DOP-C02 SDLC Automation Practice Test 22 — 15 Questions

Question 1

A team wants to automate the deployment of a serverless application using AWS SAM. They have a template.yaml file defining Lambda functions, an API Gateway, and a DynamoDB table. Which command should they use to build and deploy the application?

Accepted Answer

sam build && sam deploy. Option A is correct because 'sam build' compiles the application and 'sam deploy' deploys it. Option B is wrong because 'aws cloudformation deploy' does not build the SAM artifacts. Option C is wrong because 'sam package' only packages code; it does not build or deploy. Option D is wrong because 'sam deploy --guided' is interactive and not suitable for automation.

Answer

aws cloudformation deploy --template-file template.yaml

Answer

sam package --output-template-file packaged.yaml

Answer

sam deploy --guided

Question 2

An organization uses AWS CodePipeline with a multi-branch strategy. They want to run unit tests on every push to any branch, but only deploy to production on pushes to the 'main' branch. What is the most efficient way to achieve this?

Accepted Answer

Configure a single pipeline with a source action that triggers on all branches, then use a 'branch' condition on the deployment stage to only proceed if the branch is 'main'.. Option B is correct because using a single pipeline with a branch filter on the source action triggers on all branches, and a separate deployment stage with a condition based on the branch name ensures only main deploys. Option A is wrong because it requires manual pipeline creation per branch. Option C is wrong because it still deploys to all environments. Option D is wrong because it would trigger for main only, missing other branches.

Answer

Use a single pipeline with a source action that triggers on all branches, and deploy to a test environment for all branches, then promote to production manually.

Answer

Create separate pipelines for each branch, each with its own test and deploy stages.

Answer

Use a single pipeline with a source action that only triggers on the 'main' branch, and run tests in a separate system.

Question 3

A company is using AWS CodeDeploy with a blue/green deployment strategy for an Amazon ECS service. After a deployment, the new task set fails health checks, and CodeDeploy automatically rolls back to the original task set. However, the rollback fails because the original task set's desired count is set to 0. What is the most likely cause?

Accepted Answer

The original task set's desired count was set to 0 during the blue/green deployment and the rollback is unable to restore it because the original task definition is no longer available.. Option D is correct because during a blue/green deployment, the original task set's desired count is often scaled down to zero, and rollback tries to restore it but may fail if the original task definition or service configuration is no longer valid. Option A is wrong because CodeDeploy manages ECS service updates, not through CloudFormation. Option B is wrong because the issue is not about deregistering from the target group; it's about scaling. Option C is wrong because health checks are failing on the new task set, not the original.

Answer

The original task set's health checks are failing.

Answer

The original task set's CloudFormation stack was deleted during the deployment.

Answer

The original task set was deregistered from the target group.

Question 4

A DevOps engineer needs to automate the creation of an AWS CodeStar project for a new microservice. The engineer wants to use AWS CloudFormation to define the project and its resources. Which CloudFormation resource should be used?

Accepted Answer

AWS::CodeStar::Project. Option A is correct because AWS::CodeStar::Project is the CloudFormation resource for creating a CodeStar project. Option B is wrong because AWS::ServiceCatalog::CloudFormationProduct is for Service Catalog products. Option C is wrong because AWS::CodePipeline::Pipeline creates a pipeline, not a CodeStar project. Option D is wrong because AWS::CodeBuild::Project creates a build project, not a CodeStar project.

Answer

AWS::ServiceCatalog::CloudFormationProduct

Answer

AWS::CodePipeline::Pipeline

Answer

AWS::CodeBuild::Project

Question 5

A team is using AWS CodeCommit as their version control system. They want to ensure that all commits are signed with a GPG key. What is the simplest way to enforce this?

Accepted Answer

Enable the 'Require signed commits' option in the CodeCommit repository settings.. Option C is correct because CodeCommit supports repository-level policies that can require signed commits. Option A is wrong because IAM policies cannot enforce signed commits at the repository level. Option B is wrong because pre-commit hooks are client-side and can be bypassed. Option D is wrong because CloudTrail logs actions but does not enforce signing.

