AWS DOP-C02 Study Guide 2026: DevOps Engineer Professional Exam Plan

A domain-led DOP-C02 plan for delivery pipelines, infrastructure automation, resilience, observability, incidents, security, and governance.

CertGuru Editorial Team · Published 2026-07-20 · Reviewed 2026-07-20 · 11 min read

What is the AWS DOP-C02 exam?

AWS Certified DevOps Engineer - Professional (DOP-C02) validates advanced skill in provisioning, operating, and managing distributed systems and services on AWS. It is designed around a DevOps engineer role, so a strong DOP-C02 study guide should connect delivery automation, infrastructure, resilience, observability, incident response, and security instead of treating AWS services as isolated flash cards.

AWS currently lists 75 multiple-choice or multiple-response questions in 180 minutes. The exam guide explains that 65 questions affect the score and 10 are unscored, with unscored items not identified. Scores use a 100–1,000 scale and the minimum passing score is 750. Unanswered questions are incorrect, with no penalty for guessing.

DOP-C02 domains and weights

The official exam guide assigns six domains:

  • SDLC Automation: 22%;
  • Configuration Management and Infrastructure as Code: 17%;
  • Resilient Cloud Solutions: 15%;
  • Monitoring and Logging: 15%;
  • Incident and Event Response: 14%; and
  • Security and Compliance: 17%.

Do not prepare for these as separate silos. A deployment scenario can test pipeline design, cross-account permissions, rollback, metrics, event-driven remediation, and audit evidence in the same question.

How to study the six DOP-C02 domains

SDLC automation

Build a mental model from source and pull request through build, test, artifact management, deployment, verification, and rollback. Compare rolling, blue/green, canary, and all-at-once strategies. Know how repositories, CodeBuild, CodePipeline, CodeDeploy, container registries, serverless deployments, and secrets can participate in secure delivery.

Configuration management and infrastructure as code

Practise versioning, testing, deploying, and detecting drift in infrastructure. Compare CloudFormation, the AWS Cloud Development Kit, Systems Manager capabilities, and appropriate third-party tooling by requirement. Include multi-account and multi-Region patterns, parameter handling, reusable components, and safe change control.

Resilient cloud solutions

Connect availability, fault isolation, scaling, backup, recovery, and disaster-recovery objectives. Given an RTO, RPO, dependency, and cost constraint, explain why backup and restore, pilot light, warm standby, or multi-site is appropriate. Resilience questions reward a complete recovery path, not merely duplicating compute.

Monitoring and logging

Study metrics, logs, traces, dashboards, alarms, event routing, and centralized visibility. Be able to select signals for application, infrastructure, deployment, and security health. Understand cross-account aggregation and how observability triggers automated action without creating alert noise or unsafe remediation.

Incident and event response

Follow detection, triage, containment, recovery, communication, and improvement. Practise EventBridge, CloudWatch alarms, Systems Manager Automation, Lambda, Auto Scaling, and notification patterns. Preserve evidence and least privilege when automating an incident response.

Security and compliance

Review identity policies, roles, federation, Organizations, service control policies, encryption, secrets, artifact integrity, logging, Config rules, Security Hub, GuardDuty, and audit automation. Distinguish a control that prevents an action from one that detects, records, or remediates it.

An eight-week AWS DevOps Engineer study plan

Weeks 1–2: delivery pipelines and IaC

Create a small application and express its infrastructure as code. Build a pipeline that runs tests, produces a versioned artifact, deploys to a non-production environment, and has an observable rollback condition. The goal is understanding state transitions and permissions, not building an expensive stack.

Weeks 3–4: operations and resilience

Instrument the workload with metrics, structured logs, traces, alarms, and a dashboard. Introduce failure: an unhealthy deployment, unavailable dependency, capacity spike, or expired secret. Record which signal detects it and which recovery action is safe to automate.

Weeks 5–6: multi-account security and incidents

Draw an AWS Organizations structure with separate workload, logging, security, and shared-service accounts. Trace identity, deployment, log aggregation, and incident access across account boundaries. Work through incident scenarios while protecting evidence and business continuity.

Weeks 7–8: mixed scenarios and full simulation

Use domain quizzes to repair specific gaps, then complete a 75-question, 180-minute DOP-C02 practice exam. Review guessed answers as seriously as incorrect ones. For each miss, write the requirement, chosen architecture, failed assumption, and documentation that corrects it.

How to answer DOP-C02 scenario questions

Read the final sentence first and mark qualifiers such as most automated, least operational overhead, without downtime, or across all accounts. Then identify:

  1. the current delivery or operational state;
  2. the failure, compliance, or business requirement;
  3. the account and Region boundaries;
  4. where the signal or event originates;
  5. the minimum-permission action; and
  6. how success, rollback, and auditability are established.

Reject answers that require manual fleet changes when managed automation satisfies the requirement. Also reject automation that has no guardrail, observability, rollback, or authority model.

Common DOP-C02 preparation mistakes

  • Memorising service features without building an end-to-end workflow.
  • Studying only CI/CD while neglecting operations, incidents, and compliance.
  • Ignoring multi-account permissions and centralized logging.
  • Treating high availability and disaster recovery as the same design problem.
  • Choosing the most elaborate architecture when a managed, lower-operations path meets every requirement.
  • Repeating familiar practice questions instead of checking current AWS documentation.

Use the CertGuru AWS DevOps Engineer Professional mock after domain review. If architecture trade-offs need work, revisit the AWS Solutions Architect Associate guide. The practice test versus mock exam guide can help sequence short drills and full simulations.

CertGuru is independent and is not affiliated with or endorsed by Amazon Web Services.

Authoritative references

AWS can revise exam guides and in-scope services. Confirm the current outline and exam policies before scheduling.