A fully updated 2021 DOP-C01 Exam Dumps exam guide from training expert PracticeTorrent [Q57-Q79]

Share

A fully updated 2021 DOP-C01 Exam Dumps exam guide from training expert PracticeTorrent

Provides complete coverage of every objective on exam and exam preparation DOP-C01

NEW QUESTION 57
The management team at a company with a large on-premises OpenStack environment wants to move non-production workloads to AWS. An AWS Direct Connect connection has been provisioned and configured to connect the environments. Due to contractual obligations, the production workloads must remain on-premises, and will be moved to AWS after the next contract negotiation. The company follows Center for Internet Security (CIS) standards for hardening images; this configuration was developed using the company's configuration management system.
Which solution will automatically create an identical image in the AWS environment without significant overhead?

  • A. Log in to the console, launch an Amazon EC2 instance, and install the configuration management agent. When changes are applied through the configuration management system, log in to the console and create a new AMI from the instance.
  • B. Create a new AWS OpsWorks layer and mirror the image hardening standards. Use this layer as the baseline for all AWS workloads.
  • C. When a change is made in the configuration management system, a job in Jenkins is triggered to use the VM Import command to create an Amazon EC2 instance in the Amazon VPC. Use lifecycle hooks to launch an AWS Lambda function to create the AMI.
  • D. Write an AWS CloudFormation template that will create an Amazon EC2 instance. Use cloud-unit to install the configuration management agent, use cfn-wait to wait for configuration management to successfully apply, and use an AWS Lambda-backed custom resource to create the AMI.

Answer: C

Explanation:
https://www.brad-x.com/2015/10/01/importing-an-openstack-vm-into-amazon-ec2/
https://docs.aws.amazon.com/vm-import/latest/userguide/vmimport-instance-import.html

 

NEW QUESTION 58
A company is running an application on Amazon EC2 instances behind an ELB Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones.
After a recent application update, users are getting HTTP 502 Bad Gateway errors from the application URL. The DevOps Engineer cannot analyze the problem because Auto Scaling is terminating all EC2 instances shortly after launch for being unhealthy.
What steps will allow the DevOps Engineer access to one of the unhealthy instances to troubleshoot the deployed application?

  • A. Add a lifecycle hook to your Auto Scaling group to move instances in the Terminatingstate to the Terminating:Waitstate.
  • B. Edit the Auto Scaling group to enable termination protection as this will protect unhealthy instances from being terminated.
  • C. Create an image from the terminated instance and create a new instance from that image. The Application team can then log into the new instance.
  • D. As soon as a new instance is created by AutoScaling, put the instance into a Standby state as this will prevent the instance from being terminated.

Answer: A

Explanation:
https://aws.amazon.com/blogs/aws/auto-scaling-update-lifecycle-standby-detach/

 

NEW QUESTION 59
When logging with Amazon CloudTrail, API call information for services with regional end points is ____.

  • A. captured in the same region as to which the API call is made and processed and delivered to the region associated with your Amazon S3 bucket
  • B. captured, processed, and delivered to the region associated with your Amazon S3 bucket
  • C. captured in the region where the end point is located, processed in the region where the CloudTrail trail is configured, and delivered to the region associated with your Amazon S3 bucket
  • D. captured and processed in the same region as to which the API call is made and delivered to the region associated with your Amazon S3 bucket

Answer: D

Explanation:
When logging with Amazon CloudTrail, API call information for services with regional end points (EC2, RDS etc.) is captured and processed in the same region as to which the API call is made and delivered to the region associated with your Amazon S3 bucket. API call information for services with single end points (IAM, STS etc.) is captured in the region where the end point is located, processed in the region where the CloudTrail trail is configured, and delivered to the region associated with your Amazon S3 bucket.
Reference: https://aws.amazon.com/cloudtrail/faqs/

 

NEW QUESTION 60
Your company uses an application hosted in AWS which conists of EC2 Instances. The logs of the EC2 instances need to be processed and analyzed in real time, since this is a requirement from the IT Security department. Which of the following can be used to process the logs in real time.

