DOP-C02 SDLC Automation Practice Test 25 — 15 Questions

Question 1

A company uses AWS CodePipeline with a GitHub source action. The pipeline is configured to trigger on changes to the main branch. After a recent commit, the pipeline did not trigger. The DevOps engineer verified that the webhook is configured correctly and the IAM role has the necessary permissions. What is the most likely cause?

Accepted Answer

The GitHub personal access token used for authentication has expired.. Option C is correct because if the GitHub personal access token has expired, CodePipeline cannot receive webhook events. Option A is wrong because the branch filter is set to main. Option B is wrong because the webhook is configured correctly. Option D is wrong because the pipeline execution frequency is not the issue.

Answer

The pipeline is set to manual execution only.

Answer

The source action's branch filter is set to a different branch.

Answer

The GitHub webhook endpoint URL is incorrect.

Question 2

A company is using AWS CodeBuild to compile a Java application. The build takes over 30 minutes, which is too long. The project uses the standard build environment. The source code is stored in an S3 bucket. What is the most effective way to reduce build time?

Accepted Answer

Enable local caching for dependencies in the buildspec.yml.. Option D is correct because caching the Maven dependencies can significantly reduce build time by reusing downloaded artifacts. Option A is wrong because it adds overhead. Option B is wrong because S3 is already the source. Option C is wrong because it does not address the compilation time.

Answer

Use a custom build environment with pre-installed Java.

Answer

Store the source code in AWS CodeCommit instead of S3.

Answer

Increase the compute type to a larger instance.

Question 3

A DevOps engineer needs to deploy a serverless application using AWS CodeDeploy with a Lambda deployment group. The application uses AWS Lambda functions. The engineer wants to shift 10% of traffic to the new version initially, then gradually increase to 100%. Which deployment configuration should be used?

Accepted Answer

CodeDeployDefault.LambdaCanary10Percent5Minutes. Option B is correct because CodeDeployDefault.LambdaCanary10Percent5Minutes shifts 10% traffic initially and then every 5 minutes. Option A is wrong because it shifts all at once. Option C is wrong because it shifts 10% then every 10 minutes. Option D is wrong because it shifts linearly over 10 minutes.

Answer

CodeDeployDefault.LambdaAllAtOnce

Answer

CodeDeployDefault.LambdaCanary10Percent10Minutes

Answer

CodeDeployDefault.LambdaLinear10PercentEvery10Minutes

Question 4

A company has a CI/CD pipeline that builds a Docker image and pushes it to Amazon ECR. The build step uses AWS CodeBuild. The engineer wants to ensure that the ECR repository has a lifecycle policy to expire untagged images after 14 days. Which TWO actions are required? (Choose 2.)

Accepted Answer

Create an ECR lifecycle policy for the repository.. Options A and D are correct. A lifecycle policy must be applied to the ECR repository (A) and the policy must specify the rule for untagged images (D). Option B is wrong because the buildspec is not where lifecycle policies are defined. Option C is wrong because the lifecycle policy is defined on the repository, not in the pipeline. Option E is wrong because the lifecycle policy is not applied during the build.

Answer

Use the docker tag command to tag images with a timestamp.

Answer

Add a lifecycle policy rule in the buildspec.yml file.

Answer

Configure the lifecycle policy in the CodeBuild project settings.

Question 5

A company is migrating to a microservices architecture on Amazon ECS with AWS Fargate. They want to automate the deployment process using AWS CodePipeline. The pipeline should build a Docker image, push it to Amazon ECR, and deploy the updated service to ECS. Which THREE components are required in the pipeline? (Choose 3.)

Accepted Answer

Deploy stage with AWS CodeDeploy to ECS.. Options A, C, and E are correct. Source stage (A) with CodeCommit or S3, build stage (C) with CodeBuild to build and push the image, and deploy stage (E) with CodeDeploy (or ECS) to deploy. Option B is wrong because a manual approval is optional. Option D is wrong because a test stage is optional.

Answer

Manual approval stage.

Answer

Test stage with AWS CodeBuild to run unit tests.

Question 6

A DevOps engineer is designing a CI/CD pipeline for a Python application using AWS CodeBuild and AWS CodeDeploy. The application is deployed to an Auto Scaling group of EC2 instances. The engineer wants to ensure that the deployment does not impact availability. Which TWO strategies can be used? (Choose 2.)

