SOA-C02 Deployment, Provisioning, and Automation Practice Test 10 — 15 Questions

Question 1

A company is using AWS CodePipeline to automate their CI/CD pipeline. The pipeline includes a deployment stage that uses AWS CloudFormation to deploy infrastructure. The company wants to add a manual approval step before the CloudFormation deployment. How should this be configured?

Accepted Answer

Add a manual approval action in the pipeline before the CloudFormation deployment stage.. Option B is correct because CodePipeline has a built-in approval action that pauses the pipeline until manually approved. Option A is wrong because CloudFormation change sets allow review but do not pause the pipeline. Option C is wrong because Lambda cannot block the pipeline. Option D is wrong because SNS alone does not pause the pipeline.

Answer

Add a CloudFormation change set action before the deployment.

Answer

Configure an Amazon SNS topic to send a notification and require a confirmation.

Answer

Use an AWS Lambda function to send an email and wait for a response.

Question 2

A company uses AWS CloudFormation with nested stacks. The parent stack creates a child stack that launches an Auto Scaling group. The child stack fails to create, and the parent stack rolls back. The administrator wants to debug the child stack. What is the most efficient way to view the child stack's events?

Accepted Answer

Navigate to the child stack in the AWS CloudFormation console and view its events.. Option C is correct because the child stack events are accessible through the AWS Management Console or CLI by specifying the child stack's name. Option A is wrong because the parent stack's events do not show detailed child resource events. Option B is wrong because the child stack still exists after rollback (in FAILED state). Option D is wrong because CloudWatch Logs are not automatically configured for CloudFormation stacks.

Answer

Rerun the parent stack with a different name to see the child stack creation.

Answer

Check the CloudWatch Logs for the parent stack.

Answer

View the parent stack's events in the AWS Management Console.

Question 3

A company is using AWS CodeDeploy to deploy a new version of an application to an Amazon ECS service. The deployment must be gradual to minimize impact. Which deployment type should be used?

Accepted Answer

Rolling update deployment. Option B is correct because ECS supports rolling update deployment, which gradually replaces tasks. Option A is wrong because blue/green is also supported but is not gradual in the same sense (it shifts all traffic at once after testing). Option C is wrong because canary is for Lambda. Option D is wrong because linear is for CodeDeploy Lambda deployments.

Answer

Linear deployment

Answer

Canary deployment

Answer

Blue/green deployment

Question 4

A company wants to use AWS Elastic Beanstalk to deploy a web application. The application requires a custom Amazon Linux 2 AMI with specific security agents installed. The company wants to ensure that all environment instances use this custom AMI. Which combination of steps should be taken? (Choose three.)

Accepted Answer

Configure the Elastic Beanstalk environment to use the custom AMI by specifying the AMI ID in the .ebextensions configuration.. Options B, C, and D are correct. The custom AMI must be built from the Elastic Beanstalk platform image to ensure compatibility, then the AMI ID must be specified in the environment configuration via .ebextensions or the console. Option A is wrong because the company does not need to manage their own AMI builder. Option E is wrong because CloudFormation is not required for this task.

Answer

Create a CloudFormation template to deploy the environment with the custom AMI.

Answer

Create a custom AMI using AWS Image Builder.

Question 5

A company uses AWS Systems Manager to automate patching of EC2 instances. The instances are in an Auto Scaling group. The company wants to ensure that patching does not affect application availability. Which feature should be used?

Accepted Answer

Maintenance Windows. Option A is correct because Systems Manager Maintenance Windows allow scheduling patching during specific time windows, and can be configured to work with Auto Scaling to maintain availability. Option B is wrong because Run Command is for ad-hoc commands. Option C is wrong because Patch Manager is the service, but Maintenance Windows schedule it. Option D is wrong because State Manager is for configuration, not patching.

Answer

State Manager

Answer

Patch Manager

Answer

Run Command

Question 6

A company is using AWS CodePipeline with a multi-branch strategy. They have a pipeline that deploys to a development environment. They want to create a new pipeline for a production environment that only deploys when code is merged to the 'main' branch. What is the most efficient way to set up the production pipeline?

