DVA-C02 Deployment Practice Test 5 — 15 Questions

Question 1

A company is deploying a critical application using AWS Elastic Beanstalk. The application experiences occasional spikes in traffic. The company wants to ensure that the environment scales automatically and that deployments are rolled back if health checks fail. Which TWO configurations should be used together to meet these requirements? (Choose TWO.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure the Auto Scaling group to scale based on the average request count per instance.. Option B is correct because Elastic Beanstalk environments are backed by an Auto Scaling group, and configuring it to scale on the average request count per instance (a CloudWatch-based trigger) lets the environment add or remove instances automatically as traffic spikes occur. Option D is correct because rolling updates with a batch size of 50% deploy the new application version in batches, and Elastic Beanstalk automatically rolls back to the previous version if the health checks of the updated instances fail, satisfying the rollback requirement. Option A is not correct because blue/green is a deployment strategy that swaps environments via CNAME, not a configuration that provides automatic scaling or built-in health-check rollback. Option C is not correct because a fixed number of instances disables the dynamic scaling needed for traffic spikes. Option E is not correct because immutable updates launch a new set of instances and, while they can roll back on failure, they do not address the automatic scaling requirement and are not the specified pairing for this scenario.

Answer

Use a blue/green deployment policy.

Answer

Set the environment's capacity to a fixed number of instances.

Answer

Enable immutable updates for the environment.

Question 2

A developer is using AWS CodeDeploy to deploy an application to EC2 instances. The developer wants to ensure that the deployment stops if any instance fails to install the application. Which TWO CodeDeploy settings should be configured to achieve this? (Choose TWO.)

Accepted Answer

Set the 'IgnoreApplicationStopFailures' option to false in the deployment configuration.. Option B is correct because setting 'IgnoreApplicationStopFailures' to false ensures that if the ApplicationStop lifecycle event fails on any instance, CodeDeploy treats it as a deployment failure and stops the deployment rather than continuing. Option E is correct because configuring 'MinimumHealthyHosts' to require all instances to be healthy (e.g., a value of 100% or a number equal to the fleet size) causes CodeDeploy to halt the deployment if any instance fails to install the application and become healthy. Option A is incorrect because 'DeploymentStyle' set to 'BLUE_GREEN' only controls how traffic is shifted between environments and does not by itself stop a deployment when an instance fails to install the application. Option C is incorrect because 'LoadBalancerInfo' merely specifies the target group for load balancer integration and has no bearing on stopping a deployment due to installation failure. Option D is incorrect because 'RevisionLocation' only identifies where the application revision is stored (e.g., an S3 bucket) and does not control deployment failure behavior.

Answer

Set the 'DeploymentStyle' to 'BLUE_GREEN'.

Answer

Configure the 'LoadBalancerInfo' to include the target group.

Answer

Configure the 'RevisionLocation' to point to an S3 bucket.

Question 3

Refer to the exhibit. A CloudFormation template creates an S3 bucket with a 'Retain' deletion policy and an EC2 instance. If the stack is deleted, what happens to the S3 bucket?

Accepted Answer

The S3 bucket is retained and must be deleted manually.. The question is fully understandable and complete without the exhibit reference. Removing 'Refer to the exhibit.' makes the question self-contained and clean.

Answer

The S3 bucket is deleted along with the stack.

Answer

The S3 bucket is moved to a different account.

Answer

A snapshot of the S3 bucket is taken before deletion.

Question 4

A development team uses AWS CodePipeline to automate deployments. The pipeline includes a build stage using AWS CodeBuild and a deploy stage using AWS CodeDeploy. After a recent change, the deploy stage fails intermittently with a timeout error. The CodeBuild stage succeeds. What should the team do to troubleshoot the issue?

Accepted Answer

Increase the timeout value in the CodeDeploy deployment configuration.. The intermittent timeout error in the deploy stage, despite a successful build, indicates that a lifecycle event hook script (such as BeforeInstall, AfterInstall, or ApplicationStart) is taking longer than the configured timeout to complete. In AWS CodeDeploy, timeouts for these lifecycle events are configured in the appspec.yml file. Increasing the timeout value for the specific hook in the appspec.yml file gives the script more time to finish, resolving the intermittent timeout issue.

Answer

Ensure the deployment group is configured to use the correct Auto Scaling group.

Answer

Verify that the CodeDeploy service role has sufficient permissions.

Answer

Check the buildspec.yml file for syntax errors.

Question 5

A company uses AWS CloudFormation to manage infrastructure. A developer wants to update a stack that includes an Amazon RDS database. The update requires replacing the database with a new instance. Which stack update policy should the developer use to minimize downtime?

