Amazon AWS
AWS Certified DevOps Engineer – Professional
DOP-C02
The AWS Certified DevOps Engineer – Professional (DOP-C02) exam validates your skills in automating the testing and deployment of AWS applications. It is ideal for those looking to advance their DevOps career.
Questions 61–70 of 483
Which service is best for event-driven applications?
A
AWS Lambda
B
EC2 Instances
C
RDS Databases
D
S3 Storage
AWS Lambda allows executing code in response to events, unlike the others which are more traditional services.
A company needs to ensure continuous deployment for a microservices architecture. Which AWS service should they utilize?
A
AWS CodeBuild
B
AWS ECS
C
AWS CodeDeploy
D
AWS S3
AWS CodeDeploy automates deployments, essential for microservices continuously.
What happens when a resizing alarm on an EC2 Auto Scaling group triggers?
A
Scaling up occurs immediately
B
The alarm becomes inactive
C
Instances stop immediately
D
No impact on the EC2 instances
The alarm triggers scaling actions, initiating additional instances as configured, not the other outcomes.
Which service provides automated scaling and load balancing?
A
Amazon EC2 Auto Scaling
B
AWS CloudFormation
C
Amazon S3
D
AWS Lambda
Amazon EC2 Auto Scaling directly manages scalability, unlike the others.
A company needs to securely share data across multiple AWS accounts. Which service should they use?
A
AWS Cognito
B
Amazon RDS
C
AWS Resource Access Manager
D
AWS IAM
AWS Resource Access Manager facilitates secure resource sharing between accounts.
What happens when an S3 bucket policy denies access to an IAM role?
A
Access is granted if allowed elsewhere
B
Access is denied regardless of other policies
C
User can still write to the bucket
D
Only public access is affected
Deny rules in policies always take precedence over allow rules.
Which service allows you to deploy applications using infrastructure as code?
A
AWS CloudFormation
B
AWS Sandbox
C
AWS Configuration
D
AWS CodeDeploy
AWS CloudFormation enables infrastructure as code for deployments, while the others serve different purposes.
A company needs to monitor the health of their AWS services. Which tool should they use?
A
AWS CodeCommit
B
AWS CloudTrail
C
Amazon CloudWatch
D
AWS X-Ray
Amazon CloudWatch provides metrics and logs for monitoring services, unlike the others that focus on different aspects.
You are configuring an IAM policy restricting access to specific S3 buckets. What happens if the policy is incorrectly defined?
A
Access will be granted to all buckets
B
Access may be denied unintentionally
C
IAM policy changes are not effective
D
Only admin access will be granted
Incorrect IAM policies can unintentionally deny access, while the other options misrepresent IAM behavior.
Which AWS service helps in deploying applications automatically?
A
Amazon EC2
B
AWS CodeDeploy
C
AWS S3
D
Amazon RDS
AWS CodeDeploy automates application deployments while EC2 is primarily for compute.