DOP-C02 Configuration Management and IaC Practice Question
A team uses AWS CloudFormation to manage a multi-tier application. They update the stack and receive this error: 'UPDATE_ROLLBACK_FAILED'. The stack is in a state where some resources were updated, then rollback failed. What is the best course of action?
⚠ Common exam trap
Many exam-takers think they can simply retry the update (Option C) or ignore the error (Option B), not realizing that CloudFormation's state machine requires a specific recovery action—'ContinueUpdateRollback'—to exit the 'UPDATE_ROLLBACK_FAILED' state before any further stack operations are allowed.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the 'ContinueUpdateRollback' API or AWS Management Console to resume rollback, and fix any underlying issues.
The 'UPDATE_ROLLBACK_FAILED' state indicates that CloudFormation attempted to roll back a failed stack update but encountered an error during the rollback process. The correct action is to use the 'ContinueUpdateRollback' API (or the AWS Management Console equivalent) to resume the rollback after fixing the underlying issue that caused the rollback to fail, such as a resource dependency or permission problem. This allows CloudFormation to complete the rollback and return the stack to a known stable state, rather than leaving it in an inconsistent or partially updated condition.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use the 'ContinueUpdateRollback' API or AWS Management Console to resume rollback, and fix any underlying issues.
Why this is correct
When an update fails and the automatic rollback is also unsuccessful, CloudFormation leaves the stack in the UPDATE_ROLLBACK_FAILED state. The ContinueUpdateRollback API or console action is the designed recovery mechanism; it retries the rollback of resources that failed, allowing you to skip resources with known issues and restore the stack to a usable state before fixing underlying problems and reattempting the update.
- ✗
Ignore the error and use the stack as-is.
Why it's wrong here
Leaving the stack in its current state means operating on a stack that is in UPDATE_ROLLBACK_FAILED, not a consistent, successfully deployed state. Resources may have been partially updated and left in a broken or unpredictable configuration, and critical stack operations such as subsequent updates or deletions may be blocked until the stack is recovered, potentially causing data corruption or security misconfigurations.
- ✗
Attempt to continue the update again.
Why it's wrong here
You cannot simply issue another UpdateStack call because CloudFormation rejects update operations when the stack is in a terminal failure state like UPDATE_ROLLBACK_FAILED. The service requires the stack to be restored to a healthy state (e.g., via ContinueUpdateRollback) first; retrying the same update without addressing the root cause will just fail again, wasting time and leaving the stack in the same broken condition.
- ✗
Delete the stack and recreate it.
Why it's wrong here
Deleting a stack that is in UPDATE_ROLLBACK_FAILED can itself fail or risk cascading resource deletion errors because CloudFormation may not be able to properly clean up partially updated resources. Moreover, this approach destroys all stack-managed resources, including data stored in databases or file systems, when the underlying issues may be fixable; best practice is to recover the stack via ContinueUpdateRollback and then correct the configuration, not nuke and rebuild.
Go deeper
Related to this question
About these practice questions
One of 1,298 original DOP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DOP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DOP-C02 exam.