Amazon DOP-C01 Online Practice Questions and Exam Preparation

Amazon DOP-C01 Online Questions & Answers

• Question 11:

  You manage a web advertising platform on a single AWS account. This platform produces realtime ad-click data that you store as objects in an Amazon S3 bucket called "dick-data." Your advertising partners want to use Amazon Elastic MapReduce in their own AWS accounts to do analytics on the ad-click data. They have asked for immediate access to the ad-dick data so that they can run analytics. Which two choices are required to facilitate secure access to this data? (Choose two.)

  A. Create a cross-account TAM role with a trust policy that contains partner AWS account IDs and a unique external ID.
  B. Create a new IAM group for AWS Data Pipeline users with a trust policy that contains partner AWS account IDs.
  C. Configure an Amazon S3 bucket policy for the "click-data" bucket that allows Read-Only access to the objects, and associate this policy with an IAM role.
  D. Configure the Amazon S3 bucket access control list to allow access to the partners Amazon Elastic MapReduce cluster.
  E. Configure AWS Data Pipeline in the partner AWS accounts to use the web Identity Federation API to access data in the "click-data" bucket.
  F. Configure AWS Data Pipeline to transfer the data from the ''click-data" bucket to the partner's Amazon Elastic MapReduce cluster.
  A. Create a cross-account TAM role with a trust policy that contains partner AWS account IDs and a unique external ID.
  C. Configure an Amazon S3 bucket policy for the "click-data" bucket that allows Read-Only access to the objects, and associate this policy with an IAM role.

• Question 12:

  What is the scope of an EBS volume?

  A. VPC
  B. Region
  C. Placement Group
  D. Availability Zone
  D. Availability Zone

  ---

  An Amazon EBS volume is tied to its Availability Zone and can be attached only to instances in the same Availability Zone.

  Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/resources.html

• Question 13:

  When logging with Amazon CloudTrail, API call information for services with regional end points is ____.

  A. captured and processed in the same region as to which the API call is made and delivered to the region associated with your Amazon S3 bucket
  B. captured, processed, and delivered to the region associated with your Amazon S3 bucket
  C. captured in the same region as to which the API call is made and processed and delivered to the region associated with your Amazon S3 bucket
  D. captured in the region where the end point is located, processed in the region where the CloudTrail trail is configured, and delivered to the region associated with your Amazon S3 bucket
  A. captured and processed in the same region as to which the API call is made and delivered to the region associated with your Amazon S3 bucket

  ---

  When logging with Amazon CloudTrail, API call information for services with regional end points (EC2, RDS etc.) is captured and processed in the same region as to which the API call is made and delivered to the region associated with your Amazon S3 bucket. API call information for services with single end points (IAM, STS etc.) is captured in the region where the end point is located, processed in the region where the CloudTrail trail is configured, and delivered to the region associated with your Amazon S3 bucket.

  Reference: https://aws.amazon.com/cloudtrail/faqs/

• Question 14:

  What is AWS CloudTrail Processing Library?

  A. A static library with CloudTrail log files in a movable format machine code that is directly executable
  B. An object library with CloudTrail log files in a movable format machine code that is usually not directly executable
  C. A Java library that makes it easy to build an application that reads and processes CloudTrail log files
  D. A PHP library that renders various generic containers needed for CloudTrail log files
  C. A Java library that makes it easy to build an application that reads and processes CloudTrail log files

  ---

  AWS CloudTrail Processing Library is a Java library that makes it easy to build an application that reads and processes CloudTrail log files. You can download CloudTrail Processing Library from GitHub.

  Reference: http://aws.amazon.com/cloudtrail/faqs/

• Question 15:

  The project you are working on currently uses a single AWS CloudFormation template to deploy its AWS infrastructure, which supports a multi-tier web application. You have been tasked with organizing the AWS CloudFormation resources so that they can be maintained in the future, and so that different departments such as Networking and Security can review the architecture before it goes to Production. How should you do this in a way that accommodates each department, using their existing workflows?

  A. Organize the AWS CloudFormation template so that related resources are next to each other in the template, such as VPC subnets and routing rules for Networking and security groups and IAM information for Security.
  B. Separate the AWS CloudFormation template into a nested structure that has individual templates for the resources that are to be governed by different departments, and use the outputs from the networking and security stacks for the application template that you control
  C. Organize the AWS CloudFormation template so that related resources are next to each other in the template for each department's use, leverage your existing continuous integration tool to constantly deploy changes from all parties to the Production environment, and then run tests for validation.
  D. Use a custom application and the AWS SDK to replicate the resources defined in the current AWS CloudFormation template, and use the existing code review system to allow other departments to approve changes before altering the application for future deployments.
  B. Separate the AWS CloudFormation template into a nested structure that has individual templates for the resources that are to be governed by different departments, and use the outputs from the networking and security stacks for the application template that you control

• Question 16:

  A company has established tagging and configuration standards for its infrastructure resources running on AWS. A DevOps Engineer is developing a design that will provide a near-real-time dashboard of the compliance posture with the ability to highlight violations.

