Was :
$90
Today :
$50
Was :
$108
Today :
$60
Was :
$126
Today :
$70
What Is the DVA-C02 Certification Exam?
The DVA-C02 certification exam is a standardized assessment designed to measure a candidate's knowledge, competencies, and practical understanding within a defined professional field. It serves as the primary requirement for earning the AWS Certified Associate, a credential that represents a recognized level of proficiency in its respective industry. Depending on the field, this may involve theoretical knowledge, applied problem-solving, regulatory understanding, or hands-on procedural competence.
The exam is typically developed and maintained by an accrediting body or professional organization that sets the standards for the AWS Certified Associate. This ensures that anyone who earns the credential has met a consistent benchmark, regardless of where they studied or gained their experience. For many professionals, the DVA-C02 Certification Exam represents a formal checkpoint in their career, one that confirms readiness to take on greater responsibility within their chosen field.
Why the AWS Certified Associate Certification Matters?
Certifications like the AWS Certified Associate exist because industries need a reliable way to verify competence beyond a resume or a job title. Earning this credential signals to employers, clients, and colleagues that a professional has invested time in building a structured foundation of knowledge and has been evaluated against an established standard.
Beyond individual recognition, the AWS Certified Associate certification often supports broader professional development. It can influence hiring decisions, contribute to internal advancement, or serve as a prerequisite for more specialized roles within the field. In many industries, certifications also help standardize expectations across organizations, making it easier for professionals to move between employers or sectors while carrying a credential that is widely understood and respected.
Who Should Take the DVA-C02 Exam?
The DVA-C02 exam is generally relevant to individuals who are either entering a field or looking to formalize skills they have already developed through experience. This can include early-career professionals seeking a credential to support their first steps into the industry, as well as experienced practitioners who want official recognition of knowledge gained on the job.
Students preparing to enter the workforce may also pursue the DVA-C02 exam as a way to strengthen their qualifications before graduating or applying for their first roles. In some fields, employers actively encourage or require staff to pursue this certification as part of ongoing professional development, particularly in industries where standards, safety, or compliance play a significant role in daily responsibilities.
Knowledge and Skills Evaluated in the AWS Certified Developer - Associate
The AWS Certified Developer - Associate is built to evaluate both foundational knowledge and the practical judgment needed to apply that knowledge in real situations. Candidates are generally expected to understand core principles and terminology relevant to their field, along with the reasoning behind established procedures, standards, or best practices.
Depending on the industry, this may include understanding regulatory requirements, following established protocols, applying analytical or technical methods, or exercising sound judgment in situations that require careful decision-making. Rather than testing isolated facts in a vacuum, the AWS Certified Developer - Associate tends to reward candidates who can connect concepts to realistic scenarios, reflecting the kind of thinking expected in day-to-day professional practice.
DVA-C02 Exam Preparation Resources
Preparing for the DVA-C02 certification exam becomes more effective when using high-quality and up-to-date study materials. MyCertsHub provides resources designed to help candidates build knowledge, practice consistently, and become familiar with the actual exam format.
How to Prepare for the DVA-C02 Certification Exam?
Effective preparation for the DVA-C02 certification exam usually begins with a clear understanding of the exam's objectives and structure. Reviewing official guidelines or documentation published by the certifying body provides the most accurate picture of what will be covered and how heavily different areas are weighted.
From there, many candidates benefit from building a structured study plan that breaks preparation into manageable sections over a set period of time. A well-organized DVA-C02 Study Guide can help sequence this material logically, especially for those approaching a topic for the first time. Consistent review, paired with realistic practice, tends to produce better retention than concentrated last-minute studying.
Practical experience, where applicable to the field, also plays an important role in preparation. Working through DVA-C02 Practice Questions and a DVA-C02 practice test can help candidates identify gaps in their understanding and become familiar with the format and pacing of the actual exam. In fields where hands-on skill is assessed, supplementing study with real-world practice or supervised experience often makes the difference between recognizing correct information and genuinely understanding it.
Benefits of Earning the AWS Certified Associate Certification
Successfully earning the AWS Certified Associate certification offers benefits that extend well beyond passing a single exam. It provides documented proof of competence that can be referenced on a resume, professional profile, or internal performance review, offering a clear, third-party validation of skill and knowledge.
The credential can also strengthen professional credibility when working with clients, patients, stakeholders, or colleagues who may not be positioned to evaluate technical or specialized knowledge directly. Over time, this recognition often contributes to expanded career opportunities, whether through new responsibilities, higher-level roles, or eligibility for additional certifications that build on this foundational credential.
Prepare for the DVA-C02 Exam with MyCertsHub
Preparing for the DVA-C02 exam is a process that benefits from organized, consistent effort rather than rushed, last-minute review. MyCertsHub is designed to support that process by offering study resources, practice materials, and educational content that help candidates understand what the AWS Certified Developer - Associate covers and how to approach their preparation thoughtfully.
Whether someone is just beginning to explore the AWS Certified Associate or is in the final stages of reviewing material before their exam date, MyCertsHub aims to serve as a dependable resource throughout that journey. Every candidate's path to certification looks a little different, and the goal remains the same: to provide clear, genuinely useful information that supports real understanding of the subject matter.
Amazon DVA-C02 Sample Question Answers
Question # 1
A company runs a batch processing application by using AWS Lambda functions andAmazon API Gateway APIs with deployment stages for development, user acceptancetesting and production A development team needs to configure the APIs in the deploymentstages to connect to third-party service endpoints.Which solution will meet this requirement?
