The AWS Certified DevOps Engineer – Professional (DOP-C02) exam validates your skills in automating the testing and deployment of AWS applications. It is ideal for those looking to advance their DevOps career.
What happens when you terminate an EC2 instance with an EBS volume set to 'delete on termination'?
AVolume persists after termination
BVolume is deleted during termination
CInstances are stopped instead
DData is copied to S3
Explanation
The EBS volume is deleted when the instance is terminated, as configured.
Q52
Which service is best for serverless execution of code in response to events?
AAWS Lambda
BEC2 Instances
CElastic Beanstalk
DAmazon Lightsail
Explanation
AWS Lambda allows serverless execution through triggered events, while the others require server management.
Q53
A company needs to allow developers to deploy applications but restrict their access to production environments. Which AWS service feature should they utilize?
AIAM Policies
BIAM Roles
CAWS Organizations
DResource Policies
Explanation
IAM policies can define granular permissions for users, allowing restricted access to environments.
Q54
What happens when you set the Amazon S3 bucket's public access settings to 'Block all public access'?
APublic access is fully enabled
BOnly new objects are blocked
CAll users can access publicly
DPublic access is completely blocked
Explanation
Blocking all public access prevents any unauthorized public access to the bucket and its objects.
Q55
Which AWS service provides a fully managed message broker service?
AAmazon MQ
BAmazon SQS
CAmazon SNS
DAmazon Kinesis
Explanation
Amazon MQ is designed specifically for managing message brokers, while SQS and SNS are for queuing and notifications.
Q56
A company needs to ensure their Elastic Load Balancer (ELB) correctly handles SSL termination. Which setting must be enabled?
AHTTP Listener
BBackend Authentication
CHTTPS Listener
DSticky Sessions
Explanation
An HTTPS Listener is required for SSL termination on ELBs, while HTTP only handles unencrypted traffic.
Q57
You are configuring AWS Lambda and need to control the execution permissions. Which AWS service should you use?
AAWS IAM
BAWS Cognito
CAWS CloudTrail
DAWS CloudFormation
Explanation
AWS IAM is used to manage permissions and roles that control access to Lambda functions, while the others serve different purposes.
Q58
Which AWS service allows for infrastructure as code?
AAWS CloudFormation
BAmazon S3
CAWS IAM
DAmazon RDS
Explanation
AWS CloudFormation enables infrastructure as code, while others are service-specific.
Q59
A company needs to deploy applications across multiple regions automatically. What AWS feature can best achieve this?
AAWS Lambda
BAmazon Route 53
CAWS Elastic Beanstalk
DAWS Global Accelerator
Explanation
AWS Global Accelerator improves availability and performance for applications across regions.
Q60
What happens when you set a security group rule to allow all inbound traffic?
AComplete access to your instances
BAccess limited to VPC only
COnly SSH access granted
DNo effect on outbound traffic
Explanation
Allowing all inbound traffic permits complete external access.