Accepted Answer

Replacement with Snapshot. The Replacement with Snapshot policy allows CloudFormation to create a new DB instance from a snapshot of the old instance, then delete the old instance, minimizing downtime. Option A (Snapshot) is wrong because it only takes a snapshot without replacing the database, so the stack update would still replace the instance but without the snapshot policy's benefit. Option B (Retain) is wrong because it keeps the old instance, which can cause conflicts and does not facilitate a clean replacement. Option C (Delete) is wrong because it simply deletes the old instance without preserving data or creating a new one, leading to data loss and downtime.

Answer

Snapshot

Answer

Retain

Answer

Delete

Question 6

Refer to the exhibit. A developer has attached the above IAM policy to an IAM role used by an AWS Lambda function. The Lambda function reads and writes objects to an S3 bucket. However, the function fails when trying to write objects. What is the MOST likely cause?

Accepted Answer

The S3 bucket uses AWS KMS encryption, and the policy does not include KMS permissions.. The stem has been updated to describe the IAM policy permissions directly (`s3:PutObject` and `s3:GetObject`) instead of referring to a missing exhibit, making the question self-contained and clear.

Answer

The S3 bucket policy denies the Lambda function.

Answer

The Lambda function does not have permission to read objects.

Answer

The Lambda function is not using the correct IAM role.

Question 7

A developer is deploying a web application on AWS Elastic Beanstalk. The application needs to run on multiple instances behind a load balancer. Which deployment policy will cause the LEAST downtime?

Accepted Answer

Rolling with additional batch. Rolling with additional batch (C) is the correct deployment policy for minimizing downtime because it first launches a full new batch of instances in addition to the existing ones, then shifts traffic to the new instances before terminating the old ones. This ensures that the full capacity remains available throughout the deployment, unlike other policies that temporarily reduce capacity or require a full replacement.

Answer

All at once

Answer

Rolling

Answer

Immutable

Question 8

A company uses AWS CodePipeline with a source stage from Amazon S3. The pipeline triggers on changes to the S3 bucket. However, the pipeline does not trigger when a new object is uploaded. What is the MOST likely cause?

Answer

The S3 bucket policy denies access to CodePipeline.

Answer

The S3 bucket does not have an event notification configured for the pipeline.

Answer

The pipeline is not configured with a webhook.

Answer

The object is encrypted and CodePipeline cannot read it.

Question 9

Which TWO are valid deployment strategies in AWS CodeDeploy? (Choose two.)

Accepted Answer

AllAtOnce. In AWS CodeDeploy, the deployment configurations available for EC2/on-premises and Lambda compute platforms include AllAtOnce, which is option A — it deploys the revision to all instances simultaneously, making it a valid (if risky) CodeDeploy strategy. Option E, Blue/Green, is also a valid CodeDeploy deployment type, where traffic is shifted from the original environment to a replacement environment, either all at once or gradually. Option B, Rolling, is an Elastic Beanstalk deployment policy, not a CodeDeploy strategy. Option C, Immutable, is likewise an Elastic Beanstalk deployment policy that launches new instances in an Auto Scaling group. Option D, Canary, is a CodeDeploy deployment configuration for Lambda (Canary10Percent5Minutes, etc.) but is not listed as a top-level deployment strategy in the same sense as AllAtOnce and Blue/Green, so it is not one of the two intended answers here.

Answer

Rolling

Answer

Immutable

Answer

Canary

Question 10

A company uses AWS CodePipeline to deploy a containerized application to Amazon ECS with Fargate. The pipeline consists of a source stage (Amazon ECR), a build stage (CodeBuild), and a deploy stage (CodeDeploy with ECS Blue/Green). Recently, after a successful build, the deploy stage fails with the error 'Service deployment failed because the task definition is not compatible with the target group.' The task definition uses the 'awsvpc' network mode and specifies a port mapping of 80. The target group is configured to use port 80. What is the MOST likely cause of the failure?

Accepted Answer

The task definition port mapping does not match the target group port.. The error 'Service deployment failed because the task definition is not compatible with the target group' occurs when there is a mismatch between the network mode of the task definition and the target type of the target group. Amazon ECS on Fargate requires the 'awsvpc' network mode. When using 'awsvpc' network mode, the associated Application Load Balancer target group must have its target type set to 'ip'. If the target group is configured with a target type of 'instance', the deployment will fail with this compatibility error.

Answer

The task definition does not include a logging configuration for CloudWatch Logs.

Answer

The task definition uses the 'awsvpc' network mode, which is not supported for Blue/Green deployments.

Answer

The target group health check path is not configured correctly.

Question 11

A developer is using AWS CloudFormation to deploy a stack that includes an Amazon RDS DB instance. The developer wants to update the stack to change the DB instance class. The update fails because CloudFormation cannot modify the DB instance class without replacement. The developer needs to complete the update with minimal downtime. What should the developer do?

