DVA-C02 Deployment Practice Test 19 — 15 Questions

Question 1

A company is deploying a Node.js application on AWS Elastic Beanstalk. The application uses environment variables for configuration. The development team wants to ensure that the environment variables are not exposed in the source code or in the deployment logs. Which TWO actions should the team take? (Choose TWO.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Store sensitive environment variables in AWS Systems Manager Parameter Store and retrieve them at runtime.. Options C and D are correct. Storing environment variables in AWS Systems Manager Parameter Store (C) or AWS Secrets Manager (D) prevents exposure in source code or logs, as they are retrieved at runtime via SDK calls. Option A (detailed logging) does not prevent exposure; it may actually log the values. Option B (Elastic Beanstalk environment properties) stores values in plaintext in the environment configuration, which can be viewed. Option E (embedding in .env file) exposes them in the source code and deployment artifacts.

Answer

Enable detailed logging for the Elastic Beanstalk environment and filter out sensitive data.

Answer

Set environment variables using Elastic Beanstalk environment properties in the console.

Answer

Embed the environment variables in the application package as a .env file.

Question 2

A company uses AWS CodeBuild to compile and test a Java application. The build process takes a long time because dependencies are downloaded every time. Which TWO actions can reduce build time? (Choose TWO.)

Accepted Answer

Enable local caching in the CodeBuild project to reuse dependency files between builds.. Options D and E are correct. Both local caching (D) and S3 caching (E) allow CodeBuild to reuse previously downloaded dependencies, reducing build time. Option A (increasing compute type) improves CPU/memory but does not affect dependency download time. Option B (changing runtime language) is unrelated to dependency caching. Option C (parallel builds) runs multiple builds concurrently but does not reduce the time for a single build's dependency download.

Answer

Increase the compute type of the build environment to have more CPU and memory.

Answer

Change the build runtime to a language that compiles faster.

Answer

Configure the build project to run builds in parallel.

Question 3

A developer is deploying a new version of a Lambda function using the AWS CLI. Which command should the developer use to update the function code?

Accepted Answer

aws lambda update-function-code. The `update-function-code` command updates the code of a Lambda function. Option B (`update-function-configuration`) updates configuration settings only, not the code. Option C (`invoke`) is for invoking the function, and option D (`create-function`) is for creating a new function, not updating an existing one.

Answer

aws lambda update-function-configuration

Answer

aws lambda invoke

Answer

aws lambda create-function

Question 4

A company uses AWS OpsWorks for configuration management. They want to deploy a new application version to a stack. Which lifecycle event should they use to run deployment scripts?

Accepted Answer

Deploy. The Deploy lifecycle event in AWS OpsWorks is specifically designed to run deployment scripts when you deploy a new application version to a stack. This event occurs after the application code has been installed, allowing you to execute custom scripts for tasks like database migrations, cache clearing, or service restarts. It is the correct choice because it aligns with the deployment phase of the application lifecycle.

Answer

Configure

Answer

Undeploy

Answer

Setup

Question 5

A developer is using AWS CloudFormation to create a stack that includes an EC2 instance. The stack creation fails because the instance type is not supported in the selected Availability Zone. What should the developer do?

Accepted Answer

Update the stack to specify a different subnet or not specify an Availability Zone.. When an EC2 instance type is not supported in a specific Availability Zone (AZ), the developer can update the CloudFormation stack to either specify a different subnet (which implicitly selects a different AZ) or omit the Availability Zone parameter entirely, allowing AWS to automatically choose an AZ where the instance type is supported. This avoids the need to delete the stack or change the instance type, preserving other stack resources and configurations.

Answer

Delete the stack and start over.

Answer

Change the instance type to one that is supported.

Answer

Create the stack in a different region.

Question 6

A developer uses AWS CodeBuild to run unit tests. The build succeeds but the tests fail. The developer wants to fail the build if tests fail. What should the developer do?

Accepted Answer

Ensure the test command exits with a non-zero status on failure.. In CodeBuild, the build phase succeeds or fails based on the exit code of the commands in the buildspec. By default, if a test command exits with a non-zero status, CodeBuild marks the build as FAILED. Therefore, ensuring the test command exits with a non-zero status on failure is the correct approach to fail the build when tests fail.

