Home
Amazon
DVA-C02: AWS Certified Developer - Associate Dumps

Free Amazon DVA-C02 Exam Dumps August 2026

Here you can find all the free questions related with Amazon AWS Certified Developer - Associate (DVA-C02) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Amazon AWS Certified Developer - Associate Exam. These premium versions are provided as DVA-C02 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the AWS Certified Developer - Associate Exam premium files for free, Good luck with your Amazon AWS Certified Developer - Associate Exam.

Question No: 1

MultipleChoice

An application that is hosted on an Amazon EC2 instance needs access to files that are stored in an Amazon S3 bucket. The application lists the objects that are stored in the S3 bucket and displays a table to the user. During testing, a developer discovers that the application does not show any objects in the list.

What is the MOST secure way to resolve this issue?

Options

AUpdate the IAM instance profile that is attached to the EC2 instance to include the S3:* permission for the S3 bucket.

BUpdate the IAM instance profile that is attached to the EC2 instance to include the S3:ListBucket permission for the S3 bucket.

CUpdate the developer's user permissions to include the S3:ListBucket permission for the S3 bucket.

DUpdate the S3 bucket policy by including the S3:ListBucket permission and by setting the Principal element to specify the account number of the EC2 instance.

Answer
BExplanation

IAM instance profiles are containers for IAM roles that can be associated with EC2 instances. An IAM role is a set of permissions that grant access to AWS resources. An IAM role can be used to allow an EC2 instance to access an S3 bucket by including the appropriate permissions in the role's policy. The S3:ListBucket permission allows listing the objects in an S3 bucket. By updating the IAM instance profile with this permission, the application on the EC2 instance can retrieve the objects from the S3 bucket and display them to the user. Reference:Using an IAM role to grant permissions to applications running on Amazon EC2 instances

Question No: 2

MultipleChoice

A developer is testing an application that invokes an AWS Lambda function asynchronously. During the testing phase the Lambda function fails to process after two retries.

How can the developer troubleshoot the failure?

Options

AConfigure AWS CloudTrail logging to investigate the invocation failures.

BConfigure Dead Letter Queues by sending events to Amazon SQS for investigation.

CConfigure Amazon Simple Workflow Service to process any direct unprocessed events.

DConfigure AWS Config to process any direct unprocessed events.

Answer
BExplanation

This solution allows the developer to troubleshoot the failure by capturing unprocessed events in a queue for further analysis. Dead Letter Queues (DLQs) are queues that store messages that could not be processed by a service, such as Lambda, for various reasons, such as configuration errors, throttling limits, or permissions issues. The developer can configure DLQs for Lambda functions by sending events to either an Amazon Simple Queue Service (SQS) queue or an Amazon Simple Notification Service (SNS) topic. The developer can then inspect the messages in the queue or topic to identify and fix the root cause of the failure. Configuring AWS CloudTrail logging will not capture invocation failures for asynchronous Lambda invocations, but only record API calls made by or on behalf of Lambda. Configuring Amazon Simple Workflow Service (SWF) or AWS Config will not process any direct unprocessed events, but require additional integration and configuration.

Question No: 3

MultipleChoice

A developer needs to retrieve all data from an Amazon DynamoDB table that matches a particular partition key.

Which solutions will meet this requirement in the MOST operationally efficient way? (Select TWO.)

Options

AUse the Scan API and a filter expression to match on the key.

BUse the GetItem API with a request parameter for key that contains the partition key name and specific key value.

CUse the ExecuteStatement API and a filter expression to match on the key.

DUse the GetItem API and a PartiQL statement to match on the key.

EUse the ExecuteStatement API and a PartiQL statement to match on the key.

Answer
B, E

Question No: 4

MultipleChoice

Which configuration would be optimal for ensuring high availability in a distributed system?

Options

ADatabase Management System

BAll of the above

CNone of the above

DThis approach is not recommended

Answer
AExplanation

To create a central logging solution for microservices, using Amazon CloudWatch Logs is a recommended and effective approach. Here's why:

Amazon CloudWatch Logs Streams allow you to centralize logs from different services, which is crucial as the number of microservices increases.

Each microservice can have its own dedicated log stream within Amazon CloudWatch Logs, providing clear segregation of logs while still allowing centralized management.

This setup enables developers to monitor, search, and analyze logs efficiently using tools like CloudWatch Insights.

Other options like CloudTrail (B) are designed for API activity monitoring, not application logs. VPC Flow Logs (C) focus on network traffic rather than application behavior. AWS Cloud Map (D) is for service discovery and routing, not logging.

Reference: AWS CloudWatch Logs documentation

Question No: 5

MultipleChoice

How should a company address performance bottlenecks in their microservices deployment?

Options

ANone of these answers is correct

BAll of the above

CNone of the above

DEstablish backup procedures

Answer
DExplanation

To meet the requirement:

Users must be able to upload (PutObject) and read (GetObject) files but not delete them.

Option D ensures users cannot delete files by omitting the s3:DeleteObject action while allowing s3:GetObject and s3:PutObject.

Option A: Includes s3:DeleteObject, which allows users to delete files and does not meet the requirement.

Option B: Contains unrelated actions like CreateBucket, which is not relevant here.

Option C: Adds s3:PutObjectRetention, which is unnecessary and does not restrict DeleteObject.

Reference: AWS S3 Permissions Documentation

Question No: 6

MultipleChoice

What is the correct procedure for conducting due diligence on a potential acquisition target?

Options

ANone of these answers is correct

BAll of the above

CNone of the above

DEstablish backup procedures

Answer
DExplanation

Secrets Management:AWS Secrets Manager is designed specifically for storing and managing sensitive credentials.

Environment Isolation:Creating separate secrets for each environment (development, staging, etc.) ensures clear separation and prevents accidental leaks.

Automatic Rotation:Secrets Manager provides built-in rotation capabilities, enhancing security posture.

AWS Secrets Manager:https://aws.amazon.com/secrets-manager/

Secrets Manager Rotation:https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html

Question No: 7

MultipleChoice

Which steps should be followed when implementing a new risk management framework?

Options

ANone of these answers is correct

BImplement security policies

CNone of the above

DThis approach is not recommended

Answer
BExplanation

Problem: Large bundle size increases Lambda deployment time.

Lambda Layers: Layers let you package dependencies separately from your function code. This optimizes the deployment package, making updates faster.

Modularization: Breaking down dependencies into layers improves code organization and reusability.

AWS Lambda Layers:https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html

Question No: 8

MultipleChoice

A developer is managing an application that uploads user files to an Amazon S3 bucket named companybucket. The company wants to maintain copies of all the files uploaded by users for compliance purposes, while ensuring users still have access to the data through the application.

Which IAM permissions should be applied to users to ensure they can create but not remove files from the bucket?

Options

Ajson
Copy code
{
'Version': '2012-10-17',
'Statement': [
{
'Sid': 'statement1',
'Effect': 'Allow',
'Action': ['s3:GetObject', 's3:PutObject', 's3:DeleteObject'],
'Resource': ['arn:aws:s3:::companybucket']
}
]
}

Bjson
Copy code
{
'Version': '2012-10-17',
'Statement': [
{
'Sid': 'statement1',
'Effect': 'Allow',
'Action': ['s3:CreateBucket', 's3:GetBucketLocation'],
'Resource': 'arn:aws:s3:::companybucket'
}
]
}

Cjson
Copy code
{
'Version': '2012-10-17',
'Statement': [
{
'Sid': 'statement1',
'Effect': 'Allow',
'Action': ['s3:GetObject', 's3:PutObject', 's3:DeleteObject', 's3:PutObjectRetention'],
'Resource': 'arn:aws:s3:::companybucket'
}
]
}

Djson
Copy code
{
'Version': '2012-10-17',
'Statement': [
{
'Sid': 'statement1',
'Effect': 'Allow',
'Action': ['s3:GetObject', 's3:PutObject'],
'Resource': ['arn:aws:s3:::companybucket']
}
]
}

Answer
DExplanation

To meet the requirement:

Users must be able to upload (PutObject) and read (GetObject) files but not delete them.

Option D ensures users cannot delete files by omitting the s3:DeleteObject action while allowing s3:GetObject and s3:PutObject.

Option A: Includes s3:DeleteObject, which allows users to delete files and does not meet the requirement.

Option B: Contains unrelated actions like CreateBucket, which is not relevant here.

Option C: Adds s3:PutObjectRetention, which is unnecessary and does not restrict DeleteObject.

Reference: AWS S3 Permissions Documentation

Question No: 9

MultipleChoice

A gaming application stores scores for players in an Amazon DynamoDB table that has four attributes: user_id, user_name, user_score, and user_rank. The users are allowed to update their names only. A user is authenticated by web identity federation.

Which set of conditions should be added in the policy attached to the role for the dynamodb:PutItem API call?

