{"id":18812,"date":"2026-09-22T10:06:31","date_gmt":"2026-09-22T10:06:31","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18812"},"modified":"2026-09-22T10:06:31","modified_gmt":"2026-09-22T10:06:31","slug":"amazon-aws-certified-developer-associate-dva-c02-practice-test-questions-and-exam-dumps-part20-q381-400","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/amazon-aws-certified-developer-associate-dva-c02-practice-test-questions-and-exam-dumps-part20-q381-400\/","title":{"rendered":"Amazon AWS Certified Developer – Associate DVA-C02 Practice Test Questions and Exam Dumps Part20 Q381-400"},"content":{"rendered":"

View Full <\/b>Amazon AWS Certified Developer – Associate DVA-C02 Exam Dumps<\/b><\/a> and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 381<\/b><\/h3>\n

A developer wants an application running on an AWS compute service to access AWS resources without storing long-term access keys in the application code. Which approach should be used?<\/b><\/p>\n

    \n
  1. Use an IAM role with temporary credentials<\/span><\/li>\n
  2. Store an IAM user’s access key in the source code<\/span><\/li>\n
  3. Store credentials in a container image<\/span><\/li>\n
  4. Add credentials to a configuration file<\/span><\/li>\n<\/ol>\n

    Correct Answer: 1<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    IAM roles allow AWS compute resources to obtain temporary security credentials without requiring developers to embed long-term access keys in application code. Services such as Amazon EC2 and AWS Lambda can use IAM roles to obtain credentials automatically. This approach reduces the risk of credential exposure and makes credential rotation easier because applications do not need to manage permanent access keys. Storing credentials in source code, container images, or configuration files can expose sensitive information. IAM policies attached to the role can also follow the principle of least privilege by granting only the permissions required by the application.<\/span><\/p>\n

    Question 382<\/b><\/h3>\n

    A developer wants an EventBridge rule to invoke a target only when a particular field in an incoming event contains a specified value. Which feature should be configured?<\/b><\/p>\n

      \n
    1. Event archive<\/span><\/li>\n
    2. Event pattern<\/span><\/li>\n
    3. Event bus policy<\/span><\/li>\n
    4. Dead-letter queue<\/span><\/li>\n<\/ol>\n

      Correct Answer: 2<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      Amazon EventBridge event patterns allow rules to evaluate the contents of incoming events and determine whether they should be routed to a target. A developer can specify fields and expected values within the event pattern. When an incoming event matches the pattern, EventBridge invokes the configured target. Event archives are used to retain events for later replay, event bus policies control access to event buses, and dead-letter queues can store failed target deliveries. Therefore, an event pattern is the appropriate feature when event processing should depend on specific values contained in an incoming event.<\/span><\/p>\n

      Question 383<\/b><\/h3>\n

      A DynamoDB application requires every read to return the most recently committed value. Which read consistency option should the developer use?<\/b><\/p>\n

        \n
      1. Eventually consistent read<\/span><\/li>\n
      2. DynamoDB Streams<\/span><\/li>\n
      3. Strongly consistent read<\/span><\/li>\n
      4. Global secondary index<\/span><\/li>\n<\/ol>\n

        Correct Answer: 3<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        DynamoDB provides strongly consistent reads when an application requires the most recently committed value. A strongly consistent read reflects successful writes that occurred before the read began, subject to DynamoDB’s documented consistency behavior. Eventually consistent reads can temporarily return an older value and are suitable when the application can tolerate that behavior. DynamoDB Streams capture item-level changes, while global secondary indexes provide additional access patterns. Therefore, the developer should explicitly request a strongly consistent read when the application requires the latest committed data rather than potentially stale results.<\/span><\/p>\n

        Question 384<\/b><\/h3>\n

        A developer has created an API Gateway REST API and needs separate development and production deployment environments. Which API Gateway feature should be used?<\/b><\/p>\n

          \n
        1. API Gateway stages<\/span><\/li>\n
        2. Lambda extensions<\/span><\/li>\n
        3. API Gateway models<\/span><\/li>\n
        4. Usage plans<\/span><\/li>\n<\/ol>\n

