Frequently Asked Questions (FAQ)
Do I need SAA-C03 before DOP-C02?
There are no formal prerequisites. However, DOP-C02 assumes you know VPC, IAM, EC2, S3, RDS, Lambda, and CloudFormation at operational depth. Without SAA-C03 or equivalent experience, the VPC and IAM questions will be a significant gap. SAA-C03 or DVA-C02 is strongly recommended.
How many practice questions should I aim for?
Aim for at least 600 unique questions across all domains. Prioritize quality over quantity. ExamOS provides scenario-based practice questions across every domain, designed to explain the rationale behind both correct and incorrect answers.
When should I book the exam?
Book when your readiness score is stable and above 80, and you have covered every domain at least once. Trust your preparation.
How long is the exam?
180 minutes (3 hours) for 75 questions (65 scored, 10 unscored). That averages to roughly 2 minutes and 24 seconds per question. Scenario-heavy questions with multi-service chains may take longer, so keep an eye on the clock. Answer every question; the unscored ones are indistinguishable from scored ones.
What is the passing score?
750 out of 1000. AWS uses scaled scoring. The raw number of correct answers needed varies slightly between exam versions. Do not try to calculate how many questions you can afford to miss.
I am a non-native English speaker. Can I get extra time?
Yes, under certain conditions. AWS offers an additional 30 minutes for candidates whose primary language is not the language of the exam. If you are taking the exam in English but English is not your primary language, you can request this accommodation:
- When scheduling your exam through Pearson VUE, select the option for additional time for non-native English speakers.
- This is available for exams delivered in English, Japanese, Korean, Simplified Chinese, Traditional Chinese, Spanish, French, German, Italian, Portuguese, and Indonesian.
- If the exam is available in your primary language, you can still take it in English with the extra time, as long as you meet the non-native speaker criteria.
Request this accommodation when scheduling. It is a straightforward process through the registration system.
Can I use reference materials during the exam?
No. The DOP-C02 exam is closed-book. You cannot access documentation, websites, or any external resources during the test. All questions are designed to be answerable from your knowledge of AWS services, architecture patterns, and operational best practices.
What is the most important domain to study?
SDLC Automation (22%) is the heaviest domain and the one that goes deepest beyond SAA-C03 knowledge. Security and Compliance (17%) and Configuration Management (17%) are also significant. The biggest trap is over-studying the domains you deal with daily at work (often monitoring and resilience) and under-studying the ones you rarely touch (often security automation and cross-account governance).
How does DOP-C02 differ from SAA-C03?
SAA-C03 tests architecture design: which service to choose and why. DOP-C02 tests operational engineering: how to automate, deploy, monitor, and recover systems in production. The questions assume you know the services already and focus on how to operate them at scale: cross-account pipelines, automated remediation, deployment strategies, chaos engineering, and incident response.
What are the most common ways people fail?
- Underestimating Systems Manager. It appears in questions across every domain: Parameter Store for secrets, Automation for remediation, State Manager for compliance, Patch Manager for updates. If you do not know SSM well, you will lose marks across multiple domains.
- Confusing deployment strategies. AllAtOnce, HalfAtATime, OneAtATime, Canary, and Linear each have different risk profiles and rollback behaviors. The exam tests whether you can match a business requirement (zero downtime, gradual rollout) to the right strategy.
- Not understanding SCPs. SCPs set the maximum permissions for an account. They do not grant permissions. If an SCP denies an action, no IAM policy in the account can override it. This is tested frequently.
- Confusing GuardDuty, Config, Inspector, and Macie. GuardDuty detects threats. Config checks compliance. Inspector finds vulnerabilities. Macie discovers sensitive data. Security Hub aggregates findings from all of them. Know which one to use for each scenario.