DVA-C02 Deployment Practice Test 7 — 15 Questions

Question 1

A developer attempted to create a CloudFormation stack. The stack creation failed and rolled back. Based on the exhibit, which resource caused the failure?

Accepted Answer

The EC2Instance resource. The exhibit shows that the EC2Instance resource failed to create (state CREATE_FAILED), which caused the WaitCondition to fail (state CREATE_FAILED) as a dependent resource. Therefore, the EC2Instance resource is the root cause of the stack failure and rollback.

Answer

The WaitCondition resource

Answer

The user who requested the rollback

Answer

The stack itself

Question 2

The developer tries to deploy this stack but receives an error: 'CREATE_FAILED: LambdaExecutionRole - Resource creation cancelled'. The Lambda function is not created. What is the most likely cause?

Accepted Answer

The IAM user does not have permission to create IAM roles. The error 'Resource creation cancelled' indicates that the CloudFormation stack creation was aborted because a resource (LambdaExecutionRole) failed to be created. The most likely cause is that the IAM user or role used to deploy the stack does not have the iam:CreateRole permission. This is a common issue when deploying IAM roles via CloudFormation, as the deploying identity needs sufficient IAM privileges. Other options are less likely: an S3 bucket in a different region (A) would cause a bucket access error, not a role creation failure; an incorrect handler name (B) would cause a Lambda invocation error after role creation; missing Lambda code (C) would affect the Lambda function after the role is created. Therefore, the correct answer is D.

Answer

The S3 bucket is in a different region

Answer

The Lambda function handler name is incorrect

Answer

The Lambda function code is missing from the S3 bucket

Question 3

A developer is deploying a Lambda function using CloudFormation. The function code is stored in an S3 bucket. The developer wants to automatically update the function when the S3 object is updated. Which approach should be used?

Accepted Answer

Use the 'S3ObjectVersion' property in the Lambda function's 'Code' property to reference the specific version of the S3 object.. When a Lambda function's code is stored in S3 and referenced in CloudFormation, specifying the S3ObjectVersion property pins the deployment to a specific object version. When the S3 object is updated (a new version is created), the developer updates the S3ObjectVersion in the template, which changes the resource property and triggers CloudFormation to update the Lambda function with the new code. This is the supported mechanism for version-aware code updates.

Answer

Set the 'DeletionPolicy' attribute to 'Retain' on the Lambda function resource.

Answer

Use an S3 event notification to invoke a Lambda function that updates the CloudFormation stack.

Answer

Set a 'DependsOn' attribute on the Lambda function to the S3 bucket.

Question 4

A developer is using AWS CodeBuild to compile a Java application. The build project is configured with a 'buildspec.yml' file. The developer notices that the build succeeds on the local machine but fails in CodeBuild with the error: 'Error: Could not find or load main class com.example.App'. What is the most likely cause?

Accepted Answer

The build environment does not have Java installed.. When AWS CodeBuild is configured to run inside a private VPC subnet (for example, to access internal resources like RDS), it loses default internet access. Because Maven needs to download dependencies from external repositories (like Maven Central) during the build phase, the build will fail with dependency resolution errors unless the private subnet has a route to a NAT Gateway or NAT Instance with internet access.

Answer

The 'build' phase command is incorrect, causing compilation to fail.

Answer

The buildspec.yml file does not include an 'install' phase to download dependencies.

Answer

The 'artifacts' section in buildspec.yml is misconfigured.

Question 5

A company is using AWS CloudFormation to manage infrastructure. The developer wants to update a stack that includes an RDS database. The update requires replacing the database with a new one. Which stack update policy should the developer use to minimize downtime?

Accepted Answer

Use a 'Replacement with snapshot' update policy.. 'Replacement with snapshot', is correct because it creates a new RDS DB instance from a snapshot of the existing one, then swaps the database endpoint, minimizing downtime. Option A is incorrect because 'Rolling update' is used for EC2 Auto Scaling groups, not RDS. Option C is incorrect because 'Delete and recreate' would cause significant downtime and potential data loss. Option D is incorrect because 'Update with snapshot' is not a valid CloudFormation update policy for RDS.

Answer

Use a 'Rolling update' update policy.

Answer

Use a 'Delete and recreate' update policy.

Answer

Use an 'Update with snapshot' update policy.

Question 6

A developer is using AWS CloudFormation to deploy a stack that includes an Amazon ECS service. The developer wants to ensure that the ECS service is updated with a new task definition before the old tasks are stopped. Which deployment controller type should be used?

