DOP-C02 SDLC Automation Practice Test 17 — 15 Questions

Question 1

A company uses AWS CodeCommit for source control. Developers frequently push large binary files, causing the repository size to exceed the recommended limit. What is the most efficient way to manage this situation?

Accepted Answer

Use Git LFS (Large File Storage) and configure it to store binaries in S3.. Option A is best practice: use Git LFS to handle large files without bloating the repository. Option B is temporary. Option C is not efficient. Option D is not a good practice.

Answer

Increase the repository size limit in CodeCommit settings.

Answer

Periodically run a script to remove large files from the commit history.

Answer

Use S3 directly for storing binaries and reference them in code.

Question 2

A team uses AWS CodePipeline with a multi-branch strategy. They want to run different build projects based on the branch name: 'main' triggers a production build, 'develop' triggers a staging build, and feature branches trigger a test build. Which CodePipeline feature should they use?

Accepted Answer

Configure the source action with a branch filter using a regular expression.. Option A is correct: use a filter with branch conditions. Option B is not a pipeline feature. Option C is manual. Option D is not a feature.

Answer

Use AWS Lambda to dynamically change the pipeline definition.

Answer

Create separate pipelines for each branch and use tags.

Answer

Use a manual approval action to select the branch.

Question 3

An organization uses AWS Elastic Beanstalk to deploy a web application. The deployment fails with a '502 Bad Gateway' error after the environment update. The health status shows 'Severe'. Investigation reveals that the application is not binding to the port that the nginx proxy expects. What is the most efficient way to diagnose and resolve this issue?

Accepted Answer

Check the application's listening port by viewing the nginx configuration files in the platform hooks and ensure the app listens on the expected port (e.g., 8080).. Option A is correct: the nginx proxy expects the app to listen on port 8080 (or as defined in the proxy configuration). Option B is a workaround. Option C might not show the port. Option D is not specific.

Answer

Rebuild the environment with a larger instance type to handle the load.

Answer

Use the Elastic Beanstalk console to update the environment's software configuration.

Answer

Review the application logs in CloudWatch Logs for error messages.

Question 4

A company uses AWS Systems Manager Automation to patch EC2 instances. The automation document 'AWS-RunPatchBaseline' runs successfully but some instances are not patched because they are not managed by Systems Manager. What is the most likely reason?

Accepted Answer

The instances do not have the AWS Systems Manager Agent (SSM Agent) installed and the required IAM role attached.. Option B is correct: SSM Agent must be installed and the instance must have an IAM role that allows Systems Manager actions. Option A is not a requirement. Option C is not required. Option D is incorrect.

Answer

The instances are running Windows Server 2012 or older.

Answer

The instances are in a VPC without internet access.

Answer

The automation document is not compatible with the instance's operating system.

Question 5

A DevOps team uses AWS CodeDeploy to deploy an application to an Auto Scaling group. The deployment fails with a 'HealthCheckFailed' error. The application is running, but the health check endpoint returns HTTP 500. What should the team do to resolve this issue?

Accepted Answer

Modify the application to handle the health check endpoint correctly and return HTTP 200.. Option A is correct: fix the application to return a healthy status. Option B ignores the issue. Option C does not fix the application. Option D is not possible.

Answer

Change the deployment configuration to use AllAtOnce to avoid health checks.

Answer

Increase the health check grace period in the Auto Scaling group.

Answer

Disable the health check in the CodeDeploy deployment configuration.

Question 6

A company uses AWS CloudFormation to create a stack with a Lambda function that uses a VPC. The stack creation fails with 'CREATE_FAILED: The provided execution role does not have permissions to call ec2:CreateNetworkInterface on the resource'. What is the likely cause?

Accepted Answer

The Lambda execution role is missing the ec2:CreateNetworkInterface permission.. Option C is correct: Lambda needs permissions to create elastic network interfaces. Option A is not related. Option B is not required. Option D is not the cause.

Answer

The VPC does not have a subnet with internet access.

Answer

The CloudFormation template does not specify a security group.

Answer

The Lambda function code has a syntax error.

Question 7

A development team uses AWS CodeBuild to compile a Java application. The build fails during the 'Install' phase with an error: 'Error: JAVA_HOME is not set'. How should the team fix this?

Accepted Answer

Set the environment variable 'JAVA_HOME' in the buildspec file's 'env' section.. Option B is correct: each build phase uses a separate shell, so environment variables set in one phase do not persist. Option A is wrong because it's not needed. Option C is not the cause. Option D is not necessary.

Answer

Use the managed image 'aws/codebuild/standard:5.0' which has Java pre-installed.

Answer

Install Java in the pre_build phase using a command.

Answer

Use a custom Docker image that has Java pre-installed.

Question 8

A company uses AWS CodePipeline to automate deployments. The pipeline consists of Source, Build, and Deploy stages. The Build stage uses CodeBuild, and the Deploy stage uses CodeDeploy. Recently, the pipeline failed at the Deploy stage with an error: 'The deployment group does not exist'. Which TWO actions should the team take to resolve this issue?

Accepted Answer

Verify that the deployment group name specified in the pipeline's Deploy stage matches the actual deployment group name in CodeDeploy.. Options A and D are correct: the deployment group name must match exactly, and the pipeline must be in the same region. Option B is not required. Option C is not a common cause. Option E is not related.

Answer

Increase the timeout for the Deploy stage to allow more time for the deployment group to be created.

