[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-317407-105":59,"doc-detail-317407-en":131},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":124,"head_meta":126,"extra_data":128,"updated_unix":130},105,"en","aws-certified-devops-engineer-professional-sample-questions-317407","AWS Certified DevOps Engineer - Professional Sample Questions","","Sample questions covering core AWS DevOps practices across CI/CD automation, branch protection, secure build artifact handling, and blue/green deployments. Topics include using AWS CodeCommit with CodePipeline for responsive triggering on master changes, combining IAM and repository event notifications to enforce least-privilege controls with minimal delay, encrypting CodeBuild artifacts at rest while restricting access via assumed roles, and shifting traffic gradually between EC2-based environments using Route 53 routing and load balancer setups.",{"@graph":69,"@context":123},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":20,"@type":76,"position":81},"https://docshare.wps.com/document/exam/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/aws-certified-devops-engineer-professional-sample-questions-317407/317407/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/aws-certified-devops-engineer-professional-sample-questions-317407/317407.png","ImageObject",300,407,{"name":92,"@type":93},"Kyle","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-28","2026-09-20",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",12,{"@type":107,"mainEntity":108},"FAQPage",[109,115,119],{"name":110,"@type":111,"acceptedAnswer":112},"How can a pipeline start automatically on changes to the CodeCommit master branch with minimal delay?","Question",{"text":113,"@type":114},"Use an event-driven approach such as generating a CloudWatch Events (EventBridge) event on repository changes and starting the pipeline in response to that event, rather than periodic polling.","Answer",{"name":116,"@type":111,"acceptedAnswer":117},"What combination protects the CodeCommit master branch while notifying the project manager immediately after merges or commits?",{"text":118,"@type":114},"Use deny-based permissions (IAM or repository resource policy) to prevent pushing/merging and add a CloudWatch Events rule triggered by a CodeCommit repository state change for the master branch with an SNS topic as the target.",{"name":120,"@type":111,"acceptedAnswer":121},"How should CodeBuild build artifacts be encrypted at rest and access restricted to the operations role?",{"text":122,"@type":114},"Store artifacts in S3 with encryption enforced (via S3 default encryption and a deny policy or via encryption in the build process), and ensure only the operations IAM role/users with assume-role permission can access the encrypted artifacts.","https://schema.org",{"og:url":83,"og:type":125,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":127,"canonical":83},"index,follow",{"doc_id":129,"site_id":62},317407,1790027810,{"code":4,"msg":5,"data":132},{"doc_id":129,"user_id":133,"nickname":92,"user_avatar":134,"doc_module":4,"category_id":19,"category_name":20,"doc_title":65,"doc_description":67,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":44,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145,"preview_page_count":4},3985741905716,"https://ap-avatar.wpscdn.com/davatar_994ba38a5ba835b3df7d355c54d3ed8d","1) A company controls the source code for its product in AWS CodeCommit. The company is creating a CI/CD pipeline for the product using AWS CodePipeline. The pipeline must automatically start on changes to the master branch of the CodeCommit repository. Changes are made to the application every day, so the pipeline needs to be as responsive as possible.  \nWhich actions should the DevOps Engineer take to meet these requirements?  \nA. Configure the pipeline to periodically check the repository. Start the pipeline when changes are detected.  \nB. Configure the repository to generate an Amazon CloudWatch Events event upon changes. Configure the pipeline to start in response to the event.  \nC. Configure the repository to periodically run an AWS Lambda function. The function should check the repository and start the pipeline when changes are detected.  \nD. Configure the repository to publish an SNS notification upon changes. Subscribe the pipeline to the Amazon SNS topic.  \n2) A Development team wants to set up an AWS CodeCommit repository. Developers should be able push changes to their own branches, but they should not be allowed to push commits or merge pull requests into the master branch. Additionally, whenever a commit or merge occurs into the master branch, the Project Manager needs to receive a notification.  \nWhich combination of steps will protect the master branch and send the alert with the shortest delay?(Select TWO.)  \nA. Attach an AWS IAM policy to the developer IAM group that denies the actions of pushing commits, merging pull requests, and adding files to the master branch.  \nB. Attach a resource policy to the CodeCommit repository that denies members of the IAM developer group the actions of pushing commits, merging pull requests, and adding files to the master branch.  \nC. Set up a an AWS Lambda function that runs every 15 minutes to check for repository changes and publishes a notification to an Amazon SNS topic.  \nD. Set up an Amazon CloudWatch Events rule triggered by a CodeCommit Repository State Change event for the master branch and add an Amazon SNS topic as a target.  \nE. Configure AWS CloudTrail to send log events to Amazon CloudWatch Logs. Define a metric filter to identify repository events. Create a CloudWatch alarm with an Amazon SNS topic as a target.  \n3) A company is using AWS CodeBuild to build its application. Company policy requires that all build artifacts be encrypted at rest. Access to the artifacts must be limited to IAM users with permission to assume the operations role.  \nHow can these requirements be met?  \nA. Add a post-build command to the CodeBuild build specification that pushes build objects to an Amazon S3 bucket. Set a bucket policy that prevents upload to the bucket unless the request includes the header x-amz-server-side-encryption. Add a Deny statement for all actions with the NotPrincipal section referencing the operations IAM group.  \nB. Add a post-build command to the CodeBuild build specification that pushes build objects to an Amazon S3 bucket. Configure an S3 event notification to trigger an AWS Lambda function to get the object, encrypt it, then put it back into the S3 bucket with an encrypted tag key and a true tag value. Add an S3 bucket policy with a Deny statement for all actions with the NotPrincipal section referencing the operations IAM group, and a Condition section referencing the Encrypted tag.  \nC. Add a post-build command to the CodeBuild build specification that pushes build objects to an Amazon S3 bucket that has S3 default encryption enabled. Set an S3 bucket policy containing a Deny statement for all actions with the NotPrincipal section referencing the operations IAM role.  \nD. Add a post-build command to the CodeBuild build specification that calls the AWS KMS Encrypt API call, passing the artifact to AWS KMS for encryption with a specified customer master key (CMK) . Push the encrypted artifact to an Amazon S3 bucket, then set up the IAM operations grou","cbCaieA9jI1k3OrW","https://ap.wps.com/l/cbCaieA9jI1k3OrW","pdf",414375,"English","# CI/CD triggering with CodeCommit and CodePipeline\n## Repository change detection options\n# Protecting the master branch and sending alerts\n## IAM/repository policy enforcement and shortest-delay notifications\n# Encrypting CodeBuild artifacts at rest\n## S3 and KMS encryption approaches\n# Implementing blue/green deployments on AWS\n## Traffic shifting and environment setup","[{\"question\":\"How can a pipeline start automatically on changes to the CodeCommit master branch with minimal delay?\",\"answer\":\"Use an event-driven approach such as generating a CloudWatch Events (EventBridge) event on repository changes and starting the pipeline in response to that event, rather than periodic polling.\"},{\"question\":\"What combination protects the CodeCommit master branch while notifying the project manager immediately after merges or commits?\",\"answer\":\"Use deny-based permissions (IAM or repository resource policy) to prevent pushing/merging and add a CloudWatch Events rule triggered by a CodeCommit repository state change for the master branch with an SNS topic as the target.\"},{\"question\":\"How should CodeBuild build artifacts be encrypted at rest and access restricted to the operations role?\",\"answer\":\"Store artifacts in S3 with encryption enforced (via S3 default encryption and a deny policy or via encryption in the build process), and ensure only the operations IAM role/users with assume-role permission can access the encrypted artifacts.\"}]","AWS Certified DevOps Engineer - Professional Sample Questions | PDF",1789932643,23]