DVA-C02 AWS Certified Developer Associate Free Practice Questions and Answers

A developer’s application uses API Gateway, Lambda, and S3 to validate uploaded data files. Validation can take a long time, and users currently refresh the dashboard to check progress. The dashboard should update as soon as validation is complete without a full reload. What is the MOST operationally efficient approach?

• A. Use an API Gateway WebSocket API for the client, associate each uploaded file with its connection ID, and push the result to that connection when processing finishes.
• B. Run a WebSocket server on an EC2 micro instance and forward upload status from it to the browser.
• C. Send the user an Amazon SNS email after validation completes.
• D. Store the file details in DynamoDB and use DynamoDB Streams with SNS to update the browser.

A developer must encrypt a PDF larger than 1 MB with an AWS KMS symmetric customer managed key and decrypt it later. The developer plans to use GenerateDataKey. Which approach is appropriate?

• A. Persist the encrypted data key and use the plaintext key in memory with a symmetric algorithm to encrypt the file.
• B. Persist the plaintext data key and use the encrypted key with a symmetric algorithm.
• C. Persist the encrypted key and send the file through the KMS Encrypt API using the plaintext data key.
• D. Persist the plaintext key and use the encrypted key with the KMS Encrypt API.

An application on EC2 connects to an RDS for SQL Server database. The developer needs secure credential storage, automatic rotation, and no credentials in application code. Which solution is MOST secure?

• A. Create an IAM role with database access and attach it to the EC2 instances.
• B. Store credentials in AWS Secrets Manager, rotate the secret and database credentials with Lambda, and retrieve them when needed.
• C. Keep an encrypted credential file in S3 and download it when each EC2 instance launches.
• D. Store the credentials in DynamoDB and update them periodically with Lambda.

A company deploys the same CloudFormation template to separate environments. The QA team needs a notification when a deployment occurs in the final preproduction environment. Which solution meets the requirement?

• A. Create an SNS topic, subscribe the QA team, and configure the preproduction stack to publish notifications to that topic.
• B. Create a Lambda function and an EventBridge rule filtering CloudFormation events for the preproduction stack ARN.
• C. Create a CloudWatch alarm based on CloudFormation metrics filtered by stack name and status.
• D. Use an event source mapping to receive CloudFormation events and invoke Lambda.

Teams need to develop against an API before its backend is ready. They need an API Gateway endpoint that returns configured responses without a live backend. Which solution should be used?

• A. Configure API Gateway resources with a MOCK integration, map the method response and integration response, then deploy a stage.
• B. Create a Lambda function with sample responses and use AWS_PROXY integration.
• C. Run a mock response service on EC2 and configure an AWS integration.
• D. Use HTTP_PROXY integration and a Lambda layer to return status codes.