DVA-C02 Deployment Practice Test 12 — 15 Questions

Question 1

A developer is deploying a serverless application using AWS SAM. The application includes an API Gateway REST API and a Lambda function. The developer wants to set up a custom domain name for the API in the production stage. Which resource should the developer define in the SAM template to achieve this with minimal effort?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS::Serverless::Api. The AWS::Serverless::Api resource in an AWS SAM template provides a high-level abstraction that simplifies the configuration of API Gateway REST APIs, including the ability to set up a custom domain name via the Domain property. This approach requires minimal effort because SAM automatically creates the underlying AWS::ApiGateway::DomainName and AWS::ApiGateway::BasePathMapping resources, handles the TLS certificate association, and manages the stage deployment. Defining a raw AWS::ApiGateway::DomainName would require additional manual configuration for base path mapping and stage integration, making the Serverless::Api the most efficient choice.

Answer

AWS::ApiGateway::DomainName

Answer

AWS::ApiGateway::BasePathMapping

Answer

AWS::Route53::RecordSet

Question 2

A developer is using AWS CodeBuild to build a Java application. The buildspec.yml file currently runs unit tests. The developer wants to generate a code coverage report and publish it to the CodeBuild console for analysis. Which CodeBuild feature should be used?

Accepted Answer

Test reports. AWS CodeBuild's test reports feature allows developers to create reports from test result files, including code coverage reports, and publish them to the CodeBuild console for analysis. This feature supports various report formats such as JaCoCo, Cobertura, and SimpleCov, enabling the developer to visualize coverage metrics directly in the console without external tools.

Answer

Build artifacts

Answer

Amazon CloudWatch Logs

Answer

Amazon S3 access logs

Question 3

A developer is using AWS CodeDeploy to deploy an application to an Amazon ECS service using the Fargate launch type. The developer wants to ensure that the deployment rolls back automatically if the new task set fails health checks. Which configuration should the developer set?

Accepted Answer

Enable rollback in the deployment group settings.. Enabling rollback in the deployment group settings allows CodeDeploy to automatically revert the deployment to the previous working task set if the new task set fails health checks. This is a native feature of CodeDeploy that monitors the health of the ECS service and triggers a rollback without manual intervention.

Answer

Set the deployment type to in-place.

Answer

Set the deployment configuration to CodeDeployDefault.OneAtATime.

Answer

Configure CloudWatch alarms to trigger a rollback.

Question 4

A developer is using AWS CodeDeploy to perform a canary deployment for an AWS Lambda function. The deployment should first shift 10% of traffic to the new version, and then shift the remaining 90% after 5 minutes. Which deployment configuration should be used?

Accepted Answer

Canary10Percent5Minutes. The Canary10Percent5Minutes deployment configuration is specifically designed for canary deployments with AWS Lambda, shifting 10% of traffic to the new version immediately and then automatically shifting the remaining 90% after a 5-minute interval. This matches the requirement exactly, as CodeDeploy uses this predefined configuration to orchestrate the traffic shift in two steps with a built-in wait period.

Answer

AllAtOnce

Answer

Linear10PercentEvery10Minutes

Answer

BlueGreen

Question 5

A developer is using AWS CodeDeploy to deploy a new version of an AWS Lambda function. The developer wants to gradually shift traffic from the old version to the new version in 10-minute increments. Which deployment configuration should the developer use?

Accepted Answer

Linear10PercentEvery10Minutes. The Linear10PercentEvery10Minutes configuration shifts traffic from the old Lambda version to the new version in 10% increments every 10 minutes, which matches the developer's requirement of gradually shifting traffic in 10-minute increments. This is a linear deployment type in AWS CodeDeploy that provides a steady, incremental traffic shift over time.

Answer

Canary10Percent10Minutes

Answer

Canary10Percent30Minutes

Answer

AllAtOnce

Question 6

A developer is using AWS CodeDeploy to deploy an application to an EC2 Auto Scaling group. The deployment must follow a rolling update, deploying to exactly 50% of the instances at a time. Which built-in deployment configuration should the developer use?

Accepted Answer

CodeDeployDefault.HalfAtATime. CodeDeployDefault.HalfAtATime, is correct because it instructs CodeDeploy to deploy to exactly 50% of the instances in the Auto Scaling group at a time during a rolling update. This built-in configuration ensures that half the instances are updated before the other half, matching the requirement for a 50% rolling deployment.

Answer

CodeDeployDefault.OneAtATime

Answer

CodeDeployDefault.AllAtOnce

Answer

CodeDeployDefault.LambdaAllAtOnce

Question 7

A CodeDeploy deployment to Lambda should shift 10 percent of traffic for 10 minutes before full rollout and automatically roll back on alarms. Which configuration should be used?

Accepted Answer

Canary deployment preference with CloudWatch alarms. A is correct because CodeDeploy's canary deployment preference shifts 10% of traffic to the new Lambda version for 10 minutes, then automatically shifts the remaining 90% after the specified interval. CloudWatch alarms are configured to trigger an automatic rollback if the alarm state is breached during the canary period, meeting the requirement for a gradual shift with automated rollback on failure.

Answer

All-at-once deployment without alarms

Answer

Manual alias update after deployment

Answer

S3 static website deployment

Question 8

A CloudFormation update may replace an RDS database. The developer wants to preview replacement risk before executing. What should be created?