          Correct Answer: 1<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          API Gateway stages allow developers to maintain separate deployment environments for an API, such as development, testing, staging, and production. Each stage can have its own configuration, deployment history, stage variables, and endpoint settings. This allows changes to be tested before they are promoted to production. Usage plans are primarily used to control API access, quotas, and throttling for API consumers. Models define request and response data structures, while Lambda extensions provide functionality around Lambda execution. Therefore, API Gateway stages are appropriate for managing multiple API deployment environments.<\/span><\/p>\n

          Question 385<\/b><\/h3>\n

          An application receives temporary AWS service errors and needs to retry failed requests while avoiding excessive request traffic. Which approach should the developer implement?<\/b><\/p>\n

            \n
          1. Retry continuously without waiting<\/span><\/li>\n
          2. Disable all retries<\/span><\/li>\n
          3. Use exponential backoff with jitter<\/span><\/li>\n
          4. Retry every request immediately<\/span><\/li>\n<\/ol>\n

            Correct Answer: 3<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Exponential backoff with jitter is commonly used to handle transient service failures. With exponential backoff, the delay between retry attempts increases progressively. Jitter adds randomness to the delay so that multiple clients do not retry at exactly the same time. This reduces the possibility of synchronized retry traffic and can help prevent additional load during service degradation. Applications should also use a maximum retry count and distinguish retryable errors from permanent failures. Immediate or unlimited retries can increase traffic and worsen the situation. Therefore, exponential backoff combined with jitter provides a resilient retry strategy for temporary failures.<\/span><\/p>\n

            Question 386<\/b><\/h3>\n

            A developer needs to protect S3 objects from being deleted or overwritten during a required retention period. Which S3 feature should be used?<\/b><\/p>\n

              \n
            1. S3 Transfer Acceleration<\/span><\/li>\n
            2. S3 Object Lock<\/span><\/li>\n
            3. S3 Select<\/span><\/li>\n
            4. S3 Inventory<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              S3 Object Lock provides protection against deletion or overwriting of objects during a configured retention period. It is designed for workloads that require stronger data protection and can operate with governance or compliance retention modes. S3 Transfer Acceleration is designed to improve long-distance data transfer performance. S3 Select allows applications to retrieve specific data from supported objects, while S3 Inventory provides reports about objects and their metadata. When an application needs to prevent protected objects from being modified or deleted for a specified period, S3 Object Lock is the appropriate feature.<\/span><\/p>\n

              Question 387<\/b><\/h3>\n

              An application needs permission to send a message to an Amazon SQS queue. Which IAM action should be granted?<\/b><\/p>\n

                \n
              1. sqs:ReceiveMessage<\/span><\/li>\n
              2. sqs:DeleteMessage<\/span><\/li>\n
              3. sqs:GetQueueAttributes<\/span><\/li>\n
              4. sqs:SendMessage<\/span><\/li>\n<\/ol>\n

                Correct Answer: 4<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                The sqs:SendMessage IAM action grants an application permission to send messages to an Amazon SQS queue. The permission must be granted to the IAM identity or role used by the application and must apply to the target queue. sqs:ReceiveMessage is used to retrieve messages, while sqs:DeleteMessage removes a message after successful processing. sqs:GetQueueAttributes allows applications to retrieve queue configuration information. Following the principle of least privilege, an application that only needs to publish messages should receive the specific SendMessage permission rather than broad SQS permissions.<\/span><\/p>\n

                Question 388<\/b><\/h3>\n

                A developer needs a fully managed NoSQL database that supports key-value and document data models. Which AWS service should be selected?<\/b><\/p>\n

                  \n
                1. Amazon DynamoDB<\/span><\/li>\n
                2. Amazon RDS<\/span><\/li>\n
                3. Amazon Redshift<\/span><\/li>\n
                4. Amazon Aurora<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Amazon DynamoDB is a fully managed NoSQL database service that supports both key-value and document data models. It provides scalable performance without requiring developers to manage database servers. DynamoDB supports features including indexes, transactions, streams, TTL, and multiple capacity options. Amazon RDS and Amazon Aurora provide managed relational database engines, while Amazon Redshift is designed primarily for analytical data warehousing. For an application requiring a scalable managed NoSQL database with key-value or document access patterns, DynamoDB provides the appropriate database model and AWS integration.<\/span><\/p>\n