Options

A'Condition': {
'ForAllValues:StringEquals': {
'dynamodb:LeadingKeys': ['${www.amazon.com:user_id}'],
'dynamodb:Attributes': ['user_name']
}
}

B'Condition': {
'ForAllValues:StringEquals': {
'dynamodb:LeadingKeys': ['${www.amazon.com:user_name}'],
'dynamodb:Attributes': ['user_id']
}
}

C'Condition': {
'ForAllValues:StringEquals': {
'dynamodb:LeadingKeys': ['${www.amazon.com:user_id}'],
'dynamodb:Attributes': ['user_name', 'user_id']
}
}

D'Condition': {
'ForAllValues:StringEquals': {
'dynamodb:LeadingKeys': ['${www.amazon.com:user_name}'],
'dynamodb:Attributes': ['username', 'userid']
}
}

Answer
AExplanation

The correct policy condition ensures that:

The LeadingKeys condition restricts operations to the authenticated user's user_id.

The Attributes condition limits the updatable attributes to user_name.

Explanation of Choices:

Option A: Correctly enforces both the key restriction (dynamodb:LeadingKeys) and ensures only the user_name attribute can be updated.

Option B, C, D: Use incorrect conditions, such as referencing user_name in the LeadingKeys or including other attributes like user_id in updatable fields.

Reference: AWS DynamoDB Condition Keys Documentation

Question No: 10

MultipleChoice

A company is using AWS CioudFormation to deploy a two-tier application. The application will use Amazon RDS as its backend database. The company wants a solution that will randomly generate the database password during deployment. The solution also must automatically rotate the database password without requiring changes to the application.

What is the MOST operationally efficient solution that meets these requirements'?

Options

AUse an AWS Lambda function as a CloudFormation custom resource to generate and rotate the password.

BUse an AWS Systems Manager Parameter Store resource with the SecureString data type to generate and rotate the password.

CUse a cron daemon on the application s host to generate and rotate the password.

DUse an AWS Secrets Manager resource to generate and rotate the password.

Answer
DExplanation

This solution will meet the requirements by using AWS Secrets Manager, which is a service that helps protect secrets such as database credentials by encrypting them with AWS Key Management Service (AWS KMS) and enabling automatic rotation of secrets. The developer can use an AWS Secrets Manager resource in AWS CloudFormation template, which enables creating and managing secrets as part of a CloudFormation stack. The developer can use an AWS::SecretsManager::Secret resource type to generate and rotate the password for accessing RDS database during deployment. The developer can also specify a RotationSchedule property for the secret resource, which defines how often to rotate the secret and which Lambda function to use for rotation logic. Option A is not optimal because it will use an AWS Lambda function as a CloudFormation custom resource, which may introduce additional complexity and overhead for creating and managing a custom resource and implementing rotation logic. Option B is not optimal because it will use an AWS Systems Manager Parameter Store resource with the SecureString data type, which does not support automatic rotation of secrets. Option C is not optimal because it will use a cron daemon on the application's host to generate and rotate the password, which may incur more costs and require more maintenance for running and securing a host.

Question No: 11

MultipleChoice

An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket. In accordance with the principle of least privilege a company grants access to the S3 bucket by using only temporary credentials.

How can a developer configure access to me S3 bucket in the MOST secure way?

Options

AHardcode the credentials that are required to access the S3 objects in the application code. Use the credentials to access me required S3 objects.

BCreate a secret access key and access key ID with permission to access the S3 bucket. Store the key and key ID in AWS Secrets Manager. Configure the application to retrieve the Secrets Manager secret and use the credentials to access me S3 objects.

CCreate a Lambda function execution role Attach a policy to the rote that grants access to specific objects in the S3 bucket.

DCreate a secret access key and access key ID with permission to access the S3 bucket Store the key and key ID as environment variables m Lambda. Use the environment variables to access the required S3 objects.

Answer
CExplanation

This solution will meet the requirements by creating a Lambda function execution role, which is an IAM role that grants permissions to a Lambda function to access AWS resources such as Amazon S3 objects. The developer can attach a policy to the role that grants access to specific objects in the S3 bucket that are required by the application, following the principle of least privilege. Option A is not optimal because it will hardcode the credentials that are required to access S3 objects in the application code, which is insecure and difficult to maintain. Option B is not optimal because it will create a secret access key and access key ID with permission to access the S3 bucket, which will introduce additional security risks and complexity for storing and managing credentials. Option D is not optimal because it will store the secret access key and access key ID as environment variables in Lambda, which is also insecure and difficult to maintain.

Limited Time Offer

25%

Off

Get Premium DVA-C02 Questions as Interactive Web-Based Practice Test or PDF