DOP-C02 AWS Certified DevOps Engineer- Professional Free Demo Questions – Try Before You Buy

Question 1

To run an application, a DevOps engineer launches an Amazon EC2 instance with public IP addresses
in a public subnet. A user data script obtains the application artifacts and installs them on the
instances upon launch. A change to the security classification of the application now requires the
instances to run with no access to the internet. While the instances launch successfully and show as
healthy, the application does not seem to be installed.
Which of the following should successfully install the application while complying with the new rule?

A

Launch the instances in a public subnet with Elastic IP addresses attached. Once the application is
installed and running, run a script to disassociate the Elastic IP addresses afterwards.

B

Set up a NAT gateway. Deploy the EC2 instances to a private subnet. Update the private subnet's
route table to use the NAT gateway as the default route.

C

Publish the application artifacts to an Amazon S3 bucket and create a VPC endpoint for S3. Assign
an IAM instance profile to the EC2 instances so they can read the application artifacts from the S3
bucket.

D

Create a security group for the application instances and allow only outbound traffic to the artifact
repository. Remove the security group rule once the install is complete.

Correct Answer: C

Explanation:

EC2 instances running in private subnets of a VPC can now have controlled access to S3 buckets,
objects, and API functions that are in the same region as the VPC. You can use an S3 bucket policy to
indicate which VPCs and which VPC Endpoints have access to your S3 buckets 1-

Question 2

A DevOps engineer is building a continuous deployment pipeline for a serverless
application that uses AWS Lambda functions. The company wants to reduce the customer
impact of an unsuccessful deployment. The company also wants to monitor for issues.
Which deploy stage configuration will meet these requirements?

A

A. Use an AWS Serverless
Application Model (AWS SAM) template to define the serverless application. Use AWS
CodeDeploy to deploy the Lambda functions with the Canary10Percent15Minutes
Deployment Preference Type. Use Amazon CloudWatch alarms to monitor the health of the
functions.

B

B. Use AWS CloudFormation to publish a new stack update, and include Amazon
CloudWatch alarms on all resources. Set up an AWS CodePipeline approval action for a
developer to verify and approve the AWS CloudFormation change set.

C

C. Use AWS
CloudFormation to publish a new version on every stack update, and include Amazon
CloudWatch alarms on all resources. Use the RoutingConfig property of the
AWS::Lambda::Alias resource to update the traffic routing during the stack update.

D

D. Use
AWS CodeBuild to add sample event payloads for testing to the Lambda functions. Publish
a new version of the functions, and include Amazon CloudWatch alarms. Update the
production alias to point to the new version. Configure rollbacks to occur when an alarm is
in the ALARM state.

Correct Answer: D

Explanation:

Use routing configuration on an alias to send a portion of traffic to a second function version. For
example, you can reduce the risk of deploying a new version by configuring the alias to send most of
the traffic to the existing version, and only a small percentage of traffic to the new version.
https://docs.aws.amazon.com/lambda/latest/dg/configuration-aliases.html
The following are the steps involved in the deploy stage configuration that will meet the
requirements:
Use AWS CodeBuild to add sample event payloads for testing to the Lambda functions.
Publish a new version of the functions, and include Amazon CloudWatch alarms.
Update the production alias to point to the new version.
Configure rollbacks to occur when an alarm is in the ALARM state.
This configuration will help to reduce the customer impact of an unsuccessful deployment by
deploying the new version of the functions to a staging environment first. This will allow the DevOps
engineer to test the new version of the functions before deploying it to production.
The configuration will also help to monitor for issues by including Amazon CloudWatch alarms. These
alarms will alert the DevOps engineer if there are any problems with the new version of the functions.

Question 3

An ecommerce company is receiving reports that its order history page is experiencing
delays in reflecting the processing status of orders. The order processing system consists
of an AWS Lambda function that uses reserved concurrency. The Lambda function
processes order messages from an Amazon Simple Queue Service (Amazon SQS) queue
and inserts processed orders into an Amazon DynamoDB table. The DynamoDB table has
auto scaling enabled for read and write capacity. Which actions should a DevOps engineer take to resolve this delay? (Choose two.)

A

Check the ApproximateAgeOfOldestMessage metric for the SQS queue. Increase the Lambda
function concurrency limit.

