[January-2024]New Braindump2go DOP-C02 PDF and DOP-C02 VCE Dumps(164-191)

Braindump2go Guarantee All Exams 100% Pass One Time!
B. Invite the acquired company's AWS accounts to join the organization. Create the
OrganizationAccountAccessRole IAM role in the invited accounts. Grant permission to the
management account to assume the role.
C. Use AWS Security Hub to collect and group findings across all accounts. Use Security Hub to
automatically detect new accounts as the accounts are added to the organization.
D. Use AWS Firewall Manager to collect and group findings across all accounts. Enable all features
for the organization. Designate an account in the organization as the delegated administrator
account for Firewall Manager.
E. Use Amazon Inspector to collect and group findings across all accounts. Designate an account in
the organization as the delegated administrator account for Amazon Inspector.
Answer: BC
QUESTION 186
A company has an application and a CI/CD pipeline. The CI/CD pipeline consists of an AWS CodePipeline pipeline and
an AWS CodeBuild project. The CodeBuild project runs tests against the application as part of the build process and
outputs a test report. The company must keep the test reports for 90 days.
Which solution will meet these requirements?
A. Add a new stage in the CodePipeline pipeline after the stage that contains the CodeBuild project.
Create an Amazon S3 bucket to store the reports. Configure an S3 deploy action type in the new
CodePipeline stage with the appropriate path and format for the reports.
B. Add a report group in the CodeBuild project buildspec file with the appropriate path and format for
the reports. Create an Amazon S3 bucket to store the reports. Configure an Amazon EventBridge
rule that invokes an AWS Lambda function to copy the reports to the S3 bucket when a build is
completed. Create an S3 Lifecycle rule to expire the objects after 90 days.
C. Add a new stage in the CodePipeline pipeline. Configure a test action type with the appropriate
path and format for the reports. Configure the report expiration time to be 90 days in the
CodeBuild project buildspec file.
D. Add a report group in the CodeBuild project buildspec file with the appropriate path and format for
the reports. Create an Amazon S3 bucket to store the reports. Configure the report group as an
artifact in the CodeBuild project buildspec file. Configure the S3 bucket as the artifact destination.
Set the object expiration to 90 days.
Answer: D
Explanation:
https://docs.aws.amazon.com/codebuild/latest/userguide/build-spec-ref.html#reports-buildspec-file
QUESTION 187
A company uses an Amazon API Gateway regional REST API to host its application API. The REST API has a custom
domain. The REST API's default endpoint is deactivated.
The company's internal teams consume the API. The company wants to use mutual TLS between the API and the
internal teams as an additional layer of authentication.
Which combination of steps will meet these requirements? (Choose two.)
A. Use AWS Certificate Manager (ACM) to create a private certificate authority (CA). Provision a
client certificate that is signed by the private CA.
B. Provision a client certificate that is signed by a public certificate authority (CA). Import the
certificate into AWS Certificate Manager (ACM).
C. Upload the provisioned client certificate to an Amazon S3 bucket. Configure the API Gateway
mutual TLS to use the client certificate that is stored in the S3 bucket as the trust store.
D. Upload the provisioned client certificate private key to an Amazon S3 bucket. Configure the API
Gateway mutual TLS to use the private key that is stored in the S3 bucket as the trust store.
E. Upload the root private certificate authority (CA) certificate to an Amazon S3 bucket. Configure
the API Gateway mutual TLS to use the private CA certificate that is stored in the S3 bucket as
the trust store.
DOP-C02 Exam Dumps DOP-C02 Exam Questions DOP-C02 PDF Dumps DOP-C02 VCE Dumps
https://www.braindump2go.com/dop-c02.html