A. Store the third-party service endpoints in Lambda layers that correspond to the stage B. Store the third-party service endpoints in API Gateway stage variables that correspondto the stage C. Encode the third-party service endpoints as query parameters in the API Gatewayrequest URL. D. Store the third-party service endpoint for each environment in AWS AppConfig
Answer: B
Explanation: API Gateway stage variables are name-value pairs that can be defined as
configuration attributes associated with a deployment stage of a REST API. They act like
environment variables and can be used in the API setup and mapping templates. For
example, the development team can define a stage variable named endpoint and assign it
different values for each stage, such as dev.example.com for development,
uat.example.com for user acceptance testing, and prod.example.com for production. Then,
the team can use the stage variable value in the integration request URL, such as http://$ {
stageVariables.endpoint}/api. This way, the team can use the same API setup with different
endpoints at each stage by resetting the stage variable value. The other solutions are
either not feasible or not cost-effective. Lambda layers are used to package and load
dependencies for Lambda functions, not for storing endpoints. Encoding the endpoints as
query parameters would expose them to the public and make the request URL
unnecessarily long. Storing the endpoints in AWS AppConfig would incur additional costs and complexity, and would require additional logic to retrieve the values from the
configuration store. References
Using Amazon API Gateway stage variables
Setting up stage variables for a REST API deployment
Setting stage variables using the Amazon API Gateway console
Question # 2
A developer is creating an AWS Lambda function in VPC mode An Amazon S3 event willinvoke the Lambda function when an object is uploaded into an S3 bucket The Lambdafunction will process the object and produce some analytic results that will be recorded intoa file Each processed object will also generate a log entry that will be recorded into a file.Other Lambda functions. AWS services, and on-premises resources must have access tothe result files and log file. Each log entry must also be appended to the same shared logfile. The developer needs a solution that can share files and append results into an existingfile.Which solution should the developer use to meet these requirements?
A. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS filesystem in Lambda. Store the result files and log file in the mount point. Append the logentries to the log file. B. Create an Amazon Elastic Block Store (Amazon EBS) Multi-Attach enabled volumeAttach the EBS volume to all Lambda functions. Update the Lambda function code to download the log file, append the log entries, and upload the modified log file to AmazonEBS C. Create a reference to the /tmp local directory. Store the result files and log file by usingthe directory reference. Append the log entry to the log file. D. Create a reference to the /opt storage directory Store the result files and log file by usingthe directory reference Append the log entry to the log file
A company has built an AWS Lambda function to convert large image files into output filesthat can be used in a third-party viewer application The company recently added a newmodule to the function to improve the output of the generated files However, the newmodule has increased the bundle size and has increased the time that is needed to deploychanges to the function code.How can a developer increase the speed of the Lambda function deployment?
A. Use AWS CodeDeploy to deploy the function code B. Use Lambda layers to package and load dependencies. C. Increase the memory size of the function. D. Use Amazon S3 to host the function dependencies
Answer: B
Explanation: Using Lambda layers is a way to reduce the size of the deployment package
and speed up the deployment process. Lambda layers are reusable components that can
contain libraries, custom runtimes, or other dependencies. By using layers, the developer
can separate the core function logic from the dependencies, and avoid uploading them
every time the function code changes. Layers can also be shared across multiple functions
or accounts, which can improve consistency and maintainability. References
Working with AWS Lambda layers
AWS Lambda Layers Best Practices
Best practices for working with AWS Lambda functionsD. Use Amazon S3 to host the function dependencies
Answer: B
Explanation: Using Lambda layers is a way to reduce the size of the deployment package
and speed up the deployment process. Lambda layers are reusable components that can
contain libraries, custom runtimes, or other dependencies. By using layers, the developer
can separate the core function logic from the dependencies, and avoid uploading them
every time the function code changes. Layers can also be shared across multiple functions
or accounts, which can improve consistency and maintainability. References
Working with AWS Lambda layers
AWS Lambda Layers Best Practices
Best practices for working with AWS Lambda functions
Question # 4
A developer is creating an Amazon DynamoDB table by using the AWS CLI TheDynamoDB table must use server-side encryption with an AWS owned encryption keyHow should the developer create the DynamoDB table to meet these requirements?
A. Create an AWS Key Management Service (AWS KMS) customer managed key. Providethe key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter duringcreation of the DynamoDB table B. Create an AWS Key Management Service (AWS KMS) AWS managed key Provide thekey's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation ofthe DynamoDB table C. Create an AWS owned key Provide the key's Amazon Resource Name (ARN) in theKMSMasterKeyld parameter during creation of the DynamoDB table. D. Create the DynamoDB table with the default encryption options
Answer: D
Explanation: When creating an Amazon DynamoDB table using the AWS CLI, server-side
encryption with an AWS owned encryption key is enabled by default. Therefore, the
developer does not need to create an AWS KMS key or specify the KMSMasterKeyId
parameter. Option A and B are incorrect because they suggest creating customermanaged
and AWS-managed KMS keys, which are not needed in this scenario. Option C
is also incorrect because AWS owned keys are automatically used for server-side
encryption by default.
Question # 5
A developer is working on an ecommerce website The developer wants to review serverlogs without logging in to each of the application servers individually. The website runs onmultiple Amazon EC2 instances, is written in Python, and needs to be highly availableHow can the developer update the application to meet these requirements with MINIMUMchanges?