Answer

Use AWS CloudTrail to monitor unsigned commits and automatically revert them.

Answer

Use a pre-commit hook in the local repository to enforce signing.

Answer

Configure an IAM policy that denies PutFile if the commit is not signed.

Question 6

An organization uses AWS CodePipeline to deploy a web application to Amazon EC2 instances behind an Application Load Balancer. The deployment uses a CodeDeploy action with an in-place deployment configuration. After a recent deployment, some instances are running the old version while others are running the new version. What is the most likely cause?

Accepted Answer

The deployment group was configured with the 'AllAtOnce' deployment configuration, and the deployment failed partway through.. Option A is correct because if the deployment group is set to deploy to all instances at once (AllAtOnce), there is no rolling update, and if the deployment fails partway, some instances may be updated and others not. Option B is wrong because a lifecycle hook would not cause partial deployment; it would pause. Option C is wrong because CodeDeploy does not depend on Auto Scaling for in-place deployments. Option D is wrong because a failed health check would cause the deployment to fail entirely, not partially.

Answer

The deployment group is associated with an Auto Scaling group that launched new instances during the deployment.

Answer

A lifecycle hook is configured to pause the deployment until manual approval.

Answer

The deployment was configured to use a blue/green strategy, but the target group is misconfigured.

Question 7

A development team uses AWS CodeBuild to compile a Java application. The build takes 15 minutes on average, but recently it started taking over 30 minutes. The buildspec.yml file is unchanged. What is the most likely cause?

Accepted Answer

The cache for the build project was cleared, forcing a full dependency download.. Option B is correct because CodeBuild caches dependencies and layers; clearing the cache may cause a full rebuild, increasing time. Option A is wrong because buildspec changes would affect time, but it's unchanged. Option C is wrong because environment type change would require a new build project, not just time increase. Option D is wrong because a smaller instance type would be slower, but that would be a known change.

Answer

The build environment was changed from a Linux to a Windows environment.

Answer

The build project's compute type was downgraded to a smaller instance.

Answer

The buildspec.yml file was updated to include more build commands.

Question 8

Which TWO actions can be used to improve the security of a CI/CD pipeline that uses AWS CodePipeline? (Choose two.)

Accepted Answer

Enable encryption for artifacts stored in the pipeline's S3 bucket.. Options A and D are correct. Enabling artifact encryption and using cross-account actions enhance security. Option B is wrong because using a single IAM role reduces security. Option C is wrong because polling is less secure than event-based triggers. Option E is wrong because storing secrets in plain text is insecure.

Answer

Configure the source action to poll for changes instead of using webhooks.

Answer

Store secrets in the pipeline environment variables in plain text.

Answer

Use a single IAM role for all pipeline actions to simplify permissions.

Question 9

Which THREE considerations are important when designing a CI/CD pipeline for a microservices architecture using AWS CodePipeline? (Choose three.)

Accepted Answer

Include automated integration tests that validate service-to-service interactions.. Options A, C, and E are correct. Independent pipelines, automated testing, and blue/green deployments are key. Option B is wrong because a monolith pipeline contradicts microservices. Option D is wrong because manual gates slow down deployment.

Answer

All microservices should be deployed using a single pipeline to ensure consistency.

Answer

Use manual approval gates at every stage to ensure quality.

Question 10

Which TWO AWS services can be used as source actions in AWS CodePipeline to automatically trigger a pipeline when changes are made? (Choose two.)

Accepted Answer

Amazon S3. Options A and C are correct. CodeCommit and S3 can serve as source actions. Option B is wrong because EC2 is not a source action. Option D is wrong because CloudWatch is a monitoring service, not a source. Option E is wrong because CloudFormation is an infrastructure provisioning service.

Answer

Amazon CloudWatch

Answer

Amazon EC2

Answer

AWS CloudFormation

Question 11

A development team is using AWS CodeCommit to store source code and AWS CodePipeline to automate builds and deployments. The team wants to ensure that builds and tests are triggered only when code is pushed to specific branches, and that manual approval is required before deploying to production. Which CodePipeline configuration should the team implement?

