Online Access Free Amazon.DOP-C02.v2024-01-26.q82 Practice Test (Page 5)

DOP-C02 Exam Question 16

A company has an organization in AWS Organizations. The organization includes workload accounts that contain enterprise applications. The company centrally manages users from an operations account. No users can be created in the workload accounts. The company recently added an operations team and must provide the operations team members with administrator access to each workload account.
Which combination of actions will provide this access? (Choose three.)

A.Create a SysAdmin role in the operations account. Attach the AdministratorAccess policy to the role.
Modify the trust relationship to allow the sts:AssumeRole action from the workload accounts.

B.Create a SysAdmin role in each workload account. Attach the AdministratorAccess policy to the role.
Modify the trust relationship to allow the sts:AssumeRole action from the operations account.

C.Create an Amazon Cognito identity pool in the operations account. Attach the SysAdmin role as an authenticated role.

D.In the operations account, create an IAM user for each operations team member.

E.In the operations account, create an IAM user group that is named SysAdmins. Add an IAM policy that allows the sts:AssumeRole action for the SysAdmin role in each workload account. Add all operations team members to the group.

F.Create an Amazon Cognito user pool in the operations account. Create an Amazon Cognito user for each operations team member.

DOP-C02 Exam Question 17

A company is using an Amazon Aurora cluster as the data store for its application. The Aurora cluster is configured with a single DB instance. The application performs read and write operations on the database by using the cluster's instance endpoint.
The company has scheduled an update to be applied to the cluster during an upcoming maintenance window.
The cluster must remain available with the least possible interruption during the maintenance window.
What should a DevOps engineer do to meet these requirements?

A.Add a reader instance to the Aurora cluster. Update the application to use the Aurora cluster endpoint for write operations. Update the Aurora cluster's reader endpoint for reads.

B.Add a reader instance to the Aurora cluster. Create a custom ANY endpoint for the cluster. Update the application to use the Aurora cluster's custom ANY endpoint for read and write operations.

C.Turn on the Multi-AZ option on the Aurora cluster. Update the application to use the Aurora cluster endpoint for write operations. Update the Aurora cluster's reader endpoint for reads.

D.Turn on the Multi-AZ option on the Aurora cluster. Create a custom ANY endpoint for the cluster.Update the application to use the Aurora cluster's custom ANY endpoint for read and write operations.

DOP-C02 Exam Question 18

A company uses AWS CloudFormation stacks to deploy updates to its application. The stacks consist of different resources. The resources include AWS Auto Scaling groups, Amazon EC2 instances, Application Load Balancers (ALBs), and other resources that are necessary to launch and maintain independent stacks.
Changes to application resources outside of CloudFormation stack updates are not allowed.
The company recently attempted to update the application stack by using the AWS CLI. The stack failed to update and produced the following error message: "ERROR: both the deployment and the CloudFormation stack rollback failed. The deployment failed because the following resource(s) failed to update:
[AutoScalingGroup]."
The stack remains in a status of UPDATE_ROLLBACK_FAILED. *
Which solution will resolve this issue?

A.Update the subnet mappings that are configured for the ALBs. Run the aws cloudformation update-stack-set AWS CLI command.

B.Update the 1AM role by providing the necessary permissions to update the stack. Run the aws cloudformation continue-update-rollback AWS CLI command.

C.Submit a request for a quota increase for the number of EC2 instances for the account. Run the aws cloudformation cancel-update-stack AWS CLI command.

D.Delete the Auto Scaling group resource. Run the aws cloudformation rollback-stack AWS CLI command.

DOP-C02 Exam Question 19

A business has an application that consists of five independent AWS Lambda functions.
The DevOps engineer has built a CI/CD pipeline using AWS CodePipeline and AWS CodeBuild that builds tests packages and deploys each Lambda function in sequence. The pipeline uses an Amazon EventBridge rule to ensure the pipeline starts as quickly as possible after a change is made to the application source code.
After working with the pipeline for a few months the DevOps engineer has noticed the pipeline takes too long to complete.
What should the DevOps engineer implement to BEST improve the speed of the pipeline?

A.Modify the CodeBuild projects within the pipeline to use a compute type with more available network throughput.

B.Create a custom CodeBuild execution environment that includes a symmetric multiprocessing configuration to run the builds in parallel.

C.Modify the CodePipeline configuration to run actions for each Lambda function in parallel by specifying the same runorder.

D.Modify each CodeBuild protect to run within a VPC and use dedicated instances to increase throughput.

DOP-C02 Exam Question 20

A production account has a requirement that any Amazon EC2 instance that has been logged in to manually must be terminated within 24 hours. All applications in the production account are using Auto Scaling groups with the Amazon CloudWatch Logs agent configured.
How can this process be automated?

A.Create a CloudWatch Logs subscription to an AWS Step Functions application. Configure an AWS Lambda function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned. Create an Amazon EventBridge rule to invoke a second Lambda function once a day that will terminate all instances with this tag.

B.Create an Amazon CloudWatch alarm that will be invoked by the login event. Send the notification to an Amazon Simple Notification Service (Amazon SNS) topic that the operations team is subscribed to, and have them terminate the EC2 instance within 24 hours.

C.Create an Amazon CloudWatch alarm that will be invoked by the login event. Configure the alarm to send to an Amazon Simple Queue Service (Amazon SQS) queue. Use a group of worker instances to process messages from the queue, which then schedules an Amazon EventBridge rule to be invoked.

D.Create a CloudWatch Logs subscription to an AWS Lambda function. Configure the function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned.Create an Amazon EventBridge rule to invoke a daily Lambda function that terminates all instances with this tag.

Other Version: 198Amazon.DOP-C02.v2026-07-25.q201; 638Amazon.DOP-C02.v2026-03-12.q166; 1287Amazon.DOP-C02.v2025-11-21.q140; 2216Amazon.DOP-C02.v2024-12-30.q117; 1672Amazon.DOP-C02.v2024-09-14.q103; 1245Amazon.DOP-C02.v2023-11-18.q59; 1189Amazon.DOP-C02.v2023-11-08.q77; 854Amazon.DOP-C02.v2023-08-28.q37; 934Amazon.DOP-C02.v2023-06-26.q32

Latest Upload: 238Amazon.SAA-C03.v2026-07-25.q425; 130SAP.C_S4PM.v2026-07-25.q43; 247Google.Professional-Data-Engineer.v2026-07-25.q215; 227Microsoft.AZ-104.v2026-07-25.q227; 198Amazon.DOP-C02.v2026-07-25.q201; 154EMC.NCP-AII.v2026-07-25.q60; 170CheckPoint.156-561.v2026-07-25.q83; 231Amazon.AIF-C01.v2026-07-24.q158; 164WGU.Applied-Algebra.v2026-07-24.q46; 161Oracle.1Z0-948.v2026-07-24.q60

DOP-C02 Exam Question 16

DOP-C02 Exam Question 17

DOP-C02 Exam Question 18

DOP-C02 Exam Question 19

DOP-C02 Exam Question 20

Download PDF File