DVA-C02 Practice Test 9 — 10 Questions

Question 1

A company uses AWS CodeBuild to compile and package code, and AWS CodePipeline to orchestrate deployments to Amazon ECS. The pipeline includes a manual approval step. During a recent deployment, the build succeeded but the pipeline failed at the deploy stage with the error 'CannotPullContainerError: manifest for image:tag not found'. The ECS task definition references the image:tag. What is the most likely cause?

Accepted Answer

The image tag used is 'latest', and a subsequent build pushed a new 'latest' image, overwriting the original before the manual approval was granted.. Option D is correct because the manual approval step may cause a delay, and if the image tag is 'latest', it may be overwritten by a subsequent build, causing the image to be unavailable. Option A is wrong because the build succeeded. Option B is wrong because the error is about manifest, not networking. Option C is wrong because the task definition is correct at the time of deployment.

Answer

The CodeBuild project does not have permissions to push to Amazon ECR.

Answer

The ECS cluster does not have internet access to pull the image from ECR.

Answer

The task definition references an incorrect image name.

Question 2

A company uses AWS CloudFormation to manage infrastructure. They need to update a stack that includes an Amazon RDS DB instance. To minimize downtime, they want to perform a rolling update. Which THREE properties must be set in the CloudFormation template?

Accepted Answer

CreationPolicy attribute with ResourceSignal. Option A (UpdatePolicy with AutoScalingReplacingUpdate) is correct for rolling updates on Auto Scaling groups. Option B (CreationPolicy with ResourceSignal) is correct to wait for signals. Option D (DeletionPolicy) is incorrect because it controls deletion behavior. Option C (UpdatePolicy with AutoScalingRollingUpdate) is correct for rolling update configuration. Option E (UpdatePolicy with UseOnlineResizing) is not a valid property. So correct are A, B, C.

Answer

DeletionPolicy attribute set to Snapshot

Answer

UpdatePolicy attribute with UseOnlineResizing

Question 3

A developer is using AWS CodePipeline to automate deployments. The pipeline has a Source stage using Amazon S3 and a Deploy stage using AWS Elastic Beanstalk. The developer notices that the pipeline fails at the Deploy stage with the error 'The deployment failed because the version of the application to be deployed could not be found.' Which TWO actions should the developer take to resolve this issue?

Accepted Answer

Ensure that the S3 bucket and the Elastic Beanstalk environment are in the same AWS region.. Option B (Ensure the S3 bucket is in the same region) is correct because cross-region access requires explicit configuration. Option D (Check that the source artifact is a zip file) is correct because Elastic Beanstalk expects a zip. Option A is wrong because the bucket name is not an issue. Option C is wrong because it's a separate service. Option E is wrong because the S3 key is typically correct.

Answer

Make sure the source artifact is a valid zip file containing the application code and environment configuration.

Answer

Confirm that the S3 object key does not contain special characters.

Answer

Verify that the S3 bucket name is exactly as specified in the pipeline.

Question 4

A company uses AWS OpsWorks to manage a stack of EC2 instances. After a deployment, the application becomes unresponsive. The engineer suspects that a configuration file was not updated correctly. What is the best way to verify the deployed configuration?

Accepted Answer

SSH into an instance and inspect the configuration files in /var/lib/aws/opsworks.. Option B is correct because OpsWorks stores the last applied configuration in /var/lib/aws/opsworks, and checking this location shows the actual configuration used. Option A is incorrect because JSON syntax errors cause deployment failures, not silent misconfiguration. Option C is incorrect because AWS Systems Manager Run Command is not specific to OpsWorks. Option D is incorrect because CloudWatch Logs may not contain configuration details.

Answer

Use AWS Systems Manager Run Command to execute a script that outputs the configuration.

Answer

Check the OpsWorks stack's logs for any JSON syntax errors in the custom JSON.

Answer

Review the application logs in Amazon CloudWatch Logs for configuration errors.

Question 5

A team is using AWS CodePipeline with multiple stages: Source, Build, Test, and Deploy. The Deploy stage uses AWS CodeDeploy to deploy to an EC2 Auto Scaling group. The pipeline runs successfully, but the application still serves the old version. What is the most likely cause?

