The AWS Certified Developer – Associate (DVA-C02) exam tests your proficiency in developing applications on AWS. It is designed for developers looking to validate their skills in AWS development.
A company needs to provide temporary access to an S3 bucket for third-party vendors. What is the best approach?
AIAM Roles with permanent credentials
BCognito User Pools
CPre-signed URLs
DAmazon CloudFront
Explanation
Pre-signed URLs grant temporary access to S3 objects, while other options either do not provide temporary access or require complex setups.
Q432
You are configuring an Auto Scaling group. What happens when the health check fails for an instance?
AIt is terminated and replaced
BIt remains in service
CIt scales the group up
DNo action is taken
Explanation
When a health check fails, the instance is terminated and replaced to maintain the desired capacity, while other options do not align with Auto Scaling behavior.
Q433
What happens when an EC2 instance is stopped?
AStored data is deleted
BThe instance is kept in memory
CThe instance receives a new IP
DThe instance's EBS volume is intact
Explanation
Stopping an EC2 instance retains data on EBS volumes, while data on instance store volumes is lost.
Q434
A company needs to run a script every night at midnight. Which service should they use?
AAWS Lambda
BAmazon CloudWatch Events
CAWS Step Functions
DAWS CodePipeline
Explanation
Amazon CloudWatch Events can trigger scripts on schedule, while the other options do not natively handle such scheduling.
Q435
You are configuring AWS IAM roles for a Lambda function to access specific S3 buckets. What is the best practice?
AAssign full S3 permissions
BUse a specific policy for access
CAdd general CloudWatch permissions
DUse an IAM user for access
Explanation
Using a specific policy follows the principle of least privilege, while other options either grant excessive permissions or are incorrect approaches.
Q436
Which option describes a best practice for S3 bucket permissions?
AUse bucket policies for public access.
BGive everyone read access.
CUse ACLs only for permissions.
DEnable public access by default.
Explanation
Using bucket policies helps manage permissions securely, while the other options either allow excessive access or rely poorly on outdated methods.
Q437
A company needs to run serverless applications; which AWS service should it consider first?
AAmazon EC2
BAWS Lambda
CAmazon S3
DAWS Fargate
Explanation
AWS Lambda is designed specifically for serverless applications, while the others involve more infrastructure management.
Q438
What happens when you set an IAM policy to Deny all actions on an S3 bucket?
AAccess is blocked for that bucket.
BActions are still allowed.
COnly read actions are denied.
DBucket can still be accessed anonymously.
Explanation
Setting a Deny policy restricts all access to that bucket, contrary to other options suggesting unauthorized actions may be allowed.
Q439
Which AWS service provides a serverless compute environment?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAmazon ECS
Explanation
AWS Lambda is a serverless compute service; the others require server provisioning.
Q440
A company needs to allow EC2 instances to access S3. What should be configured?
AS3 bucket policy
BIAM role
CSecurity group
DEC2 instance profile
Explanation
An IAM role grants the EC2 instances access to S3; the others do not allow this specific access.