Practice DOP-001 Exam Online

Question 1

An ecommerce company uses a large number of Amazon EBS backed Amazon EC2 instances. To decrease manual work across all the instances, a DevOps engineer is tasked with automating restart actions when EC2 instance retirement events are scheduled.
How can this be accomplished?

A : Create a scheduled Amazon CloudWatch Events rule to execute an AWS Systems Manager automation document that checks if any EC2 instances are scheduled for retirement once a week. If the instance is scheduled for retirement, the automation document will hibernate the instance.

B : Enable EC2 Auto Recovery on all of the instances. Create an AWS Config rule to limit the recovery to occur during a maintenance window only.

C : Reboot all EC2 instances during an approved maintenance window that is oil^ide of standard business hours. Set up Amazon CloudWatch alarms to send a notification in case any instance is failing EC2 instance status checks.

D : Set up an AWS Health Amazon CloudWatch Events rule to execute AWS Systems Manager automation documents that stop and start the EC2 instance when a retirement scheduled event occurs.

Answer: D

Question 2

A DevOps Engineer just joined a new company that is already running workloads on Amazon EC2 instances. AWS has been adopted incrementally with no central governance. The Engineer must now assess how well the existing deployments comply with the following requirements:
EC2 instances are running only approved AMIs.
Amazon EBS volumes are encrypted.
EC2 instances have an Owner tag.
Root login over SSH is disabled on EC2 instances.
Which services should the Engineer use to perform this assessment with the LEAST amount of effort? (Select TWO.)

A : AWS Config

B : Amazon GuardDuty

C : AWS System Manager

D : AWS Directory Service

E : Amazon Inspector

Answer: A

Question 3

A company is required to collect user consent to a privacy agreement. An application is deployed in six AWS Regions with two in North America, two in Europe, and two in Asia with a user base of 20-30 million users. The company needs to read and write data related to each user's response, and ensure the responses are available in all six Regions.
What solution will satisfy these requirements while MINIMIZING latency?

A : Implement Amazon Aurora Global Database in each of the six Regions.

B : Implement Amazon DocumentDB (with MongoDB compatibility) in each of the six Regions.

C : Implement Amazon DynamoDB global tables in each of the six Regions.

D : Implement Amazon ElastiCache for Redis replication group in each of the six Regions.

Answer: C

Question 4

A company is reviewing its IAM policies. One policy written by the DevOps Engineer has been flagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: Nonproduction over the weekend. The current policy is:

What changes should the Engineer make to achieve a policy of least permission? (Select THREE.)

A : Option A

B : Option B

C : Option C

D : Option D

E : Option E

F : Option F

Answer: A,B,D

Question 5

A company uses Amazon S3 to store proprietary information. The development team creates buckets for new projects on a daily basis. The security team wants to ensure that all existing and future buckets have encryption, logging, and versioning enabled. Additionally, no buckets should ever be publicly read or write accessible.
What should a DevOps engineer do to meet these requirements?

A : Enable AWS CloudTrail and configure automatic remediation using AWS Lambda.

B : Enable AWS Config rules and configure automatic remediation using AWS Systems Manager documents.

C : Enable AWS Trusted Advisor and configure automatic remediation using Amazon CloudWatch Events.

D : Enable AWS Systems Manager and configure automatic remediation using Systems Manager documents.

Answer: B

Name:	AWS Certified DevOps Engineer - Professional
Exam Code:	DOP-001
Certification:	AWS Certified Professional
Vendor:	Amazon
Total Questions:	272
Last Updated:	Apr 23, 2024

Amazon DOP-001