  Which approach meets the stated requirements?

  A. Define the resource configurations in AWS Service Catalog, and monitor the AWS Service Catalog compliance and violations in Amazon CloudWatch. Then, set up and share a live CloudWatch dashboard. Set up Amazon SNS notifications for violations and corrections.
  B. Use AWS Config to record configuration changes and output the data to an Amazon S3 bucket. Create an Amazon QuickSight analysis of the dataset, and use the information on dashboards and mobile devices.
  C. Create a resource group that displays resources with the specified tags and those without tags. Use the AWS Management Console to view compliant and non-compliant resources.
  D. Define the compliance and tagging requirements in Amazon Inspector. Output the results to Amazon CloudWatch Logs. Build a metric filter to isolate the monitored elements of interest and present the data in a CloudWatch dashboard.
  B. Use AWS Config to record configuration changes and output the data to an Amazon S3 bucket. Create an Amazon QuickSight analysis of the dataset, and use the information on dashboards and mobile devices.

  ---

  Reference: https://aws.amazon.com/answers/configuration-management/aws-infrastructure-configuration- management/

• Question 17:

  A company is using an AWS CloudFormation template to deploy web applications. The template requires that manual changes be made for each of the three major environments: production, staging, and development. The current sprint

  includes the new implementation and configuration of AWS CodePipeline for automated deployments.

  What changes should the DevOps Engineer make to ensure that the CloudFormation template is reusable across multiple pipelines?

  A. Use a CloudFormation custom resource to query the status of the CodePipeline to determine which environment is launched. Dynamically alter the launch configuration of the Amazon EC2 instances.
  B. Set up a CodePipeline pipeline for each environment to use input parameters. Use CloudFormation mappings to switch associated UserData for the Amazon EC2 instances to match the environment being launched.
  C. Set up a CodePipeline pipeline that has multiple stages, one for each development environment. Use AWS Lambda functions to trigger CloudFormation deployments to dynamically alter the UserData of the Amazon EC2 instances launched in each environment.
  D. Use CloudFormation input parameters to dynamically alter the LaunchConfiguration and UserData sections of each Amazon EC2 instance every time the CloudFormation stack is updated.
  C. Set up a CodePipeline pipeline that has multiple stages, one for each development environment. Use AWS Lambda functions to trigger CloudFormation deployments to dynamically alter the UserData of the Amazon EC2 instances launched in each environment.

• Question 18:

  Your team is responsible for an AWS Elastic Beanstalk application. The business requires that you move to a continuous deployment model, thus releasing updates to the application multiple times per day with zero downtime. What should you do to enable this and still be able to roll back to the previous version almost immediately in an emergency?

  A. Enable roiling updates in the Elastic Beanstalk environment and set an appropriate pause time for application startup.
  B. Create a second Elastic Beanstalk environment that runs the new application version, and swap the environment CNAMEs.
  C. Configure the application to poll for a new application version in your code repository; download and install the new version to each running Elastic Beanstalk instance.
  D. Create a second Elastic Beanstalk environment with the new application version, and configure the old environment to use the HTTP 301 response code to redirect clients to the new environment.
  B. Create a second Elastic Beanstalk environment that runs the new application version, and swap the environment CNAMEs.

• Question 19:

  What is true of the way that encryption works with EBS?

  A. Snapshotting an encrypted volume makes an encrypted snapshot; restoring an encrypted snapshot creates an encrypted volume when specified / requested.
  B. Snapshotting an encrypted volume makes an encrypted snapshot when specified / requested; restoring an encrypted snapshot creates an encrypted volume when specified / requested.
  C. Snapshotting an encrypted volume makes an encrypted snapshot; restoring an encrypted snapshot always creates an encrypted volume.
  D. Snapshotting an encrypted volume makes an encrypted snapshot when specified / requested; restoring an encrypted snapshot always creates an encrypted volume.
  C. Snapshotting an encrypted volume makes an encrypted snapshot; restoring an encrypted snapshot always creates an encrypted volume.

  ---

  Snapshots that are taken from encrypted volumes are automatically encrypted. Volumes that are created from encrypted snapshots are also automatically encrypted. Your encrypted volumes and any associated snapshots always remain protected. For more information, see Amazon EBS Encryption. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html

• Question 20:

  When writing custom Ansible modules, which language is not supported?

  A. Python
  B. C++
  C. Bash
  D. All of the languages listed are supported
  D. All of the languages listed are supported

  ---

  Ansible modules can be written in any language that is executable on the target system. The only requirement is that the module can write its results as JSON output to STDOUT for Ansible to consume.

  Reference: http://docs.ansible.com/ansible/developing_modules.html