AWS DevOps Engineer Professional Exam Questions and Answers (Page: 3)

QUESTION: 17

A company is using AWS CodePipeline to automate its release pipeline. AWS CodeDeploy is being used in the pipeline to deploy an application to Amazon ECS using the blue/green deployment model. The company wants to implement scripts to test the green version of the application before shifting tra c. These scripts will complete in 5 minutes or less. If errors are discovered during these tests, the application must be rolled back.
Which strategy will meet these requirements?

Add a stage to the CodePipeline pipeline between the source and deploy stages. Use AWS CodeBuild to create an execution environment and build commands in the buildspec le to invoke test scripts. If errors are found, use the aws deploy stop-deployment command to stop the deployment.
Add a stage to the CodePipeline pipeline between the source and deploy stages. Use this stage to execute an AWS Lambda function that will run the test scripts. If errors are found, use the aws deploy stop-deployment command to stop the deployment.
Add a hooks section to the CodeDeploy AppSpec le. Use the AfterAllowTestTra c lifecycle event to invoke an AWS Lambda function to run the test scripts. If errors are found, exit the Lambda function with an error to trigger rollback.
Add a hooks section to the CodeDeploy AppSpec le. Use the AfterAllowTra c lifecycle event to invoke the test scripts. If errors are found, use the aws deploy stop-deployment CLI command to stop the deployment.

Answer(s): C

Reference:

https://docs.aws.amazon.com/codedeploy/latest/userguide/reference-appspec- le-structure-hooks.html

Reveal Solution Next Question

QUESTION: 18

A company requires an RPO of 2 hours and an RTO of 10 minutes for its data and application at all times. An application uses a MySQL database and Amazon
EC2 web servers. The development team needs a strategy for failover and disaster recovery. Which combination of deployment strategies will meet these requirements? (Choose two.)

Create an Amazon Aurora cluster in one Availability Zone across multiple Regions as the data store. Use Aurora's automatic recovery capabilities in the event of a disaster.
Create an Amazon Aurora global database in two Regions as the data store. In the event of a failure, promote the secondary Region as the master for the application.
Create an Amazon Aurora multi-master cluster across multiple Regions as the data store. Use a Network Load Balancer to balance the database tra c in different Regions.
Set up the application in two Regions and use Amazon Route 53 failover-based routing that points to the Application Load Balancers in both Regions. Use health checks to determine the availability in a given Region. Use Auto Scaling groups in each Region to adjust capacity based on demand.
Set up the application in two Regions and use a multi-Region Auto Scaling group behind Application Load Balancers to manage the capacity based on demand. In the event of a disaster, adjust the Auto Scaling group's desired instance count to increase baseline capacity in the failover Region.

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 19

An Amazon EC2 instance is running in a Virtual Private Cloud (VPC) and needs to download an object from a restricted Amazon S3 bucket. When the DevOps engineer tries to download, the object an AccessDenied error is received.
What are the possible causes for this error? (Choose two.)

The S3 bucket default encryption is enabled
There is an error in the S3 bucket policy
The object has been moved to Amazon Glacier
There is an error in the IAM role con guration
S3 versioning is enabled

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 20

A DevOps team manages an API running on-premises that serves as a backend for an Amazon API Gateway endpoint. Customers have been complaining about high response latencies, which the development team has veri ed using the API Gateway latency metrics in Amazon CloudWatch. To identify the cause, the team needs to collect relevant data without introducing additional latency.
Which actions should be taken to accomplish this? (Choose two.)

Install the CloudWatch agent server side and con gure the agent to upload relevant logs to CloudWatch.
Enable AWS X-Ray tracing in API Gateway, modify the application to capture request segments, and upload those segments to X-Ray during each request.
Enable AWS X-Ray tracing in API Gateway, modify the application to capture request segments, and use the X-Ray daemon to upload segments to X-Ray.
Modify the on-premises application to send log information back to API Gateway with each request.
Modify the on-premises application to calculate and upload statistical data relevant to the API service requests to CloudWatch metrics.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 21

A DevOps engineer wants to nd a solution to migrate an application from on premises to AWS. The application is running on Linux and needs to run on speci c versions of Apache Tomcat, HAProxy, and Varnish Cache to function properly. The application's operating system-level parameters require tuning. The solution must include a way to automate the deployment of new application versions. The infrastructure should be scalable and faulty servers should be replaced automatically.
Which solution should the DevOps engineer use?

