The AWS Certified DevOps Engineer – Professional (DOP-C02) exam validates your skills in automating the testing and deployment of AWS applications. It is ideal for those looking to advance their DevOps career.
You are configuring an AWS CodePipeline for CI/CD. If an action fails, what happens to the entire pipeline execution?
APipeline execution continues to next action
BPipeline fails but can be resumed
CPipeline execution stops
DPartial changes are rolled back
Explanation
If an action in AWS CodePipeline fails, the pipeline execution stops, unlike option A.
Q192
What happens to an Amazon EC2 instance when it reaches the specified CloudWatch Alarm state for CPU utilization?
AEC2 instance is automatically terminated
BAlarm triggers an SNS notification
CEC2 instance scales down automatically
DLogs are collected automatically
Explanation
When an EC2 instance triggers a CloudWatch Alarm, an SNS notification can be triggered, not automatic termination or scaling.
Q193
Which service automatically scales databases based on demand?
AAmazon RDS
BAWS Lambda
CAmazon DynamoDB
DAmazon S3
Explanation
Amazon DynamoDB scales automatically for demand; RDS requires manual intervention and Lambda is serverless.
Q194
A company needs to securely share resources between AWS accounts without manual permission management. What is the best solution?
AAWS CloudFormation
BAWS Resource Access Manager
CAWS Organizations
DAmazon EC2
Explanation
AWS Resource Access Manager efficiently shares resources; CloudFormation is for infrastructure as code, Organizations for account management, and EC2 is a compute service.
Q195
What happens when you set a CloudFront distribution to 'Restrict Viewer Access'?
AAccess is allowed to everyone.
BAccess is denied unless authorized.
CAccess becomes public.
DCloudFront automatically clones content.
Explanation
Restricting viewer access requires authentication for content access; options A and C are incorrect as they imply unrestricted access, and D is unrelated.
Q196
Which service is best for real-time streaming data?
AAmazon Kinesis
BAmazon RDS
CAmazon S3
DAmazon EC2
Explanation
Amazon Kinesis is designed for real-time data streams, while the others serve different data storage and processing tasks.
Q197
A company needs to deploy infrastructure using code and automate operational tasks. Which AWS service should they primarily use?
AAWS CloudFormation
BAWS Lambda
CAmazon CloudWatch
DAWS CodeDeploy
Explanation
AWS CloudFormation enables infrastructure as code, automating deployment, while others serve different functions such as monitoring or code deployment.
Q198
You are configuring IAM policies for an application. What happens if both allow and deny policies are applied to a user?
AAllow policies take precedence
BDeny policies take precedence
CBoth policies cancel each other out
DUser inherits permissions based on roles
Explanation
Deny policies always take precedence over allow policies in IAM, regardless of policy structure or permissions.
Q199
Which service allows you to automate infrastructure provisioning?
AAWS CloudFormation
BAmazon S3
CAWS IAM
DAmazon RDS
Explanation
AWS CloudFormation automates infrastructure provisioning, unlike the others.
Q200
A company needs to extend its VPC across multiple accounts. Which service should they use?
AAWS Direct Connect
BAWS Transit Gateway
CAmazon Route 53
DAmazon CloudFront
Explanation
AWS Transit Gateway simplifies VPC interconnections across accounts.