DVA-C02 Practice Exam 56 — 20 Questions

Question 1

Refer to the exhibit. A developer has the above IAM policy attached. The developer is trying to push code to a CodeCommit repository and trigger a CodePipeline. The push succeeds but the pipeline does not start. What is the most likely reason?

Accepted Answer

The CloudWatch Events rule that triggers the pipeline on code push does not have the necessary IAM role to invoke the pipeline.. Option C is correct because the pipeline requires a CloudWatch Events rule to start on code push, and that rule needs permissions to invoke the pipeline. Option A is wrong because the policy allows GitPush. Option B is wrong because the developer has StartPipelineExecution permission. Option D is wrong because the developer can push.

Answer

The developer does not have permissions to push to the repository.

Answer

The developer does not have permissions to start the pipeline.

Answer

The CodeCommit repository does not have a trigger configured.

Question 2

A company uses AWS CodePipeline to automate deployments. The pipeline has a source stage that pulls from CodeCommit, a build stage using CodeBuild, and a deploy stage using CodeDeploy. Recently, deployments have been failing because the CodeBuild project cannot download dependencies from the internet. The build environment does not have internet access due to VPC settings. Which THREE steps should a developer take to resolve this issue? (Choose THREE.)

Accepted Answer

Configure a NAT gateway in the public subnet to allow outbound internet access.. Option B, C, and D are correct because placing CodeBuild in a private subnet with VPC endpoints for S3 and using a NAT gateway allows internet access for dependencies. Option A is wrong because CodeBuild does not need public IP. Option E is wrong because CodeCommit is not the issue.

Answer

Move the source stage to use S3 instead of CodeCommit.

Answer

Assign a public IP address to the CodeBuild project.

Question 3

A developer is using AWS CloudFormation to deploy a stack that includes an Amazon EC2 instance with user data. The user data script installs software and configures the application. The developer wants to ensure that the stack creation waits for the user data script to complete before marking the stack as CREATE_COMPLETE. What should the developer do?

Accepted Answer

Add a CreationPolicy with a timeout to the EC2 instance resource and use cfn-signal in the user data.. Option A is correct because a cfn-signal sent from the user data and a CreationPolicy on the EC2 resource cause CloudFormation to wait for the signal. Option B is wrong because DependsOn only affects order, not wait for completion. Option C is wrong because WaitCondition is legacy and requires a separate handle; CreationPolicy is simpler. Option D is wrong because user data runs as root; the script can send signals.

Answer

Add a DependsOn attribute to the EC2 instance resource.

Answer

Use a CloudFormation WaitCondition and a WaitConditionHandle.

Answer

Configure the EC2 instance to run the user data script as a service.

Question 4

A team uses AWS CodePipeline to deploy a microservices application to Amazon ECS. The pipeline has a Source stage (GitHub), a Build stage (CodeBuild), and a Deploy stage (ECS). During a deployment, the pipeline fails at the Deploy stage with the error: 'Action execution failed: Deployment failed. The service my-service has reached the maximum number of tasks.' The service is configured with a desired count of 2 and a maximum percent of 200%. What is the most likely cause of this failure?

Accepted Answer

There are already 4 tasks running for the service, which is the maximum allowed by the deployment configuration.. Option C is correct because the error indicates the service has reached the maximum number of tasks. With a desired count of 2 and maximum percent of 200%, ECS allows up to 4 tasks during deployment (2 * 200% = 4). If there are already 4 tasks running (e.g., due to a previous deployment that did not complete), the new deployment cannot start additional tasks. Option A is incorrect because insufficient memory would cause a different error (task failure). Option B is incorrect because the maximum percent is already set to 200%, which allows for rolling updates. Option D is incorrect because the pipeline is not related to EC2 instance limits; it uses Fargate or EC2 launch type, but the error is about task count.

Answer

The task definition references a memory value that exceeds the available container instance memory.

Answer

The service's minimum healthy percent is set too high, preventing new tasks from starting.

Answer

The pipeline is trying to deploy to an ECS cluster that has reached its Amazon EC2 instance limit.

