{"id":18796,"date":"2026-09-22T10:04:00","date_gmt":"2026-09-22T10:04:00","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18796"},"modified":"2026-09-22T10:04:00","modified_gmt":"2026-09-22T10:04:00","slug":"amazon-aws-certified-developer-associate-dva-c02-practice-test-questions-and-exam-dumps-part12-q221-240","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-developer-associate-dva-c02-practice-test-questions-and-exam-dumps-part12-q221-240\/","title":{"rendered":"Amazon AWS Certified Developer &#8211; Associate DVA-C02 Practice Test Questions and Exam Dumps Part12 Q221-240"},"content":{"rendered":"<h2><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/aws-certified-developer-associate-dva-c02-exam-dumps\"><b>Amazon AWS Certified Developer &#8211; Associate DVA-C02 Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 221<\/b><\/h3>\n<p><b>A developer needs to configure a Lambda function so that a successful asynchronous invocation sends its result to another service. Which Lambda feature should be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Reserved concurrency<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda layers<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda destinations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Provisioned concurrency<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Lambda destinations allow developers to configure where the result of an asynchronous invocation should be sent after processing. Destinations can be configured for successful or failed executions and can integrate with supported AWS services such as SNS, SQS, EventBridge, or another Lambda function. This provides a useful way to build event-driven workflows without implementing custom result-handling logic inside the function. Reserved concurrency controls execution limits, layers package reusable dependencies, and provisioned concurrency keeps execution environments initialized. Lambda destinations are therefore appropriate when the result of an asynchronous invocation needs to be routed automatically.<\/span><\/p>\n<h3><b>Question 222<\/b><\/h3>\n<p><b>A developer wants to prevent an application from exceeding the provisioned throughput of a DynamoDB table during a temporary traffic spike. Which mechanism can help handle rejected requests?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Exponential backoff and retry<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 lifecycle rules<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CloudFront invalidation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda layers<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">DynamoDB can throttle requests when application traffic exceeds available capacity or other service limits. Applications should handle throttling gracefully by retrying transient failures with exponential backoff and preferably jitter. Increasing the delay between retries gives DynamoDB time to recover and reduces the possibility that many clients will immediately retry together. S3 lifecycle rules manage object storage, CloudFront invalidation removes cached content, and Lambda layers package dependencies. Retry logic is therefore an important application-side technique for handling temporary DynamoDB throttling and improving resilience during traffic spikes.<\/span><\/p>\n<h3><b>Question 223<\/b><\/h3>\n<p><b>A developer needs to provide an application with a stable endpoint that points to a specific published Lambda function version. Which feature should be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda layer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda alias<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda destination<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Event source mapping<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A Lambda alias provides a stable name that points to a specific published Lambda function version. Instead of changing client applications whenever a new version is deployed, developers can update the alias to reference the desired version. Aliases can also support weighted routing for controlled deployments. Lambda layers package shared dependencies, destinations route asynchronous invocation results, and event source mappings connect Lambda to supported event sources. An alias is therefore useful when applications need a stable reference while developers manage different published versions of a Lambda function.<\/span><\/p>\n<h3><b>Question 224<\/b><\/h3>\n<p><b>A developer wants to encrypt sensitive values stored in AWS Systems Manager Parameter Store. Which parameter type should be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">StringList<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">String<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SecureString<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Binary<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The SecureString parameter type in AWS Systems Manager Parameter Store is designed for sensitive configuration values that should be encrypted at rest. SecureString parameters can use AWS Key Management Service for encryption and decryption operations. Applications can retrieve the values at runtime if their IAM permissions allow access. Standard String parameters are suitable for non-sensitive configuration, while StringList stores multiple string values in a single parameter. SecureString is therefore the appropriate choice when developers need encrypted parameter storage for sensitive application configuration.<\/span><\/p>\n<h3><b>Question 225<\/b><\/h3>\n<p><b>A developer wants an API Gateway API to return cached responses for repeated requests to reduce backend calls. Which feature should be enabled?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">API Gateway caching<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SQS long polling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DynamoDB Streams<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda layers<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">API Gateway caching allows responses from supported API requests to be cached so repeated requests can sometimes be served without invoking the backend again. This can reduce backend workload and improve response latency for suitable read-heavy APIs. Cache behavior can be configured according to the API and stage requirements. SQS long polling is used for efficient message retrieval, DynamoDB Streams captures item changes, and Lambda layers package reusable dependencies. API Gateway caching is therefore the appropriate feature when the goal is to reduce repeated backend calls for frequently requested API responses.