AWS Certified Developer – Associate DVA-C02 Practice Questions

1040 exam-accurate questions with explanations

info

Free Sample Questions

Showing 10 of 1040 questions. Get full access to all questions, detailed explanations, and study materials.

Content Domain 1: Development with AWS Services

The team is reducing operational risk in a mobile backend deployed to eu-west-1. Multiple consumers must react to the same business event, and producers must not know which consumers exist. Rules need to route events by attributes. Which solution is MOST appropriate?

A Write each event to an Amazon RDS table and require every consumer to poll the table.

B Place every consumer behind one Amazon API Gateway endpoint and invoke them sequentially.

C Send synchronous HTTP requests from the producer to every consumer.

D Publish events to Amazon EventBridge and configure event-bus rules for the consumers. check_circle

lightbulb

Explanation

EventBridge supports loosely coupled event-driven routing with rules that match event attributes. The strongest distractor is 'Send synchronous HTTP requests from the producer to every consumer.', but it fails because it couples producer availability and latency to every consumer.

Content Domain 2: Security

A manufacturing company is preparing a change to the catalog API that handles a bursty evening workload. Code running on Amazon EC2 needs to read objects from one S3 bucket. The team must avoid long-lived credentials in the instance. What is the BEST solution?

A Store an IAM user's access key in a configuration file on the instance.

B Store an IAM user's access key in an encrypted environment variable on the instance.

C Attach an IAM role to the EC2 instance and grant the required S3 permissions. check_circle

D Create a shared IAM user and rotate its access key manually.

lightbulb

Explanation

An EC2 IAM role supplies temporary credentials to the workload without embedding static keys. The strongest distractor is 'Store an IAM user's access key in an encrypted environment variable on the instance.', but it fails because long-lived credentials increase exposure and rotation risk.

Content Domain 3: Deployment

A developer is implementing a change for a IoT analytics provider's image-processing pipeline. A Lambda function is deployed as a ZIP archive and imports third-party libraries at startup. What must the artifact contain unless the libraries are supplied by a compatible layer?

A Upload only the handler file and install dependencies after every invocation.

B Include the handler code and required dependencies in the deployment ZIP file. check_circle

C Attach an SQS queue containing the package manifest.

D Store dependencies in CloudTrail event history.

lightbulb

Explanation

ZIP-based Lambda deployments need the handler and required runtime dependencies unless compatible libraries are supplied elsewhere, such as through layers. The strongest distractor is 'Attach an SQS queue containing the package manifest.', but it fails because SQS is a queue and does not by itself provide the requested API, orchestration, or configuration capability.

Content Domain 4: Troubleshooting and Optimization

A compliance and reliability review covers the healthcare SaaS provider's document upload service. The team needs to search CloudWatch Logs for the most frequent errorCode values during the last hour. Which tool should be used?

A Download log streams manually and search each file locally.

B Run a CloudWatch Logs Insights query over the relevant log groups. check_circle

C Create a metric filter for one fixed pattern instead of running an ad hoc Logs Insights query.

D Use CloudTrail event history to aggregate application errorCode fields.

lightbulb

Explanation

CloudWatch Logs Insights is designed for interactive querying and aggregation of log data. The strongest distractor is 'Download log streams manually and search each file locally.', but it fails because manual changes create drift and are harder to test and reproduce.

Content Domain 1: Development with AWS Services

An application team operates the shipment-status API in the staging environment. Billing, analytics, and email workers must process each order independently. Every worker needs durable buffering and its own retry behavior. What should the developer implement?

A Create one Amazon EventBridge scheduled rule for each worker to poll the producer.

B Send every order to one shared Amazon SQS standard queue.

C Invoke the three workers sequentially from the order service.

D Publish to an Amazon SNS topic with a separate Amazon SQS queue subscription for each worker. check_circle

lightbulb

Explanation

SNS fanout with individual SQS queues lets each consumer receive every event while retaining independent buffering and retries. The strongest distractor is 'Invoke the three workers sequentially from the order service.', but it fails because it addresses a related concern but does not satisfy the scenario's primary requirement.

Content Domain 2: Security

After a recent load test, the team evaluates a event-processing application. A Lambda function needs to write CloudWatch logs and read from one DynamoDB table. Which permissions model should be used?

A Grant the function full access to every DynamoDB table.

B Assign a least-privilege Lambda execution role with the required logging and DynamoDB permissions. check_circle

C Create an IAM user for each function invocation.

D Embed administrator access keys in Lambda environment variables.

lightbulb

Explanation

A Lambda execution role provides temporary credentials and should grant only the permissions the function requires. The strongest distractor is 'Create an IAM user for each function invocation.', but it fails because it addresses a related concern but does not satisfy the scenario's primary requirement.

Content Domain 3: Deployment

An application team operates the partner API in the staging environment. A team needs isolated feature development and traceable release versions in its source repository. Which practice is MOST appropriate?

A Use IAM user names as release versions.

B Store source files only in Lambda environment variables.

C Commit every change directly to an undocumented production branch.

D Use branches for isolated work and version tags or labels for approved releases. check_circle

lightbulb

Explanation

Branches and release tags improve isolation, traceability, and controlled promotion. The strongest distractor is 'Commit every change directly to an undocumented production branch.', but it fails because it addresses a related concern but does not satisfy the scenario's primary requirement.

Content Domain 4: Troubleshooting and Optimization

A developer is implementing a change for a customer-support platform's checkout API. Operations needs one view of Lambda errors, duration, throttles, and downstream latency. Which service feature should be configured?

A Rely on separate service consoles without a consolidated view.

B Create a CloudTrail trail and use it as the operational dashboard.

C Export metrics to local files and review them manually during incidents.

D Create a CloudWatch dashboard with the relevant metrics. check_circle

lightbulb

Explanation

CloudWatch dashboards provide a consolidated view of operational metrics. The strongest distractor is 'Create a CloudTrail trail and use it as the operational dashboard.', but it fails because CloudTrail is useful for API auditing, not as the requested runtime, test, or performance mechanism.

Content Domain 1: Development with AWS Services

An application team operates the analytics ingestion pipeline in the staging environment. An Amazon SQS consumer sometimes needs 2 minutes to process a message. The same message becomes visible and is processed by another worker before the first worker finishes. What should be changed first?

A Reduce the queue's long-poll wait time.

B Set the visibility timeout longer than normal processing time and extend it when necessary. check_circle

C Increase the queue message-retention period.

D Configure a smaller maximum message size.

lightbulb

Explanation

The visibility timeout hides an in-flight message from other consumers while processing continues. The strongest distractor is 'Configure a smaller maximum message size.', but it fails because it addresses a related concern but does not satisfy the scenario's primary requirement.

Content Domain 2: Security

A compliance and reliability review covers the ticketing platform's customer-profile service. A consumer mobile application needs managed user sign-up, sign-in, password recovery, and tokens for its backend API. Which service should be used?

A Store plaintext passwords in DynamoD

B B. Use AWS STS without an identity provider as the user directory.

C Use an Amazon Cognito user pool. check_circle

D Create an IAM user for every mobile application user.

lightbulb

Explanation

Cognito user pools provide managed application-user authentication and token issuance. The strongest distractor is 'Create an IAM user for every mobile application user.', but it fails because it addresses a related concern but does not satisfy the scenario's primary requirement.

Get all 1040 questions

Full access includes all questions, detailed explanations, PDF downloads, and timed mock exams.

quiz Start Free Practice download Free PDF