Question 5

A developer is deploying a web application using AWS Elastic Beanstalk. The application requires a custom platform that is not provided by Elastic Beanstalk. The developer has created a custom platform using the Packer tool and has stored the platform artifacts in an Amazon S3 bucket. Which TWO steps are necessary to use this custom platform in Elastic Beanstalk? (Choose TWO.)

Accepted Answer

Define a custom platform version in the Elastic Beanstalk environment's configuration using a platform definition file.. Options A and D are correct. First, the developer must create a platform version resource in the Elastic Beanstalk environment configuration (option A). Then, the developer must specify the platform ARN in the environment's configuration (option D). Option B is incorrect because the platform is defined by the platform version, not the environment name. Option C is incorrect because the Packer template is used to build the platform, but the platform version resource points to the artifacts in S3. Option E is incorrect because the custom platform does not require a Dockerfile; it uses a custom AMI or other artifacts.

Answer

Set the environment's platform to 'Custom' and provide the S3 URL of the platform artifacts.

Answer

Create a Dockerfile in the application source bundle to define the custom platform.

Answer

Upload the Packer template to the Elastic Beanstalk console.

Question 6

A company uses AWS CodeDeploy to manage deployments to an Amazon EC2 Auto Scaling group. The deployment group is configured with a blue/green deployment type. The developer notices that after a deployment, the old instances (blue environment) are terminated immediately after the new instances (green environment) pass health checks. The company wants to keep the old instances running for 30 minutes to allow for quick rollback if issues are detected. Which TWO configuration changes should the developer make to achieve this? (Choose TWO.)

Accepted Answer

Set the 'terminateBlueInstancesOnDeploymentSuccess' action to 'KEEP_ALIVE'.. Options A and E are correct. To retain the old instances for a period, the developer must set the 'terminateBlueInstancesOnDeploymentSuccess' action to 'KEEP_ALIVE' (option A) and specify a 'terminationWaitTimeInMinutes' value of 30 (option E). Option B is incorrect because 'originalSettings' is not a valid retention type. Option C is incorrect because 'blueInstanceTermination' setting is not a property; the correct property is 'terminateBlueInstancesOnDeploymentSuccess'. Option D is incorrect because 'waitTimeForBlueTermination' is not a valid property name.

Answer

Set the 'blueInstanceTermination' property to 'WAIT'.

Answer

Set the 'blueInstanceTermination' property to 'originalSettings'.

Answer

Set the 'waitTimeForBlueTermination' to 30.

Question 7

A developer is debugging an AWS Lambda function that is invoked by an Amazon S3 bucket notification. The function fails with an 'AccessDenied' error when trying to read an object from the same bucket. What should the developer check first?

Accepted Answer

Review the Lambda function's execution role for s3:GetObject permission.. Option D is correct because the Lambda execution role must have s3:GetObject permission for the bucket. Option A is wrong because S3 Block Public Access does not affect Lambda access. Option B is wrong because encryption settings do not cause AccessDenied if permissions are correct. Option C is wrong because bucket versioning is not related to access.

Answer

Check if S3 bucket versioning is enabled.

Answer

Verify that the S3 bucket uses server-side encryption with AWS KMS.

Answer

Ensure the S3 bucket is not blocked by S3 Block Public Access.

Question 8

An IAM user has the above policy attached. The user tries to stop an EC2 instance. What happens?

Accepted Answer

The stop operation succeeds.. Option A is correct because the Allow statement explicitly allows StopInstances for all resources. The Deny only applies to TerminateInstances, not StopInstances. Option B is incorrect because there is no Deny for StopInstances. Option C is incorrect because StopInstances is allowed. Option D is incorrect because the policy is valid.

Answer

The stop operation fails because ec2:StopInstances is not allowed explicitly.

Answer

The stop operation fails because of the Deny statement.

Answer

The stop operation fails because the policy is invalid (conflict).

Question 9

Which TWO actions can help reduce Lambda cold start times? (Choose two.)

Accepted Answer

Increase the memory allocated to the function.. Option B is correct because increasing memory also increases CPU, which speeds up initialization. Option C is correct because using Provisioned Concurrency keeps environments warm. Option A is incorrect because larger deployment packages increase cold start. Option D is incorrect because VPC adds network overhead, increasing cold start. Option E is incorrect because reducing memory decreases CPU, worsening cold start.

