{"id":18794,"date":"2026-09-22T10:03:12","date_gmt":"2026-09-22T10:03:12","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18794"},"modified":"2026-09-22T10:03:12","modified_gmt":"2026-09-22T10:03:12","slug":"amazon-aws-certified-developer-associate-dva-c02-practice-test-questions-and-exam-dumps-part11-q201-220","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-developer-associate-dva-c02-practice-test-questions-and-exam-dumps-part11-q201-220\/","title":{"rendered":"Amazon AWS Certified Developer – Associate DVA-C02 Practice Test Questions and Exam Dumps Part11 Q201-220"},"content":{"rendered":"

View Full <\/b>Amazon AWS Certified Developer – Associate DVA-C02 Exam Dumps<\/b><\/a> and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 201<\/b><\/h3>\n

A developer needs to allow an application running on Amazon ECS to access AWS services without storing long-term access keys inside the container. Which solution should be used?<\/b><\/p>\n

    \n
  1. Store access keys in the Docker image<\/span><\/li>\n
  2. Use the root account credentials<\/span><\/li>\n
  3. Use an ECS task IAM role<\/span><\/li>\n
  4. Make the required AWS resources public<\/span><\/li>\n<\/ol>\n

    Correct Answer: 3<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    An ECS task IAM role provides temporary AWS credentials to containers running as part of an ECS task. The application can use the AWS SDK to obtain these credentials without storing long-term access keys in the container image or source code. This improves security and allows permissions to be managed through IAM. Developers can assign only the permissions required by the application, following the principle of least privilege. Storing credentials in images creates security risks, while root credentials should never be embedded in applications. Making resources public also removes necessary access controls. An ECS task role is therefore the appropriate solution.<\/span><\/p>\n

    Question 202<\/b><\/h3>\n

    A developer wants to deploy a Lambda function and its infrastructure using a simplified serverless infrastructure template. Which AWS service or framework should be used?<\/b><\/p>\n

      \n
    1. AWS SAM<\/span><\/li>\n
    2. Amazon CloudFront<\/span><\/li>\n
    3. Amazon SQS<\/span><\/li>\n
    4. Amazon Route 53<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      AWS Serverless Application Model, or AWS SAM, provides a simplified way to define and deploy serverless applications. SAM templates extend CloudFormation syntax and provide specialized resource types for Lambda functions, APIs, and other serverless components. Developers can use SAM CLI commands to build, test, package, and deploy applications. CloudFront is a content delivery service, SQS provides message queuing, and Route 53 provides DNS functionality. SAM is therefore useful when developers want infrastructure as code specifically optimized for serverless application development while still benefiting from CloudFormation deployment capabilities.<\/span><\/p>\n

      Question 203<\/b><\/h3>\n

      A developer wants a Lambda function to access an environment-specific configuration value without changing the function code between development and production. Which feature should be used?<\/b><\/p>\n

        \n
      1. Lambda environment variables<\/span><\/li>\n
      2. Lambda destination<\/span><\/li>\n
      3. Lambda concurrency<\/span><\/li>\n
      4. Lambda event source mapping<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Lambda environment variables allow configuration values to be supplied to a function without hardcoding them into the application source code. Different environments can use different values while the same function code is deployed across development, testing, and production environments. Developers can retrieve environment variables through the runtime’s standard environment-variable mechanism. Environment variables are suitable for non-secret configuration values, while sensitive information should generally be stored in services such as Secrets Manager or Parameter Store and retrieved securely. Destinations, concurrency settings, and event source mappings serve different Lambda management and integration purposes.<\/span><\/p>\n

        Question 204<\/b><\/h3>\n

        A developer wants to create a DynamoDB table that supports high availability across multiple AWS Regions and allows applications in those Regions to access local replicas. Which feature should be used?<\/b><\/p>\n

