The AWS Certified Developer – Associate (DVA-C02) exam tests your proficiency in developing applications on AWS. It is designed for developers looking to validate their skills in AWS development.
You are configuring IAM policies for a development team. What happens when policies are combined if one allows an action and another denies it?
ADeny takes precedence
BAllow takes precedence
CNo effect at all
DCombined effect applied
Explanation
In IAM, explicit denies always take precedence over allows, effectively blocking the action, which isn't impacted by other cases in this scenario.
Q262
Which AWS service provides automation for infrastructure deployment?
AAWS CloudFormation
BAWS Lambda
CAWS CodeDeploy
DAWS Elastic Beanstalk
Explanation
AWS CloudFormation automates infrastructure provisioning; others focus on application deployment or compute services.
Q263
A company needs to offload its database storage to a highly scalable solution; what should it choose?
AAWS S3
BAmazon RDS
CAmazon DynamoDB
DAWS ElastiCache
Explanation
Amazon DynamoDB is a scalable NoSQL database service; S3 is for object storage, RDS for relational databases, and ElastiCache for caching.
Q264
What happens when an IAM role is removed from an EC2 instance while it is running?
AImmediate access denial
BNo effect until reboot
CTemporary access loss only
DAccess issues for existing connections
Explanation
Immediate access is denied for actions tied to the role; existing connections won’t maintain permissions if removed.
Q265
Which AWS service can you use for serverless event-driven computation?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAWS Elastic Beanstalk
Explanation
AWS Lambda is designed for serverless computing, while the others are not serverless services.
Q266
A company needs ephemeral compute resources for batch processing without managing the infrastructure. Which service would best meet this requirement?
AAWS Fargate
BAmazon EC2
CAWS Lambda
DAWS Batch
Explanation
AWS Batch is specifically designed for managing batch processing jobs efficiently without infrastructure management.
Q267
You are configuring an IAM policy that denies access to all S3 buckets but allows access to a specific bucket. What happens if the user has an Allow permission in another policy for S3?
AAccess is allowed to all buckets
BAccess is denied to all buckets
CAccess is allowed only to specified bucket
DAccess behavior cannot be determined
Explanation
IAM policies use the deny principle, thus allowing access only to the specified bucket despite other allows.
Q268
Which service provides serverless computing on AWS?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAWS Elastic Beanstalk
Explanation
AWS Lambda allows you to execute code without provisioning servers, while the others require different configurations.
Q269
A company needs to monitor its API Gateway for performance metrics. Which AWS service should they use?
AAWS CloudTrail
BAmazon CloudWatch
CAWS X-Ray
DAmazon SNS
Explanation
Amazon CloudWatch collects and monitors API performance metrics, whereas the others serve different monitoring purposes.
Q270
You are configuring S3 bucket policies. What happens when you specify a Deny statement for a particular IAM user?
AUser can access bucket
BAccess is permitted by default
CUser's access is denied
DAccess will be logged only
Explanation
A Deny statement overrides allow rules, preventing access regardless of other permissions.