Free Preparation Discussions
MENU
Amazon DOP-C02 Exam Questions
Free Amazon DOP-C02 Exam Actual Questions
Note: Premium Questions for DOP-C02 were last updated On Jul. 21, 2026 (see below)
A company uses AWS Organizations to manage multiple AWS accounts. The company needs a solution to improve the company's management of AWS resources in a production account.
The company wants to use AWS CloudFormation to manage all manually created infrastructure. The company must have the ability to strictly control who can make manual changes to AWS infrastructure. The solution must ensure that users can deploy new infrastructure only by making changes to a CloudFormation template that is stored in an AWS CodeConnections compatible Git provider.
Which combination of steps will meet these requirements with the LEAST implementation effort? (Select THREE).
Step A: Using a tool like CloudFormation resource import or IaC generator to scan and create a template from existing resources is efficient to bring current infrastructure under management.
Step C: Using CodeConnections (AWS's solution to connect Git repositories) with AWS CodePipeline ensures any changes to CloudFormation templates in the Git repo automatically deploy infrastructure changes, enforcing infrastructure as code workflows.
Step E: Creating an IAM role with CloudFormation as the principal ensures CloudFormation has permissions to manage resources. Using an SCP to deny all actions except by this role enforces strict control, preventing manual changes outside the pipeline.
Option B uses AWS Config which is more for compliance and auditing, not direct resource import. Option D is invalid because CloudFormation does not natively sync with Git; CodePipeline does. Option F is less secure than denying all except the IAM role.
AWS CloudFormation Resource Import:
'Import existing resources into CloudFormation stacks for management.'
(CloudFormation Resource Import)
AWS CodePipeline and CodeConnections Integration:
'Use CodeConnections to connect Git providers with AWS CodePipeline for continuous deployment.'
(AWS CodePipeline Git Integration)
AWS Organizations SCP and IAM Role Best Practices:
'Use SCPs to restrict actions and IAM roles with limited principals to enforce secure management.'
(AWS Organizations Best Practices)
A company's web app publishes JSON logs with transaction status to CloudWatch Logs. The company wants a dashboard showing the number of successful transactions with the least operational overhead.
Which solution meets this?
CloudWatch metric filters can parse logs directly to create metrics without additional infrastructure.
Metric filters combined with CloudWatch dashboards provide the simplest and most operationally efficient solution.
Options A, B, and D add complexity with additional services (OpenSearch, Lambda, Kinesis).
References:
CloudWatch Logs Metric Filters
CloudWatch Dashboards
A video-sharing company stores its videos in an Amazon S3 bucket. The company needs to analyze user access patterns such as the number of users who access a specific video each month.
Which solution will meet these requirements with the LEAST development effort?
Amazon S3 can generate server access logs that record detailed information about each request, including requester, bucket, key, operation, time, and status. These logs are written as objects to an S3 bucket. To analyze access patterns, the simplest and most serverless approach is to use Amazon Athena directly on those logs without building ingestion pipelines or databases.
Option B enables S3 server access logging and then creates an Athena external table over the log bucket. AWS provides standard log formats and even example schemas for S3 access logs. The analytics team can run ad hoc SQL queries to count the number of accesses per object per time period, filter by user, and perform aggregations, all without provisioning compute or managing databases.
Option A requires ingesting logs into Aurora, which adds ETL complexity and ongoing database management. Option C requires a Lambda function for every access event plus DB writes, which is more complex and potentially expensive at scale. Option D uses CloudWatch Logs and Managed Flink, which is more suited for streaming analytics and is significantly more complex than necessary for monthly summary reports.
Therefore, Option B provides the required analysis with the least development and operational effort.
A company uses an organization in AWS Organizations to manage its AWS accounts. The company's automation account contains a CI/CD pipeline that creates and configures new AWS accounts.
The company has a group of internal service teams that provide services to accounts in the organization. The service teams operate out of a set of services accounts. The service teams want to receive an AWS CloudTrail event in their services accounts when the CreateAccount API call creates a new account.
How should the company share this CloudTrail event with the service accounts?
Comprehensive and Detailed Explanation From Exact Extract of DevOps Engineer documents only:
Use cross-account EventBridge by configuring a rule in the source (automation) account to send events to the target accounts' default event buses, and grant permissions on the target default event buses to accept events from the source account. This is the standard cross-account event routing model.
A DevOps engineer is working on a data archival project that requires the migration of on-premises data to an Amazon S3 bucket. The DevOps engineer develops a script that incrementally archives on-premises data that is older than 1 month to Amazon S3. Data that is transferred to Amazon S3 is deleted from the on-premises location The script uses the S3 PutObject operation.
During a code review the DevOps engineer notices that the script does not verity whether the data was successfully copied to Amazon S3. The DevOps engineer must update the script to ensure that data is not corrupted during transmission. The script must use MD5 checksums to verify data integrity before the on-premises data is deleted.
Which solutions for the script will meet these requirements'? (Select TWO.)
https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Dorothy Taylor
24 days agoStephen Parker
25 days agoSandra Nguyen
2 months agoAnthony Peterson
2 months agoNancy Smith
3 months agoBarbara White
3 months agoDonald Gonzalez
3 months agoLinda Reed
3 months agoDaniel Roberts
3 months agoNancy Cook
2 months agoRonald Morgan
3 months agoJerry
4 months agoWillodean
4 months agoLeslee
4 months agoJohana
4 months agoRikki
5 months agoLenna
5 months agoDeeanna
5 months agoIola
5 months agoBarabara
6 months agoLashanda
6 months agoRosio
6 months agoAvery
6 months agoLynsey
7 months agoLuann
7 months agoArthur
7 months agoNoel
7 months agoGeoffrey
8 months agoJanella
8 months agoDell
8 months agoTequila
9 months agoAnglea
9 months agoShawna
9 months agoSonia
9 months agoKing
10 months agoKathrine
10 months agoElke
10 months agoTheron
11 months agoDenise
11 months agoGrover
1 year agoBeckie
1 year agoAlyce
1 year agoMelissia
1 year agoHaydee
1 year agoTruman
2 years agoNida
2 years agoArlean
2 years agoFelicidad
2 years agoSophia
2 years agoGeorgeanna
2 years agoIluminada
2 years agoMariann
2 years agoShelia
2 years agoHoney
2 years agoAshlyn
2 years agoKanisha
2 years agoMireya
2 years agoTyisha
2 years agoCasie
2 years agoCheryl
2 years agoLon
2 years agoEmeline
2 years agoElmer
2 years agoJustine
2 years agoJosefa
2 years agoVernice
2 years agoMilly
2 years agoCherilyn
2 years agoHerman
2 years ago