DOP-C02 Free Practice Test

A development team manually builds an artifact locally and then places it in an Amazon S3 bucket. The application has a local cache that must be cleared when a deployment occurs. The team runs a command to do this downloads the artifact from Amazon S3 and unzips the artifact to complete the deployment.
A DevOps team wants to migrate to a CI/CD process and build in checks to stop and roll back the deployment when a failure occurs. This requires the team to track the progression of the deployment.
Which combination of actions will accomplish this? (Select THREE)

1. A. Allow developers to check the code into a code repository Using Amazon EventBridge on every pull into the mam branch invoke an AWS Lambda function to build the artifact and store it in Amazon S3.
2. B. Create a custom script to clear the cache Specify the script in the Beforelnstall lifecycle hook in the AppSpec file.
3. C. Create user data for each Amazon EC2 instance that contains the clear cache script Once deployed test the application If it is not successful deploy it again.
4. D. Set up AWS CodePipeline to deploy the application Allow developers to check the code into a code repository as a source tor the pipeline.
5. E. Use AWS CodeBuild to build the artifact and place it in Amazon S3 Use AWS CodeDeploy to deploy the artifact to Amazon EC2 instances.
6. F. Use AWS Systems Manager to fetch the artifact from Amazon S3 and deploy it to all the instances.

Correct Answer: BDE

A production account has a requirement that any Amazon EC2 instance that has been logged in to manually must be terminated within 24 hours. All applications in the production account are using Auto Scaling groups with the Amazon CloudWatch Logs agent configured.
How can this process be automated?

1. A. Create a CloudWatch Logs subscription to an AWS Step Functions applicatio
2. B. Configure an AWS Lambda function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissione
3. C. Create an Amazon EventBridge rule to invoke a second Lambda function once a day that will terminate all instances with this tag.
4. D. Create an Amazon CloudWatch alarm that will be invoked by the login even
5. E. Send the notification to an Amazon Simple Notification Service (Amazon SNS) topic that the operations team is subscribed to, and have them terminate the EC2 instance within 24 hours.
6. F. Create an Amazon CloudWatch alarm that will be invoked by the login even
7. G. Configure the alarm to send to an Amazon Simple Queue Service (Amazon SQS) queu
8. H. Use a group of worker instances to process messages from the queue, which then schedules an Amazon EventBridge rule to be invoked.
9. I. Create a CloudWatch Logs subscription to an AWS Lambda functio
10. J. Configure the function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned.Create an Amazon EventBridge rule to invoke a daily Lambda function that terminates all instances with this tag.

Correct Answer: D
"You can use subscriptions to get access to a real-time feed of log events from CloudWatch Logs and have it delivered to other services such as an Amazon Kinesis stream, an Amazon Kinesis Data Firehose stream, or AWS Lambda for custom processing, analysis, or loading to other systems. When log events are sent to the receiving service, they are Base64 encoded and compressed with the gzip format." See https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Subscriptions.html

An IT team has built an AWS CloudFormation template so others in the company can quickly and reliably deploy and terminate an application. The template creates an Amazon EC2 instance with a user data script to install the application and an Amazon S3 bucket that the application uses to serve static webpages while it is running.
All resources should be removed when the CloudFormation stack is deleted. However, the team observes that CloudFormation reports an error during stack deletion, and the S3 bucket created by the stack is not deleted.
How can the team resolve the error in the MOST efficient manner to ensure that all resources are deleted without errors?

1. A. Add a DelelionPolicy attribute to the S3 bucket resource, with the value Delete forcing the bucket to be removed when the stack is deleted.
2. B. Add a custom resource with an AWS Lambda function with the DependsOn attribute specifying the S3bucket, and an IAM rol
3. C. Write the Lambda function to delete all objects from the bucket when RequestType is Delete.
4. D. Identify the resource that was not delete
5. E. Manually empty the S3 bucket and then delete it.
6. F. Replace the EC2 and S3 bucket resources with a single AWS OpsWorks Stacks resourc
7. G. Define a custom recipe for the stack to create and delete the EC2 instance and the S3 bucket.

