Define cloud infrastructure and reusable components to provision and manage systems throughout their lifecycle.
13 practice questions under this official exam objective (DOP-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
13 total · page 1 of 1Allow the primary account in the destination vault access policy and share the primary KMS
AWS Backup cross-account backup requires two things in the destination account: a backup vault whose access policy permits the source account, and a c
Create a Multi-AZ FSx for NetApp ONTAP file system, mount it via user data, and instance r
A single shared durable file system must serve both Windows over SMB and Linux over NFS with sub-millisecond latency across multiple Auto Scaling grou
Configure the EKS Pod Identity Agent add-on so pods obtain credentials without an OIDC pro
EKS Pod Identity gives pods AWS credentials without storing any IAM credentials in Kubernetes Secrets and without the instance metadata service. Becau
Use a service-managed StackSet on the root OU and deploy a separate stack in the managemen
CloudFormation StackSets does not create stack instances in the Organizations management account, even when the organization root is a deployment targ
Empty the non-empty S3 bucket from the custom resource's Lambda on Delete using RequestTyp
CloudFormation cannot delete a non-empty S3 bucket, and the bucket is populated because a custom resource copies website content into it from a source
Enforce the cost allocation tag with CDK tagging and deploy SQS queues defined as CDK cons
Two problems must be solved together: the cost allocation tag is not always applied, and SQS queues in different stacks end up with different configur
Create the AWSControlTowerExecution role in the new account and enroll it with the Service
Enrolling a newly created account into an existing AWS Control Tower landing zone requires two things in the workflow: the new account must contain an
Deploy Multi-AZ FSx for NetApp ONTAP per Region with a scheduled SnapMirror relationship t
The source is a NetApp ONTAP device mounted read-only, updated weekly, and the data must stay continuously deduplicated, be replicated to four Regions
Centralize a domain and shared-library repository in the shared services account and use i
Each application team needs full control over its own packages in its own account, while common libraries must be shared org-wide, and the design must
Export the database stack and import its outputs as references in the web application temp
Both teams must keep their own review and lifecycle processes and both need resource-level change-set review, and the software team wants to deploy th
Allow NFS inbound from the cluster, give the EFS CSI driver an IAM role, and create a moun
For EKS nodes to mount an EFS file system through the EFS CSI driver, three things must all be in place. The EFS file system's security group must all
Create an FSx for NetApp ONTAP instance in the DR Region with a 5-minute SnapMirror schedu
The application data does not reside on the EC2 instances, so the recovery objective applies to the FSx for NetApp ONTAP volume, and the compute and i
Subscribe all log groups to a Firehose delivery stream in a dedicated account with a Lambd
CloudWatch Logs data must reach a bucket in a dedicated account for both existing and future log groups. A CloudWatch Logs destination together with a