Accepted Answer

Rolling deployment with a small batch size.. Options B and C are correct. A blue/green deployment (B) creates a new environment and switches traffic. A rolling deployment (C) updates instances in batches, maintaining availability. Option A is wrong because in-place deployment can cause downtime. Option D is wrong because immutable deployments are not supported directly with Auto Scaling groups. Option E is wrong because canary is not a deployment type for EC2/ASG.

Answer

In-place deployment with a large batch size.

Answer

Immutable deployment.

Answer

Canary deployment.

Question 7

You are a DevOps engineer at a company that runs a critical web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application is deployed using AWS CodeDeploy with an in-place deployment strategy. The deployment group contains 10 EC2 instances in an Auto Scaling group. Recently, a deployment failed with the error 'The overall deployment failed because too many individual instances failed deployment.' You check the CodeDeploy agent logs on one of the failed instances and see the error 'Script at /opt/codedeploy-agent/deployment-root/deployment-logs/scripts/application_start.sh failed with exit code 1.' The application_start.sh script is part of the AppSpec file. The script attempts to restart the web server. You notice that the script uses a path that exists only on some instances. What should you do to resolve this issue and prevent future failures?

Accepted Answer

Modify the application_start.sh script to check for the existence of the path before running the restart command.. Option D is correct because the script should check if the path exists before using it, preventing failure. Option A is wrong because it does not fix the script logic. Option B is wrong because the failure is due to the script, not the agent. Option C is wrong because the script should be fixed, not bypassed.

Answer

Increase the deployment timeout in CodeDeploy.

Answer

Remove the application_start.sh script from the AppSpec file.

Answer

Reinstall the CodeDeploy agent on all instances.

Question 8

Your organization uses AWS CodePipeline to orchestrate a multi-stage pipeline for a Java application. The pipeline has a source stage (Amazon S3), a build stage (CodeBuild), and a deploy stage (CodeDeploy to EC2). Recently, the build stage started failing with the error 'BUILD_CONTAINER_UNABLE_TO_PULL_IMAGE'. The build project uses a managed image for Java. You checked the CodeBuild project settings and confirmed that the image is correct. No changes were made to the build project. What is the most likely cause?

Accepted Answer

The Docker image specified in the build project is no longer available or the registry is unreachable.. Option C is correct because the managed image may have been updated and the pull failed due to network issues. Option A is wrong because the source is S3, not CodeCommit. Option B is wrong because the buildspec is not the cause. Option D is wrong because the environment variables are not related.

Answer

The S3 bucket policy has been changed to deny access.

Answer

The build project's environment variables are incorrectly configured.

Answer

The buildspec.yml file contains invalid syntax.

Question 9

A startup is using AWS CloudFormation to manage their infrastructure. They have a stack that creates an Amazon S3 bucket and an Amazon DynamoDB table. The stack was created successfully, but when they try to update the stack to add a new S3 bucket, the update fails with the error 'CREATE_FAILED - S3 bucket already exists'. The new bucket name is unique and does not exist. The template uses the same AWS::S3::Bucket resource type. What is the most likely cause?

Accepted Answer

The S3 bucket name was previously used and is still in the process of being deleted (bucket name not yet released).. Option A is correct because the bucket name may have been used in a previous stack and is in a deletion state. Option B is wrong because the account has permissions. Option C is wrong because the resource type is correct. Option D is wrong because the region is correct.

Answer

The IAM user does not have permission to create S3 buckets.

Answer

The stack is in a different region than where the bucket is being created.

Answer

The CloudFormation template uses the wrong resource type for the bucket.

Question 10

A development team uses AWS CodeCommit to store source code and AWS CodePipeline to automate builds and deployments. The team wants to ensure that every commit to the main branch triggers a build and deployment to a test environment. Which action should be taken?

Accepted Answer

Configure the source stage of the CodePipeline to use the CodeCommit repository and specify the main branch.. Option A is correct because CodePipeline can be configured with a source stage that uses CodeCommit to detect changes on a specific branch and automatically start the pipeline. Option B is wrong because CodeBuild does not monitor branches. Option C is wrong because CloudWatch Events can also trigger pipelines, but the simplest and direct method is configuring the source stage in CodePipeline. Option D is wrong because the pipeline itself needs to be triggered.

Answer

Create a CodeBuild project that watches the main branch and starts a pipeline.

Answer

Use AWS Lambda to poll the repository and start the pipeline on new commits.

