DVA-C02 Deployment Practice Test 7 — 15 Questions

Question 1

A development team uses AWS CodeDeploy to deploy a serverless application. The deployment fails with the error: 'The deployment failed because the deployment group did not contain any instances.' The deployment group is configured with an Amazon ECS service and uses the Blue/Green deployment type. What is the MOST likely cause?

Accepted Answer

The deployment group does not have a configured ECS service to deploy to.. The error 'The deployment failed because the deployment group did not contain any instances' indicates that CodeDeploy cannot find a target resource to deploy to. Since the deployment group is configured for an Amazon ECS service with Blue/Green deployment, the most likely cause is that the deployment group does not have an ECS service specified. Without a configured ECS service, CodeDeploy has no target to route traffic to or replace during the deployment, resulting in this error.

Answer

The AppSpec file is incorrectly formatted and does not specify the task definition.

Answer

The deployment group's traffic routing configuration is set to 'AllAtOnce' causing immediate failure.

Answer

The CodeDeploy service role does not have permissions to describe ECS clusters.

Question 2

A company uses AWS Elastic Beanstalk to deploy a PHP application. The application requires write access to the /tmp directory on the EC2 instances. The deployment uses a custom platform. After a recent deployment, the application fails to write to /tmp. The operations team verifies that the instance security group and NACLs allow all outbound traffic. What is the MOST likely cause?

Accepted Answer

The custom platform has a read-only root filesystem.. Option B is correct: Elastic Beanstalk uses instance profiles; if the profile lacks permissions to write to /tmp (though /tmp is local filesystem, but if using EFS or similar, it might be an issue; however, /tmp is typically writable by default. But the question implies a permissions issue: the instance profile might not have permissions to mount or access certain resources. Actually, /tmp is local, so permissions are OS-level. The likely cause is that the custom platform has read-only root filesystem or the application user does not have write permission. Option B (instance profile) is plausible if /tmp is mounted from an external source. But a better answer: Option C (read-only root filesystem) is a common Elastic Beanstalk custom platform issue. However, standard Elastic Beanstalk environments have writable /tmp. Given the custom platform, the most likely is that the platform configuration sets root filesystem as read-only. So Option C is correct.

Answer

The application is running as an unprivileged user without write access to /tmp.

Answer

The security group is blocking outbound traffic to the S3 bucket.

Answer

The instance profile does not have permissions to write to the S3 bucket.

Question 3

A company uses AWS CloudFormation to manage infrastructure. The development team wants to deploy a new version of a Lambda function without downtime. The function is part of a stack. Which action should the team take?

Accepted Answer

Update the CloudFormation stack with the new function code and deploy the stack update.. Option A is correct: CloudFormation supports stack updates; updating the Lambda function resource in the template and performing a stack update will replace the function with zero downtime if the function is behind an alias. Option B (create new stack) leaves old stack. Option C (change set) is just a review. Option D (manual update) bypasses CloudFormation.

Answer

Create a change set and execute it after the current stack is deleted.

Answer

Manually update the Lambda function code in the console and then update the stack.

Answer

Create a new CloudFormation stack for the new function and delete the old stack.

Question 4

A DevOps engineer is troubleshooting a failed AWS CodeBuild build. The build project uses a custom Docker image stored in Amazon ECR. The build logs show: 'Error: Cannot pull Docker image: repository does not exist or may require 'docker login'.' The engineer has verified that the ECR repository exists and the IAM role used by CodeBuild has the 'ecr:GetDownloadUrlForLayer', 'ecr:BatchGetImage', and 'ecr:GetAuthorizationToken' permissions. What is the MOST likely cause?

Accepted Answer

The image tag specified in the buildspec does not exist in the ECR repository.. Option B is correct: The image tag or digest in the buildspec might be incorrect or not exist in the repository. Option A (VPC) would cause network timeout, not repository does not exist error. Option C (cross-account) would need different permissions. Option D (image name) is plausible but the error explicitly says 'repository does not exist', indicating issue with repository name or tag.

Answer

The ECR repository is in a different AWS account and the IAM role does not have cross-account trust.

