Career upgrade: Learn practical AI skills for better jobs and higher pay.
Level up
All Practice Exams

100+ Free AWS DevOps Engineer Professional Practice Questions

Pass your AWS Certified DevOps Engineer – Professional (DOP-C02) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

A company uses Amazon Route 53 with a failover routing policy. The primary endpoint is in us-east-1 and the secondary is in us-west-2. What does Route 53 use to determine when to route traffic to the secondary endpoint?

A
B
C
D
to track
2026 Statistics

Key Facts: AWS DevOps Engineer Professional Exam

75

Total Questions

AWS exam guide (65 scored + 10 unscored)

180 min

Exam Time

AWS DOP-C02 exam guide

750/1000

Passing Score

AWS scaled scoring model

$300

Exam Fee

AWS certification pricing

6

Content Domains

DOP-C02 exam guide

2+ years

Recommended Experience

AWS exam guide

The AWS DevOps Engineer Professional (DOP-C02) requires a scaled score of 750/1000 to pass. The exam has 75 questions (65 scored + 10 unscored) in 180 minutes. Domain 1 (SDLC Automation) is the largest at 22%, followed by Configuration Management and IaC (17%), Security and Compliance (17%), Resilient Cloud Solutions (15%), Monitoring and Logging (15%), and Incident and Event Response (14%). AWS recommends 2+ years of DevOps experience. The exam fee is $300.

