support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Amazon
  4. AWS DevOps Engineer Professional

Free AWS DevOps Engineer Professional Exam Braindumps
AWS DevOps Engineer - Professional (DOP-C02) Questions 61–65 (page: 14)

Updated On: 10-Feb-2026
Page 14 of 43
PDF with 429 Questions

A company wants to use AWS development tools to replace its current bash deployment scripts. The company currently deploys a LAMP application to a group of
Amazon EC2 instances behind an Application Load Balancer (ALB). During the deployments, the company unit tests the committed application, stops and starts services, unregisters and re-registers instances with the load balancer, and updates le permissions. The company wants to maintain the same deployment functionality through the shift to using AWS services.
Which solution will meet these requirements?

  1. Use AWS CodeBuild to test the application. Use bash scripts invoked by AWS CodeDeploy's appspec.yml le to restart services, and deregister and register instances with the ALB. Use the appspec.yml le to update le permissions without a custom script.
  2. Use AWS CodePipeline to move the application from the AWS CodeCommit repository to AWS CodeDeploy. Use CodeDeploy's deployment group to test the application, unregister and re-register instances with the ALB, and restart services. Use the appspec.yml le to update the permissions without a custom script.
  3. Use AWS CodePipeline to move the application source code from the AWS CodeCommit repository to AWS CodeDeploy. Use CodeDeploy to test the application. Use CodeDeploy's appspec.yml le to restart services and update permissions without a custom script. Use AWS CodeBuild to unregister and re- register instances with the ALB.
  4. Use AWS CodePipeline to trigger AWS CodeBuild to test the application. Use bash scripts invoked by AWS CodeDeploy's appspec.yml le to restart services. Unregister and re-register the instances in the AWS CodeDeploy deployment group with the ALB. Update the appspec.yml le to update le permissions without a custom script.

Answer(s): D



A company gives its employees limited rights to AWS. DevOps engineers have the ability to assume an administrator role. For tracking purposes, the security team wants to receive a near-real-time noti cation when the administrator role is assumed.
How should this be accomplished?

  1. Con gure AWS Con g to publish logs to an Amazon S3 bucket. Use Amazon Athena to query the logs and send a noti cation to the security team when the administrator role is assumed.
  2. Con gure Amazon GuardDuty to monitor when the administrator role is assumed and send a noti cation to the security team.
  3. Create an Amazon EventBridge (Amazon CloudWatch Events) event rule using an AWS Management Console sign-in events event pattern that publishes a message to an Amazon SNS topic if the administrator role is assumed.
  4. Create an Amazon EventBridge (Amazon CloudWatch Events) events rule using an AWS API call that uses an AWS CloudTrail event pattern to trigger an AWS Lambda function that publishes a message to an Amazon SNS topic if the administrator role is assumed.

Answer(s): D


Reference:

https://docs.aws.amazon.com/eventbridge/latest/userguide/user-guide.pdf



An ecommerce company uses a large number of Amazon EBS backed Amazon EC2 instances. To decrease manual work across all the instances, a DevOps
Engineer is tasked with automating restart actions when EC2 instance retirement events are scheduled.
How can this be accomplished?

  1. Create a scheduled Amazon CloudWatch Events rule to execute an AWS Systems Manager automation document that checks if any EC2 instances are scheduled for retirement once a week. If the instance is scheduled for retirement, the automation document will hibernate the instance.
  2. Enable EC2 Auto Recovery on all of the instances. Create an AWS Con g rule to limit the recovery to occur during a maintenance window only.
  3. Reboot all EC2 instances during an approved maintenance window that is outside of standard business hours. Set up Amazon CloudWatch alarms to send a noti cation in case any instance is failing EC2 instance status checks.
  4. Set up an AWS Health Amazon CloudWatch Events rule to execute AWS Systems Manager automation documents that stop and start the EC2 instance when a retirement scheduled event occurs.

Answer(s): D


Reference:

https://aws.amazon.com/blogs/mt/automate-remediation-actions-for-amazon-ec2-noti cations-and-beyond-using-ec2-systems-manager- automation- and-aws-health/



A company that runs many workloads on AWS has an Amazon EBS spend that has increased over time. The DevOps team notices there are many unattached
EBS volumes. Although there are workloads where volumes are detached, volumes over 14 days old are stale and no longer needed. A DevOps engineer has been tasked with creating automation that deletes unattached EBS volumes that have been unattached for 14 days.
Which solution will accomplish this?

  1. Con gure the AWS Con g ec2-volume-inuse-check managed rule with a con guration changes trigger type and an Amazon EC2 volume resource target. Create a new Amazon CloudWatch Events rule scheduled to execute an AWS Lambda function in 14 days to delete the speci ed EBS volume.
  2. Use Amazon EC2 and Amazon Data Lifecycle Manager to con gure a volume lifecycle policy. Set the interval period for unattached EBS volumes to 14 days and set the retention rule to delete. Set the policy target volumes as *.
  3. Create an Amazon CloudWatch Events rule to execute an AWS Lambda function daily. The Lambda function should nd unattached EBS volumes and tag them with the current date, and delete unattached volumes that have tags with dates that are more than 14 days old.
  4. Use AWS Trusted Advisor to detect EBS volumes that have been detached for more than 14 days. Execute an AWS Lambda function that creates a snapshot and then deletes the EBS volume.

Answer(s): C



A company has multiple child accounts that are part of an organization in AWS Organizations. The security team needs to review every Amazon EC2 security group and their inbound and outbound rules. The security team wants to programmatically retrieve this information from the child accounts using an AWS Lambda function in the management account of the organization. Which combination of access changes will meet these requirements? (Choose three.)

  1. Create a trust relationship that allows users in the child accounts to assume the management account IAM role.
  2. Create a trust relationship that allows users in the management account to assume the IAM roles of the child accounts.
  3. Create an IAM role in each child account that has access to the AmazonEC2ReadOnlyAccess managed policy.
  4. Create an IAM role in each child account to allow the sts:AssumeRole action against the management account IAM role's ARN.
  5. Create an IAM role in the management account that allows the sts:AssumeRole action against the child account IAM role's ARN.
  6. Create an IAM role in the management account that has access to the AmazonEC2ReadOnlyAccess managed policy.

Answer(s): B,C,E

Explanation:


Reference:

https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html



  PDF
Viewing page 14 of 43
Viewing questions 66 - 70 out of 429 questions


Post your Comments and Discuss Amazon AWS DevOps Engineer Professional exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!