Amazon DVA-C02 practice materials Questions Answers

Exam Code:
DVA-C02
Exam Name:
AWS Certified Developer – Associate Exam
Last Update:
Jun 01,2026

65 Questions Answers Verified by Experts!


PDF + Testing Engine
$50.00
$144.00

Testing Engine (only)
$35.00
$79.00

PDF (only)
$30.00
$65.00

Amazon DVA-C02 Last Week Results!

871
Customers Passed
Amazon DVA-C02
95%
Average Score In Real
Exam At Testing Centre
87%
Questions are designed to align with exam objectives

Amazon DVA-C02 Questions for Amazon Associate Certification Exam 2026

Here’s you can get most updated Amazon DVA-C02 AWS Certified Developer – Associate Exam updated practice questions and explanations in PDF and web-based practice test software. These verified AWS Certified Developer – Associate Exam DVA-C02 questions are enough to practice and prepare for your certification exam. These Amazon DVA-C02 practice questions that will undoubtedly assist you to prepare for the actual Amazon Associate Certification exam. Optionally, you can get premium files for extra help for the exam, besides a huge number of practice questions in the free Amazon DVA-C02 PDF files.

Get a Perfect Exam Score with Actual Amazon DVA-C02 practice questions

You can showcase your skills in the present information technology field with the Amazon Associate Certification DVA-C02 certification. Success in the DVA-C02 exam expands your portfolio to get well-paid jobs. CertsDrive offers real CompTIA Network+ Certification DVA-C02 studyguide to help you earn your desired Amazon certification. Hundreds of IT aspirants have verified their skill set with these Amazon Associate Certification DVA-C02 updated practice questions. Practice exams and PDF questions are formats of our product. You can practice in the actual AWS Certified Developer – Associate Exam DVA-C02 exam environment with our desktop practice test software and web-based practice exam.
 

The Amazon Associate Certification DVA-C02 PDF format is ideal for preparing quickly from any place via smartphones, laptops, and tablets. CertsDrive has been helping DVA-C02 exam applicants for many years. You can also authenticate your skills with the Amazon Certification DVA-C02 exam certificate if you prepare from our exam-aligned study guide. Furthermore, there is a refund policy for users who fail after using AWS Certified Developer – Associate Exam DVA-C02 exam practice questions.

AWS Certified Developer – Associate Exam DVA-C02 practice questions with explanations

 

CertsDrive is the leading website that offers actual Amazon DVA-C02 practice questions PDF for easy preparation. Try free AWS Certified Developer – Associate Exam DVA-C02 practice questions demo before purchasing.
 

UNLOCK FULL
DVA-C02 Exam Features

In Just $11 You can Access

• All Official Question Types
• Interactive Web-Based Practice Test Software
• No Installation or 3rd Party Software Required
• Customize your practice sessions (Free Demo)
• 24/7 Customer Support

Get Full Access

Page: 1 / 13
Total Questions: 65

Questions & Answers PDF

• Question 1

  

  A company has an Amazon S3 bucket that contains sensitive dat

  • The data must be encrypted in transit and at rest. The company encrypts the data in the S3 bucket by using an AWS Key Management Service (AWS KMS) key. A developer needs to grant several other AWS accounts the permission to use the S3 GetObject operation to retrieve the data from the S3 bucket.How can the developer enforce that all requests to retrieve the data provide encryption in transit?
  • Define a resource-based policy on the S3 bucket to deny access when a request meets the condition “aws:SecureTransport”: “false”.
  • Define a resource-based policy on the S3 bucket to allow access when a request meets the condition “aws:SecureTransport”: “false”.
  • Define a role-based policy on the other accounts' roles to deny access when a request meets the condition of “aws:SecureTransport”: “false”.
  • Define a resource-based policy on the KMS key to deny access when a request meets the condition of “aws:SecureTransport”: “false”.