          \n
        1. DynamoDB Streams<\/span><\/li>\n
        2. DynamoDB global tables<\/span><\/li>\n
        3. DynamoDB TTL<\/span><\/li>\n
        4. DynamoDB transactions<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          DynamoDB global tables provide a multi-Region, multi-active database architecture. They replicate table data across selected AWS Regions and allow applications to read and write data from those Regions. This can reduce latency for globally distributed applications and improve resilience against a Regional failure. DynamoDB Streams capture item-level changes, TTL automatically expires items, and transactions provide coordinated atomic operations across multiple items. Global tables are therefore the appropriate feature when an application requires replicated DynamoDB data across multiple Regions with local access.<\/span><\/p>\n

          Question 205<\/b><\/h3>\n

          A developer wants to make an API available only to authenticated users through API Gateway. Which authorization mechanism can be used with Amazon Cognito user authentication?<\/b><\/p>\n

            \n
          1. S3 bucket policy<\/span><\/li>\n
          2. Cognito user pool authorizer<\/span><\/li>\n
          3. DynamoDB TTL<\/span><\/li>\n
          4. CloudWatch alarm<\/span><\/li>\n<\/ol>\n

            Correct Answer: 2<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Amazon API Gateway can integrate with Amazon Cognito user pools to authorize requests from authenticated users. A Cognito user pool authorizer can validate authentication information such as tokens before allowing a request to reach the backend integration. This allows developers to protect APIs without implementing all authentication validation logic inside the backend application. S3 bucket policies control S3 access, DynamoDB TTL manages item expiration, and CloudWatch alarms monitor metrics. A Cognito user pool authorizer is therefore appropriate when API Gateway should restrict access based on authenticated application users.<\/span><\/p>\n

            Question 206<\/b><\/h3>\n

            A developer needs to send a message to many independent subscribers whenever an application event occurs. Which AWS service provides a publish\/subscribe model?<\/b><\/p>\n

              \n
            1. Amazon SNS<\/span><\/li>\n
            2. Amazon RDS<\/span><\/li>\n
            3. Amazon EBS<\/span><\/li>\n
            4. Amazon ECR<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Amazon SNS provides a publish\/subscribe messaging model in which publishers send messages to topics and multiple subscribers can receive those messages. This is useful for application fanout patterns where the same event needs to reach several independent consumers. Subscribers can include services such as SQS queues, Lambda functions, and other supported endpoints. RDS provides relational databases, EBS provides block storage for EC2, and ECR stores container images. SNS is therefore appropriate when an application needs to publish an event once and distribute it to multiple independent subscribers.<\/span><\/p>\n

              Question 207<\/b><\/h3>\n

              A developer wants an SQS consumer to have enough time to finish processing a message before the message becomes visible to other consumers. Which setting should be adjusted?<\/b><\/p>\n

                \n
              1. Message retention period<\/span><\/li>\n
              2. Visibility timeout<\/span><\/li>\n
              3. Maximum message size<\/span><\/li>\n
              4. Delay queue setting<\/span><\/li>\n<\/ol>\n

                Correct Answer: 2<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                The SQS visibility timeout determines how long a received message remains temporarily invisible to other consumers while it is being processed. The timeout should generally be long enough for the consumer to complete normal processing. If processing takes longer than expected, the application can extend the visibility timeout when appropriate. Message retention controls how long messages remain available in the queue, maximum message size controls message size limits, and delay settings postpone initial message visibility. Adjusting the visibility timeout is therefore the correct approach when preventing another consumer from receiving a message while processing is still underway.<\/span><\/p>\n

                Question 208<\/b><\/h3>\n

                A developer wants to create an alarm when a Lambda function produces too many errors during a given period. Which CloudWatch metric should be monitored?<\/b><\/p>\n

                  \n
                1. Invocations<\/span><\/li>\n
                2. Duration<\/span><\/li>\n
                3. Errors<\/span><\/li>\n
                4. ConcurrentExecutions<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  The Lambda Errors metric records the number of invocations that result in function errors. A CloudWatch alarm can monitor this metric and trigger a notification or another configured action when the number of errors exceeds a defined threshold. Invocations measures how many times the function is invoked, Duration measures execution time, and ConcurrentExecutions provides information about concurrent function execution. If the goal is specifically to detect excessive function failures, the Errors metric provides the most direct measurement. Developers can combine this metric with appropriate thresholds and evaluation periods to monitor application reliability.<\/span><\/p>\n

