AWS DOP-C02 Certification Exam Sample Questions

DOP-C02 Braindumps, DOP-C02 Exam Dumps, DOP-C02 Examcollection, DOP-C02 Questions PDF, DOP-C02 Sample Questions, DevOps Engineer Professional Dumps, DevOps Engineer Professional Official Cert Guide PDF, DevOps Engineer Professional VCE, AWS DevOps Engineer Professional PDFWe have prepared AWS DevOps Engineer Professional (DOP-C02) certification sample questions to make you aware of actual exam properties. This sample question set provides you with information about the DevOps Engineer Professional exam pattern, question formate, a difficulty level of questions and time required to answer each question. To get familiar with AWS Certified DevOps Engineer - Professional exam, we suggest you try our Sample AWS DOP-C02 Certification Practice Exam in simulated AWS certification exam environment.

To test your knowledge and understanding of concepts with real-time scenario based AWS DOP-C02 questions, we strongly recommend you to prepare and practice with Premium AWS DevOps Engineer Professional Certification Practice Exam. The premium AWS DevOps Engineer Professional certification practice exam helps you identify topics in which you are well prepared and topics in which you may need further training to achieving great score in actual AWS Certified DevOps Engineer - Professional exam.

AWS DOP-C02 Sample Questions:

01. A company uses AWS Organizations with all features enabled. The security team attached an SCP to the organization root that denies guardduty:DeleteDetector and guardduty:DisassociateFromAdministratorAccount. To test it, an engineer signed in to the management account with an administrator role and was able to delete a test detector there. The same test in a member account was denied.
What explains this result, and what should a DevOps engineer recommend?
a) SCPs attached to the root apply only to accounts inside OUs. Move the management account into an OU that has the SCP attached.
b) The administrator role has an explicit allow that overrides the SCP's deny. Remove the AdministratorAccess policy from the management account's administrator role.
c) The SCP takes effect only after each account accepts it. Use the Organizations console in the management account to enable the policy for that account.
d) SCPs do not affect users or roles in the management account. Keep workloads out of the management account and tightly limit who can use it.
 
02. Amazon GuardDuty, enabled across a company's organization, reports that an IAM role in a production account made API calls from an unusual location. Before choosing containment steps, the security analyst wants to see the role's API activity, the IP addresses involved and related findings over the previous weeks as a timeline, and to pivot to the EC2 instances that used the role. The company has no log analytics pipeline and wants none to maintain.
Which service should a DevOps engineer enable for the analyst?
a) Amazon Detective, with a delegated administrator account for the organization.
b) Amazon Inspector, with EC2 scanning enabled for the production account.
c) AWS Security Hub, with the AWS Foundational Security Best Practices standard enabled.
d) Amazon Athena, with a table over the organization trail's CloudTrail logs in Amazon S3.
 
03. A CodeBuild project must run integration tests against an Amazon RDS database in private subnets. A DevOps engineer configures the project with the VPC, a public subnet that has a route to an internet gateway, and a security group that can reach the database. Builds now fail in the install phase because npm install and AWS CLI calls time out.
Which change lets the builds reach both the database and public endpoints?
a) Keep the public subnet and enable auto-assign public IPv4 addresses on it.
b) Remove the VPC configuration and allow the CodeBuild service IP ranges in the database security group.
c) Run the project in private subnets whose route tables send internet-bound traffic to a NAT gateway.
d) Attach an Elastic IP address to the build network interface from a pre_build command.
 
04. Four CodeBuild projects at a software firm currently run on Linux EC2 compute. Their builds are short, yet developers complain about start-up delay before every build. A DevOps engineer wants these projects on Lambda compute, whose start-up latency is lower, but only where no build command or behavior must change.
Which project qualifies?
a) A project that builds a container image from a Dockerfile and pushes the image to Amazon ECR
b) A project that runs unit tests for a Node.js service and then packages it with the AWS SAM CLI
c) A project that runs integration tests against an Amazon RDS database through its VPC configuration
d) A project that installs operating system packages with yum and then compiles a Python library
 
05. A company runs a reporting application on an Amazon RDS for PostgreSQL Multi-AZ DB instance in us-east-1. A new disaster recovery requirement states that if the Region becomes unavailable, the database must be restorable in us-west-2 to a point in time a few minutes before the outage, with a recovery time of up to 4 hours.
The company wants the lowest-cost solution and does not want to run any database instances in us-west-2 until a disaster occurs.
Which solution meets these requirements?
a) Create a cross-Region read replica in us-west-2 and promote it during a disaster.
b) Copy a daily snapshot to us-west-2 with an AWS Backup copy rule.
c) Turn on cross-Region automated backup replication to us-west-2 for the DB instance.
d) Migrate to an Aurora global database with a secondary cluster in us-west-2.
 
