DOP-C02 AWS Certified DevOps Engineer – Professional Free Practice Questions and Answers

A build pipeline needs temporary AWS access to publish an image to Amazon ECR. The organization wants to avoid long-lived access keys in the build system. Which approach should the team use?

• A. Use the build service’s IAM role with only the required ECR permissions
• B. Store an administrator access key in the source repository
• C. Reuse a developer’s personal access key for every build
• D. Grant public write access to the ECR repository

A fleet of Linux instances must receive the same approved configuration. The operations team wants to track configuration changes centrally and avoid manually connecting to each host. Which AWS service is a good fit?

• A. AWS Systems Manager State Manager associations
• B. Amazon Route 53 health checks
• C. Amazon CloudFront invalidations
• D. Amazon SQS visibility timeouts

A security team needs an automated response when a CloudWatch alarm detects repeated authentication failures. The response should run a small remediation function without maintaining servers. What should they configure?

• A. Route the alarm state change to an AWS Lambda function through an event rule
• B. Poll the alarm manually from an administrator laptop
• C. Increase the log retention period and take no action
• D. Schedule a daily EC2 instance to inspect alarm history

A team must release a new version to a small portion of users first, observe service health, and then increase exposure gradually. Which strategy best supports this?

• A. Canary deployment with monitored traffic steps
• B. Replace all production instances at once without health checks
• C. Deploy only to a developer workstation
• D. Disable load balancer health checks during release

A workload must recover quickly after a regional outage. The business can accept some data replication delay but wants a ready-to-scale environment in a second region. Which recovery pattern is most appropriate?

• A. Warm standby with replicated data and a scaled-down running stack
• B. Backup and restore using only monthly offline copies
• C. Keep a second region empty and begin all provisioning after the outage
• D. Run both regions without data replication or health monitoring