AWS Certified DevOps Engineer - Professional Questions and Answers
200 questions organized by topic with detailed explanations
AWS
DOP-C02
200 questions
6 topics
Updated May 2026SDLC Automation
44 questions12 easy20 medium12 hard~22% of exam
A platform team wants a fully managed artifact repository for private packages that works with tools such as Maven, npm,...A build team wants CodeBuild to retry a failed phase only when the build uses EC2 compute images. They also want to know...A container platform team needs a managed registry for Docker images and OCI images with private repositories and IAM-ba...
Configuration Management and IaC
37 questions10 easy17 medium10 hard~17% of exam
An administrator suspects someone changed resources directly in service consoles instead of updating the CloudFormation ...A patching team wants to check which managed nodes are missing updates before deciding whether to install anything. Whic...An operations lead needs to choose between State Manager and Maintenance Windows for recurring node changes. The require...
Resilient Cloud Solutions
29 questions8 easy13 medium8 hard~15% of exam
A team converts a write-heavy relational workload from Single-AZ to an RDS Multi-AZ DB instance deployment and later not...A DNS design must send traffic to a primary endpoint when it is healthy and to a secondary endpoint only when the primar...A storage team enabled S3 live replication today and expects all existing and future objects in the source bucket to be ...
Monitoring and Logging
29 questions8 easy16 medium5 hard~15% of exam
A security team wants a CloudWatch Logs feature that forwards log events from a log group directly to Kinesis Data Strea...A CloudWatch Logs subscription filter is sending a high-volume stream of events to Kinesis Data Streams, and the destina...A FinOps team wants to stream only selected CloudWatch metrics to a data lake. They plan to use one metric stream with b...
Incident and Event Response
29 questions7 easy14 medium8 hard~14% of exam
An incident investigation requires SQL-style analysis of long-term AWS user and API activity in a managed data lake that...A response team needs a service that shows how AWS resources are related to one another and how those configurations cha...A security operations team wants a record of AWS activities delivered to Amazon S3, with optional delivery to CloudWatch...
Security and Compliance
32 questions9 easy15 medium8 hard~17% of exam
An application team wants to remove hard-coded database credentials from source code and rotate them automatically on a ...A security engineer wants a service that automatically discovers EC2 instances, ECR container images, and Lambda functio...When Amazon GuardDuty is enabled in an AWS account, which foundational data sources does it start ingesting automaticall...
All Questions
| # | Question | Topic | Difficulty |
|---|---|---|---|
| 1 | A team converts a write-heavy relational workload from Single-AZ to an RDS Multi-AZ DB instance depl... | Resilient Cloud Solutions | medium |
| 2 | A platform team wants a fully managed artifact repository for private packages that works with tools... | SDLC Automation | easy |
| 3 | An administrator suspects someone changed resources directly in service consoles instead of updating... | Configuration Management and IaC | hard |
| 4 | A security team wants a CloudWatch Logs feature that forwards log events from a log group directly t... | Monitoring and Logging | medium |
| 5 | A build team wants CodeBuild to retry a failed phase only when the build uses EC2 compute images. Th... | SDLC Automation | hard |
Sign in to see all 200 questions
Create a free account to browse all questions — completely free during our launch phase.
Ready to test your knowledge?
Take a full AWS Certified DevOps Engineer - Professional practice test with timed exam simulation.
Start Practice Test