06. After a recent deployment, a company's login page returned an error for two hours before customers reported it. Every CloudWatch alarm stayed in OK, because the servers were healthy and the failing requests were a small share of traffic.
A DevOps engineer must detect a broken login flow within minutes, from outside the application, after every deployment and at all other times.
Which solution will meet these requirements?
a) Add a Route 53 health check on the site's home page URL, and alarm when the health check reports unhealthy.
b) Create a CloudWatch Synthetics canary that scripts the login steps against the public URL every 5 minutes, and alarm when its SuccessPercent metric drops below 100.
c) Set the target group health check path to /login, and let Auto Scaling replace instances that fail it.
d) Turn on AWS X-Ray tracing for the login service, and review the service map after each deployment.
 
07. Database administrators need to connect from their laptops, using a desktop SQL client, to an Amazon RDS for PostgreSQL DB instance in private subnets. Company policy forbids bastion hosts with inbound SSH, public IP addresses, and any inbound port opened from outside the VPC.
A small Amazon EC2 instance that is a Systems Manager managed node already runs in the same VPC, and the database security group allows traffic from it.
How should the administrators connect?
a) Start a Session Manager shell session on the managed instance, and run a command line SQL client from that shell.
b) Use EC2 Instance Connect to push a temporary SSH key, and open an SSH tunnel to the database through the instance's public IP address.
c) Allow port 5432 into the managed instance's security group from the corporate IP range, and forward that traffic to the database.
d) Start a Session Manager session to the managed instance with the AWS-StartPortForwardingSessionToRemoteHost document, giving the database endpoint and port, and point the SQL client at the local port.
 
08. An application revision deployed with AWS CodeDeploy to Amazon Linux instances includes a start_worker.sh script that runs in the ApplicationStart hook. The script starts a long-running queue worker with this line:
/opt/app/worker.sh &
Since this change, every deployment stays in progress at ApplicationStart until the lifecycle event times out and fails, although the worker runs correctly on each instance.
What should a DevOps engineer change?
a) Start the worker with /opt/app/worker.sh > /dev/null 2> /dev/null < /dev/null & instead.
b) Move the line that starts the worker from the ApplicationStart hook to the ValidateService hook.
c) Add runas: root to the hook in the AppSpec file.
d) Raise the timeout for the ApplicationStart hook in the AppSpec file to the highest value it accepts.
 
09. The build stage of an AWS CodePipeline pipeline runs one AWS CodeBuild project that compiles a service and also renders a CloudFormation template. The CodeBuild action declares two output artifacts, AppBundle and TemplateBundle, which later stages deploy separately. The buildspec has a single artifacts section that lists both sets of files. The build commands succeed, but the action fails when it tries to produce its output artifacts.
How should a DevOps engineer change the buildspec?
a) Keep one artifacts section and set discard-paths to yes for both file sets.
b) Add a second top-level artifacts section and give each section a name that matches an output artifact.
c) Define both outputs under secondary-artifacts, with the identifiers AppBundle and TemplateBundle.
d) Remove TemplateBundle from the action and pass the template to later stages as an exported environment variable.
 
10. An internal reporting application runs in an EC2 Auto Scaling group. Usage rises sharply at 08:00 every weekday and falls after 18:00. New instances take about 15 minutes to install updates and load data before they can serve, so dynamic scaling on CPU adds capacity only after users already see slow responses. The pattern has been stable for months.
Which solution should a DevOps engineer implement?
a) Add a predictive scaling policy that pre-launches instances 15 minutes ahead of the forecast, tested first in forecast-only mode.
b) Lower the target value of the CPU target tracking policy and shorten the default instance warmup to 15 minutes.
c) Add a step scaling policy that adds more instances per step once CPU rises above 80 percent.
d) Create a scheduled action that raises the desired capacity at 08:00 each weekday and a second scheduled action that lowers it at 18:00.

Answers:

Question: 01
Answer: d		 Question: 02
Answer: a		 Question: 03
Answer: c		 Question: 04
Answer: b		 Question: 05
Answer: c
Question: 06
Answer: b		 Question: 07
Answer: d		 Question: 08
Answer: a		 Question: 09
Answer: c		 Question: 10
Answer: a

Note: Please update us by writing an email on feedback@vmexam.com for any error in AWS Certified DevOps Engineer - Professional certification exam sample questions

Rating: 4.8 / 5 (80 votes)