Free Amazon DOP-C01 Sample Questions

Question 1

A DevOps Engineer just joined a new company that is already running workloads onAmazon EC2 instances. AWS has been adopted incrementally with no central governance.The Engineer must now assess how well the existing deployments comply with thefollowing requirements:*EC2 instances are running only approved AMIs.*Amazon EBS volumes are encrypted.*EC2 instances have an Owner tag.*Root login over SSH is disabled on EC2 instances.Which services should the Engineer use to perform this assessment with the LEASTamount of effort? (Select TWO.)

A. AWS Config
B. Amazon GuardDuty
C. AWS System Manager
D. AWS Directory Service
E. Amazon Inspector

Answer: A,E

Question 2

A company's application is currently deployed to a single AWS Region. Recently, the company opened a new office on a different continent. The users in the new office are experiencing high latency. The company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) and uses Amazon DynamoDB as the database layer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones. A DevOps Engineer is tasked with minimizing application response times and improving availability for users in both Regions.Which combination of actions should be taken to address the latency issues? (Choose three.)  

A. Create a new DynamoDB table in the new Region with cross-Region replication enabled.
B. Create new ALB and Auto Scaling group global resources and configure the new ALB todirect traffic to the new Auto Scaling group.
C. Create new ALB and Auto Scaling group resources in the new Region and configure thenew ALB to direct traffic to the new Auto Scaling group.
D. Create Amazon Route 53 records, health checks, and latency-based routing policies toroute to the ALB. 
E. Create Amazon Route 53 aliases, health checks, and failover routing policies to route to the ALB.
F. Convert the DynamoDB table to a global table.

Answer: C,D,F

Question 3

A company has multiple child accounts that are part of an organization in AWS Organizations. The security team needs to review every Amazon EC2 security group and their inbound and outbound rules. The security team wants to programmatically retrieve this information from the child accounts using an AWS Lambda function in the master account of the organization. Which combination of access changes will meet these requirements? (Select THREE.)  

A. Create a trust relationship that allows users in the child accounts to assume the masteraccount IAM role.
B. Create a trust relationship that allows users in the master account to assume the IAMroles of the child accounts.
C. Create an IAM role in each child account that has access to theAmazonEC2ReadOnlyAccess managed policy.
D. Create an IAM role in each child account to allow the sts:AssumeRole action against themaster account IAM role's ARN.
E. Create an IAM role in the master account that allows the sts:AssumeRole action againstthe child account IAM role's ARN.
F. Create an IAM role in the master account that has access to theAmazonEC2ReadOnlyAccess managed policy.

Answer: A,D,F

Question 4

An Information Security policy requires that all publicly accessible systems be patched with critical OS security patches within 24 hours of a patch release. All instances are tagged with the Patch Group key set to 0. Two new AWS Systems Manager patch baselines for Windows and Red Hat Enterprise Linux (RHEL) with zero-day delay for security patches of critical severity were created with an auto-approval rule. Patch Group 0 has been associated with the new patch baselines. Which two steps will automate patch compliance and reporting? (Select TWO.) 

A. Create an AWS Systems Manager Maintenance Window and add a target with PatchGroup 0. Add a task that runs the AWS-InstallWindowsUpdates document with a dailyschedule.
B. Create an AWS Systems Manager Maintenance Window with a daily schedule and adda target with Patch Group 0. Add a task that runs the AWS-RunPatchBaseline documentwith the Install action.
C. Create an AWS Systems Manager State Manager configuration. Associate the AWSRunPatchBaseline task with the configuration and add a target with Patch Group 0.
D. Create an AWS Systems Manager Maintenance Window and add a target with PatchGroup 0. Add a task that runs the AWS-ApplyPatchBaseline document with a dailyschedule.
E. Use the AWS Systems Manager Run Command to associate the AWSApplyPatchBaseline document with instances tagged with Patch Group 0.

Answer: A,C

Question 5

A company runs an application with an Amazon EC2 and on-premises configuration. ADevOps engineer needs to standardize patching across both environments. Companypolicy dictates that patching only happens during non-business hours.Which combination of actions will meet these requirements? (Select THREE.)

A. Add the physical machines into AWS Systems Manager using Systems Manager Hybrid Activations. 
B. Attach an IAM role to the EC2 instances, allowing them to be managed by AWSSystems Manager.
C. Create IAM access keys for the on-premises machines to interact with AWS SystemsManager.
D. Execute an AWS Systems Manager Automation document to patch the systems everyhour.
E. Use Amazon CloudWatch Events scheduled events to schedule a patch window.
F. Use AWS Systems Manager Maintenance Windows to schedule a patch window.

Answer: A,B,F