Online Access Free Amazon.DOP-C02.v2024-12-30.q117 Practice Test (Page 17)

DOP-C02 Exam Question 77

The security team depends on AWS CloudTrail to detect sensitive security issues in the company's AWS account. The DevOps engineer needs a solution to auto-remediate CloudTrail being turned off in an AWS account.
What solution ensures the LEAST amount of downtime for the CloudTrail log deliveries?

A.Create an Amazon EventBridge rule for the CloudTrail StopLogging event. Create an AWS Lambda (unction that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLogging was called. Add the Lambda function ARN as a target to the EventBridge rule.

B.Deploy the AWS-managed CloudTrail-enabled AWS Config rule set with a periodic interval to 1 hour. Create an Amazon EventBridge rule tor AWS Config rules compliance change. Create an AWS Lambda function that uses the AWS SDK to call StartLogging on the ARN of the resource in which StopLoggmg was called. Add the Lambda function ARN as a target to the EventBridge rule.

C.Create an Amazon EventBridge rule for a scheduled event every 5 minutes. Create an AWS Lambda function that uses the AWS SDK to call StartLogging on a CloudTrail trail in the AWS account. Add the Lambda function ARN as a target to the EventBridge rule.

D.Launch a t2 nano instance with a script running every 5 minutes that uses the AWS SDK to query CloudTrail in the current account. If the CloudTrail trail is disabled have the script re-enable the trail.

DOP-C02 Exam Question 78

An IT team has built an AWS CloudFormation template so others in the company can quickly and reliably deploy and terminate an application. The template creates an Amazon EC2 instance with a user data script to install the application and an Amazon S3 bucket that the application uses to serve static webpages while it is running.
All resources should be removed when the CloudFormation stack is deleted. However, the team observes that CloudFormation reports an error during stack deletion, and the S3 bucket created by the stack is not deleted.
How can the team resolve the error in the MOST efficient manner to ensure that all resources are deleted without errors?

A.Add a custom resource with an AWS Lambda function with the DependsOn attribute specifying the S3 bucket, and an IAM role. Write the Lambda function to delete all objects from the bucket when RequestType is Delete.

B.Replace the EC2 and S3 bucket resources with a single AWS OpsWorks Stacks resource. Define a custom recipe for the stack to create and delete the EC2 instance and the S3 bucket.

C.Add a DelelionPolicy attribute to the S3 bucket resource, with the value Delete forcing the bucket to be removed when the stack is deleted.

D.Identify the resource that was not deleted. Manually empty the S3 bucket and then delete it.

DOP-C02 Exam Question 79

A company is using an AWS CodeBuild project to build and package an application. The packages are copied to a shared Amazon S3 bucket before being deployed across multiple AWS accounts.
The buildspec.yml file contains the following:

The DevOps engineer has noticed that anybody with an AWS account is able to download the artifacts.
What steps should the DevOps engineer take to stop this?

A.Modify the post_build command to remove --acl authenticated-read and configure a bucket policy that allows read access to the relevant AWS accounts only.

B.Configure a default ACL for the S3 bucket that defines the set of authenticated users as the relevant AWS accounts only and grants read-only access.

C.Create an S3 bucket policy that grants read access to the relevant AWS accounts and denies read access to the principal "*".

D.Modify the post_build command to use --acl public-read and configure a bucket policy that grants read access to the relevant AWS accounts only.

DOP-C02 Exam Question 80

A company updated the AWS Cloud Formation template for a critical business application. The stack update process failed due to an error in the updated template and AWS CloudFormation automatically began the stack rollback process Later a DevOps engineer discovered that the application was still unavailable and that the stack was in the UPDATE_ROLLBACK_FAILED state.
Which combination of actions should the DevOps engineer perform so that the stack rollback can complete successfully? (Select TWO.)

A.Attach the AWSC loud Formation FullAccess IAM policy to the AWS CtoudFormation role.

B.Automatically recover the stack resources by using AWS CloudFormation drift detection.

C.Issue a ContinueUpdateRollback command from the AWS CloudFormation console or the AWS CLI.

D.Manually adjust the resources to match the expectations of the stack.

E.Update the existing AWS CloudFormation stack by using the original template.

DOP-C02 Exam Question 81

A company has multiple development groups working in a single shared AWS account. The Senior Manager of the groups wants to be alerted via a third-party API call when the creation of resources approaches the service limits for the account.
Which solution will accomplish this with the LEAST amount of development effort?

A.Create an Amazon CloudWatch Event rule that runs periodically and targets an AWS Lambda function.
Within the Lambda function, evaluate the current state of the AWS environment and compare deployed resource values to resource limits on the account. Notify the Senior Manager if the account is approaching a service limit.

B.Deploy an AWS Lambda function that refreshes AWS Trusted Advisor checks, and configure an Amazon CloudWatch Events rule to run the Lambda function periodically. Create another CloudWatch Events rule with an event pattern matching Trusted Advisor events and a target Lambda function. In the target Lambda function, notify the Senior Manager.

C.Deploy an AWS Lambda function that refreshes AWS Personal Health Dashboard checks, and configure an Amazon CloudWatch Events rule to run the Lambda function periodically. Create another CloudWatch Events rule with an event pattern matching Personal Health Dashboard events and a target Lambda function. In the target Lambda function, notify the Senior Manager.

D.Add an AWS Config custom rule that runs periodically, checks the AWS service limit status, and streams notifications to an Amazon SNS topic. Deploy an AWS Lambda function that notifies the Senior Manager, and subscribe the Lambda function to the SNS topic.

Other Version: 234Amazon.DOP-C02.v2026-07-25.q201; 656Amazon.DOP-C02.v2026-03-12.q166; 1311Amazon.DOP-C02.v2025-11-21.q140; 1690Amazon.DOP-C02.v2024-09-14.q103; 1485Amazon.DOP-C02.v2024-01-26.q82; 1246Amazon.DOP-C02.v2023-11-18.q59; 1196Amazon.DOP-C02.v2023-11-08.q77; 854Amazon.DOP-C02.v2023-08-28.q37; 936Amazon.DOP-C02.v2023-06-26.q32

Latest Upload: 269Amazon.SAA-C03.v2026-07-25.q425; 148SAP.C_S4PM.v2026-07-25.q43; 267Google.Professional-Data-Engineer.v2026-07-25.q215; 243Microsoft.AZ-104.v2026-07-25.q227; 234Amazon.DOP-C02.v2026-07-25.q201; 155EMC.NCP-AII.v2026-07-25.q60; 170CheckPoint.156-561.v2026-07-25.q83; 232Amazon.AIF-C01.v2026-07-24.q158; 164WGU.Applied-Algebra.v2026-07-24.q46; 161Oracle.1Z0-948.v2026-07-24.q60

DOP-C02 Exam Question 77

DOP-C02 Exam Question 78

DOP-C02 Exam Question 79

DOP-C02 Exam Question 80

DOP-C02 Exam Question 81

Download PDF File