NEW QUESTION 1
What are two reasons a Docker golden image should be updated? (Choose two.)

• A. when there is a change to a username or password in the Docker secrets
• B. when the application has a new release
• C. when a fix for a security vulnerability is released
• D. when a change is needed to an environment variable in the Dockerfile
• E. when the base image is nearing the end of life

Answer: BC

NEW QUESTION 2
Which method is a safe way to provide a username/password combination to an application running as a service in a Docker container?

• A. encode the value with base64 in a secure DNS CTEXT entry
• B. as an environment variable in the Dockerfile
• C. Docker environment variable
• D. Docker secrets

Answer: D

NEW QUESTION 3
A developer is nearing the end of a software development cycle and is ready to deploy the software. The customer wants to continue using a secure software development lifecycle methodology and must plan for postproduction components. Which two areas should be the developer address? (Choose two.)

• A. performing code reviews
• B. requirement gathering
• C. change management process
• D. new code scanning
• E. rollback plans

Answer: AC

NEW QUESTION 4
To make logging searches more efficient and useful in Kibana, an Administrator wants to implement index patterns around the hostname of some software systems. Where should this be configured?

• A. Configure a new JSON object in Kibana.
• B. Create a search index in Logstash.
• C. Create an index pattern in Kibana.
• D. Create a time filter on Kibana to look at time only.

Answer: C

NEW QUESTION 5
Which interface is most commonly used to integrate logging, monitoring, and alerting applications into your CI/CD pipeline?

• A. AMQP
• B. SNMP
• C. SSH
• D. REST

Answer: C

NEW QUESTION 6
What are two benefits of Infrastructure as Code? (Choose two.)

• A. It enables continuous integration.
• B. It allows for management control.
• C. It ensures consistency.
• D. It improves application monitoring.
• E. It reduces risk.

Answer: CE

NEW QUESTION 7
A DevOps engineer must validate the working state of the network before implementing a CI/CD pipeline model. Which configuration management tool is designed to accomplish this?

• A. Jenkins
• B. Genie CLI
• C. Travis CI
• D. Python YAML data libraries

Answer: A

NEW QUESTION 8
A DevOps engineer is supporting a containerized application with multiple components running across the Kubernetes cluster. Metrics from the container (CPU and memory) and application (requests per second and heap size) are being collected by Prometheus and displayed with Grafana. Users report transaction timeout problems with the application, but the metric graphs all look within normal levels.
Which type of failure would prevent the engineer from seeing the problem using the captured metrics?

• A. Grafana has lost connectivity to Prometheus, which causes graphs to display only the cached data.
• B. CPU and memory metrics from Kubernetes nodes are not accurate due to the way that containers share resources.
• C. Some containers are crashing regularly and being restarted automatically by Kubernetes.
• D. The metricbeat agent has crashed and is no longer sending new data to Prometheus, so the metrics are not updating.

Answer: D

NEW QUESTION 9
When static routes are added to a router in a network using a CI/CD pipeline, an Ansible playbook is used to make these changes. Which steps must be added to the pipeline to validate that the changes have the intended effect on the traffic flow?

• A. Add a step to run the debug ip routing command before the change, and add a step after the change to issue the no debug ip routing command.
• B. Add a step to capture the routing table before the change, and add a step after the change to capture it agai
• C. Calculate the difference between the two for review.
• D. Add a step to ping a host on each of the static routes before the change, and a step after to repeat the same chec
• E. Calculate the difference between the two checks for review.
• F. Add a step to run the same playbook again with the debug option enabled and use grep on the log output to ensure that the commands are not applied again.

Answer: B

NEW QUESTION 10
What is the effective way to manage computing costs in a public cloud?

• A. Monitor data transfers to minimize cost.
• B. Use dedicated hardware for all instances.
• C. Select the largest instance option available in order to pay for only one instance.
• D. Make use of elastic services and scale on demand.

Answer: D

NEW QUESTION 11
Microservices architecture pattern has been applied and the system has been architected as a set of services. Each service is deployed as a set of instances for throughput and availability. In which two ways are these services packaged and deployed? (Choose two.)

• A. Service instances must be isolated from one another.
• B. Service must be independently deployable and scalable.
• C. Service are written using the same languages, frameworks, and framework versions.
• D. Service must be dependent, deployable, and scalable.
• E. Service instances do not need to be isolated from one another.

Answer: AB

NEW QUESTION 12
Which two statements about Infrastructure as Code are true? (Choose two.)

• A. Test-driven development practices make use of Infrastructure as Code.
• B. Infrastructure as Code refers to automated testing libraries.
• C. DevOps builds upon Infrastructure as Code.
• D. Infrastructure as Code is based on practices from software development.
• E. Infrastructure as Code must use the same programming language as the application.

Answer: AD

NEW QUESTION 13
An end user is seeing long web page load times on the internal business application that they are trying to view. The user is seeing this issue across multiple web browsers, and other users encounter the same issue. Which action should the system administrator take to start looking for the cause of this issue?

• A. Check to make sure Nginx is running.
• B. Check for response times in Nginx logs.
• C. Check to make sure the web API response is coming back in JSON.
• D. Check the size of the database that the application is using.

Answer: B

NEW QUESTION 14
A DevOps engineering wants to build an application implementation based on the CI/CD pipeline model. Which service should be used to provide hosted continuous service for open and private projects?

• A. Ansible
• B. pyATS
• C. Genie CLI
• D. Travis CI

Answer: D

NEW QUESTION 15
A new version of an application is being released by creating a separate instance of the application that is running the new code. Only a small portion of the user base will be directed to the new instance until that version has been proven stable. Which deployment strategy is this example of?

• A. recreate
• B. blue/green
• C. rolling
• D. canary

Answer: D

NEW QUESTION 16
Which type of security testing should be performed as a part of a CI/CD pipeline by analyzing the source code itself without compiling the code into a running executable?

• A. Dynamic Application Security Testing
• B. Runtime Application Health-Protection
• C. Continuous Application Security Testing
• D. Static Analysis Security Testing

Answer: D

NEW QUESTION 17
How long analysis systems such as Elasticsearch, Logstash, and Kibana Stack handle ingesting unstructured logs from different devices in various formats?

• A. All devices that generate syslogs must use agents that process the local logs and transmit them in a specific format to the ELK Stack.
• B. All logs are stored in their unstructured text format, and the ELK Stack performs data analysis by intelligently parsing the logs using machine learning algorithms.
• C. All different message formats are parsed separately using custom filters, and the resulting structured data is stored for later analysis.
• D. A single, comprehensive log format is defined on the ELK Stac
• E. All incoming logs, regardless of format, are transformed to match the comprehensive format, and only applicable fields are populated.

Answer: D

NEW QUESTION 18
Which Docker command is used to start an interactive Bash shell in a running container named “test”?

• A. docker attach -it test /bin/bash
• B. docker run -it test /bin/bash
• C. docker exec -it test /bin/bash
• D. docker run test /bin/bash

Answer: C

NEW QUESTION 19
......