  • A. UseAmazon S3 to store the logs and then use Amazon Kinesis to process and analyzethe logs in real time
  • B. Useanother EC2 Instance with a larger instance type to process the logs
  • C. UseAmazon Glacier to store the logs and then use Amazon Kinesis to process andanalyze the logs in real time
  • D. UseCloudwatch logs to process and analyze the logs in real time

Answer: A

Explanation:
Explanation
The AWS Documentation mentions the below
Real-time metrics and reporting
You can use data collected into Kinesis Streams for simple data analysis and reporting in real time. For example, your data-processing application can work on metrics and reporting for system and application logs as the data is streaming in, rather than wait to receive batches of data.
Real-time data analytics
This combines the power of parallel processing with the value of real-time data. For example, process website clickstreams in real time, and then analyze site usability engagement using multiple different Kinesis Streams applications running in parallel.
Amazon Glacier is meant for Archival purposes and should not be used for storing the logs for real time processing.
For more information on Amazon Kinesis, please refer to the below link:
* http://docs.aws.amazon.com/streams/latest/dev/introduction.html

 

NEW QUESTION 61
A Solutions Architect is designing a new application that needs to access data in a different AWS account
located within the same region. The data must not be accessed over the Internet.
Which solution will meet these requirements with the LOWEST cost?

  • A. Establish a VPC Peering connection between accounts.
  • B. Add a NAT Gateway to the data account.
  • C. Configure Direct Connect in each account.
  • D. Add rules to the security groups in each account.

Answer: A

 

NEW QUESTION 62
Your application has an Auto Scaling group of three EC2 instances behind an Elastic Load Balancer. Your Auto Scalinggroup was updated with a new launch configuration that refers to an updated AMI. During the deployment, customers complained that they were receiving several errors even though all instances passed the ELB health checks. How can you prevent this from happening again?

  • A. Manuallyterminate the instances with the older launch configuration.
  • B. Createa new launch configuration with the updated AMI and associate it with the AutoScaling group.
    Increase the size of the group to six and when instances becomehealthy revert to three.
  • C. Createa new ELB and attach the Autoscaling Group to the ELB
  • D. Updatethe launch configuration instead of updating the Autoscaling Group

Answer: B

Explanation:
Explanation
An Auto Scaling group is associated with one launch configuration at a time, and you can't modify a launch configuration after you've created it. To change the launch configuration for an Auto Scaling group, you can use an existing launch configuration as the basis for a new launch configuration and then update the Auto Scaling group to use the new launch configuration.
After you change the launch configuration for an Auto Scaling group, any new instances are launched using the new configuration options, but existing instances are not affected.
Then to ensure the new instances are launches, change the size of the Autoscaling Group to 6 and once the new instances are launched, change it back to 3.
For more information on instances scale-in process and Auto Scaling Group's termination policies please view the following link:
* https://docs^ws.amazon.com/autoscaling/ec2/userguide/as-instance-termination.html#default-termination-policy For more information on changing the launch configuration please see the below link:
* http://docs.aws.amazon.com/autoscaling/latest/userguide/change-launch-config.html

 

NEW QUESTION 63
Your team wants to begin practicing continuous delivery using CloudFormation, to enable automated builds
and deploys of whole, versioned stacks or stack layers. You have a 3-tier, mission-critical system. Which of
the following is NOT a best practice for using CloudFormation in a continuous delivery environment?

  • A. Use CloudFormation to create brand new infrastructure for all stateless resources on each push, and run
    integration tests on that set of infrastructure.
  • B. Parametrize the template and use Mappings to ensure your template works in multiple Regions.
  • C. Model your stack in one template, so you can leverage CloudFormation's state management and
    dependency resolution to propagate all changes.
  • D. Use the AWS CloudFormation ValidateTemplate call before publishing changes to AWS.

Answer: C

Explanation:
Explanation
Answer - B
Some of the best practices for Cloudformation are
* Created Nested stacks
As your infrastructure grows, common patterns can emerge in which you declare the same components in each
of your templates. You can separate out these common components and create dedicated templates for them.
That way, you can mix and match different templates but use nested stacks to create a single, unified stack.
Nested stacks are stacks that create other stacks. To create nested stacks, use the
AWS::CloudFormation::Stackresource in your template to reference other templates.
* Reuse Templates
After you have your stacks and resources set up, you can reuse your templates to replicate your infrastructure
in multiple environments. For example, you can create environments for development, testing, and production
so that you can test changes before implementing them into production. To make templates reusable, use the
parameters, mappings, and conditions sections so that you can customize your stacks when you create them.
For example, for your development environments, you can specify a lower-cost instance type compared to
your production environment, but all other configurations and settings remain the same. For more information
on Cloudformation best practises, please visit the below URL:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/best-practices.
html

 

NEW QUESTION 64
You are building a Ruby on Rails application for internal, non-production use which uses MySQL as a database. You want developers without very much AWS experience to be able to deploy new code with a single command line push. You also want to set this up as simply as possible.
Which tool is ideal for this setup?

