DVA-C02 Deployment Practice Test 12 — 15 Questions

Question 1

A company is deploying a web application on AWS Elastic Beanstalk. The application requires a relational database. The company wants to decouple the database lifecycle from the environment lifecycle. Which TWO steps should the company take to achieve this? (Choose TWO.)

Accepted Answer

Create an Amazon RDS DB instance outside of Elastic Beanstalk. Option B is correct because creating an Amazon RDS DB instance outside of Elastic Beanstalk decouples the database lifecycle from the environment lifecycle. This means the database can be retained, modified, or terminated independently of the Elastic Beanstalk environment, preventing data loss when the environment is terminated or recreated. The application can then connect to the external RDS instance via environment properties passed to the EC2 instances.

Answer

Use Amazon DynamoDB instead of Amazon RDS

Answer

Add an Amazon RDS DB instance to the Elastic Beanstalk environment using the Elastic Beanstalk console

Answer

Create a separate Elastic Beanstalk environment for the database

Question 2

A developer is deploying a serverless application using AWS SAM. The application includes an Amazon DynamoDB table and a Lambda function that reads from the table. The developer wants to ensure that the Lambda function has the minimum required permissions to read from the table. Which THREE statements about SAM policy templates are correct? (Choose THREE.)

Accepted Answer

SAM policy templates are AWS-managed policies that can be applied to Lambda function roles. Options A, D, and E are correct. SAM policy templates provide managed policies, can be used in the Globals section, and DynamoDBReadPolicy grants read access. Option B is incorrect because policy templates do not support custom resources. Option C is incorrect because templates are for common use cases, not fine-grained resource-level permissions.

Answer

SAM policy templates allow fine-grained resource-level permissions by specifying ARNs

Answer

SAM policy templates can be used to grant permissions to custom resources

Question 3

A company is deploying a new microservice on AWS Lambda behind an API Gateway. The development team wants to ensure that new versions of the Lambda function can be rolled out gradually and automatically rolled back if error rates exceed a threshold. Which deployment strategy should the team use?

Accepted Answer

Use AWS CodeDeploy with a canary deployment strategy that shifts 10% of traffic to the new version for 5 minutes, then shifts the remaining 90%. Configure a CloudWatch alarm to automatically roll back if error rates exceed 2%.. Option C is correct because AWS CodeDeploy supports canary deployments with automatic rollback based on CloudWatch alarms. Option A is wrong because blue/green deployment with an NLB is more complex than needed and does not natively support gradual traffic shifting for Lambda. Option B is wrong because a linear deployment using CodeDeploy also works, but the question emphasizes automatic rollback based on error rates, which is more directly supported with canary alarms. Option D is wrong because manual traffic shifting via Route53 is not automated and does not provide automatic rollback.

Answer

Use AWS Lambda function aliases with weighted alias traffic shifting. Update the weights manually and monitor error rates using CloudWatch. Roll back by reverting the alias weights.

Answer

Use AWS CodeDeploy with a linear deployment strategy that shifts 10% of traffic every 5 minutes. Configure a CloudWatch alarm to monitor error rates and manually roll back if needed.

Answer

Use AWS CodeDeploy with a blue/green deployment and an Application Load Balancer (ALB) to shift traffic to the new version. Configure CloudWatch alarms to trigger a rollback if errors exceed 5%.

Question 4

A team is using AWS CodePipeline to deploy a critical application to Amazon ECS. The pipeline has a deployment stage that uses Amazon ECS (Blue/Green) action with CodeDeploy. Recently, the deployment failed because the new task set did not become healthy within the specified timeout. The team wants to ensure that future deployments automatically roll back if the health check fails. What should the team do?

