DOP-C02 SDLC Automation Practice Test 9 — 15 Questions

Question 1

A development team uses AWS CodeBuild to run unit tests on every commit to the develop branch. The tests take a long time because they download dependencies each time. What should the team do to reduce build time?

Accepted Answer

Enable the local cache feature in CodeBuild.. Option B is correct because enabling the local cache in CodeBuild allows dependencies to be cached across builds, reducing download time. Option A is wrong because increasing compute resources may help but not as effectively as caching. Option C is wrong because parallel builds do not reduce a single build's time. Option D is wrong because Amazon EFS adds network latency; local instance store is better.

Answer

Store dependencies in Amazon Elastic File System (EFS) and mount it during builds.

Answer

Increase the compute type of the build environment.

Answer

Use multiple builds in parallel for the same commit.

Question 2

A company is implementing a blue/green deployment strategy for an application running on Amazon ECS with AWS Fargate. The team wants to use AWS CodeDeploy to orchestrate the deployment. What is the minimum IAM permissions needed for CodeDeploy to register the new task set and shift traffic?

Accepted Answer

ecs:RegisterTaskDefinition, ecs:UpdateService, elasticloadbalancing:RegisterTargets. Option C provides the minimum required actions: ecs:RegisterTaskDefinition to create the new task definition, ecs:UpdateService to modify the service, and elasticloadbalancing:RegisterTargets to register the new task set with the target group. Option A is incomplete because it lacks ecs:UpdateService. Option B is wrong because it includes ecs:CreateService which is not needed. Option D is wrong because it includes iam:PassRole which is not needed by CodeDeploy directly.

Answer

ecs:RegisterTaskDefinition, elasticloadbalancing:RegisterTargets

Answer

ecs:RegisterTaskDefinition, ecs:UpdateService, iam:PassRole

Answer

ecs:CreateService, ecs:UpdateService, elasticloadbalancing:RegisterInstancesWithLoadBalancer

Question 3

A team uses AWS CodePipeline with multiple stages: Source, Build, Test, and Deploy. The Test stage runs integration tests against a staging environment. Occasionally, the tests fail due to environment issues, not code issues. The team wants to automatically retry the Test stage up to two times if it fails, but not the Deploy stage. How can this be achieved?

Accepted Answer

Configure the Retry setting in the Test stage's action configuration.. Option B is correct because CodePipeline allows configuring retry on a per-stage basis in the pipeline structure. Option A is wrong because there is no global retry setting. Option C is wrong because Step Functions would add complexity and is not native. Option D is wrong because CloudWatch Events can trigger retries but not in a simple way; the native retry is simpler.

Answer

Create a CloudWatch Events rule that triggers a Lambda function to retry the failed stage.

Answer

Enable the 'Retry on failure' option in the CodePipeline pipeline settings.

Answer

Use AWS Step Functions to orchestrate the pipeline and implement retries.

Question 4

A company wants to ensure that all code changes are reviewed before being merged to the main branch in AWS CodeCommit. Which feature should be enabled?

Accepted Answer

Create an approval rule template and associate it with the main branch.. Option D is correct because CodeCommit supports approval rule templates that can require pull request approvals. Option A is wrong because branches are not protected by default; approval rules are needed. Option B is wrong because Lambda triggers can be used but are not the built-in solution. Option C is wrong because CloudWatch Events can send notifications but not block merges.

Answer

Configure a Lambda function to validate commits and block pushes.

Answer

Enable branch protection rules on the repository.

Answer

Use CloudWatch Events to notify when a push occurs.

Question 5

During a deployment using AWS CodeDeploy, the deployment fails with the error 'The overall deployment failed because too many individual instances failed deployment, too few healthy instances are available, or some instances in your deployment group are experiencing problems.' The deployment group is configured with a minimum healthy instances of 75%. What could be the cause?

Accepted Answer

More than 25% of the instances failed the deployment.. Option A is correct because the error indicates too many instances failed or are unhealthy. The minimum healthy instances setting of 75% means at least 75% of instances must remain healthy; if more than 25% fail, the deployment fails. Option B is wrong because IAM permissions would cause a different error. Option C is wrong because that error would be about failing to reach instances. Option D is wrong because CodeDeploy agent timeout would show a specific error.

Answer

The deployment configuration timeout is too short.