A. Rewrite the application to be cloud native and to run on AWS Lambda, where the logscan be reviewed in Amazon CloudWatch B. Set up centralized logging by using Amazon OpenSearch Service, Logstash, andOpenSearch Dashboards C. Scale down the application to one larger EC2 instance where only one instance isrecording logs D. Install the unified Amazon CloudWatch agent on the EC2 instances Configure the agentto push the application logs to CloudWatch
Answer: D
Explanation: The unified Amazon CloudWatch agent can collect both system metrics and
log files from Amazon EC2 instances and on-premises servers. By installing and
configuring the agent on the EC2 instances, the developer can easily access and analyze
the application logs in CloudWatch without logging in to each server individually. This
option requires minimum changes to the existing application and does not affect its
availability or scalability. References
Using the CloudWatch Agent
Collecting Metrics and Logs from Amazon EC2 Instances and On-Premises
Servers with the CloudWatch Agent
Question # 6
A developer is creating a serverless application that uses an AWS Lambda function Thedeveloper will use AWS CloudFormation to deploy the application The application will writelogs to Amazon CloudWatch Logs The developer has created a log group in aCloudFormation template for the application to use The developer needs to modify theCloudFormation template to make the name of the log group available to the application atruntimeWhich solution will meet this requirement?
A. Use the AWS:lnclude transform in CloudFormation to provide the log group's name tothe application B. Pass the log group's name to the application in the user data section of theCloudFormation template. C. Use the CloudFormation template's Mappings section to specify the log group's namefor the application. D. Pass the log group's Amazon Resource Name (ARN) as an environment variable to theLambda function
Answer: D
Explanation: FunctionName: MyLambdaFunction
Code:
S3Bucket: your-lambda-code-bucket
S3Key: lambda-code.zip
Runtime: nodejs14.x # Specify the desired runtime for your Lambda function
A company is planning to use AWS CodeDeploy to deploy an application to AmazonElastic Container Service (Amazon ECS) During the deployment of a new version of theapplication, the company initially must expose only 10% of live traffic to the new version ofthe deployed application. Then, after 15 minutes elapse, the company must route all theremaining live traffic to the new version of the deployed application.Which CodeDeploy predefined configuration will meet these requirements?
A. CodeDeployDefault ECSCanary10Percent15Minutes B. CodeDeployDefault LambdaCanary10Percent5Minutes C. CodeDeployDefault LambdaCanary10Percent15Minutes D. CodeDeployDefault ECSLinear10PercentEvery1 Minutes
Answer: A
Explanation: The predefined configuration
"CodeDeployDefault.ECSCanary10Percent15Minutes" is designed for Amazon Elastic
Container Service (Amazon ECS) deployments and meets the specified requirements. It
will perform a canary deployment, which means it will initially route 10% of live traffic to the
new version of the application, and then after 15 minutes elapse, it will automatically route
all the remaining live traffic to the new version. This gradual deployment approach allows the company to verify the health and performance of the new version with a small portion of
traffic before fully deploying it to all users.
Question # 8
A developer is creating an AWS Lambda function. The Lambda function needs an externallibrary to connect to a third-party solution The external library is a collection of files with atotal size of 100 MB The developer needs to make the external library available to theLambda execution environment and reduce the Lambda package spaceWhich solution will meet these requirements with the LEAST operational overhead?
A. Create a Lambda layer to store the external library Configure the Lambda function touse the layer B. Create an Amazon S3 bucket Upload the external library into the S3 bucket. Mount theS3 bucket folder in the Lambda function Import the library by using the proper folder in themount point. C. Load the external library to the Lambda function's /tmp directory during deployment ofthe Lambda package. Import the library from the /tmp directory. D. Create an Amazon Elastic File System (Amazon EFS) volume. Upload the externallibrary to the EFS volume Mount the EFS volume in the Lambda function. Import the libraryby using the proper folder in the mount point.
Answer: A
Explanation: Create a Lambda layer to store the external library. Configure the Lambda
function to use the layer. This will allow the developer to make the external library available
to the Lambda execution environment without having to include it in the Lambda package,
which will reduce the Lambda package space. Using a Lambda layer is a simple and
straightforward solution that requires minimal operational overhead.
A developer is investigating an issue in part of a company's application. In the applicationmessages are sent to an Amazon Simple Queue Service (Amazon SQS) queue The AWSLambda function polls messages from the SQS queue and sends email messages by usingAmazon Simple Email Service (Amazon SES) Users have been receiving duplicate emailmessages during periods of high traffic.Which reasons could explain the duplicate email messages? (Select TWO.)
A. Standard SQS queues support at-least-once message delivery B. Standard SQS queues support exactly-once processing, so the duplicate emailmessages are because of user error. C. Amazon SES has the DomainKeys Identified Mail (DKIM) authentication incorrectlyconfigured D. The SQS queue's visibility timeout is lower than or the same as the Lambda function'stimeout. E. The Amazon SES bounce rate metric is too high.
