Task Statement 4.3: Automate Monitoring and Event Management of Complex Environments. DOP-C02 Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A company runs a multi-account AWS environment. The DevOps team needs to be notified whenever an IAM user in any account creates a new access key, because this is a potential security risk. The team wants a centralized solution that requires no EC2 instances and no polling. What should the team configure?

   • AA CloudWatch alarm in each account on the IAM CreateAccessKey metric, with an SNS action
   • BAn S3 bucket in each account with event notifications for IAM access key files, targeting SNS
   • CAn EventBridge rule in each account with an event pattern matching IAM CreateAccessKey events, targeting a central SNS topic
   • DA Lambda function in each account that polls the IAM API every minute and publishes to SNS
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which AWS service is best suited for routing events from multiple AWS services (e.g., EC2 state changes, CodePipeline state changes) to a target like Lambda or SNS based on event patterns?

   • AAWS CloudTrail
   • BAmazon EventBridge
   • CS3 Event Notifications
   • DAmazon SNS
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A company runs a critical web service in two AWS Regions. They use Route 53 with a failover routing policy. The primary endpoint is an Application Load Balancer in us-east-1. The team wants Route 53 to automatically fail over to the secondary region if the primary ALB becomes unreachable. What should the team configure?

   • ACreate a Route 53 health check for the primary ALB endpoint and associate it with the failover routing policy
   • BUse a Route 53 weighted routing policy with a health check on the secondary endpoint
   • CConfigure the ALB target group health check and rely on it for DNS failover
   • DCreate a CloudWatch alarm on the ALB and use it to update the Route 53 record manually
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which AWS service uses health checks to determine the availability of targets and automatically routes traffic only to healthy targets?

   • AAWS CloudFormation
   • BAmazon Route 53
   • CApplication Load Balancer (ALB)
   • DAmazon S3
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A web application runs behind an Application Load Balancer (ALB) with an EC2 Auto Scaling group. The ALB target group health checks are passing, but the application is returning HTTP 500 errors for a subset of requests. The team wants the Auto Scaling group to replace instances that are unhealthy at the application layer. What should the team configure?

   • ACreate a CloudWatch alarm on the ALB 5XX error metric and add an EC2 action to terminate instances
   • BModify the ALB target group health check path to a static HTML page
   • CEnable EC2 automatic recovery on the Auto Scaling group instances
   • DConfigure the Auto Scaling group to use the ALB target group health checks as the health check type
   Reveal Solution Discussion Select an answer first