Free DOP-C02 mock test

AWS Certified DevOps Engineer - Professional (DOP-C02)

Practice DevOps automation, deployment, monitoring, and governance scenarios for DOP-C02.

This free AWS DevOps Engineer Professional practice exam helps you review scenario-based questions across CI/CD, observability, incident response, infrastructure as code, security, compliance, and AWS managed developer tools.

10 exam-style questions Multi-select practice included Instant option explanations No signup required

Start the practice exam below, answer each question before checking explanations, and use the missed topics to guide your next AWS DevOps study session.

AWS Certified DevOps Engineer - Professional (DOP-C02)

Free AWS Certified DevOps Engineer - Professional DOP-C02 practice exam with detailed explanations for every option.

1 / 10

Question

A healthcare services company is concerned about the growing costs of software licensing for an application that monitors patient wellness. The company wants an audit process to ensure that the application is running exclusively on Amazon EC2 Dedicated Hosts. A DevOps engineer must create a workflow to audit the application for compliance. What steps should the engineer take with the least administrative overhead?

Which option meets the requirement?

A. Use AWS Systems Manager Configuration Compliance with put-compliance-items, store noncompliant instance IDs in DynamoDB, and generate a report with list-compliance-summaries.

B. Use custom Java code on EC2 with Auto Scaling, SQS, DynamoDB, Lambda termination, and SNS email notifications.

C. Use AWS Config to record EC2 resources, create a custom Config rule backed by Lambda, evaluate each instance's host placement, and mark instances that are not on Dedicated Hosts as NON_COMPLIANT.

D. Use AWS CloudTrail to analyze RunCommand API calls, invoke Lambda to inspect placement, store noncompliant IDs in RDS for MySQL, and export a CSV report.

2 / 10

Question

A company is migrating from an on-premises data center to AWS. The company currently uses a custom on-premises CI/CD pipeline to build and package software. The company wants its software packages and dependent public repositories to be available in AWS CodeArtifact to support application-specific pipelines. Which combination of steps should the company take with the least operational overhead? (Select TWO.)

Which option meets the requirement?

A. Update the pipeline to create a VM image, import it as an AMI, launch EC2 with an instance profile, and publish packages to CodeArtifact from the instance.

B. Create an IAM Roles Anywhere trust anchor and an IAM role that allows CodeArtifact actions. Update the on-premises CI/CD pipeline to assume the role and publish packages to CodeArtifact.

C. Upload packages to S3 with presigned URLs, invoke Lambda on object creation, and have Lambda publish packages to CodeArtifact.

D. For each public repository, create a CodeArtifact repository configured with an external connection. Configure the dependent repositories as upstream repositories.

E. Create a CodeArtifact repository configured with a set of external connections to the public repositories. Configure the external connections to be downstream of the repository.

3 / 10

Question

A company frequently creates Docker images stored in Amazon ECR, with both tagged and untagged versions. The company wants to delete stale or unused images while keeping a minimum count. Which solution meets this requirement?

Which option meets the requirement?

A. Use Amazon S3 lifecycle policies.

B. Use Amazon ECR lifecycle policies based on image age or image count.

C. Schedule an AWS Lambda function to delete images by age.

D. Use AWS Systems Manager automation scripts.

4 / 10

Question

A company uses CodePipeline and CodeDeploy to deploy an application to Amazon ECS with the blue/green deployment model. The company wants scripts to test the green version before shifting traffic. The scripts complete in 5 minutes or less. If errors are discovered, the application must be rolled back. Which strategy meets these requirements?

Which option meets the requirement?

A. Add a CodeBuild stage between source and deploy to run tests, then stop the deployment if errors are found.

B. Add a Lambda stage between source and deploy to run tests, then stop the deployment if errors are found.

C. Add a hooks section to the CodeDeploy AppSpec file. Use the AfterAllowTestTraffic lifecycle event to invoke a Lambda function that runs the tests. Return an error from Lambda to initiate rollback.

D. Add a hooks section to the CodeDeploy AppSpec file. Use AfterAllowTraffic to invoke the tests and stop the deployment if errors are found.

5 / 10

Question

A DevOps engineer is building a multistage CodePipeline pipeline. A manual approval stage is required between test and deploy. The development team uses a custom chat tool with webhook support that requires near-real-time notifications. How should the engineer configure status updates for pipeline activity and approval requests to post to the chat tool?

Which option meets the requirement?

A. Create a CloudWatch Logs subscription that filters on CodePipeline Pipeline Execution State Change events, publish to SNS, and subscribe the webhook URL.

B. Create a Lambda function invoked by CloudTrail events. When a CodePipeline state change is detected, send details to the webhook URL.

C. Create an EventBridge rule for CodePipeline state change events and approval-related events. Send events to SNS, subscribe a Lambda function, and have Lambda post formatted messages to the chat webhook URL.

D. Modify the pipeline code to send event details to the webhook URL at the end of each stage.

6 / 10

Question

A company runs an application on EC2 instances in an Auto Scaling group. Recently an issue prevented instances from launching successfully, and it took several hours for support to discover the issue. The support team wants email notification whenever an EC2 instance does not start successfully. Which action will accomplish this?

Which option meets the requirement?