Accepted Answer

Create a CloudWatch alarm that triggers when the healthy task count of the ECS service falls below a threshold. Configure the CodeDeploy deployment group to automatically roll back when this alarm is in ALARM state.. Option A is correct because it leverages CloudWatch alarms to monitor the health of the ECS service's new task set. When the alarm triggers due to insufficient healthy tasks, CodeDeploy can automatically initiate a rollback to the previous revision. This approach provides a proactive, health-based rollback mechanism that directly addresses the failure condition described (new task set not becoming healthy within timeout).

Answer

Modify the CodeDeploy deployment group to enable automatic rollback when a deployment fails. The deployment will automatically revert to the last successful deployment.

Answer

Increase the deployment timeout in the CodeDeploy deployment configuration to allow more time for the new task set to become healthy.

Answer

Configure the ECS service to automatically roll back to the previous task definition if the deployment fails. Use the ECS service's deployment circuit breaker.

Question 5

A developer is using AWS Elastic Beanstalk to deploy a web application. The developer needs to update the environment's configuration to use a larger instance type. What is the most efficient way to apply this change with minimal downtime?

Accepted Answer

Update the environment configuration through the Elastic Beanstalk console or CLI, and use a rolling update strategy to apply the change to instances in batches.. Option C is correct because Elastic Beanstalk supports rolling updates and rolling deployments that can update the instance type without downtime by updating instances in batches. Option A is wrong because terminating and recreating causes downtime. Option B is wrong because Blue/green deployment requires creating a new environment and swapping URLs, which is more effort. Option D is wrong because modifying the Auto Scaling group directly is not recommended as Elastic Beanstalk manages the resources; changes may be overwritten.

Answer

Perform a blue/green deployment by creating a new environment with the larger instance type, then swap the environment URLs.

Answer

Modify the Auto Scaling group launch configuration directly to use the larger instance type, then manually terminate each instance.

Answer

Terminate the current environment and create a new one with the larger instance type.

Question 6

A company uses AWS CloudFormation to deploy infrastructure. The development team wants to update a stack that includes an Amazon RDS database. The update requires changing the DB instance class, which will cause a brief downtime. The team wants to minimize downtime by creating a new database instance before deleting the old one. Which CloudFormation stack update policy should be used?

Accepted Answer

Use an 'UpdatePolicy' attribute with 'AutoScalingReplacingUpdate' set to true.. Option D is correct because the 'AutoScalingReplacingUpdate' update policy directs CloudFormation to create a new resource (in this case, an RDS DB instance) before deleting the old one, enabling a rolling replacement that minimizes downtime. This policy is specifically designed for resources that support replacement updates, allowing the new instance to be provisioned and traffic shifted before the old instance is terminated.

Answer

Use a 'DeletionPolicy' attribute set to 'Delete' for the RDS instance.

Answer

Use a 'DeletionPolicy' attribute set to 'Snapshot' for the RDS instance.

Answer

Use an 'UpdatePolicy' attribute with 'UseOnlineResharding' set to true.

Question 7

A developer is deploying a serverless application using the AWS Serverless Application Model (SAM). The application consists of several Lambda functions and an API Gateway. The developer wants to enable gradual deployment of Lambda function versions with automatic rollback based on CloudWatch alarms. What should the developer add to the SAM template?

Accepted Answer

Add 'AutoPublishAlias' and 'DeploymentPreference' properties to the Lambda function resource, specifying a canary deployment with a CloudWatch alarm for rollback.. Option B is correct because SAM supports canary deployments through the 'AutoPublishAlias' property combined with 'DeploymentPreference' that specifies a canary percent and interval, along with alarms for rollback. Option A is wrong because 'CodeDeployLambdaAlias' is not a SAM resource. Option C is wrong because 'DeploymentPreference' with 'Linear' shifts traffic linearly, but the question asks for gradual deployment with automatic rollback, which canary also provides; but canary is more commonly used for gradual. Option D is wrong because 'Version' and 'Alias' alone do not provide automatic rollback.

Answer

Use 'AWS::Lambda::Version' and 'AWS::Lambda::Alias' resources to manually shift traffic and set up CloudWatch alarms to revert the alias if needed.

