View Full Amazon AWS Certified Developer – Associate DVA-C02 Exam Dumps and Practice Test Dumps.

 

Question 221

A developer needs to configure a Lambda function so that a successful asynchronous invocation sends its result to another service. Which Lambda feature should be used?

1. Reserved concurrency
2. Lambda layers
3. Lambda destinations
4. Provisioned concurrency

Correct Answer: 3

Explanation

Lambda destinations allow developers to configure where the result of an asynchronous invocation should be sent after processing. Destinations can be configured for successful or failed executions and can integrate with supported AWS services such as SNS, SQS, EventBridge, or another Lambda function. This provides a useful way to build event-driven workflows without implementing custom result-handling logic inside the function. Reserved concurrency controls execution limits, layers package reusable dependencies, and provisioned concurrency keeps execution environments initialized. Lambda destinations are therefore appropriate when the result of an asynchronous invocation needs to be routed automatically.

Question 222

A developer wants to prevent an application from exceeding the provisioned throughput of a DynamoDB table during a temporary traffic spike. Which mechanism can help handle rejected requests?

1. Exponential backoff and retry
2. S3 lifecycle rules
3. CloudFront invalidation
4. Lambda layers

Correct Answer: 1

Explanation

DynamoDB can throttle requests when application traffic exceeds available capacity or other service limits. Applications should handle throttling gracefully by retrying transient failures with exponential backoff and preferably jitter. Increasing the delay between retries gives DynamoDB time to recover and reduces the possibility that many clients will immediately retry together. S3 lifecycle rules manage object storage, CloudFront invalidation removes cached content, and Lambda layers package dependencies. Retry logic is therefore an important application-side technique for handling temporary DynamoDB throttling and improving resilience during traffic spikes.

Question 223

A developer needs to provide an application with a stable endpoint that points to a specific published Lambda function version. Which feature should be used?

1. Lambda layer
2. Lambda alias
3. Lambda destination
4. Event source mapping

Correct Answer: 2

Explanation

A Lambda alias provides a stable name that points to a specific published Lambda function version. Instead of changing client applications whenever a new version is deployed, developers can update the alias to reference the desired version. Aliases can also support weighted routing for controlled deployments. Lambda layers package shared dependencies, destinations route asynchronous invocation results, and event source mappings connect Lambda to supported event sources. An alias is therefore useful when applications need a stable reference while developers manage different published versions of a Lambda function.

Question 224

A developer wants to encrypt sensitive values stored in AWS Systems Manager Parameter Store. Which parameter type should be used?

1. StringList
2. String
3. SecureString
4. Binary

Correct Answer: 3

Explanation

The SecureString parameter type in AWS Systems Manager Parameter Store is designed for sensitive configuration values that should be encrypted at rest. SecureString parameters can use AWS Key Management Service for encryption and decryption operations. Applications can retrieve the values at runtime if their IAM permissions allow access. Standard String parameters are suitable for non-sensitive configuration, while StringList stores multiple string values in a single parameter. SecureString is therefore the appropriate choice when developers need encrypted parameter storage for sensitive application configuration.

Question 225

A developer wants an API Gateway API to return cached responses for repeated requests to reduce backend calls. Which feature should be enabled?

1. API Gateway caching
2. SQS long polling
3. DynamoDB Streams
4. Lambda layers

Correct Answer: 1

Explanation

API Gateway caching allows responses from supported API requests to be cached so repeated requests can sometimes be served without invoking the backend again. This can reduce backend workload and improve response latency for suitable read-heavy APIs. Cache behavior can be configured according to the API and stage requirements. SQS long polling is used for efficient message retrieval, DynamoDB Streams captures item changes, and Lambda layers package reusable dependencies. API Gateway caching is therefore the appropriate feature when the goal is to reduce repeated backend calls for frequently requested API responses.

Question 226

A developer is designing a Lambda function that processes events from an SQS queue. What happens when a message is not successfully processed and is not deleted?

1. It can become visible again after the visibility timeout
2. It is immediately permanently deleted
3. It is automatically stored in S3
4. It is always sent directly to SNS

Correct Answer: 1

Explanation

When an SQS message is received, it becomes temporarily invisible to other consumers for the configured visibility timeout. If the consumer fails to process the message and does not delete it, the message can become visible again after the timeout expires. This allows another processing attempt. A dead-letter queue can be configured to receive messages after they exceed a specified number of unsuccessful processing attempts. The message is not automatically stored in S3 or SNS. Understanding visibility timeout is important when designing reliable Lambda and SQS integrations.

Question 227

A developer needs to store application data with flexible attributes and very low-latency access without managing database servers. Which service is most suitable?

