The AWS Certified DevOps Engineer – Professional (DOP-C02) exam validates your skills in automating the testing and deployment of AWS applications. It is ideal for those looking to advance their DevOps career.
A company needs to grant access to an application without sharing normal user credentials. Which approach should they take?
AIAM Roles for applications
BStatic IAM User Credentials
CUser Groups for applications
DS3 Bucket Policies
Explanation
IAM Roles allow for temporary credentials without exposing user details; the others involve exposing credentials or handling more permissions than necessary.
Q402
What happens when an EC2 instance exceeds its allocated EBS volume size?
AInstance shuts down automatically
BRead/write operations fail
CVolume automatically resizes
DData is deleted automatically
Explanation
EBS volumes cannot automatically resize, and exceeding the size results in failed operations; other options present incorrect processes related to normal instance behavior.
Q403
Which AWS service is best for real-time log processing?
AAmazon CloudWatch Logs
BAWS Lambda
CAmazon Kinesis
DAWS Step Functions
Explanation
Amazon Kinesis is designed for real-time data streams, making it ideal for log processing, unlike the others.
Q404
A company needs to ensure their S3 bucket is not publicly accessible. What should they do?
AEnable versioning on the bucket.
BSet up a bucket policy.
CDisable logging for the bucket.
DUse MFA Delete feature.
Explanation
Setting a bucket policy is the method to enforce access control and deny public access, unlike other options.
Q405
What happens when an EC2 instance is terminated?
AAll data on EBS volumes is lost.
BPublic IP address remains assigned.
CInstance store volumes data is lost.
DRoot volume is retained permanently.
Explanation
Data on instance store volumes is ephemeral and lost upon termination, while EBS data can be kept.
Q406
Which AWS service automates code deployment across multiple environments?