SOA-C02 Deployment, Provisioning, and Automation Practice Question
A company uses AWS CloudFormation to deploy a three-tier web application. The SysOps administrator wants to update a critical parameter, such as the instance type, and ensure that the change is applied without recreating the EC2 instance, if possible. Which CloudFormation stack update feature should be used to achieve this?
⚠ Common exam trap
Candidates often confuse change sets with simply updating the stack directly, not realizing that change sets provide a critical preview to avoid unintended resource replacement, especially for properties that may or may not require replacement depending on the resource type.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Change sets
Change sets allow you to preview the changes that will be made to your stack resources before executing them. For an update that modifies an instance type, the change set will show whether the change causes replacement. In this case, AWS::EC2::Instance does not support in-place updates for InstanceType and will require replacement, so the change set would confirm that. By using a change set, you can review the impact before applying the update.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Change sets
Why this is correct
Change sets are the correct method for previewing CloudFormation updates. They generate a summary of the actions CloudFormation will perform when you execute the change set, explicitly flagging each resource as 'Static' (no change), 'Update' (in-place modification), or 'Replace' (recreation with a new physical ID). This allows you to inspect the exact impact before committing, so you can avoid unintended resource recreation and associated data loss or downtime.
- ✗
Stack policy
Why it's wrong here
A stack policy is an IAM-style JSON document that defines which resources can be updated or deleted during a stack update. While it provides a safeguard against accidental changes by denying updates to protected resources, it does not offer any mechanism to preview or foresee whether an update would cause replacement. In fact, if you try to update a protected resource, CloudFormation will simply fail the update unless overridden, but it never tells you in advance whether a change is safe or would recreate the resource.
- ✗
Update with drift detection
Why it's wrong here
Drift detection compares the live configuration of your stack's resources against the expected state defined in the original CloudFormation template. It is designed for post-deployment validation—to detect manual modifications or configuration changes made outside CloudFormation—not as a planning tool. Running drift detection before an update gives you no information about how a proposed template change would affect existing resources, so it cannot help you assess whether the update would cause recreation or in-place modification.
- ✗
Directly edit the stack template and use the update stack action
Why it's wrong here
Editing the stack template directly and invoking the UpdateStack API action will apply the changes immediately, but CloudFormation executes the update without providing a high-level preview of resource-level impacts. The service will determine on its own whether each resource requires replacement based on the modified properties, but you only see the outcome after the operation starts, not in advance. To preview and avoid accidental resource recreation, you must first create a change set and review its 'Replacement' status before executing the actual update.
Go deeper
Related to this question
About these practice questions
One of 1,169 original SOA-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.