DVA-C02 Deployment Practice Test 20 — 15 Questions

Question 1

A company uses AWS CloudFormation to deploy infrastructure. They have a stack that creates an Amazon RDS DB instance. They want to update the DB instance class without downtime. Which update policy should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

UseLatestRestorableTime. None of the listed options is correct. AWS CloudFormation does not have a built-in update policy that avoids downtime when changing the DB instance class of an RDS instance. To modify the instance class with minimal downtime, you can use a custom approach such as creating a read replica, promoting it, and updating DNS, or modifying the DB instance directly (which typically involves brief downtime). The options presented are either invalid or unrelated: UseLatestRestorableTime is a property for restoring from a snapshot or creating read replicas, not an update policy; AutoScalingRollingUpdate is for Auto Scaling groups; UpdateReplacePolicy controls replacement behavior; CreationPolicy controls creation signals.

Answer

AutoScalingRollingUpdate

Answer

UpdateReplacePolicy

Answer

CreationPolicy

Question 2

A team uses AWS CodePipeline to automate deployments. They notice that a deployment to Amazon ECS fails because the task definition is not updated. The pipeline includes a source stage from CodeCommit, a build stage using AWS CodeBuild, and a deploy stage to Amazon ECS. What is the most likely missing step?

Accepted Answer

The build stage does not output the updated task definition as an artifact.. In a CodePipeline that deploys to Amazon ECS, the build stage must output the updated task definition file (typically `imagedefinitions.json` or a task definition JSON) as an artifact. Without this artifact, the deploy stage cannot reference the new task definition revision, so it continues using the old one, causing the deployment to fail.

Answer

The pipeline has a manual approval step before deployment.

Answer

The deploy stage action is set to 'Create a new ECS service'.

Answer

The task definition is not registered in the Amazon ECS console.

Question 3

A company uses AWS OpsWorks for configuration management. They have a stack with multiple layers. They want to deploy a new application version to the application layer using rolling updates. What is the correct way to achieve this?

Accepted Answer

Update the app with the new version and run the 'deploy' command on the stack.. In AWS OpsWorks, deploying a new application version to a layer is done by updating the app configuration with the new version and then running the 'deploy' command on the stack. This command triggers the built-in Chef deploy recipes on the layer's instances, performing a rolling update that installs the new application version while minimizing downtime. The 'deploy' lifecycle event is specifically designed for application deployment, unlike 'setup' which configures the instance's initial state.

Answer

Update the custom cookbook and run the 'setup' command on the layer.

Answer

Clone the stack and then delete the old stack.

Answer

Modify the Auto Scaling group to launch new instances with the updated app.

Question 4

A company uses AWS CodeBuild for building and testing their application. They have a build project that runs on a Linux environment. They want to run a build in a custom Docker image that is stored in Amazon ECR. How should they configure the build project?

Accepted Answer

In the environment configuration, set the 'Image' field to the ECR image URI.. AWS CodeBuild allows you to specify a custom Docker image from Amazon ECR by entering its URI directly in the 'Image' field under the environment configuration. This enables the build to run in a container that includes all necessary dependencies, without requiring a Dockerfile in the source code or a managed image.

Answer

Add a 'Dockerfile' to the source code and specify it in the buildspec.

Answer

Use a managed image provided by AWS CodeBuild.

Answer

Configure the pipeline to pass the image URI as an environment variable.

Question 5

An IAM policy is attached to an EC2 instance role. The instance is part of a CodeDeploy deployment group. The deployment fails because the CodeDeploy agent cannot download the revision. What is the most likely reason?

Accepted Answer

The policy does not allow s3:GetObject on the specific bucket where the revision is stored.. The CodeDeploy agent on the EC2 instance downloads the application revision from an S3 bucket. For this to succeed, the IAM role attached to the instance must include an s3:GetObject permission on the specific bucket and object. Without it, the agent cannot retrieve the revision file, causing the deployment to fail. Options A and B are irrelevant because the agent does not call CodeDeploy API actions like GetDeployment or CreateDeployment; those are used by the user or CI/CD pipeline initiating the deployment. Option C is incorrect because IAM policies for S3 actions do not require a region in the resource ARN.

