Free Practice Amazon DVA-C02 Exam Questions 2025

Stay ahead with 100% Free AWS Certified Developer Associate DVA-C02 Dumps Practice Questions

Page: 1 / 188

Total 939 Questions | Updated On: Mar 28, 2025

Add To Cart

Question 1

An application running on Amazon EC2 is experiencing intermittent technical difficulties. The developer needs to find a solution for tracking the errors that occur in the application logs and setting up a notification when the error rate exceeds a certain threshold.

How can this be achieved with the LEAST complexity?

A : Configure Amazon CloudWatch Events to monitor the EC2 instances and configure an SNS topic as a target

B : Use CloudTrail to monitor the application log files and send an SNS notification

C : Use CloudWatch Logs to track the number of errors that occur in the application logs and send an SNS notification

D : Configure the application to send logs to Amazon S3. Use Amazon Kinesis Analytics to analyze the log files and send an SES notification

Answer: C

Question 2

A company uses Amazon API Gateway to expose a set of APIs to customers. The APIs have caching enabled in API Gateway. Customers need a way to invalidate the cache for each API when they test the API.

What should a developer do to give customers the ability to invalidate the API cache?

A : Ask the customers to use AWS credentials to call the InvalidateCache API operation.

B : Attach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to send a request that contains the Cache-Control:max-age=0 HTTP header when they make an API call.

C : Ask the customers to use the AWS SDK API Gateway class to invoke the InvalidateCache API operation.

D : Attach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to add the INVALIDATE_CACHE query string parameter when they make an API call.

Answer: D

Question 3

A company requires that all applications running on Amazon EC2 use IAM roles to gain access to AWS services. A developer is modifying an application that currently relies on IAM user access keys stored in environment variables to access Amazon DynamoDB tables using boto, the AWS SDK for Python.

The developer associated a role with the same permissions as the IAM user to the EC2 instance, then deleted the IAM user. When the application was restarted, the AWS AccessDeniedException messages started appearing in the application logs. The developer was able to use their personal account on the server to run DynamoDB API commands using the AWS CLI.

What is the MOST likely cause of the exception?

A : IAM policies might take a few minutes to propagate to resources.

B : Disabled environment variable credentials are still being used by the application.

C : The AWS SDK does not support credentials obtained using an instance role.

D : The instance’s security group does not allow access to http://169.254.169.254.

Answer: B

Question 4

A company notices that credentials that the company uses to connect to an external software as a service (SaaS) vendor are stored in a configuration file as plaintext.

The developer needs to secure the API credentials and enforce automatic credentials rotation on a quarterly basis.

Which solution will meet these requirements MOST securely?

A : Use AWS Key Management Service (AWS KMS) to encrypt the configuration file. Decrypt the configuration file when users make API calls to the SaaS vendor. Enable rotation.

B : Retrieve temporary credentials from AWS Security Token Service (AWS STS) every 15 minutes. Use the temporary credentials when users make API calls to the SaaS vendor.

C : Store the credentials in AWS Secrets Manager and enable rotation. Configure the API to have Secrets Manager access.

D : Store the credentials in AWS Systems Manager Parameter Store and enable rotation. Retrieve the credentials when users make API calls to the SaaS vendor.

Answer: C

Question 5

A team of Developers are building a continuous integration and delivery pipeline using AWS Developer Tools. Which services should they use for running tests against source code and installing compiled code on their AWS resources? (Select TWO.)

A : AWS CodeDeploy for installing compiled code on their AWS resources

B : AWS CodePipeline for running tests against source code

C : AWS Cloud9 for running tests against source code

D : AWS CodeCommit for installing compiled code on their AWS resources

E : AWS CodeBuild for running tests against source code

Answer: A

Page: 1 / 188

Total 939 Questions | Updated On: Mar 28, 2025

Add To Cart