DVA-C02PRACTICE QUESTIONS

DVA-C02 practice questions with answers

13 example questions from the AWS Certified Developer - Associate question bank, grouped by exam domain. Pick an answer and check it to see the explanation.

Development with AWS Services

The Development with AWS Services domain covers creating applications using AWS services like Lambda, DynamoDB, and API Gateway. It focuses on understanding the core services, designing scalable applications, and leveraging AWS SDKs.

Question 1Select 1

Task 1.1 Develop code for applications hosted on AWS

You are developing a real-time analytics application that processes a large stream of data from social media interactions. Your application must ingest this streaming data, process messages in an ordered sequence, and then store processed data into a data warehouse for querying. You've decided to use Amazon Kinesis Data Streams for data ingestion and AWS SDK in your application to interact with the Kinesis stream. Which approach using AWS SDK should you employ to ensure that your application processes the incoming streaming data in order and without loss even in a distributed application scenario?

A. Use the Kinesis Client Library (KCL) with AWS SDK to process data records from a Kinesis Data Stream while taking advantage of the built-in checkpointing feature to maintain sequence and fault tolerance.

B. Deploy a separate Amazon EC2 instance that polls the Kinesis Data Stream in a round-robin fashion using AWS SDK to process the streaming data.

C. Create a Lambda function triggered by Kinesis Data Stream events and use AWS SDK to write code that stores checkpoints in Amazon RDS for ordered message processing.

D. Implement an Amazon SQS FIFO (First-In-First-Out) queue to buffer messages from the Kinesis Data Stream, using the AWS SDK for message processing orchestration.

Question 2Select 1

Task 1.2 Develop code for AWS Lambda

You are developing a Lambda function that is critical for your real-time data processing pipeline. In testing, you notice that the first invocation of the function after a period of inactivity exhibits a significantly longer latency due to a cold start. Which of the following strategies can minimize the impact of cold starts on your Lambda function's performance?

A. Increase the memory allocation for the Lambda function to reduce cold start time.

B. Schedule a recurring CloudWatch Events rule to invoke the function periodically during periods of inactivity.

C. Decrease the size of the deployment package by removing unused dependencies.

D. Reduce the function's timeout setting to the lowest value possible.

Question 3Select 1

Task 1.3 Use data stores in application development

A company that provides streaming video services wants to optimize data storage costs by managing the lifecycle of their user activity logs. They have an Amazon Redshift cluster where they accumulate this data for analysis. Given that the relevance of the data decreases over time, they have decided to define a data lifecycle policy that keeps granular logs for 60 days for immediate queries and aggregate summary data for up to 2 years for historical trends. After 60 days, the logs should be removed from Amazon Redshift and stored in a more cost-effective service. Which AWS service should they use to manage this lifecycle transition seamlessly while still being able to query the data using their currently existing SQL-based tools?

A. Use Amazon Redshift Spectrum to query the historical data stored in Amazon S3, and set up S3 lifecycle policies to transition the older data to S3 Glacier for cost-effective storage.

B. Enable Amazon Redshift data durability feature to automatically transition older data to Amazon EFS for long-term storage and query capabilities.

C. Implement an Amazon Elastic MapReduce (EMR) cluster to archive the data to Amazon S3 and use Amazon Athena for the historical queries.

D. Use Amazon DynamoDB with TTL to archive the logs after 60 days and transfer them to Amazon EBS for historical analysis.

Security

The Security domain emphasizes securing AWS applications. It covers IAM roles, policies, encryption, secure application endpoints, and managing sensitive data. Candidates learn to implement best practices for robust security in AWS environments.

Question 1Select 1

Task 2.1 Implement authentication and/or authorization for applications and AWS services

A developer is building a mobile application that uses Amazon Cognito for user authentication. The application allows users to access certain AWS services directly from their devices. The developer wants to ensure that authenticated users have the necessary permissions to call AWS services directly while maintaining the principle of least privilege. Which of the following options should the developer use to define permissions for these users?

A. Create an IAM role with the necessary permissions and associate it with the Cognito Identity Pool to create a role-based access policy for authenticated users.

