Amazon DOP-C01 BY Officialqa
                     Amazon DOP-C01 Exam Dumps By OfficialQa.
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
EXAM INFORMATION
Exam Code: DOP-C01
Exam Title: AWS Certified DevOps Engineer - Professional
Vendor: Amazon
Exam Questions: 308
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
SKILLS MEASURED
The AWS Certified DevOps Engineer - Professional (DOP-C01) certification exam 
measures the following skills:
1. Continuous delivery and deployment
2. Provisioning, operating, and managing distributed application systems on the 
AWS platform
3. Implementation and management of security and compliance
4. Monitoring and logging
5. Managing incidents, changes, and version control.
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
HERE WE SHOW YOU FREE DEMO QUESTIONS
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
1) A devops engineer wants to implement a blue/green deployment process for 
an application on AWS and be able to gradually shift the traffic between the 
environments. The application runs on Amazon EC2 instances behind an 
Application Load Balancer. The instances run in an EC2 Auto Scaling group. 
Data is stored in an Amazon RDS Multi-AZ DB instance. External DNS is 
provided by Amazon Route 53.
Which combination of steps will implement the blue/green process?
(Select THREE.)
a) Create a second Auto Scaling group behind the same Application Load Balancer.
b) Create a second Application Load Balancer and Auto Scaling group.
c) Create a second alias record in Route 53 pointing to the new environment and use a 
failover routing policy between the two records.
d) Create a second alias record in Route 53 pointing to the new environment and use a 
weighted routing policy between the two records.
e) Configure the new EC2 instances to use the same RDS database instance.
f) Configure the new EC2 instances to use the failover node of the RDS database instance.
ANSWER: B,D,E
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
2)  A company is using AWS CodeBuild to build its application. Company policy 
requires that all build artifacts be encrypted at rest. Access to the artifacts must be 
limited to IAM users with permission to assume the operations role.
How can these requirements be met?
a) Add a post-build command to the CodeBuild build specification that pushes build objects to 
an Amazon S3 bucket. Set a bucket policy that prevents upload to the bucket unless the request 
includes the header x-amz-server-side-encryption. Add a Deny statement for all actions with the 
NotPrincipal section referencing the operations IAM group.
b) Add a post-build command to the CodeBuild build specification that pushes build objects to 
an Amazon S3 bucket. Configure an S3 event notification to trigger an AWS Lambda function to 
get the object, encrypt it, then put it back into the S3 bucket with an encrypted tag key and a 
true tag value. Add an S3 bucket policy with a Deny statement for all actions with the 
NotPrincipal section referencing the operations IAM group, and a Condition section referencing 
the Encrypted tag.
c) Add a post-build command to the CodeBuild build specification that pushes build objects to 
an Amazon S3 bucket that has S3 default encryption enabled. Set an S3 bucket policy containing 
a Deny statement for all actions with the NotPrincipal section referencing the operations IAM 
role.
d) Add a post-build command to the CodeBuild build specification that calls the AWS KMS 
Encrypt API call, passing the artifact to AWS KMS for encryption with a specified customer 
master key (CMK). Push the encrypted artifact to an Amazon S3 bucket, then set up the IAM 
operations group as the only key user for that CMK in AWS KMS.
ANSWER: C
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
3)  A development team wants to set up an AWS CodeCommit repository. 
Developers should be able push changes to their own branches, but they should 
not be allowed to push commits or merge pull requests into the master branch.
Additionally, whenever a commit or merge occurs into the master branch, the 
project manager needs to receive a notification.
Which combination of steps will protect the master branch and send the alert with 
the shortest delay?
(Select TWO.)
a) Attach an AWS IAM policy to the developer IAM group that denies the actions of pushing 
commits, merging pull requests, and adding files to the master branch.
b) Attach a resource policy to the CodeCommit repository that denies members of the IAM 
developer group the actions of pushing commits, merging pull requests, and adding files to the 
master branch.
c) Set up a an AWS Lambda function that runs every 15 minutes to check for repository changes 
and publishes a notification to an Amazon SNS topic.
d) Set up an Amazon CloudWatch Events rule triggered by a CodeCommit Repository State 
Change event for the master branch and add an Amazon SNS topic as a target.
e) Configure AWS CloudTrail to send log events to Amazon CloudWatch Logs. Define a metric 
filter to identify repository events. Create a CloudWatch alarm with an Amazon SNS topic as a 
target.
ANSWER: A,D
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
4)  A company controls the source code for its product in AWS CodeCommit. The 
company is creating a CI/CD pipeline for the product using AWS CodePipeline.
The pipeline must automatically start on changes to the master branch of the 
CodeCommit repository. Changes are made to the application every day, so the 
pipeline needs to be as responsive as possible.
Which actions should the devops engineer take to meet these requirements?
a) Configure the pipeline to periodically check the repository. Start the pipeline when changes 
are detected.
b) Configure the repository to generate an Amazon CloudWatch Events event upon changes. 
Configure the pipeline to start in response to the event.
c) Configure the repository to periodically run an AWS Lambda function. The function should 
check the repository and start the pipeline when changes are detected.
d) Configure the repository to publish an SNS notification upon changes. Subscribe the 
pipeline to the Amazon SNS topic.
ANSWER: B
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
5)  An operator is managing a legacy application on AWS. The application is a 
monolithic Microsoft Windows program running on a single Amazon EC2 
instance. The source code for the application is not available, so the application 
cannot be modified.
The application has a memory leak and malfunctions when memory utilization 
on the instance goes above 90%. The operator has configured the uniform 
Amazon CloudWatch agent on the EC2 instance to collect the memory utilization 
Performance Monitor counter.
Which actions should the operator take to prevent the application from 
malfunctioning?
(Select TWO.)
a) Create an Amazon CloudWatch Events event that publishes to an Amazon SNS topic when 
memory utilization goes above 80%.
b) Create a metric filter on memory utilization in Amazon CloudWatch Logs. Create a 
CloudWatch alarm on the memory utilization filter that publishes to an Amazon SNS topic 
when the memory utilization goes above 80%.
c) Create a CloudWatch alarm on the memory utilization metric that publishes to an Amazon 
SNS topic when the memory utilization goes above 80%.
d) Subscribe an Amazon Lambda function to the Amazon SNS topic that restarts the 
application with an AWS Systems Manager Run Command.
e) Subscribe the EC2 instance to the Amazon SNS topic and run a script that restarts the 
application.
ANSWER: C,D
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
MONEY BACK GUARANTEE
To stamp reliability, perfection and the ultimate benefit of our content, 
we offer you a 100% money back guarantee. Take back your money, if 
you fail the exam despite using  Amazon DOP-C01 practice test.
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
FEATURES OF OFFICIALQA
• OfficialQa data is 100% trustworthy.
• Good Grades are 100% guarantee.
• Thousands of satisfied customers.
• Up to date exam data.
• 100% verified by experts panel.
• 100% money back guarantee.
• Passing ratio more than 99%. 
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine
FOR MORE INFORMATION VISIT OUR WEBSITE
https://officialqa.com/
https://officialqa.com/DOP-C01.html
Amazon DOP-C01 Dumps
Amazon DOP-C01 Test Engine