DOP-C02 Practice Test 37 — 15 Questions

Question 1

A company uses AWS CodeBuild to run unit tests as part of their CI/CD pipeline. The tests are memory-intensive and occasionally fail due to insufficient memory. The buildspec.yml file uses the default compute type. What is the most cost-effective solution to resolve the memory issue?

Accepted Answer

Change the build project's compute type to a larger instance (e.g., from BUILD_GENERAL1_SMALL to BUILD_GENERAL1_MEDIUM).. Option C is correct because increasing the compute type to a larger instance provides more memory and is cost-effective compared to other options. Option A is wrong because splitting tests requires code changes and may not resolve memory issues. Option B is wrong because enabling caching does not increase memory. Option D is wrong because using a different build environment but same compute type does not increase memory.

Answer

Use a custom build environment with the same compute type.

Answer

Enable local caching in the build project to reduce disk I/O.

Answer

Split the tests into multiple build projects and run them in parallel.

Question 2

A DevOps engineer needs to deploy a serverless application using AWS CodeDeploy with a Lambda deployment group. The application uses AWS Lambda functions. The engineer wants to shift 10% of traffic to the new version initially, then gradually increase to 100%. Which deployment configuration should be used?

Accepted Answer

CodeDeployDefault.LambdaCanary10Percent5Minutes. Option B is correct because CodeDeployDefault.LambdaCanary10Percent5Minutes shifts 10% traffic initially and then every 5 minutes. Option A is wrong because it shifts all at once. Option C is wrong because it shifts 10% then every 10 minutes. Option D is wrong because it shifts linearly over 10 minutes.

Answer

CodeDeployDefault.LambdaAllAtOnce

Answer

CodeDeployDefault.LambdaCanary10Percent10Minutes

Answer

CodeDeployDefault.LambdaLinear10PercentEvery10Minutes

Question 3

Which THREE actions should a DevOps engineer take to ensure that AWS CloudFormation stacks are securely managed? (Choose three.)

Accepted Answer

Use a service role with least privilege when creating the stack.. Option A is correct because IAM policies can restrict who can create/modify stacks. Option C is correct because stack policies protect critical resources during updates. Option D is correct because using service roles follows least privilege. Option B is wrong because there is no 'StackSetPolicy' property. Option E is wrong because deletion policies are for individual resources, not the whole stack.

Answer

Set a DeletionPolicy on the stack to retain resources when the stack is deleted.

Answer

Define a StackSetPolicy to control permissions across accounts.

Question 4

Which TWO AWS services can be used to automate the configuration of EC2 instances at launch? (Choose two.)

Accepted Answer

EC2 user data. Option B is correct because EC2 user data can run scripts at launch. Option D is correct because AWS CloudFormation can bootstrap instances with configuration. Option A is wrong because AWS Config is for monitoring. Option C is wrong because Amazon Inspector is for security scanning. Option E is wrong because Amazon CloudWatch is for monitoring.

Answer

Amazon CloudWatch

Answer

Amazon Inspector

Answer

AWS Config

Question 5

A company uses AWS CodeDeploy to deploy a web application to an Auto Scaling group of Amazon EC2 instances. The deployment fails with the error 'The overall deployment failed because too many individual instances failed deployment, too few healthy instances are available for deployment, or some instances in your deployment group are experiencing problems.' The application is deployed to the instances using an in-place deployment. The instances are running Amazon Linux 2. What should the DevOps engineer check first?

Accepted Answer

Verify that the AWS CodeDeploy agent is installed and running on each EC2 instance.. Option A is correct because the CodeDeploy agent must be installed and running on the instances. If it is not, the deployment fails. Option B is wrong because security groups affect network access, not the agent. Option C is wrong because IAM instance profile permissions are needed but the agent must be running to use them. Option D is wrong because the application port is not directly related to the agent.

Answer

Check the security group rules for the EC2 instances.

Answer

Check the application's port availability.

Answer

Verify that the IAM instance profile associated with the instances has the correct permissions.