  Reveal Answer Answer: A Next Question

• Question 2

  

  A developer is using an AWS Lambda function to generate avatars for profile pictures that are uploaded to an Amazon S3 bucket. The Lambda function is automatically invoked for profile pictures that are saved under the /original/ S3 prefix. The developer notices that some pictures cause the Lambda function to time out. The developer wants to implement a fallback mechanism by using another Lambda function that resizes the profile picture.Which solution will meet these requirements with the LEAST development effort?

  • Set the image resize Lambda function as a destination of the avatar generator Lambda function for the events that fail processing.
  • Create an Amazon Simple Queue Service (Amazon SQS) queue. Set the SQS queue as a destination with an on failure condition for the avatar generator Lambda function. Configure the image resize Lambda function to poll from the SQS queue.
  • Create an AWS Step Functions state machine that invokes the avatar generator Lambda function and uses the image resize Lambda function as a fallback. Create an Amazon EventBridge rule that matches events from the S3 bucket to invoke the state machine.
  • Create an Amazon Simple Notification Service (Amazon SNS) topic. Set the SNS topic as a destination with an on failure condition for the avatar generator Lambda function. Subscribe the image resize Lambda function to the SNS topic.

  Reveal Answer Answer: C Next Question

• Question 3

  

  A company is building a serverless application on AWS. The application uses an AWS Lambdafunction to process customer orders 24 hours a day, 7 days a week. The Lambda function calls an external vendor's HTTP API to process payments.During load tests, a developer discovers that the external vendor payment processing API occasionally times out and returns errors. The company expects that some payment processing API calls will return errors.The company wants the support team to receive notifications in near real time only when the payment processing external API error rate exceed 5% of the total number of transactions in an hour. Developers need to use an existing Amazon Simple Notification Service (Amazon SNS) topic that is configured to notify the support team.Which solution will meet these requirements?

  • Write the results of payment processing API calls to Amazon CloudWatch. Use Amazon CloudWatch Logs Insights to query the CloudWatch logs. Schedule the Lambda function to check the CloudWatch logs and notify the existing SNS topic.
  • Publish custom metrics to CloudWatch that record the failures of the external payment processing API calls. Configure a CloudWatch alarm to notify the existing SNS topic when error rate exceeds the specified rate.
  • Publish the results of the external payment processing API calls to a new Amazon SNS topic. Subscribe the support team members to the new SNS topic.
  • Write the results of the external payment processing API calls to Amazon S3. Schedule an Amazon Athena query to run at regular intervals. Configure Athena to send notifications to the existing SNS topic when the error rate exceeds the specified rate.

  Reveal Answer Answer: B Next Question

• Question 4

  

  A company has deployed infrastructure on AWS. A development team wants to create an AWS Lambda function that will retrieve data from an Amazon Aurora database. The Amazon Aurora database is in a private subnet in company's VPC. The VPC is named VPC1. The data is relational in nature. The Lambda function needs to access the data securely.Which solution will meet these requirements?

  • Create the Lambda function. Configure VPC1 access for the function. Attach a security group named SG1 to both the Lambda function and the database. Configure the security group inbound and outbound rules to allow TCP traffic on Port 3306.
  • Create and launch a Lambda function in a new public subnet that is in a new VPC named VPC2. Create a peering connection between VPC1 and VPC2.
  • Create the Lambda function. Configure VPC1 access for the function. Assign a security group named SG1 to the Lambda function. Assign a second security group named SG2 to the database. Add an inbound rule to SG1 to allow TCP traffic from Port 3306.
  • Export the data from the Aurora database to Amazon S3. Create and launch a Lambda function in VPC1. Configure the Lambda function query the data from Amazon S3.

  Reveal Answer Answer: B Next Question

• Question 5

  

  A developer is creating an AWS Lambda function that needs credentials to connect to an Amazon RDS for MySQL database. An Amazon S3 bucket currently stores the credentials. The developer needs to improve the existing solution by implementing credential rotation and secure storage. The developer also needs to provide integration with the Lambda function.Which solution should the developer use to store and retrieve the credentials with the LEAST management overhead?

