DOP-C02 Free Practice Test

A DevOps engineer manages a company's Amazon Elastic Container Service (Amazon ECS) cluster. The cluster runs on several Amazon EC2 instances that are in an Auto Scaling group. The DevOps
engineer must implement a solution that logs and reviews all stopped tasks for errors. Which solution will meet these requirements?

1. A. Create an Amazon EventBridge rule to capture task state change
2. B. Send the event to Amazon CloudWatch Log
3. C. Use CloudWatch Logs Insights to investigate stopped tasks.
4. D. Configure tasks to write log data in the embedded metric forma
5. E. Store the logs in Amazon CloudWatch Log
6. F. Monitor the ContainerInstanceCount metric for changes.
7. G. Configure the EC2 instances to store logs in Amazon CloudWatch Log
8. H. Create a CloudWatch Contributor Insights rule that uses the EC2 instance log dat
9. I. Use the Contributor Insights rule to investigate stopped tasks.
10. J. Configure an EC2 Auto Scaling lifecycle hook for the EC2_INSTANCE_TERMINATING scale-in even
11. K. Write the SystemEventLog file to Amazon S3. Use Amazon Athena to query the log file for errors.

Correct Answer: A
The best solution to log and review all stopped tasks for errors is to use Amazon EventBridge and Amazon CloudWatch Logs. Amazon EventBridge allows the DevOps engineer to create a rule that matches task state change events from Amazon ECS. The rule can then send the event data to Amazon CloudWatch Logs as the target. Amazon CloudWatch Logs can store and monitor the log data, and also provide CloudWatch Logs Insights, a feature that enables the DevOps engineer to interactively search and analyze the log data. Using CloudWatch Logs Insights, the DevOps engineer can filter and aggregate the log data based on various fields, such as cluster, task, container, and reason. This way, the DevOps engineer can easily identify and investigate the stopped tasks and their errors.
The other options are not as effective or efficient as the solution in option A. Option B is not suitable because the embedded metric format is designed for custom metrics, not for logging task state changes. Option C is not feasible because the EC2 instances do not store the task state change events in their logs. Option D is not relevant because the EC2_INSTANCE_TERMINATING lifecycle hook is triggered when an EC2 instance is terminated by the Auto Scaling group, not when a task is stopped by Amazon ECS. References:
✑ : Creating a CloudWatch Events Rule That Triggers on an Event - Amazon Elastic
Container Service
✑ : Sending and Receiving Events Between AWS Accounts - Amazon EventBridge
✑ : Working with Log Data - Amazon CloudWatch Logs
✑ : Analyzing Log Data with CloudWatch Logs Insights - Amazon CloudWatch Logs
✑ : Embedded Metric Format - Amazon CloudWatch
✑ : Amazon EC2 Auto Scaling Lifecycle Hooks - Amazon EC2 Auto Scaling

A company has migrated its container-based applications to Amazon EKS and want to establish automated email notifications. The notifications sent to each email address are for specific activities related to EKS components. The solution will include Amazon SNS topics and an AWS Lambda function to evaluate incoming log events and publish messages to the correct SNS topic.
Which logging solution will support these requirements?

1. A. Enable Amazon CloudWatch Logs to log the EKS component
2. B. Create a CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
3. C. Enable Amazon CloudWatch Logs to log the EKS component
4. D. Create CloudWatch Logs Insights queries linked to Amazon EventBridge events that invoke Lambda.
5. E. Enable Amazon S3 logging for the EKS component
6. F. Configure an Amazon CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
7. G. Enable Amazon S3 logging for the EKS component
8. H. Configure S3 PUT Object event notifications with AWS Lambda as the destination.

Correct Answer: A
https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html#La mbdaFunctionExample https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html

A company plans to use Amazon CloudWatch to monitor its Amazon EC2 instances. The company needs to stop EC2 instances when the average of the NetworkPacketsIn metric is less than 5 for at least 3 hours in a 12-hour time window. The company must evaluate the metric every hour. The EC2 instances must continue to run if there is missing data for the NetworkPacketsIn metric during the evaluation period.
A DevOps engineer creates a CloudWatch alarm for the NetworkPacketsIn metric. The DevOps engineer configures a threshold value of 5 and an evaluation period of 1 hour.
Which set of additional actions should the DevOps engineer take to meet these requirements?

1. A. Configure the Datapoints to Alarm value to be 3 out of 12. Configure the alarm to treat missing data as breaching the threshol
2. B. Add an AWS Systems Manager action to stop the instance when the alarm enters the ALARM state.
3. C. Configure the Datapoints to Alarm value to be 3 out of 12. Configure the alarm to treat missing data as not breaching the threshol
4. D. Add an EC2 action to stop the instance when the alarm enters the ALARM state.
5. E. Configure the Datapoints to Alarm value to be 9 out of 12. Configure the alarm to treat missing data as breaching the threshol
6. F. Add an EC2 action to stop the instance when the alarm enters the ALARM state.
7. G. Configure the Datapoints to Alarm value to be 9 out of 12. Configure the alarm to treat missing data as not breaching the threshol
8. H. Add an AWS Systems Manager action to stop the instance when the alarm enters the ALARM state.

Correct Answer: B
To meet the requirements, the DevOps engineer needs to configure the CloudWatch alarm to stop the EC2 instances when the average of the NetworkPacketsIn metric is less than 5 for at least 3 hours in a 12-hour time window. This means that the alarm should trigger when 3 out of 12 datapoints are below the threshold of 5. The alarm should also treat missing data as not breaching the threshold, so that the EC2 instances continue to run if there is no data for the metric during the evaluation period. The DevOps engineer can add an EC2 action to stop the instance when the alarm enters the ALARM state, which is a built-in action type for CloudWatch alarms.

A DevOps engineer has automated a web service deployment by using AWS CodePipeline with the following steps:
1) An AWS CodeBuild project compiles the deployment artifact and runs unit tests.
2) An AWS CodeDeploy deployment group deploys the web service to Amazon EC2 instances in the staging environment.
3) A CodeDeploy deployment group deploys the web service to EC2 instances in the production environment.
The quality assurance (QA) team requests permission to inspect the build artifact before the deployment to the production environment occurs. The QA team wants to run an internal penetration testing tool to conduct manual tests. The tool will be invoked by a REST API call.
Which combination of actions should the DevOps engineer take to fulfill this request? (Choose two.)

1. A. Insert a manual approval action between the test actions and deployment actions of the pipeline.
2. B. Modify the buildspec.yml file for the compilation stage to require manual approval before completion.
3. C. Update the CodeDeploy deployment groups so that they require manual approval to proceed.
4. D. Update the pipeline to directly call the REST API for the penetration testing tool.
5. E. Update the pipeline to invoke an AWS Lambda function that calls the REST API for thepenetration testing tool.

Correct Answer: AE

A company is implementing AWS CodePipeline to automate its testing process The company wants to be notified when the execution state fails and used the following custom event pattern in Amazon EventBridge:

Which type of events will match this event pattern?

1. A. Failed deploy and build actions across all the pipelines
2. B. All rejected or failed approval actions across all the pipelines
3. C. All the events across all pipelines
4. D. Approval actions across all the pipelines

Correct Answer: B
Action-level states in events Action state Description
STARTED The action is currently running. SUCCEEDED The action was completed successfully.
FAILED For Approval actions, the FAILED state means the action was either rejected by the reviewer or failed due to an incorrect action configuration.
CANCELED The action was canceled because the pipeline structure was updated.