DVA-C02 Deployment Practice Test 21 — 15 Questions

Question 1

A developer is using AWS CloudFormation to deploy a stack that includes an Amazon RDS DB instance. The stack creation fails because the DB instance creation takes longer than the CloudFormation timeout. Which THREE steps can the developer take to resolve this issue? (Choose THREE.)

Accepted Answer

Use a CloudFormation wait condition or a waiter to pause the stack creation until the DB instance is ready.. Options A, C, and E are correct. A: Increasing the timeout gives more time for the resource creation. C: A waiter can poll until the DB instance is available. E: A custom resource with a Lambda function can handle the creation asynchronously. Option B is wrong because changing the instance class might not speed up creation; it could even take longer. Option D is wrong because reducing the timeout would make it fail sooner.

Answer

Change the DB instance class to a smaller size.

Answer

Reduce the stack creation timeout to trigger a rollback faster.

Question 2

A developer is deploying an application using AWS Elastic Beanstalk. The developer wants to ensure that the application is highly available and can recover from an AZ failure. Which TWO configurations should be applied? (Choose TWO.)

Accepted Answer

Configure the environment to use multiple Availability Zones.. Options A and D are correct. A: Deploying to multiple AZs ensures that if one AZ fails, the application remains available. D: A load balancer distributes traffic across instances in multiple AZs. Option B is wrong because a single instance is not highly available. Option C is wrong because a larger instance type does not provide AZ redundancy. Option E is wrong because an RDS Multi-AZ database is for database availability, not application.

Answer

Select a larger EC2 instance type.

Answer

Enable Multi-AZ for the application's Amazon RDS database.

Answer

Use a single EC2 instance for simplicity.

Question 3

The exhibit shows the output of the describe-stack-events command for a CloudFormation stack that failed to create. What is the most likely cause of the failure?

Accepted Answer

The Lambda function handler 'index.handler' does not exist in the deployment package.. Option A is correct because the stack event shows CREATE_FAILED for the Lambda function resource, which could be due to an incorrect handler name. Option B is wrong because the S3 bucket and key are provided. Option C is wrong because there is no indication of a permissions issue; the event does not show an error message. Option D is wrong because there is no indication of a missing S3 bucket.

Answer

The S3 bucket 'my-bucket' does not contain the object 'my-function.zip'.

Answer

The Lambda function code exceeds the maximum allowed size.

Answer

The IAM role associated with the Lambda function lacks necessary permissions.

Question 4

The exhibit shows an IAM policy attached to a user who needs to deploy applications using AWS CodeDeploy. The user reports that they cannot create a deployment for the MyApplication/MyDeploymentGroup. What is the most likely reason?

Accepted Answer

The policy does not include permission on the application resource.. Option D is correct because the CreateDeployment action requires permission on the deployment group resource, but also requires permission on the application resource (arn:aws:codedeploy:region:account:application:MyApplication). The policy only grants on the deployment group, not the application. Option A is wrong because the actions are allowed. Option B is wrong because GetDeployment and GetDeploymentGroup are allowed. Option C is wrong because the policy does not restrict the deployment group; it grants on the specific group.

Answer

The policy restricts the user to a different deployment group.

Answer

The user does not have permission to call the codedeploy:CreateDeployment action.

Answer

The user does not have permission to call codedeploy:GetDeployment and codedeploy:GetDeploymentGroup.

Question 5

The exhibit shows the output of the describe-instances command. An Elastic Beanstalk environment is configured to use this EC2 instance as a web server. The application is not accessible. What is the most likely cause?

Accepted Answer

The instance has been terminated.. Option B is correct because the instance state is 'terminated', meaning it is no longer running. Option A is wrong because the instance exists but is terminated. Option C is wrong because the tag is present. Option D is wrong because there is no indication of a security group issue.

Answer

The security group does not allow HTTP traffic.

Answer

The instance does not have the correct Name tag.

Answer

The instance does not exist.

Question 6

A company uses AWS CodePipeline to deploy a Node.js application to AWS Elastic Beanstalk. The build stage runs successfully, but the deploy stage fails with an error: 'The deployment failed because no instances were found for the environment.' What is the most likely cause?

