Online Access Free Amazon.DOP-C02.v2026-03-12.q166 Practice Test (Page 24)

DOP-C02 Exam Question 111

A company uses Amazon S3 to store proprietary information. The development team creates buckets for new projects on a daily basis. The security team wants to ensure that all existing and future buckets have encryption logging and versioning enabled. Additionally, no buckets should ever be publicly read or write accessible.
What should a DevOps engineer do to meet these requirements?

A.Enable AWS CloudTrail and configure automatic remediation using AWS Lambda.

B.Enable AWS Conflg rules and configure automatic remediation using AWS Systems Manager documents.

C.Enable AWS Trusted Advisor and configure automatic remediation using Amazon EventBridge.

D.Enable AWS Systems Manager and configure automatic remediation using Systems Manager documents.

DOP-C02 Exam Question 112

A DevOps engineer is working on a project that is hosted on Amazon Linux and has failed a security review.
The DevOps manager has been asked to review the company buildspec. yaml die for an AWS CodeBuild project and provide recommendations. The buildspec. yaml file is configured as follows:

What changes should be recommended to comply with AWS security best practices? (Select THREE.)

A.Add a post-build command to remove the temporary files from the container before termination to ensure they cannot be seen by other CodeBuild users.

B.Update the CodeBuild project role with the necessary permissions and then remove the AWS credentials from the environment variable.

C.Store the db_password as a SecureString value in AWS Systems Manager Parameter Store and then remove the db_password from the environment variables.

D.Move the environment variables to the 'db.-deploy-bucket 'Amazon S3 bucket, add a prebuild stage to download then export the variables.

E.Use AWS Systems Manager run command versus sec and ssh commands directly to the instance.

DOP-C02 Exam Question 113

A SaaS company uses ECS (Fargate) behind an ALB and CodePipeline + CodeDeploy for blue/green deployments. They need automatic, incremental traffic shifting over time with no downtime.
Which solution will meet these requirements?

A.Use TimeBasedLinear in appspec.yaml with defined percentage and interval.

B.Use AllAtOnce deployment configuration.

C.Use TimeBasedCanary.

D.Configure weighted routing on ALB manually.

DOP-C02 Exam Question 114

A company has an organization in AWS Organizations for its multi-account environment. A DevOps engineer is developing an AWS CodeArtifact based strategy for application package management across the organization. Each application team at the company has its own account in the organization. Each application team also has limited access to a centralized shared services account.
Each application team needs full access to download, publish, and grant access to its own packages. Some common library packages that the application teams use must also be shared with the entire organization.
Which combination of steps will meet these requirements with the LEAST administrative overhead? (Select THREE.)

A.Create a domain in each application team's account. Grant each application team's account lull read access and write access to the application team's domain

B.Create a domain in the shared services account Grant the organization read access and CreateRepository access.

C.Create a repository in each application team's account. Grant each application team's account lull read access and write access to its own repository.

D.Create a repository in the shared services account. Grant the organization read access to the repository in the shared services account. Set the repository as the upstream repository in each application team's repository.

E.For teams that require shared packages, create resource-based policies that allow read access to the repository from other application teams' accounts.

F.Set the other application teams' repositories as upstream repositories.

Correct Answer: B,D,E

Step 1: Creating a Centralized Domain in the Shared Services Account
To manage application package dependencies across multiple accounts, the most efficient solution is to create a centralized domain in the shared services account. This allows all application teams to access and manage package repositories within the same domain, ensuring consistency and centralization.
Action: Create a domain in the shared services account.
Why: A single, centralized domain reduces the need for redundant management in each application team's account.
Reference: AWS documentation on AWS CodeArtifact domains and repositories.
This corresponds to Option B: Create a domain in the shared services account. Grant the organization read access and CreateRepository access.
Step 2: Sharing Repositories Across Teams with Upstream ConfigurationsTo share common library packages across the organization, each application team's repository can point to the shared services repository as an upstream repository. This enables teams to access shared packages without managing them individually in each team's account.
Action: Create a repository in the shared services account and set it as the upstream repository for each application team.
Why: Upstream repositories allow package sharing while maintaining individual team repositories for managing their own packages.
Reference: AWS documentation on Upstream repositories in CodeArtifact.
This corresponds to Option D: Create a repository in the shared services account. Grant the organization read access to the repository in the shared services account. Set the repository as the upstream repository in each application team's repository.
Step 3: Using Resource-Based Policies for Cross-Account AccessFor teams that need to share their packages with other application teams, resource-based policies can be applied to grant the necessary permissions. These policies allow cross-account access without having to manage permissions at the individual account level.
Action: Create resource-based policies that allow read access to the repositories across application teams.
Why: This simplifies management by centralizing permissions in the shared services account while allowing cross-team collaboration.
Reference: AWS documentation on CodeArtifact resource-based policies.
This corresponds to Option E: For teams that require shared packages, create resource-based policies that allow read access to the repository from other application teams' accounts.

DOP-C02 Exam Question 115

A company has an organization in AWS Organizations. The organization includes workload accounts that contain enterprise applications. The company centrally manages users from an operations account. No users can be created in the workload accounts. The company recently added an operations team and must provide the operations team members with administrator access to each workload account.
Which combination of actions will provide this access? (Choose three.)

A.Create a SysAdmin role in the operations account. Attach the AdministratorAccess policy to the role.
Modify the trust relationship to allow the sts:AssumeRole action from the workload accounts.

B.Create a SysAdmin role in each workload account. Attach the AdministratorAccess policy to the role.
Modify the trust relationship to allow the sts:AssumeRole action from the operations account.

C.Create an Amazon Cognito identity pool in the operations account. Attach the SysAdmin role as an authenticated role.

D.In the operations account, create an IAM user for each operations team member.

E.In the operations account, create an IAM user group that is named SysAdmins. Add an IAM policy that allows the sts:AssumeRole action for the SysAdmin role in each workload account. Add all operations team members to the group.

F.Create an Amazon Cognito user pool in the operations account. Create an Amazon Cognito user for each operations team member.

Other Version: 234Amazon.DOP-C02.v2026-07-25.q201; 1311Amazon.DOP-C02.v2025-11-21.q140; 2228Amazon.DOP-C02.v2024-12-30.q117; 1686Amazon.DOP-C02.v2024-09-14.q103; 1485Amazon.DOP-C02.v2024-01-26.q82; 1246Amazon.DOP-C02.v2023-11-18.q59; 1196Amazon.DOP-C02.v2023-11-08.q77; 854Amazon.DOP-C02.v2023-08-28.q37; 936Amazon.DOP-C02.v2023-06-26.q32

Latest Upload: 269Amazon.SAA-C03.v2026-07-25.q425; 139SAP.C_S4PM.v2026-07-25.q43; 267Google.Professional-Data-Engineer.v2026-07-25.q215; 243Microsoft.AZ-104.v2026-07-25.q227; 234Amazon.DOP-C02.v2026-07-25.q201; 155EMC.NCP-AII.v2026-07-25.q60; 170CheckPoint.156-561.v2026-07-25.q83; 231Amazon.AIF-C01.v2026-07-24.q158; 164WGU.Applied-Algebra.v2026-07-24.q46; 161Oracle.1Z0-948.v2026-07-24.q60

DOP-C02 Exam Question 111

DOP-C02 Exam Question 112

DOP-C02 Exam Question 113

DOP-C02 Exam Question 114

DOP-C02 Exam Question 115

Download PDF File