AWS Certified DevOps Engineer – Professional Practise Exam

Who it is for

• Candidates preparing for the AWS Certified DevOps Engineer – Professional Certification (DOP-C02).
• Practitioners who provision, operate, and manage AWS environments and need practice with CI/CD, infrastructure as code, resilience, monitoring, incident response, and security automation.

What this exam covers

• SDLC Automation — 22%
• Configuration Management and IaC — 17%
• Resilient Cloud Solutions — 15%
• Monitoring and Logging — 15%
• Incident and Event Response — 14%
• Security and Compliance — 17%

What you will practice

• Build CI/CD pipelines with AWS CodePipeline, AWS CodeBuild, and AWS CodeDeploy, manage artifacts in Amazon ECR and AWS CodeArtifact, and deploy to Amazon EC2, Amazon ECS, Amazon EKS, and AWS Lambda.
• Provision infrastructure with AWS CloudFormation, AWS CDK, and AWS SAM, manage accounts with AWS Organizations and AWS Control Tower, and automate configuration with AWS Systems Manager and AWS Config.
• Implement Multi-AZ and multi-Region designs with Amazon Route 53, Amazon RDS, and Amazon DynamoDB, scale with Amazon EC2 Auto Scaling and AWS Fargate, and recover to RTO and RPO with AWS Backup.
• Collect and analyze logs and metrics with Amazon CloudWatch, AWS CloudTrail, and AWS X-Ray, and automate responses with Amazon EventBridge and AWS Config rules.
• Route events with Amazon EventBridge, AWS Health, and AWS CloudTrail, remediate with AWS Systems Manager and AWS Lambda, and troubleshoot failed deployments in AWS CodePipeline and AWS CloudFormation.
• Apply IAM, AWS IAM Identity Center, and SCPs at scale, encrypt data with AWS KMS and ACM, and monitor findings with AWS Security Hub, Amazon GuardDuty, and Amazon Inspector.

About this practice exam

The AWS Certified DevOps Engineer – Professional exam tests a candidate’s technical expertise in provisioning, operating, and managing distributed systems and services on AWS: implement and manage continuous delivery systems and methodologies; implement and automate security controls, governance processes, and compliance validation; define and deploy monitoring, metrics, and logging systems; implement systems that are highly available, scalable, and self-healing; and design, manage, and maintain tools to automate operational processes. This practice exam prepares you for AWS Certified DevOps Engineer – Professional (DOP-C02) across SDLC Automation, Configuration Management and IaC, Resilient Cloud Solutions, Monitoring and Logging, Incident and Event Response, and Security and Compliance.

The exam emphasizes continuous integration and continuous delivery (CI/CD) with AWS CodePipeline, AWS CodeBuild, and AWS CodeDeploy; artifact and image repositories with AWS CodeArtifact, Amazon Elastic Container Registry (Amazon ECR), Amazon S3, and EC2 Image Builder; infrastructure as code with AWS CloudFormation, AWS Cloud Development Kit (AWS CDK), and AWS Serverless Application Model (AWS SAM); multi-account governance with AWS Organizations and AWS Control Tower; high availability and recovery with Amazon EC2 Auto Scaling, Elastic Load Balancing, Amazon Route 53, Amazon RDS, Amazon DynamoDB, and AWS Backup; logging and tracing with Amazon CloudWatch, AWS CloudTrail, and AWS X-Ray; event-driven response with Amazon EventBridge, AWS Lambda, and AWS Step Functions; and identity and data protection with AWS Identity and Access Management (IAM), AWS Key Management Service (AWS KMS), and AWS Secrets Manager. It does not primarily assess advanced networking knowledge such as advanced routing algorithms and failover techniques, providing deep-level security recommendations to developers, designing, querying, and optimizing the performance of databases, or developing full-stack application code.

The official AWS Certified DevOps Engineer – Professional (DOP-C02) exam is 75 questions in 180 minutes. This practice exam follows the six official DevOps Engineer – Professional domains and their published weights.

The certification validates understanding of:

• SDLC Automation: CI/CD pipelines with AWS CodePipeline, AWS CodeBuild, and AWS CodeDeploy; secrets with AWS Secrets Manager and AWS Systems Manager Parameter Store; automated testing in pipelines; artifacts with AWS CodeArtifact, Amazon S3, and Amazon ECR; Amazon EC2 and container images with EC2 Image Builder; and blue/green and canary deployments to Amazon EC2, Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), and AWS Lambda.
• Configuration Management and IaC: reusable templates with AWS CloudFormation, AWS CDK, AWS SAM, AWS Service Catalog, and CloudFormation StackSets; configuration with AWS OpsWorks, AWS Systems Manager, AWS Config, and AWS AppConfig; multi-account provisioning with AWS Organizations and AWS Control Tower; service control policies (SCPs); and governance with AWS Security Hub, Amazon GuardDuty, and Amazon Detective.
• Resilient Cloud Solutions: Multi-AZ and multi-Region designs with Amazon DynamoDB, Amazon RDS, Amazon Aurora, Amazon Route 53, Amazon S3, and Amazon CloudFront; scaling with Amazon EC2 Auto Scaling, Elastic Load Balancing, Amazon ECS, Amazon EKS, Amazon API Gateway, AWS Lambda, and AWS Fargate; and automated recovery to recovery time objective (RTO) and recovery point objective (RPO) with AWS Backup, including pilot light and warm standby.
• Monitoring and Logging: Amazon CloudWatch metrics, metric filters, metric streams, the CloudWatch agent, and CloudWatch Logs Insights; log processing with Amazon Kinesis Data Firehose, Amazon Kinesis Data Streams, AWS Lambda, and Amazon OpenSearch Service; analysis with Amazon Athena, Amazon QuickSight, AWS X-Ray, and AWS CloudTrail; Amazon Inspector and AWS Config rules; and automated response with Amazon EventBridge, Amazon Simple Notification Service (Amazon SNS), and health checks on Application Load Balancer target groups and Amazon Route 53.
• Incident and Event Response: event sources with AWS Health, Amazon EventBridge, and AWS CloudTrail; workflows with Amazon Simple Queue Service (Amazon SQS), Amazon Kinesis, Amazon SNS, AWS Lambda, and AWS Step Functions; configuration changes with AWS Systems Manager, AWS Auto Scaling, and AWS Config; and troubleshooting failed deployments in AWS CodePipeline, AWS CodeBuild, AWS CodeDeploy, AWS CloudFormation, Amazon ECS, and Amazon EKS by using Amazon CloudWatch, AWS X-Ray, and AWS Systems Manager OpsCenter.
• Security and Compliance: identity at scale with IAM, AWS IAM Identity Center, SCPs, AWS Security Token Service (AWS STS), multi-factor authentication (MFA), and AWS Secrets Manager; automated controls with AWS Security Hub, AWS Organizations, AWS Control Tower, AWS WAF, AWS Shield, AWS Network Firewall, and Amazon Macie; encryption with AWS KMS, AWS CloudHSM, and AWS Certificate Manager (ACM); and auditing with AWS CloudTrail, AWS Config, VPC flow logs, Amazon GuardDuty, Amazon Inspector, IAM Access Analyzer, and Amazon Detective.