DOP-C02 Resilient Cloud Solutions — 10 Questions

Question 1

A company runs a critical web application on EC2 instances behind an Application Load Balancer (ALB) with Auto Scaling. During a recent traffic spike, the application became unavailable for 10 minutes. Analysis shows that the ALB's healthy host count dropped to zero because the instances failed health checks due to high CPU load. What is the MOST effective design change to improve resilience during future traffic spikes?

Accepted Answer

Use predictive scaling with a scheduled scaling policy for known peak times.. Predictive scaling uses historical traffic data to forecast future demand and proactively adjust capacity before a spike occurs. This prevents the CPU from reaching critical levels that cause health check failures, ensuring the ALB always has healthy hosts. Scheduled scaling alone would not adapt to unexpected spikes, but predictive scaling combined with dynamic scaling provides both proactive and reactive resilience.

Answer

Increase the instance size to handle higher load.

Answer

Configure step scaling policies based on CPU utilization.

Answer

Set a higher CPU threshold for health checks.

Question 2

A company uses DynamoDB global tables in two AWS Regions with strong consistency reads. They observe occasional write conflicts that are not being resolved automatically. The application uses DynamoDBMapper with optimistic locking. What should the DevOps engineer do to ensure conflict resolution?

Accepted Answer

Use conditional writes with a version number attribute to ensure updates are applied only to the latest version.. Option D is correct because DynamoDB global tables use last-writer-wins (LWW) for conflict resolution by default, but when using DynamoDBMapper with optimistic locking, the application must implement conditional writes with a version number attribute to ensure updates are applied only to the latest version. This prevents stale updates from overwriting newer data, as the conditional write will fail if the version number in the request does not match the current version in the table, allowing the application to retry with the updated version.

Answer

Implement a custom conflict resolution using DynamoDB Streams and AWS Lambda.

Answer

Switch to eventual consistency reads to reduce conflicts.

Answer

Add a third global table region to increase redundancy.

Question 3

A company's application runs on EC2 instances in a single Availability Zone. The operations team wants to improve resilience without redesigning the application. Which action is the MOST effective?

Accepted Answer

Deploy EC2 instances across multiple Availability Zones using an Auto Scaling group.. Deploying EC2 instances across multiple Availability Zones (AZs) using an Auto Scaling group is the most effective action because it eliminates the single point of failure at the AZ level. If one AZ experiences an outage, the Auto Scaling group automatically launches replacement instances in the remaining healthy AZs, ensuring application availability without requiring any application-level changes. This directly addresses the goal of improving resilience by leveraging AWS's fault-isolated infrastructure.

Answer

Use a larger instance type to handle more traffic.

Answer

Enable EC2 Auto Recovery to automatically restart the instance if it fails.

Answer

Place the instance in a placement group to ensure low latency.

Question 4

A company uses a third-party backup solution to back up its EC2 instances daily. The backups are stored in an S3 bucket with default settings. The company wants to ensure that backups are protected from accidental deletion and are available for at least one year. Which combination of S3 features should the DevOps engineer implement?

Accepted Answer

Enable S3 Object Lock with Governance mode and a retention period of 365 days, and set a lifecycle policy to transition to S3 Glacier Deep Archive after 30 days.. Option D is correct because S3 Object Lock with Governance mode prevents objects from being deleted or overwritten by any user (including the root user) for the specified retention period of 365 days, meeting the one-year availability requirement. The lifecycle policy to transition to S3 Glacier Deep Archive after 30 days reduces storage costs while still keeping the data accessible for retrieval within 12 hours, which is acceptable for backup retention. This combination ensures immutability and cost-effective long-term storage.

Answer

Enable MFA Delete and set a lifecycle policy to transition to S3 Glacier after 30 days.

Answer

Enable versioning and set a lifecycle policy to expire noncurrent versions after 365 days.

Answer

Enable cross-Region replication to a bucket with versioning enabled.

Question 5

A company runs a stateful web application on EC2 instances behind a Network Load Balancer (NLB) in a single Availability Zone. The application stores session state locally on the instance. The company wants to achieve high availability across multiple AZs with minimal application changes. What should the DevOps engineer do?

Accepted Answer

Replace the NLB with an ALB and enable sticky sessions (session affinity) using the ALB's cookie.. Option D is correct because replacing the NLB with an ALB and enabling sticky sessions (session affinity) using the ALB's cookie allows the stateful web application to maintain session state across multiple AZs without modifying the application code. The ALB generates a cookie (AWSALB) that binds a client's session to a specific target instance, ensuring subsequent requests from the same client are routed to the same EC2 instance. This achieves high availability across AZs with minimal changes, as the application continues to store session state locally on the instance.

