DVA-C02 Deployment Practice Test 17 — 15 Questions

Question 1

A developer is using AWS Elastic Beanstalk to deploy a web application. The application requires a relational database. The developer wants to ensure that the database is not accidentally deleted when the Elastic Beanstalk environment is terminated. Which approach should the developer take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create the RDS instance outside of Elastic Beanstalk and configure the application to connect to it using environment variables.. Creating the RDS instance outside of Elastic Beanstalk decouples the database lifecycle from the environment lifecycle. When the Elastic Beanstalk environment is terminated, the external RDS instance remains intact and is not deleted. The application can connect to it using environment variables configured in the Elastic Beanstalk environment, ensuring persistence of data.

Answer

Create the database as part of the Elastic Beanstalk environment by adding an RDS database configuration in the .ebextensions.

Answer

Use an Amazon DynamoDB table instead of a relational database.

Answer

Configure a retention policy on the RDS instance within the Elastic Beanstalk environment.

Question 2

A developer wants to deploy a new version of an application to an EC2 Auto Scaling group using AWS CodeDeploy. The developer wants to minimize downtime and ensure that if the deployment fails, it automatically rolls back to the previous version. Which deployment type should the developer choose?

Accepted Answer

Blue/green. Blue/green deployment is the correct choice because it creates a separate, new Auto Scaling group (green) alongside the existing one (blue), allowing traffic to be shifted to the new environment after validation. This minimizes downtime by keeping the old environment fully operational during the deployment, and CodeDeploy can automatically roll back by redirecting traffic to the blue environment if the deployment fails.

Answer

In-place

Answer

Canary

Answer

Linear

Question 3

A developer is deploying a serverless application using AWS SAM. The application includes an API Gateway REST API and a Lambda function. The developer wants to set up a custom domain name for the API in the production stage. Which resource should the developer define in the SAM template to achieve this with minimal effort?

Accepted Answer

AWS::Serverless::Api. The AWS::Serverless::Api resource in an AWS SAM template provides a high-level abstraction that simplifies the configuration of API Gateway REST APIs, including the ability to set up a custom domain name via the Domain property. This approach requires minimal effort because SAM automatically creates the underlying AWS::ApiGateway::DomainName and AWS::ApiGateway::BasePathMapping resources, handles the TLS certificate association, and manages the stage deployment. Defining a raw AWS::ApiGateway::DomainName would require additional manual configuration for base path mapping and stage integration, making the Serverless::Api the most efficient choice.

Answer

AWS::ApiGateway::DomainName

Answer

AWS::ApiGateway::BasePathMapping

Answer

AWS::Route53::RecordSet

Question 4

A developer is using AWS CodeBuild to build a Java application. The buildspec.yml file currently runs unit tests. The developer wants to generate a code coverage report and publish it to the CodeBuild console for analysis. Which CodeBuild feature should be used?

Accepted Answer

Test reports. AWS CodeBuild's test reports feature allows developers to create reports from test result files, including code coverage reports, and publish them to the CodeBuild console for analysis. This feature supports various report formats such as JaCoCo, Cobertura, and SimpleCov, enabling the developer to visualize coverage metrics directly in the console without external tools.

Answer

Build artifacts

Answer

Amazon CloudWatch Logs

Answer

Amazon S3 access logs

Question 5

A developer is using AWS CodeDeploy to deploy an application to an Amazon ECS service using the Fargate launch type. The developer wants to ensure that the deployment rolls back automatically if the new task set fails health checks. Which configuration should the developer set?

Accepted Answer

Enable rollback in the deployment group settings.. Enabling rollback in the deployment group settings allows CodeDeploy to automatically revert the deployment to the previous working task set if the new task set fails health checks. This is a native feature of CodeDeploy that monitors the health of the ECS service and triggers a rollback without manual intervention.

Answer

Set the deployment type to in-place.

Answer

Set the deployment configuration to CodeDeployDefault.OneAtATime.

Answer

Configure CloudWatch alarms to trigger a rollback.

Question 6

A developer is using AWS CodeDeploy to perform a canary deployment for an AWS Lambda function. The deployment should first shift 10% of traffic to the new version, and then shift the remaining 90% after 5 minutes. Which deployment configuration should be used?

Accepted Answer

Canary10Percent5Minutes. The Canary10Percent5Minutes deployment configuration is specifically designed for canary deployments with AWS Lambda, shifting 10% of traffic to the new version immediately and then automatically shifting the remaining 90% after a 5-minute interval. This matches the requirement exactly, as CodeDeploy uses this predefined configuration to orchestrate the traffic shift in two steps with a built-in wait period.

Answer

AllAtOnce

Answer

Linear10PercentEvery10Minutes

Answer

BlueGreen

Question 7

A developer is using AWS CodeDeploy to deploy a new version of an AWS Lambda function. The developer wants to gradually shift traffic from the old version to the new version in 10-minute increments. Which deployment configuration should the developer use?

Accepted Answer

Linear10PercentEvery10Minutes. The Linear10PercentEvery10Minutes configuration shifts traffic from the old Lambda version to the new version in 10% increments every 10 minutes, which matches the developer's requirement of gradually shifting traffic in 10-minute increments. This is a linear deployment type in AWS CodeDeploy that provides a steady, incremental traffic shift over time.