A. Add a health check to the Auto Scaling group to invoke Lambda whenever an instance status is impaired.

B. Configure the Auto Scaling group to send a notification to an SNS topic whenever a failed instance launch occurs.

C. Create a CloudWatch alarm that invokes Lambda when a failed AttachInstances Auto Scaling API call is made.

D. Create an EC2 status check alarm to notify SNS whenever a status check fails.

7 / 10

Question

A company uses API Gateway and Lambda to implement an API. CodePipeline builds and deploys the API. The company deploys without smoke tests, then observes API issues and later finds security vulnerabilities in production code. The company wants to prevent these issues in the future. Which combination of steps will meet this requirement? (Select TWO.)

Which option meets the requirement?

A. Create a smoke test script that returns an error code if the API fails. Add an action after deployment to run the script and fail the deployment stage if the script returns an error.

B. Add an action in the deployment stage to run an Amazon CodeGuru code scan after deployment and fail the deployment stage for security findings.

C. Create a smoke test script that returns an error code if the API fails. Add an action after deployment to run the script and configure the deployment stage for automatic rollback.

D. Add an action in the build stage that uses Amazon Inspector to scan the Lambda function code after the code is built and fail the build for security findings.

E. Add an action in the build stage to run an Amazon CodeGuru code scan after the code is built and fail the build for security findings.

8 / 10

Question

A DevOps team supports an application that runs on many EC2 instances in an Auto Scaling group. The application logs are collected in CloudWatch Logs by using embedded metric format. The team needs an alert if any EC2 instance is responsible for more than half of all errors. Which combination of steps meets this requirement with the least operational overhead? (Select TWO.)

Which option meets the requirement?

A. Create a Resource Groups group from the CloudFormation stack, add the application to CloudWatch Application Insights, and use the group to identify the application.

B. Create a CloudWatch alarm that uses INSIGHT_RULE_METRIC to determine whether a specific instance is responsible for more than half of all errors, and notify SNS.

C. Create a CloudWatch Contributor Insights rule that groups application log errors by instance ID.

D. Create a CloudWatch Logs subscription filter for errors that invokes Lambda, and have Lambda send each instance ID and error to SNS.

E. Create a metric filter for the term Error and a CloudWatch alarm that uses METRIC_COUNT to determine whether errors have occurred.

9 / 10

Question

A company that uses electronic health records runs a fleet of Amazon Linux EC2 instances. As part of patient privacy requirements, the company must ensure continuous patch compliance for operating system and application patches. How can operating system and application patch deployments be automated by using a default and custom repository?

Which option meets the requirement?

A. Use AWS Systems Manager to create a new patch baseline that includes the custom repository. Run the AWS-RunPatchBaseline document with Run Command to scan and install patches.

B. Use AWS Direct Connect to integrate the corporate repository and deploy patches with CloudWatch scheduled events, then use CloudWatch dashboards for reports.

C. Use yum-config-manager to add the custom repository under /etc/yum.repos.d and run yum-config-manager --enable to activate the repository.

D. Use Systems Manager to create a new patch baseline including the corporate repository. Run AWS-AmazonLinuxDefaultPatchBaseline with Run Command to verify and install patches.

10 / 10

Question

A company migrated container-based applications to Amazon EKS and wants automated email notifications. Notifications sent to each email address must be for specific activities related to EKS components. The solution includes SNS topics and a Lambda function to evaluate incoming log events and publish messages to the correct SNS topic. Which logging solution supports these requirements?

Which option meets the requirement?

A. Enable CloudWatch Logs for EKS control plane components. Create CloudWatch Logs subscription filters for each component with Lambda as the destination.

B. Enable CloudWatch Logs for EKS components. Create CloudWatch Logs Insights queries linked to EventBridge events that invoke Lambda.

C. Enable S3 logging for EKS components. Configure a CloudWatch subscription filter for each component with Lambda as the destination.

D. Enable S3 logging for EKS components. Configure S3 PUT Object event notifications with Lambda as the destination.

Your score is

What this free DOP-C02 exam covers

CodePipeline, CodeDeploy, CodeBuild, and deployment rollback patterns
CloudWatch, EventBridge, Config, Systems Manager, and audit workflows
ECR lifecycle management and container platform operations
CodeArtifact package publishing and public repository integration
Operational overhead tradeoffs for professional-level AWS scenarios

Who should take this mock test

Use this practice exam if you are preparing for AWS Certified DevOps Engineer - Professional (DOP-C02), especially if you already understand core AWS services and want to sharpen exam-style decision making.

Browse AWS practice exams Study AWS articles

FAQ

Is this DOP-C02 practice exam free?

Yes. This AWS DevOps Engineer Professional mock test is free to open and retake.

Does this replace hands-on AWS practice?

No. Use it with hands-on work in CI/CD, monitoring, Systems Manager, CloudFormation, and container workflows.

How should I review missed questions?

Read every option explanation, identify the AWS service pattern being tested, then practice the same workflow in a lab or review the official documentation.

Free AWS DevOps Engineer Professional Practice Exam | DOP-C02 Mock Test

Practice DevOps automation, deployment, monitoring, and governance scenarios for DOP-C02.

Question

Correct Answer: C

Question

Correct Answer: B, D

Question

Correct Answer: B

Question

Correct Answer: C

Question

Correct Answer: C

Question

Correct Answer: B

Question

Correct Answer: C, E

Question

Correct Answer: B, C

Question

Correct Answer: A

Question

Correct Answer: A

What this free DOP-C02 exam covers

Who should take this mock test

FAQ

Is this DOP-C02 practice exam free?

Does this replace hands-on AWS practice?

How should I review missed questions?

Leave a Reply Cancel reply