AWS Certified DevOps Engineer – Professional (DOP-C02) Practice Questions (Free Sample)

Free practice sample

Fifteen original AWS Certified DevOps Engineer – Professional practice questions, unlocked with no signup and instant scoring. The sample draws proportionally across all six domains of the DOP-C02 blueprint: SDLC Automation, Configuration Management and Infrastructure as Code, Resilient Cloud Solutions, Monitoring and Logging, Incident and Event Response, and Security and Compliance, so the mix reflects the shape of the real exam rather than a single topic slice.

DOP-C02 is a Professional-tier exam, and the difficulty lives in the answer options rather than the stems. Questions are scenario-heavy prose describing a real delivery or operations situation, and two or three of the options are genuinely defensible. The right one is better along the exact dimension the scenario emphasises, whether that is blast radius, RTO, cost, rollback behaviour, or ongoing operational load. Reading for which dimension the scenario names is most of the skill. These questions are written to that standard, and every explanation names the winning answer and the near-miss it beats.

Vendor · AWS Exam code · DOP-C02 Level · Professional 75 questions (65 scored + 10 unscored) Duration · 180 min Pass 750 / 1000 $300 USD MCQ + multi-response 6 domains ~2 yrs AWS DevOps experience 3-year validity Pearson VUE or online proctored
SDLC Automation Domain 1 · 22%
Configuration Management and Infrastructure as Code Domain 2 · 17%
Resilient Cloud Solutions Domain 3 · 15%
Monitoring and Logging Domain 4 · 15%
Incident and Event Response Domain 5 · 14%
Security and Compliance Domain 6 · 17%

AWS Certified DevOps Engineer - Professional (DOP-C02) Practice Questions (Free Sample)

  1. Question 1 of 15D1 SDLC Automation

    A team wants CodePipeline to abort and roll back a production deployment automatically whenever a specific CloudWatch alarm goes into ALARM during the release. Which single configuration achieves this without adding a Lambda function to the pipeline?

  2. Question 2 of 15D2 Configuration Management and IaC

    A CloudFormation stack fails during update and lands in UPDATE_ROLLBACK_FAILED. What is the recommended way to recover the stack cleanly?

  3. Question 3 of 15D3 Resilient Cloud Solutions

    An application needs a 15-minute RTO and a 5-minute RPO for a PostgreSQL primary. The budget does not support a hot always-on cluster in a second region. Which pattern is the best fit?

  4. Question 4 of 15D4 Monitoring and Logging

    A security team needs a single searchable copy of all CloudWatch Logs across 20 workload accounts with 30-day retention. They do not want to grant per-query cross-account IAM on every source account. What is the best architecture?

  5. Question 5 of 15D5 Incident and Event Response

    A team wants any StopInstances API call by a non-approved principal to immediately restart the instance and page security. Which architecture matches the requirement with the least effort?

  6. Question 6 of 15D6 Security and Compliance

    An organization needs to ensure that no member account can leave AWS Organizations and that no principal can create root-user credentials in any workload account. Which control satisfies both requirements?

  7. Question 7 of 15D1 SDLC Automation

    A CodeBuild project runs inside a VPC with no internet gateway and pushes images to Amazon ECR through a NAT gateway. The team wants to eliminate NAT data-processing charges for image pushes. What is the correct change?

  8. Question 8 of 15D2 Configuration Management and IaC

    A team wants a shared internal library used by many CodeBuild projects. Publishing should not require running a server, and consuming pipelines should authenticate by IAM rather than a shared credential. Which AWS service fits?

  9. Question 9 of 15D3 Resilient Cloud Solutions

    A read-heavy DynamoDB table experiences hot-partition throttling on a small set of item keys during a flash sale. Provisioned capacity is generous overall. Which change most directly relieves the hot partition without changing the schema?

  10. Question 10 of 15D4 Monitoring and Logging

    A CloudWatch alarm fires for two minutes on every deploy because instances briefly report Unhealthy while warming up. Alert fatigue is causing on-call to ignore the alarm. Which change reduces noise without hiding real incidents?

  11. Question 11 of 15D5 Incident and Event Response

    A team uses AWS Systems Manager Incident Manager. When the primary on-call engineer does not acknowledge a page, escalation to the secondary and manager frequently does not happen. Which change fixes this?

  12. Question 12 of 15D6 Security and Compliance

    An organization needs annual KMS key rotation for a customer managed key that encrypts S3 objects. Auditors ask how old objects continue to decrypt after rotation. What is the correct answer?

  13. Question 13 of 15D1 SDLC Automation

    A SAM template deploys a Lambda function behind API Gateway. The team wants each release to shift 5 percent of traffic for 30 minutes and roll back automatically if a specific CloudWatch alarm fires. Which single feature achieves this with the least code?

  14. Question 14 of 15D2 Configuration Management and IaC

    A CloudFormation stack update to an EC2 instance changes the UserData script but the running instance keeps executing the old application. What is the underlying reason?

