DOP-C02 SDLC Automation Practice Test 18 — 15 Questions

Question 1

A company uses AWS CloudFormation to manage infrastructure. The DevOps team wants to deploy a stack across multiple accounts using AWS CodePipeline. Which approach is BEST for automating cross-account deployments?

Accepted Answer

Use a single pipeline in the management account with IAM roles that assume cross-account roles.. Option D is correct because cross-account CodePipeline uses a KMS key and IAM roles in each account. Option A is wrong because cross-account roles are needed. Option B is wrong because CloudFormation StackSets are for multiple regions/accounts but not directly integrated with CodePipeline. Option C is wrong because separate pipelines in each account increase management overhead.

Answer

Use AWS CloudFormation StackSets to deploy the stack across accounts.

Answer

Create a separate pipeline in each account and trigger them manually.

Answer

Use an S3 bucket with cross-account access and Lambda to invoke CloudFormation.

Question 2

A company uses AWS CodeCommit for source control. Developers report that their local branches are out of sync with the remote repository, and they are unable to push changes because of 'non-fast-forward' errors. What should the developers do to fix this?

Accepted Answer

Pull the latest changes using 'git pull --rebase' and then push.. Option B is correct because 'non-fast-forward' means the remote branch has commits not in the local branch; pull rebase integrates remote changes. Option A is wrong because force push overwrites remote commits. Option C is wrong because deleting remote branch is not needed. Option D is wrong because creating a new branch does not resolve the conflict.

Answer

Create a new branch and push that instead.

Answer

Use 'git push --force' to overwrite the remote branch.

Answer

Delete the remote branch and push again.

Question 3

A DevOps team is implementing a CI/CD pipeline using AWS CodePipeline. The pipeline has a Source stage using CodeCommit, a Build stage using CodeBuild, and a Deploy stage using CloudFormation. The team wants to add manual approval before the Deploy stage for production deployments. How should this be configured?

Accepted Answer

Add an Approval stage to the pipeline with SNS topic for notification.. Option A is correct because CodePipeline has a built-in Approval action type. Option B is wrong because SNS notifications do not block the pipeline. Option C is wrong because Lambda cannot pause the pipeline. Option D is wrong because a separate approval pipeline adds complexity.

Answer

Configure a CloudWatch event to send an email on build success.

Answer

Use a Lambda function to approve based on build status.

Answer

Create a separate pipeline for production and trigger it manually.

Question 4

A company uses AWS Elastic Beanstalk to deploy a web application. The deployment fails with a '502 Bad Gateway' error. The developer checks the logs and sees that the application is running but returns errors. The environment uses a load balancer. What is the MOST likely cause?

Accepted Answer

The application is not binding to the correct port or is crashing under load.. Option C is correct because 502 errors from a load balancer often indicate that the target is not responding or is unhealthy. Option A is wrong because 502 is not related to missing files. Option B is wrong because security group misconfiguration would cause 503 or timeout. Option D is wrong because environment variables cause application errors, not necessarily 502.

Answer

The application source bundle is missing a required file.

Answer

The security group of the environment does not allow inbound HTTP traffic.

Answer

The environment's environment variables are misconfigured.

Question 5

A DevOps engineer needs to automate the creation of a new AWS CodeCommit repository when a new project starts. The engineer wants to use infrastructure as code. Which service should be used?

Accepted Answer

AWS CloudFormation. Option A is correct because AWS CloudFormation can manage CodeCommit repositories as resources. Option B is wrong because CodePipeline orchestrates CI/CD, not resource creation. Option C is wrong because CodeStar is a project management tool, not infrastructure as code. Option D is wrong because CodeBuild is a build service.

Answer

AWS CodePipeline

Answer

AWS CodeStar

Answer

AWS CodeBuild

Question 6

An organization uses AWS CodeDeploy for automated deployments to EC2 instances. The deployment is failing with the error 'The overall deployment failed because too many individual instances failed deployment, too few healthy instances are available for deployment, or some instances in your deployment group are experiencing problems.' The deployment group has a minimum healthy hosts setting of 75%. The application has 4 instances. What is the MOST likely issue?

Accepted Answer

The deployment failed on 2 instances, leaving only 2 healthy.. Option B is correct because if the deployment fails on 2 instances, only 2 remain healthy (50%), which is below 75%. Option A is wrong because CodeDeploy agent not installed would cause failure on all instances. Option C is wrong because a missing script would cause failure on all. Option D is wrong because incorrect IAM role would cause failure on all.

Answer

The AppSpec file references a script that does not exist.

Answer

The IAM instance profile does not have sufficient permissions.

Answer

The CodeDeploy agent is not installed on any of the instances.

Question 7

A company uses AWS CodePipeline with a cross-account action where the source account (Account A) triggers a deploy action in a target account (Account B). The pipeline is failing with an 'Access Denied' error when trying to assume the deployment role. What is the MOST likely cause?

Accepted Answer

The KMS key used to encrypt artifacts is not shared with Account B.. Option C is correct because cross-account pipelines require the source account to have a KMS key to encrypt artifacts and the target account to have permissions to decrypt. Option A is wrong because the error is 'Access Denied', not missing role. Option B is wrong because S3 bucket policy might be needed but often not the primary cause. Option D is wrong because CloudFormation role is for stack operations, not for the pipeline artifact decryption.

Answer

The S3 artifact bucket in Account A does not have a bucket policy allowing Account B.

Answer

The deployment role in Account B does not exist.

Answer

The CloudFormation service role in Account B is missing.

