AWS DevOps Engineer Professional Practice

Q: How many questions are in this practice set?

This practice set contains 60 questions with detailed explanations.

Q: What topics does this practice cover?

It covers the key topics and question types for AWS Certified DevOps Engineer - Professional (DOP-C02), including vocabulary, grammar, reading, and practical test skills.

Q: Are there explanations for every question?

Yes, every question includes a clear explanation so you can understand the correct answer and learn from mistakes.

Q: Can I save my progress and mistakes?

Your wrong answers, favorites, scores, and study streak are saved in your browser, so you can review them on the same device.

Q: What practice modes are available?

You can practice randomly, take a timed mock exam, filter by difficulty, type, and topic, search questions, and review wrong answers.

Practice 60 original AWS DevOps Engineer Professional questions covering CI/CD, infrastructure as code, configuration management, monitoring, security, and resilient architecture, with detailed explanations.

Level: AWS Certified DevOps Engineer - Professional (DOP-C02) Difficulty: advanced 60 questions 60 min

Choose a practice mode, answer each AWS DevOps Engineer Professional question, then review the explanation. Wrong answers are saved locally for review.

Practice mode Difficulty Topic Question type Search questions

Day streak: 0 days Saved only on this device

Question 1

Which AWS service automates the stages of a software release pipeline?

Select an answer AWS CodePipelineAWS CodeCommitAmazon S3AWS CloudTrail

Question 2

Which AWS service builds and tests source code?

Select an answer AWS Systems ManagerAmazon CloudWatchAWS CodeBuildAWS CodeDeploy

Question 3

Which AWS service deploys application revisions to EC2 instances or Lambda?

Select an answer AWS ConfigAWS CodeDeployAWS CodePipelineAWS CodeCommit

Question 4

What is a blue/green deployment?

Select an answer Deploying one instance at a timeDeleting the old environment firstBuilding code on every commitRunning two environments and switching traffic after validation

Question 5

What is a canary deployment?

Select an answer Sending all traffic to the new versionRolling back immediatelyDisabling health checksSending a small percentage of traffic to the new version

Question 6

What is an approval action in CodePipeline?

Select an answer A manual gate that pauses a pipeline for reviewA build commandA CloudWatch alarmAn S3 bucket policy

Question 7

How can a pipeline deploy across multiple AWS Regions?

Select an answer Enable S3 versioningDisable CloudTrailUse cross-region actions in CodePipelineCreate a separate VPC

Question 8

Which AWS service hosts private Git repositories?

Select an answer AWS WAFAWS CodeCommitAWS CodeBuildAmazon ECR

Question 9

What does a buildspec file define?

Select an answer The build phases and commands for CodeBuildA VPC route tableAn IAM policyA CloudWatch dashboard

Question 10

Match each AWS DevOps service to its purpose.

AWS CodePipelineAWS CodeBuildAWS CodeDeployAWS CodeCommit

Question 11

Which AWS service provisions resources from declarative templates?

Select an answer Amazon CloudWatchAWS CloudFormationAWS CodeDeployAWS CodeCommit

Question 12

What is a CloudFormation change set?

Select an answer A deployment scriptAn IAM roleA preview of changes before applying a stack updateA backup of a stack

Question 13

What is drift detection in CloudFormation?

Select an answer Rolling back all stacksCreating new VPCsComparing live resources with the stack templateDeleting changed resources

Question 14

Which tool lets you define AWS infrastructure using programming languages?

Select an answer AWS CDKAWS CodeDeployAmazon SNSAWS Shield

Question 15

What is Terraform?

Select an answer An AWS-only deployment serviceA databaseA CDNAn infrastructure as code tool that supports multiple cloud providers

Question 16

What is AWS CloudFormation StackSets?

Select an answer A DNS recordA way to deploy stacks across accounts and RegionsA stack backupA build tool

Question 17

What is the execution role in CloudFormation?

Select an answer A Lambda runtimeA security groupA launch templateAn IAM role that CloudFormation uses to create resources

Question 18

How do you pass non-secret configuration values to a CloudFormation template?

Select an answer Use template parametersEmbed them in every IAM policyStore them in an S3 static websiteCreate a separate VPC

Question 19

Which AWS service helps manage secrets used by CloudFormation stacks?

Select an answer AWS WAFAWS Secrets ManagerAWS CodeCommitAmazon CloudWatch

Question 20

Match each infrastructure as code concept to its purpose.

CloudFormationChange setDrift detectionStackSets

Question 21

Which AWS service applies configuration baselines to managed instances?

Select an answer AWS Systems ManagerAWS CodePipelineAmazon Route 53Amazon ECS

Question 22

What is AWS OpsWorks?

Select an answer A container registryA firewallA DNS serviceA configuration management service using Chef or Puppet

Question 23

What is a Systems Manager State Manager association?

Select an answer A database snapshotA load balancerA policy that applies and maintains configuration on instancesA VPC route

Question 24

What is a Systems Manager Run Command?

Select an answer A DNS recordA way to run scripts across many instances at onceA CloudFormation templateA build stage

Question 25

What is Patch Manager used for?

Select an answer Storing backupsAutomating OS patching on managed instancesBuilding container imagesRouting web traffic

Question 26

What is AWS Config?

Select an answer A service that records and evaluates resource configurationA deployment pipelineA Git repositoryA content delivery network

Question 27

What is a Systems Manager document?

