Amazon Web ServicesProfessional levelDOP-C02Page 4 of 5

DOP-C02 exam dumps: questions 301 to 400 of 410

Page 4 of the free DOP-C02 question bank for the AWS Certified DevOps Engineer - Professional exam. Questions 301 to 400 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated December 2024

Free DOP-C02 practice questions

Questions 301 to 305 of 410

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

DOP-C02 Question 301

Select 3

Your company is running a multi-account AWS environment with centralized monitoring and incident handling. To ensure proactive responses to critical events, you need to design a solution that captures operational issues such as AWS service outages, unauthorized API calls, and scheduled maintenance updates, and routes them to your incident response team via an Amazon SNS topic. Which of the following combination of services can be used to achieve this?

  1. A

    Amazon EventBridge for capturing AWS Health events and routing them to an SNS topic

  2. B

    AWS CloudTrail for capturing unauthorized API calls and routing them to an SNS topic

  3. C

    AWS Health Dashboard for monitoring AWS service outages and sending notifications to an SNS topic

  4. D

    Amazon EventBridge for forwarding scheduled maintenance events from AWS Health to an SNS topic

  5. E

    AWS Config for monitoring compliance violations and triggering notifications to an SNS topic

Show answer and explanation

Correct answers: A, B, D

Explanation

A combination of Amazon EventBridge and AWS CloudTrail allows you to capture and process key operational events such as AWS Health updates, unauthorized API calls, and scheduled maintenance events. EventBridge is particularly effective for integrating with AWS Health and routing these events to an SNS topic, while CloudTrail is essential for tracking API activity, including security-related incidents. AWS Config and the AWS Health Dashboard are not suitable for this scenario as they do not directly generate or route the required events to SNS topics.

  • A. Correct.

    Amazon EventBridge is ideal for capturing AWS Health events, such as service outages and maintenance updates, and routing them to an SNS topic for further processing. This is a correct option.

  • B. Correct.

    AWS CloudTrail captures API activity, including unauthorized API calls. These events can be forwarded to an SNS topic for alerting. This is a correct option.

  • C. Incorrect.

    The AWS Health Dashboard provides a visual interface for monitoring AWS service outages and maintenance events, but it does not directly integrate with SNS for notifications. This is an incorrect option.

  • D. Correct.

    Amazon EventBridge can forward maintenance events from AWS Health to an SNS topic, enabling proactive communication for scheduled downtimes. This is a correct option.

  • E. Incorrect.

    AWS Config is used for compliance and configuration monitoring, not for capturing operational events like AWS Health updates or unauthorized API calls. This is an incorrect option.

DOP-C02 Question 302

Select 3

Your organization uses multiple AWS services to monitor and respond to events across your infrastructure. Recently, a business-critical application experienced downtime, and your team wants to build an automated solution to detect AWS Health events, process them, and notify the appropriate teams via an internal messaging system. Which combination of services should you use to implement this solution?

  1. A

    Amazon EventBridge to capture AWS Health events and route them to an AWS Lambda function

  2. B

    AWS CloudTrail to directly trigger notifications for AWS Health events

  3. C

    AWS Lambda to process AWS Health events and send notifications to the internal messaging system

  4. D

    Amazon SNS to capture AWS Health events and forward them to EventBridge

  5. E

    AWS Health APIs to access detailed information about the AWS Health events

Show answer and explanation

Correct answers: A, C, E

Explanation

To implement an automated solution for detecting AWS Health events, EventBridge is used to capture and route the events. Lambda processes the events and can execute custom logic, such as sending notifications to the internal messaging system. AWS Health APIs provide detailed event information that can be queried to enhance the notifications. This combination ensures an automated, scalable approach to handling AWS Health events.

  • A. Correct.

    Correct: Amazon EventBridge can capture AWS Health events in near real-time and route them to various targets like AWS Lambda for further processing.

  • B. Incorrect.

    Incorrect: AWS CloudTrail logs API activity but does not directly support triggering notifications for AWS Health events. CloudTrail is better suited for auditing and governance purposes.

  • C. Correct.

    Correct: AWS Lambda can process the events captured by EventBridge and execute custom logic, such as sending notifications to an internal messaging system.