Accepted Answer

Configure the source action with a branch filter for main, and add a manual approval step before the production deployment stage.. Option D is correct because it uses a branch filter in the source action to trigger only on pushes to main, and a manual approval step before the production deployment stage. Options A and B trigger on all branches, and C filters on both source and build instead of just source.

Answer

Configure the source action to trigger on all branches and add a manual approval step before the build stage.

Answer

Configure the source action with a branch filter for main, and add a manual approval step before the build stage.

Answer

Use a branch filter on the build action to run only for the main branch, and add a manual approval step before the deploy stage.

Question 12

A company uses AWS CodeBuild to compile a Java application. The buildspec.yml includes a pre_build phase that runs unit tests and a build phase that packages the application. Recently, builds have been failing intermittently with 'OutOfMemoryError' during the test phase. The build environment is set to 'BUILD_GENERAL1_SMALL'. What is the MOST cost-effective solution?

Accepted Answer

Change the build environment to 'BUILD_GENERAL1_MEDIUM' which has more memory.. Option C is correct because it directly addresses the memory issue by increasing compute resources. Option A may not solve the problem if the test runner doesn't use the environment variable. Option B doesn't increase memory. Option D might not help if memory limit is per instance.

Answer

Split the tests into smaller batches using CodeBuild test splitting.

Answer

Configure the buildspec to set MAVEN_OPTS='-Xmx512m' to reduce JVM heap usage.

Answer

Use multiple CodeBuild jobs to run tests in parallel.

Question 13

A DevOps engineer is setting up a CI/CD pipeline for a microservices architecture. The team uses AWS CodeCommit, CodeBuild, and CodeDeploy. The engineer needs to ensure that the pipeline can automatically roll back the deployment if the health checks fail after deployment. Which action should the engineer take?

Accepted Answer

Configure the deployment group to roll back when a CloudWatch alarm is triggered.. Option D is correct because CodeDeploy supports automatic rollback based on CloudWatch alarm triggers. Options A and B are manual steps. Option C only stops traffic, not rollback.

Answer

Use AWS Lambda to monitor health checks and trigger a rollback via the CodeDeploy API.

Answer

Set up the deployment group to use blue/green deployment with traffic shifting.

Answer

Configure the pipeline to have a manual approval step after deployment.

Question 14

A company uses AWS CloudFormation to manage infrastructure. The DevOps engineer wants to implement a CI/CD pipeline that builds and tests a CloudFormation template and then deploys it across multiple AWS accounts. Which combination of services should the engineer use?

Accepted Answer

Use CodePipeline with separate CodeBuild projects for validation and CloudFormation deployment actions assuming IAM roles in target accounts.. Option C is correct because CodePipeline can orchestrate cross-account deployments using CloudFormation deployment actions with cross-account roles. Option A lacks cross-account capability. Option B uses CodeDeploy for apps, not infrastructure. Option D uses Lambda, which is less suitable than CloudFormation for infrastructure.

Answer

Use CodeBuild to run cfn-lint and then use AWS Lambda to deploy stacks across accounts.

Answer

Use CodePipeline with CodeDeploy to deploy CloudFormation stacks across accounts.

Answer

Use CodePipeline with a single CodeBuild project to run cfn-lint and deploy to all accounts.

Question 15

An organization uses AWS CodeDeploy to deploy a web application to an Auto Scaling group. The deployment fails with the error 'The overall deployment failed because too many individual instances failed deployment, too few healthy instances are available for deployment, or some instances in your deployment group are experiencing problems.' The engineer reviews the deployment logs and finds that the AppSpec file is correctly formatted and the scripts run successfully on some instances. What is the MOST likely cause?

Accepted Answer

The health check grace period for the Auto Scaling group is too short.. Option B is correct because if health check grace period is too short, instances might be marked unhealthy before the application starts. Option A would affect all instances. Option C would cause consistent failures. Option D might not cause instance failure.

Answer

The CodeDeploy agent is not installed on some instances.

Answer

The target group is not configured to route traffic to the instances.

Answer

The IAM role assigned to the EC2 instances does not have sufficient permissions.