DOP-C02 Free Practice Test

An IT team has built an AWS CloudFormation template so others in the company can quickly and reliably deploy and terminate an application. The template creates an Amazon EC2 instance with a user data script to install the application and an Amazon S3 bucket that the application uses to serve static webpages while it is running.
All resources should be removed when the CloudFormation stack is deleted. However, the team observes that CloudFormation reports an error during stack deletion, and the S3 bucket created by the stack is not deleted.
How can the team resolve the error in the MOST efficient manner to ensure that all resources are deleted without errors?

1. A. Add a DelelionPolicy attribute to the S3 bucket resource, with the value Delete forcing the bucket to be removed when the stack is deleted.
2. B. Add a custom resource with an AWS Lambda function with the DependsOn attribute specifying the S3bucket, and an IAM rol
3. C. Write the Lambda function to delete all objects from the bucket when RequestType is Delete.
4. D. Identify the resource that was not delete
5. E. Manually empty the S3 bucket and then delete it.
6. F. Replace the EC2 and S3 bucket resources with a single AWS OpsWorks Stacks resourc
7. G. Define a custom recipe for the stack to create and delete the EC2 instance and the S3 bucket.

Correct Answer: B
https://aws.amazon.com/premiumsupport/knowledge-center/cloudformation-s3-custom-resources/

A company wants to use a grid system for a proprietary enterprise m-memory data store on top of AWS. This system can run in multiple server nodes in any Linux-based distribution. The system must be able to reconfigure the entire cluster every time a node is added or removed. When adding or removing nodes an
/etc./cluster/nodes config file must be updated listing the IP addresses of the current node members of that cluster.
The company wants to automate the task of adding new nodes to a cluster. What can a DevOps engineer do to meet these requirements?

1. A. Use AWS OpsWorks Stacks to layer the server nodes of that cluste
2. B. Create a Chef recipe that populates the content of the 'etc./cluster/nodes config file and restarts the service by using the current members of the laye
3. C. Assign that recipe to the Configure lifecycle event.
4. D. Put the file nodes config in version contro
5. E. Create an AWS CodeDeploy deployment configuration and deployment group based on an Amazon EC2 tag value for thecluster node
6. F. When adding a new node to the cluster update the file with all tagged instances and make a commit in version contro
7. G. Deploy the new file and restart the services.
8. H. Create an Amazon S3 bucket and upload a version of the /etc./cluster/nodes config file Create a crontab script that will poll for that S3 file and download it frequentl
9. I. Use a process manager such as Monit or system, to restart the cluster services when it detects that the new file was modifie
10. J. When adding a node to the cluster edit the file's most recent members Upload the new file to the S3 bucket.
11. K. Create a user data script that lists all members of the current security group of the cluster and automatically updates the /etc/cluster/. nodes confi
12. L. Tile whenever a new instance is added to the cluster.

Correct Answer: A
You can run custom recipes manually, but the best approach is usually to have AWS OpsWorks Stacks run them automatically. Every layer has a set of built-in recipes assigned each of five lifecycle events—Setup, Configure, Deploy, Undeploy, and Shutdown. Each time an event occurs for an instance, AWS OpsWorks Stacks runs the associated recipes for each of the instance's layers, which handle the corresponding tasks. For example, when an instance finishes booting, AWS OpsWorks Stacks triggers a Setup event. This event runs the associated layer's Setup recipes, which typically handle tasks such as installing and configuring packages

A company has many applications. Different teams in the company developed the applications by using multiple languages and frameworks. The applications run on premises and on different servers with different operating systems. Each team has its own release protocol and process. The company wants to reduce the complexity of the release and maintenance of these applications.
The company is migrating its technology stacks, including these applications, to AWS. The company wants centralized control of source code, a consistent and automatic delivery pipeline, and as few maintenance tasks as possible on the underlying infrastructure.
What should a DevOps engineer do to meet these requirements?