Accepted Answer

Create a new pipeline using a CloudFormation template that defines the pipeline with the main branch as the source.. Option C is correct because using a CloudFormation template to create the pipeline allows for infrastructure as code and easy replication. Option A is wrong because cloning the pipeline manually is error-prone. Option B is wrong because this is not a feature of CodeCommit. Option D is wrong because a single pipeline with multiple stages would deploy to both environments on every push to main, which may not be desired.

Answer

Clone the existing pipeline and modify the source stage to use the main branch.

Answer

Use CodeCommit triggers to start the pipeline only on pushes to main.

Answer

Modify the existing pipeline to include both development and production stages, with the production stage only running on manual approval.

Question 7

A company needs to deploy a new version of an application to an Auto Scaling group. The deployment must ensure that the new version is deployed to all instances, and if any instance fails, the deployment should roll back. Which deployment strategy should be used?

Accepted Answer

Rolling deployment with rollback. Option D is correct because CodeDeploy's rolling deployment with rollback allows gradual replacement and automatic rollback on failure. Option A is wrong because all-at-once would replace all instances at once, risking full outage. Option B is wrong because canary is for Lambda. Option C is wrong because blue/green is for full environment swap.

Answer

Blue/green deployment

Answer

All-at-once deployment

Answer

Canary deployment

Question 8

A company is using AWS CloudFormation to manage infrastructure. They have a stack that creates an EC2 instance and an Elastic IP. The instance is in a VPC with an internet gateway. The stack creation succeeds, but the instance does not have internet connectivity. What is the most likely cause?

Accepted Answer

The subnet's route table does not have a route to the internet gateway.. Option A is correct because the instance must have a public IP to communicate with the internet; an Elastic IP attached to the instance provides that. Option B is wrong because the route table might not have a route to the internet gateway. Option C is wrong because the security group allows outbound traffic by default. Option D is wrong because the instance might be in a private subnet, but the question says VPC with IGW.

Answer

The instance does not have a public IP address.

Answer

The instance is in a private subnet.

Answer

The security group does not allow outbound traffic.

Question 9

A company uses AWS CloudFormation to deploy a stack that includes an Amazon RDS DB instance with Multi-AZ enabled. During a stack update, the database engine version is changed. The update fails with a rollback. What is the most likely cause?

Accepted Answer

The engine version upgrade is not supported for Multi-AZ deployments.. Option C is correct because modifying the DB engine version on a Multi-AZ instance requires a reboot of both the primary and standby, and if the upgrade is not supported, it fails. Option A is wrong because the storage type is not changed. Option B is wrong because the DB instance class is not changed. Option D is wrong because the subnet group is not changed.

Answer

The DB instance class is not available for the new engine version.

Answer

The storage type is not compatible with the new engine version.

Answer

The DB subnet group does not have enough IP addresses.

Question 10

A company uses AWS CodeBuild to compile code and run unit tests. The build environment requires a specific version of Java that is not available in the default build images. What should the administrator do?

Accepted Answer

Create a custom build image with the required Java version and push it to Amazon ECR.. Option D is correct because the administrator can create a custom build image and push it to Amazon ECR, then reference it in the buildspec. Option A is wrong because installing Java in the buildspec is possible but inefficient and may not persist. Option B is wrong because the default images cannot be modified. Option C is wrong because using a Lambda function is not the right approach.

Answer

Request AWS Support to add the Java version to the default build image.

Answer

Use an AWS Lambda function to set up the build environment before CodeBuild runs.

Answer

Install the required Java version in the buildspec file using a command.

Question 11

A company is using AWS CodeDeploy to deploy an application to an EC2 instances in an Auto Scaling group. The deployment fails because the instances are not reporting to CodeDeploy. What is the most likely cause?

Accepted Answer

The CodeDeploy agent is not installed on the instances.. Option B is correct because the CodeDeploy agent must be installed and running on the instances to receive deployment instructions. Option A is wrong because the IAM role is necessary but typically assigned to the Auto Scaling group. Option C is wrong because the application might be running, but the agent is not. Option D is wrong because the security group might be blocking, but the agent uses HTTPS which is usually allowed.

