DOP-C02 Practice Test 21 — 15 Questions

Question 1

Refer to the exhibit. A team uses this buildspec.yml in AWS CodeBuild. The build fails because the 'dist' directory does not exist after the build phase. What is the most likely cause?

Accepted Answer

The build command outputs to a 'build' directory, but the artifacts base-directory is set to 'dist'.. Option B is correct. The 'python setup.py build' command typically outputs to a 'build' directory, not 'dist'. The artifacts base-directory should match the actual output directory. Option A is wrong because runtime version is correct. Option C is wrong because requirements.txt is not related to output directory. Option D is wrong because the version field is fine.

Answer

The buildspec version is incorrect.

Answer

The Python runtime version 3.8 is not available in CodeBuild.

Answer

The requirements.txt file is missing from the source code.

Question 2

A CloudFormation stack update failed with the error shown. What is the most likely cause?

Accepted Answer

The AMI ID specified in the template is incorrect or has been deregistered.. Option B is correct. The error message indicates that the AMI ID specified in the resource properties is invalid. This typically happens when the AMI ID does not exist in the region or has been deregistered. The stack update is trying to update the EC2 instance with a new AMI, but the AMI ID is incorrect. Option A is incorrect because the error is about the AMI ID, not the instance type. Option C is incorrect because the error is not about permissions. Option D is incorrect because the error is not about the stack name.

Answer

The instance type t2.micro is not available in the region.

Answer

The IAM role used by CloudFormation lacks ec2:RunInstances permissions.

Answer

The stack name does not match the existing stack.

Question 3

A development team uses AWS CodeCommit for source control and AWS CodePipeline for CI/CD. The pipeline has a source stage that pulls from a CodeCommit repository, a build stage using AWS CodeBuild, and a deploy stage that uses AWS CodeDeploy to deploy to an EC2 Auto Scaling group. The team notices that the pipeline frequently fails at the deploy stage with the error 'The deployment failed because the deployment group's deployment configuration specifies a minimum healthy host count of 1, but 0 healthy hosts are available.' What is the MOST likely cause of this issue?

Accepted Answer

The CodeDeploy agent is not installed or is not running on the EC2 instances.. Option D is correct because if the CodeDeploy agent is not installed or not running on the EC2 instances, the instances will not report as healthy, causing the deployment to fail with the given error. Option A is incorrect because CodeDeploy does not require the instances to be behind a load balancer. Option B is incorrect because CodeCommit permissions do not affect the deploy stage. Option C is incorrect because CodeBuild artifacts not being stored in S3 would cause a build failure, not a deploy failure.

Answer

The IAM role for CodePipeline does not have sufficient permissions to access the CodeCommit repository.

Answer

The build artifacts are not being stored in an S3 bucket.

Answer

The EC2 instances are not registered with a Classic Load Balancer.

Question 4

A company runs a microservices architecture on Amazon ECS with Fargate launch type. Each microservice is deployed using AWS CodePipeline with a source stage from CodeCommit, a build stage in CodeBuild, and a deploy stage that updates the ECS service. The team wants to implement a blue/green deployment strategy to reduce downtime and enable quick rollbacks. Which combination of AWS services and configurations should be used?

Accepted Answer

Use AWS CodeDeploy with a deployment group configured for blue/green deployment, and an Application Load Balancer (ALB) to shift traffic between the blue and green target groups.. Option C is correct because CodeDeploy supports blue/green deployments for ECS with Fargate, using an Application Load Balancer (ALB) to shift traffic. Option A is incorrect because ECS does not support blue/green natively without CodeDeploy. Option B is incorrect because CloudFormation does not provide blue/green traffic shifting for ECS. Option D is incorrect because ECS service auto scaling does not control deployment strategy.

Answer

Use AWS CloudFormation with a 'DeploymentPreference' set to 'BlueGreen' for the ECS service.

Answer

Use the ECS service's built-in rolling update with a 'minimumHealthyPercent' of 100 and 'maximumPercent' of 200.

Answer

Configure the ECS service with an 'AutoScaling' policy that replaces instances gradually.

Question 5

A DevOps engineer is configuring a webhook trigger in AWS CodePipeline to automatically start a pipeline when changes are pushed to a specific branch in a CodeCommit repository. The webhook is created and the trigger is set to the 'main' branch. However, when a developer pushes a commit to the 'main' branch, the pipeline does not start. What is the MOST likely reason?

Accepted Answer

The CloudWatch Events rule that triggers the pipeline on repository changes is not configured.. Option A is correct because CodePipeline webhooks use AWS CloudWatch Events (EventBridge) to detect changes; if the CloudWatch Events rule is missing, the webhook won't trigger. Option B is incorrect because multiple webhooks can exist. Option C is incorrect because webhooks do not require SNS. Option D is incorrect because S3 notifications are for S3 sources, not CodeCommit.

Answer

The webhook is not properly registered with CodeCommit due to a conflict with an existing webhook.