Answer: A,D
Explanation: Standard SQS queues support at-least-once message delivery, which means
that a message can be delivered more than once to the same or different consumers. This
can happen if the message is not deleted from the queue before the visibility timeout
expires, or if there is a network issue or a system failure. The SQS queue’s visibility timeout
is the period of time that a message is invisible to other consumers after it is received by
one consumer. If the visibility timeout is lower than or the same as the Lambda function’s
timeout, the Lambda function might not be able to process and delete the message before
it becomes visible again, leading to duplicate processing and email messages. To avoid
this, the visibility timeout should be set to at least 6 times the length of the Lambda
function’s timeout. The other options are not related to the issue of duplicate email
messages. References
Using the Amazon SQS message deduplication ID
Exactly-once processing - Amazon Simple Queue Service
Amazon SQS duplicated messages in queue - Stack Overflow
amazon web services - How long can duplicate SQS messages persist …
Standard SQS - Duplicate message | AWS re:Post - Amazon Web Services, Inc.
Question # 10
A company developed an API application on AWS by using Amazon CloudFront. AmazonAPI Gateway, and AWS Lambda. The API has a minimum of four requests every second Adeveloper notices that many API users run the same query by using the POST method.The developer wants to cache the POST request to optimize the API resources.Which solution will meet these requirements'?
A. Configure the CloudFront cache Update the application to return cached content basedupon the default request headers. B. Override the cache method in me selected stage of API Gateway Select the POSTmethod. C. Save the latest request response in Lambda /tmp directory Update the Lambda functionto check the /tmp directory D. Save the latest request m AWS Systems Manager Parameter Store Modify the Lambdafunction to take the latest request response from Parameter Store
Answer: A
Explanation: This solution will meet the requirements by using Amazon CloudFront, which
is a content delivery network (CDN) service that speeds up the delivery of web content and
APIs to end users. The developer can configure the CloudFront cache, which is a set of
edge locations that store copies of popular or recently accessed content close to the
viewers. The developer can also update the application to return cached content based
upon the default request headers, which are a set of HTTP headers that CloudFront
automatically forwards to the origin server and uses to determine whether an object in an
edge location is still valid. By caching the POST requests, the developer can optimize the
API resources and reduce the latency for repeated queries. Option B is not optimal
because it will override the cache method in the selected stage of API Gateway, which is
not possible or effective as API Gateway does not support caching for POST methods by
default. Option C is not optimal because it will save the latest request response in Lambda
/tmp directory, which is a local storage space that is available for each Lambda function
invocation, not a cache that can be shared across multiple invocations or requests. Option
D is not optimal because it will save the latest request in AWS Systems Manager
Parameter Store, which is a service that provides secure and scalable storage for
configuration data and secrets, not a cache for API responses.
References: [Amazon CloudFront], [Caching Content Based on Request Headers]
Question # 11
A company hosts its application on AWS. The application runs on an Amazon ElasticContainer Service (Amazon ECS) cluster that uses AWS Fargate. The cluster runs behindan Application Load Balancer The application stores data in an Amazon Aurora database Adeveloper encrypts and manages database credentials inside the applicationThe company wants to use a more secure credential storage method and implementperiodic credential rotation.Which solution will meet these requirements with the LEAST operational overhead?
A. Migrate the secret credentials to Amazon RDS parameter groups. Encrypt theparameter by using an AWS Key Management Service (AWS KMS) key Turn on secretrotation. Use 1AM policies and roles to grant AWS KMS permissions to access AmazonRDS. B. Migrate the credentials to AWS Systems Manager Parameter Store. Encrypt theparameter by using an AWS Key Management Service (AWS KMS) key. Turn on secretrotation. Use 1AM policies and roles to grant Amazon ECS Fargate permissions to accessto AWS Secrets Manager C. Migrate the credentials to ECS Fargate environment variables. Encrypt the credentialsby using an AWS Key Management Service (AWS KMS) key Turn on secret rotation. Use1AM policies and roles to grant Amazon ECS Fargate permissions to access to AWSSecrets Manager. D. Migrate the credentials to AWS Secrets Manager. Encrypt the credentials by using anAWS Key Management Service (AWS KMS) key Turn on secret rotation Use 1AM policiesand roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Managerby using keys.
Answer: D
Explanation: AWS Secrets Manager is a service that helps you store, distribute, and rotate
secrets securely. You can use Secrets Manager to migrate your credentials from your
application code to a secure and encrypted storage. You can also enable automatic
rotation of your secrets by using AWS Lambda functions or custom logic. You can use IAM
policies and roles to grant your Amazon ECS Fargate tasks permissions to access your
secrets from Secrets Manager. This solution minimizes the operational overhead of
managing your credentials and enhances the security of your application. References
Why You Should Audit and Rotate Your AWS Credentials Periodically - Cloud
Academy
Top 5 AWS root account best practices - TheServerSide
Question # 12
A developer is building a microservices-based application by using Python on AWS andseveral AWS services The developer must use AWS X-Ray The developer views theservice map by using the console to view the service dependencies. During testing, thedeveloper notices that some services are missing from the service mapWhat can the developer do to ensure that all services appear in the X-Ray service map?
A. Modify the X-Ray Python agent configuration in each service to increase the samplingrate B. Instrument the application by using the X-Ray SDK for Python. Install the X-Ray SDK forall the services that the application uses C. Enable X-Ray data aggregation in Amazon CloudWatch Logs for all the services that theapplication uses D. Increase the X-Ray service map timeout value in the X-Ray console
Answer: B
Explanation: The X-Ray SDK for Python provides libraries and tools for instrumenting
Python applications that use AWS services and other AWS X-Ray integrations. By
installing the X-Ray SDK for all the services that the application uses, the developer can
ensure that all the service dependencies are captured and displayed in the X-Ray service
map. The other options are not relevant or effective for this scenario. References
AWS X-Ray SDK for Python
Instrumenting a Python Application
Question # 13
A company is using Amazon API Gateway to invoke a new AWS Lambda function Thecompany has Lambda function versions in its PROD and DEV environments. In eachenvironment, there is a Lambda function alias pointing to the corresponding Lambdafunction version API Gateway has one stage that is configured to point at the PROD aliasThe company wants to configure API Gateway to enable the PROD and DEV Lambdafunction versions to be simultaneously and distinctly availableWhich solution will meet these requirements?