Answer

Set up an Amazon CloudWatch Events rule that matches commits to the main branch and targets the CodePipeline.

Question 11

An organization uses AWS CodeDeploy to deploy applications to Amazon EC2 instances. The deployment is failing consistently with the error 'ScriptMissing' for the AppSpec lifecycle hook 'ApplicationStop'. The scripts are located in the /opt/scripts directory on the instances. What is the most likely cause of this error?

Accepted Answer

The AppSpec file specifies a path to the script that does not exist on the instance.. Option B is correct because the AppSpec file must reference the exact location of scripts; if the path is incorrect, CodeDeploy will report ScriptMissing. Option A is wrong because permissions would cause a different error. Option C is wrong because the CodeDeploy agent version is unlikely to cause this specific error. Option D is wrong because hooks not defined would not cause ScriptMissing.

Answer

The ApplicationStop hook is not defined in the AppSpec file.

Answer

The CodeDeploy agent is not the latest version.

Answer

The scripts have incorrect file permissions.

Question 12

A company has a monolith application that takes over an hour to build. The DevOps team wants to implement continuous integration using AWS CodeBuild. The build environment requires a large amount of dependencies that are rarely updated. Which strategy will MINIMIZE build time and cost?

Accepted Answer

Create a custom Docker image that includes all dependencies and use it as the build environment.. Option D is correct because using a custom Docker image with pre-installed dependencies avoids re-downloading them each build, reducing build time and cost. Option A is wrong because increasing compute resources may not help if the bottleneck is network. Option B is wrong because S3 caching helps but is slower than having dependencies in the image. Option C is wrong because local cache is ephemeral and does not persist across builds.

Answer

Enable Amazon S3 cache for the CodeBuild project to reuse dependencies from previous builds.

Answer

Store the dependencies in an Amazon S3 bucket and download them at the start of each build.

Answer

Use a larger compute type for the CodeBuild project to speed up the build.

Question 13

A company uses AWS CloudFormation to manage infrastructure. They have a stack that creates an Amazon RDS instance. The stack creation fails with the error: 'The following resource(s) failed to create: [DBInstance]'. The CloudFormation template includes a parameter for the DB instance class. Which troubleshooting step should be taken FIRST?

Accepted Answer

Check the CloudFormation stack events for a detailed status message from the DBInstance resource.. Option B is correct because the most common reason for RDS creation failure is an invalid instance class (e.g., not available in the region). Option A is wrong because the VPC configuration is less likely. Option C is wrong because checking the RDS console will show the error, but checking the events is more direct. Option D is wrong because increasing timeout won't fix a configuration error.

Answer

Increase the stack creation timeout to allow more time for the database to be created.

Answer

Verify that the VPC has at least two public subnets in different Availability Zones.

Answer

Use the Amazon RDS console to check if a DB instance with the same identifier already exists.

Question 14

A company is designing a CI/CD pipeline using AWS CodePipeline. They want to automatically run unit tests when a pull request is created in AWS CodeCommit. Which TWO actions should be taken to implement this?

Accepted Answer

Include a buildspec file in the repository that defines the unit test commands.. Option A is correct because CodeBuild can be triggered by pull request events. Option D is correct because the buildspec file defines the commands to run tests. Option B is wrong because CodePipeline does not natively support pull request triggers from CodeCommit. Option C is wrong because CloudWatch Events can trigger Lambda, but the direct integration with CodeBuild is simpler. Option E is wrong because CodeDeploy is for deployment, not testing.

Answer

Configure a CodePipeline stage that uses the pull request source action.

Answer

Set up an Amazon CloudWatch Events rule to detect pull request creation and invoke an AWS Lambda function that starts CodeBuild.

Answer

Add a CodeDeploy deployment group to run the tests on an EC2 instance.

Question 15

A DevOps engineer is managing infrastructure as code using AWS CloudFormation. The engineer wants to automatically update a stack when changes are pushed to a Git repository. Which THREE services can be used together to achieve this?

Accepted Answer

AWS CloudFormation. Option A is correct because CodePipeline can orchestrate the deployment. Option B is correct because CodeCommit is the repository. Option D is correct because CloudFormation is the deployment action. Option C is wrong because CloudWatch Events can trigger pipelines but is not a primary service for this scenario. Option E is wrong because CodeBuild is for building, not directly applying CloudFormation stacks.

Answer

Amazon CloudWatch Events

Answer

AWS CodeBuild