Cert Master

DOP-C02 Domain 5: Incident and Event Response

While troubleshooting latency, engineers determine they must isolate compromised EC2 quickly. Which action is appropriate?

Multiple choice — select one answer

Answer choices

  1. a. Security group isolation runbook or NACL deny
  2. b. Create an EventBridge rule on aws.ecs for STOPPED tasks with that stoppedReason; target the SNS topic.
  3. c. AWS Config rule in each account (or organization) for public ACLs/policies with automated remediation via a Systems Manager Automation runbook.
  4. d. Leave instance in prod VLAN (not recommended for production workloads)

Architectural breakdown & explanation

Isolation limits lateral movement.

Correct answer(s): a. Security group isolation runbook or NACL deny

Exam domain: Domain 5: Incident and Event Response (14% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified DevOps Engineer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications