DVA-C02 AWS Certified Developer Associate Free Practice Questions and Answers

An AWS application consumes messages from one Amazon SQS queue in batches and forwards them to a legacy system through another queue. Some transactions take up to five minutes to process. Updates must not arrive out of order, and the legacy application cannot be changed. Which solution meets the requirement?

• A. Use an SQS FIFO queue and set the visibility timeout to cover processing time.
• B. Use an SQS standard queue with batch entries and configure DelaySeconds.
• C. Use an SQS standard queue with batch entries and set the visibility timeout.
• D. Use an SQS FIFO queue and configure DelaySeconds.

A compute-intensive application runs on EC2 with attached EBS volumes created during deployment. It processes sensitive data that must be encrypted without reducing application performance. What should be configured?

• A. Use encrypted EBS volumes for the EC2 fleet.
• B. Write all data to an encrypted S3 bucket.
• C. Implement a custom application encryption algorithm for all data.
• D. Use ephemeral disks on an AMI with an encrypted root volume.

A developer has tested a Lambda update and wants to expose only 10% of production users to the new code before increasing traffic. Which approach should be used?

• A. Create a new function version and split traffic with a Lambda trigger.
• B. Create a second Lambda function and route 10% of traffic to the test function.
• C. Use a Lambda proxy integration to split traffic between versions.
• D. Publish a new function version and configure a Lambda alias with weighted routing: 90% to the current version and 10% to the new version.

A Lambda function consumes messages from an Amazon SQS standard queue, but some messages are processed more than once. Which option is the MOST cost-effective way to enable message deduplication?

• A. Move to an SQS FIFO queue and use message deduplication IDs.
• B. Create a dead-letter queue.
• C. Limit Lambda concurrency to one.
• D. Replace SQS with Kinesis Data Streams.

A company stores a third-party SaaS API credential as plaintext in a configuration file. The credential must be protected and rotated quarterly. Which solution is MOST secure?

• A. Encrypt the configuration file with KMS and enable key rotation.
• B. Retrieve temporary credentials from AWS STS every 15 minutes.
• C. Store the credential in AWS Secrets Manager, enable rotation, and retrieve it for API calls.
• D. Store it in Systems Manager Parameter Store and enable rotation.