Accepted Answer

A change set. A change set in AWS CloudFormation allows you to preview how proposed changes to a stack will be executed, including whether any resources will be replaced (e.g., an RDS database). By reviewing the change set, you can see if the update will cause replacement (indicated by 'Replacement: True') before you actually apply the changes, enabling risk assessment without modification.

Answer

A stack policy only

Answer

A nested stack output

Answer

A CloudWatch dashboard

Question 9

An ECS blue/green deployment with CodeDeploy and an Application Load Balancer fails because the replacement task set never receives test traffic. Which configuration should be checked?

Accepted Answer

The test listener and target group mapping in the deployment group. In an ECS blue/green deployment with CodeDeploy and an Application Load Balancer, the test listener and its associated target group are responsible for routing test traffic to the replacement task set. If the replacement task set never receives test traffic, the most likely cause is that the test listener is not correctly mapped to the target group in the CodeDeploy deployment group configuration. This mapping ensures that traffic from the test listener is directed to the replacement task set during the deployment lifecycle.

Answer

S3 bucket versioning

Answer

Lambda provisioned concurrency

Answer

DynamoDB TTL

Question 10

A developer needs to package and deploy a serverless application with Lambda functions, API Gateway, and DynamoDB using concise syntax. Which framework is AWS-native for this purpose?

Accepted Answer

AWS Serverless Application Model. The AWS Serverless Application Model (SAM) is an AWS-native framework that uses a simplified YAML or JSON syntax to define and deploy serverless resources such as Lambda functions, API Gateway, and DynamoDB. It extends AWS CloudFormation, allowing developers to package and deploy with concise syntax using the `sam build` and `sam deploy` commands, making it the correct choice for this purpose.

Answer

AWS Control Tower

Answer

Amazon Macie

Answer

AWS Backup

Question 11

A team wants CloudFormation to prevent accidental deletion of a production DynamoDB table during stack updates. What should they configure?

Accepted Answer

DeletionPolicy or UpdateReplacePolicy Retain as appropriate. The DeletionPolicy attribute with a value of Retain instructs AWS CloudFormation to preserve the DynamoDB table when its stack resource is deleted during a stack update or stack deletion. Similarly, UpdateReplacePolicy Retain ensures that if a resource replacement is required during an update, the existing table is kept rather than deleted. This directly prevents accidental data loss by overriding CloudFormation's default behavior of deleting resources that are removed from the template or replaced.

Answer

A larger write capacity setting

Answer

A Lambda layer

Answer

An API Gateway usage plan

Question 12

A CodePipeline source stage should start when code is pushed to a repository, without scheduled polling. Which integration pattern should be used?

Accepted Answer

Event-based trigger from the source provider/EventBridge integration. AWS CodePipeline can integrate with Amazon EventBridge to listen for repository events (e.g., push events from CodeCommit, GitHub, or Bitbucket) and automatically start the pipeline. This event-driven pattern eliminates the need for scheduled polling, providing near-instantaneous execution when code changes are detected.

Answer

Manual approval only

Answer

A cron job on an EC2 instance

Answer

CloudWatch Logs Insights

Question 13

A developer needs different configuration values for dev, test, and prod in the same SAM template. Which feature is suitable?

Accepted Answer

Parameters and environment-specific parameter overrides. AWS SAM supports Parameters and environment-specific parameter overrides, allowing you to define a single template and supply different configuration values (e.g., database URLs, API keys) for dev, test, and prod environments at deployment time. This is achieved by passing a JSON or YAML file with the `--parameter-overrides` flag in the `sam deploy` command, or by using the `parameters` section in a `samconfig.toml` file. This approach avoids duplicating templates and keeps infrastructure-as-code DRY and maintainable.

Answer

Hardcoded ARNs in every function

Answer

One AWS root account per environment

Answer

Disabling stack updates

Question 14

A SAM application should gradually shift Lambda traffic and roll back on errors. Which two pieces are needed?

Accepted Answer

A Lambda alias/deployment preference. AWS SAM uses Lambda aliases with deployment preferences (e.g., Canary10Percent5Minutes or Linear10PercentEvery10Minutes) to gradually shift traffic from the old version to the new version. Option C is correct because CloudWatch alarms can be tied to the deployment preferences to automatically roll back the traffic shift if the alarm enters the ALARM state, indicating errors or degraded health.

Answer

An S3 lifecycle rule

Answer

A public S3 bucket

Question 15

Drag and drop the steps to set up a custom domain for an API Gateway API in the correct order.

Accepted Answer

1. Register or have a domain, 2. Request or import a certificate in ACM, 3. Create a custom domain name in API Gateway, 4. Create an API mapping to a stage, 5. Update DNS records to point to the API Gateway domain name. First have a domain, get a certificate, create custom domain in API Gateway, map to stage, and update DNS.

Answer

1. Create a custom domain name in API Gateway, 2. Register or have a domain, 3. Request or import a certificate in ACM, 4. Create an API mapping to a stage, 5. Update DNS records

Answer

1. Update DNS records, 2. Register or have a domain, 3. Request or import a certificate in ACM, 4. Create a custom domain name in API Gateway, 5. Create an API mapping to a stage

Answer

1. Register or have a domain, 2. Create a custom domain name in API Gateway, 3. Request or import a certificate in ACM, 4. Create an API mapping to a stage, 5. Update DNS records