DVA-C02 Practice Exam 66 — 20 Questions

Question 1

A developer is using AWS Elastic Beanstalk to deploy a web application. The application requires a relational database. The developer wants to ensure that the database is not accidentally deleted when the Elastic Beanstalk environment is terminated. Which approach should the developer take?

Accepted Answer

Create the RDS instance outside of Elastic Beanstalk and configure the application to connect to it using environment variables.. Option B is correct because creating the RDS instance outside of Elastic Beanstalk decouples the database lifecycle from the environment lifecycle. When the Elastic Beanstalk environment is terminated, the external RDS instance remains intact and is not deleted. The application can connect to it using environment variables configured in the Elastic Beanstalk environment, ensuring persistence of data.

Answer

Create the database as part of the Elastic Beanstalk environment by adding an RDS database configuration in the .ebextensions.

Answer

Use an Amazon DynamoDB table instead of a relational database.

Answer

Configure a retention policy on the RDS instance within the Elastic Beanstalk environment.

Question 2

A developer is using AWS Elastic Beanstalk to deploy a web application. The application requires a highly available environment across multiple Availability Zones. The developer wants to update the application without any downtime while minimizing the number of new instances launched. Which deployment policy should the developer use?

Accepted Answer

Rolling with additional batch. Option C (Rolling with additional batch) is correct because it launches a new batch of instances before taking the old ones out of service, ensuring full capacity is maintained during the deployment. This provides high availability across multiple Availability Zones while minimizing the number of new instances compared to an immutable deployment, which would double the instance count. The additional batch absorbs the traffic during the rolling update, preventing any downtime.

Answer

All at once

Answer

Rolling

Answer

Immutable

Question 3

A developer is deploying an application using AWS Elastic Beanstalk with a Docker platform. The developer wants to minimize downtime during deployments and ensure that the new version is fully tested before routing traffic to it. Which deployment policy should the developer choose?

Accepted Answer

Traffic splitting.. Traffic splitting (option D) is correct because it allows the developer to gradually shift a percentage of traffic from the old application version to the new version, enabling canary testing. This minimizes downtime by ensuring the new version is fully validated before receiving full traffic, and it aligns with the requirement to test the new version before routing all traffic to it.

Answer

All at once.

Answer

Rolling with additional batch.

Answer

Immutable.

Question 4

A developer is using AWS CodeDeploy to deploy a new version of an AWS Lambda function. The developer wants to gradually shift traffic from the old version to the new version in 10-minute increments. Which deployment configuration should the developer use?

Accepted Answer

Linear10PercentEvery10Minutes. The Linear10PercentEvery10Minutes configuration shifts traffic from the old Lambda version to the new version in 10% increments every 10 minutes, which matches the developer's requirement of gradually shifting traffic in 10-minute increments. This is a linear deployment type in AWS CodeDeploy that provides a steady, incremental traffic shift over time.

Answer

Canary10Percent10Minutes

Answer

Canary10Percent30Minutes

Answer

AllAtOnce

Question 5

A developer is using AWS CodeDeploy to deploy an application to an Amazon ECS service with the Fargate launch type. The deployment uses a blue/green strategy. After the new task set is created and passes the initial health checks, the traffic is shifted to the new task set. However, the new task set is immediately replaced by the old one after a few minutes, causing a rollback. What is the most likely reason?

Accepted Answer

The new task set fails the post-traffic shift validation tests.. Option D is correct because in a blue/green deployment on ECS with CodeDeploy, after traffic is shifted to the new task set, CodeDeploy runs post-traffic shift validation tests (e.g., via Lambda hooks or target group health checks). If these tests fail, CodeDeploy automatically triggers a rollback by replacing the new task set with the original (old) task set. This matches the described behavior where the new task set is immediately replaced after a few minutes.

Answer

The lifecycle hooks for the new task set are failing.

Answer

The target group for the new task set is not configured correctly.

Answer

The deployment group's rollback configuration triggers due to alarm threshold.

Question 6

A developer is using AWS CodeDeploy to deploy an application to an EC2 Auto Scaling group. The deployment must follow a rolling update, deploying to exactly 50% of the instances at a time. Which built-in deployment configuration should the developer use?

Accepted Answer

CodeDeployDefault.HalfAtATime. Option B, CodeDeployDefault.HalfAtATime, is correct because it instructs CodeDeploy to deploy to exactly 50% of the instances in the Auto Scaling group at a time during a rolling update. This built-in configuration ensures that half the instances are updated before the other half, matching the requirement for a 50% rolling deployment.

Answer

CodeDeployDefault.OneAtATime

Answer

CodeDeployDefault.AllAtOnce

Answer

CodeDeployDefault.LambdaAllAtOnce

Question 7

A developer is using AWS CodeDeploy with a blue/green deployment strategy for an EC2 Auto Scaling group. The deployment must automatically roll back if any of the new instances fail a health check within the first 10 minutes after deployment. Which configuration should the developer set?