Answer

The security group does not allow inbound traffic from CodeDeploy.

Answer

The instances do not have the correct IAM role to allow CodeDeploy to access them.

Answer

The application is not running on the instances.

Question 12

A company uses AWS CloudFormation to deploy a stack that includes an Amazon RDS DB instance with automated backups enabled. The stack is deleted and then recreated. The administrator wants to restore data from the backup of the original DB instance. How can this be achieved?

Accepted Answer

Data cannot be restored because automated backups are deleted when the DB instance is deleted.. Option D is correct because automated backups are deleted when the DB instance is deleted; however, final snapshots can be taken before deletion. Since the stack was deleted without a final snapshot, the data is lost. Option A is wrong because snapshots from automated backups are deleted with the instance. Option B is wrong because RDS does not have a recycle bin. Option C is wrong because automated backups are deleted.

Answer

Restore from the latest automated backup stored in S3.

Answer

Restore from the automated backup snapshot that is retained after deletion.

Answer

Use the RDS recycle bin to recover the deleted DB instance.

Question 13

A company uses AWS Elastic Beanstalk to deploy a web application. The company wants to update the application to a new version with zero downtime. Which deployment policy should be used?

Accepted Answer

Rolling deployment. Option A is correct because rolling deployment updates instances in batches, maintaining capacity. Option B is wrong because all at once causes downtime. Option C is wrong because immutable creates a new environment and swaps, which is also zero downtime, but rolling is also acceptable. However, the question specifies 'zero downtime' and rolling is a common choice. Option D is wrong because canary is for Lambda.

Answer

Immutable deployment

Answer

All at once deployment

Answer

Canary deployment

Question 14

A company uses AWS CodePipeline to automate deployments. The pipeline has a source stage that pulls code from an Amazon S3 bucket. The company wants to automatically trigger the pipeline when a new object is uploaded to the S3 bucket. How should this be configured?

Accepted Answer

Configure a CloudWatch Events rule that matches S3 object creation events and triggers the pipeline.. Option C is correct because S3 can send events to CloudWatch Events (EventBridge) or directly to CodePipeline via a CloudWatch Events rule. Option A is wrong because SQS is not needed. Option B is wrong because SNS is not needed. Option D is wrong because Lambda is not required.

Answer

Use an AWS Lambda function to poll the S3 bucket and start the pipeline.

Answer

Configure the S3 bucket to send events to an Amazon SNS topic that triggers the pipeline.

Answer

Configure the S3 bucket to send events to an Amazon SQS queue that triggers the pipeline.

Question 15

A company is using AWS CodeDeploy to automate deployments to an Auto Scaling group of Amazon EC2 instances. The deployment fails with the error 'The overall deployment failed because too many individual instances failed deployment, too few healthy instances are available, or some instances in your deployment group are experiencing problems.' The instances are running Amazon Linux 2 and the CodeDeploy agent is installed. Which of the following is the MOST likely cause of this failure?

Accepted Answer

The CodeDeploy agent requires ruby and wget, which are not installed by default on Amazon Linux 2.. Option A is correct because the CodeDeploy agent needs the ruby and wget packages to function correctly on Amazon Linux 2. Without them, the agent may fail to download or execute the deployment scripts, causing instance failures. Option B is incorrect because S3 bucket policies do not affect CodeDeploy agent functionality directly; the agent uses HTTPS to download revision files. Option C is incorrect because the deployment configuration controls how many instances can fail, but does not cause individual instance failures. Option D is incorrect because the deployment group can be configured with any number of instances; the error is not due to group size but individual instance failures.

Answer

The S3 bucket containing the deployment artifacts has a bucket policy that denies access to the instances.

Answer

The deployment configuration is set to 'OneAtATime', causing insufficient healthy instances during the first deployment.

Answer

The Auto Scaling group has a minimum of 0 instances, so the deployment cannot start.