Operational Excellence and Automation (20%)

SAP-C03 · 60 questions

• A retail platform runs 400 EC2 instances across three OUs and needs monthly OS patching with automated reboot control, failed-patch ticket creation, and concurrency limits to protect checkout. Maintenance windows keep slipping. Which automated runbook design provides controlled patching with integrated incident response?
• A retail platform runs checkout microservices on Amazon ECS Fargate and recommendations on Amazon EKS across three clusters. SREs need per-service CPU, memory, and restart signals with correlated logs without deploying sidecars, and must spot noisy-neighbor issues quickly. Which container observability configuration delivers unified performance and log correlation?
• A mid-size gaming studio with 90 engineers manages 40 AWS accounts for dev, test, and live environments. Developers want to define VPCs and databases with Python classes and loops, but auditors require versioned templates, peer review, and deterministic rollbacks before any production change. How should the team standardize infrastructure as code?
• A retail team deploys a payment API on ECS with ALB that must shift production traffic gradually, monitor errors, and instantly revert to the prior version without DNS changes or redeploys if health fails. Releases run weekly with automated pipeline approvals. Which deployment strategy provides controlled traffic shifting with rapid rollback?
• A regional logistics firm runs 40 EC2 route-optimization workers in an Auto Scaling group behind a Network Load Balancer. Hung processes serve stale routes, impaired instances linger for 30 minutes, and in-flight jobs are killed during scale-in. It needs OS and app failure detection with replacement in under 3 minutes plus graceful draining. Which automated failure recovery design using health checks and replacement best meets these recovery requirements?
• A fintech team runs Python microservices on EC2 and Lambda across three environments. Support needs correlated metrics, logs, and traces with consistent service names, sampling, and no vendor SDK lock-in, visualized in AWS native tools. Which instrumentation approach delivers standardized observability?
• A retailer with 800 EC2 instances suffers inconsistent patching and slow 2 a.m. incident triage that requires log collection, instance isolation, and scaling actions. Operations wants standardized automated responses with approvals and audit trails. Which automated runbook design standardizes patching and incident response with governance?
• A logistics team manages 200 CloudFormation stacks and needs reusable TypeScript networking constructs with unit tests, deterministic previews, and drift handling while keeping declarative state. Developers prefer imperative logic over raw YAML. Which infrastructure-as-code approach delivers reusable tested components with declarative deployment?
• An e-commerce team runs 120 ECS services and an EKS cluster for recommendations. During flash sales, they struggle to pinpoint CPU-throttled tasks, pod restarts, and service dependencies quickly in one view with actionable alarms. Which monitoring solution provides container-aware observability?
• A fintech operates 50 accounts emitting CloudWatch Logs for audit, needs near-real-time security analysis centrally, plus immutable 7-year archives with low-cost retention. Network controls prohibit polling each account from the central account. Which multi-account log aggregation design meets streaming and archival needs?
• A microservices platform on EKS and Lambda suffers slow checkout traces spanning queues and APIs. Engineers need correlated metrics, logs, and traces with consistent context across services using open standards and minimal code changes without vendor lock-in. Which observability design provides standardized instrumentation and end-to-end visibility?
• A fintech with 60 AWS accounts must ensure no S3 bucket is ever public and any unencrypted RDS instance is auto-remediated before audit. Platform engineers use CDK and CloudFormation for deployments and need guardrails that block bad templates early while fixing existing drift continuously. What governance design works?
• A fintech payments platform must page on-call engineers within two minutes when API error rates spike, notify support by email for warnings, and run an automated runbook to restart the service for critical faults. Alerts must avoid noise during deployments. Which alerting solution best meets these detection and response requirements?
• A fintech operates 45 AWS accounts with app logs in CloudWatch Logs and must retain seven years for regulators. Security wants one searchable archive, encrypted and tamper-evident, with tiered storage for cost control. Which observability design delivers centralized multi-account log aggregation with tiered archival?