                  Question 389<\/b><\/h3>\n

                  A developer needs to invoke a Lambda function automatically when records become available in an Amazon Kinesis Data Stream. Which configuration should be used?<\/b><\/p>\n

                    \n
                  1. Lambda destination<\/span><\/li>\n
                  2. Lambda event source mapping<\/span><\/li>\n
                  3. API Gateway integration<\/span><\/li>\n
                  4. S3 notification configuration<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    A Lambda event source mapping connects a Lambda function to supported event sources such as Amazon Kinesis Data Streams. Lambda polls the stream and invokes the function with batches of records according to the configured processing settings. Developers can configure options such as batch size and starting position to control how stream records are processed. Lambda destinations are used to route invocation results, API Gateway integrations handle API requests, and S3 notifications respond to supported S3 events. Therefore, an event source mapping is the correct configuration for processing Kinesis stream records with Lambda.<\/span><\/p>\n

                    Question 390<\/b><\/h3>\n

                    A developer wants CloudWatch Logs to automatically remove log events after a defined number of days. Which configuration should be used?<\/b><\/p>\n

                      \n
                    1. CloudWatch dashboard<\/span><\/li>\n
                    2. CloudWatch alarm<\/span><\/li>\n
                    3. Metric filter<\/span><\/li>\n
                    4. Log group retention period<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 4<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      CloudWatch Logs allows developers to configure a retention period for each log group. When a retention period is specified, log events older than the configured period are automatically removed. This helps control storage costs and prevents logs from being retained indefinitely when they are no longer required. CloudWatch dashboards are used for visualization, alarms monitor metrics or log-derived metrics against conditions, and metric filters extract patterns from logs. None of those directly controls the lifetime of stored log events. Therefore, configuring the log group’s retention period is the appropriate solution.<\/span><\/p>\n

                      Question 391<\/b><\/h3>\n

                      A developer needs to upload a very large object to Amazon S3 by dividing it into multiple smaller parts. Which S3 capability should be used?<\/b><\/p>\n

                        \n
                      1. S3 Multipart Upload<\/span><\/li>\n
                      2. S3 Object Lock<\/span><\/li>\n
                      3. S3 Inventory<\/span><\/li>\n
                      4. S3 Select<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        S3 Multipart Upload allows a large object to be divided into multiple parts and uploaded independently. This approach can improve upload performance and reliability, especially for large files or unstable network connections. Individual parts can be uploaded separately and then assembled by Amazon S3 into the final object. If a part fails, it can be retransmitted without restarting the entire upload. S3 Object Lock provides retention protection, S3 Inventory generates object reports, and S3 Select retrieves selected data from objects. Therefore, Multipart Upload is the appropriate feature for uploading very large S3 objects in separate parts.<\/span><\/p>\n

                        Question 392<\/b><\/h3>\n

                        A Lambda function must retrieve a database password securely at runtime without storing the password directly in the source code. Which AWS service is most appropriate for storing the secret?<\/b><\/p>\n

                          \n
                        1. Amazon CloudWatch<\/span><\/li>\n
                        2. Amazon S3<\/span><\/li>\n
                        3. AWS Secrets Manager<\/span><\/li>\n
                        4. Amazon EventBridge<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          AWS Secrets Manager is designed to securely store sensitive information such as database passwords, API credentials, and other application secrets. A Lambda function can retrieve the secret at runtime by using its execution role and appropriate Secrets Manager permissions. This avoids placing sensitive credentials directly in source code or deployment packages. Secrets Manager can also support secret rotation for supported workloads. CloudWatch is primarily used for monitoring and logs, S3 provides object storage, and EventBridge provides event routing. Therefore, Secrets Manager is the appropriate service for securely storing and retrieving application secrets.<\/span><\/p>\n