Answer

The CodeBuild project's environment image override is set to the wrong image name.

Answer

The CodeBuild project is configured with a VPC that does not have a NAT gateway.

Question 5

A company is using AWS CodePipeline with a multi-branch strategy. The pipeline includes a source stage from AWS CodeCommit, a build stage using AWS CodeBuild, and a deploy stage using AWS CodeDeploy. The team wants to automatically deploy changes only when a pull request is merged to the 'main' branch. Which configuration should be used?

Accepted Answer

Configure a CodeCommit trigger to start the pipeline on push events to the 'main' branch.. Option D is correct: CodePipeline should use a webhook trigger with an event filter for push events to the 'main' branch. Option A (all branches) would deploy every push. Option B (manual approval) defeats automation. Option C (scheduled) is not event-driven.

Answer

Create a manual approval step before deployment and require a pull request merge as a trigger.

Answer

Use a scheduled trigger to run the pipeline every hour and check for changes.

Answer

Configure the source stage to use the 'main' branch and enable periodic polling.

Question 6

An application deployed on AWS Lambda needs access to an Amazon RDS database. The Lambda function is in a VPC with a public subnet. The RDS instance is in a private subnet. The function can connect to the database but experiences frequent timeouts. What is the MOST likely cause?

Accepted Answer

The Lambda function's security group does not allow outbound traffic to the RDS security group.. Option C is correct: Lambda functions in a VPC need a NAT gateway to access the internet, but for RDS in private subnet, they need a VPC endpoint or the Lambda function must be in the same VPC with proper routing. Timeouts often occur if the Lambda function does not have a route to the RDS subnet (e.g., missing route table entry or security group issue). Option A (memory) would not cause connection timeouts. Option B (timeout) is set but not the cause. Option D (IAM) would cause access denied, not timeout.

Answer

The Lambda function timeout is set too low for the database queries.

Answer

The IAM role for the Lambda function does not have the 'rds:Connect' permission.

Answer

The Lambda function does not have enough memory allocated.

Question 7

A company uses AWS OpsWorks for configuration management. They want to migrate to AWS Systems Manager for patching and automation. They have a fleet of EC2 instances running Amazon Linux 2. Which Systems Manager capability should they use to automate patching?

Accepted Answer

Patch Manager. Option A is correct: Systems Manager Patch Manager is designed for patching. Option B (Run Command) can run scripts but not schedule patching natively. Option C (State Manager) can enforce state but not specifically patching. Option D (Maintenance Windows) is a scheduling mechanism, but used with Patch Manager.

Answer

State Manager

Answer

Run Command

Answer

Maintenance Windows

Question 8

A company is deploying a Node.js application on AWS Elastic Beanstalk. The application uses environment variables for configuration. The development team wants to ensure that the environment variables are not exposed in the source code or in the deployment logs. Which TWO actions should the team take? (Choose TWO.)

Accepted Answer

Store sensitive environment variables in AWS Systems Manager Parameter Store and retrieve them at runtime.. Options A and D are correct: Using AWS Systems Manager Parameter Store or Secrets Manager to store environment variables and retrieving them at runtime prevents exposure. Option B (environment properties) stores them in plaintext in the environment configuration. Option C (logging) is not relevant. Option E (environment variables in source) is bad practice.

Answer

Enable detailed logging for the Elastic Beanstalk environment and filter out sensitive data.

Answer

Set environment variables using Elastic Beanstalk environment properties in the console.

Answer

Embed the environment variables in the application package as a .env file.

Question 9

A company is using AWS CloudFormation to deploy a stack with a Lambda function and an API Gateway REST API. The deployment must be updated without downtime. The current stack has a Lambda function with an alias 'prod'. Which THREE steps should the developer take to achieve a zero-downtime deployment? (Choose THREE.)

Accepted Answer

Create a new Lambda function version and assign it to a new alias 'blue'.. Options A, C, and E are correct: Using a second alias for the new version, updating the API Gateway stage to point to the new alias, and then switching traffic gradually. Option B (changing alias directly) causes downtime. Option D (deleting old version) is not part of update.

