support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Amazon
  4. AWS DevOps Engineer Professional

Free AWS DevOps Engineer Professional Exam Braindumps
AWS DevOps Engineer - Professional (DOP-C02) Questions 96–100 (page: 21)

Updated On: 10-Feb-2026
Page 21 of 43
PDF with 429 Questions

A security review has identi ed that an AWS CodeBuild project is downloading a database population script from an Amazon S3 bucket using an unauthenticated request. The security team does not allow unauthenticated requests to S3 buckets for this project.

How can this issue be corrected in the MOST secure manner?

  1. Add the bucket name to the AllowedBuckets section of the CodeBuild project settings. Update the build spec to use the AWS CLI to download the database population script.
  2. Modify the S3 bucket settings to enable HTTPS basic authentication and specify a token. Update the build spec to use cURL to pass the token and download the database population script.
  3. Remove unauthenticated access from the S3 bucket with a bucket policy. Modify the service role for the CodeBuild project to include Amazon S3 access. Use the AWS CLI to download the database population script.
  4. Remove unauthenticated access from the S3 bucket with a bucket policy. Use the AWS CLI to download the database population script using an IAM access key and a secret access key.

Answer(s): C



A company has multiple development groups working in a single shared AWS account. The senior manager of the groups wants to be alerted via a third-party API call when the creation of resources approaches the service limits for the account.

Which solution will accomplish this with the LEAST amount of development effort?

  1. Create an Amazon CloudWatch Event rule that runs periodically and targets an AWS Lambda function. Within the Lambda function, evaluate the current state of the AWS environment and compare deployed resource values to resource limits on the account. Notify the senior manager if the account is approaching a service limit.
  2. Deploy an AWS Lambda function that refreshes AWS Trusted Advisor checks, and con gure an Amazon CloudWatch Events rule to run the Lambda function periodically. Create another CloudWatch Events rule with an event pattern matching Trusted Advisor events and a target Lambda function. In the target Lambda function, notify the senior manager.
  3. Deploy an AWS Lambda function that refreshes AWS Personal Health Dashboard checks, and con gure an Amazon CloudWatch Events rule to run the Lambda function periodically. Create another CloudWatch Events rule with an event pattern matching Personal Health Dashboard events and a target Lambda function. In the target Lambda function, notify the senior manager.
  4. Add an AWS Con g custom rule that runs periodically, checks the AWS service limit status, and streams noti cations to an Amazon SNS topic. Deploy an AWS Lambda function that noti es the senior manager, and subscribe the Lambda function to the SNS topic.

Answer(s): B



A DevOps engineer is architecting a continuous development strategy for a company's software as a service (SaaS) web application running on AWS. For application and security reasons, users subscribing to this application are distributed across multiple Application Load Balancers (ALBs), each of which has a dedicated Auto Scaling group and eet of Amazon EC2 instances. The application does not require a build stage, and when it is committed to AWS CodeCommit, the application must trigger a simultaneous deployment to all ALBs, Auto Scaling groups, and EC2 eets.

Which architecture will meet these requirements with the LEAST amount of con guration?

  1. Create a single AWS CodePipeline pipeline that deploys the application in parallel using unique AWS CodeDeploy applications and deployment groups created for each ALB-Auto Scaling group pair.
  2. Create a single AWS CodePipeline pipeline that deploys the application using a single AWS CodeDeploy application and single deployment group.
  3. Create a single AWS CodePipeline pipeline that deploys the application in parallel using a single AWS CodeDeploy application and unique deployment group for each ALB-Auto Scaling group pair.
  4. Create an AWS CodePipeline pipeline for each ALB-Auto Scaling group pair that deploys the application using an AWS CodeDeploy application and deployment group created for the same ALB-Auto Scaling group pair.

Answer(s): C



A company's primary AWS Region contains the following infrastructure:

· An Amazon S3 bucket that contains an object package that is used in instance user data to con gure an application. · Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) with an instance pro le that grants s3:Get* access on the S3 bucket.

The company has the following infrastructure in a backup Region:

· An S3 bucket with the same con guration as the S3 bucket in the primary AWS Region, but without any objects. · EC2 instances in an Auto Scaling group behind an ALB that run with the same con guration as in the primary AWS Region.

To simulate a disaster recovery scenario, the company turns off all access to Amazon S3 and sets the Auto Scaling group's minimum, maximum, and desired instances to 0 in the primary Region. When the instances in the backup Region scale out, they do not pass Amazon Route 53 health checks.

Which combination of steps should the company take to resolve this issue? (Choose three.)

  1. Update the Amazon EC2 Auto Scaling service-linked role to allow access to both S3 buckets.
  2. Set up S3 Cross-Region Replication from the S3 bucket in the primary Region to the S3 bucket in the backup Region.
  3. Update the instance user data to reference the S3 bucket in the primary Region.
  4. Increase the timeout for the target group health check.
  5. Update the EC2 instance pro le to allow s3:list* actions.
  6. Update the EC2 instance pro le to allow read access to both S3 buckets.

Answer(s): B,D,F



A company is developing a web application's infrastructure using AWS CloudFormation. The database engineering team maintains the database resources in a CloudFormation template, and the software development team maintains the web application resources in a separate CloudFormation template. As the scope of the application grows, the software development team needs to use resources maintained by the database engineering team. However, both teams have their own review and lifecycle management processes that they want to keep. Both teams also require resource-level change-set reviews. The software development team would like to deploy changes to this template using their CI/CD pipeline.

Which solution will meet these requirements?

  1. Create a stack export from the database CloudFormation template and import those references into the web application CloudFormation template.
  2. Create a CloudFormation nested stack to make cross-stack resource references and parameters available in both stacks.
  3. Create a CloudFormation stack set to make cross-stack resource references and parameters available in both stacks.
  4. Create input parameters in the web application CloudFormation template and pass resource names and IDs from the database stack.

Answer(s): A



  PDF
Viewing page 21 of 43
Viewing questions 101 - 105 out of 429 questions


Post your Comments and Discuss Amazon AWS DevOps Engineer Professional exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!