Sample AWS DevOps Engineer Professional Practice Questions

Try these sample questions to test your AWS DevOps Engineer Professional exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1A company wants to implement a deployment strategy that routes a small percentage of production traffic to a new application version before fully rolling it out. Which deployment strategy should the DevOps engineer use?
A.In-place deployment with all-at-once configuration
B.Blue/green deployment with immediate traffic cutover
C.Canary deployment with weighted traffic shifting
D.Rolling deployment with a single batch
Explanation: A canary deployment routes a small percentage of traffic to the new version first, allowing the team to monitor for errors before shifting all traffic. This minimizes the blast radius of potential issues. AWS CodeDeploy supports canary deployments with configurable traffic shifting.
2A DevOps engineer needs to automatically trigger a build when code is pushed to an AWS CodeCommit repository. Which service should be used to detect the push event and start the pipeline?
A.AWS CloudTrail
B.Amazon EventBridge
C.AWS Config
D.Amazon Inspector
Explanation: Amazon EventBridge can capture CodeCommit repository state change events (such as push events) and trigger downstream actions like starting an AWS CodePipeline. This is the recommended event-driven approach for CI/CD triggers on AWS.
3An application team uses AWS CodePipeline with a manual approval action before deploying to production. The team wants to automatically reject the approval if no action is taken within 2 hours. How should this be configured?
A.Set the timeout property on the manual approval action in CodePipeline
B.Create a CloudWatch alarm that triggers after 2 hours to reject the approval
C.Use a Lambda function on a scheduled EventBridge rule to check pending approvals
D.Configure an SNS topic with a timeout attribute to auto-reject
Explanation: AWS CodePipeline manual approval actions support a configurable timeout period. When the timeout expires without approval, the action automatically fails and the pipeline stops. This is a built-in feature that requires no additional services.
4A DevOps engineer is configuring AWS CodeBuild to run unit tests. The build specification needs to install dependencies, run tests, and generate a coverage report. In which section of the buildspec.yml should the test commands be placed?
A.install phase
B.pre_build phase
C.build phase
D.post_build phase
Explanation: The build phase in buildspec.yml is where the primary build and test commands should run. The install phase is for installing dependencies, pre_build is for pre-build steps like logging into registries, and post_build is for cleanup or artifact packaging after the main build completes.
5A company wants to ensure that all CodePipeline deployments to production use a specific, tested artifact version from a previous staging environment. Which CodePipeline feature ensures artifact consistency across stages?
A.Stage-specific environment variables
B.Input artifacts from a previous stage's output
C.Separate S3 buckets for each stage
D.Manual artifact upload between stages
Explanation: CodePipeline automatically passes artifacts between stages using input and output artifacts. When you configure a production stage to use the output artifact from a staging stage, the exact same tested artifact is deployed, ensuring version consistency without manual intervention.
6A team is migrating from Jenkins to AWS CodePipeline. They need to continue using their existing Jenkins build jobs during the transition. How can they integrate Jenkins with CodePipeline?
A.Replace Jenkins with CodeBuild immediately
B.Use the Jenkins action provider in CodePipeline
C.Run Jenkins inside CodeBuild containers
D.Use Lambda functions to call Jenkins API endpoints
Explanation: AWS CodePipeline natively supports Jenkins as a build or test action provider. You install the CodePipeline plugin on your Jenkins server, configure it as a custom action provider, and CodePipeline triggers Jenkins jobs as part of the pipeline execution.
7A DevOps engineer wants to implement a blue/green deployment for an application running on Amazon ECS with Fargate. Which AWS service orchestrates the traffic shifting between the blue and green target groups?
A.AWS CodePipeline
B.AWS CodeDeploy
C.Application Load Balancer
D.Amazon Route 53
Explanation: AWS CodeDeploy orchestrates blue/green deployments for Amazon ECS services. It manages the traffic shifting between two target groups (blue and green) registered with an Application Load Balancer. CodeDeploy supports linear, canary, and all-at-once traffic shifting configurations.
8A company requires all CodeBuild projects to use VPC networking to access internal resources. The build environment must also pull dependencies from the internet. What must be configured to enable both internal and internet access?
A.Assign a public IP to the CodeBuild instance in the VPC
B.Place CodeBuild in a private subnet with a NAT gateway for internet access
C.Use VPC peering to connect CodeBuild to the internet
D.Configure an internet gateway directly on the CodeBuild subnet
Explanation: When CodeBuild runs in a VPC, it must be placed in a private subnet. To access the internet for pulling dependencies, a NAT gateway (or NAT instance) in a public subnet provides outbound internet connectivity while keeping the build environment private.
9A DevOps engineer needs to create a multi-stage CodePipeline that deploys to development, staging, and production environments in sequence. Each environment uses different CloudFormation parameter values. What is the recommended way to manage environment-specific parameters?
A.Maintain separate buildspec.yml files for each environment
B.Use pipeline stage-level parameter overrides in the CloudFormation deploy action
C.Create separate pipelines for each environment
D.Hard-code parameters in the CloudFormation template
Explanation: CodePipeline's CloudFormation deploy action supports parameter overrides, allowing you to specify different parameter values for each stage. This lets you use a single template with environment-specific values injected at deployment time, keeping your pipeline DRY.
10A company has a CodePipeline that deploys Lambda functions. They want to automatically roll back if the new function version has more than 1% error rate in the first 10 minutes. Which combination of services enables this?
A.CloudWatch Alarms with CodeDeploy automatic rollback
B.X-Ray with manual pipeline approval
C.CloudTrail with Lambda versioning
D.EventBridge with Step Functions
Explanation: AWS CodeDeploy supports Lambda traffic shifting (canary/linear) with automatic rollback triggered by CloudWatch Alarms. You create an alarm on the Lambda error rate metric, and CodeDeploy automatically rolls back to the previous version if the alarm triggers during the deployment window.

About the AWS DevOps Engineer Professional Exam

The AWS Certified DevOps Engineer – Professional (DOP-C02) validates advanced expertise in provisioning, operating, and managing distributed systems on AWS. The exam covers CI/CD automation, infrastructure as code, resilient architecture, monitoring and logging, incident response, and security compliance across six weighted domains.

