Cert Master

DOP-C02 Domain 2: Configuration Management and Infrastructure as Code

EC2 instances behind an ALB drift because of launch-time differences and manual SSH changes. The company wants identical configuration at launch and over the instance lifetime. Which solution meets this?

Multiple choice — select one answer

Answer choices

  1. a. SSM Parameter Store hierarchies per env
  2. b. Create a Lambda function that detects drift on the existing stack and updates the stack using the current template. Invoke it on a daily schedule with Amazon EventBridge.
  3. c. Golden AMI per update; OldestLaunchConfiguration termination; double capacity then return to original size; disable OS console access; use AWS Systems Manager for maintenance.
  4. d. Systems Manager Compliance and AWS Config

Architectural breakdown & explanation

Immutable AMIs plus replacing oldest instances removes drift; Systems Manager supports controlled changes without ad hoc SSH.

Correct answer(s): c. Golden AMI per update; OldestLaunchConfiguration termination; double capacity then return to original size; disable OS console access; use AWS Systems Manager for maintenance.

Exam domain: Domain 2: Configuration Management and Infrastructure as Code (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified DevOps Engineer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications