The AWS Certified Developer – Associate (DVA-C02) exam tests your proficiency in developing applications on AWS. It is designed for developers looking to validate their skills in AWS development.
A company needs to encrypt their S3 bucket data at rest. What should they enable?
AS3 Transfer Acceleration
BS3 Object Versioning
CS3 Server-Side Encryption
DS3 Inventory Reports
Explanation
S3 Server-Side Encryption provides encryption for data at rest, unlike the others.
Q342
What happens when an IAM user is assigned two policies with conflicting permissions?
ADeny takes precedence over allow
BAllow takes precedence over deny
CPolicies merge with no conflict
DConflict results in no permissions
Explanation
In IAM, a deny permission always overrides allow permissions from any other policies.
Q343
Which service would you use to run code in response to events without provisioning servers?
AAWS Lambda
BEC2 Instances
CElastic Beanstalk
DAWS Fargate
Explanation
AWS Lambda executes code in response to events without server management, while others require provisioning or managing instances.
Q344
A company needs a cost-effective way to archive large amounts of data with infrequent access. Which storage option should they choose?
AS3 Intelligent-Tiering
BS3 Glacier
CEBS Provisioned IOPS
DS3 Standard
Explanation
S3 Glacier is specifically designed for cost-effective archiving of infrequently accessed data, unlike the others which serve different access patterns.
Q345
You are configuring an IAM Policy that allows users to list EC2 instances but denies them access to terminate instances. What will happen if a user tries to terminate an instance?
AThe action will succeed.
BThe action will be denied.
CThe user will be notified.
DThe instance will stop instead.
Explanation
The explicit deny for termination calls takes precedence over allow permissions, resulting in access being denied.
Q346
Which AWS service helps you run Docker containers?
AAWS Fargate
BAWS Lambda
CAWS CodeDeploy
DAWS Elastic Beanstalk
Explanation
AWS Fargate is specifically designed for running containers without managing servers; other options don't focus solely on container management.
Q347
A company needs to control access to AWS resources for different users. Which service should it primarily use?
AAWS CloudTrail
BAWS IAM
CAWS Config
DAWS CloudFormation
Explanation
AWS IAM provides user and permissions management, unlike other options which serve different purposes.
Q348
What happens when you increase the size of an EBS volume attached to an instance?
AIncreased IOPS immediately available
BResize without downtime
CData loss occurs
DMust stop instance first
Explanation
EBS volume resizing can be done online, allowing greater flexibility without downtime; other options are incorrect or misleading.
Q349
Which service provides managed NoSQL database in AWS?
ADynamoDB
BRDS
CAurora
DRedshift
Explanation
DynamoDB is AWS's managed NoSQL database service; RDS and Aurora are SQL-based, and Redshift is used for data warehousing.
Q350
A company needs to securely share files across multiple AWS accounts. What is the best solution?
AUse S3 with bucket policies
BDeploy an EC2 instance for sharing
CUtilize IAM roles for access
DSet up a CloudFront distribution
Explanation
S3 with bucket policies allows secure file sharing; EC2 requires more management and IAM roles aren't for direct file sharing.