A. Enable a Lambda authorizer for the Lambda function alias in API Gateway RepublishPROD and create a new stage for DEV Create API Gateway stage variables for the PRODand DEV stages. Point each stage variable to the PROD Lambda authorizer to the DEVLambda authorizer. B. Set up a gateway response in API Gateway for the Lambda function alias. RepublishPROD and create a new stage for DEV. Create gateway responses in API Gateway forPROD and DEV Lambda aliases C. Use an environment variable for the Lambda function alias in API Gateway. RepublishPROD and create a new stage for development. Create API gateway environmentvariables for PROD and DEV stages. Point each stage variable to the PROD Lambdafunction alias to the DEV Lambda function alias. D. Use an API Gateway stage variable to configure the Lambda function alias RepublishPROD and create a new stage for development Create API Gateway stage variables forPROD and DEV stages Point each stage variable to the PROD Lambda function alias andto the DEV Lambda function alias
Answer: D
Explanation: The best solution is to use an API Gateway stage variable to configure the
Lambda function alias. This allows you to specify the Lambda function name and its alias
or version using the syntax function_name:$ {stageVariables.variable_name} in the
Integration Request. You can then create different stages in API Gateway, such as PROD
and DEV, and assign different values to the stage variable for each stage. This way, you
can invoke different Lambda function versions or aliases based on the stage that you are
using, without changing the function name in the Integration Request. References
Using API Gateway stage variables to manage Lambda functions
How to point AWS API gateway stage to specific lambda function alias?
Setting stage variables using the Amazon API Gateway console
Amazon API Gateway stage variables reference
Question # 14
A company is preparing to migrate an application to the company's first AWS environmentBefore this migration, a developer is creating a proof-of-concept application to validate amodel for building and deploying container-based applications on AWS.Which combination of steps should the developer take to deploy the containerized proof-ofconceptapplication with the LEAST operational effort? (Select TWO.)
A. Package the application into a zip file by using a command line tool Upload the packageto Amazon S3 B. Package the application into a container image by using the Docker CLI. Upload theimage to Amazon Elastic Container Registry (Amazon ECR) C. Deploy the application to an Amazon EC2 instance by using AWS CodeDeploy. D. Deploy the application to Amazon Elastic Kubernetes Service (Amazon EKS) on AWSFargate E. Deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWSFargate
Answer: B,E
Explanation: To deploy a containerized application on AWS with the least operational
effort, the developer should package the application into a container image by using the
Docker CLI and upload the image to Amazon ECR, which is a fully managed container
registry service. Then, the developer should deploy the application to Amazon ECS on
AWS Fargate, which is a serverless compute engine for containers that eliminates the need
to provision and manage servers or clusters. Amazon ECS will automatically scale, load
balance, and monitor the application. References
How to Deploy Docker Containers | AWS
Deploy a Web App Using AWS App Runner
How to Deploy Containerized Apps on AWS Using ECR and Docker
Question # 15
A developer is building a serverless application that is based on AWS Lambda. Thedeveloper initializes the AWS software development kit (SDK) outside of the Lambdahandcar function.What is the PRIMARY benefit of this action?
A. Improves legibility and systolic convention B. Takes advantage of runtime environment reuse C. Provides better error handling D. Creates a new SDK instance for each invocation
Answer: B
Explanation: This benefit occurs when initializing the AWS SDK outside of the Lambda
handler function because it allows the SDK instance to be reused across multiple
invocations of the same function. This can improve performance and reduce latency by
avoiding unnecessary initialization overhead. If the SDK is initialized inside the handler
function, it will create a new SDK instance for each invocation, which can increase memory
usage and execution time.
Reference: [AWS Lambda execution environment], [Best Practices for Working with AWS
Lambda Functions]
Question # 16
A company has a social media application that receives large amounts of traffic User postsand interactions are continuously updated in an Amazon RDS database The data changesfrequently, and the data types can be complex The application must serve read requestswith minimal latencyThe application's current architecture struggles to deliver these rapid data updatesefficiently The company needs a solution to improve the application's performance.Which solution will meet these requirements'?
A. Use Amazon DynamoDB Accelerator (DAX) in front of the RDS database to provide acaching layer for the high volume of rapidly changing data B. Set up Amazon S3 Transfer Acceleration on the RDS database to enhance the speed ofdata transfer from the databases to the application. C. Add an Amazon CloudFront distribution in front of the RDS database to provide acaching layer for the high volume of rapidly changing data D. Create an Amazon ElastiCache for Redis cluster. Update the application code to use awrite-through caching strategy and read the data from Redis.