• A platform team manages 80 AWS accounts with CloudFormation and CDK, but developers repeatedly deploy non-encrypted S3 buckets and oversized EC2 types, with drift detected weeks later. Leadership wants violations blocked before deploy plus auto-remediation. Which policy-as-code design provides proactive validation, enforcement, and drift remediation?
• A telehealth startup deploys Terraform and CloudFormation from GitHub Actions to three environments. Security forbids plaintext database passwords in code, requires rotation every 30 days, and audit of each retrieval. How should secrets be managed in pipeline code?
• A retailer runs 120 EKS microservices across three clusters with frequent OOMKills and noisy-neighbor CPU throttling, but engineers lack pod-level CPU, memory, and restart correlations with application logs. Which monitoring solution for containerized applications resolves pod performance and log correlation?
• A 40-person platform team manages 30 AWS accounts with repeatable VPCs and needs reviewable infrastructure changes, reusable networking constructs in TypeScript, and drift-safe deployments through pipelines. Which infrastructure-as-code approach combining declarative and imperative paradigms best meets the standardization need?
• A global gaming studio runs 30 AWS accounts for matchmaking and live events, generating high-volume VPC flow and application logs that security must search within seconds while finance requires low-cost seven-year retention for compliance. Which centralized logging design delivers near-real-time analysis with durable tiered archiving?
• A fraud team runs a SageMaker real-time model plus a Bedrock agent that issues refunds, but false approvals rose after a data shift and agent tool calls now take seconds longer. Leaders need dashboards tying predictions, latency, and drift together. Which observability solution best monitors these model, agent, and latency signals?
• A regional retailer deploys storefront services with AWS CDK pipelines to dev, staging, and production, and developers currently commit encrypted database strings in code that block rotation and expose values in diffs. The team needs versioned secrets per environment, automatic rotation for RDS, and no plaintext in templates or logs. Which secrets management approach secures infrastructure code for these environments?
• An e-commerce team misses overnight checkout failures because CloudWatch metrics sit unwatched and on-call learns from customers. They need immediate paging, ticket context, and one-click remediation for known faults. Which alerting design provides timely detection with automated response?
• A gaming studio must roll out VPCs, roles, and GuardDuty detectors to 40 accounts across three Regions from one pipeline, with automatic rollout, failure containment, and drift visibility. Which IaC deployment model meets this?
• A regulated insurer deploys CloudFormation and CDK across 50 accounts and must block non-encrypted S3 buckets before deployment, flag violations in pipelines, and auto-remediate drift after deployment. Which policy-as-code design provides proactive validation, enforcement, and drift remediation?
• A regulated bank manages 80 AWS accounts under AWS Organizations and must deploy baseline VPCs, logging roles, and guardrails to all accounts in three Regions. Updates must roll out centrally with automatic deployment to new accounts and rollback on failure. Which multi-account multi-Region deployment design enforces consistent infrastructure as code?
• A fintech runs a SageMaker fraud model plus Bedrock agents for support, needing alerts on inference latency spikes, prediction accuracy drop, and agent tool failures. MLOps wants unified dashboards. Which observability design for AI workload metrics including drift and agent performance provides complete detection?
• A global freight company maintains a Java order-tracking service in CodeCommit running on Amazon EC2 Auto Scaling behind an ALB. Leadership requires automated builds with unit tests on every commit, blue/green EC2 deployments with automatic rollback on CloudWatch alarms, and a single orchestrated pipeline view. Which CI/CD orchestration design meets these deployment pipeline requirements?
• A travel marketplace reports checkout timeouts that backend metrics miss, needs proactive alerts from major regions and real browser latency by page and journey. Which user-experience monitoring design captures synthetic and real-user checkout visibility?
• A SaaS company runs 200 EC2 instances with mission-critical API latency. Operations needs instant paging on high CPU and failed status checks, plus automated restart runbooks with audit trail. Which alerting design delivers real-time notifications and automated remediation with governance?
• A platform team manages CloudFormation and Terraform for 40 microservices that need database passwords and API tokens injected at deploy time, requires automatic rotation every 30 days, fine-grained IAM per secret, and no plaintext values in Git or state files. Which secrets handling approach for infrastructure code meets these governance needs?