Answer

Add a 'DeploymentPreference' property with 'Type' set to 'Linear' and specify a 'Alarms' list for rollback.

Answer

Add a 'CodeDeployLambdaAlias' resource to the template and configure the deployment group with a canary deployment configuration.

Question 8

A company is using AWS CodeBuild to compile and test code before deploying to Amazon S3. The build process must be triggered automatically whenever a developer pushes code to the 'main' branch of an AWS CodeCommit repository. Which resource should be used to trigger the build?

Accepted Answer

Use AWS CodePipeline with a source stage that connects to the CodeCommit repository and a build stage that invokes the CodeBuild project.. Option B is correct because CodePipeline can be used to automatically start a build in CodeBuild when a code change is pushed to CodeCommit. Option A is wrong because CloudWatch Events can trigger builds, but it requires setting up a rule; CodePipeline is the recommended service for CI/CD. Option C is wrong because S3 events are used for S3 buckets, not CodeCommit. Option D is wrong because CodeDeploy is for deployment, not for triggering builds.

Answer

Set up an AWS CodeDeploy trigger to start the build when a deployment is created.

Answer

Configure an Amazon S3 event notification to invoke the CodeBuild project when a new object is created.

Answer

Create an Amazon CloudWatch Events rule that triggers the CodeBuild project when a repository event occurs.

Question 9

A team is deploying a containerized application on Amazon ECS using Fargate. The application requires high availability and must be deployed across multiple Availability Zones. The team wants to automate the deployment process using AWS CodePipeline. What is the most efficient way to update the ECS service with a new task definition?

Accepted Answer

Use the ECS deploy action in CodePipeline with the 'Immediate' deployment option to update the service.. Option D is correct because CodePipeline can use the ECS deploy action with the 'Immediate' deployment option to update the ECS service to use the new task definition without downtime. Option A is wrong because manually updating the service is not automated. Option B is wrong because using CloudFormation to update the stack is possible but less efficient for frequent updates. Option C is wrong because Lambda updating the service requires custom code and is more complex.

Answer

Use an AWS Lambda function that calls the ECS UpdateService API with the new task definition.

Answer

Use the AWS Management Console to update the ECS service with the new task definition.

Answer

Use AWS CloudFormation to update the ECS service by updating the stack with the new task definition.

Question 10

A company uses AWS OpsWorks for configuration management and deployment of applications on EC2 instances. The company wants to migrate to AWS Systems Manager for automation and patching. Which Systems Manager capability should be used to execute scripts and commands on EC2 instances as part of a deployment?

Accepted Answer

AWS Systems Manager State Manager. AWS Systems Manager State Manager is the correct capability because it is designed to define and maintain consistent configuration of EC2 instances, including executing scripts and commands as part of a deployment. State Manager uses associations to enforce a desired state, such as running a custom script during instance boot or on a schedule, making it ideal for deployment automation. This aligns with the migration from OpsWorks, which also manages configuration state.

Answer

AWS Systems Manager Patch Manager

Answer

AWS Systems Manager Automation

Answer

AWS Systems Manager Run Command

Question 11

A developer is deploying a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The developer uses AWS CodeDeploy to deploy new application versions. The deployment group is configured with an in-place deployment. The developer wants to ensure that the deployment does not cause any downtime. Which additional configuration is required?

Accepted Answer

Configure the CodeDeploy deployment group to enable load balancer deregistration and re-registration.. Option B is correct because using a load balancer with in-place deployment, CodeDeploy can register instances with the load balancer and deregister them before deployment, then re-register after. This minimizes downtime. Option A is wrong because creating an Auto Scaling group is not necessary; the deployment can work with existing instances. Option C is wrong because using blue/green deployment is an alternative, but the question specifically asks for in-place. Option D is wrong because increasing the minimum healthy hosts percentage helps but does not eliminate downtime if instances are not properly drained.

Answer

Change the deployment type to blue/green deployment.

