AWS Certified DevOps Engineer - Professional Questions and Answers
300 questions organized by topic with detailed explanations
AWS
DOP-C02
300 questions
6 topics
Updated Jul 2026SDLC Automation
66 questions18 easy31 medium17 hard~22% of exam
A platform team wants a fully managed artifact repository for private packages that works with tools such as Maven, npm,...A build team wants CodeBuild to retry a failed phase only when the build uses EC2 compute images. They also want to know...A container platform team needs a managed registry for Docker images and OCI images with private repositories and IAM-ba...
Configuration Management and IaC
54 questions16 easy26 medium12 hard~17% of exam
An administrator suspects someone changed resources directly in service consoles instead of updating the CloudFormation ...A patching team wants to check which managed nodes are missing updates before deciding whether to install anything. Whic...An operations lead needs to choose between State Manager and Maintenance Windows for recurring node changes. The require...
Resilient Cloud Solutions
44 questions12 easy20 medium12 hard~15% of exam
A team converts a write-heavy relational workload from Single-AZ to an RDS Multi-AZ DB instance deployment and later not...A DNS design must send traffic to a primary endpoint when it is healthy and to a secondary endpoint only when the primar...A storage team enabled S3 live replication today and expects all existing and future objects in the source bucket to be ...
Monitoring and Logging
44 questions12 easy23 medium9 hard~15% of exam
A security team wants a CloudWatch Logs feature that forwards log events from a log group directly to Kinesis Data Strea...A CloudWatch Logs subscription filter is sending a high-volume stream of events to Kinesis Data Streams, and the destina...A FinOps team wants to stream only selected CloudWatch metrics to a data lake. They plan to use one metric stream with b...
Incident and Event Response
43 questions10 easy22 medium11 hard~14% of exam
An incident investigation requires SQL-style analysis of long-term AWS user and API activity in a managed data lake that...A response team needs a service that shows how AWS resources are related to one another and how those configurations cha...A security operations team wants a record of AWS activities delivered to Amazon S3, with optional delivery to CloudWatch...
Security and Compliance
49 questions12 easy23 medium14 hard~17% of exam
An application team wants to remove hard-coded database credentials from source code and rotate them automatically on a ...A security engineer wants a service that automatically discovers EC2 instances, ECR container images, and Lambda functio...When Amazon GuardDuty is enabled in an AWS account, which foundational data sources does it start ingesting automaticall...
All Questions
| # | Question | Topic | Difficulty |
|---|---|---|---|
| 1 | A team converts a write-heavy relational workload from Single-AZ to an RDS Multi-AZ DB instance depl... | Resilient Cloud Solutions | medium |
| 2 | A platform team wants a fully managed artifact repository for private packages that works with tools... | SDLC Automation | easy |
| 3 | An administrator suspects someone changed resources directly in service consoles instead of updating... | Configuration Management and IaC | hard |
| 4 | A security team wants a CloudWatch Logs feature that forwards log events from a log group directly t... | Monitoring and Logging | medium |
| 5 | A build team wants CodeBuild to retry a failed phase only when the build uses EC2 compute images. Th... | SDLC Automation | hard |
Sign in to see all 300 questions
Create a free account to browse the questions included with the free plan.
Ready to test your knowledge?
Take a full AWS Certified DevOps Engineer - Professional practice test with timed exam simulation.
Start Practice Test