DVA-C02 Deployment Practice Question
Which TWO are benefits of using AWS CloudFormation for infrastructure deployment? (Choose two.)
⚠ Common exam trap
Many candidates confuse CloudFormation's rollback-on-failure behavior (which is automatic by default) with compliance enforcement or monitoring, leading them to select Option B or E, but CloudFormation does not natively audit or monitor resources.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Infrastructure is provisioned consistently across environments.
AWS CloudFormation uses templates to define infrastructure as code, ensuring that the same set of resources is provisioned identically across multiple environments (e.g., dev, test, prod). This eliminates configuration drift and manual errors by applying the same template consistently, which is a core benefit of infrastructure as code.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Infrastructure is provisioned consistently across environments.
Why this is correct
CloudFormation templates define infrastructure as code, specifying resources and their configurations in a declarative manner. By using the same template across development, staging, and production environments, organizations ensure that the infrastructure deployed in each environment is identical and provisioned consistently. This eliminates configuration drift and reduces human error, leading to more reliable and predictable deployments.
- ✗
Automatically enforces compliance rules.
Why it's wrong here
While CloudFormation can define resources that adhere to compliance standards, it does not automatically enforce compliance rules during or after provisioning. Tools like AWS Config, AWS Security Hub, or third-party compliance solutions are responsible for continuously evaluating resource configurations against predefined rules and reporting non-compliance. CloudFormation itself is a provisioning tool, not a compliance auditing or enforcement engine.
- ✓
Automatically rolls back changes if stack creation fails.
Why this is correct
CloudFormation provides an automatic rollback mechanism. If any resource creation or update within a stack fails, or if a specified rollback trigger is activated, CloudFormation automatically attempts to revert all successfully provisioned resources to their previous stable state. This ensures that the infrastructure remains in a known good state, preventing partially deployed or misconfigured environments and simplifying troubleshooting.
- ✗
Replaces the need for a CI/CD pipeline.
Why it's wrong here
CloudFormation is a powerful infrastructure as code service for provisioning and managing AWS resources, but it is not a replacement for a comprehensive CI/CD pipeline. CI/CD pipelines orchestrate the entire software delivery process, including code compilation, testing, artifact building, and deployment. CloudFormation typically integrates *into* a CI/CD pipeline as the deployment mechanism for infrastructure, working alongside tools like AWS CodePipeline, CodeBuild, and CodeDeploy.
- ✗
Provides real-time monitoring of deployed resources.
Why it's wrong here
CloudFormation is designed for defining, provisioning, and managing the lifecycle of AWS resources, not for real-time operational monitoring. While CloudFormation can provision monitoring resources like Amazon CloudWatch alarms, it does not inherently provide real-time metrics, logs, or event monitoring for the deployed infrastructure itself. Dedicated AWS services such as CloudWatch, AWS X-Ray, and AWS CloudTrail are used for comprehensive real-time monitoring and logging.
Go deeper
Related to this question
About these practice questions
This DVA-C02 question is part of Courseiva's 1,135-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DVA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DVA-C02 exam.