Amazon
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
SAP
ServiceNow
All Vendors

Amazon AWS DevOps Engineer - Professional (DOP-C02) AWS DevOps Engineer Professional Exam Questions in PDF

Free Amazon AWS DevOps Engineer Professional Dumps Questions (page: 19)

AWS DevOps Engineer Professional PDF — 429 Questions

A healthcare services company is concerned about the growing costs of software licensing for an application for monitoring patient wellness. The company wants to create an audit process to ensure that the application is running exclusively on Amazon EC2 Dedicated Hosts. A DevOps Engineer must create a work ow to audit the application to ensure compliance. What steps should the Engineer take to meet this requirement with the LEAST administrative overhead?

  1. Use AWS Systems Manager Con guration Compliance. Use calls to the put-compliance-items API action to scan and build a database of noncompliant EC2 instances based on their host placement con guration. Use an Amazon DynamoDB table to store these instance IDs for fast access. Generate a report through Systems Manager by calling the list-compliance-summaries API action.
  2. Use custom Java code running on an EC2 instance. Set up EC2 Auto Scaling for the instance depending on the number of instances to be checked. Send the list of noncompliant EC2 instance IDs to an Amazon SQS queue. Set up another worker instance to process instance IDs from the SQS queue and write them to Amazon DynamoD Use an AWS Lambda function to terminate noncompliant instance IDs obtained from the queue, and send them to an Amazon SNS email topic for distribution.
  3. Use AWS Con g. Identify all EC2 instances to be audited by enabling Con g Recording on all Amazon EC2 resources for the region. Create a custom AWS Con g rule that triggers an AWS Lambda function by using the con g-rule-change-triggered blueprint. Modify the Lambda evaluateCompliance() function to verify host placement to return a NON_COMPLIANT result if the instance is not running on an EC2 Dedicated Host. Use the AWS Con g report to address noncompliant instances.
  4. Use AWS CloudTrail. Identify all EC2 instances to be audited by analyzing all calls to the EC2 RunCommand API action. Invoke an AWS Lambda function that analyzes the host placement of the instance. Store the EC2 instance ID of noncompliant resources in an Amazon RDS MySQL DB instance. Generate a report by querying the RDS instance and exporting the query results to a CSV text le.

Answer(s): C



A company has 100 GB of log data in an Amazon S3 bucket stored in .csv format. SQL developers want to query this data and generate graphs to visualize it.
They also need an e cient, automated way to store metadata from the .csv le. Which combination of steps should be taken to meet these requirements with the LEAST amount of effort? (Choose three.)

  1. Filter the data through AWS X-Ray to visualize the data.
  2. Filter the data through Amazon QuickSight to visualize the data.
  3. Query the data with Amazon Athena.
  4. Query the data with Amazon Redshift.
  5. Use AWS Glue as the persistent metadata store.
  6. Use Amazon S3 as the persistent metadata store.

Answer(s): B,C,E



A DevOps Engineer has several legacy applications that all generate different log formats. The Engineer must standardize the formats before writing them to
Amazon S3 for querying and analysis.
How can this requirement be met at the LOWEST cost?

  1. Have the application send its logs to an Amazon EMR cluster and normalize the logs before sending them to Amazon S3
  2. Have the application send its logs to Amazon QuickSight, then use the Amazon QuickSight SPICE engine to normalize the logs. Do the analysis directly from Amazon QuickSight
  3. Keep the logs in Amazon S3 and use Amazon Redshift Spectrum to normalize the logs in place
  4. Use Amazon Kinesis Agent on each server to upload the logs and have Amazon Kinesis Data Firehose use an AWS Lambda function to normalize the logs before writing them to Amazon S3

Answer(s): D



A company needs to implement a robust CI/CD pipeline to automate the deployment of an application in AWS. The pipeline must support continuous integration, continuous delivery, and automatic rollback upon deployment failure. The entire CI/CD pipeline must be capable of being re-provisioned in alternate AWS accounts or Regions within minutes. A DevOps engineer has already created an AWS CodeCommit repository to store the source code.
Which combination of actions should be taken when building this pipeline to meet these requirements? (Choose three.)

  1. Con gure an AWS CodePipeline pipeline with a build stage using AWS CodeBuild.
  2. Copy the build artifact from CodeCommit to Amazon S3.
  3. Create an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer (ALB) and set the ALB as the deployment target in AWS CodePipeline.
  4. Create an AWS Elastic Beanstalk environment as the deployment target in AWS CodePipeline.
  5. Implement an Amazon SQS queue to decouple the pipeline components.
  6. Provision all resources using AWS CloudFormation.