<\/span><\/p>\n<h3><b>Question 226<\/b><\/h3>\n<p><b>A developer is designing a Lambda function that processes events from an SQS queue. What happens when a message is not successfully processed and is not deleted?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It can become visible again after the visibility timeout<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It is immediately permanently deleted<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It is automatically stored in S3<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It is always sent directly to SNS<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">When an SQS message is received, it becomes temporarily invisible to other consumers for the configured visibility timeout. If the consumer fails to process the message and does not delete it, the message can become visible again after the timeout expires. This allows another processing attempt. A dead-letter queue can be configured to receive messages after they exceed a specified number of unsuccessful processing attempts. The message is not automatically stored in S3 or SNS. Understanding visibility timeout is important when designing reliable Lambda and SQS integrations.<\/span><\/p>\n<h3><b>Question 227<\/b><\/h3>\n<p><b>A developer needs to store application data with flexible attributes and very low-latency access without managing database servers. Which service is most suitable?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon RDS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon DynamoDB<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Redshift<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Aurora<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon DynamoDB is a fully managed NoSQL database designed for scalable, low-latency access. It supports flexible item structures and can scale to handle large workloads without requiring developers to manage database servers. DynamoDB is especially useful when application access patterns can be designed around partition and sort keys. RDS and Aurora provide managed relational databases, while Redshift is designed primarily for analytics and data warehousing workloads. DynamoDB is therefore appropriate when an application requires a serverless NoSQL database with predictable low-latency access and flexible item attributes.<\/span><\/p>\n<h3><b>Question 228<\/b><\/h3>\n<p><b>A developer wants to invoke a Lambda function directly from a web browser without deploying a separate API server. Which feature can provide an HTTPS endpoint?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda function URL<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DynamoDB Stream<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 Inventory<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda layer<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Lambda function URLs provide dedicated HTTPS endpoints for Lambda functions. They can be useful for simple web applications, webhooks, APIs, and other use cases where a direct HTTP endpoint is sufficient. Developers can configure authentication options and control access according to application requirements. DynamoDB Streams captures database changes, S3 Inventory provides object reports, and Lambda layers package reusable dependencies. A function URL can therefore provide a straightforward way to expose a Lambda function over HTTPS without requiring a separate API Gateway API for basic use cases.<\/span><\/p>\n<h3><b>Question 229<\/b><\/h3>\n<p><b>A developer needs to identify unused IAM permissions and improve an application&#8217;s least-privilege policy. Which AWS feature can provide information about permissions used by an IAM entity?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IAM Access Analyzer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon CloudFront<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon SQS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AWS CodeDeploy<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">IAM Access Analyzer provides capabilities that can help organizations identify resource access and analyze permissions. Its policy validation and access analysis features can assist developers and administrators in creating more restrictive policies and identifying unintended access. Permission-related analysis should be combined with application testing and operational requirements before removing permissions. CloudFront provides content delivery, SQS provides messaging, and CodeDeploy supports application deployments. IAM Access Analyzer is therefore relevant when developers need to analyze access policies and improve least-privilege configurations.<\/span><\/p>\n<h3><b>Question 230<\/b><\/h3>\n<p><b>A developer wants to trigger processing whenever a new object is uploaded to an S3 bucket and send the event to an SQS queue. Which configuration can be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 event notification to SQS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CloudFront distribution to SQS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DynamoDB TTL to SQS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Route 53 health check to SQS<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon S3 event notifications can send object-related events to destinations such as Amazon SQS. When an object is created, S3 can generate an event notification that is delivered to the configured SQS queue. A consumer can then process the event asynchronously, providing a loosely coupled architecture between S3 and the application. CloudFront, DynamoDB TTL, and Route 53 health checks serve different purposes and do not provide the described S3 object-event integration. S3 event notifications to SQS are therefore appropriate for asynchronously processing newly uploaded objects.