Amazon Amazon Certifications DOP-C02 Questions & Answers

• Question 391:

  If Erin has three clusters of server types that are all managed by Ansible and she needs to provision each cluster so that they are configured with their appropriate NTP server addresses. What is the best method Erin should use in Ansible for managing this?

  A. Write a task that scans the network in the target hosts' region for the NTP server, register the resulting address so that the next task can write the NTP configuration.

  B. Break down the hosts by region in the Ansible inventory file and assign an inventory group variable the NTP address value for the respective region. The playbook can contain just the single play referencing the NTP variable from the inventory.

  C. Create a playbook for each different region and store the NTP address in a variable in the play in the event the NTP server changes.

  D. Create three plays, each one has the hosts for their respective regions and set the NTP server address in each task.

  Correct Answer: B

  While all four answers provided are correct, only B is the best choice. Ansible offers the ability to assign variables to groups of hosts in the inventory file. When the playbook is ran it will use the variables assigned to the group, even all the groups are specified in a single playbook run. The respective variables will be available to the play. This is easiest method to run, maintain and write.

  Reference: http://docs.ansible.com/ansible/intro_inventory.html#group-variables

• Question 392:

  If designing a single playbook to run across multiple Linux distributions that have distribution specific commands, what would be the best method to allow a successful run?

  A. Enable fact gathering and use the `when' conditional to match the distribution to the task.

  B. This is not possible, a separate playbook for each target Linux distribution is required.

  C. Use `ignore_errors: true' in the tasks.

  D. Use the `shell' module to write your own checks for each command that is ran.

  Correct Answer: A

  Ansible provides a method to only run a task when a condition is met using the `when' declarative. With gather facts enabled, the play has access to the distribution name of the Linux system, thus, tasks can be tailored to a specific distribution and ran only when the condition is met, e.g.: ` - when: ansible_os_family == "Debian"'.

  Reference: http://docs.ansible.com/ansible/playbooks_conditionals.html

• Question 393:

  Which one of the following is a restriction of AWS EBS Snapshots?

  A. Snapshot restorations are restricted to the region in which the snapshots are created.

  B. You cannot share unencrypted snapshots.

  C. To share a snapshot with a user in other region the snapshot has to be created in that region first.

  D. You cannot share a snapshot containing sensitive data such as an AWS Access Key ID or AWS Secret Access Key.

  Correct Answer: C

  Shapshots shared with other users are usable in full by the recipient, including but limited to the ability to base modified volumes and snapshots.

  Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-modifying-snapshotpermissions.html

• Question 394:

  What option below is the geographic limit of an EC2 security group?

  A. Security groups are global.

  B. They are confined to Placement Groups.

  C. They are confined to Regions.

  D. They are confined to Availability Zones.

  Correct Answer: C

  A security group is tied to a region and can be assigned only to instances in the same region.

  You can't enable an instance to communicate with an instance outside its region using security group rules. Traffic from an instance in another region is seen as WAN bandwidth.

  Reference:

  http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/resources.html