Answer: D
Explanation: Creating an Amazon ElastiCache for Redis cluster is the best solution for
improving the application’s performance. Redis is an in-memory data store that can serve
read requests with minimal latency and handle complex data types, such as lists, sets,
hashes, and streams. By using a write-through caching strategy, the application can ensure
that the data in Redis is always consistent with the data in RDS. The application can read
the data from Redis instead of RDS, reducing the load on the database and improving the
response time. The other solutions are either not feasible or not effective. Amazon
DynamoDB Accelerator (DAX) is a caching service that works only with DynamoDB, not
RDS. Amazon S3 Transfer Acceleration is a feature that speeds up data transfers between
S3 and clients across the internet, not between RDS and the application. Amazon
CloudFront is a content delivery network that can cache static content, such as images,
videos, or HTML files, but not dynamic content, such as user posts and
interactions. References
Amazon ElastiCache for Redis
Caching Strategies and Best Practices - Amazon ElastiCache for Redis
Using Amazon ElastiCache for Redis with Amazon RDS
Amazon DynamoDB Accelerator (DAX)
Amazon S3 Transfer Acceleration
Amazon CloudFront
Question # 17
Users are reporting errors in an application. The application consists of several microservices that are deployed on Amazon Elastic Container Serves (Amazon ECS) with AWSFargate.When combination of steps should a developer take to fix the errors? (Select TWO)
A. Deploy AWS X-Ray as a sidecar container to the micro services. Update the task rolepolicy to allow access to me X -Ray API. B. Deploy AWS X-Ray as a daemon set to the Fargate cluster. Update the service role policy to allow access to the X-Ray API. C. Instrument the application by using the AWS X-Ray SDK. Update the application to usethe Put-XrayTrace API call to communicate with the X-Ray API. D. Instrument the application by using the AWS X-Ray SDK. Update the application tocommunicate with the X-Ray daemon. E. Instrument the ECS task to send the stout and spider- output to Amazon CloudWatchLogs. Update the task role policy to allow the cloudwatch Putlogs action.
Answer: A,E
Explanation: The combination of steps that the developer should take to fix the errors is to
deploy AWS X-Ray as a sidecar container to the microservices and instrument the ECS
task to send the stdout and stderr output to Amazon CloudWatch Logs. This way, the
developer can use AWS X-Ray to analyze and debug the performance of the microservices
and identify any issues or bottlenecks. The developer can also use CloudWatch Logs to
monitor and troubleshoot the logs from the ECS task and detect any errors or exceptions.
The other options either involve using AWS X-Ray as a daemon set, which is not supported
by Fargate, or using the PutTraceSegments API call, which is not necessary when using a
sidecar container.
Reference: Using AWS X-Ray with Amazon ECS
Question # 18
A company has developed a new serverless application using AWS Lambda functions thatwill be deployed using the AWS Serverless Application Model (AWS SAM) CLI.Which step should the developer complete prior to deploying the application?
A. Compress the application to a zip file and upload it into AWS Lambda. B. Test the new AWS Lambda function by first tracing it m AWS X-Ray. C. Bundle the serverless application using a SAM package. D. Create the application environment using the eb create my-env command.
Answer: C
Explanation:
This step should be completed prior to deploying the application because it prepares the
application artifacts for deployment. The AWS Serverless Application Model (AWS SAM) is
a framework that simplifies building and deploying serverless applications on AWS. The
AWS SAM CLI is a command-line tool that helps you create, test, and deploy serverless
applications using AWS SAM templates. The sam package command bundles the
application artifacts, such as Lambda function code and API definitions, and uploads them
to an Amazon S3 bucket. The command also returns a CloudFormation template that is
ready to be deployed with the sam deploy command. Compressing the application to a zip
file and uploading it to AWS Lambda will not work because it does not use AWS SAM
templates or CloudFormation. Testing the new Lambda function by first tracing it in AWS XRay
will not prepare the application for deployment, but only monitor its performance and
errors. Creating the application environment using the eb create my-env command will not
work because it is a command for AWS Elastic Beanstalk, not AWS SAM.
Question # 19
A company notices that credentials that the company uses to connect to an externalsoftware as a service (SaaS) vendor are stored in a configuration file as plaintext.The developer needs to secure the API credentials and enforce automatic credentialsrotation on a quarterly basis.Which solution will meet these requirements MOST securely?
A. Use AWS Key Management Service (AWS KMS) to encrypt the configuration file.Decrypt the configuration file when users make API calls to the SaaS vendor. Enablerotation. B. Retrieve temporary credentials from AWS Security Token Service (AWS STS) every 15minutes. Use the temporary credentials when users make API calls to the SaaS vendor. C. Store the credentials in AWS Secrets Manager and enable rotation. Configure the API tohave Secrets Manager access. D. Store the credentials in AWS Systems Manager Parameter Store and enable rotation.Retrieve the credentials when users make API calls to the SaaS vendor.
Answer: C
Explanation:
Store the credentials in AWS Secrets Manager and enable rotation. Configure the API to
have Secrets Manager access. This is correct. This solution will meet the requirements
most securely, because it uses a service that is designed to store and manage secrets
such as API credentials. AWS Secrets Manager helps you protect access to your
applications, services, and IT resources by enabling you to rotate, manage, and retrieve
secrets throughout their lifecycle1. You can store secrets such as passwords, database
strings, API keys, and license codes as encrypted values2. You can also configure
automatic rotation of your secrets on a schedule that you specify3. You can use the AWS
SDK or CLI to retrieve secrets from Secrets Manager when you need them4. This way, you
can avoid storing credentials in plaintext files or hardcoding them in your code.
Question # 20
A developer is testing an application that invokes an AWS Lambda functionasynchronously. During the testing phase the Lambda function fails to process after tworetries.How can the developer troubleshoot the failure?
