DVA-C02 Practice Test 8 — 10 Questions

Question 1

A company uses AWS Elastic Beanstalk to deploy a web application. The developer has updated the application code and wants to deploy the new version with a rolling deployment strategy to minimize downtime. Which configuration should the developer use?

Accepted Answer

Set the deployment policy to 'Rolling'. Option B is correct because Rolling deployment updates instances in batches, minimizing downtime. Option A is wrong because All at once causes downtime. Option C is wrong because Immutable creates new instances and swaps, but Rolling is more cost-effective. Option D is wrong because Blue/green is a separate deployment method.

Answer

Set the deployment policy to 'Immutable'

Answer

Set the deployment policy to 'All at once'

Answer

Set the deployment policy to 'Blue/green'

Question 2

A developer is deploying a microservices application on Amazon ECS using Fargate. The developer wants to implement a blue/green deployment strategy using AWS CodeDeploy. The current production environment uses an Application Load Balancer (ALB). What is the minimum configuration required to enable blue/green deployments?

Accepted Answer

An ALB with two target groups, one for blue and one for green.. Option A is correct because CodeDeploy blue/green requires an ALB and a target group for each environment. Option B is wrong because NLB also works but requires additional configuration. Option C is wrong because CloudFront is not required. Option D is wrong because ECS service discovery is not necessary.

Answer

An ALB with a single target group and an Amazon CloudFront distribution.

Answer

An ECS service discovery namespace.

Answer

A Network Load Balancer (NLB) with a single target group.

Question 3

A developer uses AWS CodeCommit to store source code. The developer wants to automatically trigger a build in AWS CodeBuild every time a new commit is pushed to the master branch. Which AWS service should the developer use to configure this integration?

Accepted Answer

AWS CodePipeline. Option C is correct because CodePipeline can be configured to trigger on CodeCommit events and start a CodeBuild project. Option A is wrong because CloudWatch Events can trigger CodeBuild directly, but CodePipeline is the standard integration. Option B is wrong because CodeDeploy is for deployment, not build. Option D is wrong because S3 events are not directly related to CodeCommit.

Answer

Amazon CloudWatch Events (or EventBridge)

Answer

Amazon S3 events

Answer

AWS CodeDeploy

Question 4

A team is using AWS CodeBuild to compile and test code. The build takes longer than expected. The team wants to reduce build times by caching dependencies. Which option should the team use to cache dependencies in CodeBuild?

Accepted Answer

Local caching or Amazon S3 caching. Option B is correct because CodeBuild supports local caching and S3 caching; local caching stores dependencies on the build instance. Option A is wrong because EFS is not supported for caching in CodeBuild. Option C is wrong because ECR is for container images, not general dependency caching. Option D is wrong because DynamoDB is not used for caching in CodeBuild.

Answer

Amazon DynamoDB

Answer

Amazon EFS

Answer

Amazon ECR

Question 5

A company has a legacy application that runs on an Amazon EC2 instance. The developer is tasked with containerizing the application and deploying it on Amazon ECS with Fargate. The application writes logs to a local file. What should the developer do to ensure logs are available in Amazon CloudWatch Logs?

Accepted Answer

Configure the ECS task definition to use the 'awslogs' log driver and specify the log group.. Option A is correct because using the awslogs log driver sends container logs to CloudWatch Logs. Option B is wrong because CloudWatch Agent inside the container is less efficient. Option C is wrong because ECS does not send logs automatically. Option D is wrong because S3 is not a direct log destination.

Answer

Modify the application to write logs to stdout, as ECS automatically captures stdout to CloudWatch Logs.

Answer

Install the CloudWatch Agent inside the container and configure it to tail the log file.

Answer

Mount an Amazon S3 bucket and write logs to S3, then use a Lambda function to send them to CloudWatch.

Question 6

A company uses AWS CodePipeline to deploy a web application. The pipeline has a Source stage (CodeCommit), a Build stage (CodeBuild), and a Deploy stage (CodeDeploy). The developer wants to add a manual approval step before the Deploy stage. Which TWO configurations are required?