Question 6

A company has a CI/CD pipeline that builds a Docker image and pushes it to Amazon ECR. The build step uses AWS CodeBuild. The engineer wants to ensure that the ECR repository has a lifecycle policy to expire untagged images after 14 days. Which TWO actions are required? (Choose 2.)

Accepted Answer

Create an ECR lifecycle policy for the repository.. Options A and D are correct. A lifecycle policy must be applied to the ECR repository (A) and the policy must specify the rule for untagged images (D). Option B is wrong because the buildspec is not where lifecycle policies are defined. Option C is wrong because the lifecycle policy is defined on the repository, not in the pipeline. Option E is wrong because the lifecycle policy is not applied during the build.

Answer

Use the docker tag command to tag images with a timestamp.

Answer

Add a lifecycle policy rule in the buildspec.yml file.

Answer

Configure the lifecycle policy in the CodeBuild project settings.

Question 7

A DevOps engineer wants to automate the creation and cleanup of temporary development environments on AWS. Each environment consists of an Amazon EC2 instance and an Amazon RDS database. The environments should be isolated and cost-effective. Which AWS service is best suited for this?

Accepted Answer

AWS CloudFormation. Option A is correct because AWS CloudFormation allows you to define infrastructure as code and easily create and delete stacks. Option B is wrong because AWS OpsWorks is configuration management, not ideal for temporary environments. Option C is wrong because AWS Elastic Beanstalk is a PaaS service that manages the environment, but not as flexible for cleanup. Option D is wrong because Amazon ECS is for containers, not EC2 and RDS directly.

Answer

AWS Elastic Beanstalk

Answer

AWS OpsWorks

Answer

Amazon ECS

Question 8

A company is migrating to a microservices architecture on Amazon ECS with AWS Fargate. They want to automate the deployment process using AWS CodePipeline. The pipeline should build a Docker image, push it to Amazon ECR, and deploy the updated service to ECS. Which THREE components are required in the pipeline? (Choose 3.)

Accepted Answer

Deploy stage with AWS CodeDeploy to ECS.. Options A, C, and E are correct. Source stage (A) with CodeCommit or S3, build stage (C) with CodeBuild to build and push the image, and deploy stage (E) with CodeDeploy (or ECS) to deploy. Option B is wrong because a manual approval is optional. Option D is wrong because a test stage is optional.

Answer

Manual approval stage.

Answer

Test stage with AWS CodeBuild to run unit tests.

Question 9

A company uses AWS CodePipeline with a GitHub source action. The pipeline is configured to trigger on changes to the main branch. After a recent commit, the pipeline did not trigger. The DevOps engineer verified that the webhook is configured correctly and the IAM role has the necessary permissions. What is the most likely cause?

Accepted Answer

The GitHub personal access token used for authentication has expired.. Option C is correct because if the GitHub personal access token has expired, CodePipeline cannot receive webhook events. Option A is wrong because the branch filter is set to main. Option B is wrong because the webhook is configured correctly. Option D is wrong because the pipeline execution frequency is not the issue.

Answer

The pipeline is set to manual execution only.

Answer

The source action's branch filter is set to a different branch.

Answer

The GitHub webhook endpoint URL is incorrect.

Question 10

A DevOps engineer is designing a CI/CD pipeline for a Python application using AWS CodeBuild and AWS CodeDeploy. The application is deployed to an Auto Scaling group of EC2 instances. The engineer wants to ensure that the deployment does not impact availability. Which TWO strategies can be used? (Choose 2.)

Accepted Answer

Rolling deployment with a small batch size.. Options B and C are correct. A blue/green deployment (B) creates a new environment and switches traffic. A rolling deployment (C) updates instances in batches, maintaining availability. Option A is wrong because in-place deployment can cause downtime. Option D is wrong because immutable deployments are not supported directly with Auto Scaling groups. Option E is wrong because canary is not a deployment type for EC2/ASG.

Answer

In-place deployment with a large batch size.

