DOP-C02 Practice Test 27 — 15 Questions

Question 1

A team uses AWS CodePipeline with a multi-branch strategy. They want to run different build projects based on the branch name: 'main' triggers a production build, 'develop' triggers a staging build, and feature branches trigger a test build. Which CodePipeline feature should they use?

Accepted Answer

Configure the source action with a branch filter using a regular expression.. Option A is correct: use a filter with branch conditions. Option B is not a pipeline feature. Option C is manual. Option D is not a feature.

Answer

Use AWS Lambda to dynamically change the pipeline definition.

Answer

Create separate pipelines for each branch and use tags.

Answer

Use a manual approval action to select the branch.

Question 2

A development team uses AWS CodeBuild to compile a Java application. The build fails during the 'Install' phase with an error: 'Error: JAVA_HOME is not set'. How should the team fix this?

Accepted Answer

Set the environment variable 'JAVA_HOME' in the buildspec file's 'env' section.. Option B is correct: each build phase uses a separate shell, so environment variables set in one phase do not persist. Option A is wrong because it's not needed. Option C is not the cause. Option D is not necessary.

Answer

Use the managed image 'aws/codebuild/standard:5.0' which has Java pre-installed.

Answer

Install Java in the pre_build phase using a command.

Answer

Use a custom Docker image that has Java pre-installed.

Question 3

A company uses AWS CodeCommit for source control. Developers report that their local branches are out of sync with the remote repository, and they are unable to push changes because of 'non-fast-forward' errors. What should the developers do to fix this?

Accepted Answer

Pull the latest changes using 'git pull --rebase' and then push.. Option B is correct because 'non-fast-forward' means the remote branch has commits not in the local branch; pull rebase integrates remote changes. Option A is wrong because force push overwrites remote commits. Option C is wrong because deleting remote branch is not needed. Option D is wrong because creating a new branch does not resolve the conflict.

Answer

Create a new branch and push that instead.

Answer

Use 'git push --force' to overwrite the remote branch.

Answer

Delete the remote branch and push again.

Question 4

A DevOps team uses AWS CodeDeploy to deploy an application to an Auto Scaling group. The deployment fails with a 'HealthCheckFailed' error. The application is running, but the health check endpoint returns HTTP 500. What should the team do to resolve this issue?

Accepted Answer

Modify the application to handle the health check endpoint correctly and return HTTP 200.. Option A is correct: fix the application to return a healthy status. Option B ignores the issue. Option C does not fix the application. Option D is not possible.

Answer

Change the deployment configuration to use AllAtOnce to avoid health checks.

Answer

Increase the health check grace period in the Auto Scaling group.

Answer

Disable the health check in the CodeDeploy deployment configuration.

Question 5

A company uses AWS CodePipeline with an Amazon S3 source action. The pipeline deploys to an Amazon ECS Fargate service. The engineer notices that the pipeline does not automatically start when a new object is uploaded to the S3 bucket. The S3 bucket versioning is enabled. What is the most likely cause?

Accepted Answer

The S3 bucket does not have event notifications configured for the pipeline. Option A is correct because CodePipeline S3 source action requires change detection via Amazon CloudWatch Events or S3 Event Notifications. If the S3 bucket does not have event notifications configured, the pipeline will not trigger automatically. Option B is incorrect because versioning is not required for triggering. Option C is incorrect because the pipeline can still start manually. Option D is incorrect because Fargate does not affect pipeline triggering.

Answer

The pipeline has manual approval required before the source stage

Answer

S3 versioning is not enabled on the bucket

Answer

The ECS service is not configured for blue/green deployments

Question 6

A company uses AWS CloudFormation with nested stacks to manage a microservices application. The root stack creates a VPC, and nested stacks create ECS services. A developer updates the root stack, but the update fails with 'UPDATE_ROLLBACK_IN_PROGRESS'. The rollback also fails. Which THREE steps should the team take to recover the stack? (Choose THREE.)

Accepted Answer

Use the 'ContinueUpdateRollback' operation from the AWS CLI or console.. Options A, C, and D are correct: continue rollback on failure, reset failed status, and delete nested stacks. Option B is not valid. Option E is not relevant.

Answer

Set the stack policy to allow all updates and retry the update.

Answer

Use the 'SignalResource' action to send a success signal to the failed resource if it is a custom resource.

Answer

Manually delete the failed nested stack from the AWS CloudFormation console.

Question 7

Which THREE actions should a DevOps team take to ensure a CI/CD pipeline using AWS CodePipeline is secure? (Choose three.)

Accepted Answer

Use AWS KMS to encrypt artifacts in the pipeline.. Options A, C, and E are correct. Option A prevents unauthorized changes. Option C encrypts artifacts. Option E ensures secure artifact storage. Option B is wrong because CloudTrail is for auditing, not pipeline security directly. Option D is wrong because MFA is for user access, not pipeline actions.

Answer

Require multi-factor authentication (MFA) for pipeline executions.

Answer

Enable AWS CloudTrail to log pipeline executions.

Question 8

An organization uses AWS CodeBuild to compile a Java application. The buildspec.yml includes a pre_build phase that runs unit tests. Recently, the build started failing with 'NoClassDefFoundError' for certain test dependencies, even though the pom.xml includes them. The build environment uses an Amazon Linux 2 Docker image. What is the MOST likely cause?

Accepted Answer

The CodeBuild project has a cache that is corrupted or out of sync. Clear the build cache.. Option A is correct because CodeBuild caches dependency directories to speed up builds; a corrupted or stale cache can cause missing classes. Option B is wrong because CodeCommit pull frequency is unrelated. Option C is wrong because S3 bucket permissions affect artifact upload, not dependency resolution. Option D is wrong because Amazon Linux 2 includes Maven, but that would not cause a single class missing.

