Deployment, provisioning and automation
Practise only this domain. 84 questions with explanations, 20 at a time.
Start this domainSample questions
- A central account must deploy an identical VPC baseline into 50 accounts across 4 Regions, including accounts created later. Which CloudFormation capability fits best?Medium
- A pod running on Amazon EKS needs to call AWS APIs under a narrowly scoped IAM role, and the security team forbids storing access keys in the container. Which approach meets the requirement?Hard
- A team runs workloads on Amazon EKS and wants AWS to handle node provisioning, AMI patching and scaling, but the workloads must still run on EC2 instances. Which option should they choose?Easy
- After a stack was deployed, an engineer changed a security group rule by hand in the console. Which CloudFormation feature reports that the live resource no longer matches the template?Medium
- Every instance in a fleet must always have the CloudWatch agent installed and running, and the configuration must be reapplied whenever someone removes it. Which Systems Manager feature fits best?Medium
- A company has one large template that creates a network tier, a database tier, and an application tier. The network portion must be reusable by other teams and updated on its own. Which CloudFormation feature supports this?Medium
- A stack creates an S3 bucket that holds audit records. The stack will be deleted next week and the objects must survive. Which attribute keeps the bucket?Easy
- A company has 40 accounts in AWS Organizations and needs the same baseline stack in each account across three Regions, including accounts created next month. Which approach meets this with the least manual effort?Medium
- A team must deploy to EC2 instances while keeping the previous application version running on the original fleet until the new fleet passes validation. Which CodeDeploy option matches?Easy
- An image pipeline must install specific application packages, apply hardening scripts, and set configuration files during the build. What are these steps defined as in EC2 Image Builder?Easy
- A pipeline must build a container image, push it to a private registry, and deploy to a Kubernetes cluster. The source code lives in GitHub, and the company will not use CodeCommit for its repositories. Which source integration should the pipeline use?Medium
- A platform team wants a scheduled pipeline that bakes a fresh hardened machine image every week. Which EC2 Image Builder resource specifies the base image, the ordered software components to apply, and the storage settings for the output?Medium
- An ECS service on Fargate rolls out a new task definition. If the replacement tasks keep failing to reach a healthy steady state, the team wants the deployment halted and the service returned automatically to the last working revision. Which deployment setting provides this?Medium
- A fleet of EC2 instances must keep a specific configuration, such as the CloudWatch agent installed and running. If someone changes it by hand, the desired configuration should be reapplied automatically on a schedule. Which Systems Manager capability does this?Medium