                  Question 209<\/b><\/h3>\n

                  A developer needs to allow an application to upload a large file to S3 while retrying only failed portions of the upload. Which feature provides this capability?<\/b><\/p>\n

                    \n
                  1. S3 multipart upload<\/span><\/li>\n
                  2. S3 Object Lock<\/span><\/li>\n
                  3. S3 versioning<\/span><\/li>\n
                  4. S3 Transfer Acceleration only<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    S3 multipart upload divides a large object into multiple parts that can be uploaded independently. If one part fails, the application can retry that specific part rather than restarting the entire upload. Multipart upload can also improve throughput by allowing parts to be uploaded concurrently. Object Lock provides retention protection, versioning maintains multiple object versions, and Transfer Acceleration is designed to speed transfers over optimized network paths but does not itself provide the same part-based upload mechanism. Multipart upload is therefore the appropriate feature for efficient and recoverable large-object uploads.<\/span><\/p>\n

                    Question 210<\/b><\/h3>\n

                    A developer wants to prevent unauthorized applications from accessing a specific DynamoDB table. Which IAM approach should be used?<\/b><\/p>\n

                      \n
                    1. Grant all users AdministratorAccess<\/span><\/li>\n
                    2. Use an IAM policy with least-privilege permissions<\/span><\/li>\n
                    3. Make the DynamoDB table publicly accessible<\/span><\/li>\n
                    4. Disable authentication for the application<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 2<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      IAM policies should grant only the permissions an application or user actually requires. For a DynamoDB application, a least-privilege policy can specify the required actions and restrict access to particular table resources. This reduces the potential impact if credentials are compromised or an application component behaves unexpectedly. Granting AdministratorAccess provides far more permissions than necessary, and DynamoDB should not be exposed through a concept of public unauthenticated table access. Disabling authentication would also remove important security controls. Least-privilege IAM permissions are therefore the appropriate method for controlling access.<\/span><\/p>\n

                      Question 211<\/b><\/h3>\n

                      A developer wants to execute a Lambda function on a recurring schedule, such as every hour. Which AWS service can create this schedule?<\/b><\/p>\n

                        \n
                      1. Amazon EventBridge Scheduler<\/span><\/li>\n
                      2. Amazon ECR<\/span><\/li>\n
                      3. Amazon ElastiCache<\/span><\/li>\n
                      4. Amazon CloudFront<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Amazon EventBridge Scheduler can invoke supported AWS targets according to schedules defined by developers. A schedule can be configured for recurring intervals or specific times, making it useful for periodic application tasks. For example, a Lambda function could be invoked every hour to perform maintenance, generate reports, or process scheduled workloads. ECR manages container images, ElastiCache provides in-memory caching, and CloudFront provides content delivery. EventBridge Scheduler is therefore appropriate when a developer needs reliable scheduled invocation of Lambda or another supported AWS target.<\/span><\/p>\n

                        Question 212<\/b><\/h3>\n

                        A developer wants to test a Lambda function locally before deploying it to AWS. Which AWS development framework can help build and locally invoke serverless applications?<\/b><\/p>\n

                          \n
                        1. AWS SAM CLI<\/span><\/li>\n
                        2. Amazon Route 53<\/span><\/li>\n
                        3. Amazon SNS<\/span><\/li>\n
                        4. AWS KMS<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          The AWS SAM CLI provides tools for building, testing, and running serverless applications locally. Developers can use local invocation and API emulation capabilities to test Lambda functions and related serverless resources before deploying them to AWS. This can shorten development cycles and help identify application issues earlier. Route 53 provides DNS services, SNS provides messaging, and KMS manages encryption keys. The SAM CLI is therefore appropriate for local development and testing of applications defined using AWS SAM and related serverless infrastructure.<\/span><\/p>\n