1. Amazon RDS
2. Amazon DynamoDB
3. Amazon Redshift
4. Amazon Aurora

Correct Answer: 2

Explanation

Amazon DynamoDB is a fully managed NoSQL database designed for scalable, low-latency access. It supports flexible item structures and can scale to handle large workloads without requiring developers to manage database servers. DynamoDB is especially useful when application access patterns can be designed around partition and sort keys. RDS and Aurora provide managed relational databases, while Redshift is designed primarily for analytics and data warehousing workloads. DynamoDB is therefore appropriate when an application requires a serverless NoSQL database with predictable low-latency access and flexible item attributes.

Question 228

A developer wants to invoke a Lambda function directly from a web browser without deploying a separate API server. Which feature can provide an HTTPS endpoint?

1. Lambda function URL
2. DynamoDB Stream
3. S3 Inventory
4. Lambda layer

Correct Answer: 1

Explanation

Lambda function URLs provide dedicated HTTPS endpoints for Lambda functions. They can be useful for simple web applications, webhooks, APIs, and other use cases where a direct HTTP endpoint is sufficient. Developers can configure authentication options and control access according to application requirements. DynamoDB Streams captures database changes, S3 Inventory provides object reports, and Lambda layers package reusable dependencies. A function URL can therefore provide a straightforward way to expose a Lambda function over HTTPS without requiring a separate API Gateway API for basic use cases.

Question 229

A developer needs to identify unused IAM permissions and improve an application’s least-privilege policy. Which AWS feature can provide information about permissions used by an IAM entity?

1. IAM Access Analyzer
2. Amazon CloudFront
3. Amazon SQS
4. AWS CodeDeploy

Correct Answer: 1

Explanation

IAM Access Analyzer provides capabilities that can help organizations identify resource access and analyze permissions. Its policy validation and access analysis features can assist developers and administrators in creating more restrictive policies and identifying unintended access. Permission-related analysis should be combined with application testing and operational requirements before removing permissions. CloudFront provides content delivery, SQS provides messaging, and CodeDeploy supports application deployments. IAM Access Analyzer is therefore relevant when developers need to analyze access policies and improve least-privilege configurations.

Question 230

A developer wants to trigger processing whenever a new object is uploaded to an S3 bucket and send the event to an SQS queue. Which configuration can be used?

1. S3 event notification to SQS
2. CloudFront distribution to SQS
3. DynamoDB TTL to SQS
4. Route 53 health check to SQS

Correct Answer: 1

Explanation

Amazon S3 event notifications can send object-related events to destinations such as Amazon SQS. When an object is created, S3 can generate an event notification that is delivered to the configured SQS queue. A consumer can then process the event asynchronously, providing a loosely coupled architecture between S3 and the application. CloudFront, DynamoDB TTL, and Route 53 health checks serve different purposes and do not provide the described S3 object-event integration. S3 event notifications to SQS are therefore appropriate for asynchronously processing newly uploaded objects.

Question 231

A developer wants to use an AWS SDK without explicitly supplying credentials in application code running on an EC2 instance with an IAM role. What should the developer rely on?

1. AWS SDK credential provider chain
2. Hardcoded root credentials
3. Public S3 credentials
4. Manually embedded temporary tokens

Correct Answer: 1

Explanation

The AWS SDK credential provider chain automatically searches supported locations for AWS credentials. When an EC2 instance has an IAM role attached, the SDK can obtain temporary credentials associated with that role without requiring credentials to be embedded in application code. This approach improves security and simplifies credential management because credentials can rotate automatically. Hardcoded root credentials create significant security risks, while public credentials should never be used. Manually embedding temporary tokens also adds unnecessary credential-management complexity. The SDK credential provider chain is therefore the preferred approach.

Question 232

A developer wants to ensure that a DynamoDB item is updated only when its current version number matches the version expected by the application. Which feature should be used?

1. Conditional write
2. DynamoDB TTL
3. Scan operation
4. Global table replication

Correct Answer: 1

Explanation

DynamoDB conditional writes allow applications to specify a condition that must be satisfied before an update is performed. A developer can store a version attribute and require the current version to match the expected value before applying the update. This pattern can implement optimistic concurrency control and help prevent one application process from unintentionally overwriting another process’s changes. TTL handles item expiration, Scan retrieves items across a table or index, and global tables provide multi-Region replication. Conditional writes are therefore appropriate for enforcing version-based update conditions.

Question 233

A developer wants to collect application logs from multiple AWS services in one centralized logging environment. Which service should be used?

1. Amazon CloudWatch Logs
2. Amazon ECR
3. Amazon Route 53
4. Amazon DynamoDB

Correct Answer: 1

Explanation

Amazon CloudWatch Logs provides centralized log storage and analysis capabilities for supported AWS services and applications. Developers can organize logs into log groups and streams, configure retention periods, and use CloudWatch tools to search and analyze log data. Centralized logging helps developers troubleshoot distributed applications because information from different components can be reviewed in a common monitoring environment. ECR manages container images, Route 53 handles DNS services, and DynamoDB provides NoSQL data storage. CloudWatch Logs is therefore the appropriate service for centralized application logging.

