AWS · DOP-C02

AWS DOP-C02 Exam Practice Questions

460 questionsPDF by emailUpdated September 2026

US$39

Try 10 questions free

Card, Apple Pay or Google Pay. Your PDF is sent by email as soon as you check out.

Pass or your money backFail the exam after using this pack and we refund it. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 460 questions in this pack

Question 1

A company has a mobile application that makes HTTP API calls to an Application Load Balancer (ALB). The ALB routes requests to an AWS Lambda function. Many different versions of the application are in use at any given time, including versions that are in testing by a subset of users. The version of the application is defined in the user-agent header that is sent with all requests to the API.

After a series of recent changes to the API, the company has observed issues with the application. The company needs to gather a metric for each API operation by response code for each version of the application that is in use. A DevOps engineer has modified the Lambda function to extract the API operation name, version information from the user-agent header and response code.

Which additional set of actions should the DevOps engineer take to gather the required metrics?

  1. Modify the Lambda function to write the API operation name, response code, and version number as a log line to an Amazon CloudWatch Logs log group. Configure a CloudWatch Logs metric filter that increments a metric for each API operation name. Specify response code and application version as dimensions for the metric.
  2. Modify the Lambda function to write the API operation name, response code, and version number as a log line to an Amazon CloudWatch Logs log group. Configure a CloudWatch Logs Insights query to populate CloudWatch metrics from the log lines. Specify response code and application version as dimensions for the metric.
  3. Configure the ALB access logs to write to an Amazon CloudWatch Logs log group. Modify the Lambda function to respond to the ALB with the API operation name, response code, and version number as response metadata. Configure a CloudWatch Logs metric filter that increments a metric for each API operation name. Specify response code and application version as dimensions for the metric.
  4. Configure AWS X-Ray integration on the Lambda function. Modify the Lambda function to create an X-Ray subsegment with the API operation name, response code, and version number. Configure X-Ray insights to extract an aggregated metric for each API operation name and to publish the metric to Amazon CloudWatch. Specify response code and application version as dimensions for the metric.
Show answer and explanation

Correct answer: A. Modify the Lambda function to write the API operation name, response code, and version number as a log line to an Amazon CloudWatch Logs log group. Configure a CloudWatch Logs metric filter that increments a metric for each API operation name. Specify response code and application version as dimensions for the metric.

name, response code, and version number as a log line to an Amazon CloudWatch Logs log group. Configure a CloudWatch Logs metric filter that increments a metric for each API operation name. Specify response code and application version as dimensions for the metric. The DevOps engineer needs to create custom metrics from Lambda function data by writing structured log lines to CloudWatch Logs and using metric filters. Option A correctly specifies writing the API operation name, response code, and version to a log group, then configuring a CloudWatch Logs metric filter to create a metric with response code and application version as dimensions. This approach directly tracks metrics per API operation by response code for each application version without additional infrastructure.

Why the other options are wrong

  • B. CloudWatch Logs Insights is a query tool for analyzing logs, not for automatically populating metrics; metric filters are the proper mechanism for this continuous metric generation.
  • C. ALB access logs are unnecessary since the Lambda function already has the required data; adding response metadata to ALB responses doesn't help with metric collection.
  • D. X-Ray is useful for distributed tracing and service maps but adds complexity; CloudWatch metric filters provide a simpler, more direct solution for this straightforward metric aggregation requirement.

Question 2

A company provides an application to customers. The application has an Amazon API Gateway REST API that invokes an AWS Lambda function.

On initialization, the Lambda function loads a large amount of data from an Amazon DynamoDB table. The data load process results in long cold-start times of 8-10 seconds. The DynamoDB table has DynamoDB Accelerator (DAX) configured.

Customers report that the application intermittently takes a long time to respond to requests. The application receives thousands of requests throughout the day. In the middle of the day, the application experiences 10 times more requests than at any other time of the day. Near the end of the day, the application's request volume decreases to 10% of its normal total.

A DevOps engineer needs to reduce the latency of the Lambda function at all times of the day.

Which solution will meet these requirements?

  1. Configure provisioned concurrency on the Lambda function with a concurrency value of 1. Delete the DAX cluster for the DynamoDB table.
  2. Configure reserved concurrency on the Lambda function with a concurrency value of 0.
  3. Configure provisioned concurrency on the Lambda function. Configure AWS Application Auto Scaling on the Lambda function with provisioned concurrency values set to a minimum of 1 and a maximum of 100.
  4. Configure reserved concurrency on the Lambda function. Configure AWS Application Auto Scaling on the API Gateway API with a reserved concurrency maximum value of 100.
Show answer and explanation

Correct answer: C. Configure provisioned concurrency on the Lambda function. Configure AWS Application Auto Scaling on the Lambda function with provisioned concurrency values set to a minimum of 1 and a maximum of 100.

function. Configure AWS Application Auto Scaling on the Lambda function with provisioned concurrency values set to a minimum of 1 and a maximum of 100. Provisioned concurrency keeps initialized execution environments ready, which removes the 8-10 second initialization penalty caused by loading the DynamoDB data at startup. Pairing provisioned concurrency with Application Auto Scaling lets the number of pre- warmed environments grow for the 10x midday peak and shrink when volume drops to 10 percent, so latency stays low at every time of day while cost tracks demand. Keeping the DAX cluster also keeps the initialization work itself as fast as possible.