Answer

Increase the deployment package size.

Answer

Place the function in a VPC.

Answer

Reduce the function timeout.

Question 10

A developer attaches the above bucket policy to an S3 bucket. An anonymous user tries to access https://my-bucket.s3.amazonaws.com/secret/key.txt. What is the result?

Accepted Answer

Access is denied because the explicit Deny overrides the Allow.. Option B is correct because the explicit Deny overrides the Allow. Even though the Allow grants access to all objects, the Deny for the secret/ prefix explicitly denies access. Option A is incorrect because the explicit Deny takes precedence. Option C is incorrect because the policy is valid. Option D is incorrect because the user is anonymous but the Deny applies.

Answer

Access is allowed because the Allow statement covers all objects.

Answer

Access is allowed because anonymous requests are not affected by Deny statements.

Answer

Access is denied because the policy is invalid (two statements conflict).

Question 11

A company uses AWS Step Functions to orchestrate a workflow. The workflow is failing with a 'States.ALL' error. Which THREE steps should the developer take to troubleshoot?

Accepted Answer

Review the state machine definition for syntax errors.. Check CloudWatch Logs for execution history (Option A). Check IAM permissions for the execution role (Option D). Check the state machine definition for invalid syntax (Option E). Option B is wrong because increasing memory does not fix state machine errors; Option C is wrong because X-Ray is not directly used for Step Functions errors.

Answer

Increase the memory allocated to the Lambda functions in the workflow.

Answer

Enable AWS X-Ray tracing on the state machine.

Question 12

Refer to the exhibit. A CloudFormation stack creation failed. What is the most likely cause of the failure?

Accepted Answer

The IAM role's trust policy does not allow Lambda to assume the role.. The error message says the role cannot be assumed by Lambda. This is usually because the trust policy of the IAM role does not include 'lambda.amazonaws.com' as a trusted entity. Option D is correct. Option A is wrong because the error is about the role, not the code. Option B is wrong because the error mentions the role, not permissions. Option C is wrong because the error is not about resource conflict.

Answer

The Lambda function name conflicts with an existing function.

Answer

The Lambda function code has a syntax error.

Answer

The Lambda execution role does not have the required permissions to write to CloudWatch Logs.

Question 13

Which TWO actions can help reduce latency for a web application hosted on EC2 instances behind an Application Load Balancer? (Select TWO.)

Accepted Answer

Use Amazon CloudFront as a content delivery network.. Enabling HTTP/2 on the ALB reduces latency by multiplexing requests. Using a Content Delivery Network (CloudFront) caches content at edge locations, reducing latency for users. Option B is wrong because increasing instance size may not reduce latency, especially if the bottleneck is network or I/O. Option C is wrong because multiple subnets increase availability, not latency. Option E is wrong because disabling keep-alive increases latency by requiring new connections.

Answer

Increase the EC2 instance size to a larger type.

Answer

Disable keep-alive connections on the ALB.

Answer

Use multiple Availability Zones for the ALB.

Question 14

An application uses DynamoDB as its database with on-demand capacity. The application experiences increased latency during peak hours. CloudWatch metrics show ConsumedWriteCapacityUnits is below ProvisionedWriteCapacityUnits, but ThrottledWriteEvents is zero. What is the most likely cause?

Accepted Answer

The workload has hot partitions.. Option C is correct because even though capacity is not exceeded, hot partitions can cause latency. On-demand capacity is per-table, not per-partition. Option A is wrong because throttled events are zero. Option B is wrong because on-demand capacity is automatically managed. Option D is wrong because RCUs are not related to write latency.

Answer

The table is experiencing write throttling.

Answer

The table has too many read capacity units.

Answer

The provisioned capacity is insufficient.

Question 15

Refer to the exhibit. A developer attached this S3 bucket policy to my-bucket. Users from IP 10.0.0.5 can access objects, but users from IP 10.0.1.5 cannot. What is the most likely reason?