Answer

Immutable deployment.

Answer

Canary deployment.

Question 11

An application running on Amazon RDS for PostgreSQL is experiencing slow query performance. The DevOps team suspects a specific query is causing high CPU usage. Which tool should they use to identify the problematic query?

Accepted Answer

Amazon RDS Performance Insights. Option C is correct because Performance Insights provides a dashboard to identify top SQL queries. Option A is wrong because Enhanced Monitoring shows OS metrics, not queries. Option B is wrong because CloudWatch Logs might not capture query text. Option D is wrong because RDS Event Subscriptions are for instance events.

Answer

Amazon RDS Event Subscriptions

Answer

Amazon CloudWatch Logs with metric filters

Answer

Amazon RDS Enhanced Monitoring

Question 12

A company is designing a CI/CD pipeline using AWS CodePipeline. They want to automatically run unit tests when a pull request is created in AWS CodeCommit. Which TWO actions should be taken to implement this?

Accepted Answer

Include a buildspec file in the repository that defines the unit test commands.. Option A is correct because CodeBuild can be triggered by pull request events. Option D is correct because the buildspec file defines the commands to run tests. Option B is wrong because CodePipeline does not natively support pull request triggers from CodeCommit. Option C is wrong because CloudWatch Events can trigger Lambda, but the direct integration with CodeBuild is simpler. Option E is wrong because CodeDeploy is for deployment, not testing.

Answer

Configure a CodePipeline stage that uses the pull request source action.

Answer

Set up an Amazon CloudWatch Events rule to detect pull request creation and invoke an AWS Lambda function that starts CodeBuild.

Answer

Add a CodeDeploy deployment group to run the tests on an EC2 instance.

Question 13

A DevOps engineer is managing infrastructure as code using AWS CloudFormation. The engineer wants to automatically update a stack when changes are pushed to a Git repository. Which THREE services can be used together to achieve this?

Accepted Answer

AWS CloudFormation. Option A is correct because CodePipeline can orchestrate the deployment. Option B is correct because CodeCommit is the repository. Option D is correct because CloudFormation is the deployment action. Option C is wrong because CloudWatch Events can trigger pipelines but is not a primary service for this scenario. Option E is wrong because CodeBuild is for building, not directly applying CloudFormation stacks.

Answer

Amazon CloudWatch Events

Answer

AWS CodeBuild

Question 14

A company has a monolith application that takes over an hour to build. The DevOps team wants to implement continuous integration using AWS CodeBuild. The build environment requires a large amount of dependencies that are rarely updated. Which strategy will MINIMIZE build time and cost?

Accepted Answer

Create a custom Docker image that includes all dependencies and use it as the build environment.. Option D is correct because using a custom Docker image with pre-installed dependencies avoids re-downloading them each build, reducing build time and cost. Option A is wrong because increasing compute resources may not help if the bottleneck is network. Option B is wrong because S3 caching helps but is slower than having dependencies in the image. Option C is wrong because local cache is ephemeral and does not persist across builds.

Answer

Enable Amazon S3 cache for the CodeBuild project to reuse dependencies from previous builds.

Answer

Store the dependencies in an Amazon S3 bucket and download them at the start of each build.

Answer

Use a larger compute type for the CodeBuild project to speed up the build.

Question 15

A company is using AWS CodePipeline with multiple stages: Source (GitHub), Build (CodeBuild), Test (CodeBuild), and Deploy (CloudFormation). The deployment stage is failing intermittently with a 'Rate exceeded' error. The team needs to reduce deployment failures. Which TWO actions should the team take?

Accepted Answer

Implement a manual approval step before deployment to stagger multiple pipeline executions.. Option A reduces the chance of hitting API rate limits. Option E implements retry logic. Option B is not related to rate limits. Option C could cause new issues. Option D is irrelevant.

Answer

Increase the timeout of the deploy action.

Answer

Enable CloudWatch detailed monitoring for the deployed resources.

Answer

Change the deployment to use an in-place deployment type.