Accepted Answer

ECS (rolling update).. The ECS deployment controller with a rolling update (often called 'ECS' or 'rolling update') is the native deployment mechanism for ECS services. It works by gradually replacing old tasks with new ones: the service scheduler starts new tasks with the updated task definition, waits for them to become healthy, and then stops the old tasks. This ensures that the service remains available and that the new task definition is in place before old tasks are terminated. This matches the requirement exactly.

Answer

Recreate.

Answer

CodeDeploy (blue/green).

Answer

External.

Question 7

A development team uses AWS CodeCommit for source control and AWS CodePipeline for CI/CD. The team wants to automatically deploy changes to a staging environment when a pull request is merged into the main branch. Which CodePipeline trigger configuration should be used?

Accepted Answer

Create an Amazon CloudWatch Events rule that triggers the pipeline on a 'Reference Created' event for the main branch.. A CloudWatch Events rule for a 'Reference Created' event on the main branch triggers when a pull request is merged (a new commit is pushed to main). Option A is wrong because periodic polling is inefficient and not best practice for event-driven CI/CD. Option B is wrong because a webhook on push events triggers on every push, not specifically on pull request merge. Option D is wrong because starting the pipeline on pull request creation would trigger before the merge, not when changes are merged.

Answer

Set up a periodic polling schedule in CodePipeline to check for changes.

Answer

Configure a webhook in CodeCommit to trigger the pipeline on push events.

Answer

Use the 'Start pipeline execution' API in CodePipeline on pull request creation.

Question 8

A developer is using AWS CloudFormation to deploy a stack that includes an Amazon RDS DB instance. The stack creation fails because the DB instance creation takes longer than the CloudFormation timeout. Which THREE steps can the developer take to resolve this issue? (Choose THREE.)

Accepted Answer

Increase the CloudFormation stack creation timeout.. Increasing the stack creation timeout (D) directly gives the DB instance more time. Using a custom resource with Lambda to create the DB instance asynchronously (E) decouples the DB creation from the stack timeout. A wait condition would add further delay and does not solve the underlying timeout. Therefore, only two options are correct, making the question inconsistent with its 'choose three' instruction.

Answer

Use a CloudFormation wait condition or a waiter to pause the stack creation until the DB instance is ready.

Answer

Change the DB instance class to a smaller size.

Answer

Reduce the stack creation timeout to trigger a rollback faster.

Question 9

A developer is deploying an application using AWS Elastic Beanstalk. The developer wants to ensure that the application is highly available and can recover from an AZ failure. Which TWO configurations should be applied? (Choose TWO.)

Accepted Answer

Configure the environment to use multiple Availability Zones.. Option A is correct because configuring the Elastic Beanstalk environment to use multiple Availability Zones spreads the EC2 instances across distinct AZs, so the loss of one AZ does not take down the whole application. Option D is correct because attaching an Elastic Load Balancer distributes incoming traffic across the instances in those multiple AZs and performs health checks, routing requests away from unhealthy instances in a failed AZ. Together, multi-AZ instance placement plus an ELB provide the redundancy and traffic failover needed for high availability. Option B is incorrect because a larger EC2 instance type only increases capacity, not redundancy across AZs. Option C is incorrect because Multi-AZ for Amazon RDS protects the database layer only and does not by itself make the Elastic Beanstalk application tier highly available. Option E is incorrect because a single EC2 instance is a single point of failure and cannot survive an AZ outage.

Answer

Select a larger EC2 instance type.

Answer

Enable Multi-AZ for the application's Amazon RDS database.

Answer

Use a single EC2 instance for simplicity.

Question 10

The exhibit shows the output of the describe-stack-events command for a CloudFormation stack that failed to create. What is the most likely cause of the failure?

Accepted Answer

The Lambda function handler 'index.handler' does not exist in the deployment package.. The stack event shows CREATE_FAILED for the Lambda function resource, which is likely due to the handler 'index.handler' not being present in the deployment package. Option B is incorrect because the S3 bucket and key are correctly specified. Option C is incorrect because there is no evidence of a code size limit issue; the error points to a missing handler. Option D is incorrect because no permission errors are shown; the failure is related to the function code, not the IAM role.

Answer

The S3 bucket 'my-bucket' does not contain the object 'my-function.zip'.

Answer

The Lambda function code exceeds the maximum allowed size.

Answer

The IAM role associated with the Lambda function lacks necessary permissions.

Question 11

A developer wants to deploy a serverless application using AWS SAM. The application consists of multiple Lambda functions, an API Gateway REST API, and a DynamoDB table. The developer wants to define the application in a single template and deploy it using the AWS CLI. Which command should the developer use to package and deploy the application?

