Amazon DVA-C02 Practice Exams
Last updated on Oct 21,2026- Exam Code: DVA-C02
- Exam Name: AWS Certified Developer - Associate
- Certification Provider: Amazon
- Latest update: Oct 21,2026
A developer is trying get data from an Amazon DynamoDB table called demoman-table. The developer configured the AWS CLI to use a specific IAM use’s credentials and ran the following command.
The command returned errors and no rows were returned.
What is the MOST likely cause of these issues?
- A . The command is incorrect; it should be rewritten to use put-item with a string argument
- B . The developer needs to log a ticket with AWS Support to enable access to the demoman-table
- C . Amazon DynamoOB cannot be accessed from the AWS CLI and needs to called via the REST API
- D . The IAM user needs an associated policy with read access to demoman-table
D
Explanation:
This solution will most likely solve the issues because it will grant the IAM user the necessary permission to access the DynamoDB table using the AWS CLI command. The error message indicates that the IAM user does not have sufficient access rights to perform the scan operation on the table.
Option A is not optimal because it will change the command to use put-item instead of scan, which will not achieve the desired result of getting data from the table.
Option B is not optimal because it will involve contacting AWS Support, which may not be necessary or efficient for this issue.
Option C is not optimal because it will state that DynamoDB cannot be accessed from the AWS CLI, which is incorrect as DynamoDB supports AWS CLI commands.
Reference: AWS CLI for DynamoDB, [IAM Policies for DynamoDB]
A developer is migrating a containerized application from an on-premises environment to the AWS Cloud. The developer is using the AWS CDK to provision a container in Amazon ECS on AWS Fargate. The container is behind an Application Load Balancer (ALB).
When the developer deploys the stack, the deployment fails because the ALB fails health checks. The developer needs to resolve the failed health checks.
Which solutions will meet this requirement? (Select TWO.)
- A . Confirm that the capacity providers for the container have been provisioned and are properly sized.
- B . Confirm that the target group port matches the port mappings in the ECS task definition.
- C . Confirm that a hosted zone associated with the ALB matches a hosted zone that is referenced in
the ECS task definition. - D . Confirm that the ALB listener on the mapped port has a default action that redirects to the application’s health check path endpoint.
- E . Confirm that the ALB listener on the mapped port has a default action that forwards to the correct target group.
B, E
Explanation:
Option B: The target group port in the ALB must match the port specified in the ECS task definition. If there is a mismatch, the ALB health check will fail since it cannot correctly route traffic to the container.
Option E: The ALB listener must have a default action that forwards requests to the correct target group associated with the ECS service. If this configuration is missing, the health check will fail as no traffic is routed to the service.
Option A is irrelevant to resolving health check issues since capacity providers relate to provisioning compute capacity.
Option C (hosted zone) is not directly related to ALB health checks.
Option D (redirecting traffic) is not related to ECS health check configurations.
Reference: AWS ECS Health Check Documentation
In a move toward using microservices, a company’s management team has asked all development teams to build their services so that API requests depend only on that service’s data store. One team is building a Payments service which has its own database; the service needs data that originates in the Accounts database. Both are using Amazon DynamoDB.
What approach will result in the simplest, decoupled, and reliable method to get near-real time updates from the Accounts database?
- A . Use AWS Glue to perform frequent ETL updates from the Accounts database to the Payments database.
- B . Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database.
- C . Use Amazon Data Firehose to deliver all changes from the Accounts database to the Payments database.
- D . Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.
A company is planning to securely manage one-time fixed license keys in AWS. The company’s development team needs to access the license keys in automaton scripts that run in Amazon EC2 instances and in AWS CloudFormation stacks.
Which solution will meet these requirements MOST cost-effectively?
- A . Amazon S3 with encrypted files prefixed with “config”
- B . AWS Secrets Manager secrets with a tag that is named SecretString
- C . AWS Systems Manager Parameter Store SecureString parameters
- D . CloudFormation NoEcho parameters
C
Explanation:
AWS Systems Manager Parameter Store is a service that provides secure, hierarchical storage for configuration data and secrets. Parameter Store supports SecureString parameters, which are encrypted using AWS Key Management Service (AWS KMS) keys. SecureString parameters can be used to store license keys in AWS and retrieve them securely from automation scripts that run in EC2 instances or CloudFormation stacks. Parameter Store is a cost-effective solution because it does not charge for storing parameters or API calls.
Reference: Working with Systems Manager parameters
A company is planning to securely manage one-time fixed license keys in AWS. The company’s development team needs to access the license keys in automaton scripts that run in Amazon EC2 instances and in AWS CloudFormation stacks.
Which solution will meet these requirements MOST cost-effectively?
- A . Amazon S3 with encrypted files prefixed with “config”
- B . AWS Secrets Manager secrets with a tag that is named SecretString
- C . AWS Systems Manager Parameter Store SecureString parameters
- D . CloudFormation NoEcho parameters
C
Explanation:
AWS Systems Manager Parameter Store is a service that provides secure, hierarchical storage for configuration data and secrets. Parameter Store supports SecureString parameters, which are encrypted using AWS Key Management Service (AWS KMS) keys. SecureString parameters can be used to store license keys in AWS and retrieve them securely from automation scripts that run in EC2 instances or CloudFormation stacks. Parameter Store is a cost-effective solution because it does not charge for storing parameters or API calls.