  • A. AWS ELB + EC2 with CLI Push
  • B. AWS CloudFormation
  • C. AWS Elastic Beanstalk
  • D. AWS OpsWorks

Answer: C

Explanation:
Elastic Beanstalk's primary mode of operation exactly supports this use case out of the box. It is simpler than all the other options for this question. With Elastic Beanstalk, you can quickly deploy and manage applications in the AWS cloud without worrying about the infrastructure that runs those applications. AWS Elastic Beanstalk reduces management complexity without restricting choice or control. You simply upload your application, and Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, and application health monitoring.
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_Ruby_rails.html

 

NEW QUESTION 65
When thinking of AWS OpsWorks, which of the following is true?

  • A. Layers have many stacks, stacks have many instances.
  • B. Instances have many stacks, stacks have many layers.
  • C. Layers have many instances, instances have many stacks.
  • D. Stacks have many layers, layers have many instances.

Answer: D

Explanation:
The stack is the core AWS OpsWorks component. It is basically a container for AWS resources-Amazon
EC2 instances, Amazon RDS database instances, and so on-that have a common purpose and should
be logically managed together. You define the stack's constituents by adding one or more layers. A layer
represents a set of Amazon EC2 instances that serve a particular purpose, such as serving applications
or hosting a database server. An instance represents a single computing resource, such as an Amazon
EC2 instance.
Reference: http://docs.aws.amazon.com/opsworks/latest/userguide/welcome.html

 

NEW QUESTION 66
You are building an AWS CloudFormation template for a multi-tier web application.
The user data of your Linux web server resource contains a complex script that can take a long time to run.
Which techniques could you use to ensure that these servers are fully configured and running before attaching them to the load balancer? Choose 2 answers

  • A. Launch your Linux servers from a nested stack that is called from within the load balancer resource in your AWS CloudFormation template.
  • B. Add an AWS CloudFormation wait Condition that depends on the web server resource.
    When the UserData script finishes on the web servers, use curl to signal to the Wait Condition pre-signed URL that they are ready.
  • C. Add an AWS CloudFormation Wait Condition that depends on the web server resource.
    When the UserData script finishes on the web servers, use the command "cfn-signal" to signal that they are ready.
  • D. Add an AWS CloudFormation Wait Condition that depends on the web server resource.
    When the UserData script finishes on the web servers, use curl to send a signal the Wait Condition at http://169.254.169.254/waithandle/.
  • E. In your AWS CloudFormation template, position the load balancer resource JSON block directly below your Linux server resource.

Answer: B,C

 

NEW QUESTION 67
You have been asked to de-risk deployments at your company. Specifically, the CEO is concerned about outages that occur because of accidental inconsistencies between Staging and Production, which sometimes cause unexpected behaviors in Production even when Staging tests pass. You already use Docker to get high consistency between Staging and Production for the application environment on your EC2 instances. How do you further de-risk the rest of the execution environment, since in AWS, there are many service components you may use beyond EC2 virtual machines?

  • A. Use AWS ECS and Docker clustering. This will make sure that the AMIs and machine sizes are the same across both environments.
  • B. Use AMIs to ensure the whole machine, including the kernel of the virual machines, is consistent, since Docker uses Linux Container (LXC) technology, and we need to make sure the container environment is consistent.
  • C. Use AWS Config to force the Staging and Production stacks to have configuration parity. Any differences will be detected for you so you are aware of risks.
  • D. Develop models of your entire cloud system in CloudFormation. Use this model in Staging and Production to achieve greater parity. */

Answer: D

Explanation:
Explanation
After you have your stacks and resources set up, you can reuse your templates to replicate your infrastructure in multiple environments. For example, you can create environments for development, testing, and production so that you can test changes before implementing them into production. To make templates reusable, use the parameters, mappings, and conditions sections so that you can customize your stacks when you create them. For example, for your development environments, you can specify a lower-cost instance type compared to your production environment, but all other configurations and settings remain the same For more information on Cloudformation best practices please refer to the below link:
* http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/best-practices.html

