Free DOP-C02 practice exam with 75 realistic questions. Prepare for AWS Certified DevOps Engineer Professional covering CI/CD pipelines, CloudFormation, CodePipeline, CodeBuild, CodeDeploy, monitoring with CloudWatch, and infrastructure automation. Detailed explanations for every answer.
No sign-up — instant feedback after every question
Get instant feedback after each question. See explanations and track your progress as you learn.
Timed session with no feedback until the end. Experience real exam conditions and test your knowledge.
10 questions · pick a topic · 5 minutes · shareable
Every CI/CD service, automation pattern, and incident-response decision the DOP-C02 exam actually tests — organised by the six exam domains with decision trees and reference architectures
The AWS Certified DevOps Engineer Professional (DOP-C02) validates your expertise in automating testing, deployment, and operations of AWS infrastructure. It focuses on CI/CD pipelines, infrastructure as code, monitoring, logging, and incident management — the practices that keep production systems reliable and deployable.
This certification is aimed at DevOps engineers, site reliability engineers (SREs), platform engineers, and anyone responsible for automating and maintaining AWS-based systems. You should have at least two years of experience provisioning, operating, and managing AWS environments.
Read the full AWS DevOps Engineer Professional certification guide
The DOP-C02 exam has 75 questions (65 scored, 10 unscored) with multiple-choice and multiple-response questions. You get 180 minutes, and the passing score is 750/1000 (approximately 75%). The exam costs $300 USD.
Recommended experience: Two or more years of experience provisioning, operating, and managing AWS environments, plus strong experience with CI/CD tools and infrastructure automation.
Written in the style of the real exam. Answer each one, then open the answer to check.
Question 1 · SDLC Automation
A company stores the code for three microservices in one GitHub repository, with each microservice in its own top-level folder. Each microservice has its own pipeline in AWS CodePipeline with a source action that uses an AWS CodeConnections connection to the main branch. Every push to main currently starts all three pipelines, which wastes build minutes and causes unnecessary production deployments. The company wants each pipeline to start only when files in its own microservice folder change. Which solution will meet this requirement with the LEAST operational overhead?
Answer: B
Option B is correct: V2 pipelines support triggers on the source action that filter push events by branch and by file path, so each pipeline starts only for changes in its own folder with no extra code. Option A still starts every pipeline and adds a stage to maintain. Option C does not work because GitHub push events are not delivered to EventBridge natively, so the rules would never match. Option D requires restructuring the repository and building and running a custom webhook integration.
Sources: AWS documentation 1, AWS documentation 2
Question 2 · Configuration Management and IaC
A DevOps team manages an application with a single AWS CloudFormation stack that includes an Amazon RDS for PostgreSQL DB instance. During a recent stack update, a property change that requires replacement caused CloudFormation to create a new, empty DB instance and delete the old one. The team must prevent stack updates from replacing or deleting the DB instance. The team must still be able to delete the stack when the application is retired, and the DB instance and its data must be kept when that happens. Which combination of actions will meet these requirements? (Select TWO.)
Answers: A, D
Options A and D are correct: a stack policy that denies Update:Replace and Update:Delete for the DB instance's logical ID makes any stack update that would replace or remove the instance fail. DeletionPolicy: Retain keeps the DB instance when the stack is deleted. Option B blocks stack deletion entirely, which conflicts with the requirement to delete the stack later. Option C keeps the old instance after a replacement, but the replacement still happens and the application is moved to a new, empty database. Option E only reports changes made outside CloudFormation and does not block anything.
Sources: AWS documentation 1, AWS documentation 2, AWS documentation 3
Question 3 · Security and Compliance
A company runs CI/CD pipelines in 60 AWS accounts in an organization in AWS Organizations. Over time, the IAM roles that AWS CodeBuild projects and deployment tools use have collected broad permissions. The security team wants a continuously updated, central list of IAM roles that have not been used, and of permissions within roles that have not been used, in the last 90 days across all accounts. Which solution will meet these requirements with the LEAST operational overhead?
Answer: C
Option C is correct: an IAM Access Analyzer unused access analyzer with the organization as its zone of trust continuously reports unused roles, unused access keys and passwords, and unused service and action-level permissions across all member accounts, viewable from the delegated administrator account. Option A's credential report covers IAM users only, not roles, and needs custom code. Option B could work but requires building and maintaining complex queries. Option D flags policies that grant full administrator access and says nothing about whether permissions are used.
Sources: AWS documentation 1, AWS documentation 2
These sample questions are not part of the DOP-C02 practice exam, so you won't meet them again when you take it.
This practice exam has 75 questions, and exam mode gives you 180 minutes to answer them. The real DOP-C02 exam has 75 questions (65 scored and 10 unscored) in 180 minutes, so a full attempt here is the same length. Practice mode has no timer.
In format, yes: questions are multiple choice (one correct answer) or multiple response (two or more), spread across the 6 exam domains in close to the weights the official exam guide gives them. Scoring differs: AWS reports a scaled score from 100 to 1,000 and you pass at 750, while this practice exam shows the raw percentage you got right. For how hard the exam is, whether it is worth it and how long to study, read our AWS DevOps Engineer Professional certification guide.
Aim for 80% or more, consistently, on full-length attempts in exam mode, not just once. That leaves a margin over the 750 out of 1,000 you need on the real DOP-C02 exam, whose questions will all be new to you. Repeat attempts here show the same questions, so judge yourself by first attempts and by whether you can explain each answer. No practice score guarantees a pass.
No. The DOP-C02 practice exam is free and needs no account. Your progress and score history are saved in this browser, so they stay on this device and are lost if you clear your browser data.
Start in practice mode, which tells you after each question whether you were right and explains the answer. When you score well there, switch to exam mode: 180 minutes and no feedback until the end, like test day. Your results break the score down by domain, so you can see which domains to study before your next attempt.
Affiliate links — if you enrol through them, CloudNinja may earn a commission at no extra cost to you.
Studying for more than one certification? All our practice tests are free.