Amazon DOP-C02 Sample Question Answers

Question # 1

A company has implemented a new microservices-based application on an AmazonElastic Container Service (Amazon ECS) cluster. After each deployment, the companywants to validate the critical user journeys and API endpoints before routing traffic to thenew application version.The company must implement an automated solution to detect issues in the newdeployment and to initiate a rollback if necessary.Which solution will meet these requirements with the LEAST operational overhead?

A. Set up Amazon CloudWatch Application Insights for the ECS cluster. Create anAmazon EventBridge rule to invoke an AWS Lambda function to analyze the task states.Program the Lambda function to use the ECS UpdateService API call to initiate a rollbackif a specific percentage of tasks fail. 
B. Set up Amazon CloudWatch Application Insights for the ECS cluster. ConfigureApplication Insights to monitor key performance indicators of the microservices in thecritical user journeys and API calls. Create CloudWatch alarms based on the insights. UseEventBridge to invoke an AWS Step Functions workflow to evaluate the alarms. Configurethe workflow to initiate a rollback if necessary by using the alarms' built-in integration withAmazon ECS. 
C. Create CloudWatch Synthetics canaries that simulate critical user journeys and APIcalls. Implement AWS X-Ray tracing for all the microservices. Configure X-Ray to sendtraces to CloudWatch. Create CloudWatch alarms based on error rates and latencymetrics. Create a Lambda function to analyze the traces and to initiate a rollback ifnecessary by using the alarms' built-in integration with Amazon ECS.
D. Create CloudWatch Synthetics canaries that simulate critical user journeys and APIcalls. Configure the canaries to run against the new deployment. Create CloudWatchalarms that are invoked when canaries fail. Use the alarms' built-in integration withAmazon ECS to initiate a rollback if the alarms are invoked before traffic is routed to thenew deployment. 

Show Answer

Question # 2

A company uses an AWS CodeCommit repository to store its source code andcorresponding unit tests. The company has configured an AWS CodePipeline pipeline thatincludes an AWS CodeBuild project that runs when code is merged to the main branch ofthe repository.The company wants the CodeBuild project to run the unit tests. If the unit tests pass, theCodeBuild project must tag the most recent commit.How should the company configure the CodeBuild project to meet these requirements?

A. Configure the CodeBuild project to use native Git to clone the CodeCommit repository.Configure the project to run the unit tests. Configure the project to use native Git to create atag and to push the Git tag to the repository if the code passes the unit tests. 
B. Configure the CodeBuild project to use native Git to clone the CodeCommit repository.Configure the project to run the unit tests. Configure the project to use AWS CLIcommands to create a new repository tag in the repository if the code passes the unit tests.
C. Configure the CodeBuild project to use AWS CLI commands to copy the code from theCodeCommit repository. Configure the project lo run the unit tests. Configure the project touse AWS CLI commands to create a new Git tag in the repository if the code passes theunit tests. 
D. Configure the CodeBuild project to use AWS CLI commands to copy the code from theCodeCommit repository. Configure the project to run the unit tests. Configure the project touse AWS CLI commands to create a new repository tag in the repository if the code passesthe unit tests.

Show Answer

Question # 3

A company has multiple member accounts that are part of an organization in AWSOrganizations. The security team needs to review every Amazon EC2 security group andtheir inbound and outbound rules. The security team wants to programmatically retrievethis information from the member accounts using an AWS Lambda function in themanagement account of the organization.Which combination of access changes will meet these requirements? (Choose three.)

A. Create a trust relationship that allows users in the member accounts to assume themanagement account IAM role. 
B. Create a trust relationship that allows users in the management account to assume theIAM roles of the member accounts. 
C. Create an IAM role in each member account that has access to theAmazonEC2ReadOnlyAccess managed policy
D. Create an I AM role in each member account to allow the sts:AssumeRole actionagainst the management account IAM role's ARN. 
E. Create an I AM role in the management account that allows the sts:AssumeRole actionagainst the member account IAM role's ARN.
F. Create an IAM role in the management account that has access to theAmazonEC2ReadOnlyAccess managed policy. 

Show Answer

Question # 4

A DevOps engineer needs to install antivirus software on all Amazon EC2 instances in anAWS account. The EC2 instances run the most recent Amazon Linux version. The solutionmust detect all instances and use an AWS Systems Manager document to install thesoftware if missing.Which solution will meet these requirements?

A. Create an association in Systems Manager State Manager targeting all managed nodes.Include the software and Systems Manager document
B. Use AWS Config with a custom rule to check for antivirus installation. Configureautomatic remediation using the Systems Manager document. 
C. Use Amazon Inspector to detect missing software and associate with Systems Managerautomation. 
D. Use EventBridge to detect EC2 RunInstances events and trigger SSM automation. 

Show Answer

Question # 5

An ecommerce company uses a large number of Amazon Elastic Block Store (AmazonEBS) backed Amazon EC2 instances. To decrease manual work across all the instances, aDevOps engineer is tasked with automating restart actions when EC2 instance retirementevents are scheduled.How can this be accomplished?

A. Create a scheduled Amazon EventBridge rule to run an AWS Systems ManagerAutomation runbook that checks if any EC2 instances are scheduled for retirement once aweek If the instance is scheduled for retirement the runbook will hibernate the instance
B. Enable EC2Auto Recovery on all of the instances. Create an AWS Config rule to limitthe recovery to occur during a maintenance window only
C. Reboot all EC2 instances during an approved maintenance window that is outside ofstandard business hours Set up Amazon CloudWatch alarms to send a notification in caseany instance is failing EC2 instance status checks
D. Set up an AWS Health Amazon EventBridge rule to run AWS Systems ManagerAutomation runbooks that stop and start the EC2 instance when a retirement scheduledevent occurs. 

