CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Amazon
  5. AWS Certified DevOps Engineer - Professional DOP-C02

Free AWS Certified DevOps Engineer - Professional DOP-C02 Exam Braindumps (page: 19)

Page 19 of 72
PDF with 281 Questions

A company has an application that runs on Amazon EC2 instances that are in an Auto Scaling group. When the application starts up.the application needs to process data from an Amazon S3 bucket before the application can start to serve requests.

The size of the data that is stored in the S3 bucket is growing. When the Auto Scaling group adds new instances, the application now takes several minutes to download and process the data before the application can serve requests. The company must reduce the time that elapses before new EC2 instances are ready to serve requests.

Which solution is the MOST cost-effective way to reduce the application startup time?

  1. Configure a warm pool for the Auto Scaling group with warmed EC2 instances in the Stopped state. Configure an autoscaling:EC2_INSTANCE_LAUNCHING lifecycle hook on the Auto Scaling group. Modify the application to complete the lifecycle hook when the application is ready to serve requests.
  2. Increase the maximum instance count of the Auto Scaling group. Configure an autoscaling:EC2_INSTANCE_LAUNCHING lifecycle hook on the Auto Scaling group. Modify the application to complete the lifecycle hook when the application is ready to serve requests.
  3. Configure a warm pool for the Auto Scaling group with warmed EC2 instances in the Running state. Configure an autoscaling:EC2_INSTANCE_LAUNCHING lifecycle hook on the Auto Scaling group. Modify the application to complete the lifecycle hook when the application is ready to serve requests.
  4. Increase the maximum instance count of the Auto Scaling group. Configure an autoscaling:EC2_INSTANCE_LAUNCHING lifecycle hook on the Auto Scaling group. Modify the application to complete the lifecycle hook and to place the new instance in the Standby state when the application is ready to serve requests.

Answer(s): A



A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts.

The buildspec.yml file contains the following:



The DevOps Engineer has noticed that anybody with an AWS account is able to download the artifacts. What steps should the DevOps Engineer take to stop this?

  1. Modify the post_build to command to use –-acl public-read and configure a bucket policy that grants read access to the relevant AWS accounts only.
  2. Configure a default ACL for the S3 bucket that defines the set of authenticated users as the relevant AWS accounts only and grants read-only access.
  3. Create an S3 bucket policy that grants read access to the relevant AWS accounts and denies read access to the principal “*”
  4. Modify the post_build command to remove –-acl authenticated-read and configure a bucket policy that allows read access to the relevant AWS accounts only.

Answer(s): D



A company has developed a serverless web application that is hosted on AWS. The application consists of Amazon S3. Amazon API Gateway, several AWS Lambda functions, and an Amazon RDS for MySQL database. The company is using AWS CodeCommit to store the source code. The source code is a combination of AWS Serverless Application Model (AWS SAM) templates and Python code.

A security audit and penetration test reveal that user names and passwords for authentication to the database are hardcoded within CodeCommit repositories. A DevOps engineer must implement a solution to automatically detect and prevent hardcoded secrets.

What is the MOST secure solution that meets these requirements?

  1. Enable Amazon CodeGuru Profiler. Decorate the handler function with @with_lambda_profiler(). Manually review the recommendation report. Write the secret to AWS Systems Manager Parameter Store as a secure string. Update the SAM templates and the Python code to pull the secret from Parameter Store.
  2. Associate the CodeCommit repository with Amazon CodeGuru Reviewer. Manually check the code review for any recommendations. Choose the option to protect the secret. Update the SAM templates and the Python code to pull the secret from AWS Secrets Manager.
  3. Enable Amazon CodeGuru Profiler. Decorate the handler function with @with lambda profiler(). Manually review the recommendation report. Choose the option to protect the secret. Update the SAM templates and the Python code to pull the secret from AWS Secrets Manager.
  4. Associate the CodeCommit repository with Amazon CodeGuru Reviewer. Manually check the code review for any recommendations. Write the secret to AWS Systems Manager Parameter Store as a string. Update the SAM templates and the Python code to pull the secret from Parameter Store.

Answer(s): B



A company is using Amazon S3 buckets to store important documents. The company discovers that some S3 buckets are not encrypted. Currently, the company’s IAM users can create new S3 buckets without encryption. The company is implementing a new requirement that all S3 buckets must be encrypted.

A DevOps engineer must implement a solution to ensure that server-side encryption is enabled on all existing S3 buckets and all new S3 buckets. The encryption must be enabled on new S3 buckets as soon as the S3 buckets are created. The default encryption type must be 256-bit Advanced Encryption Standard (AES-256).

Which solution will meet these requirements?