Why the other options are wrong

  • A. A fixed provisioned concurrency of one cannot absorb thousands of requests or the midday spike, and deleting the DAX cluster slows the data load that causes the cold start in the first place.
  • B. Setting reserved concurrency to zero caps the function at zero concurrent executions, which throttles every invocation and stops the application from running at all.
  • D. Reserved concurrency only partitions and limits the concurrency pool and never pre- initializes environments, and API Gateway has no reserved concurrency setting to scale.

Question 3

A company is adopting AWS CodeDeploy to automate its application deployments for a Java-Apache Tomcat application with an Apache Webserver. The development team started with a proof of concept, created a deployment group for a developer environment, and performed functional tests within the application. After completion, the team will create additional deployment groups for staging and production.

The current log level is configured within the Apache settings, but the team wants to change this configuration dynamically when the deployment occurs, so that they can set different log level configurations depending on the deployment group without having a different application revision for each group.

How can these requirements be met with the LEAST management overhead and without requiring different script versions for each deployment group?

  1. Tag the Amazon EC2 instances depending on the deployment group. Then place a script into the application revision that calls the metadata service and the EC2 API to identify which deployment group the instance is part of. Use this information to configure the log level settings. Reference the script as part of the AfterInstall lifecycle hook in the appspec.yml file.
  2. Create a script that uses the CodeDeploy environment variable DEPLOYMENT_GROUP_ NAME to identify which deployment group the instance is part of. Use this information to configure the log level settings. Reference this script as part of the BeforeInstall lifecycle hook in the appspec.yml file.
  3. Create a CodeDeploy custom environment variable for each environment. Then place a script into the application revision that checks this environment variable to identify which deployment group the instance is part of. Use this information to configure the log level settings. Reference this script as part of the ValidateService lifecycle hook in the appspec.yml file.
  4. Create a script that uses the CodeDeploy environment variable DEPLOYMENT_GROUP_ID to identify which deployment group the instance is part of to configure the log level settings. Reference this script as part of the Install lifecycle hook in the appspec.yml file.
Show answer and explanation

Correct answer: B. Create a script that uses the CodeDeploy environment variable DEPLOYMENT_GROUP_ NAME to identify which deployment group the instance is part of. Use this information to configure the log level settings. Reference this script as part of the BeforeInstall lifecycle hook in the appspec.yml file.

environment variable DEPLOYMENT_GROUP_ NAME to identify which deployment group the instance is part of. Use this information to configure the log level settings. Reference this script as part of the BeforeInstall lifecycle hook in the appspec.yml file. CodeDeploy automatically exports DEPLOYMENT_GROUP_NAME to every lifecycle event script, so a single script in the application revision can branch on the group name and write the correct Apache log level. Placing the script in the BeforeInstall hook sets the configuration before the application files land, and one script version serves developer, staging, and production. No tagging, API calls, or extra variable management are required.

Why the other options are wrong

  • A. Calling the instance metadata service and the EC2 API to resolve tags adds IAM permissions, code, and tag maintenance that the built-in environment variable already makes unnecessary.
  • C. CodeDeploy does not support user-defined environment variables for lifecycle scripts, and ValidateService runs after the application has already started with the wrong log level.
  • D. The Install lifecycle event is reserved for the CodeDeploy agent to copy revision files and cannot run a custom script, and matching on the opaque deployment group ID is harder to maintain than the group name.

See all 10 free questions Get the full pack, US$39

460 practice questions for AWS Certified DevOps Engineer, Professional (DOP-C02), with full explanations.

Every question comes with the correct answer, the reasoning behind it, and a note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.

  • 460 questions across all six DOP-C02 domains
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

A failed DOP-C02 attempt costs another US$300. This pack is US$39, paid once, and refunded if you fail.

Try 10 questions free before you buy.

Last updated September 2026 · 460 questions

What makes the DOP-C02 hard

DOP-C02 is a professional-level exam, and the question length alone wears candidates down. Each scenario is a paragraph of architecture, multi-account, multi-region, pipelines feeding pipelines, and every option is technically valid; the job is to spot the one that best satisfies the requirement buried in the middle.

Multi-account CI/CD with CodePipeline, CloudFormation StackSets and drift, blue/green and canary deployments, EventBridge-driven automation, incident response with Systems Manager, and monitoring and DR design are the decisions a senior DevOps engineer makes every day. Candidates who passed the associate-level exams but have not trained on professional-length scenarios consistently run out of time across 75 dense questions in 180 minutes. This pack has 460 practice questions across all six domains.

About the exam

DOP-C02 certifies DevOps engineers who automate, operate and secure AWS environments at scale, covering CI/CD, infrastructure as code, resilience and incident response with CodePipeline, CloudFormation, Systems Manager and EventBridge. No formal prerequisites, though AWS recommends two or more years operating AWS environments. Valid for three years.

Exam domains

  • SDLC automation: 22%
  • Configuration management and IaC: 17%
  • Security and compliance: 17%
  • Resilient cloud solutions: 15%
  • Monitoring and logging: 15%
  • Incident and event response: 14%

75 questions, 180 minutes, pass mark 750 out of 1000, US$300 per attempt, Pearson VUE test centres or online proctored, valid for three years.

Reviews

There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

Questions before you buy

What do I get when I buy the AWS DOP-C02 pack?

460 practice questions as a PDF, each with the correct answer, a full explanation and a note on why the other options are wrong, plus a separate questions-only PDF for timed practice.

How quickly do I receive it?

Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.

Is there a free sample?

Yes. Ten questions from this pack, with answers and explanations, are free on this page and as a PDF, so you can judge the quality before you pay.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.