  • D. Incorrect.

    Incorrect: Amazon SNS is used for publishing messages to subscribers but does not natively capture AWS Health events. EventBridge should be used to capture such events.

  • E. Correct.

    Correct: The AWS Health APIs provide detailed information about AWS Health events, which can be queried as part of the solution to enrich notifications.

DOP-C02 Question 303

Select 2

You are designing an event-driven architecture for a real-time order processing system. When a new order is placed, it triggers an order validation process and a payment processing workflow simultaneously. You also want to ensure that a failure in either process does not affect the other and that events are processed asynchronously. Which combination of AWS services should you use to implement this architecture?

  1. A

    Amazon SNS and Amazon SQS

  2. B

    Amazon Kinesis Data Streams and AWS Lambda

  3. C

    Amazon EventBridge and Amazon SQS

  4. D

    AWS Step Functions and Amazon Kinesis Data Streams

  5. E

    Amazon SNS and AWS Step Functions

Show answer and explanation

Correct answers: A, C

Explanation

To implement an event-driven architecture that supports fan-out and asynchronous processing, you can use Amazon SNS with Amazon SQS or Amazon EventBridge with Amazon SQS. Both combinations allow events to be routed to multiple processing workflows (order validation and payment processing) independently and asynchronously. SNS and EventBridge handle the fan-out, while SQS ensures decoupling and reliable delivery of messages to each workflow.

  • A. Correct.

    Amazon SNS and Amazon SQS is correct because SNS can fan out messages to multiple SQS queues, enabling parallel processing of the order validation and payment workflows. SQS ensures that events are processed asynchronously.

  • B. Incorrect.

    Amazon Kinesis Data Streams and AWS Lambda is incorrect because Kinesis is more suited for high-throughput event streaming rather than fan-out scenarios. While Lambda can process events from Kinesis, it does not natively support the fan-out model required here.

  • C. Correct.

    Amazon EventBridge and Amazon SQS is correct because EventBridge can route events to multiple SQS queues, ensuring asynchronous and independent processing of workflows.

  • D. Incorrect.

    AWS Step Functions and Amazon Kinesis Data Streams is incorrect because Step Functions are designed for orchestrating workflows, not for implementing fan-out or asynchronous processing. Kinesis, in this context, is not relevant for the fan-out requirement.

  • E. Incorrect.

    Amazon SNS and AWS Step Functions is incorrect because although SNS can fan out messages, Step Functions is not well-suited for independent and asynchronous processing of events. It is primarily designed for orchestrating workflows in a more synchronous manner.

DOP-C02 Question 304

Single answer

Your team is building a real-time analytics platform for processing customer orders. The architecture requires the events from an order processing system to be processed by multiple downstream services simultaneously, such as a billing service, a notification service, and a machine learning service for fraud detection. Each service must process the events independently and at its own pace. Which AWS service or combination of services would best enable this fan-out pattern?

  1. A

    Amazon SNS with multiple Amazon SQS queues subscribed to the topic

  2. B

    Amazon Kinesis Data Streams with multiple consumers

  3. C

    Amazon S3 Event Notifications with Lambda functions for each downstream service

  4. D

    Amazon MQ for message fan-out to multiple consumers

Show answer and explanation

Correct answer: A

Explanation

The best solution for implementing a fan-out pattern in AWS is to use Amazon SNS in combination with multiple Amazon SQS queues. SNS allows for the publication of messages to a topic, and each subscribed SQS queue can independently receive and process the message. This approach provides scalability, decoupling, and fault tolerance, making it ideal for event-driven architectures where multiple downstream services need to process the same event at their own pace.

  • A. Correct.

    Correct. Amazon SNS with multiple Amazon SQS queues allows you to implement a fan-out pattern where a single event is published to an SNS topic, and each subscribed SQS queue can independently receive and process the event. This meets the requirement for independent processing by downstream services.

  • B. Incorrect.

    Incorrect. While Amazon Kinesis Data Streams can support multiple consumers, it is more suited for real-time streaming data where consumers are consuming from a shared stream. It does not inherently support the fan-out pattern as effectively as SNS and SQS for this scenario.

  • C. Incorrect.

