The AWS Certified Developer – Associate (DVA-C02) exam tests your proficiency in developing applications on AWS. It is designed for developers looking to validate their skills in AWS development.
A company needs to restrict IAM user permissions based on the source IP. Which AWS feature would best accomplish this?
AIAM Policies
BSecurity Groups
CVPC Peering
DResource-Based Policies
Explanation
IAM Policies can include conditions for source IP, whereas Security Groups control instance access.
Q252
What happens when an AWS Lambda function times out?
AAutomatic retry occurs
BFunction stops execution
CCold start is initiated
DResults are partially returned
Explanation
When Lambda times out, execution stops entirely, unlike automatic retries in other services.
Q253
Which service enables serverless event-driven architecture?
AAmazon EventBridge
BAWS Lambda
CAmazon EC2
DAmazon RDS
Explanation
AWS Lambda allows code execution in response to triggers, unlike the other services which require more management.
Q254
A company needs to ensure its API Gateway can handle a spike in traffic during a major release. Which feature should they utilize?
AProvisioned Throughput
BThrottling
CCaching
DAPI Keys
Explanation
Throttling prevents backend services from being overwhelmed by controlling the request rate, while other options don't address traffic spikes directly.
Q255
What happens when you delete an S3 bucket that has versioning enabled?
AAll versions will be permanently deleted.
BThe bucket remains and versions exist.
COnly latest version is deleted.
DNon-current versions can still be accessed.
Explanation
Deleting a versioned bucket removes all versions permanently, while other options incorrectly suggest versions persist or are deleted partially.
Q256
Which service allows you to run SQL queries over data in S3?
AAmazon Athena
BAmazon RDS
CAWS Glue
DAmazon Redshift
Explanation
Amazon Athena enables running SQL queries directly on S3 data; RDS is for relational databases, Glue is for ETL workflows, and Redshift is a data warehouse solution.
Q257
A company needs a managed service to run containerized applications. Which service should they choose?
AAWS Lambda
BAmazon EC2
CAmazon ECS
DAmazon S3
Explanation
Amazon ECS is a container management service, whereas Lambda is serverless, EC2 is for traditional VM hosting, and S3 is for object storage.
Q258
What happens when a security group rule is removed for an EC2 instance?
ATraffic is immediately blocked
BTraffic is unaffected until reboot
CInstances behind it receive traffic
DOnly outbound traffic is affected
Explanation
Removing a security group rule immediately affects traffic; it doesn't require a reboot, and it only impacts the specific instance and its inbound rules.
Q259
Which service would you use to execute code in response to triggers without managing servers?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAmazon ECS
Explanation
AWS Lambda enables serverless execution of code, while EC2 and RDS require server management and ECS is for container orchestration.
Q260
A company needs to ensure that its API Gateway does not expose any unnecessary endpoints. Which practice should they follow?
AEnable CORS on the Gateway
BUse a dedicated API key
CUse resource policies
DDefine only needed resources
Explanation
Defining only needed resources reduces exposure, unlike enabling CORS or using keys which do not secure the API endpoints effectively.