AWS DVA-C02: AWS Certified Developer - Associate

Last checked October 22, 2026 against the official AWS exam page.

1. Question 1Development with AWS Services

   A Lambda function must read items from a DynamoDB table and call an external API. The function needs its own access to DynamoDB, with no hard-coded keys. What should the developer configure?

   1. AAn execution role for the function with a policy that allows the needed DynamoDB actions
   2. BA long-lived IAM access key pair stored in the function's environment variable
   3. CA bucket policy attached to the DynamoDB table that grants object-level read and write actions to callers
   4. DA resource-based policy on the API Gateway REST API that permits invoke requests but no table access
   Show answer and explanationHide answer

   Correct answer: A

   A Lambda execution role provides temporary credentials scoped to the permitted DynamoDB actions, without stored keys. Environment-variable keys are long-lived secrets, and bucket policies and gateway policies do not grant table access.

2. Question 2Security

   Which two configurations let a browser-based app on one domain call an API on another domain safely? (Choose two.)

   1. ACORS headers that allow only the web app's origin
   2. BAllowing every origin with credentials for every method
   3. CPre-flight OPTIONS responses that list the allowed methods and headers
   4. DDisabling HTTPS for faster calls
   5. EA bucket policy granting the browser access
   Show answer and explanationHide answer

   Correct answer: A, C

   Returning CORS headers for the app's origin and answering pre-flight OPTIONS requests with the allowed methods and headers lets the browser make the call safely. Allowing every origin with credentials, disabling HTTPS and bucket policies do not provide that safe, scoped access.

3. Question 3Troubleshooting and Optimization

   A Lambda function times out intermittently when calling an external API. The developer wants to find which downstream call is slow inside each invocation. Which tool gives this detail?

   1. AAWS Trusted Advisor checks for cost optimization and security
   2. BAmazon QuickSight dashboard for request counts
   3. CAWS X-Ray tracing with the function's tracing enabled
   4. DAWS Pricing Calculator estimate for monthly cost
   Show answer and explanationHide answer

   Correct answer: C

   X-Ray traces show the timing of each segment and subsegment within a request, including external calls. Pricing, dashboards and advisory checks do not show per-call timing.

4. Question 4Deployment

   A team deploys a Lambda function with a new version every week and wants to shift 10 percent of traffic to the new version first, then increase it after checks pass. Which feature supports this?

   1. ALambda aliases with weighted routing between two versions
   2. BEditing the function code directly in the production console today
   3. CDisabling the function's logs during each deployment
   4. DDeleting the old version before deploying the new one in the account
   Show answer and explanationHide answer

   Correct answer: A

   Aliases with weighted routing shift a percentage of invocations to a new version and allow gradual promotion. Deleting old versions, live editing and disabling logs remove safeguards.

5. Question 5Development with AWS Services

   A developer needs an application to send a message to an SQS queue and have many consumers process messages independently, each with its own copy. Which pattern fits best?

   1. ASend the message directly to each consumer over HTTP
   2. BWrite the message to a shared file on EC2
   3. CUse a single standard queue with one consumer that forwards copies
   4. DPublish to an SNS topic and subscribe one SQS queue per consumer
   Show answer and explanationHide answer

   Correct answer: D

   Fan-out from SNS to multiple SQS queues gives each consumer its own copy and independent processing. Direct HTTP calls couple the producer to each consumer, shared files do not notify consumers, and a single consumer does not give independent copies.