Answer

Update the existing 'prod' alias to point to the new function version.

Answer

Delete the old Lambda function version after the update.

Question 10

A company uses AWS CodeBuild to compile and test a Java application. The build process takes a long time because dependencies are downloaded every time. Which TWO actions can reduce build time? (Choose TWO.)

Accepted Answer

Enable local caching in the CodeBuild project to reuse dependency files between builds.. Options A and D are correct: Caching dependencies in a local cache or in S3 reduces download time. Option B (increase compute) does not reduce dependency download. Option C (parallel builds) is for multiple builds. Option E (change runtime) is not relevant.

Answer

Increase the compute type of the build environment to have more CPU and memory.

Answer

Change the build runtime to a language that compiles faster.

Answer

Configure the build project to run builds in parallel.

Question 11

A developer is deploying a new version of a Lambda function using the AWS CLI. Which command should the developer use to update the function code?

Accepted Answer

aws lambda update-function-code. The correct answer is B. The update-function-code command updates the code of a Lambda function. Option A (update-function-configuration) updates configuration settings only. Option C (create-function) is for creating a new function, not updating. Option D (invoke) is for invoking the function.

Answer

aws lambda update-function-configuration

Answer

aws lambda invoke

Answer

aws lambda create-function

Question 12

A company uses AWS CodeDeploy to deploy a web application to an Auto Scaling group. The deployment fails with a 'ScriptMissing' error. What is the most likely cause?

Accepted Answer

The lifecycle event hook script referenced in appspec.yml is not present.. The correct answer is D. CodeDeploy requires a scripts directory with lifecycle event hooks. If the appspec.yml references a script that is missing, the deployment fails with ScriptMissing. Option A is incorrect because CodeDeploy does not require a buildspec.yml. Option B is incorrect because the deployment group can be for an ASG. Option C is incorrect because the revision must be in a bucket in the same region.

Answer

The deployment group is not configured for an Auto Scaling group.

Answer

The buildspec.yml file is missing from the application root.

Answer

The application revision is not stored in an S3 bucket.

Question 13

A development team uses AWS Elastic Beanstalk for a Node.js application. They want to deploy a new version with zero downtime. Which deployment policy should they choose?

Accepted Answer

Immutable. The correct answer is C. Immutable deployment launches new instances in a new Auto Scaling group, then swaps the CNAME, ensuring zero downtime. Option A (All at once) causes downtime. Option B (Rolling) has a brief window with old and new versions but may reduce capacity. Option D (Rolling with additional batch) is similar to rolling but adds instances, still not zero downtime.

Answer

All at once

Answer

Rolling

Answer

Rolling with additional batch

Question 14

A company uses AWS CodePipeline to automate releases. The pipeline includes a source stage from CodeCommit, a build stage with CodeBuild, and a deploy stage with CodeDeploy. The build stage fails intermittently due to insufficient memory. What should the developer do to resolve this?

Accepted Answer

Increase the compute type of the CodeBuild project.. The correct answer is D. CodeBuild allows you to increase the compute type to provide more memory. Option A (change buildspec) does not change memory. Option B (change source) is irrelevant. Option C (change deployment config) is for deploy stage.

Answer

Change the deployment configuration to CodeDeploy.Default.AllAtOnce.

Answer

Switch the source to an S3 bucket.

Answer

Modify the buildspec.yml to use less memory.

Question 15

A developer is deploying a serverless application using AWS SAM. The developer runs 'sam deploy' but receives an error that the S3 bucket does not exist. How should the developer fix this?

Accepted Answer

Create an S3 bucket and specify it with --s3-bucket.. The correct answer is B. The --s3-bucket parameter specifies the bucket for artifacts. If it doesn't exist, create it. Option A (sam package) is a step before deploy but does not create the bucket. Option C (sam build) builds locally. Option D (sam publish) is for publishing to Serverless Application Repository.

Answer

Use sam publish to deploy the application.

Answer

Run sam build to generate the bucket.

Answer

Run sam package to create the bucket automatically.