Answer

Add more AZs and configure the NLB with cross-zone load balancing.

Answer

Replace the NLB with an ALB and use ElastiCache for session storage.

Answer

Use a Multi-AZ RDS instance to store session state.

Question 6

A company's DevOps team is designing a disaster recovery plan for a critical application. The application runs on EC2 instances with an RDS MySQL database. The Recovery Time Objective (RTO) is 15 minutes, and the Recovery Point Objective (RPO) is 1 hour. Which approach BEST meets these requirements?

Accepted Answer

Use a warm standby strategy with a scaled-down copy of the production environment in the DR Region, and replicate data using RDS Multi-AZ with synchronous replication.. Option C is correct because a warm standby strategy with a scaled-down copy of the production environment in the DR Region, combined with RDS Multi-AZ using synchronous replication, meets the RTO of 15 minutes and RPO of 1 hour. Multi-AZ synchronous replication ensures zero data loss (RPO of seconds) and automatic failover within minutes, while the warm standby environment can be scaled up quickly to handle production traffic, satisfying the RTO.

Answer

Use backup and restore with daily snapshots stored in S3 and cross-Region replication.

Answer

Use a multi-Region application with Route 53 latency-based routing and RDS read replicas in the DR Region.

Answer

Use a pilot light strategy with EC2 instances stopped and RDS snapshots copied to the DR Region.

Question 7

A company's application uses Amazon SQS to decouple microservices. During peak hours, the SQS queue backlog grows significantly, causing processing delays. The DevOps team wants to reduce latency without increasing costs unnecessarily. What should the team do?

Accepted Answer

Configure Auto Scaling for the consumer fleet based on the ApproximateNumberOfMessagesVisible metric.. Option D is correct because scaling the consumer fleet based on the ApproximateNumberOfMessagesVisible metric directly addresses the backlog by adding more processing capacity when the queue grows. This approach reduces latency dynamically without incurring unnecessary costs during off-peak hours, as it only scales up when needed. Auto Scaling with SQS metrics is a cost-effective, elastic solution for handling variable workloads.

Answer

Increase the visibility timeout to allow consumers more time to process messages.

Answer

Use an SQS queue with priority settings to process high-priority messages first.

Answer

Increase the SQS queue's throughput by requesting a quota increase.

Question 8

A company runs a microservices application on Amazon ECS with Fargate. The application includes a service that processes orders and stores them in an RDS PostgreSQL database. The company wants to ensure that the order service is resilient to AZ failures and can handle a sudden increase in order volume. Which TWO actions should the DevOps engineer take? (Choose TWO.)

Accepted Answer

Deploy the RDS instance in a Multi-AZ configuration.. Option C is correct because deploying the RDS instance in a Multi-AZ configuration provides automatic failover to a standby replica in a different Availability Zone, ensuring database resilience to AZ failures. Option D is correct because configuring the ECS service to run tasks in multiple Availability Zones distributes the order processing workload across AZs, improving both fault tolerance and scalability during sudden traffic spikes.

Answer

Increase the CPU and memory limits for the ECS task definition.

Answer

Place an Amazon CloudFront distribution in front of the order service.

Answer

Use RDS Proxy to manage database connections.

Question 9

A company's application uses Amazon DynamoDB as its primary data store. The application experiences occasional throttling errors during traffic spikes. The DevOps team needs to implement a solution that ensures consistent performance without manual intervention. Which TWO actions should the team take? (Choose TWO.)

Accepted Answer

Implement DynamoDB Accelerator (DAX) to cache read requests.. DynamoDB Accelerator (DAX) is an in-memory cache that reduces read response times from milliseconds to microseconds, offloading read-heavy workloads from the DynamoDB table. By caching frequently accessed items, DAX absorbs traffic spikes and reduces the likelihood of throttling on read requests, ensuring consistent performance without manual intervention.

Answer

Use eventually consistent reads for all queries.

Answer

Move the data to Amazon RDS with read replicas.

Answer

Switch DynamoDB to On-Demand capacity mode.

Question 10

A company wants to design a highly available web application using AWS services. The application must be resilient to the failure of an entire AWS Region. Which THREE components should the architecture include? (Choose THREE.)

Accepted Answer

Amazon Route 53 with a failover routing policy.. Amazon Route 53 with a failover routing policy is correct because it enables DNS-based health checking and automatic traffic routing to a secondary region when the primary region becomes unavailable. This is essential for cross-region disaster recovery, as Route 53 can monitor endpoint health and update DNS records to direct users to the healthy region, ensuring application availability despite a full region failure.

Answer

An Application Load Balancer (ALB) deployed in one Region.

Answer

Amazon EC2 instances in a single Region.