Question 8

Which THREE actions should a DevOps team take to ensure a CI/CD pipeline using AWS CodePipeline is secure? (Choose three.)

Accepted Answer

Use AWS KMS to encrypt artifacts in the pipeline.. Options A, C, and E are correct. Option A prevents unauthorized changes. Option C encrypts artifacts. Option E ensures secure artifact storage. Option B is wrong because CloudTrail is for auditing, not pipeline security directly. Option D is wrong because MFA is for user access, not pipeline actions.

Answer

Require multi-factor authentication (MFA) for pipeline executions.

Answer

Enable AWS CloudTrail to log pipeline executions.

Question 9

Which TWO options are valid ways to trigger an AWS CodePipeline execution automatically? (Choose two.)

Accepted Answer

Changes to a CodeCommit repository.. Options B and D are correct. Option A is wrong because manual approval does not trigger execution; it pauses. Option C is wrong because CodeDeploy is a deployment service, not a trigger. Option E is wrong because CloudWatch Logs do not trigger pipelines.

Answer

A scheduled CloudWatch Logs metric filter.

Answer

Completion of a CodeDeploy deployment.

Answer

Manual approval action in the pipeline.

Question 10

Which THREE factors should be considered when designing a deployment strategy using AWS CodeDeploy to minimize downtime during updates? (Choose three.)

Accepted Answer

Configure a load balancer to deregister instances before deployment.. Options A, B, and D are correct. Option A ensures service continuity. Option B leverages rolling updates. Option D allows testing before full rollout. Option C is wrong because smaller batch size increases deployment time, not reduces downtime. Option E is wrong because same instance type is irrelevant.

Answer

Deploy to all instances simultaneously to reduce total time.

Answer

Use the same instance type for all instances.

Question 11

Refer to the exhibit. The above IAM policy is attached to an IAM role used by a CI/CD pipeline. Which action is this policy allowing?

Accepted Answer

Start and view builds for the specified CodeBuild project.. Option A is correct because the policy allows StartBuild and BatchGetBuilds on a specific CodeBuild project. Option B is wrong because CreateProject is not allowed. Option C is wrong because the resource is a project, not a build. Option D is wrong because UpdateProject is not allowed.

Answer

Start builds for any CodeBuild project in the account.

Answer

View details of any build in the account.

Answer

Create and manage CodeBuild projects.

Question 12

Refer to the exhibit. A DevOps engineer ran the above AWS CLI command after a CloudFormation stack update. What does the status 'ROLLBACK_COMPLETE' indicate?

Accepted Answer

The stack update failed and CloudFormation reverted to the previous stack.. Option D is correct because ROLLBACK_COMPLETE means the update failed and CloudForm reverted to the previous state. Option A is wrong because the stack was not created successfully; it rolled back. Option B is wrong because ROLLBACK_COMPLETE is not a delete status. Option C is wrong because it is not an update in progress.

Answer

The stack update is in progress.

Answer

The stack was deleted successfully.

Answer

The stack was created successfully.

Question 13

Refer to the exhibit. The above buildspec.yml is used in AWS CodeBuild. The build is failing during the 'build' phase with a 'FileNotFoundError: setup.py' error. What is the MOST likely cause?

Accepted Answer

The source code does not contain a setup.py file in the root directory.. Option B is correct because the pre_build phase runs flake8 on src/ directory, but the build command expects setup.py in the root; setup.py might be in src/ or missing. Option A is wrong because Python 3.8 is supported. Option C is wrong because unit tests are in post_build, not causing build failure. Option D is wrong because artifacts are only collected after build.

Answer

The unit tests in the post_build phase are failing.

Answer

The Python version 3.8 is not supported by CodeBuild.

Answer

The artifacts configuration discarding paths is causing the error.

Question 14

A development team uses AWS CodeCommit as a Git repository. They want to automatically trigger a build in AWS CodeBuild whenever a pull request is created or updated. Which AWS service should be used to detect the pull request events and start the build?

Accepted Answer

Amazon EventBridge. Option A is correct because Amazon EventBridge can monitor AWS CodeCommit events (like pull request creation) and trigger an AWS CodeBuild build using a rule. Option B is incorrect because CodePipeline is a continuous delivery service, not an event detection service. Option C is incorrect because CloudWatch Logs does not detect events; it stores logs. Option D is incorrect because SNS is a notification service, not a trigger for CodeBuild.

Answer

Amazon Simple Notification Service (SNS)

Answer

AWS CodePipeline

Answer

Amazon CloudWatch Logs

Question 15

A DevOps engineer is designing a CI/CD pipeline for a microservices application using AWS CodePipeline. Each microservice has its own CodeCommit repository. The engineer wants to run unit tests in parallel for all services when any repository receives a push, then run integration tests only after all unit tests pass. Which pipeline structure should the engineer use?

Accepted Answer

Create a single pipeline with a parallel action for unit tests, then a serial stage for integration tests. Option C is correct because having a single pipeline with a parallel action for unit tests and then a serial integration test stage is the simplest and most straightforward design. Option A is incorrect because it suggests separate pipelines, which would require complex coordination. Option B is incorrect because a serial stage for unit tests would increase overall time. Option D is incorrect because CodeBuild does not have built-in fan-out/fan-in; the pipeline provides that.

Answer

Create a single pipeline with a serial stage for unit tests, then integration tests

Answer

Create one pipeline per microservice, each triggering integration tests via SNS

Answer

Use AWS CodeBuild batch builds with a fan-out/fan-in pattern