Questions

75 scored questions

Time Limit

3 hours

Passing Score

750/1000

Exam Fee

$300 (Amazon Web Services (AWS))

AWS DevOps Engineer Professional Exam Content Outline

22%

SDLC Automation

CI/CD pipelines, build and test automation, deployment strategies, CodePipeline, CodeBuild, CodeDeploy, blue/green and canary deployments

17%

Configuration Management and IaC

CloudFormation, CDK, Systems Manager, OpsWorks, parameter management, drift detection, and infrastructure provisioning

15%

Resilient Cloud Solutions

High availability, Auto Scaling, ELB, multi-AZ and multi-Region patterns, disaster recovery, and fault-tolerant architectures

15%

Monitoring and Logging

CloudWatch metrics and alarms, X-Ray tracing, CloudTrail auditing, OpenSearch, and centralized logging architectures

14%

Incident and Event Response

EventBridge rules, Lambda automation, SNS/SQS event processing, Health events, and automated remediation workflows

17%

Security and Compliance

IAM policies, KMS encryption, Secrets Manager, Config rules, Security Hub, GuardDuty, and compliance automation

How to Pass the AWS DevOps Engineer Professional Exam

What You Need to Know

  • Passing score: 750/1000
  • Exam length: 75 questions
  • Time limit: 3 hours
  • Exam fee: $300

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

AWS DevOps Engineer Professional Study Tips from Top Performers

1Focus on SDLC Automation (22%) — master CodePipeline, CodeBuild, CodeDeploy, and deployment strategies (blue/green, canary, rolling)
2Know CloudFormation deeply: nested stacks, drift detection, change sets, custom resources, and cross-stack references
3Pair IaC knowledge with Systems Manager: Parameter Store vs Secrets Manager, Run Command, State Manager, and Patch Manager
4Master CloudWatch: custom metrics, metric math, composite alarms, Logs Insights queries, and cross-account dashboards
5Study event-driven patterns: EventBridge rules, Lambda triggers, SQS dead-letter queues, and Step Functions for orchestration
6Review IAM policy evaluation logic, SCPs, permission boundaries, and cross-account access patterns
7Practice with timed 75-question sessions to build stamina for the 3-hour exam format

Frequently Asked Questions

How many questions are on the AWS DevOps Engineer Professional exam?

The DOP-C02 exam has 75 total questions: 65 scored items and 10 unscored pretest questions. You have 180 minutes (3 hours) to complete the exam. Questions are either multiple choice (one correct answer) or multiple response (two or more correct answers). Unscored questions are not identified during the exam.

What score do I need to pass the AWS DOP-C02 exam?

You need a minimum scaled score of 750 out of 1000 to pass. AWS uses a compensatory scoring model, meaning you do not need to pass each domain individually — your overall score determines the result. Scores are reported on a scale of 100 to 1000.

What are the six domains of the DOP-C02 exam?

The six domains are: Domain 1 — SDLC Automation (22%): CI/CD pipelines and deployment strategies; Domain 2 — Configuration Management and IaC (17%): CloudFormation, CDK, Systems Manager; Domain 3 — Resilient Cloud Solutions (15%): HA, scaling, and DR patterns; Domain 4 — Monitoring and Logging (15%): CloudWatch, X-Ray, centralized logging; Domain 5 — Incident and Event Response (14%): EventBridge, automated remediation; Domain 6 — Security and Compliance (17%): IAM, encryption, compliance automation.

How much does the AWS DevOps Engineer Professional exam cost?

The DOP-C02 exam costs $300 USD. If you already hold an active AWS certification, you are eligible for a 50% discount on your next exam. Retakes also cost $300, and you must wait 14 days before retaking after a failed attempt.

What experience does AWS recommend for DOP-C02?

AWS recommends at least 2 years of experience provisioning, operating, and managing AWS environments. The ideal candidate also has experience with software development lifecycle practices and programming or scripting languages. Most successful candidates hold at least one AWS Associate-level certification before attempting the Professional exam.

How should I prepare for the AWS DevOps Engineer Professional exam in 2026?

Focus on SDLC Automation (22%) as the largest domain. Master CodePipeline, CodeBuild, and CodeDeploy for CI/CD questions. Study CloudFormation and CDK deeply for IaC. Practice CloudWatch dashboards, alarms, and X-Ray for monitoring. Build hands-on experience with EventBridge for event-driven automation. Review IAM policies, KMS, and Config rules for security. Complete 100+ practice questions scoring 80%+ before scheduling.