Accepted Answer

Configure the deployment group to use an alarm-based rollback with a CloudWatch alarm on the ELB health check. Option B is correct because the requirement is to automatically roll back based on health check failures within a specific time window after deployment. AWS CodeDeploy supports alarm-based rollbacks where you can configure a CloudWatch alarm that monitors the ELB health check status of the new instances. When the alarm triggers within the configured monitoring period (e.g., 10 minutes), CodeDeploy automatically rolls back the deployment to the previous version, meeting the exact condition described.

Answer

Set the deployment configuration to 'CodeDeployDefault.EC2AllAtOnce'

Answer

Enable automatic rollback in the deployment group configuration and set the event to 'DEPLOYMENT_FAILURE' or 'DEPLOYMENT_STOP_ON_REQUEST'

Answer

Configure the deployment group with a 'LoadBalancerInfo' and enable 'originalInstanceTermination' for rollback

Question 8

A developer wants separate dev and prod CloudFormation deployments from the same template. Which two practices help?

Accepted Answer

Use parameters or mappings for environment-specific values. Option A is correct because CloudFormation parameters and mappings allow you to inject environment-specific values (e.g., instance types, AMI IDs, security group IDs) into a single template without modifying the template itself. Parameters prompt for input at stack creation, while mappings provide a static lookup table keyed by environment (e.g., using the `AWS::Region` pseudo-parameter or a user-defined key). This keeps the template reusable and avoids hardcoding values that differ between dev and prod.

Answer

Hardcode production ARNs throughout the template

Answer

Use the root account for deployments

Question 9

A developer needs to package and deploy a serverless application with Lambda functions, API Gateway, and DynamoDB using concise syntax. Which framework is AWS-native for this purpose?

Accepted Answer

AWS Serverless Application Model. The AWS Serverless Application Model (SAM) is an AWS-native framework that uses a simplified YAML or JSON syntax to define and deploy serverless resources such as Lambda functions, API Gateway, and DynamoDB. It extends AWS CloudFormation, allowing developers to package and deploy with concise syntax using the `sam build` and `sam deploy` commands, making it the correct choice for this purpose.

Answer

AWS Control Tower

Answer

Amazon Macie

Answer

AWS Backup

Question 10

A developer uses AWS CodePipeline to deploy a serverless application defined with AWS SAM. The pipeline consists of Source (S3), Build (CodeBuild), and Deploy (CloudFormation) stages. The developer wants to run integration tests after the stack is deployed but before the pipeline completes. Which approach should the developer use?

Accepted Answer

Add a test stage after the Deploy stage with an action that invokes a Lambda function to run tests.. Option A is correct because AWS CodePipeline allows you to add a test stage after the Deploy stage, and you can configure an action that invokes an AWS Lambda function to run integration tests. This ensures tests run automatically after the CloudFormation stack is deployed but before the pipeline completes, meeting the requirement without manual intervention.

Answer

Use the CloudFormation stack's Outputs to trigger a Lambda function that runs tests.

Answer

Configure a post-deployment hook in the SAM template that runs tests.

Answer

Add a manual approval step after Deploy, then run tests manually.

Question 11

A developer uses AWS CodePipeline with a manual approval step before deployment. The developer wants to ensure that if a new commit is pushed while a pipeline execution is waiting for approval, the waiting execution is canceled and a new one starts with the latest commit. Which pipeline execution mode should be configured?

Accepted Answer

Superseded. The Superseded execution mode is designed to automatically cancel any in-progress pipeline execution when a new commit is pushed, and start a new execution with the latest source changes. This ensures that the manual approval step does not block newer commits, as the waiting execution is replaced by the one triggered by the latest commit. In contrast, other modes either queue or run executions in parallel, which would not cancel the waiting approval step.

Answer

Queued

Answer

Parallel

Answer

Single

Question 12

A SAM application should gradually shift Lambda traffic and roll back on errors. Which two pieces are needed?

Accepted Answer

A Lambda alias/deployment preference. Option B is correct because AWS SAM uses Lambda aliases with deployment preferences (e.g., Canary10Percent5Minutes or Linear10PercentEvery10Minutes) to gradually shift traffic from the old version to the new version. Option C is correct because CloudWatch alarms can be tied to the deployment preferences to automatically roll back the traffic shift if the alarm enters the ALARM state, indicating errors or degraded health.

Answer

An S3 lifecycle rule

Answer

A public S3 bucket

Question 13

A team wants CloudFormation to prevent accidental deletion of a production DynamoDB table during stack updates. What should they configure?

Accepted Answer

DeletionPolicy or UpdateReplacePolicy Retain as appropriate. The DeletionPolicy attribute with a value of Retain instructs AWS CloudFormation to preserve the DynamoDB table when its stack resource is deleted during a stack update or stack deletion. Similarly, UpdateReplacePolicy Retain ensures that if a resource replacement is required during an update, the existing table is kept rather than deleted. This directly prevents accidental data loss by overriding CloudFormation's default behavior of deleting resources that are removed from the template or replaced.

