DOP-C02 Practice Test 49 — 15 Questions

Question 1

A DevOps engineer needs to manage the configuration of a large number of EC2 instances that are part of a cluster. The instances should have consistent software packages, services, and settings. The engineer wants to use a configuration management tool that integrates with AWS and supports a push-based model. Which service should be used?

Accepted Answer

AWS Systems Manager Run Command. Option D is correct because AWS Systems Manager Run Command uses a push-based model to execute commands and manage configuration on instances. Option A (OpsWorks) is pull-based. Option B (CloudFormation) is for infrastructure, not configuration. Option C (CodeCommit) is a source control service.

Answer

AWS OpsWorks Stacks

Answer

AWS CodeCommit

Answer

AWS CloudFormation

Question 2

A team uses AWS CloudFormation to manage a multi-tier application. They update the stack and receive this error: 'UPDATE_ROLLBACK_FAILED'. The stack is in a state where some resources were updated, then rollback failed. What is the best course of action?

Accepted Answer

Use the 'ContinueUpdateRollback' API or AWS Management Console to resume rollback, and fix any underlying issues.. Option D is correct because when a rollback fails, the stack may have resources that could not be rolled back. The recommended approach is to continue rolling back the stack, which may require manual intervention to fix the failing resource. Option A is wrong because continuing update may cause further issues. Option B is wrong because deleting the stack may lose data. Option C is wrong because the stack is not in a healthy state.

Answer

Ignore the error and use the stack as-is.

Answer

Attempt to continue the update again.

Answer

Delete the stack and recreate it.

Question 3

A DevOps team is using AWS Elastic Beanstalk to deploy a web application. They need to customize the software configuration on the EC2 instances that are part of the Elastic Beanstalk environment. Which THREE methods can they use? (Choose THREE.)

Accepted Answer

Use saved configurations to create reusable environment templates. Elastic Beanstalk provides several ways to customize the environment: .ebextensions for config files, saved configurations for environment settings, and platform hooks for custom scripts. Options A, B, and D are correct. Option C is incorrect because OpsWorks is a separate service. Option E is incorrect because custom AMIs are not recommended for Elastic Beanstalk; you should use platform hooks instead.

Answer

Create a custom AMI with the desired configuration

Answer

Use OpsWorks to manage the instances

Question 4

A company uses AWS CloudFormation to manage a stack that includes an Auto Scaling group with a LaunchTemplate. The DevOps team wants to update the LaunchTemplate with a new AMI. The stack update fails with the error 'Launch template version does not exist'. What is the most likely cause?

Accepted Answer

The LaunchTemplate version specified in the template was deleted. Option A is correct because CloudFormation references a specific LaunchTemplate version. If the version is deleted, the update fails. Option B is incorrect because the error is about version not existing, not a recent modification. Option C is incorrect because the Auto Scaling group uses the template version, not the default. Option D is incorrect because target group attachment does not affect LaunchTemplate versions.

Answer

The LaunchTemplate was recently modified and the new version is not yet available

Answer

The target group attachment is incorrect

Answer

The Auto Scaling group is using a different launch template

Question 5

A company wants to use AWS OpsWorks for configuration management of their EC2 instances. They need to ensure that the instances are automatically configured with the latest security patches upon boot. Which OpsWorks feature should they use?

Accepted Answer

Create a custom Chef recipe that installs security patches and assign it to the setup lifecycle event.. Option B is correct because OpsWorks uses Chef or Puppet recipes to configure instances. A custom recipe can be created to apply patches during the setup lifecycle event. Option A is wrong because OpsWorks does not integrate directly with Systems Manager Patch Manager. Option C is wrong because user data is an EC2 feature, not OpsWorks. Option D is wrong because CloudFormation is for provisioning, not configuration management.

Answer

Configure the instances to run a user data script that updates packages.

Answer

Use AWS Systems Manager Patch Manager with an OpsWorks lifecycle event.