<\/span><\/p>\n<h3><b>Question 231<\/b><\/h3>\n<p><b>A developer wants to use an AWS SDK without explicitly supplying credentials in application code running on an EC2 instance with an IAM role. What should the developer rely on?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AWS SDK credential provider chain<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hardcoded root credentials<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Public S3 credentials<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Manually embedded temporary tokens<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The AWS SDK credential provider chain automatically searches supported locations for AWS credentials. When an EC2 instance has an IAM role attached, the SDK can obtain temporary credentials associated with that role without requiring credentials to be embedded in application code. This approach improves security and simplifies credential management because credentials can rotate automatically. Hardcoded root credentials create significant security risks, while public credentials should never be used. Manually embedding temporary tokens also adds unnecessary credential-management complexity. The SDK credential provider chain is therefore the preferred approach.<\/span><\/p>\n<h3><b>Question 232<\/b><\/h3>\n<p><b>A developer wants to ensure that a DynamoDB item is updated only when its current version number matches the version expected by the application. Which feature should be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Conditional write<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DynamoDB TTL<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Scan operation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Global table replication<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">DynamoDB conditional writes allow applications to specify a condition that must be satisfied before an update is performed. A developer can store a version attribute and require the current version to match the expected value before applying the update. This pattern can implement optimistic concurrency control and help prevent one application process from unintentionally overwriting another process&#8217;s changes. TTL handles item expiration, Scan retrieves items across a table or index, and global tables provide multi-Region replication. Conditional writes are therefore appropriate for enforcing version-based update conditions.<\/span><\/p>\n<h3><b>Question 233<\/b><\/h3>\n<p><b>A developer wants to collect application logs from multiple AWS services in one centralized logging environment. Which service should be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon CloudWatch Logs<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon ECR<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Route 53<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon DynamoDB<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon CloudWatch Logs provides centralized log storage and analysis capabilities for supported AWS services and applications. Developers can organize logs into log groups and streams, configure retention periods, and use CloudWatch tools to search and analyze log data. Centralized logging helps developers troubleshoot distributed applications because information from different components can be reviewed in a common monitoring environment. ECR manages container images, Route 53 handles DNS services, and DynamoDB provides NoSQL data storage. CloudWatch Logs is therefore the appropriate service for centralized application logging.<\/span><\/p>\n<h3><b>Question 234<\/b><\/h3>\n<p><b>A developer wants to ensure that an SQS queue consumer can process messages in strict order. Which queue type should be selected?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Standard queue<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">FIFO queue<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dead-letter queue<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Delay queue<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon SQS FIFO queues are designed for workloads where message ordering is important. Messages can be assigned to message groups, and messages within the same group are processed in order. FIFO queues also provide deduplication capabilities according to their supported configuration. Standard queues prioritize very high throughput and do not provide the same strict ordering guarantees. Dead-letter queues are used to isolate messages that repeatedly fail processing, while delay queues control when messages initially become visible. FIFO is therefore the appropriate SQS queue type when strict ordering is required.<\/span><\/p>\n<h3><b>Question 235<\/b><\/h3>\n<p><b>A developer wants to automatically scale the number of ECS tasks based on application demand. Which capability should be configured?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">ECS Service Auto Scaling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 versioning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CloudTrail event history<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">API Gateway caching<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">ECS Service Auto Scaling can adjust the desired number of ECS tasks based on configured scaling policies and metrics. This allows containerized applications to increase capacity during periods of high demand and reduce capacity when demand decreases. Scaling can be based on metrics such as CPU utilization, memory utilization, or other supported indicators. S3 versioning manages object versions, CloudTrail records API activity, and API Gateway caching stores API responses. ECS Service Auto Scaling is therefore the appropriate capability when a developer wants container workloads to adjust automatically according to application demand.<\/span><\/p>\n<h3><b>Question 236<\/b><\/h3>\n<p><b>A developer needs to transfer large amounts of streaming data into AWS services for processing with low latency. Which service is designed for real-time data streams?