AWS DOP-02_在线真题试卷与模拟练习_AWS DOP-02_考试宝

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

A company has an on-premises application that is written in Go. A DevOps engineer must move the application to AWS. The company's development team wants to enable blue/green deployments and perform A/B testing. Which solution will meet these requirements? 一家公司有一个使用 Go 编写的本地应用程序。DevOps 工程师必须将该应用程序迁移到 AWS。该公司的开发团队希望启用蓝/绿部署并执行 A/B 测试。哪种解决方案可以满足这些需求？

A developer is maintaining a fleet of 50 Amazon EC2 Linux servers. The servers are part of an Amazon EC2 Auto Scaling group, and also use Elastic Load Balancing for load balancing. Occasionally, some application servers are being terminated after failing ELB HTTP health checks. The developer would like to perform a root cause analysis on the issue, but before being able to access application logs, the server is terminated. How can log collection be automated? 一名开发人员正在维护一个由50台 Amazon EC2 Linux 服务器组成的服务器群。这些服务器是 Amazon EC2 Auto Scaling 组的一部分，同时使用 Elastic Load Balancing 进行负载均衡。偶尔，一些应用服务器在 ELB HTTP 健康检查失败后会被终止。开发人员希望对问题进行根本原因分析，但在能够访问应用日志之前，服务器已经被终止。如何自动化日志收集？

A company has multiple accounts in an organization in AWS Organizations. The company's SecOps team needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if any account in the organization turns off the Block Public Access feature on an Amazon S3 bucket. A DevOps engineer must implement this change without affecting the operation of any AWS accounts. The implementation must ensure that individual member accounts in the organization cannot turn off the notification. Which solution will meet these requirements? 一家公司在 AWS Organizations 中有多个账户。该公司的 SecOps 团队需要在组织中的任何账户关闭 Amazon S3 存储桶上的 Block Public Access 功能时接收到 Amazon Simple Notification Service (Amazon SNS) 通知。DevOps 工程师必须实施此更改，而不影响任何 AWS 账户的操作。实施必须确保组织中的单个成员账户无法关闭通知。哪种解决方案可以满足这些要求？

A company has migrated its container-based applications to Amazon EKS and want to establish automated email notifications. The notifications sent to each email address are for specific activities related to EKS components. The solution will include Amazon SNS topics and an AWS Lambda function to evaluate incoming log events and publish messages to the correct SNS topic. Which logging solution will support these requirements? 一家公司已将其基于容器的应用程序迁移到 Amazon EKS，并希望建立自动电子邮件通知。发送到每个电子邮件地址的通知是与 EKS 组件相关的特定活动。解决方案将包括 Amazon SNS 主题和一个 AWS Lambda 函数，用于评估传入的日志事件并将消息发布到正确的 SNS 主题。支持这些需求的日志解决方案是什么？

A company that uses electronic health records is running a fleet of Amazon EC2 instances with an Amazon Linux operating system. As part of patient privacy requirements, the company must ensure continuous compliance for patches for operating system and applications running on the EC2 instances. How can the deployments of the operating system and application patches be automated using a default and custom repository? 一家使用电子健康记录的公司正在运行一组使用 Amazon Linux 操作系统的 Amazon EC2 实例。根据患者隐私要求，公司必须确保对 EC2 实例上运行的操作系统和应用程序的补丁进行持续合规性检查。如何使用默认和自定义存储库自动化操作系统和应用程序补丁的部署？

A company is using AWS CodePipeline to automate its release pipeline. AWS CodeDeploy is being used in the pipeline to deploy an application to Amazon Elastic Container Service (Amazon ECS) using the blue/green deployment model. The company wants to implement scripts to test the green version of the application before shifting traffic. These scripts will complete in 5 minutes or less. If errors are discovered during these tests, the application must be rolled back. Which strategy will meet these requirements? 一家公司正在使用 AWS CodePipeline 来自动化其发布流水线。AWS CodeDeploy 被用于流水线中，以蓝/绿部署模型将应用程序部署到 Amazon Elastic Container Service (Amazon ECS)。公司希望实现脚本来测试应用程序的绿色版本，在切换流量之前完成这些测试。这些脚本将在 5 分钟或更短时间内完成。如果在测试期间发现错误，应用程序必须回滚。哪种策略可以满足这些要求？