Answer

The CodeDeploy service role does not have sufficient permissions.

Answer

The instances are not running the CodeDeploy agent.

Question 6

A company is migrating from Jenkins to AWS CodeBuild. They have hundreds of Jenkins jobs that run on a schedule. Some jobs take hours and must not overlap. What is the most efficient way to migrate these jobs to CodeBuild while ensuring no overlapping builds?

Accepted Answer

Use Amazon CloudWatch Events to trigger a Lambda function that checks the build status before starting a new build.. Option C is correct because you can use a CloudWatch Events rule scheduled to trigger a Lambda function that checks if a previous build is running (using the CodeBuild API) before starting a new one. Option A is wrong because buildspec does not control scheduling or concurrency. Option B is wrong because different projects can run concurrently, but the issue is within the same job. Option D is wrong because there is no built-in queue for same project; you must implement it.

Answer

Create a buildspec file that includes a sleep command to stagger start times.

Answer

Configure the CodeBuild project with a concurrent build limit of 1.

Answer

Set up a separate CodeBuild project for each job and use a custom retry policy.

Question 7

An IAM policy is attached to a user. The user is trying to push a commit to the 'main' branch of the 'MyRepo' repository. The push is denied. What is the most likely reason?

Accepted Answer

The condition key 'codecommit:References' is not correctly formatted for an array value.. Option B is correct because the condition uses StringEquals with an array, but the condition key 'codecommit:References' expects a single value when using StringEquals; the policy should use 'ForAllValues:StringEquals' or 'ForAnyValue:StringEquals' for array matching. Option A is wrong because the actions are allowed for the main branch reference. Option C is wrong because the condition restricts to main branch, not other branches. Option D is wrong because the resource ARN matches the repository.

Answer

The user does not have permission to push to any branch.

Answer

The policy does not allow the 'codecommit:GitPush' action for the main branch.

Answer

The resource ARN is incorrect.

Question 8

A developer is troubleshooting a failed CodeBuild build. The build is triggered by a pull request from a forked repository. The buildspec includes a command to fetch pull request references. What is the most likely cause of the failure?

Accepted Answer

The CodeBuild project is not configured to allow pull requests from forked repositories.. Option B is correct because by default, CodeBuild does not fetch pull request references from forked repositories for security reasons. The build project must be configured to allow pull request builds from forked repositories. Option A is wrong because the error is about fetching, not about file not found. Option C is wrong because the buildspec is being executed, so it is valid. Option D is wrong because the error is about fetching, not about insufficient permissions.

Answer

The IAM role for CodeBuild does not have permission to read from the repository.

Answer

The buildspec file is not present in the source code.

Answer

The buildspec contains invalid syntax.

Question 9

A CloudFormation stack is created with the template above and the parameter Environment set to 'dev'. Later, the stack is deleted. What happens to the S3 bucket?

Accepted Answer

The bucket is deleted.. Option B is correct because the condition 'IsProd' is false when Environment is 'dev', so the DeletionPolicy evaluates to 'Delete', meaning the bucket will be deleted when the stack is deleted. Option A is wrong because the DeletionPolicy is set to Delete. Option C is wrong because the condition is evaluated at stack creation and deletion. Option D is wrong because the bucket is deleted.

Answer

The bucket is retained only if it contains objects.

Answer

The bucket is retained.

Answer

The bucket is deleted but the objects are retained.

Question 10

A DevOps engineer is setting up a CI/CD pipeline for a Node.js application. The application must be built, tested, and deployed to an Amazon ECS cluster. The team wants to use AWS CodeBuild to run unit tests and package the application as a Docker image, and AWS CodePipeline to orchestrate the workflow. Which artifact type should CodeBuild output to be used by a subsequent CodePipeline action?

Accepted Answer

A Docker image pushed to Amazon ECR.. Option D is correct because CodeBuild can output a Docker image to Amazon ECR, and CodePipeline can use that image in a deploy action. Option A is wrong because the buildspec does not produce an artifact; it builds a Docker image. Option B is wrong because the image is pushed to ECR, not stored in S3 directly. Option C is wrong because the image is stored in ECR, not S3.

Answer

A zip file containing the application source code.

Answer

A tarball stored in Amazon S3.

Answer

A JSON file with the image details.