Answer

Run tests in the post_build phase.

Answer

Set the command to always exit 0.

Answer

Enable build badges.

Question 7

A developer is deploying a new version of a Lambda function using AWS CodeDeploy with a linear canary deployment. The function is part of a serverless application. After the deployment starts, the developer notices that the new version is receiving only 10% of traffic initially, but after 10 minutes, the traffic increases to 100%. What should the developer do to ensure a more gradual traffic shift?

Accepted Answer

Modify the CodeDeploy deployment configuration to use a linear 10% every 5 minutes instead of canary.. The developer is using a canary deployment configuration that shifts 10% of traffic immediately and then waits 10 minutes before shifting to 100%. To achieve a more gradual traffic shift, the developer should modify the CodeDeploy deployment configuration to use a linear 10% every 5 minutes, which will increment traffic by 10% every 5 minutes, taking 50 minutes to reach 100%.

Answer

Use Lambda function aliases with weighted traffic shifting.

Answer

Use multiple Lambda function versions and update the alias gradually.

Answer

Configure AWS CloudFormation to update the Lambda alias.

Question 8

A company uses AWS CodePipeline to deploy a critical web application. The pipeline has a source stage (CodeCommit), a build stage (CodeBuild), and a deploy stage (CodeDeploy). During a recent deployment, the CodeDeploy stage failed because the target EC2 instances were not in a healthy state. The developer needs to ensure that the pipeline automatically rolls back the deployment to the last successful version if the deployment fails. What should the developer do?

Accepted Answer

In the CodeDeploy deployment group, enable automatic rollback when a deployment fails.. CodeDeploy deployment groups have a built-in automatic rollback configuration that can be enabled to revert to the last successful deployment revision when a deployment fails. This feature directly addresses the requirement without requiring additional services or manual steps, as it operates within the CodeDeploy service itself.

Answer

Use AWS CloudFormation to manage the deployment and enable rollback on failure.

Answer

Configure a CloudWatch alarm to trigger a rollback in CodePipeline.

Answer

Modify the CodePipeline stage to include a manual approval step that checks health before proceeding.

Question 9

A developer is deploying a new version of an application to Amazon ECS using AWS CodeDeploy. The application uses a blue/green deployment strategy. After the deployment, traffic is automatically shifted to the new task set. However, the developer wants to test the new version with a small percentage of users before shifting all traffic. What should the developer do?

Accepted Answer

Use CodeDeploy to perform a canary deployment that shifts 10% of traffic initially.. CodeDeploy supports canary deployments for ECS, which allow you to shift a specified percentage of traffic to the new task set initially (e.g., 10%) and then, after a configured interval, shift the remaining traffic. This matches the requirement to test with a small percentage of users before shifting all traffic. Option B directly implements this canary strategy.

Answer

Create a new ECS task definition with a different CPU/memory allocation.

Answer

Configure the target group to route traffic to a specific task set.

Answer

Use ECS service auto scaling to gradually increase the number of tasks.

Question 10

A company uses AWS Elastic Beanstalk to deploy a web application. The environment is currently running a previous version. The developer uploads a new application version and deploys it to the environment. After the deployment, the environment health status turns 'Severe' and the new version is not accessible. The developer needs to quickly revert to the previous working version. What should the developer do?

Accepted Answer

Use the Elastic Beanstalk console to deploy the previous application version.. Elastic Beanstalk allows you to deploy a previous application version directly from the console or CLI without creating a new environment. This action replaces the current application version in the existing environment, restoring the previously working code and resolving the health status. It is the fastest and most straightforward way to revert while preserving the environment's configuration and resources.

Answer

Create a new environment with the previous version and swap CNAMEs.

Answer

Roll back the environment configuration to a previous saved configuration.

Answer

Terminate the environment and launch a new one with the previous version.