Answer

Canary10Percent10Minutes

Answer

Canary10Percent30Minutes

Answer

AllAtOnce

Question 8

A CodeDeploy deployment to Lambda should shift 10 percent of traffic for 10 minutes before full rollout and automatically roll back on alarms. Which configuration should be used?

Accepted Answer

Canary deployment preference with CloudWatch alarms. A is correct because CodeDeploy's canary deployment preference shifts 10% of traffic to the new Lambda version for 10 minutes, then automatically shifts the remaining 90% after the specified interval. CloudWatch alarms are configured to trigger an automatic rollback if the alarm state is breached during the canary period, meeting the requirement for a gradual shift with automated rollback on failure.

Answer

All-at-once deployment without alarms

Answer

Manual alias update after deployment

Answer

S3 static website deployment

Question 9

A CloudFormation update may replace an RDS database. The developer wants to preview replacement risk before executing. What should be created?

Accepted Answer

A change set. A change set in AWS CloudFormation allows you to preview how proposed changes to a stack will be executed, including whether any resources will be replaced (e.g., an RDS database). By reviewing the change set, you can see if the update will cause replacement (indicated by 'Replacement: True') before you actually apply the changes, enabling risk assessment without modification.

Answer

A stack policy only

Answer

A nested stack output

Answer

A CloudWatch dashboard

Question 10

An ECS blue/green deployment with CodeDeploy and an Application Load Balancer fails because the replacement task set never receives test traffic. Which configuration should be checked?

Accepted Answer

The test listener and target group mapping in the deployment group. In an ECS blue/green deployment with CodeDeploy and an Application Load Balancer, the test listener and its associated target group are responsible for routing test traffic to the replacement task set. If the replacement task set never receives test traffic, the most likely cause is that the test listener is not correctly mapped to the target group in the CodeDeploy deployment group configuration. This mapping ensures that traffic from the test listener is directed to the replacement task set during the deployment lifecycle.

Answer

S3 bucket versioning

Answer

Lambda provisioned concurrency

Answer

DynamoDB TTL

Question 11

A developer needs to package and deploy a serverless application with Lambda functions, API Gateway, and DynamoDB using concise syntax. Which framework is AWS-native for this purpose?

Accepted Answer

AWS Serverless Application Model. The AWS Serverless Application Model (SAM) is an AWS-native framework that uses a simplified YAML or JSON syntax to define and deploy serverless resources such as Lambda functions, API Gateway, and DynamoDB. It extends AWS CloudFormation, allowing developers to package and deploy with concise syntax using the `sam build` and `sam deploy` commands, making it the correct choice for this purpose.

Answer

AWS Control Tower

Answer

Amazon Macie

Answer

AWS Backup

Question 12

A team wants CloudFormation to prevent accidental deletion of a production DynamoDB table during stack updates. What should they configure?

Accepted Answer

DeletionPolicy or UpdateReplacePolicy Retain as appropriate. The DeletionPolicy attribute with a value of Retain instructs AWS CloudFormation to preserve the DynamoDB table when its stack resource is deleted during a stack update or stack deletion. Similarly, UpdateReplacePolicy Retain ensures that if a resource replacement is required during an update, the existing table is kept rather than deleted. This directly prevents accidental data loss by overriding CloudFormation's default behavior of deleting resources that are removed from the template or replaced.

Answer

A larger write capacity setting

Answer

A Lambda layer

Answer

An API Gateway usage plan

Question 13

A CodePipeline source stage should start when code is pushed to a repository, without scheduled polling. Which integration pattern should be used?

Accepted Answer

Event-based trigger from the source provider/EventBridge integration. AWS CodePipeline can integrate with Amazon EventBridge to listen for repository events (e.g., push events from CodeCommit, GitHub, or Bitbucket) and automatically start the pipeline. This event-driven pattern eliminates the need for scheduled polling, providing near-instantaneous execution when code changes are detected.

Answer

Manual approval only

Answer

A cron job on an EC2 instance

Answer

CloudWatch Logs Insights

Question 14

A developer needs different configuration values for dev, test, and prod in the same SAM template. Which feature is suitable?

Accepted Answer

Parameters and environment-specific parameter overrides. AWS SAM supports Parameters and environment-specific parameter overrides, allowing you to define a single template and supply different configuration values (e.g., database URLs, API keys) for dev, test, and prod environments at deployment time. This is achieved by passing a JSON or YAML file with the `--parameter-overrides` flag in the `sam deploy` command, or by using the `parameters` section in a `samconfig.toml` file. This approach avoids duplicating templates and keeps infrastructure-as-code DRY and maintainable.

Answer

Hardcoded ARNs in every function

Answer

One AWS root account per environment

Answer

Disabling stack updates

Question 15

A CloudFormation stack update fails and rolls back. Which two practices help diagnose and reduce future deployment risk?

Accepted Answer

Review stack events and resource status reasons. Reviewing stack events and resource status reasons in CloudFormation provides detailed error messages for each resource that failed during the update. This allows you to pinpoint the exact cause of the failure, such as insufficient IAM permissions, a resource limit exceeded, or a dependency conflict. Analyzing these events is essential for diagnosing issues and preventing similar failures in future deployments.

Answer

Delete the stack immediately without checking events

Answer

Disable rollback for all production deployments permanently