Answer

A larger write capacity setting

Answer

A Lambda layer

Answer

An API Gateway usage plan

Question 14

An Elastic Beanstalk deployment must avoid downtime and create a full new set of instances before swapping traffic, accepting higher temporary cost. Which policy fits?

Accepted Answer

Immutable. Immutable deployment is correct because it creates a fully new set of instances in a separate Auto Scaling group, then swaps the Elastic Load Balancer (ELB) traffic to the new environment in a single atomic action. This ensures zero downtime and a complete rollback capability by simply reverting to the old environment, at the cost of running double the instances temporarily.

Answer

All at once

Answer

Rolling

Answer

Traffic splitting disabled

Question 15

An ECS blue/green deployment with CodeDeploy and an Application Load Balancer fails because the replacement task set never receives test traffic. Which configuration should be checked?

Accepted Answer

The test listener and target group mapping in the deployment group. In an ECS blue/green deployment with CodeDeploy and an Application Load Balancer, the test listener and its associated target group are responsible for routing test traffic to the replacement task set. If the replacement task set never receives test traffic, the most likely cause is that the test listener is not correctly mapped to the target group in the CodeDeploy deployment group configuration. This mapping ensures that traffic from the test listener is directed to the replacement task set during the deployment lifecycle.

Answer

S3 bucket versioning

Answer

Lambda provisioned concurrency

Answer

DynamoDB TTL

Question 16

A developer is deploying an application using AWS Elastic Beanstalk. The application requires a custom Amazon Machine Image (AMI) that includes specific software packages not available in the standard Elastic Beanstalk platform. Which approach should the developer use to ensure the custom AMI is used for all EC2 instances in the environment?

Accepted Answer

Create a custom platform using the Packer tool and specify it in the environment configuration.. Option A is correct because AWS Elastic Beanstalk allows you to create a custom platform using Packer, which can include a custom AMI with specific software packages. You then specify this custom platform in the environment configuration, ensuring all EC2 instances in the environment use that AMI. This approach is the only supported method for using a custom AMI that is not part of the standard Elastic Beanstalk platform.

Answer

Use the Elastic Beanstalk console to change the AMI ID in the environment configuration after creation.

Answer

Modify the .ebextensions configuration file to specify the custom AMI ID.

Answer

Launch a new environment with a different platform version that includes the required software.

Question 17

A CodePipeline source stage should start when code is pushed to a repository, without scheduled polling. Which integration pattern should be used?

Accepted Answer

Event-based trigger from the source provider/EventBridge integration. Option B is correct because AWS CodePipeline can integrate with Amazon EventBridge to listen for repository events (e.g., push events from CodeCommit, GitHub, or Bitbucket) and automatically start the pipeline. This event-driven pattern eliminates the need for scheduled polling, providing near-instantaneous execution when code changes are detected.

Answer

Manual approval only

Answer

A cron job on an EC2 instance

Answer

CloudWatch Logs Insights

Question 18

A developer is using AWS CodeDeploy to deploy an application to an EC2 Auto Scaling group. The deployment must ensure that a minimum number of instances are always running and healthy. The developer wants to deploy to 10 instances. Which deployment configuration should the developer use?

Accepted Answer

CodeDeployDefault.OneAtATime. Option A, CodeDeployDefault.OneAtATime, is correct because it ensures that only one instance is updated at a time, which guarantees that a minimum number of instances (9 out of 10) remain healthy and running throughout the deployment. This configuration is ideal for maintaining high availability and meeting strict uptime requirements.

Answer

CodeDeployDefault.AllAtOnce

Answer

CodeDeployDefault.HalfAtATime

Answer

CodeDeployDefault.MinHealthyHostsPercentage: 90

Question 19

A developer is using AWS Elastic Beanstalk to deploy a web application. The application uses an in-environment Amazon RDS database instance. The developer needs to update the application code without risking data loss. The database must not be affected by environment operations such as termination or updates. What is the recommended approach?

Accepted Answer

Create a standalone Amazon RDS instance and reconfigure the application to use it instead of the in-environment database.. Option A is correct because decoupling the RDS database from the Elastic Beanstalk environment by creating a standalone RDS instance ensures that the database is not tied to the environment's lifecycle. In-environment databases are automatically deleted when the environment is terminated or updated, risking data loss. By reconfiguring the application to point to an external RDS instance, the database persists independently of environment operations, meeting the requirement to avoid data loss during code updates or environment changes.

Answer

Take a snapshot of the database before each deployment and restore it after the deployment completes.

Answer

Use the Elastic Beanstalk environment's 'Swap environment URLs' feature to perform a blue/green deployment.

Answer

Create a new Elastic Beanstalk environment with a new RDS instance and migrate data manually.

Question 20

Drag and drop the steps to set up a CI/CD pipeline using AWS CodePipeline in the correct order.