SAP-C02 Continuous Improvement for Existing Solutions Practice Question
A company uses AWS CloudFormation to manage its infrastructure. The operations team reports that stack updates often fail because of resource conflicts. The team wants to improve the reliability of updates without manual intervention. Which solution provides the MOST automated recovery from update failures?
⚠ Common exam trap
The trap here is that candidates may overthink the solution and choose a custom Lambda function (Option B) thinking it provides more control, when in fact CloudFormation's native rollback is the most automated and reliable approach, and custom solutions often introduce additional failure points.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the default CloudFormation rollback behavior that automatically reverts changes on failure.
CloudFormation's built-in rollback behavior automatically reverts all changes made during a failed stack update, restoring the stack to its last known stable state without requiring any custom code or manual intervention. This provides the most automated recovery mechanism as it is natively integrated into the CloudFormation service and requires no additional infrastructure or scripting.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use CloudFormation change sets to review and approve all changes before update.
Why it's wrong here
Change sets only preview proposed changes for human review and approval; they detect nothing at update time and perform no automatic recovery, and the stem requires no manual intervention. Change sets are tempting for validating template changes before execution, and would be correct when the requirement is pre-update review rather than automated failure recovery.
- ✗
Write a custom AWS Lambda function that reverts changes when a stack update fails.
Why it's wrong here
A custom Lambda revert function only runs after CloudFormation has already failed and rolled back, adding no automatic recovery beyond the built-in rollback behaviour. Lambda is tempting for bespoke remediation logic, and would suit custom post-failure notifications or cleanup, but it cannot prevent the resource conflict that causes the update to fail.
- ✗
Apply a stack policy to prevent updates to critical resources.
Why it's wrong here
A stack policy blocks updates to protected resources, so conflicting changes are rejected rather than recovered from, leaving the stack in its prior state with no automated remediation. Stack policies are tempting for guarding critical resources against accidental modification, and would be correct when the goal is preventing updates, not recovering from failures.
- ✓
Use the default CloudFormation rollback behavior that automatically reverts changes on failure.
Why this is correct
CloudFormation's default rollback automatically reverts stack resources to their last known stable state when an update fails, restoring service without operator involvement. This built-in behaviour delivers the hands-off recovery the team requires, unlike manual rollback or custom remediation tooling.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 984 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.