🚨 Incident Response & Remediation - DOP-C02 Practice Questions

Study automated incident response, EventBridge rules, Lambda remediation, runbooks, OpsCenter, and operational readiness for production systems.

6Questions Available
2Exam Domains

Practice Incident Response Questions Now

Start a timed practice session focusing on Incident Response & Remediation topics from the DOP-C02 question bank.

Start DOP-C02 Practice Quiz →

DOP-C02 Incident Response Question Bank (6 Questions)

Browse all 6 practice questions covering Incident Response & Remediation for the DOP-C02 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.

  1. Question 1Incident and Event Response

    A DevOps team wants to perform runbook automation when an RDS database CPU exceeds 95% for 15 minutes. The runbook should analyze top SQL queries and create an incident ticket. What AWS service provides this?

    ALambda with custom runbook code
    BAWS Systems Manager Automation runbook: triggered by CloudWatch alarm action; SSM Automation document uses the RDS API to describe performance insights and creates an OpsCenter OpsItem
    CCloudWatch alarm email to the DBA team
    DAWS Health to detect RDS performance issues

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start DOP-C02 Quiz
  2. Question 2Incident and Event Response

    A company wants to test their incident response runbooks automatically. They want to simulate a DDoS attack and verify their automated response runs correctly. What service enables controlled testing of incident response?

    AUse a third-party DDoS tool
    BAWS Fault Injection Simulator (FIS) with network disruption experiments; validate that CloudWatch alarms trigger, WAF rules activate, and response Lambda functions execute as expected
    CManually disconnect the load balancer
    DAWS Shield Advanced provides automated DDoS testing

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start DOP-C02 Quiz
  3. Question 3Incident and Event Response

    A company uses AWS Systems Manager OpsCenter to manage operational issues. They want to automatically add relevant runbooks as related resources when an OpsItem is created. What mechanism achieves this?

    AManually add runbooks to each OpsItem
    BConfigure SSM OpsCenter with OpsItem deduplication filter and automatic association of SSM Automation runbooks as related resources based on the OpsItem source (e.g., GuardDuty finding type)
    CEventBridge rule to add runbooks to OpsItems after creation
    DOpsCenter automatically recommends runbooks based on title

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start DOP-C02 Quiz
  4. Question 4Incident and Event Response

    A DevOps team wants to ensure that their emergency SSM Automation runbooks are tested monthly. Runbooks should run against isolated test resources, not production. What is the CORRECT approach?

    ASkip testing emergency runbooks to save time
    BSchedule monthly EventBridge rules that trigger SSM Automation executions against test resources (separate Account, separate tagged resources); capture results and alert on failures
    CUse AWS FIS to test runbooks
    DTest runbooks only during actual incidents

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start DOP-C02 Quiz
  5. Question 5Configuration Management and IaC

    A company uses SSM Documents for operational runbooks. They want to implement multi-step automation that requires human approval at specific steps (e.g., approve database cleanup before proceeding). What SSM automation document feature supports this?

    ASSM documents cannot include approval steps
    BSSM Automation document aws:approve action — pauses the automation and sends a notification via SNS; an approver reviews and approves via SSM console, CLI, or SNS notification link; automation continues only after approval
    CUse Lambda to implement approval logic
    DUse Step Functions for approval workflows

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start DOP-C02 Quiz
  6. Question 6Configuration Management and IaC

    A company wants to version-control their SSM OpsCenter runbooks alongside application code. When a new runbook version is merged to main, it should automatically update the SSM document in production. What pipeline implements this?

    AUpload documents manually to SSM
    BCodePipeline: Source (CodeCommit, runbook YAML files) → CodeBuild (validates SSM document schema: aws ssm validate-document) → Deploy (CodeBuild or Lambda calls aws ssm update-document to publish new version)
    CSSM Documents are automatically version controlled in Git
    DUse EventBridge to detect file changes and update documents

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start DOP-C02 Quiz

Key Incident Response Concepts for DOP-C02

incident responseremediationeventbridgerunbookopscenterautomationoperational readiness

DOP-C02 Incident Response Exam Tips

Incident Response & Remediation questions in DOP-C02 are typically scenario-based. Focus on CI/CD automation, reliability engineering, and feedback-driven operations. Priority concepts: incident response, remediation, eventbridge, runbook, opscenter, automation.

What DOP-C02 Expects

  • Anchor your answer in choose auditable, automated release and operations patterns with strong rollback readiness.
  • Incident Response scenarios for DOP-C02 are frequently mapped to Domain 3 (15%), Domain 4 (15%), so read the objective carefully before picking controls or architecture.
  • Expect multi-topic scenarios where Incident Response interacts with IAM, networking, storage, or observability patterns rather than appearing as an isolated question.
  • When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Professional) and vendor best practices.

High-Value Incident Response Concepts

  • Know the core Incident Response building blocks cold: incident response, remediation, eventbridge, runbook.
  • Review the edge-case features and limits for opscenter, automation; these details are commonly used to differentiate answer choices.
  • Practice service-integration reasoning: how Incident Response pairs with Monitoring, Systems Manager, Event-Driven in real deployment patterns.
  • For DOP-C02, explain why the chosen Incident Response design meets reliability, security, and cost expectations better than the alternatives.

Common DOP-C02 Traps

  • Watch for manual promotion and approval logic where pipeline automation is expected.
  • Questions in Resilient Cloud Solutions often include distractors that look correct for Incident Response but violate least-privilege, durability, or availability requirements.
  • Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
  • If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

  • Can you compare at least two Incident Response implementation paths and justify which one best fits the scenario?
  • Can you map the chosen answer back to Resilient Cloud Solutions (15%) outcomes for DOP-C02?
  • Can you explain security and access boundaries for Incident Response without relying on default-open assumptions?
  • Can you describe how Incident Response integrates with Monitoring and Systems Manager during failure, scaling, and monitoring events?

Exam Domains Covering Incident Response

Related Resources

More DOP-C02 Study Resources