Question 234

A developer wants to ensure that an SQS queue consumer can process messages in strict order. Which queue type should be selected?

1. Standard queue
2. FIFO queue
3. Dead-letter queue
4. Delay queue

Correct Answer: 2

Explanation

Amazon SQS FIFO queues are designed for workloads where message ordering is important. Messages can be assigned to message groups, and messages within the same group are processed in order. FIFO queues also provide deduplication capabilities according to their supported configuration. Standard queues prioritize very high throughput and do not provide the same strict ordering guarantees. Dead-letter queues are used to isolate messages that repeatedly fail processing, while delay queues control when messages initially become visible. FIFO is therefore the appropriate SQS queue type when strict ordering is required.

Question 235

A developer wants to automatically scale the number of ECS tasks based on application demand. Which capability should be configured?

1. ECS Service Auto Scaling
2. S3 versioning
3. CloudTrail event history
4. API Gateway caching

Correct Answer: 1

Explanation

ECS Service Auto Scaling can adjust the desired number of ECS tasks based on configured scaling policies and metrics. This allows containerized applications to increase capacity during periods of high demand and reduce capacity when demand decreases. Scaling can be based on metrics such as CPU utilization, memory utilization, or other supported indicators. S3 versioning manages object versions, CloudTrail records API activity, and API Gateway caching stores API responses. ECS Service Auto Scaling is therefore the appropriate capability when a developer wants container workloads to adjust automatically according to application demand.

Question 236

A developer needs to transfer large amounts of streaming data into AWS services for processing with low latency. Which service is designed for real-time data streams?

1. Amazon Kinesis Data Streams
2. Amazon ECR
3. Amazon Route 53
4. Amazon S3 Glacier

Correct Answer: 1

Explanation

Amazon Kinesis Data Streams is designed to collect and process real-time streaming data. Applications can continuously send records to streams, where consumers such as Lambda functions can process those records. This architecture is useful for telemetry, clickstreams, application events, and other continuously generated data. ECR stores container images, Route 53 provides DNS functionality, and S3 Glacier is designed for long-term archival storage. Kinesis Data Streams is therefore appropriate when developers need a managed service for ingesting and processing continuous streams of data with low latency.

Question 237

A developer wants to prevent a Lambda function from accessing more AWS resources than required. Which IAM principle should be applied?

1. Least privilege
2. Public access
3. Administrator access
4. Anonymous access

Correct Answer: 1

Explanation

The principle of least privilege requires an application or user to receive only the permissions necessary to perform its required tasks. For Lambda functions, developers should create execution roles containing only the AWS actions and resources that the function actually needs. This limits potential impact if the function code or its credentials are compromised. Administrator access provides unnecessary permissions for most application functions, while public or anonymous access removes important security controls. Applying least privilege is therefore an essential security practice for Lambda execution roles and other AWS identities.

Question 238

A developer wants to identify which version of a Lambda function should receive production traffic while retaining previous versions for rollback. Which feature should be used?

1. Lambda aliases and published versions
2. SQS visibility timeout
3. DynamoDB TTL
4. S3 lifecycle rules

Correct Answer: 1

Explanation

Lambda published versions create immutable snapshots of function code and configuration, while aliases provide stable names that can point to selected versions. A production alias can reference the currently approved version, while an older version remains available for rollback. Developers can update the alias when promoting a new version and can also use weighted routing for gradual deployments. SQS visibility timeout controls message visibility, DynamoDB TTL handles item expiration, and S3 lifecycle rules manage object retention. Lambda versions combined with aliases therefore support controlled version management and rollback.

Question 239

A developer wants to automatically remove old objects from an S3 bucket after a specified number of days. Which feature should be configured?

1. S3 Lifecycle rule
2. S3 Select
3. S3 Object Lock
4. S3 Transfer Acceleration

Correct Answer: 1

Explanation

S3 Lifecycle rules allow developers to define automated actions based on object age or other supported conditions. A lifecycle configuration can transition objects to different storage classes or expire objects after a specified period. This is useful for managing storage costs and automatically removing data that is no longer needed. S3 Select retrieves selected data from supported objects, Object Lock protects objects from deletion or overwrite during retention periods, and Transfer Acceleration improves transfer performance. Lifecycle rules are therefore appropriate when objects should automatically expire after a defined period.

Question 240

A developer wants to build an event-driven application where events are filtered according to their contents before being delivered to different targets. Which service should be used?

1. Amazon EBS
2. Amazon EventBridge
3. Amazon ECR
4. Amazon RDS

Correct Answer: 2

Explanation

Amazon EventBridge supports event buses and rules that can match events based on their content. Developers can define event patterns and route matching events to targets such as Lambda functions, SQS queues, SNS topics, and Step Functions. This enables loosely coupled event-driven architectures where producers do not need direct knowledge of every consumer. EBS provides block storage, ECR manages container images, and RDS provides relational databases. EventBridge is therefore appropriate when application events need to be filtered and routed dynamically based on event attributes.