                          Question 213<\/b><\/h3>\n

                          A developer wants to ensure that an S3 object cannot be accidentally overwritten or deleted for a defined retention period. Which feature should be considered?<\/b><\/p>\n

                            \n
                          1. S3 Object Lock<\/span><\/li>\n
                          2. S3 Transfer Acceleration<\/span><\/li>\n
                          3. S3 Select<\/span><\/li>\n
                          4. S3 Inventory<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            S3 Object Lock helps protect objects from deletion or overwrite for a specified retention period. It can support retention modes that are useful for workloads requiring records to remain protected from modification or deletion. This capability is commonly associated with compliance and data-protection requirements. Transfer Acceleration is designed to improve transfer performance, S3 Select allows applications to retrieve selected data from supported objects, and Inventory provides reports about objects and metadata. Object Lock is therefore the appropriate feature when developers need retention protection for S3 objects.<\/span><\/p>\n

                            Question 214<\/b><\/h3>\n

                            A developer wants to execute multiple DynamoDB writes as one atomic operation so that either all changes succeed or none are applied. Which feature should be used?<\/b><\/p>\n

                              \n
                            1. DynamoDB Scan<\/span><\/li>\n
                            2. DynamoDB Streams<\/span><\/li>\n
                            3. DynamoDB transactions<\/span><\/li>\n
                            4. DynamoDB TTL<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 3<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              DynamoDB transactions allow developers to perform multiple related read and write operations atomically. With a transaction, the application can require all specified changes to succeed together or have the operation fail without applying the transaction’s changes. This is useful when several records must remain consistent as part of one business operation. Scan retrieves items, Streams captures item changes, and TTL manages automatic expiration. Transactions are therefore appropriate when an application requires atomic updates across multiple DynamoDB items or tables within the supported transaction limits.<\/span><\/p>\n

                              Question 215<\/b><\/h3>\n

                              A developer wants to monitor application logs generated by Lambda functions and search those logs for specific error messages. Which AWS service should be used?<\/b><\/p>\n

                                \n
                              1. Amazon CloudWatch Logs<\/span><\/li>\n
                              2. Amazon ECR<\/span><\/li>\n
                              3. Amazon Route 53<\/span><\/li>\n
                              4. Amazon SQS<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Amazon CloudWatch Logs provides centralized collection and storage of logs generated by AWS services and applications. Lambda functions can automatically send their runtime logs to CloudWatch Logs, where developers can inspect log streams and search for application messages or errors. CloudWatch Logs also supports features such as log groups, retention settings, and queries through supported tooling. ECR manages container images, Route 53 provides DNS services, and SQS provides messaging. CloudWatch Logs is therefore the appropriate service for collecting and investigating Lambda application logs.<\/span><\/p>\n

                                Question 216<\/b><\/h3>\n

                                A developer wants to reduce database reads by storing frequently requested values in an in-memory cache. Which caching solution can be used with AWS applications?<\/b><\/p>\n

                                  \n
                                1. Amazon ElastiCache<\/span><\/li>\n
                                2. Amazon CloudTrail<\/span><\/li>\n
                                3. Amazon ECR<\/span><\/li>\n
                                4. Amazon EventBridge<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Amazon ElastiCache provides managed in-memory caching capabilities that can reduce repeated reads against a primary database. Frequently accessed data can be placed in the cache so applications can retrieve it with lower latency than querying the database for every request. This can help improve performance and reduce database workload for read-heavy applications. CloudTrail records API activity, ECR stores container images, and EventBridge provides event routing. ElastiCache is therefore appropriate when developers need a dedicated in-memory caching layer for frequently accessed application data.<\/span><\/p>\n

                                  Question 217<\/b><\/h3>\n

                                  A developer wants to retrieve a secret from AWS Secrets Manager without embedding the secret value in source code. Which approach should be used?<\/b><\/p>\n

