Amazon AWS
AWS Certified DevOps Engineer – Professional
DOP-C02
The AWS Certified DevOps Engineer – Professional (DOP-C02) exam validates your skills in automating the testing and deployment of AWS applications. It is ideal for those looking to advance their DevOps career.
Questions 111–120 of 483
What happens when an IAM policy is attached to a user?
A
User permissions are revoked.
B
User gains permission from the policy.
C
User's existing permissions are unchanged.
D
User is prompted for MFA.
Attaching an IAM policy grants the user permissions, while the other options describe incorrect behaviors.
Which AWS service automatically adjusts resource capacity?
A
AWS Auto Scaling
B
AWS CloudFormation
C
AWS CodeDeploy
D
AWS Elastic Beanstalk
AWS Auto Scaling adjusts resource capacity based on demand; others do not.
A company needs to securely manage AWS IAM users. Which service should they use?
A
AWS Organizations
B
AWS Secrets Manager
C
AWS IAM Roles
D
AWS Identity Store
AWS Organizations help manage user accounts securely; others don't manage IAM users effectively.
What happens when a Lambda function hits a timeout?
A
Function retries execution
B
Function execution is silently ignored
C
Lambda stops immediately without logs
D
Existing resources are rolled back
Lambda ignores further execution if timeout occurs; others inaccurately describe Lambda behavior.
Which service allows you to automate infrastructure provisioning?
A
AWS CloudFormation
B
AWS Lambda
C
AWS EC2
D
Amazon RDS
AWS CloudFormation automates infrastructure, while others are specific resources.
A company needs to manage multiple AWS accounts for billing; which service should they use?
A
AWS Organizations
B
AWS IAM
C
AWS CloudTrail
D
Amazon CloudWatch
AWS Organizations consolidates billing across accounts, while others manage different aspects.
What happens when an EC2 instance is stopped but not terminated?
A
Data is lost on EBS volume
B
Instance will lose its IP
C
Instance is still billed
D
Data on EBS persists
Data on EBS persists if the instance is stopped; others show misunderstanding of EC2 state.
Which service allows the management of infrastructure as code?
A
AWS CloudFormation
B
Amazon EC2
C
AWS Lightsail
D
Amazon RDS
AWS CloudFormation is designed for infrastructure as code, while the others serve different purposes.
A company needs to monitor the performance of their web application in real-time. Which tool should they implement?
A
AWS CodeDeploy
B
Amazon CloudWatch
C
AWS CodeBuild
D
Amazon Inspector
Amazon CloudWatch provides comprehensive monitoring, whereas the others focus on deployment or security.
You are configuring an IAM policy to allow S3 bucket access. What happens if you set a 'Deny' statement?
A
Access granted for all users.
B
Access denied even if allowed.
C
Access granted only for specific roles.
D
No effect on permissions.
A 'Deny' statement always takes precedence over 'Allow' statements in IAM.