A company uses AWS Storage Gateway in file gateway mode in front of an Amazon S3 bucket that is used by multiple resources. In the morning when business begins, users do not see the objects processed by a third party the previous evening. When a DevOps engineer looks directly at the S3 bucket, the data is there, but it is missing in Storage Gateway. Which solution ensures that all the updated third-party files are available in the morning? 一家公司在 Amazon S3 存储桶前使用 AWS Storage Gateway 的文件网关模式，该存储桶被多个资源使用。在早晨业务开始时，用户无法看到前一晚由第三方处理的对象。当一名 DevOps 工程师直接查看 S3 存储桶时，数据是存在的，但在 Storage Gateway 中缺失。哪种解决方案可以确保所有更新的第三方文件在早晨可用？

A space exploration company receives telemetry data from multiple satellites. Small packets of data are received through Amazon API Gateway and are placed directly into an Amazon Simple Queue Service (Amazon SQS) standard queue. A custom application is subscribed to the queue and transforms the data into a standard format. Because of inconsistencies in the data that the satellites produce, the application is occasionally unable to transform the data. In these cases, the messages remain in the SQS queue. A DevOps engineer must develop a solution that retains the failed messages and makes them available to scientists for review and future processing. Which solution will meet these requirements? 一家太空探索公司从多个卫星接收遥测数据。通过 Amazon API Gateway 接收小数据包，并直接放入 Amazon Simple Queue Service (Amazon SQS) 标准队列中。一个自定义应用程序订阅了该队列，并将数据转换为标准格式。由于卫星生成的数据存在不一致性，应用程序偶尔无法转换数据。在这些情况下，消息会留在 SQS 队列中。一名 DevOps 工程师必须开发一个解决方案，以保留这些失败的消息，并使其可供科学家审查和未来处理。哪种解决方案可以满足这些要求？

A company wants to use AWS CloudFormation for infrastructure deployment. The company has strict tagging and resource requirements and wants to limit the deployment to two Regions. Developers will need to deploy multiple versions of the same application. Which solution ensures resources are deployed in accordance with company policy? 一家公司希望使用AWS CloudFormation进行基础设施部署。该公司对标签和资源有严格要求，并希望将部署限制在两个区域。开发人员需要部署同一应用程序的多个版本。哪种解决方案确保资源按照公司政策进行部署？

A DevOps engineer is building a multistage pipeline with AWS CodePipeline to build, verify, stage, test, and deploy an application. A manual approval stage is required between the test stage and the deploy stage. The development team uses a custom chat tool with webhook support that requires near-real-time notifications. How should the DevOps engineer configure status updates for pipeline activity and approval requests to post to the chat tool? 一名DevOps工程师正在使用AWS CodePipeline构建一个多阶段流水线，以构建、验证、分阶段、测试和部署应用程序。在测试阶段和部署阶段之间需要一个手动审批阶段。开发团队使用支持Webhook的自定义聊天工具，该工具需要近实时通知。 DevOps工程师应如何配置流水线活动状态更新和审批请求以发布到聊天工具？

A company's application development team uses Linux-based Amazon EC2 instances as bastion hosts. Inbound SSH access to the bastion hosts is restricted to specific IP addresses, as defined in the associated security groups. The company's security team wants to receive a notification if the security group rules are modified to allow SSH access from any IP address. What should a DevOps engineer do to meet this requirement? 一家公司的应用程序开发团队使用基于 Linux 的 Amazon EC2 实例作为跳板主机。对跳板主机的入站 SSH 访问仅限于特定的 IP 地址，这些 IP 地址在相关的安全组中定义。公司的安全团队希望在安全组规则被修改为允许来自任何 IP 地址的 SSH 访问时收到通知。 DevOps 工程师应该怎么做来满足这个要求？