  • Store the credentials in AWS Systems Manager Parameter Store. Select the database that the parameter will access. Use the default AWS Key Management Service (AWS KMS) key to encrypt the parameter. Enable automatic rotation for the parameter. Use the parameter from Parameter Store on the Lambda function to connect to the database.
  • Encrypt the credentials with the default AWS Key Management Service (AWS KMS) key. Store the credentials as environment variables for the Lambda function. Create a second Lambda function to generate new credentials and to rotate the credentials by updating the environment variables of the first Lambda function. Invoke the second Lambda function by using an Amazon EventBridge rule that runs on a schedule. Update the database to use the new credentials. On the first Lambda function, retrieve the credentials from the environment variables. Decrypt the credentials by using AWS KMS, Connect to the database.
  • Store the credentials in AWS Secrets Manager. Set the secret type to Credentials for Amazon RDS database. Select the database that the secret will access. Use the default AWS Key Management Service (AWS KMS) key to encrypt the secret. Enable automatic rotation for the secret. Use the secret from Secrets Manager on the Lambda function to connect to the database.
  • Encrypt the credentials by using AWS Key Management Service (AWS KMS). Store the credentials in an Amazon DynamoDB table. Create a second Lambda function to rotate the credentials. Invoke the second Lambda function by using an Amazon EventBridge rule that runs on a schedule. Update the DynamoDB table. Update the database to use the generated credentials. Retrieve the credentials from DynamoDB with the first Lambda function. Connect to the database.

  Reveal Answer Answer: C Next Question

• Question 6

  

  A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company has set up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in.What is the MOST operationally efficient solution that meets this requirement?

  • Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon API Gateway API to invoke the function. Call the API from the client side when login confirmation is received.
  • Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon Cognito post authentication Lambda trigger for the function.
  • Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Create an Amazon CloudWatch Logs log subscription filter to invoke the function based on the login status.
  • Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose. Create an AWS Lambda function to process the streamed logs and to send the email notification based on the login status of each user.

  Reveal Answer Answer: B Next Question

• Question 7

  

  A company is implementing an application on Amazon EC2 instances. The application needs to process incoming transactions. When the application detects a transaction that is not valid, the application must send a chat message to the company's support team. To send the message, the application needs to retrieve the access token to authenticate by using the chat API.A developer needs to implement a solution to store the access token. The access token must be encrypted at rest and in transit. The access token must also be accessible from other AWS accounts. Which solution will meet these requirements with the LEAST management overhead?

  • Use an AWS Systems Manager Parameter Store SecureString parameter that uses an AWS Key Management Service (AWS KMS) AWS managed key to store the access token. Add a resource-based policy to the parameter to allow access from other accounts. Update the IAM role of the EC2 instances with permissions to access Parameter Store. Retrieve the token from Parameter Store with the decrypt flag enabled. Use the decrypted access token to send the message to the chat.
  • Encrypt the access token by using an AWS Key Management Service (AWS KMS) customer managed key. Store the access token in an Amazon DynamoDB table. Update the IAM role of the EC2 instances with permissions to access DynamoDB and AWS KMS. Retrieve the token from DynamoDB. Decrypt the token by using AWS KMS on the EC2 instances. Use the decrypted access token to send the message to the chat.
  • Use AWS Secrets Manager with an AWS Key Management Service (AWS KMS) customer managed key to store the access token. Add a resource-based policy to the secret to allow access from other accounts. Update the IAM role of the EC2 instances with permissions to access Secrets Manager. Retrieve the token from Secrets Manager. Use the decrypted access token to send the message to the chat.
  • Encrypt the access token by using an AWS Key Management Service (AWS KMS) AWS managed key. Store the access token in an Amazon S3 bucket. Add a bucket policy to the S3 bucket to allow access from other accounts. Update the IAM role of the EC2 instances with permissions to access Amazon S3 and AWS KMS. Retrieve the token from the S3 bucket. Decrypt the token by using AWS KMS on the EC2 instances. Use the decrypted access token to send the massage to the chat.