Accepted Answer

The Elastic Beanstalk environment has no running instances due to a failed health check.. Option C is correct because if the Elastic Beanstalk environment does not have any running EC2 instances (e.g., due to a failed health check or scaling issue), the deployment cannot find any instances to update. Option A is wrong because the IAM role permissions would cause a different error (e.g., access denied). Option B is wrong because CodeDeploy is not used with Elastic Beanstalk. Option D is wrong because incorrect artifact name would cause a different error (e.g., artifact not found).

Answer

The CodeDeploy application is not configured correctly.

Answer

The IAM role for CodePipeline lacks permissions to describe EC2 instances.

Answer

The build artifact is not named correctly for Elastic Beanstalk.

Question 7

A developer wants to deploy a serverless application using AWS SAM. The application consists of multiple Lambda functions, an API Gateway REST API, and a DynamoDB table. The developer wants to define the application in a single template and deploy it using the AWS CLI. Which command should the developer use to package and deploy the application?

Accepted Answer

sam package and sam deploy. Option B is correct because 'sam package' uploads the artifacts to S3 and generates a packaged template, and 'sam deploy' deploys it. Option A is wrong because 'aws cloudformation package' requires manual deploy. Option C is wrong because 'sam build' is for building locally but not for packaging. Option D is wrong because 'aws s3 cp' only uploads files, not a template.

Answer

sam build and sam deploy

Answer

aws cloudformation package and aws cloudformation deploy

Answer

aws s3 cp and aws cloudformation create-stack

Question 8

A company uses AWS CodeDeploy to deploy a web application to an Auto Scaling group. The deployment fails during the 'Install' lifecycle event. The developer checks the logs and finds that the scripts in the 'appspec.yml' file are not being executed because the instances are not in a healthy state. What could be the reason for the instances being unhealthy?

Accepted Answer

The health check grace period on the Auto Scaling group is too short.. Option D is correct because if the health check grace period is too short, instances may be marked unhealthy before the deployment scripts complete. Option A is wrong because insufficient IAM permissions would cause a different error (e.g., access denied). Option B is wrong because incorrect ELB configuration would cause load balancer issues, not instance health. Option C is wrong because CodeDeploy agent version is unrelated to instance health checks.

Answer

The Elastic Load Balancer is not configured to route traffic to the Auto Scaling group.

Answer

The CodeDeploy agent on the instances is outdated.

Answer

The IAM instance profile does not have permissions to access the S3 bucket where the artifacts are stored.

Question 9

A developer is using AWS CodeBuild to build a Docker image and push it to Amazon ECR. The build fails with a 'no basic auth credentials' error when trying to push the image. Which TWO actions should the developer take to resolve this issue? (Choose two.)

Accepted Answer

Add a pre-build command to run 'aws ecr get-login-password --region | docker login --username AWS --password-stdin .dkr.ecr..amazonaws.com'.. Options B and D are correct because the build project needs to have an IAM role with permissions to push to ECR, and the pre-build phase should include the 'aws ecr get-login-password' command to authenticate. Option A is wrong because AWS CLI is already installed in CodeBuild. Option C is wrong because Docker is already available. Option E is wrong because ECR access is via IAM, not SSH keys.

Answer

Install the AWS CLI in the buildspec.yml file.

Answer

Install Docker in the buildspec.yml file.

Answer

Configure SSH key-based authentication for ECR.

Question 10

A company uses AWS CodePipeline to automate deployments of a microservices application to Amazon ECS with Fargate. The pipeline has a deploy stage that uses Amazon ECS Blue/Green deployment. The deployment fails intermittently with a 'Task failed to start' error. The developer needs to troubleshoot the issue. Which THREE steps should the developer take? (Choose three.)

Accepted Answer

Check the Amazon ECS service events for the task failure reason.. Options A, C, and E are correct because checking ECS service events (A) gives direct error messages, validating the task definition (C) ensures container configuration is correct, and verifying the IAM role (E) addresses permission issues. Option B is wrong because CodeBuild logs are for build, not deploy. Option D is wrong because CloudFormation events are not relevant for ECS deployments.

Answer

Review the CodeBuild build logs for errors.

Answer

Check the CloudFormation stack events for the ECS service.

Question 11

A developer is setting up a CI/CD pipeline for a Python application using AWS CodeCommit, CodeBuild, and CodeDeploy. The developer wants to trigger the pipeline automatically when code is pushed to the master branch. Which TWO actions are required? (Choose two.)