Answer(s): A,D,F



A company is building a solution for storing les containing Personally Identi able Information (PII) on AWS.
Requirements state:
All data must be encrypted at rest and in transit.
All data must be replicated in at least two locations that are at least 500 miles (805 kilometers) apart.
Which solution meets these requirements?

  1. Create primary and secondary Amazon S3 buckets in two separate Availability Zones that are at least 500 miles (805 kilometers) apart. Use a bucket policy to enforce access to the buckets only through HTTPS. Use a bucket policy to enforce Amazon S3 SSE-C on all objects uploaded to the bucket. Con gure cross- region replication between the two buckets.
  2. Create primary and secondary Amazon S3 buckets in two separate AWS Regions that are at least 500 miles (805 kilometers) apart. Use a bucket policy to enforce access to the buckets only through HTTPS. Use a bucket policy to enforce S3-Managed Keys (SSE-S3) on all objects uploaded to the bucket. Con gure cross-region replication between the two buckets.
  3. Create primary and secondary Amazon S3 buckets in two separate AWS Regions that are at least 500 miles (805 kilometers) apart. Use an IAM role to enforce access to the buckets only through HTTPS. Use a bucket policy to enforce Amazon S3-Managed Keys (SSE-S3) on all objects uploaded to the bucket. Con gure cross-region replication between the two buckets.
  4. Create primary and secondary Amazon S3 buckets in two separate Availability Zones that are at least 500 miles (805 kilometers) apart. Use a bucket policy to enforce access to the buckets only through HTTPS. Use a bucket policy to enforce AWS KMS encryption on all objects uploaded to the bucket. Con gure cross-region replication between the two buckets. Create a KMS Customer Master Key (CMK) in the primary region for encrypting objects.

Answer(s): B



A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts.
The buildspec.yml le contains the following:



The DevOps Engineer has noticed that anybody with an AWS account is able to download the artifacts.
What steps should the DevOps Engineer take to stop this?

  1. Modify the post_build to command to use "-acl public-read and con gure a bucket policy that grants read access to the relevant AWS accounts only.
  2. Con gure a default ACL for the S3 bucket that de nes the set of authenticated users as the relevant AWS accounts only and grants read- only access.
  3. Create an S3 bucket policy that grants read access to the relevant AWS accounts and denies read access to the principal *
  4. Modify the post_build command to remove "-acl authenticated-read and con gure a bucket policy that allows read access to the relevant AWS accounts only.

Answer(s): D



A DevOps engineer needs to grant several external contractors access to a legacy application that runs on an Amazon Linux Amazon EC2 instance. The application server is available only in a private subnet. The contractors are not authorized for VPN access. What should the DevOps engineer do to grant the contactors access to the application server?

  1. Create an IAM user and SSH keys for each contractor. Add the public SSH key to the application server's SSH authorized_keys le. Instruct the contractors to install the AWS CLI and AWS Systems Manager Session Manager plugin, update their AWS credentials les with their private keys, and use the aws ssm start-session command to gain access to the target application server instance ID.
  2. Ask each contractor to securely send their SSH public key. Add this public key to the application server's SSH authorized-keys le. Instruct the contractors to use their private key to connect to the application server through SSH.
  3. Ask each contractor to securely send their SSH public key. Use EC2 pairs to import their key. Update the application server's SSH authorized_keys le. Instruct the contractors to use their private key to connect to the application server through SSH.
  4. Create an IAM user for each contractor with programmatic access. Add each user to an IAM group that has a policy that allows the ssm:StartSession action. Instruct the contractors to install the AWS CLI and AWS Systems Manager Session Manager plugin, update their AWS credentials les with their access keys, and use the aws ssm start-session to gain access to the target application server instance I

Answer(s): D



A company hosts its staging website using an Amazon EC2 instance backed with Amazon EBS storage. The company wants to recover quickly with minimal data losses in the event of network connectivity issues or power failures on the EC2 instance.
Which solution will meet these requirements?

  1. Add the instance to an EC2 Auto Scaling group with the minimum, maximum, and desired capacity set to 1.
  2. Add the instance to an EC2 Auto Scaling group with a lifecycle hook to detach the EBS volume when the EC2 instance shuts down or terminates.
  3. Create an Amazon CloudWatch alarm for the StatusCheckFailed_System metric and select the EC2 action to recover the instance.
  4. Create an Amazon CloudWatch alarm for the StatusCheckFailed_Instance metric and select the EC2 action to reboot the instance.

Answer(s): C


Reference:

https://aws.amazon.com/ru/blogs/aws/ec2-instance-status-metrics/
https://docs.amazonaws.cn/en_us/AmazonCloudWatch/latest/monitoring/UsingAlarmActions.html



Viewing page 19 of 27

Share your comments for Amazon AWS DevOps Engineer Professional exam with other users:

V
vs
9/2/2023 12:19:00 PM

no comments

Anonymous
J
john adenu
11/14/2023 11:02:00 AM

nice questions bring out the best in you.

