The AWS Certified Developer – Associate (DVA-C02) exam tests your proficiency in developing applications on AWS. It is designed for developers looking to validate their skills in AWS development.
Which AWS service provides a serverless compute engine?
AAWS Lambda
BAmazon EC2
CAmazon EBS
DAWS CloudFormation
Explanation
AWS Lambda allows you to run code without provisioning servers; EC2 requires instance management, EBS is for storage, and CloudFormation is for infrastructure as code.
Q302
A company needs to store backups of sensitive user data securely. Which option ensures this data is encrypted both in transit and at rest?
AAmazon S3 with Server-Side Encryption
BAmazon S3 without encryption enabled
CAWS CodeCommit
DAmazon EFS without encryption
Explanation
Amazon S3 with Server-Side Encryption guarantees encryption in transit and at rest; other options either lack encryption or use different services not designed for this purpose.
Q303
You are configuring a VPC. What happens if you do not provide an IPv4 CIDR block while creating the VPC?
ACreation will fail
BDefault CIDR is assigned
CVPC will have no subnets
DPublic subnets can't be created
Explanation
Creation will fail because a CIDR block is mandatory; other options are incorrect as default settings do not apply without manual input.
Q304
Which service is best for serverless computing?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAWS Elastic Beanstalk
Explanation
AWS Lambda provides a serverless architecture, while others require server management.
Q305
A company needs to ensure that data in S3 is not publicly accessible. What is an optimal first step?
AEnable versioning
BChange bucket policy
CSet public access settings
DReduce object size
Explanation
Setting public access settings blocks all public access.
Q306
You are configuring IAM roles. What happens when a permission policy is attached to a role?
ARole becomes non-functional
BPermissions are granted immediately
CPermissions are deleted
DRole cannot assume other roles
Explanation
Permissions become effective as soon as the policy is attached.
Q307
Which service automatically scales applications based on load?
AAWS Auto Scaling
BAmazon EC2
CElastic Load Balancing
DAWS Lambda
Explanation
AWS Auto Scaling automatically adjusts capacity based on demand; the others do not provide this auto-scalability feature.
Q308
A company needs to securely access AWS from a public environment. What should they use?
AIAM access keys
BVPN connection
CAWS Single Sign-On
DAmazon RDS
Explanation
A VPN connection provides secure access to AWS resources over the internet; IAM keys and others do not address the secure environment required.
Q309
What happens when an IAM policy is misconfigured to allow everyone access?
AAccess will be limited.
BIt is ignored by AWS.
CAll users may gain unrestricted access.
DOnly admins have access.
Explanation
Misconfigured IAM policies can lead to inadvertent unrestricted access for all users, which is a serious security risk.
Q310
Which service allows for scalable messaging between services?
AAWS SQS
BAWS CloudTrail
CAWS Lambda
DAWS VPC
Explanation
AWS SQS is specifically designed for message queuing, while the others serve different purposes.