Accepted Answer

The CodeDeploy deployment group is associated with a different Auto Scaling group than the one serving traffic.. Option A is correct because if the CodeDeploy deployment group is configured to deploy to a different Auto Scaling group, the new revision is deployed to the wrong instances. Option B is incorrect because the pipeline succeeded, so the artifact is not corrupted. Option C is incorrect because a misconfigured load balancer would cause health check issues but not serve the old version. Option D is incorrect because a failed CodeBuild stage would prevent the pipeline from reaching Deploy.

Answer

The load balancer's target group is not pointing to the correct instances.

Answer

The build artifact in the Source stage is corrupted.

Answer

The CodeBuild stage failed silently and did not produce a new artifact.

Question 6

A developer is deploying an application using AWS CloudFormation. The stack includes an Amazon RDS DB instance. To ensure secure credential management, which TWO actions should the developer take? (Choose TWO.)

Accepted Answer

Use AWS Systems Manager Parameter Store with a SecureString parameter for the password.. Options B and D are correct. Using AWS Secrets Manager or Systems Manager Parameter Store to store database credentials securely is a best practice. Option A is incorrect because hardcoding credentials in the template is insecure. Option C is incorrect because the default password is not automatically randomized; it must be explicitly set. Option E is incorrect because IAM database authentication is separate from credential storage.

Answer

Hardcode the master password in the CloudFormation template.

Answer

Use IAM database authentication to manage credentials.

Answer

Leave the master password empty so that CloudFormation generates a random password.

Question 7

A developer is using AWS SAM to deploy a serverless application. The developer wants to enable canary deployments for the Lambda function. Which TWO resources must be configured in the SAM template? (Choose TWO.)

Accepted Answer

DeploymentPreference property on the AWS::Serverless::Function resource.. Options A and B are correct. The AutoPublishAlias property enables canary deployments by creating a new version and updating the alias. The DeploymentPreference property specifies the canary configuration. Option C is incorrect because the alias can be used for canary, but the deployment preference is required. Option D is incorrect because the function's code URI is always needed but not specific to canary. Option E is incorrect because the event source mapping is not related to canary deployment.

Answer

The function's CodeUri property pointing to the deployment package.

Answer

An event source mapping for the function.

Answer

The function's alias resource with a routing configuration.

Question 8

A company uses CodePipeline to deploy a web application to Elastic Beanstalk. The deployment fails at the Build stage with an error 'BUILD FAILED'. Which step should the developer take first to troubleshoot?

Accepted Answer

Review the buildspec.yml file for syntax errors. The error 'BUILD FAILED' indicates an issue during the build phase. The buildspec.yml file defines the build commands. Checking it is the first logical step. Option A is correct because the buildspec.yml is the configuration for CodeBuild. Option B (CloudTrail) is for API auditing, not build errors. Option C (CodeDeploy) is for deployment, not build. Option D (Elastic Beanstalk logs) are for runtime, not build.

Answer

Verify the CodeDeploy application revision

Answer

Examine the Elastic Beanstalk environment logs

Answer

Check AWS CloudTrail for API calls

Question 9

Which TWO actions should a developer take to minimize downtime when deploying a new version of a production application running on Amazon ECS with Fargate?

Accepted Answer

Configure the ECS service to use a blue/green deployment with CodeDeploy. Using a blue/green deployment (A) and updating the ECS service with a new task definition while setting the minimum healthy percent to 100% and maximum percent to 200% (B) both reduce downtime. Option C (delete and recreate) causes downtime. Option D (update target group) is part of blue/green but not a complete action. Option E (stop all tasks) causes downtime.

Answer

Delete the existing service and recreate it with the new task definition

Answer

Update the target group health check settings to a more lenient threshold

Answer

Stop all running tasks and then start new tasks with the updated image

Question 10

A developer is deploying a serverless application using AWS SAM. The application includes an API Gateway endpoint backed by a Lambda function. The developer wants to enable canary deployments to shift 10% of traffic to the new version for 5 minutes before routing all traffic. Which configuration should the developer add to the SAM template?

Accepted Answer

DeploymentPreference with Type: Canary10Percent5Minutes. SAM supports canary deployments using the DeploymentPreference property with a canary type. Option A is correct because it specifies a 10% canary for 5 minutes. Option B is linear, not canary. Option C is all-at-once. Option D is a custom traffic shifting method.

Answer

Add a CodeDeploy application and deployment group manually

Answer

DeploymentPreference with Type: Linear10PercentEvery1Minute

Answer

DeploymentPreference with Type: AllAtOnce