Accepted Answer

An IAM role that allows CodePipeline to publish to the SNS topic.. Options B and D are correct because a manual approval action requires an SNS topic for notification and an IAM role for the pipeline to publish to SNS. Option A is wrong because Lambda is not required. Option C is wrong because CloudWatch is not needed. Option E is wrong because SES is not used.

Answer

An Amazon SES identity to send emails.

Answer

An AWS Lambda function to send approval emails.

Answer

An Amazon CloudWatch alarm to trigger the approval.

Question 7

A developer is deploying a containerized application on Amazon ECS with Fargate. The application requires access to an Amazon RDS database. The developer needs to securely pass database credentials to the container. Which THREE methods can the developer use?

Accepted Answer

Store the credentials in AWS Systems Manager Parameter Store and reference the parameter in the task definition.. Options A, C, and D are correct. Option B is wrong because hardcoding credentials is insecure. Option E is wrong because environment variables in the task definition are visible in plain text.

Answer

Hardcode the credentials in the container image.

Answer

Define environment variables in the task definition with the credentials.

Question 8

A developer is using AWS CloudFormation to deploy a stack that includes an Amazon S3 bucket with a bucket policy that grants public read access. The stack creation fails with the error 'Access Denied for bucket: bucket-policy does not allow access.' The developer has full administrative permissions in AWS. The developer verifies that the bucket policy is correctly formatted. What is the most likely cause of the failure?

Accepted Answer

The S3 Block Public Access settings are enabled at the account level, preventing the bucket policy from granting public access.. Option A is correct because S3 bucket policies that grant public access require the S3 Block Public Access settings to be disabled at the account or bucket level. Option B is wrong because the bucket name is not the issue. Option C is wrong because KMS is not involved. Option D is wrong because the policy is correct.

Answer

The developer does not have permissions to create S3 buckets.

Answer

The S3 bucket name is already in use by another account.

Answer

The S3 bucket is encrypted with AWS KMS, and the bucket policy does not include kms:Decrypt permissions.

Question 9

A company uses AWS CodeDeploy to deploy a web application to an Auto Scaling group. The deployment fails with the error 'The overall deployment failed because too many individual instances failed deployment, too few healthy instances are available for deployment, or some instances in your deployment group are experiencing problems.' The deployment group has a minimum of 2 instances and a maximum of 4. The deployment configuration is CodeDeployDefault.OneAtATime. What is the most likely cause of the failure?

Accepted Answer

The Auto Scaling group has only 2 instances, and one instance fails during deployment, leaving less than the required healthy instances.. Option A is correct because the deployment configuration specifies one instance at a time, but the Auto Scaling group may have only 2 instances, which is the minimum. If one instance fails, the healthy count drops below the required threshold, causing the deployment to fail. Option B is wrong because the IAM role typically does not cause such errors. Option C is wrong because the deployment group size is not the issue. Option D is wrong because the revision is uploaded, not the cause.

Answer

The deployment group's maximum instances is set to 4, which exceeds the number of instances in the Auto Scaling group.

Answer

The IAM role attached to the instances does not have sufficient permissions to download the revision from Amazon S3.

Answer

The revision is not properly zipped or the AppSpec file is missing.

Question 10

A development team uses AWS Elastic Beanstalk to deploy a containerized application. They notice that after a successful deployment, the environment's health turns from Green to Red. The application logs show no errors. What is the most likely cause?

Accepted Answer

The ELB health check endpoint returns a 503 status code after the new version is deployed.. Option B is correct because Elastic Beanstalk uses an ELB health check to determine environment health. If the health check path returns a non-200 status, the environment turns red. Option A is wrong because it would cause deployment failure, not post-deployment health issues. Option C is wrong because it would cause scaling issues, not immediate health change. Option D is wrong because it would affect deployment, not health.

Answer

The deployment failed due to a missing environment variable.

Answer

The application's Docker image is not compatible with the platform version.

Answer

The Auto Scaling group's minimum instance count is too low.