A company has an application that is using a MySQL-compatible Amazon Aurora Multi-AZ DB cluster as the database. A cross-Region read replica has been created for disaster recovery purposes. A DevOps engineer wants to automate the promotion of the replica so it becomes the primary database instance in the event of a failure. Which solution will accomplish this? 一家公司有一个应用程序，使用与 MySQL 兼容的 Amazon Aurora Multi-AZ DB 集群作为数据库。为了灾难恢复，已经创建了一个跨区域的只读副本。一个 DevOps 工程师希望自动化副本的提升，使其在发生故障时成为主数据库实例。哪种解决方案可以实现这一目标？

A company hosts its staging website using an Amazon EC2 instance backed with Amazon EBS storage. The company wants to recover quickly with minimal data losses in the event of network connectivity issues or power failures on the EC2 instance. Which solution will meet these requirements? 一家公司使用基于 Amazon EBS 存储的 Amazon EC2 实例来托管其预生产网站。该公司希望在 EC2 实例发生网络连接问题或电源故障时，能够快速恢复并尽量减少数据丢失。哪种解决方案可以满足这些需求？

A company wants to use AWS development tools to replace its current bash deployment scripts. The company currently deploys a LAMP application to a group of Amazon EC2 instances behind an Application Load Balancer (ALB). During the deployments, the company unit tests the committed application, stops and starts services, unregisters and re-registers instances with the load balancer, and updates file permissions. The company wants to maintain the same deployment functionality through the shift to using AWS services. Which solution will meet these requirements? 一家公司希望使用AWS开发工具来替换其当前的bash部署脚本。该公司目前将一个LAMP应用程序部署到一组位于Application Load Balancer (ALB)后面的Amazon EC2实例上。在部署过程中，该公司对提交的应用程序进行单元测试，停止和启动服务，注销并重新注册与负载均衡器关联的实例，并更新文件权限。该公司希望在转向使用AWS服务的过程中保持相同的部署功能。哪种解决方案可以满足这些需求？

A company has chosen AWS to host a new application. The company needs to implement a multi-account strategy. A DevOps engineer creates a new AWS account and an organization in AWS Organizations. The DevOps engineer also creates the OU structure for the organization and sets up a landing zone by using AWS Control Tower. The DevOps engineer must implement a solution that automatically deploys resources for new accounts that users create through AWS Control Tower Account Factory. When a user creates a new account, the solution must apply AWS CloudFormation templates and SCPs that are customized for the OU or the account to automatically deploy all the resources that are attached to the account. All the OUs are enrolled in AWS Control Tower. Which solution will meet these requirements in the MOST automated way? 一家公司选择使用 AWS 来托管一个新的应用程序。该公司需要实施多账户策略。一名 DevOps 工程师创建了一个新的 AWS 账户，并在 AWS Organizations 中创建了一个组织。该 DevOps 工程师还为组织创建了 OU 结构，并通过使用 AWS Control Tower 设置了一个着陆区。 DevOps 工程师必须实施一个解决方案，该解决方案能够自动为用户通过 AWS Control Tower Account Factory 创建的新账户部署资源。当用户创建一个新账户时，解决方案必须应用 AWS CloudFormation 模板和针对 OU 或账户定制的 SCP，以自动部署所有附加到账户的资源。所有 OU 都已注册到 AWS Control Tower。哪种解决方案能够以最自动化的方式满足这些要求？

An online retail company based in the United States plans to expand its operations to Europe and Asia in the next six months. Its product currently runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. All data is stored in an Amazon Aurora database instance. When the product is deployed in multiple regions, the company wants a single product catalog across all regions, but for compliance purposes, its customer information and purchases must be kept in each region. How should the company meet these requirements with the LEAST amount of application changes? 一家总部位于美国的在线零售公司计划在未来六个月内将其业务扩展到欧洲和亚洲。其产品目前运行在 Amazon EC2 实例上，并位于一个 Application Load Balancer 后面。这些实例运行在跨多个可用区的 Amazon EC2 Auto Scaling 组中。所有数据存储在一个 Amazon Aurora 数据库实例中。当产品部署到多个区域时，公司希望在所有区域内拥有一个统一的产品目录，但出于合规目的，其客户信息和购买记录必须保留在各自的区域。公司应该如何以最少的应用程序更改来满足这些要求？

