DOP-C02 Configuration Management and IaC Practice Question
A company uses AWS CloudFormation StackSets to deploy a common network infrastructure across multiple AWS accounts. They need to ensure that all StackSet operations are audited and any failed stack instances are automatically retried. Which THREE configurations should be implemented? (Select THREE.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Amazon SNS notifications for StackSet events.
To audit StackSet operations, enable AWS CloudTrail to log StackSet API calls (option E). To automatically retry failed stack instances, set the 'Retry on failure' option in StackSet operation preferences (option D). To receive notifications about StackSet events, configure Amazon SNS notifications (option B). Automatic rollback (A) is not a retry mechanism, and AWS Config rules (C) monitor compliance but do not provide audit logging or retry functionality.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable automatic rollback on failure.
Why it's wrong here
Rollback reverses changes, but the question asks for retry, not rollback.
- ✓
Configure Amazon SNS notifications for StackSet events.
Why this is correct
SNS can notify administrators of failures so they can take action.
- ✗
Use AWS Config rules to monitor StackSet compliance.
Why it's wrong here
AWS Config rules evaluate resource configurations, not StackSet operation statuses.
- ✓
Set the 'Retry on failure' option in StackSet operation preferences.
Why this is correct
This automatically retries failed stack instances.
- ✓
Enable AWS CloudTrail to log StackSet API calls.
Why this is correct
CloudTrail provides auditing of all StackSet operations.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DOP-C02 question from scratch — 251 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DOP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DOP-C02 exam.