A. Configure AWS CloudTrail logging to investigate the invocation failures. B. Configure Dead Letter Queues by sending events to Amazon SQS for investigation. C. Configure Amazon Simple Workflow Service to process any direct unprocessed events. D. Configure AWS Config to process any direct unprocessed events.
Answer: B
Explanation:
This solution allows the developer to troubleshoot the failure by capturing unprocessed
events in a queue for further analysis. Dead Letter Queues (DLQs) are queues that store
messages that could not be processed by a service, such as Lambda, for various reasons,
such as configuration errors, throttling limits, or permissions issues. The developer can
configure DLQs for Lambda functions by sending events to either an Amazon Simple
Queue Service (SQS) queue or an Amazon Simple Notification Service (SNS) topic. The
developer can then inspect the messages in the queue or topic to identify and fix the root
cause of the failure. Configuring AWS CloudTrail logging will not capture invocation failures
for asynchronous Lambda invocations, but only record API calls made by or on behalf of
Lambda. Configuring Amazon Simple Workflow Service (SWF) or AWS Config will not
process any direct unprocessed events, but require additional integration and configuration.
Reference: [Using AWS Lambda with DLQs], [Asynchronous invocation]
Question # 21
A developer is preparing to begin development of a new version of an application. Theprevious version of the application is deployed in a production environment. The developerneeds to deploy fixes and updates to the current version during the development of thenew version of the application. The code for the new version of the application is stored inAWS CodeCommit.Which solution will meet these requirements?
A. From the main branch, create a feature branch for production bug fixes. Create asecond feature branch from the main branch for development of the new version. B. Create a Git tag of the code that is currently deployed in production. Create a Git tag forthe development of the new version. Push the two tags to the CodeCommit repository. C. From the main branch, create a branch of the code that is currently deployed inproduction. Apply an IAM policy that ensures no other other users can push or merge to thebranch. D. Create a new CodeCommit repository for development of the new version of theapplication. Create a Git tag for the development of the new version.
Answer: A
Explanation:
A feature branch is a branch that is created from the main branch to work on a
specific feature or task1. Feature branches allow developers to isolate their work
from the main branch and avoid conflicts with other changes1. Feature branches
can be merged back to the main branch when the feature or task is completed and
tested1.
In this scenario, the developer needs to maintain two parallel streams of work: one
for fixing and updating the current version of the application that is deployed in
production, and another for developing the new version of the application. The
developer can use feature branches to achieve this goal.
The developer can create a feature branch from the main branch for production
bug fixes. This branch will contain the code that is currently deployed in
production, and any fixes or updates that need to be applied to it. The developer
can push this branch to the CodeCommit repository and use it to deploy changes
to the production environment.
The developer can also create a second feature branch from the main branch for
development of the new version of the application. This branch will contain the
code that is under development for the new version, and any changes or
enhancements that are part of it. The developer can push this branch to the
CodeCommit repository and use it to test and deploy the new version of the
application in a separate environment.
By using feature branches, the developer can keep the main branch stable and
clean, and avoid mixing code from different versions of the application. The
developer can also easily switch between branches and merge them when
needed.
Question # 22
A developer is planning to migrate on-premises company data to Amazon S3. The datamust be encrypted, and the encryption Keys must support automate annual rotation. Thecompany must use AWS Key Management Service (AWS KMS) to encrypt the data. When type of keys should the developer use to meet these requirements?
A. Amazon S3 managed keys B. Symmetric customer managed keys with key material that is generated by AWS C. Asymmetric customer managed keys with key material that generated by AWS D. Symmetric customer managed keys with imported key material
Answer: B
Explanation: The type of keys that the developer should use to meet the requirements is
symmetric customer managed keys with key material that is generated by AWS. This way,
the developer can use AWS Key Management Service (AWS KMS) to encrypt the data with
a symmetric key that is managed by the developer. The developer can also enable
automatic annual rotation for the key, which creates new key material for the key every
year. The other options either involve using Amazon S3 managed keys, which do not
support automatic annual rotation, or using asymmetric keys or imported key material,
which are not supported by S3 encryption.
Reference: Using AWS KMS keys to encrypt S3 objects
Question # 23
A developer has code that is stored in an Amazon S3 bucket. The code must be deployedas an AWS Lambda function across multiple accounts in the same AWS Region as the S3bucket an AWS CloudPormation template that runs for each account will deploy theLambda function.What is the MOST secure way to allow CloudFormaton to access the Lambda Code in theS3 bucket?
A. Grant the CloudFormation service role the S3 ListBucket and GetObject permissions.Add a bucket policy to Amazon S3 with the principal of "AWS" (account numbers) B. Grant the CloudFormation service row the S3 GetObfect permission. Add a Bucketpolicy to Amazon S3 with the principal of "'" C. Use a service-based link to grant the Lambda function the S3 ListBucket and GetObjectpermissions by explicitly adding the S3 bucket's account number in the resource. D. Use a service-based link to grant the Lambda function the S3 GetObject permission Adda resource of "** to allow access to the S3 bucket.
Answer: B
Explanation: This solution allows the CloudFormation service role to access the S3 bucket
from any account, as long as it has the S3 GetObject permission. The bucket policy grants
access to any principal with the GetObject permission, which is the least privilege needed
to deploy the Lambda code. This is more secure than granting ListBucket permission,
which is not required for deploying Lambda code, or using a service-based link, which is
not supported for Lambda functions.
