DOP-C02 sample questions with answers
The other 90 questions are in the practice tool, with answers revealed as you go.
Start 20 questionsSDLC automation
Configuration management and IaC
- A security team requires that a set of IAM roles and a Config recorder be deployed to every existing and FUTURE account in an OU across 3 regions, with minimal effort. What should be used?
- When a CloudFormation stack is deleted, an S3 bucket and DynamoDB table must be kept, and an RDS instance should leave a final snapshot. Which attributes?
Resilient cloud solutions
Monitoring and logging
Incident and event response
Security and compliance
- Container images must be scanned continuously for new CVEs, including images pushed months ago. What should be enabled?
- A security team wants a report of IAM roles and users across an AWS Organization that have not used any permissions in the last 90 days. The team wants a managed finding list it can review, without writing or maintaining scripts. Which feature should be used?
- A monitoring vendor assumes a read-only role in the company's account. The company wants to prevent the confused deputy problem, where another customer of the vendor could cause the vendor to use this role against the company. Which trust policy control should be used?