    Incorrect. Amazon S3 Event Notifications are specific to S3 bucket events and are not designed for generic event-driven architectures. This option does not fit the described use case.

  • D. Incorrect.

    Incorrect. While Amazon MQ supports message brokering and multiple consumers, it is typically used for traditional message queuing scenarios and lacks the scalability and simplicity of the SNS-SQS combination for event fan-out.

DOP-C02 Question 305

Single answer

You are designing a serverless event-driven architecture for a video processing application on AWS. When a new video is uploaded to an S3 bucket, metadata about the video should be processed and stored in DynamoDB, and the video itself should be transcoded into multiple formats. Both tasks (metadata processing and transcoding) need to happen concurrently and independently. Which solution would best achieve this architecture?

  1. A

    Configure an S3 event notification to directly invoke two AWS Lambda functions: one for metadata processing and the other for transcoding.

  2. B

    Use an S3 event notification to publish an event to an Amazon SNS topic, and subscribe two AWS Lambda functions to the topic.

  3. C

    Use an S3 event notification to send messages to an Amazon SQS queue, and have two AWS Lambda functions poll the queue.

  4. D

    Use an S3 event notification to trigger a Step Functions workflow to orchestrate the metadata processing and transcoding tasks.

Show answer and explanation

Correct answer: B

Explanation

The application requires a fan-out architecture to process two tasks (metadata processing and transcoding) concurrently and independently when a new video is uploaded to S3. Amazon SNS is the best service for implementing a fan-out pattern, as it allows multiple subscribers (Lambda functions) to independently process the same event in parallel. Other options either lack the ability to fan out events or introduce unnecessary complexity.

  • A. Incorrect.

    This option is not ideal because S3 does not allow simultaneous invocation of multiple Lambda functions for a single event. You would need a fan-out mechanism like SNS to achieve concurrent and independent processing.

  • B. Correct.

    This is the correct solution. SNS enables a fan-out pattern where multiple subscribers (in this case, Lambda functions) can independently process the same event concurrently. This matches the requirement for both metadata processing and transcoding to happen independently.

  • C. Incorrect.

    Using SQS would require additional complexity. SQS is designed for message queuing and would not natively support the fan-out pattern required for this use case. Each Lambda function would need independent polling logic.

  • D. Incorrect.

    Step Functions is more suitable for orchestrating sequential or interdependent tasks. In this scenario, the tasks are independent and need to run concurrently, which is better handled by SNS.

Timed practice exam

Take a DOP-C02 practice test under exam conditions

75 questions in 180 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

DOP-C02 practice questions 301 to 400 of 410

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 5 pages of up to 100 questions.