Anonymous
O
Osman
11/21/2023 2:27:00 PM

really helpful

Anonymous
E
Edward
9/13/2023 5:27:00 PM

question #50 and question #81 are exactly the same questions, azure site recovery provides________for virtual machines. the first says that it is fault tolerance is the answer and second says disater recovery. from my research, it says it should be disaster recovery. can anybody explain to me why? thank you

CANADA
M
Monti
5/24/2023 11:14:00 PM

iam thankful for these exam dumps questions, i would not have passed without this exam dumps.

UNITED STATES
A
Anon
10/25/2023 10:48:00 PM

some of the answers seem to be inaccurate. q10 for example shouldnt it be an m custom column?

MALAYSIA
P
PeterPan
10/18/2023 10:22:00 AM

are the question real or fake?

Anonymous
C
CW
7/11/2023 3:19:00 PM

thank you for providing such assistance.

UNITED STATES
M
Mn8300
11/9/2023 8:53:00 AM

nice questions

Anonymous
N
Nico
4/23/2023 11:41:00 PM

my 3rd purcahse from this site. these exam dumps are helpful. very helpful.

ITALY
C
Chere
9/15/2023 4:21:00 AM

found it good

Anonymous
T
Thembelani
5/30/2023 2:47:00 AM

excellent material

Anonymous
V
vinesh phale
9/11/2023 2:51:00 AM

very helpfull

UNITED STATES
B
Bhagiii
11/4/2023 7:04:00 AM

well explained.

Anonymous
R
Rahul
8/8/2023 9:40:00 PM

i need the pdf, please.

CANADA
C
CW
7/11/2023 2:51:00 PM

a good source for exam preparation

UNITED STATES
A
Anchal
10/23/2023 4:01:00 PM

nice questions

INDIA
J
J Nunes
9/29/2023 8:19:00 AM

i need ielts general training audio guide questions

BRAZIL
A
Ananya
9/14/2023 5:16:00 AM

please make this content available

UNITED STATES
S
Swathi
6/4/2023 2:18:00 PM

content is good

Anonymous
L
Leo
7/29/2023 8:45:00 AM

latest dumps please

INDIA
L
Laolu
2/15/2023 11:04:00 PM

aside from pdf the test engine software is helpful. the interface is user-friendly and intuitive, making it easy to navigate and find the questions.

UNITED STATES
Z
Zaynik
9/17/2023 5:36:00 AM

questions and options are correct, but the answers are wrong sometimes. so please check twice or refer some other platform for the right answer

Anonymous
M
Massam
6/11/2022 5:55:00 PM

90% of questions was there but i failed the exam, i marked the answers as per the guide but looks like they are not accurate , if not i would have passed the exam given that i saw about 45 of 50 questions from dump

Anonymous
A
Anonymous
12/27/2023 12:47:00 AM

answer to this question "what administrative safeguards should be implemented to protect the collected data while in use by manasa and her product management team? " it should be (c) for the following reasons: this administrative safeguard involves controlling access to collected data by ensuring that only individuals who need the data for their job responsibilities have access to it. this helps minimize the risk of unauthorized access and potential misuse of sensitive information. while other options such as (a) documenting data flows and (b) conducting a privacy impact assessment (pia) are important steps in data protection, implementing a "need to know" access policy directly addresses the issue of protecting data while in use by limiting access to those who require it for legitimate purposes. (d) is not directly related to safeguarding data during use; it focuses on data transfers and location.

INDIA
J
Japles
5/23/2023 9:46:00 PM

password lockout being the correct answer for question 37 does not make sense. it should be geofencing.

Anonymous
F
Faritha
8/10/2023 6:00:00 PM

for question 4, the righr answer is :recover automatically from failures

UNITED STATES
A
Anonymous
9/14/2023 4:27:00 AM

question number 4s answer is 3, option c. i

UNITED STATES
P
p das
12/7/2023 11:41:00 PM

very good questions

UNITED STATES
A
Anna
1/5/2024 1:12:00 AM

i am confused about the answers to the questions. are the answers correct?

KOREA REPUBLIC OF
B
Bhavya
9/13/2023 10:15:00 AM

very usefull

Anonymous
R
Rahul Kumar
8/31/2023 12:30:00 PM

need certification.

CANADA
D
Diran Ole
9/17/2023 5:15:00 PM

great exam prep

CANADA
V
Venkata Subbarao Bandaru
6/24/2023 8:45:00 AM

i require dump

Anonymous
AI Tutor 👋 I’m here to help!