Accepted Answer

sam package and sam deploy. 'sam package' uploads the application artifacts to S3 and generates a packaged CloudFormation template, and 'sam deploy' deploys that template. Option A is incorrect because 'sam build' only builds the application locally and does not package it for deployment; while 'sam deploy' can be used after 'sam build' for local testing, the standard deployment flow for SAM is 'sam package' followed by 'sam deploy'. Option C is incorrect because although 'aws cloudformation package' and 'aws cloudformation deploy' can perform similar tasks, the question specifically asks for AWS SAM commands; SAM provides a simpler, purpose-built workflow. Option D is incorrect because 'aws s3 cp' only uploads files to S3, and 'aws cloudformation create-stack' does not handle the packaging of Lambda functions and other managed resources, leading to incomplete deployments.

Answer

sam build and sam deploy

Answer

aws cloudformation package and aws cloudformation deploy

Answer

aws s3 cp and aws cloudformation create-stack

Question 12

A developer is setting up a CI/CD pipeline for a Python application using AWS CodeCommit, CodeBuild, and CodeDeploy. The developer wants to trigger the pipeline automatically when code is pushed to the master branch. Which TWO actions are required? (Choose two.)

Accepted Answer

Set the source stage in the pipeline to use AWS CodeCommit as the source provider.. Option B is correct because the pipeline's source stage must be configured with AWS CodeCommit as the source provider so that CodePipeline can detect and pull the repository's master branch changes as the pipeline's input artifact. Option D is correct because a CodeCommit repository webhook (or an equivalent EventBridge/CloudWatch Events rule for repository state changes) is what automatically starts the pipeline when code is pushed to the master branch, enabling the push-based trigger the developer wants. Option A is not required because CodeDeploy's deployment stage ordering is defined by the pipeline's stage structure, not by a separate CodeDeploy configuration action. Option C is wrong because a scheduled CloudWatch Events rule triggers on a time schedule, not on code pushes, so it would not meet the requirement. Option E is unnecessary because CloudTrail only logs API activity for auditing and does not trigger the pipeline.

Answer

Configure CodeDeploy to run after the build stage.

Answer

Create a CloudWatch Events rule to trigger the pipeline on a schedule.

Answer

Enable AWS CloudTrail to log API calls.

Question 13

A developer is deploying a serverless application using AWS SAM. The developer wants to run integration tests against the deployed API Gateway endpoints before promoting the deployment to production. The developer uses AWS CodePipeline with a canary deployment strategy. How can the developer implement testing in the pipeline?

Accepted Answer

Add a Lambda function as a test action in CodePipeline that runs after the deploy stage and before the final promote.. CodePipeline allows a Lambda function to be invoked as a custom test action after the deploy stage. This enables running integration tests against the canary deployment (the new version with a small percentage of traffic) before the promote stage fully shifts traffic to the new version. Option A is wrong because manual testing defeats automation and is not part of the pipeline. Option C is wrong because API Gateway stage variables are used to route traffic based on stage, not for canary testing within a pipeline; the canary deployment is managed by CodePipeline's canary strategy. Option D is wrong because CodeBuild is primarily for build and unit tests, not for post-deployment integration testing in a canary scenario.

Answer

Use AWS CloudFormation stack outputs to get the endpoint URL and manually test.

Answer

Use API Gateway stage variables to route a percentage of traffic to the new version and monitor.

Answer

Configure CodeBuild to run tests after deployment.

Question 14

A developer is setting up an IAM role for a CI/CD pipeline. The above IAM policy is attached to the role. The pipeline needs to deploy a revision to an Amazon S3 bucket and then trigger a CodeDeploy deployment. The deployment fails with an access denied error. What is the missing permission?

Accepted Answer

codedeploy:RegisterApplicationRevision. Before CodeDeploy can deploy a revision stored in S3, the pipeline must register that revision with CodeDeploy via codedeploy:RegisterApplicationRevision. Without this permission, the deployment fails with AccessDenied even though S3 read permissions are present, because CodeDeploy never learns about the new revision.

Answer

codedeploy:UpdateDeploymentGroup

Answer

s3:ListBucket

Answer

s3:GetObjectVersion

Question 15

A company uses AWS OpsWorks for Chef Automate to manage their infrastructure. A developer needs to deploy a new application version to a stack of EC2 instances. The developer wants to minimize downtime and ensure that the deployment is rolled back automatically if any instance fails. Which deployment strategy should the developer use?

Accepted Answer

Rolling deployment with rollback on error. AWS OpsWorks for Chef Automate supports rolling deployments with a rollback-on-error feature. This strategy updates instances in batches, and if any batch fails (e.g., Chef client run errors or application health checks), the deployment automatically rolls back the failed batch to the previous state, minimizing downtime by keeping remaining batches running.

Answer

Canary deployment

Answer

In-place deployment with a single batch

Answer

Blue/green deployment