1. A. Create one AWS CodeCommit repository for all application
2. B. Put each application's code in a different branc
3. C. Merge the branches, and use AWS CodeBuild to build the application
4. D. Use AWS CodeDeploy to deploy the applications to one centralized application server.
5. E. Create one AWS CodeCommit repository for each of the application
6. F. Use AWS CodeBuild to build the applications one at a tim
7. G. Use AWS CodeDeploy to deploy the applications to one centralized application server.
8. H. Create one AWS CodeCommit repository for each of the application
9. I. Use AWS CodeBuild to build the applications one at a time and to create one AMI for each serve
10. J. Use AWS CloudFormation StackSets to automatically provision and decommission Amazon EC2 fleets by using these AMIs.
11. K. Create one AWS CodeCommit repository for each of the application
12. L. Use AWS CodeBuild to build one Docker image for each application in Amazon Elastic Container Registry (Amazon ECR). Use AWS CodeDeploy to deploy the applications to Amazon Elastic Container Service (Amazon ECS) on infrastructure that AWS Fargate manages.

Correct Answer: D
because of "as few maintenance tasks as possible on the underlying infrastructure". Fargate does that better than "one centralized application server"

A development team wants to use AWS CloudFormation stacks to deploy an application. However, the developer IAM role does not have the required permissions to provision the resources that are specified in the AWS CloudFormation template. A DevOps engineer needs to implement a solution that allows the developers to deploy the stacks. The solution must follow the principle of least privilege.
Which solution will meet these requirements?

1. A. Create an IAM policy that allows the developers to provision the required resource
2. B. Attach the policy to the developer IAM role.
3. C. Create an IAM policy that allows full access to AWS CloudFormatio
4. D. Attach the policy to the developer IAM role.
5. E. Create an AWS CloudFormation service role that has the required permission
6. F. Grant the developer IAM role a cloudformation:* actio
7. G. Use the new service role during stack deployments.
8. H. Create an AWS CloudFormation service role that has the required permission
9. I. Grant the developer IAM role the iam:PassRole permissio
10. J. Use the new service role during stack deployments.

Correct Answer: D
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-servicerole.html

A company requires its developers to tag all Amazon Elastic Block Store (Amazon EBS) volumes in an account to indicate a desired backup frequency. This requirement Includes EBS volumes that do not require backups. The company uses custom tags named Backup_Frequency that have values of none, dally, or weekly that correspond to the desired backup frequency. An audit finds that developers are occasionally not tagging the EBS volumes.
A DevOps engineer needs to ensure that all EBS volumes always have the Backup_Frequency tag so that the company can perform backups at least weekly unless a different value is specified.
Which solution will meet these requirements?

1. A. Set up AWS Config in the accoun
2. B. Create a custom rule that returns a compliance failure for all Amazon EC2 resources that do not have a Backup Frequency tag applie
3. C. Configure a remediation action that uses a custom AWS Systems Manager Automation runbook to apply the Backup_Frequency tag with a value of weekly.
4. D. Set up AWS Config in the accoun
5. E. Use a managed rule that returns a compliance failure for EC2::Volume resources that do not have a Backup Frequency tag applie
6. F. Configure a remediation action that uses a custom AWS Systems Manager Automation runbook to apply the Backup_Frequency tag with a value of weekly.
7. G. Turn on AWS CloudTrail in the accoun
8. H. Create an Amazon EventBridge rule that reacts to EBS CreateVolume event
9. I. Configure a custom AWS Systems Manager Automation runbook to apply the Backup_Frequency tag with a value of weekl
10. J. Specify the runbook as the target of the rule.
11. K. Turn on AWS CloudTrail in the accoun
12. L. Create an Amazon EventBridge rule that reacts to EBS CreateVolume events or EBS ModifyVolume event
13. M. Configure a custom AWS Systems Manager Automation runbook to apply the Backup_Frequency tag with a value of weekl
14. N. Specify the runbook as the target of the rule.

Correct Answer: B
The following are the steps that the DevOps engineer should take to ensure that all EBS volumes always have the Backup_Frequency tag so that the company can perform backups at least weekly unless a different value is specified:
Set up AWS Config in the account.
Use a managed rule that returns a compliance failure for EC2::Volume resources that do not have a Backup Frequency tag applied.
Configure a remediation action that uses a custom AWS Systems Manager Automation runbook to apply the Backup_Frequency tag with a value of weekly.
The managed rule AWS::Config::EBSVolumesWithoutBackupTag will return a compliance failure for any EBS volume that does not have the Backup_Frequency tag applied. The remediation action will then use the Systems Manager Automation runbook to apply the Backup_Frequency tag with a value of weekly to the EBS volume.