                                    \n
                                  1. Store the secret directly in the Dockerfile<\/span><\/li>\n
                                  2. Retrieve the secret at runtime using the AWS SDK<\/span><\/li>\n
                                  3. Put the secret in a public S3 object<\/span><\/li>\n
                                  4. Hardcode the secret in a Lambda environment variable<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Applications can retrieve secrets from AWS Secrets Manager at runtime using the AWS SDK or supported integrations. The application receives the secret only when it needs it, while access can be controlled through IAM permissions. This avoids placing sensitive credentials directly in source code or container images. Public S3 objects are unsuitable for storing secrets, and hardcoding credentials in environment variables may expose them through application configuration or operational interfaces. Runtime retrieval from Secrets Manager provides centralized secret management and allows developers to change secrets without modifying application source code.<\/span><\/p>\n

                                    Question 218<\/b><\/h3>\n

                                    A developer wants an application to process an SQS message again if processing fails, but the message should not be immediately visible to another consumer. Which mechanism provides this behavior?<\/b><\/p>\n

                                      \n
                                    1. Visibility timeout<\/span><\/li>\n
                                    2. S3 lifecycle rule<\/span><\/li>\n
                                    3. CloudFront caching<\/span><\/li>\n
                                    4. DynamoDB TTL<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      SQS visibility timeout temporarily hides a received message from other consumers while the current consumer attempts to process it. If processing fails and the message is not deleted, it can become visible again after the visibility timeout expires. This allows another processing attempt without immediately exposing the message to multiple consumers. Developers should choose a timeout appropriate for normal processing duration and may extend it when necessary. S3 lifecycle rules, CloudFront caching, and DynamoDB TTL do not control the visibility of SQS messages. Visibility timeout is therefore the appropriate mechanism for this scenario.<\/span><\/p>\n

                                      Question 219<\/b><\/h3>\n

                                      A developer wants to store application artifacts and retrieve them during a CI\/CD deployment process. Which AWS service is commonly used for storing build artifacts?<\/b><\/p>\n

                                        \n
                                      1. Amazon S3<\/span><\/li>\n
                                      2. Amazon Route 53<\/span><\/li>\n
                                      3. Amazon SQS<\/span><\/li>\n
                                      4. Amazon CloudWatch<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        Amazon S3 can store build artifacts such as packaged application files, deployment bundles, configuration files, and other objects generated during a CI\/CD workflow. S3 provides durable object storage and can integrate with AWS deployment and development services. Access can be controlled using IAM and bucket policies, while versioning can help maintain multiple artifact versions. Route 53 provides DNS services, SQS handles message queues, and CloudWatch provides monitoring and logging. S3 is therefore a common choice for storing and retrieving deployment artifacts in automated application delivery pipelines.<\/span><\/p>\n

                                        Question 220<\/b><\/h3>\n

                                        A developer wants to determine which AWS API calls were made in an account and identify the identity that made those calls. Which service should be used?<\/b><\/p>\n

                                          \n
                                        1. Amazon CloudFront<\/span><\/li>\n
                                        2. AWS CloudTrail<\/span><\/li>\n
                                        3. Amazon ElastiCache<\/span><\/li>\n
                                        4. Amazon ECR<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          AWS CloudTrail records AWS API activity and provides information about actions performed in an AWS account. Depending on the event and configuration, CloudTrail records can include the identity that made the request, the API action, the resource involved, the time of the event, and other request information. This makes CloudTrail useful for security investigations, auditing, and operational troubleshooting. CloudFront provides content delivery, ElastiCache provides caching, and ECR manages container images. CloudTrail is therefore the appropriate service when developers need to determine which identities performed AWS API operations.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Amazon AWS Certified Developer – Associate DVA-C02 Exam Dumps and Practice Test Dumps.   Question 201 A developer needs to allow an application running on Amazon ECS to access AWS services without storing long-term access keys inside the container. Which solution should be used? Store access keys in the Docker image Use the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18794"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18794"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18794\/revisions"}],"predecessor-version":[{"id":18795,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18794\/revisions\/18795"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18794"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18794"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18794"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}