• A bank deploys a SageMaker credit model with 50ms SLA, nightly retraining, and Bedrock agents assisting analysts. Drift and slow agent tool calls recently caused mis-scores. Which monitoring design tracks model performance, inference latency, agent behavior, and drift?
• A fintech team stores microservice code in CodeCommit and must build Docker images, run security scans, and deploy progressively to ECS with manual approval for production. Build artifacts must be traceable across stages. Which CI/CD orchestration design automates build and deployment pipelines with governance?
• A software vendor ships regulated container images weekly through CodePipeline, needing automated OS vulnerability scans on every push, blocking of critical findings, and cryptographic signing before production deployment. Audit requires scan evidence and image provenance. Which pipeline security scanning for vulnerabilities and artifact signing should the architect configure?
• A fintech API on EKS must meet 99.9% success and p95 latency under 300 ms, needs burn-rate alerts to page before budget exhaustion. Which SLO design creates measurable indicators and alerts with Application Signals?
• A travel booking site gets complaints of slow checkout but backend metrics look healthy, spanning desktop and mobile users across continents. Product needs proactive alerts plus real failure diagnostics. Which user experience monitoring strategy using synthetic transactions and real user monitoring reveals true checkout friction?
• A healthcare company manages 28 member accounts across three Regions from an Organizations management account. It must deploy standard audit S3 buckets, IAM roles, and Config rules everywhere, auto-apply baselines to new accounts in an OU, and let the security tooling account manage deployments without using management credentials. Versioned templates are required. Which multi-account multi-Region infrastructure deployment design using StackSets delivers this baseline?
• A SaaS company runs dev, test, and prod in separate AWS accounts across two Regions. Leaders require one pipeline that deploys with delegated least-privilege roles, promotes the same immutable build artifact between stages, and blocks prod without manual approval. Which pipeline deployment design satisfies multi-account promotion?
• An online education platform deploys a Java application to an EC2 Auto Scaling fleet. Code lives in CodeCommit, builds need compilation and unit tests, production needs blue/green deployment with automatic rollback on CloudWatch alarms, and managers require an explicit approval before production release. Audit history is required. Which CI/CD pipeline orchestration design using CodePipeline, CodeBuild, and CodeDeploy meets these release requirements?
• A travel booking site reports checkout failures only from users in Asia, synthetic uptime checks pass in us-east-1, and product wants both proactive alerting and actual page-load breakdowns by browser and geography. Which user-experience monitoring strategy captures synthetic coverage and real-user detail?
• An e-commerce platform runs flash sales that exhaust EC2 quotas and RDS connections, causing checkout failures. Operations needs early warning of capacity pressure plus automated runbook execution. Which health monitoring and operational response design best prevents quota-driven outages during demand spikes?
• A SaaS team builds containers in CodePipeline across dev and prod accounts, must block images with critical CVEs from being promoted, sign images for admission, and track findings centrally. Which pipeline security scanning and signing design satisfies these controls?
• A checkout team misses its 99.9% success promise because availability is tracked by server CPU and ad hoc log searches. Leaders want a measurable user-focused objective with burn-rate alerts for on-call response. Which SLO design with measurable indicators and alerts best fits CloudWatch and Application Signals?
• A video transcoding platform sees overnight queue backlogs and throttled API calls that on-call discovers late. Leaders want early warnings, quota visibility, and automated remediation without manual console fixes. Which health monitoring, capacity planning, and operational response design best applies CloudWatch, EventBridge, Systems Manager, and quotas?
• An e-commerce platform uses Lambda to restart degraded ECS tasks when alarms fire. During a partial outage the remediator invoked hundreds of restarts per minute, throttled the ECS API, and worsened the incident. Which controlled remediation design adds safety constraints to automated restarts while preserving recovery?
• A bank must promote tested CodePipeline artifacts from a tools account through dev, staging, and prod accounts in two Regions, enforcing least-privilege cross-account access and immutable promoted binaries. Which deployment pipeline configuration best achieves this?
