nerdexam
AmazonAmazon

DOP-C02 · Question #502

DOP-C02 Question #502: Real Exam Question with Answer & Explanation

Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #502. The question stem and answer options stay visible for context.

Submitted by haruto_sh· Mar 6, 2026Security and Compliance

Question

A DevOps engineer needs to implement a CI/CD pipeline in an AWS account. The pipeline must consume sensitive database credentials that are stored in an AWS Systems Manager Parameter Store parameter. The Parameter Store parameter is in a separate central account. The DevOps engineer needs to create and integrate the parameter with the CI/CD account. Which combination of steps will meet these requirements? (Choose three.)

Options

  • AUse an advanced tier Parameter Store parameter to store the database credentials in the central
  • BCreate an IAM role in the AWS account that hosts the CI/CD pipeline. Add the full ARN of the
  • CUse a standard tier Parameter Store parameter to store the database credentials in the central
  • DUse an AWS KMS managed key to encrypt the parameter. Grant decrypt permissions for the
  • EUse a customer managed AWS KMS key to encrypt the parameter. Grant decrypt permissions for
  • FCreate an AWS Resource Access Manager (AWS RAM) resource share in the central AWS

Unlock DOP-C02 to see the answer

You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Parameter Store#KMS encryption#Cross-account access#Secret management
Full DOP-C02 PracticeBrowse All DOP-C02 Questions