AWS DVA-C02: Developer Associate Practice Exam

What the AWS DVA-C02 exam covers

• Development with AWS Services84 questions
• Security70 questions
• Deployment58 questions
• Troubleshooting and Optimization87 questions

Free AWS DVA-C02 sample questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 299.

1. Question 1Development with AWS Services

   Which AWS service runs event-driven code without provisioning or managing servers?

   • AAmazon RDS
   • BAWS LambdaCorrect
   • CAmazon EC2
   • DAmazon VPC
   ✓ Correct answer: B

   AWS Lambda is the correct choice because it directly addresses the scenario's requirements. This option provides the functionality and characteristics described in the question. Understanding the capabilities and use cases of AWS services is essential for designing solutions that meet specific business and technical requirements. When evaluating options, consider which service is purpose-built for the scenario and whether it integrates well with other components of your architecture.

   Why the other options are wrong

   • AAmazon RDS is incorrect because this option does not provide the correct functionality for the described scenario.
   • CAmazon EC2 is incorrect because this option does not provide the correct functionality for the described scenario.
   • DAmazon VPC is incorrect because this option does not provide the correct functionality for the described scenario.
2. Question 2Development with AWS Services

   Which AWS CLI command writes a single item to a DynamoDB table named Orders?

   • Aaws dynamodb insert --table Orders --row OrderId=123
   • Baws dynamodb create-item --table-name Orders --data OrderId=123
   • Caws dynamodb add-item --table-name Orders --item OrderId=123
   • Daws dynamodb put-item --table-name Orders --item '{"OrderId":{"S":"123"}}'Correct
   ✓ Correct answer: D

   aws dynamodb put-item --table-name Orders --item '{"OrderId":{"S":"123"}}' is the correct choice because it directly addresses the scenario's requirements. This option provides the functionality and characteristics described in the question. Understanding the capabilities and use cases of AWS services is essential for designing solutions that meet specific business and technical requirements. When evaluating options, consider which service is purpose-built for the scenario and whether it integrates well with other components of your architecture.

   Why the other options are wrong

   • Aaws dynamodb insert --table Orders --row OrderId=123 is incorrect because this option does not provide the correct functionality for the described scenario.
   • Baws dynamodb create-item --table-name Orders --data OrderId=123 is incorrect because this option does not provide the correct functionality for the described scenario.
   • Caws dynamodb add-item --table-name Orders --item OrderId=123 is incorrect because this option does not provide the correct functionality for the described scenario.
3. Question 3Development with AWS Services

   A team needs to put items larger than the DynamoDB maximum item size into a table-backed workflow. What is the AWS-recommended pattern?

   • AEnable a configuration flag to raise the DynamoDB item size limit to 4 MB
   • BSplit the item across multiple partition keys automatically using DAX
   • Cstore the large payload in Amazon S3 and keep only the object pointer/metadata in the DynamoDB item, since items are capped at 400 KBCorrect
   • Dcompress the item; DynamoDB has no fixed item size limit
   ✓ Correct answer: C

   store the large payload in Amazon S3 and keep only the object pointer/metadata in the DynamoDB item, since items are capped at 400 KB is the correct choice because it directly addresses the scenario's requirements. This option provides the functionality and characteristics described in the question. Understanding the capabilities and use cases of AWS services is essential for designing solutions that meet specific business and technical requirements. When evaluating options, consider which service is purpose-built for the scenario and whether it integrates well with other components of your architecture.

   Why the other options are wrong

   • AEnable a configuration flag to raise the DynamoDB item size limit to 4 MB is incorrect because this option does not provide the correct functionality for the described scenario.
   • BSplit the item across multiple partition keys automatically using DAX is incorrect because this option does not provide the correct functionality for the described scenario.
   • Dcompress the item; DynamoDB has no fixed item size limit is incorrect because this option does not provide the correct functionality for the described scenario.
4. Question 4Development with AWS Services

   A team must migrate large volumes of records into DynamoDB efficiently during a one-time bulk load. Which approach minimizes the number of write requests and round trips?