• A fintech builds containers in CodeBuild and pushes to Amazon ECR for regulated payment services requiring vulnerability reports before deploy and tamper-proof images. Which pipeline security scanning design assesses vulnerabilities and signs artifacts?
• A support team launched an Amazon Bedrock RAG chatbot that cites policies, but answers drift and compliance worries grow. Product owners require repeatable quality scores, detection of harmful or hallucinated replies, and regression comparison across prompts. Which validation approach evaluates AI outputs rigorously?
• A payments API must meet 99.9% success and p99 latency under 400 ms, needs burn-rate alerts before breach, service-map context, and monthly compliance reports. Which service-level objective design provides measurable indicators and alerts?
• An e-commerce platform has predictable weekday spikes at 9 a.m., flash-sale surges, and steady baseline traffic on EC2 Auto Scaling groups behind an ALB. The team wants low latency during spikes without overprovisioning overnight. Which auto scaling policy combination maintains performance with cost-efficient metric-based scaling?
• A retail team runs checkout on Amazon ECS Fargate behind an ALB and had a failed deploy that needed a 30-second recovery. They now require production testing of the new version and one-click shift back to the stable task set. Which deployment strategy gives instant rollback for this container service?
• A SaaS team runs dev, staging, and prod in separate accounts and deploys to us-east-1 and eu-west-1. Auditors require artifacts promoted unchanged between stages, least-privilege cross-account deploys, and full pipeline history. Builds already run in CodeBuild. Which multi-account deployment pipeline provides role delegation with artifact promotion?
• A bank is adding an Amazon Bedrock RAG assistant for loan advice in a regulated CI/CD pipeline. Product and compliance teams must score groundedness, toxicity, and helpfulness on every model and prompt change and block unsafe releases. Recent manual spot checks missed hallucinations. Which AI output validation control provides repeatable release gating for the assistant?
• A SaaS platform built an EventBridge-triggered Lambda that restarts unhealthy services, but a bad deployment caused it to thrash hundreds of instances and saturate APIs. Leadership wants remediation to continue automatically under strict safety limits. Which controlled remediation design enforces safety constraints with circuit breakers and backoff?
• A university research portal serving 80 departments runs API Gateway, Lambda, and Aurora Serverless with 10x traffic during enrollment week, needing latency alerts, quota exhaustion warnings, and automatic remediation without paging on-call staff. Which health monitoring and automated response design provides early warning and self-healing capacity management?
• A health startup adds a Bedrock RAG assistant that summarizes discharge notes. Clinicians report occasional hallucinations. Product needs repeatable quality scores, safety checks for toxicity, and clinician review before release. Release cycles are weekly. Which evaluation approach validates AI outputs with Bedrock Evaluations?
• An EKS platform runs Java, Python, and Node.js microservices with inconsistent tracing and missed alerts. Leaders require standardized metrics, logs, and traces correlated by request across services without rewriting each SDK. Which observability control provides standardized instrumentation for this polyglot cluster?
• An e-commerce checkout calls a fragile fraud API that times out under load, and the team needs automatic retries without overwhelming it plus fast fallback when failures exceed thresholds. Which controlled remediation design with safety constraints protects checkout reliability?
• A SaaS runs checkout on ECS Fargate behind an ALB with Auto Scaling and order processing on Lambda with SQS. Unhealthy tasks occasionally serve 500s and failed messages disappear without retry. Which automated failure recovery using health checks and replacement restores service?
• A travel booking platform runs stateless services on Amazon EKS behind an ALB where a recent rolling update caused cascading 500s because faulty pods received live traffic immediately and rollback required redeploying old manifests. The team needs progressive traffic shifting, automatic health-based rollback, and zero code changes to manifests. Which deployment strategy provides safe rollback for this EKS workload?
• A B2B analytics platform runs its API on EC2 Auto Scaling behind an ALB. Traffic jumps sharply at 8 a.m. on weekdays, baseline demand grows 5% monthly, and leaders want capacity provisioned before the spike while keeping average CPU near 50% all day. Which auto scaling policy combination provides proactive scaling with stable utilization for this workload?