 

NEW QUESTION 68
There is a requirement for an application hosted on a VPC to access the On-premise LDAP server. The VPC and the On-premise location are connected via an I PSec VPN. Which of the below are the right options for the application to authenticate each user. Choose 2 answers from the options below

  • A. The application authenticates against LDAP the application then calls the AWS identity and Access Management (1AM) Security service to log in to 1AM using the LDAP credentials the application can use the 1AM temporary credentials to access the appropriate AWS service.
  • B. Develop an identity broker that authenticates against 1AM security Token service to assume a 1AM role in order to get temporary AWS security credentials The application calls the identity broker to get AWS temporary security credentials.
  • C. Develop an identity broker that authenticates against LDAP and then calls 1AM Security Token Service to get 1AM federated user credentials. The application calls the identity broker to get 1AM federated user credentials with access to the appropriate AWS service.
  • D. The application authenticates against LDAP and retrieves the name of an 1AM role associated with the user. The application then calls the 1AM Security Token Service to assume that 1AM role. The application can use the temporary credentials to access any AWS resources.

Answer: C,D

Explanation:
Explanation
When you have the need for an in-premise environment to work with a cloud environment, you would normally have 2 artefacts for authentication purposes
* An identity store - So this is the on-premise store such as Active Directory which stores all the information for the user's and the groups they below to.
* An identity broker - This is used as an intermediate agent between the on-premise location and the cloud environment. In Windows you have a system known as Active Directory Federation services to provide this facility.
Hence in the above case, you need to have an identity broker which can work with the identity store and the Security Token service in aws. An example diagram of how this works from the aws documentation is given below.

For more information on federated access, please visit the below link:
* http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_common-scenarios_federated-users.htmI

 

NEW QUESTION 69
A company has microservices running in AWS Lambda that read data from Amazon DynamoDB. The Lambda code is manually deployed by Developers after successful testing. The company now needs the tests and deployments be automated and run in the cloud. Additionally, traffic to the new versions of each microservice should be incrementally shifted over time after deployment.
What solution meets all the requirements, ensuring the MOST developer velocity?

  • A. Create an AWS CodeBuild configuration that triggers when the test code is pushed. Use AWS CloudFormation to trigger an AWS CodePipeline configuration that deploys the new Lambda versions and specifies the traffic shift percentage and interval.
  • B. Create an AWS CodePipeline configuration and set up the source code step to trigger when code is pushed. Set up the build step to use AWS CodeBuild to run the tests. Set up an AWS CodeDeploy configuration to deploy, then select the CodeDeployDefault.LambdaLinear10PercentEvery3Minutes option.
  • C. Use the AWS CLI to set up a post-commit hook that uploads the code to an Amazon S3 bucket after tests have passed. Set up an S3 event trigger that runs a Lambda function that deploys the new version.
    Use an interval in the Lambda function to deploy the code over time at the required percentage.
  • D. Create an AWS CodePipeline configuration and set up a post-commit hook to trigger the pipeline after tests have passed. Use AWS CodeDeploy and create a Canary deployment configuration that specifies the percentage of traffic and interval.

Answer: B

Explanation:
Explanation
https://docs.aws.amazon.com/codedeploy/latest/userguide/deployment-configurations.html

 

NEW QUESTION 70
What is the maximum supported single-volume throughput on EBS?

  • A. 40MiB/s
  • B. 160MiB/s
  • C. 320MiB/s
  • D. 640MiB/s

Answer: C

Explanation:
The ceiling throughput for PIOPS on EBS is 320MiB/s.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html

 

NEW QUESTION 71
A Solutions Architect is building a new feature using a Lambda to create metadata when a user uploads a
picture to Amazon S3. All metadata must be indexed.
Which AWS service should the Architect use to store this metadata?

  • A. Amazon DynamoDB
  • B. Amazon Kinesis
  • C. Amazon S3
  • D. Amazon EFC

Answer: C

 

NEW QUESTION 72
A company is using an AWS CodeBuild project to build and package an application.
The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts.
The buildspec.yml file contains the following:

The DevOps Engineer has noticed that anybody with an AWS account is able to download the artifacts.
What steps should the DevOps Engineer take to stop this?