Accepted Answer

The IP address condition restricts access to a specific range.. Option D is correct because the policy only allows access from the IP range 10.0.0.0/24. Users from 10.0.1.5 are outside this range. Option A is wrong because the resource is correct. Option B is wrong because the action is correct. Option C is wrong because the bucket policy allows access.

Answer

The bucket policy does not apply to users.

Answer

The action should be s3:GetObjectVersion.

Answer

The resource ARN is incorrect.

Question 16

Which THREE factors should a developer consider when designing a stateless application on AWS? (Choose 3)

Accepted Answer

Avoid storing data on the local file system of the instances. Options A, C, and D are correct. A stateless application should store session state externally (e.g., ElastiCache), use a shared database for data storage, and avoid storing state on local instance storage. Option B is wrong because sticky sessions create statefulness. Option E is wrong because storing state in memory makes the instance stateful.

Answer

Store session state in the instance memory for low latency

Answer

Use sticky sessions on the load balancer to maintain session affinity

Question 17

A developer runs the above CLI command to check a Lambda function's logs. The function is invoked but no logs appear in CloudWatch. The IAM role for the Lambda function has the AWSLambdaBasicExecutionRole managed policy attached. What is the most likely cause?

Accepted Answer

The log group's retention policy has deleted older logs.. Option C is correct because the log group exists (storedBytes >0) but retention is 30 days, so logs older than 30 days are deleted. The developer may be looking at a timeframe beyond retention. Option A is incorrect because the role has the necessary permissions (AWSLambdaBasicExecutionRole includes CreateLogGroup, CreateLogStream, PutLogEvents). Option B is incorrect because the function is being invoked (otherwise storedBytes would be 0). Option D is incorrect because storedBytes is not zero, indicating logs were written.

Answer

The CloudWatch Logs service is not enabled in the region.

Answer

The Lambda function's IAM role does not have permission to create log groups.

Answer

The Lambda function is not being invoked.

Question 18

Refer to the exhibit. The developer runs the AWS CLI command to invoke a Lambda function. The output shows 'FunctionError': 'Unhandled'. What should the developer do to get more details about the error?

Accepted Answer

Decode the base64-encoded 'LogResult' field to view the log output.. The 'LogResult' field contains a base64-encoded log. Decoding it provides the error details. Option A is correct. Option B is wrong because 'FunctionError' indicates an error, not success. Option C is wrong because CloudWatch Logs is another option but not directly from the CLI output. Option D is wrong because X-Ray traces requests but not errors.

Answer

Re-invoke the function with a valid payload because the error is due to invalid input.

Answer

Enable AWS X-Ray tracing on the function.

Answer

Check the CloudWatch Logs for the function's log group.

Question 19

A developer is using AWS CodeBuild to build a Java application. The build fails with 'OutOfMemoryError'. Which configuration change would most likely resolve this issue?

Accepted Answer

Increase the compute type to a larger instance size.. CodeBuild allows specifying compute type (e.g., BUILD_GENERAL1_MEDIUM) and memory. Increasing the compute type provides more memory. Option B is wrong because splitting into multiple projects adds complexity and may not resolve memory issues. Option C is wrong because enabling detailed logs does not increase memory. Option D is wrong because CodeBuild does not support custom AMIs.

Answer

Use a custom AMI with more memory.

Answer

Enable detailed CloudWatch logs for the build.

Answer

Split the build into multiple CodeBuild projects.

Question 20

Which TWO approaches can be used to optimize costs for an Amazon DynamoDB table with predictable read/write patterns? (Select TWO.)

Accepted Answer

Use provisioned capacity with auto scaling.. Using provisioned capacity with auto scaling adjusts capacity based on usage, avoiding over-provisioning. DynamoDB Accelerator (DAX) reduces read costs by caching reads. Option A is wrong because on-demand is more expensive for predictable workloads. Option C is wrong because global tables increase costs. Option D is wrong because increasing read capacity units costs more.

Answer

Increase the read capacity units to avoid throttling.

Answer

Use DynamoDB global tables for multi-region replication.

Answer

Use on-demand capacity mode.

DVA-C02 Practice Exam 56 — 20 Questions

Exhibit

DVA-C02 Practice Exam 56 — 20 Questions

Exhibit