AWS Developer Associate (DVA-C02) - Full Practice Exam 1

1. A browser API request succeeds from a command-line client but fails CORS checks. The browser sends a preflight request and the API uses credentials. Which correction is appropriate?
2. A browser should upload directly to a private S3 bucket without receiving AWS secret keys. The backend authorizes a particular object upload for a short period. Which mechanism fits?
3. A build needs packages from a private CodeArtifact repository. What access approach is appropriate for its automated build identity?
4. A CloudWatch alarm never changes state even though the application publishes a custom metric. The alarm uses a different dimension value. What should the developer inspect?
5. A CodeBuild project needs an API credential during its build. The credential must not appear in the buildspec or ordinary logs. Which approach is appropriate?
6. A container release must deploy exactly the image tested in CI even if a mutable tag is later reused. Which artifact reference best supports this?
7. A custom metric uses a unique request ID as a dimension and creates a very large number of time series. Which change should be evaluated?
8. A deployment must keep environment-specific database endpoints separate from application code. Secrets require stronger protection than ordinary configuration. Which approach is suitable?
9. A developer needs a reversible feature rollout without deploying a new binary for each percentage change. The application can poll managed configuration. Which service feature is a suitable fit?
10. A DynamoDB BatchWriteItem response contains UnprocessedItems during a traffic spike. The application must complete the logical batch without resending every successful write. Which behaviors are appropriate? Select 2 answers.
11. A DynamoDB optimistic update fails its expected-version condition because another request changed the item. What should the application do?
12. A DynamoDB query reads many items but a FilterExpression returns only a few. The developer wants to reduce read work for this access pattern. Which statement is correct?
13. A DynamoDB Query returns a LastEvaluatedKey. The application needs every matching item, including when a page has few returned records. What should the developer do?
14. A DynamoDB write has just completed. A Query against a global secondary index briefly does not return the item. The application requested immediate visibility. What should the developer account for?
15. A function is invoked asynchronously and sometimes fails. The team needs invocation outcome information sent to a supported destination after retries are exhausted. Which feature should it configure?
16. A handler times out while waiting for a downstream HTTP call with no client deadline. Retries can repeat writes. Which changes are appropriate? Select 2 answers.
17. A Lambda CodeDeploy release must run validation hooks and detect failures before completing alias traffic shifting. Which configuration elements are relevant? Select 2 answers.
18. A Lambda consumer reads SQS batches. One record fails after the others succeed, and downstream writes must not duplicate during retries. Which implementation choices are appropriate? Select 2 answers.
19. A Lambda CPU-heavy transformation may benefit from additional CPU allocation associated with memory configuration. How should the developer choose a setting?
20. A Lambda function attached to a private VPC subnet times out when calling a public external API. Its code works outside the VPC. Which existing environment configuration should the developer investigate?
21. A Lambda function calls DynamoDB on every invocation. Connection setup dominates latency. Invocations may reuse an execution environment. Which implementation reduces repeated setup while avoiding shared user state?
22. A Lambda function logs request failures, but engineers cannot connect one user request across multiple services. Which instrumentation best supports distributed diagnosis?
23. A Lambda function must retrieve a rotating database credential. The developer wants to avoid hard-coding the password and avoid indefinite use of a stale cached value. Which approach is best?
24. A Lambda function needs an API secret in configuration. The team wants access limited to the workload and no secret in source control. Which approach is appropriate?
25. A Lambda layer update introduces an incompatible library. The team needs reproducible rollback for functions using the layer. Which release practice is appropriate?
26. A Lambda worker must never exceed 20 concurrent invocations because its database has limited capacity. It does not require preinitialized environments. Which configuration directly enforces this limit?
27. A latency-sensitive Lambda alias has unpredictable initialization delays after idle periods. The application needs initialized environments ready before traffic arrives. Which feature directly addresses this requirement?
28. A new feature causes errors but the previous code release remains compatible. The feature is controlled through validated runtime configuration. What is the fastest appropriate mitigation to evaluate?
29. A new X-Ray integration produces no traces from a workload that should be instrumented. Which checks are relevant? Select 2 answers.
30. A private application uses a VPC endpoint for S3. Requests fail due to an endpoint-policy deny even though its role allows the bucket. Which statement is correct?
31. A private S3 bucket should remain inaccessible to public principals even if a developer accidentally adds a public policy. Which control should be evaluated?