  1. 301.Your company is running a multi-account AWS environment with centralized monitoring and incident handling. To...
  2. 302.Your organization uses multiple AWS services to monitor and respond to events across your infrastructure....
  3. 303.You are designing an event-driven architecture for a real-time order processing system. When a new order is...
  4. 304.Your team is building a real-time analytics platform for processing customer orders. The architecture...
  5. 305.You are designing a serverless event-driven architecture for a video processing application on AWS. When a...
  6. 306.You are designing an event-driven architecture to process thousands of e-commerce order events per second....
  7. 307.Your company uses an Auto Scaling group (ASG) to maintain a fleet of EC2 instances for a critical...
  8. 308.Your company uses AWS CloudFormation to manage infrastructure as code. A recent security audit reveals that...
  9. 309.Your company uses AWS Auto Scaling to manage a fleet of EC2 instances that support a highly available web...
  10. 310.Your organization uses an Auto Scaling group (ASG) in a production environment to handle traffic spikes for a...
  11. 311.Your company is using a CI/CD pipeline with AWS CodePipeline to deploy an application to an Amazon ECS...
  12. 312.Your organization is running a critical web application hosted on Amazon ECS using the Fargate launch type....
  13. 313.You are managing an application that is running on Amazon ECS using the Fargate launch type. The application...
  14. 314.Your team is managing an application hosted on Amazon ECS using the Fargate launch type. Recently, the...
  15. 315.Your organization manages a fleet of EC2 instances running a web application. You need to ensure that the...
  16. 316.Your organization manages a fleet of EC2 instances that scale dynamically based on traffic. You are tasked...
  17. 317.Your organization is running a fleet of EC2 instances behind an Application Load Balancer (ALB) to handle web...
  18. 318.Your organization is managing a fleet of EC2 instances running a web application. The fleet is configured to...
  19. 319.Your organization has a compliance requirement to ensure that all Amazon S3 buckets are encrypted using...
  20. 320.Your organization has recently adopted AWS Config to ensure compliance with regulatory policies. You are...
  21. 321.Your organization uses AWS Config to ensure compliance across multiple AWS accounts within an AWS...
  22. 322.Your organization uses AWS Config to ensure compliance with security and governance policies. You are tasked...
  23. 323.An organization is running a highly available web application in AWS using an Auto Scaling group for EC2...
  24. 324.Your organization runs a mission-critical application on an Amazon ECS cluster with services using the...
  25. 325.You are managing an application hosted on Amazon ECS using the Fargate launch type. Recently, one of the ECS...
  26. 326.A DevOps engineer is responsible for managing a web application hosted on Amazon ECS using Fargate. The...
  27. 327.Your company is using AWS to host a web application that serves millions of users globally. The application...
  28. 328.Your organization is migrating an application to AWS. The application requires highly available and secure...
  29. 329.Your organization is running a distributed application on Amazon ECS using the Fargate launch type. The...
  30. 330.Your organization is running a CI/CD pipeline in AWS that deploys containerized applications to Amazon ECS...
  31. 331.Your team has developed a microservices application deployed on Amazon ECS using Fargate. Recently, users...
  32. 332.Your team has deployed a microservices application on Amazon ECS using Fargate. Recently, users have reported...
  33. 333.Your team has deployed a microservices-based application on AWS using Amazon ECS with Fargate. Recently,...
  34. 334.Your organization has a distributed microservices-based application running on Amazon ECS with an Application...
  35. 335.Your company runs a critical application on AWS, and your DevOps team is responsible for ensuring high...
  36. 336.Your organization runs a mission-critical application on AWS. Recently, you noticed degraded performance...
  37. 337.Your organization has a critical application running on EC2 instances. Recently, one of the instances stopped...
  38. 338.Your organization uses multiple AWS services on a global scale, and you are responsible for monitoring and...
  39. 339.Your team recently updated the configuration of an Amazon EC2 Auto Scaling group to use a new AMI. Shortly...
  40. 340.Your team manages a CI/CD pipeline deployed on AWS, which uses AWS CodePipeline, AWS CodeBuild, and Amazon...
  41. 341.Your team is operating a web application running on Amazon ECS with Fargate. Recently, the application has...
  42. 342.You are managing a production environment running on AWS with multiple microservices deployed using Amazon...
  43. 343.An organization has implemented an AWS environment for running multiple critical applications. They must...
  44. 344.Your company operates a highly regulated application that processes sensitive customer data. The application...
  45. 345.Your company is running an application on Amazon ECS with tasks deployed in an Auto Scaling group behind an...
  46. 346.Your organization is running a multi-account AWS environment managed through AWS Organizations. As part of...
  47. 347.Your organization has multiple AWS accounts managed under AWS Organizations. To simplify identity management,...
  48. 348.Your organization has hundreds of AWS accounts managed under a single AWS Organizations setup. You need to...
  49. 349.Your organization uses AWS Organizations to manage multiple AWS accounts. The security team has mandated that...
  50. 350.Your organization has adopted AWS Organizations to manage multiple AWS accounts. The security team has...
