DOP-C02 Free Practice Test

A DevOps engineer is deploying a new version of a company's application in an AWS CodeDeploy deployment group associated with its Amazon EC2 instances. After some time, the deployment fails. The engineer realizes that all the events associated with the specific deployment ID are in a Skipped status and code was not deployed in the instances associated with the deployment group.
What are valid reasons for this failure? (Select TWO.).

1. A. The networking configuration does not allow the EC2 instances to reach the internet via a NAT gateway or internet gateway and the CodeDeploy endpoint cannot be reached.
2. B. The IAM user who triggered the application deployment does not have permission to interact with the CodeDeploy endpoint.
3. C. The target EC2 instances were not properly registered with the CodeDeploy endpoint.
4. D. An instance profile with proper permissions was not attached to the target EC2 instances.
5. E. The appspe
6. F. yml file was not included in the application revision.

Correct Answer: AD
https://docs.aws.amazon.com/codedeploy/latest/userguide/troubleshooting-deployments.html#troubleshooting-s

A company manages multiple AWS accounts in AWS Organizations. The company's security policy states that AWS account root user credentials for member accounts must not be used. The company monitors access to the root user credentials.
A recent alert shows that the root user in a member account launched an Amazon EC2 instance. A DevOps engineer must create an SCP at the organization's root level that will prevent the root user in member accounts from making any AWS service API calls.
Which SCP will meet these requirements?
A)

B)

C)

D)

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: D

A company wants to set up a continuous delivery pipeline. The company stores application code in a private GitHub repository. The company needs to deploy the application components to Amazon Elastic Container Service (Amazon ECS). Amazon EC2, and AWS Lambda. The pipeline must support manual approval actions.
Which solution will meet these requirements?

1. A. Use AWS CodePipeline with Amazon EC
2. B. Amazon EC2, and Lambda as deploy providers.
3. C. Use AWS CodePipeline with AWS CodeDeploy as the deploy provider.
4. D. Use AWS CodePipeline with AWS Elastic Beanstalk as the deploy provider.
5. E. Use AWS CodeDeploy with GitHub integration to deploy the application.

Correct Answer: B
https://docs.aws.amazon.com/codedeploy/latest/userguide/deployment-steps.html

A development team manually builds an artifact locally and then places it in an Amazon S3 bucket. The application has a local cache that must be cleared when a deployment occurs. The team runs a command to do this downloads the artifact from Amazon S3 and unzips the artifact to complete the deployment.
A DevOps team wants to migrate to a CI/CD process and build in checks to stop and roll back the deployment when a failure occurs. This requires the team to track the progression of the deployment.
Which combination of actions will accomplish this? (Select THREE)

1. A. Allow developers to check the code into a code repository Using Amazon EventBridge on every pull into the mam branch invoke an AWS Lambda function to build the artifact and store it in Amazon S3.
2. B. Create a custom script to clear the cache Specify the script in the Beforelnstall lifecycle hook in the AppSpec file.
3. C. Create user data for each Amazon EC2 instance that contains the clear cache script Once deployed test the application If it is not successful deploy it again.
4. D. Set up AWS CodePipeline to deploy the application Allow developers to check the code into a code repository as a source tor the pipeline.
5. E. Use AWS CodeBuild to build the artifact and place it in Amazon S3 Use AWS CodeDeploy to deploy the artifact to Amazon EC2 instances.
6. F. Use AWS Systems Manager to fetch the artifact from Amazon S3 and deploy it to all the instances.

Correct Answer: BDE

A production account has a requirement that any Amazon EC2 instance that has been logged in to manually must be terminated within 24 hours. All applications in the production account are using Auto Scaling groups with the Amazon CloudWatch Logs agent configured.
How can this process be automated?

1. A. Create a CloudWatch Logs subscription to an AWS Step Functions applicatio
2. B. Configure an AWS Lambda function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissione
3. C. Create an Amazon EventBridge rule to invoke a second Lambda function once a day that will terminate all instances with this tag.
4. D. Create an Amazon CloudWatch alarm that will be invoked by the login even
5. E. Send the notification to an Amazon Simple Notification Service (Amazon SNS) topic that the operations team is subscribed to, and have them terminate the EC2 instance within 24 hours.
6. F. Create an Amazon CloudWatch alarm that will be invoked by the login even
7. G. Configure the alarm to send to an Amazon Simple Queue Service (Amazon SQS) queu
8. H. Use a group of worker instances to process messages from the queue, which then schedules an Amazon EventBridge rule to be invoked.
9. I. Create a CloudWatch Logs subscription to an AWS Lambda functio
10. J. Configure the function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned.Create an Amazon EventBridge rule to invoke a daily Lambda function that terminates all instances with this tag.

Correct Answer: D
"You can use subscriptions to get access to a real-time feed of log events from CloudWatch Logs and have it delivered to other services such as an Amazon Kinesis stream, an Amazon Kinesis Data Firehose stream, or AWS Lambda for custom processing, analysis, or loading to other systems. When log events are sent to the receiving service, they are Base64 encoded and compressed with the gzip format." See https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Subscriptions.html