DOP-C02 AWS Certified DevOps Engineer- Professional Free Demo Questions – Try Before You Buy

Question 1

A company's DevOps engineer uses AWS Systems Manager to perform maintenance tasks
during maintenance windows. The company has a few Amazon EC2 instances that require
a restart after notifications from AWS Health. The DevOps engineer needs to implement an
automated solution to remediate these notifications. The DevOps engineer creates an
Amazon EventBridge rule. How should the DevOps engineer configure the EventBridge rule
to meet these requirements?

A

Configure an event source of AWS Health, a service of EC2. and an event type that
indicates
instance maintenance. Target a Systems Manager document to restart the EC2 instance.

B

Configure an event source of Systems Manager and an event type that indicates a
maintenance window. Target a Systems Manager document to restart the EC2 instance.

C

Configure an event source of AWS Health, a service of EC2, and an event type that
indicates instance maintenance. Target a newly created AWS Lambda function that registers an
automation task to restart the EC2 instance during a maintenance window.

D

Configure an event source of EC2 and an event type that indicates instance
maintenance. Target a newly created AWS Lambda function that registers an automation task to restart the EC2
instance

Correct Answer: C

Explanation:

AWS Health provides real-time events and information related to your AWS infrastructure. It can be
integrated with Amazon EventBridge to act upon the health events automatically. If the maintenance
notification from AWS Health indicates that an EC2 instance requires a restart, you can set up an
EventBridge rule to respond to such events. In this case, the target of this rule would be a Lambda
function that would trigger a Systems Manager automation to restart the EC2 instance during a
maintenance window. Remember, AWS Health is the source of the events (not EC2 or Systems
Manager), and AWS Lambda can be used to execute complex remediation tasks, such as scheduling
maintenance tasks via Systems Manager.
The following are the steps involved in configuring the EventBridge rule to meet these requirements:
Configure an event source of AWS Health, a service of EC2, and an event type that indicates instance
maintenance.
Target a newly created AWS Lambda function that registers an automation task to restart the EC2
instance during a maintenance window.
The AWS Lambda function will be triggered by the event from AWS Health. The function will then
register an automation task to restart the EC2 instance during the next maintenance window.

Question 2

A company uses AWS Organizations and AWS Control Tower to manage all the company's AWS
accounts. The company uses the Enterprise Support plan.
A DevOps engineer is using Account Factory for Terraform (AFT) to provision new accounts. When
new accounts are provisioned, the DevOps engineer notices that the support plan for the new
accounts is set to the Basic Support plan. The DevOps engineer needs to implement a solution to
provision the new accounts with the Enterprise Support plan.
Which solution will meet these requirements?

A

Use an AWS Config conformance pack to deploy the account-part-of-organizations AWS Config
rule and to automatically remediate any noncompliant accounts.

B

Create an AWS Lambda function to create a ticket for AWS Support to add the account to the
Enterprise Support plan. Grant the Lambda function the support:ResolveCase permission.

C

Add an additional value to the control_tower_parameters input to set the AWSEnterpriseSupport
parameter as the organization's management account number.

D

Set the aft_feature_enterprise_support feature flag to True in the AFT deployment input
configuration. Redeploy AFT and apply the changes.

Correct Answer: D

Explanation:

AWS Organizations is a service that helps to manage multiple AWS accounts. AWS Control Tower is a
service that makes it easy to set up and govern secure, compliant multi-account AWS environments.
Account Factory for Terraform (AFT) is an AWS Control Tower feature that provisions new accounts
using Terraform templates. To provision new accounts with the Enterprise Support plan, the DevOps
engineer can set the aft_feature_enterprise_support feature flag to True in the AFT deployment
input configuration. This flag enables the Enterprise Support plan for newly provisioned accounts.

Question 3

A DevOps engineer is creating an AWS CloudFormation template to deploy a web service. The web
service will run on Amazon EC2 instances in a private subnet behind an Application Load Balancer
(ALB). The DevOps engineer must ensure that the service can accept requests from clients that have
IPv6 addresses. What should the DevOps engineer do with the CloudFormation template so that IPv6 clients can
access the web service?

A

Add an IPv6 CIDR block to the VPC and the private subnet for the EC2 instances. Create route table
entries for the IPv6 network, use EC2 instance types that support IPv6, and assign IPv6 addresses to
each EC2 instance.

B

Assign each EC2 instance an IPv6 Elastic IP address. Create a target group, and add the EC2
instances as targets. Create a listener on port 443 of the ALB, and associate the target group with the
ALB.

C

Replace the ALB with a Network Load Balancer (NLB). Add an IPv6 CIDR block to the VPC and
subnets for the NLB, and assign the NLB an IPv6 Elastic IP address.

D

Add an IPv6 CIDR block to the VPC and subnets for the ALB. Create a listener on port 443. and
specify the dualstack IP address type on the ALB. Create a target group, and add the EC2 instances as
targets. Associate the target group with the ALB.

Correct Answer: D

Explanation:

it involves adding an IPv6 CIDR block to the VPC and subnets for the ALB and specifying the dualstack
IP address type on the ALB listener. This allows the ALB to listen on both IPv4 and IPv6 addresses, and
forward requests to the EC2 instances that are added as targets to the target group associated with
the ALB.

Demo Amazon DOP-C02 Exam Questions

Configure an event source of AWS Health, a service of EC2. and an event type that
indicates
instance maintenance. Target a Systems Manager document to restart the EC2 instance.

Configure an event source of Systems Manager and an event type that indicates a
maintenance window. Target a Systems Manager document to restart the EC2 instance.

Configure an event source of AWS Health, a service of EC2, and an event type that
indicates instance maintenance. Target a newly created AWS Lambda function that registers an
automation task to restart the EC2 instance during a maintenance window.

