Task Statement 5.2: Implement Configuration Changes in Response to Events. DOP-C02 Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   An operational event (e.g., a security incident) requires you to change the security group rules of an EC2 instance. Which AWS service or feature is designed to help you modify security group rules programmatically in response to such events?

   • AAWS CloudTrail
   • BAWS Auto Scaling
   • CAWS Systems Manager Automation
   • DAWS Config
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company runs a critical application on EC2 instances in an Auto Scaling group. The application is sensitive to changes in the number of instances, and the operations team wants to avoid any scaling activity during a known maintenance window (e.g., every Sunday from 2 AM to 4 AM). The team also wants to ensure that scaling policies are still active outside of this window. What is the most appropriate solution?

   • AUse AWS Config to detect scaling activity and revert it during the maintenance window.
   • BUse an AWS Auto Scaling scheduled action to suspend the scaling policies during the maintenance window and resume them after.
   • CUse an Amazon EventBridge rule to stop the Auto Scaling group during the maintenance window and start it after.
   • DUse AWS Systems Manager State Manager to enforce a desired capacity during the maintenance window.
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   A DevOps engineer needs to apply a configuration change (e.g., update a configuration file) to a group of EC2 instances that are managed by AWS Systems Manager. Which approach is most appropriate?

   • AManually SSH into each instance and edit the file
   • BUse AWS Config to modify the file
   • CUse AWS Auto Scaling to change the instance type
   • DUse Systems Manager Run Command to execute a script on the target instances
   Reveal Solution Discussion Select an answer first