Answer

Set the minimum healthy hosts percentage to 100%.

Answer

Create an Auto Scaling group and configure the deployment to use a rolling update.

Question 12

A company is deploying a critical application using AWS Elastic Beanstalk. The application experiences occasional spikes in traffic. The company wants to ensure that the environment scales automatically and that deployments are rolled back if health checks fail. Which TWO configurations should be used together to meet these requirements? (Choose TWO.)

Accepted Answer

Configure the Auto Scaling group to scale based on the average request count per instance.. Option B is correct because configuring the Auto Scaling group to scale based on the average request count per instance allows the environment to automatically add or remove instances in response to traffic spikes, ensuring dynamic scaling. Option D is correct because rolling updates with a batch size of 50% update instances in batches and automatically roll back the deployment if health checks fail, meeting the rollback requirement. Together, these configurations provide both automatic scaling and safe, self-healing deployments.

Answer

Use a blue/green deployment policy.

Answer

Set the environment's capacity to a fixed number of instances.

Answer

Enable immutable updates for the environment.

Question 13

A company uses AWS CloudFormation to manage infrastructure. The development team wants to implement a CI/CD pipeline that automatically updates a CloudFormation stack when code is pushed to a CodeCommit repository. The pipeline should also run tests before deploying. Which THREE services should be used together to achieve this? (Choose THREE.)

Accepted Answer

AWS CodeBuild. AWS CodeBuild is correct because it can compile source code, run tests, and produce artifacts that are ready for deployment. In this CI/CD pipeline, CodeBuild executes the test suite after code is pushed to CodeCommit, ensuring that only validated code proceeds to update the CloudFormation stack.

Answer

Amazon CloudWatch Events

Answer

AWS CodeDeploy

Question 14

A developer is using AWS CodeDeploy to deploy an application to EC2 instances. The developer wants to ensure that the deployment stops if any instance fails to install the application. Which TWO CodeDeploy settings should be configured to achieve this? (Choose TWO.)

Accepted Answer

Set the 'IgnoreApplicationStopFailures' option to false in the deployment configuration.. Option B is correct because setting 'IgnoreApplicationStopFailures' to false ensures that if the application stop hook fails on any instance, the deployment stops immediately rather than continuing. This prevents the deployment from proceeding when an instance cannot properly stop the existing application, which could lead to conflicts or corrupted states.

Answer

Set the 'DeploymentStyle' to 'BLUE_GREEN'.

Answer

Configure the 'LoadBalancerInfo' to include the target group.

Answer

Configure the 'RevisionLocation' to point to an S3 bucket.

Question 15

Refer to the exhibit. A developer created this IAM policy to allow a CI/CD service to trigger CodePipeline and CodeBuild. However, the pipeline fails with an 'AccessDenied' error when trying to start the CodeBuild project. What is the likely cause?

Accepted Answer

The policy is attached to the developer's IAM user instead of the CodePipeline service role.. Option B is correct because the policy allows 'codebuild:StartBuild' on all resources, but CodePipeline needs to start builds on behalf of the pipeline. The CodeBuild project resource ARN is not specified; however, the 'Resource' is '*', so that should be fine. Actually, the issue might be that the policy allows StartBuild for CodeBuild, but the pipeline's service role needs permissions. The policy shown is for a user, not for the pipeline's service role. The question says 'a developer created this IAM policy', but the pipeline uses a service role. So the correct answer is that the policy should be attached to the pipeline's service role, not the developer. Option A is wrong because the action is correct. Option C is wrong because the resource is '*', covering all projects. Option D is wrong because the policy does not need to be attached to the user; it needs to be attached to the pipeline's role.

Answer

The policy should use 'Effect': 'Deny' for the CodeBuild actions.

Answer

The policy does not include 'codebuild:StartBuild' for the specific CodeBuild project ARN.

Answer

The policy must include 'codebuild:BatchGetBuilds' for the specific project.