                          Question 393<\/b><\/h3>\n

                          A developer wants an AWS Step Functions workflow to execute one branch when a condition is true and another branch when it is false. Which state type should be used?<\/b><\/p>\n

                            \n
                          1. Wait<\/span><\/li>\n
                          2. Task<\/span><\/li>\n
                          3. Map<\/span><\/li>\n
                          4. Choice<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 4<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            The Choice state in AWS Step Functions allows a workflow to evaluate conditions and select different execution paths. Each choice rule can evaluate data from the current state input and route execution to the corresponding state when its condition matches. A default path can also be configured when none of the specified conditions match. Task states perform work, Wait states pause execution for a specified period, and Map states process collections of data. Therefore, the Choice state is appropriate when a Step Functions workflow needs conditional branching based on input values or execution data.<\/span><\/p>\n

                            Question 394<\/b><\/h3>\n

                            A developer wants to prevent a Lambda function from consuming all available account-level concurrency because of a sudden increase in requests. Which Lambda configuration should be considered?<\/b><\/p>\n

                              \n
                            1. Reserved concurrency<\/span><\/li>\n
                            2. Lambda layers<\/span><\/li>\n
                            3. Environment variables<\/span><\/li>\n
                            4. Function URLs<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              Reserved concurrency allows a developer to allocate a specific amount of concurrency to a Lambda function. This establishes a concurrency limit for that function and prevents it from consuming more than the configured amount. Reserved concurrency can also help isolate one function from other functions when managing account-level concurrency. Lambda layers package reusable dependencies, environment variables provide configuration values, and function URLs provide HTTP endpoints. Therefore, reserved concurrency is the relevant configuration when a developer needs to control the maximum number of concurrent executions of a Lambda function.<\/span><\/p>\n

                              Question 395<\/b><\/h3>\n

                              A developer wants an application to publish a single message to multiple independent consumers without creating separate application-level connections to each consumer. Which AWS service pattern should be used?<\/b><\/p>\n

                                \n
                              1. Amazon EBS<\/span><\/li>\n
                              2. Amazon SNS<\/span><\/li>\n
                              3. Amazon EFS<\/span><\/li>\n
                              4. Amazon RDS<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Amazon SNS supports a publish-subscribe messaging pattern in which a publisher sends a message to an SNS topic and multiple subscribers can receive the message. This allows applications to distribute notifications or events to multiple independent consumers. Subscribers can include SQS queues, Lambda functions, HTTP endpoints, and other supported destinations. EBS provides block storage for compute workloads, EFS provides shared file storage, and RDS provides managed relational databases. Therefore, SNS is appropriate when one published event needs to be delivered independently to multiple subscribers.<\/span><\/p>\n

                                Question 396<\/b><\/h3>\n

                                A developer needs an API Gateway endpoint to require clients to provide a valid API key before allowing access. Which API Gateway feature should be configured?<\/b><\/p>\n

                                  \n
                                1. Lambda layer<\/span><\/li>\n
                                2. API key and usage plan<\/span><\/li>\n
                                3. S3 bucket policy<\/span><\/li>\n
                                4. DynamoDB condition expression<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  API Gateway API keys can be used to identify and control API clients, while usage plans can associate API keys with API stages and methods and apply throttling or quota settings. This configuration is useful when an API requires clients to present an API key as part of the request. API keys should not be treated as a complete authentication mechanism for sensitive applications; stronger authorization methods such as IAM, Cognito, or Lambda authorizers may be required depending on the architecture. Lambda layers package dependencies, S3 bucket policies control S3 access, and DynamoDB condition expressions control database operations.<\/span><\/p>\n

                                  Question 397<\/b><\/h3>\n

                                  A developer wants to store configuration values such as environment-specific URLs and feature settings securely and retrieve them from applications using AWS services. Which AWS service can provide centralized parameter storage?<\/b><\/p>\n

