DOP-C02 Exam: Absolutely Free Online Practice

Question 1
- company has an AWS Control Tower landing zone. The company's DevOps team creates a workload OU. A development OU and a production OU are nested under the workload OU. The company grants users full access to the company's AWS accounts to deploy applications.
  The DevOps team needs to allow only a specific management IAM role to manage the IAM roles and policies of any AWS accounts in only the production OU.
  Which combination of steps will meet these requirements? (Choose two.)
  A : Create an SCP that denies full access with a condition to exclude the management IAM role for the organization root.
  
  B : Ensure that the FullAWSAccess SCP is applied at the organization root.
  
  C : Create an SCP that allows IAM related actions. Attach the SCP to the development OU.
  
  D : Create an SCP that denies IAM related actions with a condition to exclude the management IAM role. Attach the SCP to the workload OU.
  
  E : Create an SCP that denies IAM related actions with a condition to exclude the management IAM role. Attach the SCP to the production OU.
  
  Answer: B,E
Question 2
- A DevOps engineer is supporting early-stage development for a developer platform running on Amazon EKS. Recently, the platform has experienced an increased rate of container restart failures. The DevOps engineer wants diagnostic information to isolate and resolve issues. Which solution will meet this requirement?
  A : Configure CloudWatch dashboards using default EKS service metrics.
  
  B : Configure AWS CloudTrail for the EKS cluster.
  
  C : Configure CloudTrail Insights for the EKS cluster.
  
  D : Configure Amazon CloudWatch Container Insights for the EKS cluster by enabling the CloudWatch Observability add-on.
  
  Answer: D
Question 3
- A company has an application that stores data that includes personally identifiable information (PII) in an Amazon S3 bucket. All data is encrypted with AWS Key Management Service (AWS KMS) customer managed keys. All AWS resources are deployed from an AWS CloudFormation template.
  A DevOps engineer needs to set up a development environment for the application in a different AWS account. The data in the development environment's S3 bucket needs to be updated once a week from the production environment's S3 bucket.
  The company must not move PII from the production environment without anonymizing the PII first. The data in each environment must be encrypted with different KMS customer managed keys.
  Which combination of steps should the DevOps engineer take to meet these requirements? (Choose two.)
  A : Activate Amazon Macie on the S3 bucket in the production account. Create an AWS Step Functions state machine to initiate a discovery job and redact all PII before copying files to the S3 bucket in the development account. Give the state machine tasks decrypt permissions on the KMS key in the production account. Give the state machine tasks encrypt permissions on the KMS key in the development account.
  
  B : Set up S3 replication between the production S3 bucket and the development S3 bucket. Activate Amazon Macie on the development S3 bucket. Create an AWS Step Functions state machine to initiate a discovery job and redact all PII as the files are copied to the development S3 bucket. Give the state machine tasks encrypt and decrypt permissions on the KMS key in the development account.
  
  C : Set up an S3 Batch Operations job to copy files from the production S3 bucket to the development S3 bucket. In the development account, configure an AWS Lambda function to redact ail PII. Configure S3 Object Lambda to use the Lambda function for S3 GET requests. Give the Lambda function-s IAM role encrypt and decrypt permissions on the KMS key in the development account.
  
  D : Create a development environment from the CloudFormation template in the development account. Schedule an Amazon EventBridge rule to start the AWS Step Functions state machine once a week.
  
  E : Create a development environment from the CloudFormation template in the development account. Schedule a cron job on an Amazon EC2 instance to run once a week to start the S3 Batch Operations job.
  
  Answer: A,D
Question 4
- A company’s EC2 fleet must maintain up-to-date security patches and compliance reporting. Which solution meets these requirements?
  A : Use Systems Manager Patch Manager with AWS Config compliance rules and automation documents.
  
  B : SSH into each instance manually.
  
  C : Rebuild instances in Auto Scaling groups with latest AMIs.
  
  D : Use CloudFormation redeployment for every patch.
  
  Answer: A
Question 5
- A development team manually builds a local artifact. The development team moves the artifact to an Amazon S3 bucket to support an application. The application has a local cache that must be cleared when the development team deploys the application to Amazon EC2 instances. For each deployment, the development team runs a command to clear the cache, download the artifact from the S3 bucket, and unzip the artifact to complete the deployment. The development team wants to migrate the deployment process to a CI/CD process and to track the progress of each deployment. Which combination of actions will meet these requirements with the MOST operational efficiency? (Select THREE.)
  A : Set up an AWS CodeConnections compatible Git repository. Allow developers to merge code into the repository. Use AWS CodeBuild to build an artifact and copy the object into the S3 bucket. Configure CodeBuild to run for every merge into the main branch.
  
  B : Create a custom script to clear the cache. Specify the script in the BeforeInstall lifecycle hook in the AppSpec file.
  
  C : Create user data for each EC2 instance that contains the cache clearing script. Test the application after deployment. If the deployment is not successful, then redeploy.
  
  D : Use AWS CodePipeline to deploy the application. Set up an AWS CodeConnections compatible Git repository. Allow developers to merge code into the repository as a source for the pipeline.
  
  E : Use AWS CodeBuild to build the artifact and place the artifact in the S3 bucket. Use AWS CodeDeploy to deploy the artifact to EC2 instances.
  
  F : Use AWS Systems Manager to fetch the artifact from the S3 bucket and to deploy the artifact to all the EC2 instances.
  
  Answer: B,D,E

Free Amazon DOP-C02 Exam Questions

Absolute Free DOP-C02 Exam Practice for Comprehensive Preparation