  1. Create an AWS Lambda function that is invoked periodically by an Amazon EventBridge scheduled rule. Program the Lambda function to scan all current S3 buckets for encryption status and to set AES-256 as the default encryption for any S3 bucket that does not have an encryption configuration.
  2. Set up and activate the s3-bucket-server-side-encryption-enabled AWS Config managed rule. Configure the rule to use the AWS-EnableS3BucketEncryption AWS Systems Manager Automation runbook as the remediation action. Manually run the re-evaluation process to ensure that existing S3 buckets are compliant.
  3. Create an AWS Lambda function that is invoked by an Amazon EventBridge event rule. Define the rule with an event pattern that matches the creation of new S3 buckets. Program the Lambda function to parse the EventBridge event, check the configuration of the S3 buckets from the event, and set AES-256 as the default encryption.
  4. Configure an IAM policy that denies the s3:CreateBucket action if the s3:x-amz-server-side-encryption condition key has a value that is not AES-256. Create an IAM group for all the company’s IAM users. Associate the IAM policy with the IAM group.

Answer(s): B



Page 19 of 72



Post your Comments and Discuss Amazon AWS Certified DevOps Engineer - Professional DOP-C02 exam with other Community members:

salma commented on October 14, 2024
i need the pdf pls someone help me !
Anonymous
upvote

Gunnyk commented on October 14, 2024
@Nmap_Lord22- How was the PBQ'S?
UNITED STATES
upvote

Gunnyk commented on October 14, 2024
Anyone pass the exam recently?
UNITED STATES
upvote

Saurabh commented on October 14, 2024
Good content
EUROPEAN UNION
upvote

leta commented on October 14, 2024
good learning
Anonymous
upvote

Likissa commented on October 14, 2024
Good Questions that makes me get prepared for the Actual PMP EXAM
Anonymous
upvote

Supreet commented on October 13, 2024
Hello manpreet, did all question came from dumps in exams
CANADA
upvote

Jay commented on October 13, 2024
Very helpful for certs
Anonymous
upvote

Asadullah commented on October 13, 2024
Good question but repeated of other sites!
UNITED STATES
upvote

Mish commented on October 13, 2024
Are those questions relative?
Anonymous
upvote

vaibgav commented on October 13, 2024
nice paper for practise
Anonymous
upvote

Essam Zahra commented on October 13, 2024
Thank you, it is very useful
EGYPT
upvote

Dennis Rono commented on October 13, 2024
The questions in here are fantastic, it would be nice to have some explanation on the choices of the right answer.
Anonymous
upvote

Dennis Rono commented on October 13, 2024
Awesome practice question
Anonymous
upvote

ileana commented on October 12, 2024
I can not access in this moc, is it available in other url?
Anonymous
upvote

edward commented on October 12, 2024
Passed with flying colors. Amazing material... came word by word.
Anonymous
upvote

Calisto MF Moniz commented on October 12, 2024
No comment for this form for the time being.
Anonymous
upvote

Calisto MF Moniz commented on October 12, 2024
Good mechanism for Security expertise practices!
Anonymous
upvote

Meraj commented on October 12, 2024
The exam is super duper hard. You use these exam dumps to only pass. If you don't have the questions it is not easy to pass.
INDIA
upvote

Lucas commented on October 12, 2024
Its so good.
Anonymous
upvote

Iwada commented on October 12, 2024
The answers and questions are valid. I believe this site trusted and anyone preparing for this exam needs to go the this materials.
Anonymous
upvote

Ramesh commented on October 12, 2024
All are very Good Questios
Anonymous
upvote

Sandy commented on October 12, 2024
I found this exam dumps questions and answers very helpful despite some questions do not have the complete answers. Overall it helped me pass.
Anonymous
upvote

P commented on October 11, 2024
So glad to have found this site
CANADA
upvote

Michal commented on October 11, 2024
I hope it will worth it
POLAND
upvote

Bannor commented on October 11, 2024
This exam is valid and legit. I purchased the full version last week and managed to pass. There are 2 or 3 wrong answers which I reported to the admin and they fixed it right away.
CANADA
upvote

Marko commented on October 11, 2024
Been using this website for a while now. I am a big fun as it has helped me pass 3 exams so far. I hope they can keep the site live.
EUROPEAN UNION
upvote

Ngoni commented on October 11, 2024
Great resource
ZIMBABWE
upvote

jeffrey commented on October 11, 2024
this is great
Anonymous
upvote

Soniksha commented on October 10, 2024
I purchased the full version of this exam and it turned out quire accurate. I passed with the help of this exam.
UNITED STATES
upvote

Sadiq commented on October 10, 2024
Test questions
Anonymous
upvote

Viktor commented on October 10, 2024
Respect to the owners and operators of this site for providing this free exam site.
CANADA
upvote

Deep commented on October 10, 2024
Good questions
INDIA
upvote

Goben commented on October 10, 2024
Passed in one shot.
GERMANY
upvote