Reference: AWS CloudFormation Service Role, Using AWS Lambda with Amazon S3
Question # 24
Users are reporting errors in an application. The application consists of several microservices that are deployed on Amazon Elastic Container Serves (Amazon ECS) with AWSFargate.When combination of steps should a developer take to fix the errors? (Select TWO
A. Deploy AWS X-Ray as a sidecar container to the micro services. Update the task rolepolicy to allow access to me X -Ray API. B. Deploy AWS X-Ray as a daemon set to the Fargate cluster. Update the service rolepolicy to allow access to the X-Ray API. C. Instrument the application by using the AWS X-Ray SDK. Update the application to usethe Put-XrayTrace API call to communicate with the X-Ray API. D. Instrument the application by using the AWS X-Ray SDK. Update the application tocommunicate with the X-Ray daemon. E. Instrument the ECS task to send the stout and spider- output to Amazon CloudWatchLogs. Update the task role policy to allow the cloudwatch Putlogs action.
Answer: A,E
Explanation: The combination of steps that the developer should take to fix the errors is to
deploy AWS X-Ray as a sidecar container to the microservices and instrument the ECS
task to send the stdout and stderr output to Amazon CloudWatch Logs. This way, the
developer can use AWS X-Ray to analyze and debug the performance of the microservices
and identify any issues or bottlenecks. The developer can also use CloudWatch Logs to monitor and troubleshoot the logs from the ECS task and detect any errors or exceptions.
The other options either involve using AWS X-Ray as a daemon set, which is not supported
by Fargate, or using the PutTraceSegments API call, which is not necessary when using a
sidecar container.
Reference: Using AWS X-Ray with Amazon ECS
Question # 25
A company uses a custom root certificate authority certificate chain (Root CA Cert) that is10 KB in size generate SSL certificates for its on-premises HTTPS endpoints. One of thecompany’s cloud based applications has hundreds of AWS Lambda functions that pull datefrom these endpoints. A developer updated the trust store of the Lambda executionenvironment to use the Root CA Cert when the Lambda execution environment isinitialized. The developer bundled the Root CA Cert as a text file in the Lambdasdeployment bundle.After 3 months of development the root CA Cert is no longer valid and must be updated.The developer needs a more efficient solution to update the Root CA Cert for all deployedLambda functions. The solution must not include rebuilding or updating all Lambdafunctions that use the Root CA Cert. The solution must also work for all development,testing and production environment. Each environment is managed in a separate AWSaccount.When combination of steps Would the developer take to meet these environments MOSTcost-effectively? (Select TWO)
A. Store the Root CA Cert as a secret in AWS Secrets Manager. Create a resource-basedpolicy. Add IAM users to allow access to the secret B. Store the Root CA Cert as a Secure Sting parameter in aws Systems ManagerParameter Store Create a resource-based policy. Add IAM users to allow access to thepolicy. C. Store the Root CA Cert in an Amazon S3 bucket. Create a resource- based policy toallow access to the bucket. D. Refactor the Lambda code to load the Root CA Cert from the Root CA Certs location.Modify the runtime trust store inside the Lambda function handler. E. Refactor the Lambda code to load the Root CA Cert from the Root CA Cert's location.Modify the runtime trust store outside the Lambda function handler.
Answer: B,E
Explanation: This solution will meet the requirements by storing the Root CA Cert as a
Secure String parameter in AWS Systems Manager Parameter Store, which is a secure
and scalable service for storing and managing configuration data and secrets. The
resource-based policy will allow IAM users in different AWS accounts and environments to
access the parameter without requiring cross-account roles or permissions. The Lambda code will be refactored to load the Root CA Cert from the parameter store and modify the
runtime trust store outside the Lambda function handler, which will improve performance
and reduce latency by avoiding repeated calls to Parameter Store and trust store
modifications for each invocation of the Lambda function. Option A is not optimal because it
will use AWS Secrets Manager instead of AWS Systems Manager Parameter Store, which
will incur additional costs and complexity for storing and managing a non-secret
configuration data such as Root CA Cert. Option C is not optimal because it will deactivate
the application secrets and monitor the application error logs temporarily, which will cause
application downtime and potential data loss. Option D is not optimal because it will modify
the runtime trust store inside the Lambda function handler, which will degrade performance
and increase latency by repeating unnecessary operations for each invocation of the
Lambda function.
References: AWS Systems Manager Parameter Store, [Using SSL/TLS to Encrypt a
Connection to a DB Instance]
Feedback That Matters: Reviews of Our Amazon DVA-C02 Dumps
Mitesh ButalaAug 14, 2026
I am indebted to MyCertsHub for assisting me in passing DVA-C02! I felt at home on the test because the questions for API Gateway and Lambda were so similar to the real thing.
Vaishali DinAug 13, 2026
I appreciate it, MyCertsHub! Your practice tests not only helped me prepare for the exam, but they also made my everyday AWS coding skills better.
Zayne MillsAug 13, 2026
Shoutout to MyCertsHub for the clear, concise explanations. I passed the exam after entering it in a calm state. Without you, I couldn't have done it.
William ClarkAug 12, 2026
I just wanted to say thanks to MyCertsHub for the fantastic preparation materials! I was able to avoid several difficult questions by only reading the DynamoDB section.
Zoe HoffmanAug 12, 2026
MyCertsHub, thank you for keeping your content current and to the point. Just the right information to pass DVA-C02, no wasted time.
Mitesh Butala
Zayne Mills