Answer

Ensure that the CodeBuild project has permissions to access the CodeDeploy deployment group.

Answer

Check that the CodeDeploy application exists in the same AWS account as the pipeline.

Question 9

A company uses AWS CloudFormation with nested stacks to manage a microservices application. The root stack creates a VPC, and nested stacks create ECS services. A developer updates the root stack, but the update fails with 'UPDATE_ROLLBACK_IN_PROGRESS'. The rollback also fails. Which THREE steps should the team take to recover the stack? (Choose THREE.)

Accepted Answer

Use the 'ContinueUpdateRollback' operation from the AWS CLI or console.. Options A, C, and D are correct: continue rollback on failure, reset failed status, and delete nested stacks. Option B is not valid. Option E is not relevant.

Answer

Set the stack policy to allow all updates and retry the update.

Answer

Use the 'SignalResource' action to send a success signal to the failed resource if it is a custom resource.

Answer

Manually delete the failed nested stack from the AWS CloudFormation console.

Question 10

A DevOps team uses AWS OpsWorks for Chef Automate to manage configuration. They want to ensure that all EC2 instances automatically register with OpsWorks and are assigned to the correct layer. Which THREE steps are required? (Choose THREE.)

Accepted Answer

Install the AWS OpsWorks agent on each EC2 instance.. Options A, C, and E are correct: install agent, register stack, assign layer. Option B is not required. Option D is for other services.

Answer

Configure the instance's user data to run the Chef client.

Answer

Attach an IAM role with the AmazonEC2RoleforOpsWorks policy to the EC2 instance.

Question 11

The exhibit shows the output of the AWS CLI command 'batch-get-builds' for a CodeBuild build. The build failed. What is the most likely cause of the failure?

Accepted Answer

The S3 bucket 'my-bucket' does not exist or the build project lacks permissions to access it.. Option D is correct: the DOWNLOAD_SOURCE phase failed, indicating the source could not be downloaded from S3. Option A is not supported by the output. Option B is not the failed phase. Option C is not indicated.

Answer

The source code has compilation errors.

Answer

The buildspec file is malformed.

Answer

The build project does not have sufficient memory.

Question 12

The exhibit shows an IAM policy attached to an AWS Lambda execution role. The Lambda function is triggered by an S3 event and writes to the same bucket. However, the function fails with a permission error when trying to write to 'my-bucket'. What is the likely issue?

Accepted Answer

The policy grants s3:PutObject only on objects (my-bucket/*), but the action also requires permission on the bucket (my-bucket) for certain operations like s3:PutObject with ACLs.. Option A is correct: the policy is missing s3:PutObject on the bucket itself (not just the objects). Option B is not relevant. Option C is not relevant. Option D is not relevant.

Answer

The S3 bucket is in a different region than the Lambda function.

Answer

The policy is missing the 'lambda:InvokeFunction' permission on the function itself.

Answer

The Lambda function does not have an S3 trigger configured.

Question 13

The exhibit shows a CloudFormation stack event. The stack creation failed with 'Resource creation cancelled'. What is the most likely reason for this cancellation?

Accepted Answer

The stack was manually cancelled by a user or an automation script.. Option B is correct: 'Resource creation cancelled' indicates a user-initiated cancellation or stack policy override. Option A would show a different error. Option C is not typical. Option D is not related.

Answer

The stack template contains a syntax error.

Answer

The IAM role used for stack operations lacks permissions.

Answer

A stack creation timeout was reached.

Question 14

A DevOps team is using AWS CodePipeline to automate build, test, and deploy phases. The team notices that the pipeline is failing intermittently during the deploy stage due to a timeout when updating an Auto Scaling group. The deploy stage uses CodeDeploy with a blue/green deployment configuration. What is the MOST likely cause and solution?

Accepted Answer

The CodeDeploy deployment group has a low original revision timeout. Increase the original revision timeout.. Option C is correct because the blue/green deployment typically waits for instances to be healthy before completing. Option A is wrong because CodeBuild timeout affects build stage, not deploy. Option B is wrong because CodeCommit is the source stage. Option D is wrong because CloudFormation is not used in this deploy stage.

Answer

The CloudFormation stack update is failing. Update the stack with a longer timeout.

Answer

The CodeCommit repository has too many branches. Clean up unused branches.

Answer

The CodeBuild project has a low build timeout. Increase the build timeout.

Question 15

An organization uses AWS CodeBuild to compile a Java application. The buildspec.yml includes a pre_build phase that runs unit tests. Recently, the build started failing with 'NoClassDefFoundError' for certain test dependencies, even though the pom.xml includes them. The build environment uses an Amazon Linux 2 Docker image. What is the MOST likely cause?

Accepted Answer

The CodeBuild project has a cache that is corrupted or out of sync. Clear the build cache.. Option A is correct because CodeBuild caches dependency directories to speed up builds; a corrupted or stale cache can cause missing classes. Option B is wrong because CodeCommit pull frequency is unrelated. Option C is wrong because S3 bucket permissions affect artifact upload, not dependency resolution. Option D is wrong because Amazon Linux 2 includes Maven, but that would not cause a single class missing.

Answer

The S3 bucket for artifacts has incorrect permissions. Update the bucket policy.

Answer

The CodeCommit repository is not pulling the latest code. Add a webhook to trigger builds on push.

Answer

The build environment does not have Maven installed. Install Maven in the buildspec.