  • A. Create an S3 bucket policy that grants read access to the relevant AWS accounts and denies read access to the principal "*"
  • B. Modify the post_build to command to use --acl public-readand configure a bucket policy that grants read access to the relevant AWS accounts only.
  • C. Modify the post_build command to remove --acl authenticated-readand configure a bucket policy that allows read access to the relevant AWS accounts only.
  • D. Configure a default ACL for the S3 bucket that defines the set of authenticated users as the relevant AWS accounts only and grants read-only access.

Answer: C

Explanation:
You can define bucket policy using NotPrincipal to grant permission to specified accounts or users while it explicitly denies access from other users.
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_notprincipal.ht ml

 

NEW QUESTION 73
You currently have the following setup in AWS
1) An Elastic Load Balancer
2) Auto Scaling Group which launches EC2 Instances
3) AMIs with your code pre-installed
You want to deploy the updates of your app to only a certain number of users. You want to have a cost-effective solution. You should also be able to revert back quickly. Which of the below solutions is the most feasible one?

  • A. Create a full second stack of instances, cut the DNS over to the new stack of instances, and change the DNS back if a rollback is needed.
  • B. Redeploy with AWS Elastic Beanstalk and Elastic Beanstalk versions. Use Route 53 Weighted Round Robin records to adjust the proportion of traffic hitting the two ELBs
  • C. Create new AM Is with the new app. Then use the new EC2 instances in half proportion to the older instances.
  • D. Create a second ELB, and a new Auto Scaling Group assigned a new Launch Configuration. Create a new AMI with the updated app. Use Route53 Weighted Round Robin records to adjust the proportion of traffic hitting the two ELBs.

Answer: D

Explanation:
Explanation
The Weighted Routing policy of Route53 can be used to direct a proportion of traffic to your application. The best option is to create a second CLB, attach the new Autoscaling Group and then use Route53 to divert the traffic.
Option B is wrong because just having EC2 instances running with the new code will not help.
Option C is wrong because Clastic beanstalk is good for development environments, and also there is no mention of having 2 environments where environment url's can be swapped.
Option D is wrong because you still need Route53 to split the traffic.
For more information on Route53 routing policies, please refer to the below link:
* http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

 

NEW QUESTION 74
A DevOps Engineer is leading the implementation for automating patching of Windows-based workstations in a hybrid cloud environment by using AWS Systems Manager (SSM).
What steps should the Engineer follow to set up Systems Manager to automate patching in this environment?
(Select TWO.)

  • A. Create multiple IAM service roles for Systems Manager so that the ssm.amazonaws.com service can execute the AssumeRole operation on every instance. Register the role on a per-resource level to enable the creation of a service token. Perform managed-instance activation with the newly created service role attached to each managed instance.
  • B. Using previously obtained activation codes and activation IDs, download and install the SSM Agent on the hybrid servers, and register the servers or virtual machines on the Systems Manager service. Hybrid instances will show with an "mi-" prefix in the SSM console.
  • C. Using previously obtained activation codes and activation IDs, download and install the SSM Agent on the hybrid servers, and register the servers or virtual machines on the Systems Manager service. Hybrid instances will show with an "i-" prefix in the SSM console as if they were provisioned as a regular Amazon EC2 instance.
  • D. Create an IAM service role for Systems Manager so that the ssm.amazonaws.com service can execute the AssumeRole operation. Register the role to enable the creation of a service token. Perform managed-instance activation with the newly created service role.
  • E. Run AWS Config to create a list of instances that are unpatched and not compliant. Create an instance scheduler job, and through an AWS Lambda function, perform the instance patching to bring them up to compliance.

Answer: B,D

Explanation:
Explanation
https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-managed-instance-activation.html
https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-install-managed-win.html

 

NEW QUESTION 75
You are a Devops Engineer for your company. Your company is using Opswork stack to rollout a collection of
web instances. When the instances are launched, a configuration file need to be setup prior to the launching of
the web application hosted on these instances. Which of the following steps would you carry out to ensure this
requirement gets fulfilled. Choose 2 answers from the options given below

  • A. Ensurethat the Opswork stack is changed to use custom cookbooks
  • B. Configurea recipe which sets the configuration file and add it to the Deploy LifeCycleEvent of the
    specific web layer.
  • C. Configurea recipe which sets the configuration file and add it to the ConfigureLifeCycle Event of the
    specific web layer.
  • D. Ensurethat the Opswork stack is changed to use the AWS specific cookbooks