Reference: Working with Systems Manager parameters
A company runs an application on AWS The application uses an AWS Lambda function that is configured with an Amazon Simple Queue Service (Amazon SQS) queue called high priority queue as the event source A developer is updating the Lambda function with another SQS queue called low priority queue as the event source The Lambda function must always read up to 10 simultaneous messages from the high priority queue before processing messages from low priority queue. The Lambda function must be limited to 100 simultaneous invocations.
Which solution will meet these requirements?
- A . Set the event source mapping batch size to 10 for the high priority queue and to 90 for the low priority queue
- B . Set the delivery delay to 0 seconds for the high priority queue and to 10 seconds for the low priority queue
- C . Set the event source mapping maximum concurrency to 10 for the high priority queue and to 90 for the low priority queue
- D . Set the event source mapping batch window to 10 for the high priority queue and to 90 for the low priority queue
C
Explanation:
Lambda Concurrency: The ‘maximum concurrency’ setting in event source mappings controls the maximum number of simultaneous invocations Lambda allows for that specific source.
Prioritizing Queues: Setting a lower maximum concurrency for the ‘high priority queue’ ensures it’s processed first while allowing more concurrent invocations from the ‘low priority queue’. Batching: Batch size settings affect the number of messages Lambda retrieves from a queue per invocation, which is less relevant to the prioritization requirement.
Reference: Lambda Event Source Mappings: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html
Lambda Concurrency: https://docs.aws.amazon.com/lambda/latest/dg/configuration-concurrency.html
A developer is investigating an issue in part of a company’s application. In the application messages are sent to an Amazon Simple Queue Service (Amazon SQS) queue The AWS Lambda function polls messages from the SQS queue and sends email messages by using Amazon Simple Email Service (Amazon SES) Users have been receiving duplicate email messages during periods of high traffic.
Which reasons could explain the duplicate email messages? (Select TWO.)
- A . Standard SQS queues support at-least-once message delivery
- B . Standard SQS queues support exactly-once processing, so the duplicate email messages are because of user error.
- C . Amazon SES has the DomainKeys Identified Mail (DKIM) authentication incorrectly configured
- D . The SQS queue’s visibility timeout is lower than or the same as the Lambda function’s timeout.
- E . The Amazon SES bounce rate metric is too high.
A
Explanation:
SQS Delivery Behavior: Standard SQS queues guarantee at-least-once delivery, meaning messages may be processed more than once. This can lead to duplicate emails in this scenario.
Visibility Timeout: If the visibility timeout on the SQS queue is too short, a message might become visible for another consumer before the first Lambda function finishes processing it. This can also lead to duplicates.
Reference: Amazon SQS Delivery Semantics: [invalid URL removed]
Amazon SQS Visibility
Timeout: https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html
A developer is investigating an issue in part of a company’s application. In the application messages are sent to an Amazon Simple Queue Service (Amazon SQS) queue The AWS Lambda function polls messages from the SQS queue and sends email messages by using Amazon Simple Email Service (Amazon SES) Users have been receiving duplicate email messages during periods of high traffic.
Which reasons could explain the duplicate email messages? (Select TWO.)
- A . Standard SQS queues support at-least-once message delivery
- B . Standard SQS queues support exactly-once processing, so the duplicate email messages are because of user error.
- C . Amazon SES has the DomainKeys Identified Mail (DKIM) authentication incorrectly configured
- D . The SQS queue’s visibility timeout is lower than or the same as the Lambda function’s timeout.
- E . The Amazon SES bounce rate metric is too high.
A
Explanation:
SQS Delivery Behavior: Standard SQS queues guarantee at-least-once delivery, meaning messages may be processed more than once. This can lead to duplicate emails in this scenario.
Visibility Timeout: If the visibility timeout on the SQS queue is too short, a message might become visible for another consumer before the first Lambda function finishes processing it. This can also lead to duplicates.
Reference: Amazon SQS Delivery Semantics: [invalid URL removed]
Amazon SQS Visibility
Timeout: https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html
A developer is creating a new REST API by using Amazon API Gateway and AWS Lambda. The development team tests the API and validates responses for the known use cases before deploying the API to the production environment.
The developer wants to make the REST API available for testing by using API Gateway locally.
Which AWS Serverless Application Model Command Line Interface (AWS SAM CLI) subcommand will meet these requirements?
- A . Sam local invoke
- B . Sam local generate-event
- C . Sam local start-lambda
- D . Sam local start-api
D
Explanation:
The AWS Serverless Application Model Command Line Interface (AWS SAM CLI) is a command-line tool for local development and testing of Serverless applications2. The sam local start-api subcommand of AWS SAM CLI is used to simulate a REST API by starting a new local endpoint3.
Therefore, option D is correct.
A company maintains a REST service using Amazon API Gateway and the API Gateway native API key validation. The company recently launched a new registration page, which allows users to sign up for the service. The registration page creates a new API key using CreateApiKey and sends the new key to the user. When the user attempts to call the API using this key. the user receives a 403 Forbidden error. Existing users are unaffected and can still call the API.
What code updates will grant these new users access to the API?
- A . The createDeploymer.t method must be called so the API can be redeployed to include the newly created API key.
- B . The updateAuthorizer method must be called to update the API’s authorizer to include the newly created API key
- C . The importApiKeys method must be called to import all newly created API keys into the current stage of the API.
- D . The createUsagePlanKey method must be called to associate the newly created API key with the correct usage plan.