   • ACall PutItem once per record sequentially with no batching
   • BWrite all records into one item to reduce request count
   • CUse the BatchWriteItem API to write up to 25 items per request and handle UnprocessedItems with retriesCorrect
   • DUpload the records as a single object to S3 and expect DynamoDB to import it automatically
   ✓ Correct answer: C

   Use the BatchWriteItem API to write up to 25 items per request and handle UnprocessedItems with retries is the correct choice because it directly addresses the scenario's requirements. This option provides the functionality and characteristics described in the question. Understanding the capabilities and use cases of AWS services is essential for designing solutions that meet specific business and technical requirements. When evaluating options, consider which service is purpose-built for the scenario and whether it integrates well with other components of your architecture.

   Why the other options are wrong

   • ACall PutItem once per record sequentially with no batching is incorrect because this option does not provide the correct functionality for the described scenario.
   • BWrite all records into one item to reduce request count is incorrect because this option does not provide the correct functionality for the described scenario.
   • DUpload the records as a single object to S3 and expect DynamoDB to import it automatically is incorrect because this option does not provide the correct functionality for the described scenario.
5. Question 5Security

   Which command attaches an existing managed policy to an IAM role?

   • Aaws iam attach-role-policy --role-name AppRole --policy-arn arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccessCorrect
   • Baws iam bind-policy --role-name AppRole --managed-policy AmazonS3ReadOnlyAccess
   • Caws iam add-policy --role AppRole --policy AmazonS3ReadOnlyAccess
   • Daws iam put-role-policy --role-name AppRole --policy-arn arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess
   ✓ Correct answer: A

   aws iam attach-role-policy --role-name AppRole --policy-arn arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess is the correct choice because it directly addresses the scenario's requirements. This option provides the functionality and characteristics described in the question. Understanding the capabilities and use cases of AWS services is essential for designing solutions that meet specific business and technical requirements. When evaluating options, consider which service is purpose-built for the scenario and whether it integrates well with other components of your architecture.

   Why the other options are wrong

   • Baws iam bind-policy --role-name AppRole --managed-policy AmazonS3ReadOnlyAccess is incorrect because this option does not provide the correct functionality for the described scenario.
   • Caws iam add-policy --role AppRole --policy AmazonS3ReadOnlyAccess is incorrect because this option does not provide the correct functionality for the described scenario.
   • Daws iam put-role-policy --role-name AppRole --policy-arn arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess is incorrect because this option does not provide the correct functionality for the described scenario.
6. Question 6Security

   A Lambda function deployed inside a VPC must reach Amazon DynamoDB without sending traffic over the public internet. Which solution achieves this?

   • AA Route 53 private hosted zone for dynamodb.amazonaws.com
   • BA VPC gateway endpoint for DynamoDB with routes added to the subnet route tablesCorrect
   • CAn internet gateway attached directly to the private subnet
   • DA public IP assigned to the Lambda function
   ✓ Correct answer: B

   A VPC gateway endpoint for DynamoDB with routes added to the subnet route tables is the correct choice because it directly addresses the scenario's requirements. This option provides the functionality and characteristics described in the question. Understanding the capabilities and use cases of AWS services is essential for designing solutions that meet specific business and technical requirements. When evaluating options, consider which service is purpose-built for the scenario and whether it integrates well with other components of your architecture.

   Why the other options are wrong

   • AA Route 53 private hosted zone for dynamodb.amazonaws.com is incorrect because this option does not provide the correct functionality for the described scenario.
   • CAn internet gateway attached directly to the private subnet is incorrect because this option does not provide the correct functionality for the described scenario.
   • DA public IP assigned to the Lambda function is incorrect because this approach sacrifices security; the correct option maintains security while meeting the requirements.
7. Question 7Deployment

   In a CodeDeploy appspec.yml for an ECS deployment, which section maps lifecycle event hooks to Lambda functions that validate the deployment?

   • APhases (install / build)
   • BResources (TargetService)
   • CMappings
   • DHooks (e.g., BeforeAllowTraffic / AfterAllowTraffic)Correct
   ✓ Correct answer: D

   AWS Lambda is an event-driven, serverless compute service that executes code in response to various triggers. Hooks (e.g., BeforeAllowTraffic / AfterAllowTraffic) represents a valid mechanism for triggering Lambda functions, as the service integrates with AWS services like API Gateway, S3, SQS, SNS, DynamoDB Streams, and EventBridge to automatically invoke functions when events occur. This event-driven architecture enables decoupled, scalable applications without the need to manage servers or write polling logic. Understanding which services can trigger Lambda is essential for designing efficient serverless workflows.