Question 11

A company uses AWS CodePipeline with a GitHub source action. They want to automatically start the pipeline when a pull request is merged to the main branch. However, the pipeline also starts on every push to any branch. How can they limit the pipeline to only trigger on push events to the main branch?

Accepted Answer

Configure the source action's 'Branch' field to 'main' and set 'PollForSourceChanges' to false, and use a webhook with filters.. Option A is correct because the GitHub source action supports configuring branch and event filters, such as 'push' and 'pull_request' with specific branches. Option B is wrong because the webhook is managed by CodePipeline; you can configure filters within the pipeline definition. Option C is wrong because the source action can filter on branch without a Lambda. Option D is wrong because CodePipeline does not have a branch filter condition; it's configured in the source action.

Answer

Use a Lambda function as a source action instead of GitHub.

Answer

Create a GitHub webhook manually and point it to a Lambda function that starts the pipeline only for main branch pushes.

Answer

Add a condition in the pipeline's first stage to check the branch name.

Question 12

A team uses AWS CodeBuild to run security scans on code before deployment. They want to ensure that if the security scan fails, the build is marked as FAILED and no further pipeline stages execute. What should they add to the buildspec?

Accepted Answer

Use the 'phases' section with a command that exits with a non-zero status on failure.. Option D is correct because the 'phases' section runs commands, and if a command exits with a non-zero status, the build fails. Option A is wrong because 'env' is for environment variables. Option B is wrong because 'artifacts' is for output. Option C is wrong because 'reports' is for test reports and does not cause build failure.

Answer

Use the 'artifacts' section to define failure conditions.

Answer

Use the 'env' section to set a variable that fails the build.

Answer

Use the 'reports' section to mark the build as failed if tests fail.

Question 13

A development team is using AWS CodeCommit as a source control repository. They want to automate code builds and run unit tests every time a developer pushes code to the 'develop' branch. Which AWS service should they use to trigger the build automatically?

Accepted Answer

Create an AWS CodePipeline with CodeCommit as source and CodeBuild as build stage, configured to start on source changes.. Option D is correct because AWS CodePipeline can be configured with a webhook on CodeCommit to trigger a build in CodeBuild on every push. Option A is wrong because CodeCommit itself does not run builds. Option B is wrong because CloudWatch Events can trigger based on API calls but is not the direct service for build automation. Option C is wrong because CodeDeploy is for deployment, not building.

Answer

Set up AWS CodeDeploy to run builds on code push.

Answer

Configure AWS CodeCommit to invoke AWS CodeBuild directly.

Answer

Use Amazon CloudWatch Events to detect a push to CodeCommit and trigger AWS CodeBuild.

Question 14

A company is using AWS CodeBuild to compile a Java application. The build takes over 30 minutes, causing timeouts. The team has already increased the build timeout to the maximum. Which action would MOST effectively reduce the build time?

Accepted Answer

Enable dependency caching in the buildspec file.. Option C is correct because caching dependencies can significantly reduce build time by avoiding re-downloading. Option A is wrong because increasing compute resources can help but may not be as effective as caching. Option B is wrong because parallel builds may introduce complexity and dependencies. Option D is wrong because using a smaller instance would increase build time.

Answer

Use a smaller instance type to reduce provisioning time.

Answer

Use a larger compute type in CodeBuild.

Answer

Split the build into multiple parallel CodeBuild projects.

Question 15

A DevOps engineer is designing a CI/CD pipeline for a microservices architecture. The pipeline must deploy to Amazon ECS using blue/green deployments. The team wants to automatically roll back if the new deployment fails health checks. Which combination of AWS services and configurations should the engineer use?

Accepted Answer

Use AWS CodeDeploy with an ECS compute platform, configure a CloudWatch alarm for health checks, and enable automatic rollback.. Option D is correct because CodeDeploy with ECS supports blue/green deployments and automatic rollback on CloudWatch alarm. Option A is wrong because CodePipeline alone does not handle deployment rollback. Option B is wrong because CloudFormation does not natively support blue/green for ECS. Option C is wrong because Elastic Beanstalk is for web apps, not ECS.

Answer

Use AWS CloudFormation with a custom resource to perform blue/green deployment.

Answer

Use AWS Elastic Beanstalk with blue/green environment swapping.

Answer

Use AWS CodePipeline with ECS deployment action and manual approval for rollback.