B. Store AWS Access Keys within the application code and use them to grant permissions to authenticated users.

C. Use Cognito User Pools group roles to assign permissions directly to users authenticated through the user pool.

D. Create separate IAM users for each authenticated user and attach user-specific permission policies.

Question 2Select 1

Task 2.2 Implement encryption by using AWS services

A company that focuses on medical data analysis is planning to maintain regulatory compliance by replicating their S3 buckets across AWS regions. They are required by law to ensure that all data, both at rest and in transit, is encrypted. They have set up an S3 bucket in the US East (N. Virginia) region and want to replicate its contents to another S3 bucket in the EU (Ireland) region. Given that they use different AWS accounts for each region to segregate their workloads, what is the correct method for setting up S3 Cross-Region Replication (CRR) with encryption between the two accounts ensuring compliance?

A. Use AWS Key Management Service (KMS) to create a customer master key (CMK) in the source account, and grant the destination account's principal explicit permission to use the CMK. Enable S3 CRR with KMS-encrypted objects, specifying the CMK's ARN.

B. Share the S3 bucket from the source account with the destination account using S3's bucket policy, and rely on the destination account's KMS keys for encryption.

C. Replicate the data to the destination region's S3 bucket using S3 CRR and then use a Lambda function in the destination account to copy objects and encrypt them with a region-specific KMS key post-replication.

D. Enable S3 CRR without setting any encryption on the source bucket and rely on the default S3 encryption in the destination bucket to encrypt the replicated objects automatically.

Question 3Select 1

Task 2.3 Manage sensitive data in application code

Your development team is working on an application that stores sensitive user data. You want to ensure that any sensitive data stored in your AWS environment is encrypted at rest and you've decided to use AWS Key Management Service (KMS) to manage the encryption keys. Your application will store data in Amazon RDS and Amazon S3, and you want to rotate the encryption keys automatically on a regular basis without service interruption. Which of the following options enables you to achieve this while ensuring the security of your encryption keys?

A. Enable automatic key rotation for the AWS managed customer master key (CMK) used to encrypt the data.

B. Create a new customer managed CMK for each user to encrypt their data and manually rotate them every month.

C. Store all encryption keys on the application server and implement a cron job to rotate the keys manually on the server.

D. Use the default service-managed encryption keys in Amazon RDS and S3 and rely on the services to rotate them automatically.

Deployment

The Deployment domain focuses on deploying and managing AWS applications. It includes topics like CI/CD pipelines, Elastic Beanstalk, CloudFormation, CodeDeploy, and automating deployment processes to ensure efficient, scalable application delivery.

Question 1Select 1

Task 3.1 Prepare application artifacts to be deployed to AWS

A development team is preparing to deploy a containerized microservices-based application on AWS. To ensure a simplified scaling and serverless experience, the team has decided to use AWS Fargate for deploying their Docker containers. One of the microservices, which performs complex image processing tasks, requires substantially higher compute and memory resources than the other services. How should the developer specify the appropriate amount of CPU and memory resources for this service when creating a task definition in AWS Fargate?

A. Use task size to specify the CPU and memory requirements for the image processing microservice within its task definition.

B. Assign an Elastic Load Balancer to distribute the load evenly across multiple instances of the microservice, effectively handling the resource requirements.

C. Manually adjust the EC2 instance size to meet the CPU and memory demands of the image processing microservice.

D. Use Auto Scaling groups to automatically adjust the memory and CPU of the image processing microservice based on demand.

Question 2Select 1

Task 3.2 Test applications in development environments

As a developer working on an application, you've been using AWS SAM templates to define your serverless architecture, and your team uses AWS CodeBuild for continuous integration. Your application has successfully reached the staging phase in your development lifecycle, and you are tasked with deploying an update to the application stack in this existing environment. The update has already been tested locally and is now stored in a feature branch in your repository. What is the best approach to use AWS CodeBuild to deploy the AWS SAM template update to the different staging environment?

A. Set up a new AWS CodeBuild project that is triggered by a commit to the feature branch. This project should use a buildspec.yml file to execute AWS SAM commands to package and deploy the SAM template to the staging environment.

B. Use AWS CodeBuild to compile the code and then manually deploy the AWS SAM template from your local machine to the staging environment using the AWS CLI.

C. Directly execute the AWS SAM deploy command from your local machine in the CI/CD pipeline and bypass AWS CodeBuild.

D. Manually upload the updated AWS SAM template to the AWS CodeBuild project and start a build to deploy the updates to the staging environment.