B

Check the ApproximateAgeOfOldestMessage metnc for the SQS queue Configure a redrive policy
on the SQS queue.

C

Check the NumberOfMessagesSent metric for the SQS queue. Increase the SQS queue visibility
timeout.

D

Check the WriteThrottleEvents metric for the DynamoDB table. Increase the maximum write
capacity units (WCUs) for the table's scaling policy.

E

Check the Throttles metric for the Lambda function. Increase the Lambda function timeout.

Correct Answer: A, D

Explanation:

A: If the ApproximateAgeOfOldestMessages indicate that orders are remaining in the SQS queue for
longer than expected, the reserved concurrency limit may be set too small to keep up with the
number of orders entering the queue and is being throttled. D: The DynamoDB table is using Auto
Scaling. With Auto Scaling, you create a scaling policy that specifies whether you want to scale read
capacity or write capacity (or both), and the minimum and maximum provisioned capacity unit
settings for the table. The ThottledWriteRequests metric will indicate if there is a throttling issue on
the DynamoDB table, which can be resolved by increasing the maximum write capacity units for the
table's Auto Scaling policy.

Demo Amazon DOP-C02 Exam Questions

Launch the instances in a public subnet with Elastic IP addresses attached. Once the application is
installed and running, run a script to disassociate the Elastic IP addresses afterwards.

Set up a NAT gateway. Deploy the EC2 instances to a private subnet. Update the private subnet's
route table to use the NAT gateway as the default route.

Publish the application artifacts to an Amazon S3 bucket and create a VPC endpoint for S3. Assign
an IAM instance profile to the EC2 instances so they can read the application artifacts from the S3
bucket.

Create a security group for the application instances and allow only outbound traffic to the artifact
repository. Remove the security group rule once the install is complete.

Correct Answer: C

EC2 instances running in private subnets of a VPC can now have controlled access to S3 buckets,
objects, and API functions that are in the same region as the VPC. You can use an S3 bucket policy to
indicate which VPCs and which VPC Endpoints have access to your S3 buckets 1-

A. Use an AWS Serverless
Application Model (AWS SAM) template to define the serverless application. Use AWS
CodeDeploy to deploy the Lambda functions with the Canary10Percent15Minutes
Deployment Preference Type. Use Amazon CloudWatch alarms to monitor the health of the
functions.

B. Use AWS CloudFormation to publish a new stack update, and include Amazon
CloudWatch alarms on all resources. Set up an AWS CodePipeline approval action for a
developer to verify and approve the AWS CloudFormation change set.

C. Use AWS
CloudFormation to publish a new version on every stack update, and include Amazon
CloudWatch alarms on all resources. Use the RoutingConfig property of the
AWS::Lambda::Alias resource to update the traffic routing during the stack update.

D. Use
AWS CodeBuild to add sample event payloads for testing to the Lambda functions. Publish
a new version of the functions, and include Amazon CloudWatch alarms. Update the
production alias to point to the new version. Configure rollbacks to occur when an alarm is
in the ALARM state.

Correct Answer: D

Check the ApproximateAgeOfOldestMessage metric for the SQS queue. Increase the Lambda
function concurrency limit.

Check the ApproximateAgeOfOldestMessage metnc for the SQS queue Configure a redrive policy
on the SQS queue.

Check the NumberOfMessagesSent metric for the SQS queue. Increase the SQS queue visibility
timeout.

Check the WriteThrottleEvents metric for the DynamoDB table. Increase the maximum write
capacity units (WCUs) for the table's scaling policy.

Check the Throttles metric for the Lambda function. Increase the Lambda function timeout.

Correct Answer: A, D

Demo Practice Mode

Demo Amazon DOP-C02 Exam Questions

Launch the instances in a public subnet with Elastic IP addresses attached. Once the application isinstalled and running, run a script to disassociate the Elastic IP addresses afterwards.

Set up a NAT gateway. Deploy the EC2 instances to a private subnet. Update the private subnet'sroute table to use the NAT gateway as the default route.

Publish the application artifacts to an Amazon S3 bucket and create a VPC endpoint for S3. Assignan IAM instance profile to the EC2 instances so they can read the application artifacts from the S3bucket.