Answer

Use a CloudFormation template to apply patches during stack creation.

Question 6

An organization uses OpsWorks to manage application stacks. They notice that custom cookbooks are not being executed during the lifecycle events. What is the most likely cause?

Accepted Answer

The custom cookbook repository URL is misconfigured or inaccessible. Custom cookbooks must be stored in a repository (S3, Git, etc.) and the layer must be configured to use that repository. Option D is correct. Option A is incorrect because Chef version compatibility is usually not the cause for non-execution. Option B is incorrect because IAM roles are for AWS API calls, not cookbook execution. Option C is incorrect because OpsWorks does not use CodeDeploy for cookbook execution.

Answer

The layer's IAM role does not have permissions to execute the cookbook

Answer

The cookbook is not configured with CodeDeploy

Answer

The cookbook uses a Chef version that is not supported by OpsWorks

Question 7

A company uses AWS CloudFormation StackSets to deploy resources across multiple accounts and regions. They need to ensure that updates to the stack set are rolled out in a controlled manner, with the ability to roll back if errors occur. Which THREE strategies should they implement? (Choose THREE.)

Accepted Answer

Set a failure tolerance to allow a certain number of stack operation failures before the overall operation fails. StackSets support failure tolerances, concurrent accounts, and region concurrency settings to control rollouts. Options A, B, and E are correct. Option C is incorrect because CloudFormation does not support canary deployments natively. Option D is incorrect because stack instances cannot be paused individually; you would use failure tolerance settings.

Answer

Use a canary deployment strategy by updating only a subset of accounts first

Answer

Pause stack instances manually if errors are detected

Question 8

Which TWO are benefits of using AWS CloudFormation for infrastructure as code? (Select TWO.)

Accepted Answer

Enables declarative infrastructure definition.. Option B is correct because CloudFormation provides a declarative way to define infrastructure. Option D is correct because it automates provisioning and reduces manual effort. Option A is wrong because CloudFormation does not provide a graphical interface for drag-and-drop. Option C is wrong because it manages AWS resources, not on-premises. Option E is wrong because it does not automatically optimize costs.

Answer

Manages both AWS and on-premises resources.

Answer

Provides a graphical interface for designing infrastructure.

Answer

Automatically optimizes resource costs.

Question 9

An administrator attaches the IAM policy shown in the exhibit to an IAM user. What is the effect on the user's ability to launch an EC2 instance in eu-west-1?

Accepted Answer

The user is allowed because the request region matches the condition exception.. Option D is correct because the policy denies all EC2 actions when the requested region is NOT us-east-1 or eu-west-1. Since the requested region is eu-west-1, the condition is not met, so the deny does not apply. By default, actions are allowed if not explicitly denied. Option A is wrong because the deny only applies when the region is not in the list. Option B is wrong because the policy does not explicitly allow. Option C is wrong because there is no explicit allow, but the default allow applies.

Answer

The user is denied from launching instances in eu-west-1.

Answer

The user is allowed because the policy does not explicitly deny.

Answer

The user is allowed only if they also have an explicit allow policy.

Question 10

A team uses CloudFormation to deploy a multi-container Docker environment on Amazon ECS. They need to pass environment variables to the containers from Parameter Store. How should they reference these values in the CloudFormation template?

Accepted Answer

Using the 'resolve:ssm' dynamic reference. CloudFormation has a dynamic reference resolution feature that allows you to use the 'resolve:ssm' or 'resolve:ssm-secure' syntax to fetch values from Parameter Store at stack creation/update time. Option B is correct. Option A is incorrect because there is no 'aws:paramstore' intrinsic function. Option C is incorrect because Ref returns the parameter name, not its value. Option D is incorrect because Fn::GetAtt is for resource attributes, not for Parameter Store values.