Answer

The policy does not allow the codedeploy:GetDeployment action.

Answer

The policy does not allow the codedeploy:CreateDeployment action.

Answer

The policy does not specify a region in the resource ARN.

Question 6

A developer is using AWS CodeDeploy to deploy an application to an Auto Scaling group. The deployment fails during the 'BeforeInstall' lifecycle event. Which file should the developer check to debug the failure?

Accepted Answer

appspec.yml. The 'BeforeInstall' lifecycle event in AWS CodeDeploy is a hook defined in the appspec.yml file. This file specifies the deployment lifecycle hooks, including scripts to run before installation. When a deployment fails during this event, the appspec.yml is the primary file to inspect for misconfigured scripts, incorrect permissions, or missing script paths.

Answer

index.js

Answer

taskdef.json

Answer

buildspec.yml

Question 7

A company uses AWS Elastic Beanstalk to deploy a web application. The development team wants to ensure that the deployment does not cause any downtime and that new instances are fully registered with the load balancer before old instances are terminated. Which deployment policy should they use?

Accepted Answer

Rolling with an additional batch. The Rolling with an additional batch deployment policy launches a new batch of instances in addition to the current ones, registers them with the load balancer, and only then terminates the old instances. This ensures zero downtime because the new instances are fully serving traffic before any old instances are removed, unlike standard rolling deployments which terminate old instances before new ones are fully ready.

Answer

Immutable

Answer

Rolling

Answer

All at once

Question 8

A developer is using AWS CodeCommit as a source repository. They want to automatically build and test code whenever a new branch is created. Which AWS service should they use to trigger the pipeline?

Accepted Answer

Amazon CloudWatch Events. Amazon CloudWatch Events (now part of Amazon EventBridge) can capture AWS CodeCommit repository events, such as the creation of a new branch. By setting a rule that matches the 'Reference Created' event type, you can automatically trigger an AWS CodePipeline pipeline execution, enabling continuous integration for new branches.

Answer

Amazon S3 event notification

Answer

Amazon Simple Notification Service (SNS)

Answer

AWS Lambda

Question 9

A company uses AWS CodePipeline to deploy a static website to Amazon S3. The pipeline includes a deploy action that uses AWS CloudFormation to create the S3 bucket and upload files. The developer notices that the deploy action fails intermittently with a 'BucketAlreadyExists' error. What is the most likely cause?

Accepted Answer

The S3 bucket name is already taken by another AWS account.. The 'BucketAlreadyExists' error occurs when an S3 bucket name is globally unique across all AWS accounts. If the bucket name specified in the CloudFormation template has already been claimed by another AWS account, the deployment will fail intermittently if the bucket is deleted and recreated or if the pipeline runs in a different region where the name is taken. This is a common issue when using hardcoded or non-unique bucket names.

Answer

The S3 bucket has versioning enabled.

Answer

The CloudFormation template has incorrect IAM permissions.

Answer

The S3 bucket policy is too restrictive.

Question 10

A company is using AWS CodeBuild to compile a Java application. The build takes a long time because Maven dependencies are downloaded each time. How can the developer reduce build time?

Accepted Answer

Configure a cache in Amazon S3 for the Maven repository.. Configuring an Amazon S3 cache for the Maven repository allows CodeBuild to reuse previously downloaded dependencies across builds, eliminating the need to re-download them each time. This significantly reduces build time by leveraging the local cache stored in S3, which is a best practice for dependency-heavy builds like Java applications with Maven.

Answer

Use a higher compute type for the build project.

Answer

Use a custom AMI with pre-installed dependencies.

Answer

Increase the timeout value for the build.

Question 11

A developer is using AWS CodePipeline with multiple actions in a stage. The pipeline has a build action that produces artifacts, followed by a deploy action. The developer wants to ensure that if the deploy action fails, the pipeline stops and does not continue to the next stage. How can they achieve this?