Show Answer

Question # 6

A company runs an application on an Amazon Elastic Container Service (Amazon ECS)service by using the AWS Fargate launch type. The application consumes messages froman Amazon Simple Queue Service (Amazon SQS) queue. The application can take severalminutes to process each message from the queue. When the application processes amessage, the application reads a file from an Amazon S3 bucket and processes the data inthe file. The application writes the processed output to a second S3 bucket. The companyuses Amazon CloudWatch Logs to monitor processing errors and to ensure that theapplication processes messages successfully.The SQS queue typically receives a low volume of messages. However, occasionally thequeue receives higher volumes of messages. A DevOps engineer needs to implement asolution to reduce the processing time of message bursts.Which solution will meet this requirement in the MOST cost-effective way?

A. Register the ECS service as a scalable target in AWS Application Auto Scaling.Configure a target tracking scaling policy to scale the service in response to the queuesize. 
B. Increase the maximum number of messages that Amazon SQS requests to batchmessages together. Use long polling to minimize the number of API calls to Amazon SQSduring periods of low traffic. 
C. Send messages to an Amazon EventBridge event bus instead of the SQS queue.Replace the ECS service with an EventBridge rule that launches ECS tasks in response tomatching events.
D. Create an Auto Scaling group of EC2 instances. Create a capacity provider in the ECScluster by using the Auto Scaling group. Change the ECS service to use the EC2 launchtype.

Show Answer

Question # 7

A company has a file-reading application that saves files to a database running on AmazonEC2 instances. Regulations require daily file deletions from EC2 instances and deletion ofdatabase records older than 60 days. Database record deletion must occur after filedeletion. The company needs email notifications for any deletion script failures.Which solution will meet these requirements with the LEAST development effort?

A. Use AWS Systems Manager State Manager to automatically invoke an Automationdocument at the specified time daily. Configure the Automation document to run deletionscripts sequentially via run command. Create an EventBridge rule to send failurenotifications to Amazon SNS.
B. Use AWS Systems Manager State Manager to automatically invoke an Automationdocument at the specified time daily. Configure the Automation document to run deletionscripts sequentially. Add a conditional check for errors as the last step and send failurenotifications via Amazon SES. 
C. Create an EventBridge rule to invoke a Lambda function at the specified time. Configurethe Lambda function to run deletion scripts sequentially and send failure notifications viaSNS.
D. Create an EventBridge rule to invoke a Lambda function at the specified time. Configurethe Lambda function to run deletion scripts sequentially and send failure notifications viaSES. 

Show Answer

Question # 8

A company sends its AWS Network Firewall flow logs to an Amazon S3 bucket. Thecompany then analyzes the flow logs by using Amazon Athena. The company needs totransform the flow logs and add additional data before the flow logs are delivered to theexisting S3 bucket. Which solution will meet these requirements?

A. Create an AWS Lambda function to transform the data and to write a new object to theexisting S3 bucket. Configure the Lambda function with an S3 trigger for the existing S3bucket. Specify all object create events for the event type. Acknowledge the recursiveinvocation.
B. Enable Amazon EventBridge notifications on the existing S3 bucket. Create a customEventBridge event bus. Create an EventBridge rule that is associated with the customevent bus. Configure the rule to react to all object create events for the existing S3 bucketand to invoke an AWS Step Functions workflow. Configure a Step Functions task totransform the data and to write the data into a new S3 bucket. 
C. Create an Amazon EventBridge rule that is associated with the default EventBridgeevent bus. Configure the rule to react to all object create events for the existing S3 bucket.Define a new S3 bucket as the target for the rule. Create an EventBridge inputtransformation to customize the event before passing the event to the rule target. 
D. Create an Amazon Data Firehose delivery stream that is configured with an AWSLambda transformer. Specify the existing S3 bucket as the destination. Change theNetwork Firewall logging destination from Amazon S3 to Firehose.

Show Answer

Question # 9

A software engineering team is using AWS CodeDeploy to deploy a new version of anapplication. The team wants to ensure that if any issues arise during the deployment, theprocess can automatically roll back to the previous version.During the deployment process, a health check confirms the application's stability. If thehealth check fails, the deployment must revert automatically.Which solution will meet these requirements?

A. Implement lifecycle event hooks in the deployment configuration. 
B. Use AWS CloudFormation to monitor the health of the deployment. 
C. Set up alarms in Amazon CloudWatch to start a rollback.  
D. Configure automatic rollback settings in AWS CodeDeploy. 

Show Answer

Question # 10

A company runs an application with an Amazon EC2 and on-premises configuration. ADevOps engineer needs to standardize patching across both environments. Companypolicy dictates that patching only happens during non-business hours.Which combination of actions will meet these requirements? (Choose three.)

A. Add the physical machines into AWS Systems Manager using Systems Manager HybridActivations. 
B. Attach an IAM role to the EC2 instances, allowing them to be managed by AWSSystems Manager.
C. Create IAM access keys for the on-premises machines to interact with AWS SystemsManager.
D. Run an AWS Systems Manager Automation document to patch the systems every hour. 
E. Use Amazon EventBridge scheduled events to schedule a patch window. 
F. Use AWS Systems Manager Maintenance Windows to schedule a patch window. 

Show Answer