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Kinesis Data Streams<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon ECR<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon Route 53<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon S3 Glacier<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon Kinesis Data Streams is designed to collect and process real-time streaming data. Applications can continuously send records to streams, where consumers such as Lambda functions can process those records. This architecture is useful for telemetry, clickstreams, application events, and other continuously generated data. ECR stores container images, Route 53 provides DNS functionality, and S3 Glacier is designed for long-term archival storage. Kinesis Data Streams is therefore appropriate when developers need a managed service for ingesting and processing continuous streams of data with low latency.<\/span><\/p>\n<h3><b>Question 237<\/b><\/h3>\n<p><b>A developer wants to prevent a Lambda function from accessing more AWS resources than required. Which IAM principle should be applied?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Least privilege<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Public access<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Administrator access<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Anonymous access<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The principle of least privilege requires an application or user to receive only the permissions necessary to perform its required tasks. For Lambda functions, developers should create execution roles containing only the AWS actions and resources that the function actually needs. This limits potential impact if the function code or its credentials are compromised. Administrator access provides unnecessary permissions for most application functions, while public or anonymous access removes important security controls. Applying least privilege is therefore an essential security practice for Lambda execution roles and other AWS identities.<\/span><\/p>\n<h3><b>Question 238<\/b><\/h3>\n<p><b>A developer wants to identify which version of a Lambda function should receive production traffic while retaining previous versions for rollback. Which feature should be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Lambda aliases and published versions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SQS visibility timeout<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DynamoDB TTL<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 lifecycle rules<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Lambda published versions create immutable snapshots of function code and configuration, while aliases provide stable names that can point to selected versions. A production alias can reference the currently approved version, while an older version remains available for rollback. Developers can update the alias when promoting a new version and can also use weighted routing for gradual deployments. SQS visibility timeout controls message visibility, DynamoDB TTL handles item expiration, and S3 lifecycle rules manage object retention. Lambda versions combined with aliases therefore support controlled version management and rollback.<\/span><\/p>\n<h3><b>Question 239<\/b><\/h3>\n<p><b>A developer wants to automatically remove old objects from an S3 bucket after a specified number of days. Which feature should be configured?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 Lifecycle rule<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 Select<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 Object Lock<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">S3 Transfer Acceleration<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">S3 Lifecycle rules allow developers to define automated actions based on object age or other supported conditions. A lifecycle configuration can transition objects to different storage classes or expire objects after a specified period. This is useful for managing storage costs and automatically removing data that is no longer needed. S3 Select retrieves selected data from supported objects, Object Lock protects objects from deletion or overwrite during retention periods, and Transfer Acceleration improves transfer performance. Lifecycle rules are therefore appropriate when objects should automatically expire after a defined period.<\/span><\/p>\n<h3><b>Question 240<\/b><\/h3>\n<p><b>A developer wants to build an event-driven application where events are filtered according to their contents before being delivered to different targets. Which service should be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon EBS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon EventBridge<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon ECR<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Amazon RDS<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Amazon EventBridge supports event buses and rules that can match events based on their content. Developers can define event patterns and route matching events to targets such as Lambda functions, SQS queues, SNS topics, and Step Functions. This enables loosely coupled event-driven architectures where producers do not need direct knowledge of every consumer. EBS provides block storage, ECR manages container images, and RDS provides relational databases. EventBridge is therefore appropriate when application events need to be filtered and routed dynamically based on event attributes.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Amazon AWS Certified Developer &#8211; Associate DVA-C02 Exam Dumps and Practice Test Dumps. &nbsp; Question 221 A developer needs to configure a Lambda function so that a successful asynchronous invocation sends its result to another service. Which Lambda feature should be used? Reserved concurrency Lambda layers Lambda destinations Provisioned concurrency Correct Answer: 3 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18796"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18796"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18796\/revisions"}],"predecessor-version":[{"id":18797,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18796\/revisions\/18797"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18796"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18796"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18796"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}