Configure an event source of EC2 and an event type that indicates instance
maintenance. Target a newly created AWS Lambda function that registers an automation task to restart the EC2
instance

Correct Answer: C

Use an AWS Config conformance pack to deploy the account-part-of-organizations AWS Config
rule and to automatically remediate any noncompliant accounts.

Create an AWS Lambda function to create a ticket for AWS Support to add the account to the
Enterprise Support plan. Grant the Lambda function the support:ResolveCase permission.

Add an additional value to the control_tower_parameters input to set the AWSEnterpriseSupport
parameter as the organization's management account number.

Set the aft_feature_enterprise_support feature flag to True in the AFT deployment input
configuration. Redeploy AFT and apply the changes.

Correct Answer: D

Add an IPv6 CIDR block to the VPC and the private subnet for the EC2 instances. Create route table
entries for the IPv6 network, use EC2 instance types that support IPv6, and assign IPv6 addresses to
each EC2 instance.

Assign each EC2 instance an IPv6 Elastic IP address. Create a target group, and add the EC2
instances as targets. Create a listener on port 443 of the ALB, and associate the target group with the
ALB.

Replace the ALB with a Network Load Balancer (NLB). Add an IPv6 CIDR block to the VPC and
subnets for the NLB, and assign the NLB an IPv6 Elastic IP address.

Add an IPv6 CIDR block to the VPC and subnets for the ALB. Create a listener on port 443. and
specify the dualstack IP address type on the ALB. Create a target group, and add the EC2 instances as
targets. Associate the target group with the ALB.

Correct Answer: D

Demo Practice Mode

Demo Amazon DOP-C02 Exam Questions

Configure an event source of AWS Health, a service of EC2. and an event type thatindicatesinstance maintenance. Target a Systems Manager document to restart the EC2 instance.

Configure an event source of Systems Manager and an event type that indicates amaintenance window. Target a Systems Manager document to restart the EC2 instance.

Configure an event source of AWS Health, a service of EC2, and an event type thatindicates instance maintenance. Target a newly created AWS Lambda function that registers anautomation task to restart the EC2 instance during a maintenance window.

Configure an event source of EC2 and an event type that indicates instancemaintenance. Target a newly created AWS Lambda function that registers an automation task to restart the EC2instance

Correct Answer: C

Use an AWS Config conformance pack to deploy the account-part-of-organizations AWS Configrule and to automatically remediate any noncompliant accounts.

Create an AWS Lambda function to create a ticket for AWS Support to add the account to theEnterprise Support plan. Grant the Lambda function the support:ResolveCase permission.

Add an additional value to the control_tower_parameters input to set the AWSEnterpriseSupportparameter as the organization's management account number.

Set the aft_feature_enterprise_support feature flag to True in the AFT deployment inputconfiguration. Redeploy AFT and apply the changes.

Correct Answer: D

Add an IPv6 CIDR block to the VPC and the private subnet for the EC2 instances. Create route tableentries for the IPv6 network, use EC2 instance types that support IPv6, and assign IPv6 addresses toeach EC2 instance.

Assign each EC2 instance an IPv6 Elastic IP address. Create a target group, and add the EC2instances as targets. Create a listener on port 443 of the ALB, and associate the target group with theALB.

Replace the ALB with a Network Load Balancer (NLB). Add an IPv6 CIDR block to the VPC andsubnets for the NLB, and assign the NLB an IPv6 Elastic IP address.

Add an IPv6 CIDR block to the VPC and subnets for the ALB. Create a listener on port 443. andspecify the dualstack IP address type on the ALB. Create a target group, and add the EC2 instances astargets. Associate the target group with the ALB.

Correct Answer: D

Demo Practice Mode

Configure an event source of AWS Health, a service of EC2. and an event type that
indicates
instance maintenance. Target a Systems Manager document to restart the EC2 instance.

Configure an event source of Systems Manager and an event type that indicates a
maintenance window. Target a Systems Manager document to restart the EC2 instance.

Configure an event source of AWS Health, a service of EC2, and an event type that
indicates instance maintenance. Target a newly created AWS Lambda function that registers an
automation task to restart the EC2 instance during a maintenance window.

Configure an event source of EC2 and an event type that indicates instance
maintenance. Target a newly created AWS Lambda function that registers an automation task to restart the EC2
instance

Use an AWS Config conformance pack to deploy the account-part-of-organizations AWS Config
rule and to automatically remediate any noncompliant accounts.

Create an AWS Lambda function to create a ticket for AWS Support to add the account to the
Enterprise Support plan. Grant the Lambda function the support:ResolveCase permission.

Add an additional value to the control_tower_parameters input to set the AWSEnterpriseSupport
parameter as the organization's management account number.

Set the aft_feature_enterprise_support feature flag to True in the AFT deployment input
configuration. Redeploy AFT and apply the changes.

Add an IPv6 CIDR block to the VPC and the private subnet for the EC2 instances. Create route table
entries for the IPv6 network, use EC2 instance types that support IPv6, and assign IPv6 addresses to
each EC2 instance.

Assign each EC2 instance an IPv6 Elastic IP address. Create a target group, and add the EC2
instances as targets. Create a listener on port 443 of the ALB, and associate the target group with the
ALB.

Replace the ALB with a Network Load Balancer (NLB). Add an IPv6 CIDR block to the VPC and
subnets for the NLB, and assign the NLB an IPv6 Elastic IP address.

Add an IPv6 CIDR block to the VPC and subnets for the ALB. Create a listener on port 443. and
specify the dualstack IP address type on the ALB. Create a target group, and add the EC2 instances as
targets. Associate the target group with the ALB.