Correct Answer: B
https://aws.amazon.com/premiumsupport/knowledge-center/cloudformation-s3-custom-resources/

A company wants to use a grid system for a proprietary enterprise m-memory data store on top of AWS. This system can run in multiple server nodes in any Linux-based distribution. The system must be able to reconfigure the entire cluster every time a node is added or removed. When adding or removing nodes an
/etc./cluster/nodes config file must be updated listing the IP addresses of the current node members of that cluster.
The company wants to automate the task of adding new nodes to a cluster. What can a DevOps engineer do to meet these requirements?

1. A. Use AWS OpsWorks Stacks to layer the server nodes of that cluste
2. B. Create a Chef recipe that populates the content of the 'etc./cluster/nodes config file and restarts the service by using the current members of the laye
3. C. Assign that recipe to the Configure lifecycle event.
4. D. Put the file nodes config in version contro
5. E. Create an AWS CodeDeploy deployment configuration and deployment group based on an Amazon EC2 tag value for thecluster node
6. F. When adding a new node to the cluster update the file with all tagged instances and make a commit in version contro
7. G. Deploy the new file and restart the services.
8. H. Create an Amazon S3 bucket and upload a version of the /etc./cluster/nodes config file Create a crontab script that will poll for that S3 file and download it frequentl
9. I. Use a process manager such as Monit or system, to restart the cluster services when it detects that the new file was modifie
10. J. When adding a node to the cluster edit the file's most recent members Upload the new file to the S3 bucket.
11. K. Create a user data script that lists all members of the current security group of the cluster and automatically updates the /etc/cluster/. nodes confi
12. L. Tile whenever a new instance is added to the cluster.

Correct Answer: A
You can run custom recipes manually, but the best approach is usually to have AWS OpsWorks Stacks run them automatically. Every layer has a set of built-in recipes assigned each of five lifecycle events—Setup, Configure, Deploy, Undeploy, and Shutdown. Each time an event occurs for an instance, AWS OpsWorks Stacks runs the associated recipes for each of the instance's layers, which handle the corresponding tasks. For example, when an instance finishes booting, AWS OpsWorks Stacks triggers a Setup event. This event runs the associated layer's Setup recipes, which typically handle tasks such as installing and configuring packages

A company has many applications. Different teams in the company developed the applications by using multiple languages and frameworks. The applications run on premises and on different servers with different operating systems. Each team has its own release protocol and process. The company wants to reduce the complexity of the release and maintenance of these applications.
The company is migrating its technology stacks, including these applications, to AWS. The company wants centralized control of source code, a consistent and automatic delivery pipeline, and as few maintenance tasks as possible on the underlying infrastructure.
What should a DevOps engineer do to meet these requirements?

1. A. Create one AWS CodeCommit repository for all application
2. B. Put each application's code in a different branc
3. C. Merge the branches, and use AWS CodeBuild to build the application
4. D. Use AWS CodeDeploy to deploy the applications to one centralized application server.
5. E. Create one AWS CodeCommit repository for each of the application
6. F. Use AWS CodeBuild to build the applications one at a tim
7. G. Use AWS CodeDeploy to deploy the applications to one centralized application server.
8. H. Create one AWS CodeCommit repository for each of the application
9. I. Use AWS CodeBuild to build the applications one at a time and to create one AMI for each serve
10. J. Use AWS CloudFormation StackSets to automatically provision and decommission Amazon EC2 fleets by using these AMIs.
11. K. Create one AWS CodeCommit repository for each of the application
12. L. Use AWS CodeBuild to build one Docker image for each application in Amazon Elastic Container Registry (Amazon ECR). Use AWS CodeDeploy to deploy the applications to Amazon Elastic Container Service (Amazon ECS) on infrastructure that AWS Fargate manages.

Correct Answer: D
because of "as few maintenance tasks as possible on the underlying infrastructure". Fargate does that better than "one centralized application server"