Official Bank
0/419
Page
1/4
AWS Certified DevOps Engineer – Professional Exam (DOP-C02) - AWS Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
419
Total Questions
1
Question
A company operates a fleet of Amazon EC2 instances that host critical applications and handle sensitive dat
Options
A
Use AWS CloudFormation to recreate EC2 instances with the latest AMI every time a new patch becomes available. Use AWS CloudTrail logs to monitor patch compliance and to send alerts for non- compliant instances.
B
Access each EC2 instance by using SSH keys. Check for and apply security updates by using
package managers. Verify the installations.
package managers. Verify the installations.
C
Configure Auto Scaling groups that have scaling policies based on Amazon CloudWatch metrics.
Configure Auto Scaling launch templates that launch new instances by using the latest AMIs that contain new security patches.
Configure Auto Scaling launch templates that launch new instances by using the latest AMIs that contain new security patches.
D
Configure AWS Systems Manager Patch Manager and AWS Config with defined patch baselines and compliance rules that run Systems Manager Automation documents.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
A company has a fleet of Amazon EC2 instances that run Linux in a single AWS account. The company is using an AWS Systems Manager Automation task across the EC2 instances. During the most recent patch cycle, several EC2 instances went into an error state because of insufficient available disk space. A DevOps engineer needs to ensure that the EC2 instances have sufficient available disk space during the patching process in the future.
Which combination of steps will meet these requirements? {Select TWO.)
Which combination of steps will meet these requirements? {Select TWO.)
Select 2
Options
A
Create an Amazon CloudWatch alarm to monitor available disk space on all EC2 instances Add the alarm as a safety control to the Systems Manager Automation task.
B
Ensure that the Amazon CloudWatch agent is installed on all EC2 instances
C
Create an Amazon CloudWatch log group for the EC2 instances. Configure a cron job that is installed on each EC2 instance to write the available disk space to a CloudWatch log stream for the relevant EC2 instance.
D
Create an AWS Lambda function to periodically check for sufficient available disk space on all EC2 instances by evaluating each EC2 instance's respective Amazon CloudWatch log stream.
E
Create a cron job that is installed on each EC2 instance to periodically delete temporary files.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
A large enterprise is deploying a web application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The application stores data in an Amazon RDS for Oracle DB instance and Amazon DynamoDB. There are separate environments tor development testing and production.
What is the MOST secure and flexible way to obtain password credentials during deployment?
What is the MOST secure and flexible way to obtain password credentials during deployment?
Options
A
Launch the EC2 instances with an EC2 1AM role to access AWS services Store the database passwords in an encrypted config file with the application artifacts.
B
Retrieve an access key from an AWS Systems Manager plaintext parameter to access AWS services. Retrieve the database credentials from a Systems Manager SecureString parameter.
C
Launch the EC2 instances with an EC2 1AM role to access AWS services Retrieve the database credentials from AWS Secrets Manager.
D
Retrieve an access key from an AWS Systems Manager securestring parameter to access AWS services. Retrieve the database credentials from a Systems Manager SecureString parameter.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
A company has multiple development teams in different business units that work in a shared single AWS account All Amazon EC2 resources that are created in the account must include tags that specify
who created the resources. The tagging must occur within the first hour of resource creation. A DevOps engineer needs to add tags to the created resources that Include the user ID that created the resource and the cost center ID The DevOps engineer configures an AWS Lambda Function with the cost center mappings to tag the resources. The DevOps engineer also sets up AWS CloudTrail in the AWS account. An Amazon S3 bucket stores the CloudTrail event logs
Which solution will meet the tagging requirements?
who created the resources. The tagging must occur within the first hour of resource creation. A DevOps engineer needs to add tags to the created resources that Include the user ID that created the resource and the cost center ID The DevOps engineer configures an AWS Lambda Function with the cost center mappings to tag the resources. The DevOps engineer also sets up AWS CloudTrail in the AWS account. An Amazon S3 bucket stores the CloudTrail event logs
Which solution will meet the tagging requirements?
Options
A
Create an S3 event notification on the S3 bucket to invoke the Lambda function for s3.
ObJectTagging:Put events. Enable bucket versioning on the S3 bucket.
ObJectTagging:Put events. Enable bucket versioning on the S3 bucket.
B
Create an Amazon EventBridge rule that uses Amazon EC2 as the event source. Configure the rule to match events delivered by CloudTraiI. Configure the rule to target the Lambda function
C
Enable server access logging on the S3 bucket. Create an S3 event notification on the S3 bucket for s3. ObjectTaggIng.• events
D
Create a recurring hourly Amazon EventBridge scheduled rule that invokes the Larnbda function.
Modify the Lambda function to read the logs from the S3 bucket
Modify the Lambda function to read the logs from the S3 bucket
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
A company wants governance where only specific Regions and services can be used, with centralized AD authentication and job-function-based roles.
Which solution meets these requirements?
Which solution meets these requirements?
Options
A
Use OUs with group policies and StackSets for IAM roles.
B
Use SCPs to restrict Regions/services and StackSets for IAM roles with trust to AD.
C
Use SCPs to restrict Regions/services and Resource Access Manager to share roles.
D
Use permission boundaries and StackSets.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.