Upload the application as a Docker image that contains all the necessary software to Amazon ECR. Create an Amazon ECS cluster using an AWS Fargate launch type and an Auto Scaling group. Create an AWS CodePipeline pipeline that uses Amazon ECR as a source and Amazon ECS as a deployment provider.
Upload the application code to an AWS CodeCommit repository with a saved con guration le to con gure and install the software. Create an AWS Elastic Beanstalk web server tier and a load balanced-type environment that uses the Tomcat solution stack. Create an AWS CodePipeline pipeline that uses CodeCommit as a source and Elastic Beanstalk as a deployment provider.
Upload the application code to an AWS CodeCommit repository with a set of .ebextensions les to con gure and install the software.
Create an AWS Elastic Beanstalk worker tier environment that uses the Tomcat solution stack. Create an AWS CodePipeline pipeline that uses CodeCommit as a source and Elastic Beanstalk as a deployment provider.
Upload the application code to an AWS CodeCommit repository with an appspec.yml le to con gure and install the necessary software.
Create an AWS CodeDeploy deployment group associated with an Amazon EC2 Auto Scaling group. Create an AWS CodePipeline pipeline that uses CodeCommit as a source and CodeDeploy as a deployment provider.

Answer(s): D

Reveal Solution Next Question

QUESTION: 22

A company wants to use AWS CloudFormation for infrastructure deployment. The company has strict tagging and resource requirements and wants to limit the deployment to two Regions. Developers will need to deploy multiple versions of the same application. Which solution ensures resources are deployed in accordance with company policy?

Create AWS Trusted Advisor checks to nd and remediate unapproved CloudFormation StackSets.
Create a CloudFormation drift detection operation to nd and remediate unapproved CloudFormation StackSets.
Create CloudFormation StackSets with approved CloudFormation templates.
Create AWS Service Catalog products with approved CloudFormation templates.

Answer(s): D

Reference:

https://aws.amazon.com/blogs/aws/use-cloudformation-stacksets-to-provision-resources-across-multiple-aws-accounts-and-regions/

Reveal Solution Next Question

QUESTION: 23

A DevOps Engineer must track the health of a stateless RESTful service sitting behind a Classic Load Balancer. The deployment of new application revisions is through a CI/CD pipeline. If the service's latency increases beyond a de ned threshold, deployment should be stopped until the service has recovered.
Which of the following methods allow for the QUICKEST detection time?

Use Amazon CloudWatch metrics provided by Elastic Load Balancing to calculate average latency. Alarm and stop deployment when latency increases beyond the de ned threshold.
Use AWS Lambda and Elastic Load Balancing access logs to detect average latency. Alarm and stop deployment when latency increases beyond the de ned threshold.
Use AWS CodeDeploy's MinimumHealthyHosts setting to de ne thresholds for rolling back deployments. If these thresholds are breached, roll back the deployment.
Use Metric Filters to parse application logs in Amazon CloudWatch Logs. Create a lter for latency. Alarm and stop deployment when latency increases beyond the de ned threshold.

Answer(s): A

Reference:

https://docs.amazonaws.cn/en_us/elasticloadbalancing/latest/application/load-balancercloudwatch-metrics.html

Reveal Solution Next Question

QUESTION: 24

An AWS CodePipeline pipeline has implemented a code release process. The pipeline is integrated with AWS CodeDeploy to deploy versions of an application to multiple Amazon EC2 instances for each CodePipeline stage.
During a recent deployment, the pipeline failed due to a CodeDeploy issue. The DevOps team wants to improve monitoring and noti cations during deployment to decrease resolution times.
What should the DevOps Engineer do to create noti cations when issues are discovered?

Implement AWS CloudWatch Logs for CodePipeline and CodeDeploy, create an AWS Con g rule to evaluate code deployment issues, and create an Amazon SNS topic to notify stakeholders of deployment issues.
Implement AWS CloudWatch Events for CodePipeline and CodeDeploy, create an AWS Lambda function to evaluate code deployment issues, and create an Amazon SNS topic to notify stakeholders of deployment issues.
Implement AWS CloudTrail to record CodePipeline and CodeDeploy API call information, create an AWS Lambda function to evaluate code deployment issues, and create an Amazon SNS topic to notify stakeholders of deployment issues.
Implement AWS CloudWatch Events for CodePipeline and CodeDeploy, create an Amazon Inspector assessment target to evaluate code deployment issues, and create an Amazon SNS topic to notify stakeholders of deployment issues.

Answer(s): B

Reveal Solution Next Question

Amazon AWS DevOps Engineer Professional Exam (page: 3) Amazon AWS DevOps Engineer - Professional (DOP-C01) Updated on: 09-Feb-2026

QUESTION: 17

Reference:

QUESTION: 18

QUESTION: 19

QUESTION: 20

QUESTION: 21

QUESTION: 22

Reference:

QUESTION: 23

Reference:

QUESTION: 24

Amazon AWS DevOps Engineer Professional Exam (page: 3)
Amazon AWS DevOps Engineer - Professional (DOP-C01)
Updated on: 09-Feb-2026