Question 3Select 1

Task 3.3 Automate deployment testing

You are an AWS Certified Developer working on a web application that leverages Amazon RDS for its database layer. Your team has separate environments for development, testing, and production. To ensure consistent deployments and automated testing, you have scripted the deployment process using AWS CloudFormation templates. Recently, a new requirement has been added to maintain database integrity and data isolation between environments. Which of the following approaches BEST satisfies this requirement while allowing for automated testing?

A. Use AWS CloudFormation to create and manage separate Amazon RDS instances for each environment with specific environment parameters, and configure them with distinct database names or configurations.

B. Use AWS Elastic Beanstalk to automatically clone the production environment for development and testing, including the Amazon RDS instance.

C. Connect all environments to a single Amazon RDS instance but use different database user accounts to differentiate between environments.

D. Manually copy the production RDS instance to development and testing environments after each deployment to maintain data consistency across environments.

Question 4Select 1

Task 3.4 Deploy code by using AWS CI/CD services

A company has developed a microservices architecture where each service is containerized and needs to be deployed on Amazon Elastic Kubernetes Service (Amazon EKS). The team wants to use AWS native CI/CD services to automate the deployment process, ensuring that code changes are systematically deployed to a development environment before being promoted to production. The development team is looking to implement an orchestrated workflow that would allow them to deploy their containerized applications to multiple environments with minimal intervention. Which AWS service should they use to best manage their CI/CD pipeline with orchestrated workflows for deploying code to Amazon EKS?

A. AWS CodePipeline

B. AWS CodeCommit

C. AWS CodeBuild

D. AWS CloudFormation

Troubleshooting and Optimization

The Troubleshooting and Optimization domain covers diagnosing and resolving issues in AWS applications. It includes performance tuning, monitoring with CloudWatch, debugging, error handling, and cost optimization to enhance efficiency and reliability.

Question 1Select 1

Task 4.1 Assist in a root cause analysis

A developer is troubleshooting a deployment failure in an AWS Step Functions state machine that orchestrates multiple AWS Lambda functions. The state machine execution fails, and the developer needs to determine the cause of this failure. When examining the output logs, the developer notices that one of the Lambda functions that is being called from a Task state fails intermittently. While the Lambda function execution logs in Amazon CloudWatch Logs do not show any error messages, the CloudWatch metrics for the function indicate sporadic spikes in throttling errors. What does this indicate as the most probable cause of the deployment failure?

A. The Lambda function may be exceeding its concurrency limits, causing it to be throttled and intermittently fail when the state machine tries to invoke it.

B. The IAM role associated with the Lambda function lacks necessary permissions to execute the function.

C. The API Gateway that triggers the Lambda function has reached its rate limit, leading to the Lambda function triggering failures.

D. The AWS Step Functions state machine's definition is incorrect and causing the failure.

Question 2Select 1

Task 4.2 Instrument code for observability

A development team is working on an e-commerce application hosted on AWS. The application includes a microservices architecture with each service interacting with various AWS resources. The team wants to implement a tracing solution that allows them to analyze and debug the performance of their application, specifically focusing on individual user requests as they traverse through the services and segment documents based on the components of the application that processed them. Which AWS service or tool should the team use to achieve this level of granularity in tracing?

A. AWS X-Ray

B. AWS CloudTrail

C. Amazon Simple Notification Service (SNS)

D. Amazon CloudWatch Logs

Question 3Select 1

Task 4.3 Optimize applications by using AWS services and features

Your application is hosted on AWS and serves international customers with content that varies based on the Accept-Language request header. You want to leverage Amazon CloudFront to cache different versions of the content efficiently to optimize response times for users worldwide. To ensure that CloudFront caches the content based on the language requested by the user browsers, which configuration should you implement?

A. Configure CloudFront to forward the 'Accept-Language' header to your origin and use the 'Vary' header to cache the content based on the languages.

B. Configure CloudFront to forward all headers to your origin server, as it will provide the most flexibility in handling requests.

C. Configure CloudFront to ignore query strings and headers, which will serve cached content faster regardless of the 'Accept-Language' header sent by clients.

D. Disable the cache by setting the 'Cache-Control' to 'no-cache', ensuring every request hits the origin server to get content in the correct language.

PRACTICE EXAMDVA-C02 exam simulator

3787 questions covering every domain and task, full-length exams, explanations for every answer and a pass probability indicator.

Open the simulator →