The AWS Certified Developer – Associate (DVA-C02) exam tests your proficiency in developing applications on AWS. It is designed for developers looking to validate their skills in AWS development.
A company needs to securely store sensitive application secrets. Which AWS service should they use?
AAmazon S3
BAWS Secrets Manager
CAWS Config
DAmazon RDS
Explanation
AWS Secrets Manager is specifically designed for storing and managing sensitive information like secrets, while S3 is for object storage and the others serve different purposes.
Q222
You are configuring an API Gateway and want to restrict its usage. What will happen if you don't set a usage plan?
AAPI access is completely blocked.
BUsage is unrestricted by default.
CAccess only allowed for certain IPs.
DAll usage is throttled automatically.
Explanation
Without a usage plan, the API Gateway allows unlimited unrestricted usage; the other options imply restrictions or behavior that does not occur by default.
Q223
Which service allows you to run serverless applications?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAmazon S3
Explanation
AWS Lambda enables serverless computing, while EC2 is for instances, RDS is for databases, and S3 is for storage.
Q224
A company needs to automate backups for their RDS instances based on the time of day. What should they use?
AAWS Backup
BRDS Snapshots
CCloudWatch Events
DElastic Beanstalk
Explanation
AWS Backup automates RDS backups, while Snapshots are manual, CloudWatch events do not specifically handle backups, and Elastic Beanstalk is for application deployment.
Q225
What happens when you set an S3 bucket policy that blocks public access but use the object's ACL to allow it?
AAccess is granted
BAccess is always denied
CBucket access overrides ACL
DACL access alone granted
Explanation
The bucket policy takes precedence over the ACL, meaning that access is denied despite the ACL setting.
Q226
Which AWS service handles scalable email sending?
AAmazon SES
BAmazon EC2
CAWS Lambda
DAmazon RDS
Explanation
Amazon SES is specifically designed for sending emails, while the others serve different purposes.
Q227
A company needs to run code in response to event triggers without managing servers. Which AWS service should they use?
AAmazon EC2
BAWS Lambda
CAWS Fargate
DAmazon ECS
Explanation
AWS Lambda allows running code in response to events without server management, unlike the other options which require infrastructure management.
Q228
What happens when you modify an IAM policy's permissions?
AImmediate effect on all users
BRequires user logging out first
CChanges take 24 hours to apply
DOnly affects new users created
Explanation
IAM policy changes take effect immediately for all users affected by the policy, whereas the other options are incorrect conditions related to IAM changes.
Q229
Which service provides serverless compute for event-driven applications?
AAWS Lambda
BEC2
CElastic Beanstalk
DS3
Explanation
AWS Lambda allows running code without provisioning servers, while EC2 is a traditional server model.
Q230
A company needs to securely store and manage API keys. Which AWS service should they use?
AAWS Secrets Manager
BAWS SSM Parameter Store
CAmazon S3
DAWS IAM
Explanation
AWS Secrets Manager is purpose-built for managing secrets, while IAM is focused on user access management.