Question 11

A developer is using AWS CloudFormation to deploy a stack that includes an Amazon RDS DB instance. The developer wants to update the DB instance to a larger instance type without causing downtime. The current template has DeletionPolicy set to 'Delete'. What should the developer do?

Accepted Answer

Use a blue/green deployment by creating a new stack with the larger instance type and updating the application to point to the new database.. A blue/green deployment allows you to create a new stack with the larger DB instance type in a separate environment (green), then switch the application traffic to the new database with minimal downtime. This approach avoids the downtime associated with in-place modifications, as CloudFormation updates to RDS instance types typically require a reboot, which causes an outage. By using a blue/green deployment, the developer can validate the new instance and cut over seamlessly.

Answer

Take a snapshot of the DB instance and restore it to a larger instance type.

Answer

Change the DeletionPolicy to 'Retain' and update the stack.

Answer

Create a read replica with the larger instance type and promote it.

Question 12

A developer is deploying a serverless application using the AWS Serverless Application Model (SAM). The application consists of an API Gateway, a Lambda function, and a DynamoDB table. The developer wants to enable canary deployments for the Lambda function. What should the developer do?

Accepted Answer

Add the AutoPublishAlias and DeploymentPreference properties to the Lambda function in the SAM template.. The AWS SAM template supports canary deployments for Lambda functions by adding the `AutoPublishAlias` property (which automatically creates and publishes a new version to a Lambda alias) and the `DeploymentPreference` property (which defines the traffic-shifting strategy, such as `Canary10Percent5Minutes`). This enables CodeDeploy to gradually shift traffic from the current version to the new version without manual intervention.

Answer

Configure a CodeDeploy deployment group in the SAM template.

Answer

Create a Lambda alias and configure traffic shifting manually.

Answer

Use AWS CodePipeline to orchestrate the canary deployment.

Question 13

A company uses AWS CodeBuild to run tests and build artifacts for a Java application. The build process is taking longer than expected. The developer wants to speed up the build by caching dependencies. What should the developer do?

Accepted Answer

Enable local caching in the CodeBuild project configuration.. CodeBuild's local caching feature allows the build environment to cache dependencies (e.g., Maven local repository) in a local directory that persists across build runs for the same project. This eliminates the need to re-download dependencies on every build, significantly reducing build time. The cache is stored on the build instance's local storage and is automatically managed by CodeBuild.

Answer

Use a CodeCommit repository to store dependencies.

Answer

Store dependencies in an S3 bucket and download them in each build.

Answer

Mount an Amazon EFS file system to the build environment and store dependencies there.

Question 14

A developer is deploying a microservices application on Amazon ECS using Fargate. The application uses an Application Load Balancer (ALB) to distribute traffic. The developer needs to perform a blue/green deployment with automatic rollback if health checks fail. What should the developer use?

Accepted Answer

Use AWS CodeDeploy with a blue/green deployment configuration.. AWS CodeDeploy natively supports blue/green deployments for Amazon ECS, allowing you to specify a blue/green configuration that automatically shifts traffic from the old (blue) task set to the new (green) task set. It integrates with the ALB to perform health checks and can automatically roll back the deployment if the health checks fail, meeting the requirement without manual intervention.

Answer

Configure ECS service auto scaling to replace tasks gradually.

Answer

Manually update the ECS service using the AWS Management Console.

Answer

Use AWS CloudFormation to update the ECS service with a new task definition.

Question 15

A development team uses AWS Elastic Beanstalk to deploy a web application. They want to perform a blue/green deployment to minimize downtime. What should they do to implement this?

Accepted Answer

Create a new environment, deploy the new version, and then swap the environment URLs.. Blue/green deployment in Elastic Beanstalk is achieved by creating a separate environment (the green environment) with the new application version, then swapping the CNAME records (URLs) of the two environments. This instantly routes traffic from the old (blue) environment to the new (green) environment with zero downtime, and allows quick rollback by swapping back.

Answer

Create an Auto Scaling group and manually replace instances.

Answer

Update the existing environment with the new version and set the deployment policy to 'Rolling'.

Answer

Use AWS CodeDeploy to perform a blue/green deployment on the EC2 instances.