Free Preparation Discussions
MENU
Amazon DOP-C02 Exam
- Topic 1: Implement solutions that are scalable to meet business requirements/ Integrate automated testing into CI/CD pipelines
- Topic 2: Implement techniques for identity and access management at scale/ Implement CI/CD pipelines/ Build and manage artifacts
- Topic 3: Troubleshoot system and application failures/ Implement highly available solutions to meet resilience and business requirements
- Topic 4: Audit, monitor, and analyze logs and metrics to detect issues/ Manage event sources to process, notify, and take action in response to events
- Topic 5: Implement security monitoring and auditing solutions/ Define cloud infrastructure and reusable components to provision and manage systems throughout their lifecycle
- Topic 6: Implement configuration changes in response to events/ Design and build automated solutions for complex tasks and large-scale environments
- Topic 7: Automate monitoring and event management of complex environments/ Implement deployment strategies for instance, container, and serverless environments
- Topic 8: Configure the collection, aggregation, and storage of logs and metrics/ Implement automated recovery processes to meet RTO/RPO requirements
- Topic 9: Deploy automation to create, onboard, and secure AWS accounts in a multi-account/multi-Region environment/ Apply automation for security controls and data protection
Free Amazon DOP-C02 Exam Actual Questions
The questions for DOP-C02 were last updated On Apr. 12, 2024
A company is reviewing its 1AM policies. One policy written by the DevOps engineer has been (lagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: NonProduccion over the weekend. The current policy is:
What changes should the engineer make to achieve a policy ot least permission? (Select THREE.)
A.
B.
C.
D.
E.
F.
The engineer should make the following changes to achieve a policy of least permission:
A:Add a condition to ensure that the principal making the request is an AWS Lambda function. This ensures that only Lambda functions can execute this policy.
B:Narrow down the resources by specifying the ARN of EC2 instances instead of allowing all resources. This ensures that the policy only affects EC2 instances.
D:Add a condition to ensure that this policy only applies to EC2 instances tagged with ''Environment: NonProduction''. This ensures that production environments are not affected by this policy.
AWS Identity and Access Management (IAM) - AWS Documentation
Certified DevOps Engineer - Professional (DOP-C02) Study Guide(page 179)
A company runs a web application that extends across multiple Availability Zones. The company uses an Application Load Balancer (ALB) for routing. AWS Fargate (or the application and Amazon Aurora for the application data The company uses AWS CloudFormation templates to deploy the application The company stores all Docker images in an Amazon Elastic Container Registry (Amazon ECR) repository in the same AWS account and AWS Region.
A DevOps engineer needs to establish a disaster recovery (DR) process in another Region. The solution must meet an RPO of 8 hours and an RTO of 2 hours The company sometimes needs more than 2 hours to build the Docker images from the Dockerfile
Which solution will meet the RTO and RPO requirements MOST cost-effectively?
The most cost-effective solution to meet the RTO and RPO requirements is option B. This option involves copying the CloudFormation templates to an Amazon S3 bucket in the DR Region, configuring Aurora automated backup Cross-Region Replication, and configuring ECR Cross-Region Replication. In the event of a disaster, the CloudFormation template with the most recent Aurora snapshot and the Docker image from the local ECR repository can be used to launch a new CloudFormation stack in the DR Region. This approach avoids the need to build Docker images from the Dockerfile, which can sometimes take more than 2 hours, thus meeting the RTO requirement. Additionally, the use of automated backups and replication ensures that the RPO of 8 hours is met.
AWS Documentation on Disaster Recovery:Plan for Disaster Recovery (DR) - Reliability Pillar
AWS Blog on Establishing RPO and RTO Targets:Establishing RPO and RTO Targets for Cloud Applications
AWS Documentation on ECR Cross-Region Replication: Amazon ECR Cross-Region Replication
AWS Documentation on Aurora Cross-Region Replication: Replicating Amazon Aurora DB Clusters Across AWS Regions
A company's application runs on Amazon EC2 instances. The application writes to a log file that records the username, date, time: and source IP address of the login. The log is published to a log group in Amazon CloudWatch Logs
The company is performing a root cause analysis for an event that occurred on the previous day The company needs to know the number of logins for a specific user from the past 7 days
Which solution will provide this information'?
A company is examining its disaster recovery capability and wants the ability to switch over its daily operations to a secondary AWS Region. The company uses AWS CodeCommit as a source control tool in the primary Region.
A DevOps engineer must provide the capability for the company to develop code in the secondary Region. If the company needs to use the secondary Region, developers can add an additional remote URL to their local Git configuration.
Which solution will meet these requirements?
An ecommerce company uses a large number of Amazon Elastic Block Store (Amazon EBS) backed Amazon EC2 instances. To decrease manual work across all the instances, a DevOps engineer is tasked with automating restart actions when EC2 instance retirement events are scheduled.
How can this be accomplished?
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Currently there are no comments in this discussion, be the first to comment!