                                    \n
                                  1. AWS Systems Manager Parameter Store<\/span><\/li>\n
                                  2. Amazon CloudFront<\/span><\/li>\n
                                  3. Amazon Route 53<\/span><\/li>\n
                                  4. Amazon ECR<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    AWS Systems Manager Parameter Store provides centralized storage for configuration data and parameters. Applications can retrieve parameters at runtime instead of embedding configuration values directly into source code. Parameter Store supports standard and advanced parameters and can integrate with AWS Key Management Service for encrypted parameter values. This makes it useful for storing environment-specific configuration and sensitive values when appropriate. CloudFront provides content delivery, Route 53 provides DNS services, and ECR stores container images. Therefore, Systems Manager Parameter Store is a suitable solution for centralized application configuration management.<\/span><\/p>\n

                                    Question 398<\/b><\/h3>\n

                                    A developer wants to encrypt sensitive application data using AWS managed cryptographic keys and integrate encryption operations with AWS services. Which service should be used?<\/b><\/p>\n

                                      \n
                                    1. AWS CloudTrail<\/span><\/li>\n
                                    2. Amazon CloudWatch<\/span><\/li>\n
                                    3. AWS Key Management Service<\/span><\/li>\n
                                    4. Amazon EventBridge<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 3<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      AWS Key Management Service, or AWS KMS, provides managed cryptographic keys that applications and AWS services can use for encryption and decryption operations. KMS integrates with many AWS services and allows administrators to control access to keys through IAM policies and key policies. It can also provide audit information through AWS CloudTrail integration. CloudTrail records API activity, CloudWatch provides monitoring and observability, and EventBridge routes events. Therefore, KMS is the appropriate service when an application needs managed encryption keys and controlled cryptographic operations within AWS.<\/span><\/p>\n

                                      Question 399<\/b><\/h3>\n

                                      A developer wants to ensure that an SQS message that repeatedly fails processing is eventually moved away from the source queue for separate investigation. Which feature should be configured?<\/b><\/p>\n

                                        \n
                                      1. Visibility timeout<\/span><\/li>\n
                                      2. Long polling<\/span><\/li>\n
                                      3. Dead-letter queue<\/span><\/li>\n
                                      4. Message delay<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 3<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        An Amazon SQS dead-letter queue can receive messages that cannot be successfully processed after a configured number of receive attempts. The source queue can be configured with a redrive policy that specifies the dead-letter queue and maximum receive count. This prevents repeatedly failing messages from continuously returning to the main processing flow. Visibility timeout controls how long a received message remains temporarily hidden, long polling reduces empty receives, and message delay postpones message availability. Therefore, a dead-letter queue is the appropriate feature for isolating repeatedly failed messages for later analysis.<\/span><\/p>\n

                                        Question 400<\/b><\/h3>\n

                                        A developer wants to deploy a new Lambda function version to a small percentage of users first and gradually increase traffic after validating the release. Which deployment approach should be used?<\/b><\/p>\n

                                          \n
                                        1. Immediate replacement of the production version<\/span><\/li>\n
                                        2. Manual modification of source code<\/span><\/li>\n
                                        3. Canary deployment<\/span><\/li>\n
                                        4. S3 lifecycle transition<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 3<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          A canary deployment gradually shifts traffic from an existing application version to a new version. With AWS Lambda, traffic shifting can be configured using Lambda aliases and supported deployment mechanisms such as AWS CodeDeploy. A small percentage of traffic can initially be directed to the new version while monitoring application behavior and operational metrics. If the deployment performs as expected, traffic can progressively move to the new version. Immediate replacement provides less opportunity for controlled validation. S3 lifecycle transitions manage object storage classes, not application deployments. Therefore, a canary deployment supports controlled gradual traffic shifting.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Amazon AWS Certified Developer – Associate DVA-C02 Exam Dumps and Practice Test Dumps.   Question 381 A developer wants an application running on an AWS compute service to access AWS resources without storing long-term access keys in the application code. Which approach should be used? Use an IAM role with temporary credentials Store […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18812"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18812"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18812\/revisions"}],"predecessor-version":[{"id":18813,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18812\/revisions\/18813"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18812"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18812"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18812"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}