Answer: A,C

Explanation:
Explanation
This is mentioned in the AWS documentation
Configure
This event occurs on all of the stack's instances when one of the following occurs:
* An instance enters or leaves the online state.
* You associate an Elastic IP address with an instance or disassociate one from an instance.
* You attach an Elastic Load Balancing load balancer to a layer, or detach one from a layer.
For example, suppose that your stack has instances A, B, and C, and you start a new instance, D.
After D has finished running its setup recipes, AWS OpsWorks Stacks triggers the Configure event on A, B, C, and D.
If you subsequently stop A, AWS Ops Works Stacks triggers the Configure event on B, C, and D.
AWS
OpsWorks Stacks responds to the Configure event by running each layer's Configure recipes, which update the
instances' configuration to reflect the current set of online instances. The Configure event is therefore a good
time to regenerate configuration files. For example, the HAProxy Configure recipes reconfigure the load
balancer to accommodate any changes in the set of online application server instances.
You can also manually trigger the Configure event by using the Configure stack command. For more
information on Opswork lifecycle events, please refer to the below URL:
* http://docs.aws.a
mazon.com/opsworks/latest/userguide/workingcookbook-events.htm I

 

NEW QUESTION 76
To override an allow in an IAM policy, you set the Effect element to ______.

  • A. Allow
  • B. Block
  • C. Deny
  • D. Stop

Answer: C

Explanation:
By default, access to resources is denied. To allow access to a resource, you must set the Effect element to Allow. To override an allow (for example, to override an allow that is otherwise in force), you set the Effect element to Deny.
Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPolicyLanguage_ElementDescriptions.
html

 

NEW QUESTION 77
You run a clustered NoSQL database on AWS EC2 using AWS EBS. You need to reduce latency for database response times. Performance is the most important concern, not availability. You did not perform the initial setup, someone without much AWS knowledge did, so you are not sure if they configured everything optimally. Which of the following is NOT likely to be an issue contributing to increased latency?

  • A. The database and requesting system are both in the wrong Availability Zone.
  • B. The EC2 instances are not EBS Optimized.
  • C. The database is not running in a placement group.
  • D. The EBS Volumes are not using PIOPS.

Answer: A

Explanation:
For the highest possible performance, all instances in a clustered database like this one should be in a single Availability Zone in a placement group, using EBS optimized instances, and using PIOPS SSD EBS Volumes. The particular Availability Zone the system is running in should not be important, as long as it is the same as the requesting resources.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html

 

NEW QUESTION 78
A healthcare provider has a hybrid architecture that includes 120 on-premises VMware servers running RedHat and 50 Amazon EC2 instances running Amazon Linux.
The company is in the middle of an all-in migration to AWS and wants to implement a solution for collecting information from the on-premises virtual machines and the EC2 instances for data analysis.
The information includes:
- Operating system type and version
- Data for installed applications
- Network configuration information, such as MAC and IP addresses
- Amazon EC2 instance AMI ID and IAM profile
How can these requirements be met with the LEAST amount of administration?

  • A. Use a script on the on-premises virtual machines as well as the EC2 instances to gather and push the data into Amazon S3, and then use Amazon Athena for analytics.
  • B. Install AWS Systems Manager agents on both the on-premises virtual machines and the EC2 instances. Enable inventory collection and configure resource data sync to an Amazon S3 bucket to analyze the data with Amazon Athena.
  • C. Use AWS Application Discovery Service for deploying Agentless Discovery Connector in the VMware environment and Discovery Agents on the EC2 instances for collecting the data. Then use the AWS Migration Hub Dashboard for analytics.
  • D. Write a shell script to run as a cron job on EC2 instances to collect and push the data to Amazon S3. For on-premises resources, use VMware vSphere to collect the data and write it into a file gateway for storing the data in S3. Finally, use Amazon Athena on the S3 bucket for analytics.

Answer: B

 

NEW QUESTION 79
......

Tested Material Used To DOP-C01: https://www.practicetorrent.com/DOP-C01-practice-exam-torrent.html

Steps Necessary To Pass The DOP-C01 Exam: https://drive.google.com/open?id=1AcfvvtSzgByz-F5T9zs8FxMZyz1s_kxY