  Reveal Answer Answer: B Next Question

• Question 8

  

  An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the developer wants to examine the logs of the Lambda function code for errors.Based on this system configuration, where would the developer find the logs?

  • Amazon S3
  • AWS CloudTrail
  • Amazon CloudWatch
  • Amazon DynamoDB

  Reveal Answer Answer: C Next Question

• Question 9

  

  A financial company must store original customer records for 10 years for legal reasons. A complete record contains personally identifiable information (PII). According to local regulations, PII is available to only certain people in the company and must not be shared with third parties. The company needs to make the records available to third-party organizations for statistical analysis without sharing the PII.A developer wants to store the original immutable record in Amazon S3. Depending on who accesses the S3 document, the document should be returned as is or with all the PII removed. The developer has written an AWS Lambda function to remove the PII from the document. The function is named removePii.What should the developer do so that the company can meet the PII requirements while maintaining only one copy of the document?

  • Set up an S3 event notification that invokes the removePii function when an S3 GET request is made. Call Amazon S3 by using a GET request to access the object without PII.
  • Set up an S3 event notification that invokes the removePii function when an S3 PUT request is made. Call Amazon S3 by using a PUT request to access the object without PII.
  • Create an S3 Object Lambda access point from the S3 console. Select the removePii function. Use S3 Access Points to access the object without PII.
  • Create an S3 access point from the S3 console. Use the access point name to call the GetObjectLegalHold S3 API function. Pass in the removePii function name to access the object without PII.

  Reveal Answer Answer: C Next Question

• Question 10

  

  A company wants to share information with a third party. The third party has an HTTP API endpoint that the company can use to share the information. The company has the required API key to access the HTTP API.The company needs a way to manage the API key by using code. The integration of the API key withthe application code cannot affect application performance. Which solution will meet these requirements MOST securely?

  • Store the API credentials in AWS Secrets Manager. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.
  • Store the API credentials in a local code variable. Push the code to a secure Git repository. Use the local code variable at runtime to make the API call.
  • Store the API credentials as an object in a private Amazon S3 bucket. Restrict access to the S3 object by using IAM policies. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.
  • Store the API credentials in an Amazon DynamoDB table. Restrict access to the table by using resource-based policies. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.

  Reveal Answer Answer: B Next Question

Page: 1 / 13
Total Questions: 65

Previous Page Next Page

Types of Questions Support

Both DVA-C02 PDF and Testing Engine have all the practice questions including Multiple Choice, Simulation and Drag Drop Questions.

?
?
??

Free 3 Months Amazon DVA-C02 Exam practice questions with explanations Update

We provide you 3 Months Free Amazon DVA-C02 Exam Updates at no cost.

?
?
??

100% Amazon DVA-C02 refund policy and support policy

We provide you DVA-C02 practice material with policy-based support With refund policy.

?
?
??

Fully SSL Secure System of Purchase for Amazon DVA-C02 Exam

Purchase Amazon DVA-C02 Exam Product with fully SSL Secure system and available in your PrepFiles Account.

?
?
???

We Respect Privacy Policy

We respect full Privacy of our customers and would not share information with any third party.

?
?
??

Fully Exam Environment

Experience official exam objectives Environment with our testing engine.

?
?
??

2 Modes of DVA-C02 Practice Exam in Testing Engine

Testing Mode and Practice Mode.

?
?
??

Exam Score History

Our DVA-C02 Testing Engine will Save your DVA-C02 Exam Score so you can Review it later to improve your results.

?
?
??

Question Selection in Test engine

PrepFiles Test engine Provides Option to choose randomize and non-randomize Questions Set.

?
?
??

Saving Your Exam Notes

Our DVA-C02 Testing Engine provides option to save your exam Notes.

?
?