Accepted Answer

Set the source stage in the pipeline to use AWS CodeCommit as the source provider.. Options A and D are correct because a webhook (or event) from CodeCommit triggers the pipeline, and the source stage must use CodeCommit as the provider. Option B is wrong because CodeDeploy does not trigger the pipeline. Option C is wrong because a schedule is not needed. Option E is wrong because AWS CloudTrail is not required for pipeline triggers.

Answer

Configure CodeDeploy to run after the build stage.

Answer

Create a CloudWatch Events rule to trigger the pipeline on a schedule.

Answer

Enable AWS CloudTrail to log API calls.

Question 12

A developer is troubleshooting a deployment failure in AWS CodePipeline. The deploy stage uses the above IAM policy for the service role. The pipeline fails when trying to update the Elastic Beanstalk environment. What is the most likely cause?

Accepted Answer

The policy restricts the UpdateEnvironment action to a specific environment ARN, but the pipeline is updating a different environment.. Option C is correct because the policy allows 'UpdateEnvironment' only on a specific environment ARN, but the pipeline may be trying to update a different environment (e.g., if the environment name changed). Option A is wrong because 'DeleteEnvironment' is denied but not used. Option B is wrong because 'DescribeEnvironmentResources' is allowed. Option D is wrong because 'DeleteEnvironment' denial does not affect updates.

Answer

The policy does not allow DescribeEnvironmentResources, which is required for the deployment.

Answer

The policy denies all actions on the environment, preventing the update.

Answer

The policy denies DeleteEnvironment, which is required for the update.

Question 13

A developer is creating a deployment pipeline using AWS CodePipeline. The pipeline includes a source stage from Amazon S3, a build stage using AWS CodeBuild, and a deploy stage using AWS CloudFormation. The developer wants to ensure that the pipeline can automatically create the CloudFormation stack if it does not exist. Which action mode should the developer use in the CloudFormation deploy action?

Accepted Answer

CREATE_UPDATE. Option B is correct because the 'CREATE_UPDATE' action mode creates a new stack if it does not exist or updates it if it does. Option A is wrong because 'REPLACE_ON_FAILURE' only replaces a failed stack. Option C is wrong because 'CREATE_ONLY' only creates a stack, not update. Option D is wrong because 'UPDATE_ONLY' only updates an existing stack, fails if not exist.

Answer

UPDATE_ONLY

Answer

REPLACE_ON_FAILURE

Answer

CREATE_ONLY

Question 14

A company uses AWS Elastic Beanstalk to deploy a web application. The developer wants to perform a blue/green deployment to minimize downtime. The developer creates a new environment and deploys the new version. After verifying the new environment is healthy, the developer needs to swap the URLs so that traffic is routed to the new environment. Which AWS Elastic Beanstalk feature should the developer use?

Accepted Answer

Use the 'Swap environment URLs' feature in the Elastic Beanstalk console.. Option C is correct because Elastic Beanstalk's 'Swap environment URLs' feature allows swapping the CNAME records between two environments. Option A is wrong because Route 53 weighted routing is not managed by Elastic Beanstalk. Option B is wrong because the environment URL cannot be changed manually. Option D is wrong because updating DNS manually is not recommended and not a built-in feature.

Answer

Delete the old environment and update the DNS record to point to the new environment.

Answer

Use Amazon Route 53 weighted routing policies to shift traffic.

Answer

Change the environment's CNAME to point to the new environment.

Question 15

A developer is deploying a serverless application using AWS SAM. The developer wants to run integration tests against the deployed API Gateway endpoints before promoting the deployment to production. The developer uses AWS CodePipeline with a canary deployment strategy. How can the developer implement testing in the pipeline?

Accepted Answer

Add a Lambda function as a test action in CodePipeline that runs after the deploy stage and before the final promote.. Option A is correct because CodePipeline can invoke a Lambda function as a test action after the canary deployment. This allows running tests against the canary before full rollout. Option B is wrong because it requires manual step. Option C is wrong because CodeBuild is for build, not test after deployment. Option D is wrong because API Gateway stage variables are not designed for canary testing in this context.

Answer

Use AWS CloudFormation stack outputs to get the endpoint URL and manually test.

Answer

Use API Gateway stage variables to route a percentage of traffic to the new version and monitor.

Answer

Configure CodeBuild to run tests after deployment.