DVA-C02 sample questions with answers
The other 181 questions are in the practice tool, with answers revealed as you go.
Start 20 questionsDevelopment with AWS services
- A Node.js function runs on AWS Lambda and must query a PostgreSQL database that sits in private subnets with no public IP address. The function is currently deployed with default networking. What should the team change?
- A REST API forwards requests to a Lambda function that raises errors whose text contains NotFound or Conflict. Clients should receive 404 or 409 respectively. The Lambda code must stay unchanged. Which configuration achieves this?
- A team must rename fields, reshape the JSON body, and map a backend's HTTP status codes to API responses before the client sees them. Which API Gateway integration offers that control?
- A retail company wants one published event to reach three independent processing queues, each with its own consumers and retry behavior. Which SNS subscription endpoint should be used to fan out to the queues?
- A DynamoDB query response includes a LastEvaluatedKey value. What should the client do?
- A standard SQS queue feeds a reconciliation worker. Each job must stay hidden for four minutes after it is enqueued, before any consumer can receive it. Which setting achieves this without a scheduler?
Security
- A mobile game lets players sign in with Google or Facebook and then upload save files directly to a per-player S3 prefix. The app needs temporary AWS credentials for that upload. Which Cognito component provides them?
- A healthcare startup must guarantee that plaintext patient files never reach AWS storage servers, even briefly, and the encryption keys must stay under the company's control. Which approach meets both requirements?
- A Lambda function reads a database password from a plaintext environment variable. The team wants the secret removed from configuration, rotated regularly, and fetched at runtime. What should they use?
- A team schedules deletion of a KMS customer managed key. What happens next?
- Which AWS service automatically scans EC2 instances, container images, and Lambda functions for software vulnerabilities and unintended network exposure?
Deployment
- Inside a resource property, a template should read a database endpoint that is stored in SSM Parameter Store, and it should do so at deploy time without declaring a template parameter. Which syntax accomplishes this?
- Containers in an ECS service run across several Availability Zones and must read and write one POSIX file tree that survives task replacement. Which storage should be attached?
- The release team wants a delivery pipeline to start automatically whenever a new image tag is pushed to a private container registry. What is the native way to wire that up?
- After registering revision 7 of a task definition, a developer needs the existing ECS service to start running that revision. Which CLI call makes the switch?
Troubleshooting and optimization
- A DynamoDB read path has become slow only during busy afternoons. Which CloudWatch metric should be checked first to see whether requests are being rejected for lack of read throughput?
- Users report that some requests to a Lambda-backed feature fail with no code exception, and the function's own error count is flat. Which CloudWatch metric shows whether invocations are being rejected because of concurrency limits?
- A payments function normally finishes in about 200 ms, but a few requests take far longer. Which CloudWatch statistic reveals the slowest execution in each period?
- A Java function on Lambda shows multi-second cold starts after each deployment. Which change most directly reduces the initialization time?