Select an answer An S3 bucketA CloudWatch dashboardA VPC peering connectionA reusable definition of actions Systems Manager can run

Question 28

What does AWS Systems Manager Automation do?

Select an answer Hosts DNS zonesStores container imagesRuns predefined maintenance and remediation workflowsCompiles application code

Question 29

How can you manage secrets in application configuration?

Select an answer Put them in a public websiteDisable encryptionReference AWS Systems Manager Parameter Store or Secrets ManagerCommit them to the repository

Question 30

Match each configuration management service to its purpose.

Systems ManagerAWS ConfigOpsWorksPatch Manager

Question 31

Which AWS service provides interactive log querying?

Select an answer CloudWatch Logs InsightsAWS CodeBuildAmazon Route 53AWS Direct Connect

Question 32

What is AWS X-Ray?

Select an answer A log archiveA firewallA load balancerA service for tracing requests through distributed applications

Question 33

What is a CloudWatch composite alarm?

Select an answer A backup planAn alarm that combines multiple alarms into one stateAn alarm for one metric onlyA DNS health check

Question 34

What is CloudWatch Synthetics?

Select an answer A service that runs canary checks against endpointsA code repositoryA databaseA CDN

Question 35

Which AWS service collects metrics from applications and resources?

Select an answer AWS CodeCommitAmazon S3AWS WAFAmazon CloudWatch

Question 36

What is CloudWatch Container Insights?

Select an answer A build serviceA DNS zoneA monitoring solution for containers and KubernetesA container registry

Question 37

What is a CloudWatch log subscription?

Select an answer A DNS recordA VPC routeA real-time stream of log events to another destinationA backup of a log group

Question 38

What is AWS Distro for OpenTelemetry?

Select an answer A firewallA distribution of OpenTelemetry for AWS observabilityA database engineA container runtime

Question 39

What is a CloudWatch Contributor Insights rule?

Select an answer A rule that identifies top contributors in logsAn IAM policyA security groupA storage class

Question 40

Match each monitoring concept to its purpose.

CloudWatch Logs InsightsAWS X-RaySyntheticsContainer Insights

Question 41

What is the principle of least privilege?

Select an answer Using one shared accountGiving users and roles only the permissions they needGiving every user admin accessDisabling IAM

Question 42

Which AWS service detects threats by analyzing account activity?

Select an answer AWS CodeBuildAmazon Route 53AWS WAFAmazon GuardDuty

Question 43

Which AWS service scans container images for vulnerabilities?

Select an answer Amazon ECR image scanningAWS CodePipelineAmazon S3AWS Direct Connect

Question 44

What is AWS Security Hub?

Select an answer A databaseA load balancerA service that aggregates and prioritizes security findingsA code repository

Question 45

What is Amazon Inspector?

Select an answer A vulnerability assessment service for AWS workloadsA build toolA CDNA DNS service

Question 46

What is a service control policy?

Select an answer A CloudWatch dashboardA policy that sets maximum permissions for accounts in an organizationAn S3 bucket policyA route table

Question 47

Which service should store database credentials with rotation?

Select an answer AWS CodeCommitAmazon S3AWS WAFAWS Secrets Manager

Question 48

What does AWS KMS provide?

Select an answer A DNS zoneA web application firewallManaged encryption keys for AWS servicesA build environment

Question 49

What is an IAM permission boundary?

Select an answer A VPC boundaryA CloudWatch alarmA load balancer ruleA limit on the maximum permissions a role or user can receive

Question 50

Match each AWS security service to its purpose.

Amazon GuardDutyAmazon InspectorAWS Security HubAWS KMS

Question 51

What is an Auto Scaling group?

Select an answer A databaseA container imageA group of EC2 instances that scales based on policiesA DNS record

Question 52

How do you make an application highly available across Availability Zones?

Select an answer Store data in one EBS volumeDeploy instances in multiple AZs behind a load balancerUse one instance in one AZDisable health checks

Question 53

What is Amazon RDS Multi-AZ?

Select an answer A cacheA synchronous standby database in another Availability ZoneA read replicaA database snapshot

Question 54

What is Amazon DynamoDB on-demand capacity?

Select an answer A fixed provisioned capacityA relational databaseA backupA mode that scales read and write capacity automatically

Question 55

What is a multi-Region disaster recovery strategy?

Select an answer Replicating workloads and data to another Region for failoverUsing more instance typesEnabling S3 versioning onlyDisabling backups

Question 56

Which AWS service routes traffic to healthy endpoints in different Regions?

Select an answer AWS CloudTrailAWS ConfigAmazon Route 53 with health checks and failover policiesAmazon CloudWatch

Question 57

What is an event-driven architecture?

Select an answer A design without scalingA design using only databasesA design where services respond to events such as S3 uploads or queue messagesA design with one monolith

Question 58

What is an AWS Lambda reserved concurrency?

Select an answer A deployment scriptA limit on the number of concurrent executions for a functionA database connectionA VPC route

Question 59

How do you decouple application components for resilience?

Select an answer Call services synchronously onlyStore all state in memoryDisable retriesUse SQS queues or SNS topics between services

Question 60

Match each resiliency concept to its purpose.

Auto ScalingRDS Multi-AZRoute 53 failoverSQS decoupling