Answer

The CodeCommit repository is set to send events to Amazon S3, which conflicts with the webhook.

Answer

The pipeline requires an Amazon SNS notification to be configured for the trigger to work.

Question 6

A company uses AWS CodeBuild to compile and test Java code. The buildspec.yml file includes a 'pre_build' phase that runs unit tests. The build occasionally fails with the error 'No space left on device.' The build environment is a general1.medium EC2 instance with 160 GB of disk space. What is the MOST effective solution to resolve this issue?

Accepted Answer

Increase the file system size or add commands to clean up temporary files in the buildspec.. Option C is correct because increasing the file system size or cleaning up disk space addresses the 'No space left' error. Option A is incorrect because using a larger instance type may not increase disk space. Option B is incorrect because the error is disk-related, not memory. Option D is incorrect because the error is not related to dependencies not being cached.

Answer

Configure the build to use an Amazon EFS file system to offload data.

Answer

Switch the build environment to a compute type with more memory, such as general1.large.

Answer

Enable the 'cache' feature in CodeBuild to reuse dependencies and reduce disk usage.

Question 7

A company uses AWS CodePipeline to deploy a serverless application using AWS SAM. The pipeline has a source stage from CodeCommit, a build stage that runs 'sam build', and a deploy stage that runs 'sam deploy --no-confirm-changeset'. The deploy stage fails with the error 'The security token included in the request is invalid.' What is the MOST likely cause?

Accepted Answer

The IAM role used by CodeBuild has expired credentials or insufficient permissions to call AWS CloudFormation.. Option B is correct because the '--no-confirm-changeset' flag requires the AWS CLI to make API calls, and if the credentials used by CodeBuild are expired, the error occurs. Option A is incorrect because SAM template syntax errors cause different errors. Option C is incorrect because CloudFormation stack drift does not cause token errors. Option D is incorrect because CodeBuild logs do not affect deployment.

Answer

The CloudFormation stack is in a 'ROLLBACK_COMPLETE' state and cannot be updated.

Answer

The CodeBuild project does not have access to the CodeCommit repository.

Answer

The SAM template is invalid and contains syntax errors.

Question 8

A development team is using AWS CodeCommit as the source for a CI/CD pipeline. They want to automatically trigger a build in AWS CodeBuild whenever a developer pushes changes to any branch in the repository. Which pipeline configuration should be used?

Accepted Answer

Configure a CodeCommit repository trigger to invoke a Lambda function that starts a CodeBuild build. Option B is correct because using a webhook that triggers on all branch pushes is the simplest and most direct way to achieve automatic builds on every push. Option A is wrong because polling is less efficient and introduces latency. Option C is wrong because event rules require event bus setup and are more complex. Option D is wrong because scheduled builds do not respond to pushes.

Answer

Configure CodePipeline to poll the CodeCommit repository every minute

Answer

Use Amazon EventBridge to capture CodeCommit events and start a CodePipeline execution

Answer

Set up a scheduled CodePipeline execution using Amazon CloudWatch Events

Question 9

A DevOps team uses AWS CodePipeline to deploy a static website to an Amazon S3 bucket. The pipeline has a source stage (CodeCommit), a build stage (CodeBuild that runs a build tool), and a deploy stage (S3). After a recent code change, the build stage succeeded but the deploy stage failed with the error: 'Access Denied' when uploading artifacts to the S3 bucket. What should the team do to fix the issue?

Accepted Answer

Add 's3:PutObject' permission to the CodePipeline service role. Option C is correct because the CodePipeline service role needs permissions to put objects into the S3 bucket. The error indicates the role used by CodePipeline lacks s3:PutObject permission. Option A is wrong because the build project role is for build, not deploy. Option B is wrong because the error is about the deploy stage, not the source stage. Option D is wrong because bucket policy is not the typical issue if the role exists.

Answer

Configure the S3 bucket to allow public access

Answer

Add an S3 bucket policy that grants the CodeBuild service role s3:PutObject access

Answer

Verify that the CodeCommit repository has the correct permissions for the pipeline

Question 10

A development team uses AWS CodeStar to set up a continuous delivery pipeline for a web application. The application is deployed to an Elastic Beanstalk environment. After a successful deployment, the team wants to automatically run integration tests against the deployed application. What is the SIMPLEST way to achieve this?

Accepted Answer

Add a test stage in CodePipeline after the deploy stage that uses CodeBuild to run integration tests.. Option D is correct because adding a test stage in CodePipeline after the deploy stage is the simplest approach. Option A is incorrect because manual testing is not automatic. Option B is incorrect because CloudWatch Alarms monitor metrics, not run tests. Option C is incorrect because CodeDeploy is the deployment service, not a test runner.

Answer

Configure the Elastic Beanstalk environment to run integration tests after deployment via a custom platform hook.

Answer

Use Amazon CloudWatch alarms to trigger a Lambda function that runs the tests.

