DOP-C02 Question #406: Real Exam Question with Answer & Explanation

Question

A company uses Amazon API Gateway and AWS Lambda functions to implement an API. The company uses a pipeline in AWS CodePipeline to build and deploy the API. The pipeline contains a source stage, build stage, and deployment stage. The company deploys the API without performing smoke tests. Soon after the deployment, the company observes multiple issues with the API. A security audit finds security vulnerabilities in the production code. The company wants to prevent these issues from happening in the future. Which combination of steps will meet this requirement? (Choose two.)

Options

• ACreate a smoke test script that returns an error code if the API code fails the test. Add an action
• BCreate a smoke test script that returns an error code if the API code fails the test. Add an action
• CAdd an action in the build stage that uses Amazon Inspector to scan the Lambda function code
• DAdd an action in the build stage to run an Amazon CodeGuru code scan after the code is built.
• EAdd an action in the deployment stage to run an Amazon CodeGuru code scan after deployment.