Accepted Answer

No additional configuration is needed; the pipeline stops on failure by default.. AWS CodePipeline stages are sequential by default: if any action within a stage fails, the entire stage fails and the pipeline stops, preventing execution of subsequent stages. No additional configuration is needed to halt the pipeline on a deploy action failure, as this is the inherent behavior of a pipeline stage with multiple actions.

Answer

Configure the deploy action to 'Abort' on failure.

Answer

Set the runOrder for the deploy action to 'Blocked'.

Answer

Set the pipeline's execution mode to 'PARALLEL'.

Question 12

Which TWO are valid deployment strategies supported by AWS CodeDeploy? (Choose TWO.)

Accepted Answer

In-place deployment. AWS CodeDeploy supports in-place deployments (option B) where the application is updated on the existing instances without provisioning new ones. This is a valid deployment strategy that updates the current fleet by stopping and starting the application, and it is one of the two core strategies explicitly documented by AWS.

Answer

Immutable deployment

Answer

Canary deployment

Answer

All at once deployment

Question 13

A developer is using AWS CodeDeploy to deploy an application to an EC2 instance. The deployment fails with the error 'ScriptMissing' during the BeforeInstall lifecycle event. What is the most likely cause?

Accepted Answer

The script file specified in the appspec.yml for the BeforeInstall hook is not present on the instance. The 'ScriptMissing' error in AWS CodeDeploy indicates that the deployment failed because a script file referenced in the appspec.yml for a lifecycle event (in this case, BeforeInstall) could not be found on the EC2 instance. CodeDeploy expects the script to be present at the specified path after the archive is extracted; if the file is missing or the path is incorrect, the agent reports this error. Option B correctly identifies that the script file is not present on the instance.

Answer

The BeforeInstall lifecycle event is not defined in the appspec.yml

Answer

The CodeDeploy agent on the instance is not running

Answer

The instance does not have the necessary permissions to execute the script

Question 14

A developer is deploying a serverless application using AWS SAM. The application consists of multiple Lambda functions and an API Gateway REST API. The developer needs to ensure that the API Gateway endpoint is created before the Lambda functions are deployed, because the functions need the endpoint URL as an environment variable. How should the developer configure the SAM template?

Accepted Answer

Define the Lambda functions to use the ServerlessRestApi implicit API and reference the API's output in the function's environment variables. AWS SAM automatically creates an implicit API Gateway REST API (logical ID `ServerlessRestApi`) when you define an `AWS::Serverless::Api` or use the `Events` property on a function. You can reference its endpoint URL using the `Fn::Sub` intrinsic function with the `ServerlessRestApi` logical ID, such as `!Sub 'https://${ServerlessRestApi}.execute-api.${AWS::Region}.amazonaws.com/${Stage}'`. This ensures the API Gateway resource is created before the Lambda functions that reference it, as CloudFormation resolves dependencies through intrinsic function references.

Answer

Separate the deployment into two stacks: first deploy API Gateway, then deploy Lambda functions

Answer

Add a DependsOn clause to each Lambda function resource to wait for the API Gateway resource

Answer

Use a custom resource in CloudFormation to create the API Gateway endpoint before Lambda functions

Question 15

A developer is using AWS CodeBuild to compile and package a Java application. The build process takes longer than expected. The developer wants to speed up the build by reusing dependencies that have not changed between builds. Which feature should the developer enable?

Accepted Answer

Enable caching for the CodeBuild project by specifying an S3 bucket for cache storage. Enable caching for the CodeBuild project by specifying an S3 bucket for cache storage. CodeBuild caching allows reusing previously downloaded dependencies, reducing build time. Option A is incorrect because running builds concurrently does not reuse dependencies across builds; it runs separate builds simultaneously. Option B is incorrect because enabling build artifacts does not affect dependency caching; artifacts are outputs. Option D is incorrect because storing artifacts in S3 does not provide caching for dependencies; it only stores the build output.

Answer

Configure the build project to run builds concurrently

Answer

Enable build artifacts in the CodeBuild project

Answer

Store the build's output artifacts in an S3 bucket