server and configure the custom recipe to deploy the application in the deploy step from the S3 bucke
12. L. Configure time-based instances and attach an Amazon EC2 IAM role that provides permission to access DynamoDB

Correct Answer: D

A web application has been deployed using an AWS Elastic Beanstalk application The Application Developers are concerned that they are seeing high latency in two different areas of the application: HTTP client requests to a third-party API MySQL client library queries to an Amazon RDS database A DevOps Engineer must gather trace data to diagnose the issues. Which steps will gather the trace information with the LEAST amount of changes and performance impacts to the application?

1. A. Add additional logging to the application cod
2. B. Use the Amazon CloudWatch agent to stream the application logs into Amazon Elasticsearch Servic
3. C. Query the log data in Amazon ES.
4. D. Instrument the application to use the AWS X-Ray SD
5. E. Post trace data to an Amazon Elasticsearch Service cluste
6. F. Query the trace data for calls to the HTTP client and the MySQL client.
7. G. On the AWS Elastic Beanstalk management page for the application, enable the AWS X-Ray daemon.View the trace data in the X-Ray console.
8. H. Instrument the application using the AWS X-Ray SD
9. I. On the AWS Elastic Beanstalk management page for the application, enable the X-Ray daemo
10. J. View the trace data in the X-Ray console.

Correct Answer: C