Create a security group for the application instances and allow only outbound traffic to the artifactrepository. Remove the security group rule once the install is complete.

Correct Answer: C

EC2 instances running in private subnets of a VPC can now have controlled access to S3 buckets,objects, and API functions that are in the same region as the VPC. You can use an S3 bucket policy toindicate which VPCs and which VPC Endpoints have access to your S3 buckets 1-

A. Use an AWS ServerlessApplication Model (AWS SAM) template to define the serverless application. Use AWSCodeDeploy to deploy the Lambda functions with the Canary10Percent15MinutesDeployment Preference Type. Use Amazon CloudWatch alarms to monitor the health of thefunctions.

B. Use AWS CloudFormation to publish a new stack update, and include AmazonCloudWatch alarms on all resources. Set up an AWS CodePipeline approval action for adeveloper to verify and approve the AWS CloudFormation change set.

C. Use AWSCloudFormation to publish a new version on every stack update, and include AmazonCloudWatch alarms on all resources. Use the RoutingConfig property of theAWS::Lambda::Alias resource to update the traffic routing during the stack update.

D. UseAWS CodeBuild to add sample event payloads for testing to the Lambda functions. Publisha new version of the functions, and include Amazon CloudWatch alarms. Update theproduction alias to point to the new version. Configure rollbacks to occur when an alarm isin the ALARM state.

Correct Answer: D

Check the ApproximateAgeOfOldestMessage metric for the SQS queue. Increase the Lambdafunction concurrency limit.

Check the ApproximateAgeOfOldestMessage metnc for the SQS queue Configure a redrive policyon the SQS queue.

Check the NumberOfMessagesSent metric for the SQS queue. Increase the SQS queue visibilitytimeout.

Check the WriteThrottleEvents metric for the DynamoDB table. Increase the maximum writecapacity units (WCUs) for the table's scaling policy.

Check the Throttles metric for the Lambda function. Increase the Lambda function timeout.

Correct Answer: A, D

Demo Practice Mode

Launch the instances in a public subnet with Elastic IP addresses attached. Once the application is
installed and running, run a script to disassociate the Elastic IP addresses afterwards.

Set up a NAT gateway. Deploy the EC2 instances to a private subnet. Update the private subnet's
route table to use the NAT gateway as the default route.

Publish the application artifacts to an Amazon S3 bucket and create a VPC endpoint for S3. Assign
an IAM instance profile to the EC2 instances so they can read the application artifacts from the S3
bucket.

Create a security group for the application instances and allow only outbound traffic to the artifact
repository. Remove the security group rule once the install is complete.

EC2 instances running in private subnets of a VPC can now have controlled access to S3 buckets,
objects, and API functions that are in the same region as the VPC. You can use an S3 bucket policy to
indicate which VPCs and which VPC Endpoints have access to your S3 buckets 1-

A. Use an AWS Serverless
Application Model (AWS SAM) template to define the serverless application. Use AWS
CodeDeploy to deploy the Lambda functions with the Canary10Percent15Minutes
Deployment Preference Type. Use Amazon CloudWatch alarms to monitor the health of the
functions.

B. Use AWS CloudFormation to publish a new stack update, and include Amazon
CloudWatch alarms on all resources. Set up an AWS CodePipeline approval action for a
developer to verify and approve the AWS CloudFormation change set.

C. Use AWS
CloudFormation to publish a new version on every stack update, and include Amazon
CloudWatch alarms on all resources. Use the RoutingConfig property of the
AWS::Lambda::Alias resource to update the traffic routing during the stack update.

D. Use
AWS CodeBuild to add sample event payloads for testing to the Lambda functions. Publish
a new version of the functions, and include Amazon CloudWatch alarms. Update the
production alias to point to the new version. Configure rollbacks to occur when an alarm is
in the ALARM state.

Check the ApproximateAgeOfOldestMessage metric for the SQS queue. Increase the Lambda
function concurrency limit.

Check the ApproximateAgeOfOldestMessage metnc for the SQS queue Configure a redrive policy
on the SQS queue.

Check the NumberOfMessagesSent metric for the SQS queue. Increase the SQS queue visibility
timeout.

Check the WriteThrottleEvents metric for the DynamoDB table. Increase the maximum write
capacity units (WCUs) for the table's scaling policy.