Answer

Using the 'Ref' function with the parameter name

Answer

Using the 'Fn::ParamStore' intrinsic function

Answer

Using 'Fn::GetAtt' on the Parameter Store resource

Question 11

A company uses AWS Elastic Beanstalk to deploy a web application. They want to ensure that configuration changes (e.g., environment variables, instance type) are version-controlled and can be rolled back. Which strategy should they use?

Accepted Answer

Store configuration in a configuration file (e.g., .ebextensions) included with the application source code.. Option D is correct because using a configuration file (e.g., .ebextensions) stored in the application source bundle allows versioning of configuration along with code. Option A is wrong because saved configurations are not tied to a specific application version. Option B is wrong because manually changing settings via the console is not version-controlled. Option C is wrong because CloudFormation is not natively integrated with Beanstalk for this purpose.

Answer

Use AWS CloudFormation to manage the Beanstalk environment outside of Beanstalk.

Answer

Use Elastic Beanstalk saved configurations to store environment settings.

Answer

Manually change environment configuration using the Elastic Beanstalk console when needed.

Question 12

An organization uses AWS Elastic Beanstalk to deploy a web application. They need to ensure that configuration changes (e.g., environment variables, instance types) are version-controlled and can be rolled back. Which approach meets these requirements?

Accepted Answer

Use Elastic Beanstalk saved configurations to capture environment settings and store the configuration files in a version control system.. Using saved configurations in Elastic Beanstalk allows capturing environment settings and later applying them to any environment, enabling version control and rollback. Option D is correct. Options A, B, and C do not provide version-controlled rollback of configuration.

Answer

Use AWS Systems Manager Parameter Store to store configuration values.

Answer

Create a custom script that uses the Elastic Beanstalk API to apply configuration and store the script in a Git repository.

Answer

Manually record all configuration changes in a spreadsheet.

Question 13

A DevOps engineer updated an EC2 instance's InstanceType in a CloudFormation stack and received the stack events shown in the exhibit. What is the most likely cause of the failure?

Accepted Answer

The engineer specified an invalid instance type (e.g., t2.large) that is not allowed by CloudFormation.. Option B is correct because the error message states that the InstanceType value must be one of the allowed types. The engineer likely specified an invalid instance type like t2.large. Option A is wrong because the error is about instance type, not AMI. Option C is wrong because the error is not about IAM. Option D is wrong because the error is not about network.

Answer

The engineer did not have permission to modify the instance type.

Answer

The AMI ID specified does not support the new instance type.

Answer

The VPC configuration does not support the new instance type.

Question 14

A company uses AWS OpsWorks for configuration management. They want to ensure that a custom recipe runs on all instances in a layer every 30 minutes. What should they do?

Accepted Answer

Set a custom chef recipe with a cron schedule. OpsWorks allows you to configure custom chef recipes to run on a schedule using the 'cron' setup in the layer's 'Recipes' configuration. Option D is correct. Option A is incorrect because the 'Setup' lifecycle event runs only once when the instance boots. Option B is incorrect because 'Configure' runs when instances enter or leave the stack. Option C is incorrect because 'Deploy' runs when you deploy an app.

Answer

Add the recipe to the 'Setup' lifecycle event

Answer

Add the recipe to the 'Deploy' lifecycle event

Answer

Add the recipe to the 'Configure' lifecycle event

Question 15

A company uses Amazon ECS with Fargate for containerized applications. They need to ensure that if a task fails, it is automatically restarted and the application remains available. Which THREE actions should they take? (Choose THREE.)

Accepted Answer

Configure the ECS service to automatically restart failed tasks.. Options B, C, and E are correct. Service auto-restart ensures tasks are replaced. Deploying tasks across multiple AZs provides AZ resilience. Using an ALB with health checks ensures traffic is routed to healthy tasks. Option A is incorrect because ECS does not use EC2 Auto Scaling for Fargate. Option D is incorrect because CloudWatch alarms are not needed for automatic restart.

Answer

Set up a CloudWatch alarm to trigger AWS Lambda to restart tasks.

Answer

Configure an EC2 Auto Scaling group for the ECS cluster.