  15. Question 15 of 15D6 Security and Compliance

    A CodePipeline needs an OAuth token for a private GitHub organization. The token currently lives in AWS Secrets Manager but is echoed to CodeBuild logs by a command that dumps environment variables. Which change stops the leak while keeping the token in Secrets Manager?

Untimed, no account needed. Your score appears instantly. Add your email afterwards if you want the explanation for every question and a copy of your results.

Frequently asked questions about the AWS DevOps Engineer – Professional exam

How many questions are on the actual DOP-C02 exam?

75 questions in a 180-minute window. Of those, 65 are scored and 10 are unscored items AWS uses to calibrate future exam forms. You will not know which are which, so every question gets the same effort. The format mixes multiple choice, where one answer is correct, with multiple response, where two or more are. Confirm current logistics on the AWS Certification site when you book, since AWS sets the format and may change it.

What score do I need to pass DOP-C02?

AWS reports a scaled score between 100 and 1000, with 750 required to pass. That conversion does not map linearly to a raw percentage, so 750 is not “75% of the questions right”: AWS adjusts for item difficulty across forms. The honest working equivalent is that you should be scoring 75% or better on high-quality practice sets before you book, which is why Certifym sets the pass mark on its DOP-C02 sets at 75%. Treat it as a floor rather than a target.

Which domains should I spend the most time on?

SDLC Automation is the single heaviest domain at 22%, pipelines, deployment strategies across EC2, ECS, EKS and Lambda, and the testing gates around them. Configuration Management and Infrastructure as Code and Security and Compliance are joint second at 17% each, so those three together carry well over half the scored questions. Resilient Cloud Solutions and Monitoring and Logging are 15% apiece, and Incident and Event Response is the lightest at 14%. That last one is small but unforgiving: it asks you to reason about what an automated or human response actually does under pressure, which is not something you can revise into place the night before.

Do I really need two years of AWS DevOps experience?

AWS’s target profile calls for at least two years of hands-on AWS experience in a DevOps role, plus fluency in a programming or scripting language, infrastructure as code, containers, and CI/CD tooling. That is a description of who the questions are written for, not paperwork you file. Nothing stops you booking earlier. What the profile really signals is that the exam assumes you have already lived through a real incident, argued with CloudFormation about a rollback, and rewritten a canary configuration at 2 AM. Candidates who have read about those situations rather than been in them find the option sets much harder to separate.

Does passing DOP-C02 recertify any other AWS certifications?

Yes. Passing DOP-C02 automatically recertifies the AWS Certified CloudOps Engineer – Associate (SOA-C03), and the AWS Certified Developer – Associate (DVA-C02) if it is still current, resetting both to a fresh three-year window. That makes it an efficient recertification path if you already hold those associate credentials. AWS also issues a 50% discount voucher after you pass any AWS certification, which can be applied to a future registration.

How does DOP-C02 differ from Solutions Architect – Professional?

They are the two Professional-tier AWS credentials and they sit at the same difficulty ceiling, but they test different work. DOP-C02 is operational, pipelines, configuration management, monitoring, incident response, and the guardrails that keep multi-account delivery safe. SAP-C02 is architectural, landing zones, service selection, migration strategy. Many senior engineers hold both, because the job spans both, but the bodies of knowledge overlap less than the shared “Professional” label suggests. Preparing for one is not preparing for the other.

How is this free sample different from the full Certifym bank?

The sample is a fixed 15-question set spread across the six domains at blueprint proportions, with no account needed. The full Certifym bank is 650 original Professional-tier questions across ten independent 65-question sets, each distributed exactly to the DOP-C02 blueprint: 14 SDLC Automation, 11 Configuration Management and IaC, 10 Resilient Cloud Solutions, 10 Monitoring and Logging, 9 Incident and Event Response, and 11 Security and Compliance, at a 75% pass mark that mirrors the real 750-of-1000 scaled score. Each set is written around a different vertical, so working through several shows you the same domains in a wide spread of real-world contexts rather than the same handful reworded. None of the paid-bank items appear in this sample.

Is Certifym affiliated with AWS?

No. Certifym.net is operated by Certifym Exam Services, LLC and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc. All questions and explanations on this site are original content produced by Certifym and are not sourced from actual AWS exam questions.

Trademark notice & independence. Certifym.net is operated by Certifym Exam Services, LLC and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc. AWS®, Amazon Web Services® and AWS Certified DevOps Engineer – Professional™ are trademarks of Amazon.com, Inc. or its affiliates, used here only to identify the certification these study materials are intended for. The DOP-C02 exam guide, its domain names and its weightings are the property of Amazon Web Services, Inc.; download the current exam guide directly from aws.amazon.com/certification.

All practice questions, answers, and explanations on this page are original content produced by Certifym Exam Services, LLC. They are not actual AWS examination questions and are not represented as such. Exam format, domain weights, fees and eligibility guidance are set by Amazon Web Services and may change; verify current details at aws.amazon.com/certification before scheduling.