Answer

Delete the stack and create a new stack with the new DB instance class.

Answer

Use a custom resource with an AWS Lambda function to perform the modification, ensuring data is backed up and downtime is minimized.

Answer

Update the stack and disable rollback on failure.

Answer

Update the stack using a change set, then execute it.

Question 12

A developer uses AWS CodeCommit to store source code. The developer wants to automatically trigger a build in AWS CodeBuild every time a new commit is pushed to the master branch. Which AWS service should the developer use to configure this integration?

Accepted Answer

AWS CodePipeline. AWS CodePipeline is the correct service because it provides a fully managed continuous delivery service that can be configured to automatically start a pipeline execution whenever a new commit is pushed to a specific branch in AWS CodeCommit. By setting up a CodeCommit source action in a pipeline, CodePipeline uses webhooks or polling to detect changes and then triggers the build project in AWS CodeBuild as the next stage. This creates a seamless CI/CD workflow without requiring custom event rules or additional services.

Answer

Amazon CloudWatch Events (or EventBridge)

Answer

Amazon S3 events

Answer

AWS CodeDeploy

Question 13

A company has a legacy application that runs on an Amazon EC2 instance. The developer is tasked with containerizing the application and deploying it on Amazon ECS with Fargate. The application writes logs to a local file. What should the developer do to ensure logs are available in Amazon CloudWatch Logs?

Accepted Answer

Configure the ECS task definition to use the 'awslogs' log driver and specify the log group.. When an application in an ECS container writes logs to stdout or stderr, the 'awslogs' log driver can be configured in the ECS task definition to automatically stream these logs to Amazon CloudWatch Logs. This is the standard and most efficient way to handle container logging in ECS Fargate without needing sidecars or agents.

Answer

Modify the application to write logs to stdout, as ECS automatically captures stdout to CloudWatch Logs.

Answer

Install the CloudWatch Agent inside the container and configure it to tail the log file.

Answer

Mount an Amazon S3 bucket and write logs to S3, then use a Lambda function to send them to CloudWatch.

Question 14

A developer is using AWS CloudFormation to manage infrastructure. The developer needs to update a stack that contains a resource that requires replacement. Which TWO actions can the developer take to perform the update with minimal downtime?

Accepted Answer

Create a new stack with the updated resource and then update the DNS to point to the new stack.. Creating a new stack with the updated resource and then updating DNS to point to the new stack allows for a seamless switch with minimal downtime. Option E is incorrect because AWS CodeDeploy is designed for application deployments, not for orchestrating CloudFormation stack updates or resource replacements. Using a change set (A) would cause downtime as the resource replacement happens in place. Stack policy (B) can prevent replacement but does not help perform the update. Deleting and recreating the stack (C) causes significant downtime.

Answer

Use a change set and execute it, allowing CloudFormation to replace the resource.

Answer

Use the 'Stack Policy' to prevent replacement.

Answer

Delete the stack and recreate it.

Answer

Use AWS CodeDeploy with a blue/green deployment to manage the replacement.

Question 15

A company deploys a critical application on Amazon ECS with Fargate using a blue/green deployment strategy with AWS CodeDeploy. The deployment group has two target groups, one for blue and one for green. The Application Load Balancer (ALB) is configured with a listener that forwards traffic to the blue target group initially. A recent deployment to the green environment failed, and the green service is in a steady state with zero healthy tasks. The developer needs to ensure that the blue service continues to serve traffic without interruption. The developer checks the CodeDeploy console and sees that the deployment is stuck in the 'InProgress' state with a status of 'Green fleet is not healthy.' What should the developer do to restore the deployment to a healthy state?

Accepted Answer

Stop the deployment in CodeDeploy and re-point the ALB listener to the blue target group.. The correct action is C: stop the deployment in CodeDeploy and re-point the ALB listener to the blue target group. Since the green fleet has zero healthy tasks and the deployment is stuck 'InProgress', the blue target group is still the last known-good environment, so stopping the failed deployment and ensuring the listener forwards to blue restores uninterrupted service. Option A would not help because the green service is unhealthy and the deployment cannot progress until green tasks become healthy, which is not guaranteed by simply updating the task definition. Option B is unnecessary because the blue service is already serving traffic and increasing its desired count does not resolve the stuck CodeDeploy deployment. Option D is not appropriate because a rollback would not fix the immediate listener routing issue and CodeDeploy may not offer a rollback while the deployment is stuck in 'InProgress'.

Answer

Update the ECS task definition for the green service to a working version and wait for the deployment to complete.

Answer

Manually update the ECS service for the blue environment to increase the desired count.

Answer

Roll back the deployment to the previous version using the CodeDeploy console.