A company is implementing a well-architected design for its globally accessible API stack. The design needs to ensure both high reliability and fast response times for users located in North America and Europe. The API stack contains the following three tiers: Amazon API Gateway - AWS Lambda - Amazon DynamoDB - Which solution will meet the requirements? 一家公司正在为其全球可访问的API堆栈实施一个良好架构的设计。该设计需要确保位于北美和欧洲的用户具有高可靠性和快速响应时间。 API堆栈包含以下三个层： Amazon API Gateway - AWS Lambda - Amazon DynamoDB - 哪种解决方案可以满足要求？

A rapidly growing company wants to scale for developer demand for AWS development environments. Development environments are created manually in the AWS Management Console. The networking team uses AWS CloudFormation to manage the networking infrastructure, exporting stack output values for the Amazon VPC and all subnets. The development environments have common standards, such as Application Load Balancers, Amazon EC2 Auto Scaling groups, security groups, and Amazon DynamoDB tables. To keep up with demand, the DevOps engineer wants to automate the creation of development environments. Because the infrastructure required to support the application is expected to grow, there must be a way to easily update the deployed infrastructure. CloudFormation will be used to create a template for the development environments. Which approach will meet these requirements and quickly provide consistent AWS environments for developers? 一家快速发展的公司希望扩展以满足开发人员对 AWS 开发环境的需求。开发环境是通过 AWS Management Console 手动创建的。网络团队使用 AWS CloudFormation 来管理网络基础设施，并导出 Amazon VPC 和所有子网的堆栈输出值。开发环境具有通用标准，例如 Application Load Balancers、Amazon EC2 Auto Scaling groups、安全组和 Amazon DynamoDB tables。为了满足需求，DevOps 工程师希望自动化创建开发环境。由于支持应用程序所需的基础设施预计会增长，因此必须有一种方法可以轻松更新已部署的基础设施。CloudFormation 将用于为开发环境创建模板。哪种方法可以满足这些要求，并快速为开发人员提供一致的 AWS 环境？

A company uses AWS Organizations to manage multiple accounts. Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant. A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present. Which solution will accomplish this? 一家公司使用 AWS Organizations 来管理多个账户。信息安全策略要求所有未加密的 Amazon EBS 卷都被标记为不合规。一个 DevOps 工程师需要自动部署解决方案，并确保此合规性检查始终存在。哪种解决方案可以实现这一目标？

A development team uses AWS CodeCommit for version control for applications. The development team uses AWS CodePipeline, AWS CodeBuild. and AWS CodeDeploy for CI/CD infrastructure. In CodeCommit, the development team recently merged pull requests that did not pass long-running tests in the code base. The development team needed to perform rollbacks to branches in the codebase, resulting in lost time and wasted effort. A DevOps engineer must automate testing of pull requests in CodeCommit to ensure that reviewers more easily see the results of automated tests as part of the pull request review. What should the DevOps engineer do to meet this requirement? 一个开发团队使用 AWS CodeCommit 进行应用程序的版本控制。开发团队使用 AWS CodePipeline、AWS CodeBuild 和 AWS CodeDeploy 构建 CI/CD 基础设施。在 CodeCommit 中，开发团队最近合并了一些未通过代码库中长时间运行测试的 pull requests。开发团队需要对代码库中的分支进行回滚，导致时间浪费和额外的工作量。一名 DevOps 工程师必须自动化 CodeCommit 中 pull requests 的测试，以确保审阅者在审阅 pull requests 时更容易看到自动化测试的结果。 DevOps 工程师应该怎么做才能满足此需求？

更多题库