AWS DevOps DevOps CI/CD Pipeline Design & Implementation 2

Question 1

A team wants to run integration tests in AWS CodePipeline only after unit tests pass, and in parallel with security scans. Which pipeline configuration achieves this?

Accepted Answer

Use a single stage with multiple action groups: unit tests in group 1, integration tests and security scans in group 2

Answer

Use sequential stages where unit tests, integration tests, and security scans each run one after another

Answer

Use Lambda functions to trigger each test type independently outside of CodePipeline

Answer

Configure separate pipelines for each test type and use SNS to coordinate them

Question 2

Which AWS CodeBuild feature allows you to cache dependencies between builds to reduce build time?

Accepted Answer

CodeBuild cache configured with S3 or local cache for dependency directories

Answer

Build artifacts stored in S3 with versioning enabled

Answer

ElastiCache cluster mounted as a network drive during builds

Answer

EFS file system shared across all CodeBuild projects

Question 3

A company needs to deploy a Lambda function with zero downtime and the ability to instantly roll back if errors spike. Which deployment configuration should they use?

Accepted Answer

CodeDeploy with a Canary10Percent5Minutes deployment configuration

Answer

Lambda versioning with manual alias switching after testing

Answer

S3 blue/green deployment with CloudFront cache invalidation

Answer

Elastic Beanstalk rolling update with health checks

Question 4

In AWS CodePipeline, what is the purpose of a manual approval action?

Accepted Answer

It pauses the pipeline and sends a notification, requiring a human to explicitly approve or reject before the pipeline continues

Answer

It automatically approves deployments that pass all automated tests

Answer

It creates a pull request in CodeCommit for peer review

Answer

It triggers a Lambda function that validates deployment readiness

Question 5

A developer committed a broken build to the main branch. The CI system should prevent merges that break the build. Which approach enforces this on AWS CodeCommit?

Accepted Answer

Enable branch protection rules that require all pull requests to pass a CodeBuild project before merging

Answer

Use S3 event notifications to trigger a build on every commit

Answer

Configure CodePipeline to send an email when the build fails

Answer

Use IAM policies to restrict direct pushes to the main branch

Question 6

Which artifact store does AWS CodePipeline use by default to pass artifacts between stages?

Accepted Answer

Amazon S3 bucket created in the same region as the pipeline

Answer

Amazon EFS shared file system mounted on pipeline workers

Answer

Amazon DynamoDB table with artifact metadata

Answer

Amazon ECR repository for container-based artifacts

Question 7

A team uses AWS CDK to define their infrastructure and wants pipeline changes (including the pipeline itself) to be deployed automatically when CDK code changes. Which CDK Pipelines feature enables this?

Accepted Answer

Self-mutation, where the pipeline updates itself before deploying application stages

Answer

CdkPipeline.addApplicationStage() with manual approval between environments

Answer

AWS CloudFormation StackSets that distribute changes across regions automatically

Answer

CodeDeploy blue/green deployments triggered by CDK synth output