Answer

Add a post-deployment script in the CodeDeploy appspec file to run tests.

Question 11

A company is using AWS X-Ray to trace requests through a microservices application. Some traces are incomplete, showing only the root segment without any subsegments. The application uses the X-Ray SDK for Java. What is the most likely cause?

Accepted Answer

The sampling rate is set to a low value, causing many requests to be dropped.. Option A is correct because if the sampling rate is too low, many requests are not traced, resulting in incomplete traces. Option B is wrong because segment size limits do not cause missing subsegments. Option C is wrong because a missing annotation would not prevent subsegments from appearing. Option D is wrong because the SDK automatically sends traces to the X-Ray daemon.

Answer

The application is missing the x-amzn-trace-id header in incoming requests.

Answer

The segment document size exceeds the maximum allowed size.

Answer

The X-Ray daemon is not running on the EC2 instances.

Question 12

A company uses AWS CodePipeline to deploy a static website to an S3 bucket. The pipeline includes a source stage (S3), a build stage (CodeBuild) that minifies assets, and a deploy stage that copies files to the production S3 bucket. The deploy stage uses 's3 sync' command. After a recent deployment, some users report seeing old content. What is the MOST likely cause?

Accepted Answer

The website is served through Amazon CloudFront, and the CloudFront distribution cache was not invalidated after the deployment.. Option C is correct because S3 does not automatically invalidate CloudFront cache; old cached files are served. Option A is incorrect because 's3 sync' does sync new files. Option B is incorrect because bucket policies don't affect content freshness. Option D is incorrect because CodeBuild would fail if permissions were insufficient.

Answer

The S3 bucket policy blocks public read access, so users get a 403 error.

Answer

The IAM role for CodeBuild does not have permissions to write to the S3 bucket.

Answer

The deploy stage uses 's3 cp' instead of 's3 sync', so new files are not uploaded.

Question 13

A team uses AWS CodePipeline to deploy a containerized application to Amazon ECS. The pipeline uses a source stage from CodeCommit, a build stage that builds a Docker image and pushes it to Amazon ECR, and a deploy stage that updates an ECS service. The team wants to add a manual approval step before the deploy stage to allow QA to verify the image. What is the BEST way to implement this?

Accepted Answer

Add a manual approval stage in CodePipeline between the build and deploy stages, and configure SNS to notify approvers.. Option A is correct because CodePipeline has a built-in approval action that can be added as a stage. Option B is incorrect because SNS does not provide an approval mechanism. Option C is incorrect because Lambda cannot pause the pipeline. Option D is incorrect because CloudWatch Events cannot approve.

Answer

Configure an AWS Lambda function in the pipeline that checks a DynamoDB table for approval status and pauses until approved.

Answer

Use an Amazon SNS topic to send a notification to QA, and have them manually trigger the deploy stage by clicking a link in the email.

Answer

Use Amazon CloudWatch Events to trigger a custom action that waits for an approval signal.

Question 14

A company is using AWS CodeBuild to run builds for a Java application. The build takes a long time because it downloads Maven dependencies every time. The team wants to speed up the build by caching dependencies. Which TWO actions should be taken? (Choose 2)

Accepted Answer

Enable Amazon S3 caching in the CodeBuild project and specify an S3 bucket to store the cache.. Options B and D are correct. Enabling caching in CodeBuild and specifying a cache bucket stores dependencies. Option A is incorrect because caching is not automatic. Option C is incorrect because EFS is not required. Option E is incorrect because local caching is not a feature.

Answer

Use CodeBuild's 'build cache' feature without specifying a bucket; it will automatically cache to a default location.

Answer

Set the cache type to 'Local' in the CodeBuild project configuration.

Answer

Mount an Amazon EFS file system to the build container and configure Maven to use it as a local repository.

Question 15

A company uses AWS CodePipeline with multiple stages: Source (CodeCommit), Build (CodeBuild), Test (CodeBuild), and Deploy (CodeDeploy to EC2). The Test stage runs integration tests that require network access to a private database in a VPC. The CodeBuild project is configured to use a VPC. However, the Test stage fails intermittently with timeout errors. Which TWO actions would MOST likely resolve the issue? (Choose 2)

Accepted Answer

Increase the timeout for the Test stage in the CodeBuild project to accommodate network delays.. Options A and D are correct. Using a NAT gateway ensures outbound internet access if needed, and increasing the timeout prevents premature timeouts. Option B is incorrect because security groups should be permissive within the VPC. Option C is incorrect because Subnet IDs are required for VPC configuration. Option E is incorrect because compute type does not affect network.

Answer

Remove the VPC configuration from the CodeBuild project and use a public subnet instead.

Answer

Use a larger compute type for the CodeBuild project to improve network performance.

Answer

Configure the security group for the CodeBuild project to allow outbound traffic to the database security group on the required port.

DOP-C02 Practice Test 21 — 15 Questions

Exhibit

DOP-C02 Practice Test 21 — 15 Questions

Exhibit