Answer

The S3 bucket for artifacts has incorrect permissions. Update the bucket policy.

Answer

The CodeCommit repository is not pulling the latest code. Add a webhook to trigger builds on push.

Answer

The build environment does not have Maven installed. Install Maven in the buildspec.

Question 9

The exhibit shows the output of the AWS CLI command 'batch-get-builds' for a CodeBuild build. The build failed. What is the most likely cause of the failure?

Accepted Answer

The S3 bucket 'my-bucket' does not exist or the build project lacks permissions to access it.. Option D is correct: the DOWNLOAD_SOURCE phase failed, indicating the source could not be downloaded from S3. Option A is not supported by the output. Option B is not the failed phase. Option C is not indicated.

Answer

The source code has compilation errors.

Answer

The buildspec file is malformed.

Answer

The build project does not have sufficient memory.

Question 10

A DevOps team is using AWS CodePipeline to automate build, test, and deploy phases. The team notices that the pipeline is failing intermittently during the deploy stage due to a timeout when updating an Auto Scaling group. The deploy stage uses CodeDeploy with a blue/green deployment configuration. What is the MOST likely cause and solution?

Accepted Answer

The CodeDeploy deployment group has a low original revision timeout. Increase the original revision timeout.. Option C is correct because the blue/green deployment typically waits for instances to be healthy before completing. Option A is wrong because CodeBuild timeout affects build stage, not deploy. Option B is wrong because CodeCommit is the source stage. Option D is wrong because CloudFormation is not used in this deploy stage.

Answer

The CloudFormation stack update is failing. Update the stack with a longer timeout.

Answer

The CodeCommit repository has too many branches. Clean up unused branches.

Answer

The CodeBuild project has a low build timeout. Increase the build timeout.

Question 11

A company uses AWS Elastic Beanstalk to deploy a web application. The deployment fails with a '502 Bad Gateway' error. The developer checks the logs and sees that the application is running but returns errors. The environment uses a load balancer. What is the MOST likely cause?

Accepted Answer

The application is not binding to the correct port or is crashing under load.. Option C is correct because 502 errors from a load balancer often indicate that the target is not responding or is unhealthy. Option A is wrong because 502 is not related to missing files. Option B is wrong because security group misconfiguration would cause 503 or timeout. Option D is wrong because environment variables cause application errors, not necessarily 502.

Answer

The application source bundle is missing a required file.

Answer

The security group of the environment does not allow inbound HTTP traffic.

Answer

The environment's environment variables are misconfigured.

Question 12

Which THREE factors should be considered when designing a deployment strategy using AWS CodeDeploy to minimize downtime during updates? (Choose three.)

Accepted Answer

Configure a load balancer to deregister instances before deployment.. Options A, B, and D are correct. Option A ensures service continuity. Option B leverages rolling updates. Option D allows testing before full rollout. Option C is wrong because smaller batch size increases deployment time, not reduces downtime. Option E is wrong because same instance type is irrelevant.

Answer

Deploy to all instances simultaneously to reduce total time.

Answer

Use the same instance type for all instances.

Question 13

A company uses AWS CloudFormation to manage infrastructure. The DevOps team wants to deploy a stack across multiple accounts using AWS CodePipeline. Which approach is BEST for automating cross-account deployments?

Accepted Answer

Use a single pipeline in the management account with IAM roles that assume cross-account roles.. Option D is correct because cross-account CodePipeline uses a KMS key and IAM roles in each account. Option A is wrong because cross-account roles are needed. Option B is wrong because CloudFormation StackSets are for multiple regions/accounts but not directly integrated with CodePipeline. Option C is wrong because separate pipelines in each account increase management overhead.

Answer

Use AWS CloudFormation StackSets to deploy the stack across accounts.

Answer

Create a separate pipeline in each account and trigger them manually.

Answer

Use an S3 bucket with cross-account access and Lambda to invoke CloudFormation.

Question 14

A DevOps engineer needs to automate the creation of a new AWS CodeCommit repository when a new project starts. The engineer wants to use infrastructure as code. Which service should be used?

Accepted Answer

AWS CloudFormation. Option A is correct because AWS CloudFormation can manage CodeCommit repositories as resources. Option B is wrong because CodePipeline orchestrates CI/CD, not resource creation. Option C is wrong because CodeStar is a project management tool, not infrastructure as code. Option D is wrong because CodeBuild is a build service.

Answer

AWS CodePipeline

Answer

AWS CodeStar

Answer

AWS CodeBuild

Question 15

An organization uses AWS CodeDeploy for automated deployments to EC2 instances. The deployment is failing with the error 'The overall deployment failed because too many individual instances failed deployment, too few healthy instances are available for deployment, or some instances in your deployment group are experiencing problems.' The deployment group has a minimum healthy hosts setting of 75%. The application has 4 instances. What is the MOST likely issue?

Accepted Answer

The deployment failed on 2 instances, leaving only 2 healthy.. Option B is correct because if the deployment fails on 2 instances, only 2 remain healthy (50%), which is below 75%. Option A is wrong because CodeDeploy agent not installed would cause failure on all instances. Option C is wrong because a missing script would cause failure on all. Option D is wrong because incorrect IAM role would cause failure on all.

Answer

The AppSpec file references a script that does not exist.

Answer

The IAM instance profile does not have sufficient permissions.

Answer

The CodeDeploy agent is not installed on any of the instances.