   Why the other options are wrong

   • APhases (install / build) is incorrect because this option does not provide the correct functionality for the described scenario.
   • BResources (TargetService) is incorrect because this option does not provide the correct functionality for the described scenario.
   • CMappings is incorrect because this option does not provide the correct functionality for the described scenario.
8. Question 8Deployment

   A pipeline must build a container image, push it to a registry, and have ECS pull it during deployment. Which AWS service stores the Docker images?

   • AAmazon S3 Glacier
   • BAmazon Elastic Container Registry (ECR)Correct
   • CAWS CodeCommit
   • DAmazon DynamoDB
   ✓ Correct answer: B

   Amazon Elastic Container Registry (ECR) is the correct choice because it directly addresses the scenario's requirements. This option provides the functionality and characteristics described in the question. Understanding the capabilities and use cases of AWS services is essential for designing solutions that meet specific business and technical requirements. When evaluating options, consider which service is purpose-built for the scenario and whether it integrates well with other components of your architecture.

   Why the other options are wrong

   • AAmazon S3 Glacier is incorrect because this option does not provide the correct functionality for the described scenario.
   • CAWS CodeCommit is incorrect because this option does not provide the correct functionality for the described scenario.
   • DAmazon DynamoDB is incorrect because this option does not provide the correct functionality for the described scenario.
9. Question 9Troubleshooting and Optimization

   A Lambda function intermittently fails with 'Task timed out' when calling a downstream service that occasionally responds slowly. The team wants resilience without indefinitely waiting. Which design change is most appropriate?

   • AIncrease the function memory to 10240 MB to fix the timeout
   • BSet the Lambda timeout to its 15-minute maximum and keep waiting
   • CRemove all timeouts so the call always completes
   • DSet a sensible client-side request timeout shorter than the Lambda timeout and retry with exponential backoffCorrect
   ✓ Correct answer: D

   A client-side timeout on the downstream service call (shorter than the overall Lambda timeout) ensures the Lambda function can complete or fail quickly if the service is slow. Exponential backoff retries handle transient slowness gracefully by retrying with increasing delays, improving resilience without indefinitely waiting. This design balances responsiveness with reliability.

   Why the other options are wrong

   • AIncrease the function memory to 10240 MB to fix the timeout is incorrect because memory does not control network or service response latency; it only increases CPU.
   • BSet the Lambda timeout to its 15-minute maximum and keep waiting is incorrect because waiting indefinitely wastes resources and cannot fix an inherently slow service.
   • CRemove all timeouts so the call always completes is incorrect because missing timeouts prevent the Lambda from ever failing, leading to resource exhaustion.
10. Question 10Troubleshooting and Optimization

    You created a CloudWatch alarm on a custom metric, but it sits in INSUFFICIENT_DATA because the metric is only reported when events occur. You want the alarm to treat missing data as healthy. What should you configure?

    • ASet the alarm's 'Treat missing data as' setting to notBreachingCorrect
    • BSwitch the metric to high-resolution
    • CDelete and recreate the SNS subscription
    • DLower the alarm threshold to zero
    ✓ Correct answer: A

    When a custom metric is only published during certain events, evaluation periods with no data will cause the alarm to enter INSUFFICIENT_DATA state. The 'Treat missing data as' setting allows specifying how to handle missing data: notBreaching treats it as normal (does not trigger alarm), breaching treats it as a threshold breach, and missing keeps it in INSUFFICIENT_DATA. Setting it to notBreaching allows the alarm to trigger only when data is actually present and breaches the threshold.

    Why the other options are wrong

    • BSwitch the metric to high-resolution is incorrect because resolution does not affect missing data handling.
    • CDelete and recreate the SNS subscription is incorrect because subscriptions do not affect missing data treatment.
    • DLower the alarm threshold to zero is incorrect because threshold value does not address missing data.

AWS DVA-C02 practice exam FAQ