The AWS Certified Developer – Associate (DVA-C02) exam tests your proficiency in developing applications on AWS. It is designed for developers looking to validate their skills in AWS development.
A company needs to ensure their S3 bucket can only accept uploads from their AWS accounts and specific IP ranges. What should they configure?
ABucket Policy
BIAM Role
CCloudTrail Logs
DS3 Lifecycle Policy
Explanation
Bucket Policies control access from specified accounts; the others deal with logging or data management.
Q372
What happens when you assign a security group to an EC2 instance?
AAccess permissions granted immediately
BDefault permissions applied immediately
CPrevious group's permissions lost
DNo effect until instance reboot
Explanation
Security group rules take effect immediately; others suggest incorrect timing or permissions management.
Q373
Which service can automatically scale applications based on demand?
AAWS Lambda
BAmazon EC2 Auto Scaling
CAmazon RDS
DAmazon S3
Explanation
Amazon EC2 Auto Scaling automatically adjusts the number of instances in response to traffic, while the other options do not provide this capability.
Q374
A company needs to securely manage access to AWS services and resources. What is the best approach?
AUse IAM roles only
BEnable AWS Config
CUtilize IAM policies
DDeploy CloudTrail
Explanation
Utilizing IAM policies is the best method to manage access permissions, while other options do not directly handle access management.
Q375
What happens when a CloudFormation stack is deleted?
AResources are retained permanently
BAll resources are deleted
CStack transitions to 'UPDATE_COMPLETE'
DResources go to a suspended state
Explanation
All resources created by the stack are deleted unless specified to retain, while the other options describe incorrect behaviors.
Q376
Which service provides tools for building serverless applications?
AAWS Lambda
BAmazon RDS
CAmazon EC2
DAmazon S3
Explanation
AWS Lambda allows for serverless execution of code, while the others are service-oriented architecture platforms or storage solutions.
Q377
A company needs to temporarily grant developers access to production resources. Which IAM feature should they use?
AStatic policies
BIdentity-based policies
CIAM roles
DService control policies
Explanation
IAM roles allow for temporary, limited access to resources, unlike the other options which are more static.
Q378
What happens when you enable versioning on an S3 bucket?
AOnly latest version stored
BAll versions retained
CVersions deleted automatically
DCan't delete old versions
Explanation
Enabling versioning retains all versions of objects, while the other options incorrectly describe S3 behavior.
Q379
Which service allows automatic scaling of EC2 instances based on demand?
AAuto Scaling
BElastic Load Balancer
CAWS Lambda
DAmazon RDS
Explanation
Auto Scaling adjusts instance counts based on demand; others do not provide this function.
Q380
A company needs to store sensitive user data in a securely encrypted format. What is the best strategy?
AS3 with public access
BS3 with server-side encryption
CRDS with plaintext data
DDynamoDB without encryption
Explanation
S3 with server-side encryption ensures data is encrypted; the others expose sensitive data to vulnerabilities.