32. A production handler logs complete HTTP headers, request payloads, and database credentials during debugging. Which changes reduce credential exposure while retaining useful diagnostics? Select 2 answers.
33. A production Lambda alias must keep invoking the same immutable release while developers update $LATEST. Which target should the alias reference?
34. A Python Lambda works locally but raises an import error in AWS because a third-party package was not included. What should the developer fix?
35. A SAM application is deployed to test and production using the same source. Resource names and configuration differ by environment. Which approach supports repeatable deployment?
36. A SAM developer runs an API locally and all unit tests pass. What remains necessary before relying on the release in AWS?
37. A service in account A must assume a restricted role in account B. Which permissions form the normal cross-account assumption path? Select 2 answers.
38. A Step Functions Standard workflow submits a human-review request and must resume only after the authorized review completes. Which implementation choices fit the callback pattern? Select 2 answers.
39. A third-party SaaS provider assumes a customer AWS role on behalf of many customers. The customer wants to mitigate the confused-deputy risk. Which control is appropriate?
40. A topic publishes order events to several SNS subscriptions. One consumer needs only events marked region=eu and type=refund. The developer wants the topic to filter delivery. What should be configured?
41. A trace shows most request latency inside one downstream service call, while local handler computation is brief. Which investigation follows the evidence?
42. A user can authenticate successfully, but the API must also enforce access to only that user records. Which control belongs in the application authorization path?
43. A web app needs customer registration and sign-in, while another component needs temporary AWS credentials for authorized users. Which distinction is correct?
44. An API Gateway client receives HTTP 429 after request volume increases. The API logs show throttling rather than an application exception. Which response is appropriate?
45. An API Gateway Lambda proxy integration returns a Python object directly, and clients receive a malformed-response error. Which response change should the developer make?
46. An API receives a JWT from a Cognito user pool and must decide whether to accept it for its configured authorization flow. Which checks are necessary? Select 2 answers.
47. An application calls an AWS API that uses Signature Version 4. What should the developer normally use to avoid implementing signing details manually?
48. An application encrypts large documents using envelope encryption. Which statements correctly describe the roles of KMS and the data key? Select 2 answers.
49. An application must debit one DynamoDB item and credit another atomically. It also needs bounded retries without applying the transfer twice. Which choices support this? Select 2 answers.
50. An application retrieves a Systems Manager Parameter Store SecureString encrypted with a customer managed key. Which access is required to obtain the plaintext through the supported API?
51. An application running on EC2 uses long-lived AWS keys in a config file. It needs temporary credentials without per-instance key rotation. Which change is appropriate?
52. An application uploads large S3 objects over unreliable links. Retrying an entire object is expensive, and abandoned attempts accumulate storage charges. Which approach best addresses both concerns?
53. An Elastic Beanstalk application has a tested replacement environment. The team wants a controlled environment cutover while retaining the old environment for recovery. Which supported mechanism should it evaluate?
54. An EventBridge rule should match application events from source shop.orders whose detail.status is failed. Which implementation best meets the requirement?
55. An existing CI workflow packages an application. The developer must prevent regressions and ensure the tested artifact is the one deployed. Which practices meet this goal? Select 2 answers.
56. An existing deployment pipeline must shift a small fraction of Lambda alias traffic to a new version and roll back on elevated errors. Which choices support this release? Select 2 answers.
57. An IAM identity policy allows an operation, but an applicable resource policy explicitly denies the same request. What is the expected authorization result?
58. An S3 download fails for an SSE-KMS object despite an s3:GetObject allow. No explicit denies exist. Which additional authorization is relevant?
59. An SDK-based application is throttled by DynamoDB during short traffic spikes. Which retry behavior is appropriate for retryable throttling responses?
60. An SQS FIFO consumer processes independent orders. Events for the same order must remain ordered, while unrelated orders should process concurrently. Which message-group strategy is suitable?
61. Application logs include structured request_id, error_code, and duration fields. An engineer needs the most frequent error codes during the last hour. Which tool is the most direct fit?
62. Before executing a CloudFormation update, a developer must review whether a resource will be replaced. Which operation provides the relevant proposed-change review?
63. EventBridge matches a rule, but its Lambda target receives no invocations because invocation permission is missing. Which permission is normally relevant?
64. SigV4 requests fail from one client with a signing-time error, while the same credentials work elsewhere. Which client condition should be checked?
65. Two requests try to create the same DynamoDB business record. Only one should succeed, with no separate read-before-write race. Which operation is appropriate?

Comments — 0