  51. 351.Your team is managing a CI/CD pipeline in AWS CodePipeline. During a recent deployment, the application...
  52. 352.Your organization uses AWS CodePipeline for continuous integration and deployment. During a deployment to a...
  53. 353.Your organization is running a fleet of EC2 instances behind an Auto Scaling group. These instances process...
  54. 354.Your company runs a large-scale e-commerce platform on AWS, and you are tasked with optimizing the deployment...
  55. 355.Your organization uses AWS to host a multi-tier application. You need to design an IAM strategy that ensures...
  56. 356.An organization is building a serverless application on AWS that processes customer data and sends...
  57. 357.A company is building an application that requires both human users and machine processes to access AWS...
  58. 358.Your company has implemented an application that runs on Amazon EC2 instances within an Auto Scaling group....
  59. 359.Your organization has a workforce that uses a centralized identity provider (IdP) such as Active Directory...
  60. 360.Your organization uses an on-premises Active Directory (AD) to manage user identities. You have been tasked...
  61. 361.Your organization wants to enable its employees to access the AWS Management Console and other AWS resources...
  62. 362.Your organization wants to enable single sign-on (SSO) for its employees to access AWS resources. The...
  63. 363.Your organization uses AWS Identity and Access Management (IAM) to manage user and role permissions. You are...
  64. 364.Your organization uses AWS Identity and Access Management (IAM) to manage permissions. As a DevOps engineer,...
  65. 365.Your organization wants to allow a junior DevOps engineer to create IAM roles for EC2 instances, but the...
  66. 366.Your organization has a centralized AWS account that manages IAM roles and enforces strict security policies....
  67. 367.Your organization uses AWS Organizations with Service Control Policies (SCPs) to enforce governance controls....
  68. 368.Your organization has implemented Service Control Policies (SCPs) to manage permissions across multiple...
  69. 369.Your organization uses AWS Organizations to manage multiple accounts. As a DevOps Engineer, you are tasked...
  70. 370.Your organization has implemented AWS Organizations and is using Service Control Policies (SCPs) to enforce...
  71. 371.Your organization requires that all S3 buckets storing sensitive data must be encrypted, and any unencrypted...
  72. 372.Your organization handles sensitive customer data and has compliance requirements that mandate encryption of...
  73. 373.You are managing an AWS environment for a financial services company that requires strict adherence to...
  74. 374.Your company processes sensitive customer data and must ensure compliance with data protection regulations....
  75. 375.Your organization is running a large-scale application on AWS, and you are responsible for ensuring the...
  76. 376.Your company has a multi-account AWS environment managed using AWS Organizations. You are tasked with...
  77. 377.Your company is scaling its CI/CD pipeline and requires a solution to ensure secure access to sensitive...
  78. 378.Your company has a CI/CD pipeline set up in AWS CodePipeline. The pipeline deploys an application to an Auto...
  79. 379.Your company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The...
  80. 380.Your organization is hosting a web application on Amazon EC2 instances behind an Application Load Balancer...
  81. 381.Your company runs a web application that is exposed to the internet and processes sensitive user data. It is...
  82. 382.Your organization hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB)...
  83. 383.You are managing an e-commerce application hosted on AWS with a load balancer distributing traffic to...
  84. 384.Your organization uses AWS Certificate Manager (ACM) to manage SSL/TLS certificates for multiple...
  85. 385.Your organization is hosting a public-facing application on Amazon Elastic Load Balancer (ELB) and requires...
  86. 386.Your company hosts a web application on Amazon Elastic Kubernetes Service (EKS) behind an Application Load...
  87. 387.Your organization stores sensitive customer data in Amazon S3. You need to ensure that all data is encrypted...
  88. 388.A company is migrating sensitive financial data to AWS and is required to comply with strict regulatory...
  89. 389.Your organization is migrating sensitive financial data to AWS. Regulatory compliance mandates that the data...
  90. 390.Your organization has recently adopted a multi-account strategy in AWS, and you are responsible for ensuring...
  91. 391.Your company has a multi-account AWS environment and wants to implement centralized security monitoring and...
  92. 392.Your organization is running multiple workloads on AWS and requires a centralized security monitoring and...
  93. 393.Your company has a multi-account AWS environment managed via AWS Organizations. You are tasked with...
  94. 394.Your organization has a requirement to monitor and audit all API calls made to AWS resources for security and...
  95. 395.Your organization uses an AWS CodePipeline to automate CI/CD for a critical application. The deployment stage...
  96. 396.Your organization is using an Auto Scaling group (ASG) with Amazon EC2 instances behind an Application Load...
  97. 397.Your company runs a containerized microservices application on Amazon ECS using the Fargate launch type. The...
  98. 398.Your company hosts a containerized application on Amazon ECS using the Fargate launch type. The application...
  99. 399.Your organization has implemented a multi-account AWS architecture and is looking to enhance its security...
  100. 400.Your organization uses a multi-account AWS environment and has recently completed an internal security...