Free AWS DVA-C02 Practice Questions & Answers 2026 Part5

Question #1

A company is running Amazon EC2 instances in multiple AWS accounts. A developer needs to implement an application that collects all the lifecycle events of the EC2 instances. The application needs to store the lifecycle events in a single Amazon Simple Queue Service (Amazon SQS) queue in the company's main AWS account for further processing.Which solution will meet these requirements?

A. Configure Amazon EC2 to deliver the EC2 instance lifecycle events from all accounts to the Amazon EventBridge event bus of the main account

B. Use the resource policies of the SQS queue in the main account to give each account permissions to write to that SQS queue

C. Write an AWS Lambda function that scans through all EC2 instances in the company accounts to detect EC2 instance lifecycle changes

D. Configure the permissions on the main account event bus to receive events from all accounts

View answer

Correct Answer: D

Question #2

For a deployment using AWS Code Deploy, what is the run order of the hooks for in-place deployments?

A. BeforeInstall -> ApplicationStop -> ApplicationStart -> AfterInstall

B. ApplicationStop -> BeforeInstall -> AfterInstall -> ApplicationStart

C. BeforeInstall -> ApplicationStop -> ValidateService -> ApplicationStart

D. ApplicationStop -> BeforeInstall -> ValidateService -> ApplicationStart

View answer

Correct Answer: B

Question #3

An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the developer wants to examine the logs of the Lambda function code for errors.Based on this system configuration, where would the developer find the logs?

A. Amazon S3

B. AWS CloudTrail

C. Amazon CloudWatch

D. Amazon DynamoDB

View answer

Correct Answer: C

Question #4

A company is using the AWS Serverless Application Model (AWS SAM) to develop a social media application. A developer needs a quick way to test AWS Lambda functions locally by using test event payloads. The developer needs the structure of these test event payloads to match the actual events that AWS services create.

A. Create shareable test Lambda events

B. Store manually created test event payloads locally

C. Store manually created test event payloads in an Amazon S3 bucket

D. Use the sam local generate-event command to create test payloads for local testing

View answer

Correct Answer: D

Question #5

A development team wants to build a continuous integration/continuous delivery (CI/CD) pipeline. The team is using AWS CodePipeline to automate the code build and deployment. The team wants to store the program code to prepare for the CI/CD pipeline.Which AWS service should the team use to store the program code?

A. WS CodeDeploy

B. WS CodeArtifact

C. WS CodeCommit

D. mazon CodeGuru

View answer

Correct Answer: C

Question #6

A developer has created an AWS Lambda function that is written in Python. The Lambda function reads data from objects in Amazon S3 and writes data to an Amazon DynamoDB table. The function is successfully invoked from an S3 event notification when an object is created. However, the function fails when it attempts to write to the DynamoDB table.What is the MOST likely cause of this issue?

A. The Lambda function's concurrency limit has been exceeded

B. DynamoDB table requires a global secondary index (GSI) to support writes

C. The Lambda function does not have IAM permissions to write to DynamoDB

D. The DynamoDB table is not running in the same Availability Zone as the Lambda function

View answer

Correct Answer: C

Question #7

A company wants to deploy and maintain static websites on AWS. Each website's source code is hosted in one of several version control systems, including AWS CodeCommit, Bitbucket, and GitHub.The company wants to implement phased releases by using development, staging, user acceptance testing, and production environments in the AWS Cloud. Deployments to each environment must be started by code merges on the relevant Git branch. The company wants to use HTTPS for all data exchange. The company needs a solution that does not require servers to run continuously.Which solution will meet these requirements with the LEAST operational overhead?

A. Host each website by using AWS Amplify with a serverless backend

B. Host each website in AWS Elastic Beanstalk with multiple environments

C. Host each website in different Amazon S3 buckets for each environment

D. Host each website on its own Amazon EC2 instance

View answer

Correct Answer: A

Question #8

A developer has a legacy application that is hosted on-premises. Other applications hosted on AWS depend on the on-premises application for proper functioning. In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place.How can the developer accomplish this?

A. Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch

B. Download the CloudWatch agent to the on-premises server

C. Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files

D. Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch

View answer

Correct Answer: B

Question #9

A developer is designing a serverless application with two AWS Lambda functions to process photos. One Lambda function stores objects in an Amazon S3 bucket and stores the associated metadata in an Amazon DynamoDB table. The other Lambda function fetches the objects from the S3 bucket by using the metadata from the DynamoDB table. Both Lambda functions use the same Python library to perform complex computations and are approaching the quota for the maximum size of zipped deployment packages.What should the developer do to reduce the size of the Lambda deployment packages with the LEAST operational overhead?

A. Package each Python library in its own

B. Create a Lambda layer with the required Python library

C. Combine the two Lambda functions into one Lambda function

D. Download the Python library to an S3 bucket

View answer

Correct Answer: B

Question #10

A developer is migrating some features from a legacy monolithic application to use AWS Lambda functions instead. The application currently stores data in an Amazon Aurora DB cluster that runs in private subnets in a VPC. The AWS account has one VPC deployed. The Lambda functions and the DB cluster are deployed in the same AWS Region in the same AWS account.The developer needs to ensure that the Lambda functions can securely access the DB cluster without crossing the public internet.Which solution will meet these requirements?

A. Configure the DB cluster's public access setting to Yes

B. Configure an Amazon RDS database proxy for he Lambda functions

C. Configure a NAT gateway and a security group for the Lambda functions

D. Configure the VPC, subnets, and a security group for the Lambda functions

View answer

Correct Answer: D

Question #11

A company is planning to securely manage one-time fixed license keys in AWS. The company's development team needs to access the license keys in automaton scripts that run in Amazon EC2 instances and in AWS CloudFormation stacks.Which solution will meet these requirements MOST cost-effectively?

A. mazon S3 with encrypted files prefixed with “config”

B. WS Secrets Manager secrets with a tag that is named SecretString

C. WS Systems Manager Parameter Store SecureString parameters

D. loudFormation NoEcho parameters

View answer

Correct Answer: C

Question #12

A company uses an AWS Lambda function to transfer files from an Amazon S3 bucket to the company's SFTP server. The Lambda function connects to the SFTP server by using credentials such as username and password. The company uses Lambda environment variables to store these credentials. A developer needs to implement encrypted username and password credentials. Which solution will meet these requirements?

A. Remove the user credentials from the Lambda environment

B. Move the user credentials from Lambda environment variables to AWS Systems Manager Parameter Store

C. Move the user credentials from Lambda environment variables to AWS Key Management Service (AWS KMS)

D. Move the user credentials from the Lambda environment to an encrypted

View answer

Correct Answer: B

Question #13

A company hosts a batch processing application on AWS Elastic Beanstalk with instances that run the most recent version of Amazon Linux. The application sorts and processes large datasets.In recent weeks, the application's performance has decreased significantly during a peak period for traffic. A developer suspects that the application issues are related to the memory usage. The developer checks the Elastic Beanstalk console and notices that memory usage is not being tracked.How should the developer gather more information about the application performance issues?

A. Configure the Amazon CloudWatch agent to push logs to Amazon CloudWatch Logs by using port 443

B. Configure the Elastic Beanstalk

C. Configure the Amazon CloudWatch agent to track the memory usage of the instances

D. Configure an Amazon CloudWatch dashboard to track the memory usage of the instances

View answer

Correct Answer: C

Question #14

A developer is building a highly secure healthcare application using serverless components. This application requires writing temporary data to /tmp storage on an AWS Lambda function.How should the developer encrypt this data?

A. Enable Amazon EBS volume encryption with an AWS KMS key in the Lambda function configuration so that all storage attached to the Lambda function is encrypted

B. Set up the Lambda function with a role and key policy to access an AWS KMS key

C. Use OpenSSL to generate a symmetric encryption key on Lambda startup

D. Use an on-premises hardware security module (HSM) to generate keys, where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function

View answer

Correct Answer: B

Question #15

A company needs to harden its container images before the images are in a running state. The company's application uses Amazon Elastic Container Registry (Amazon ECR) as an image registry. Amazon Elastic Kubernetes Service (Amazon EKS) for compute, and an AWS CodePipeline pipeline that orchestrates a continuous integration and continuous delivery (CI/CD) workflow.Dynamic application security testing occurs in the final stage of the pipeline after a new image is deployed to a development namespace in the EKS cluster. A developer needs to place an analysis stage before this deployment to analyze the container image earlier in the CI/CD pipeline.Which solution will meet these requirements with the MOST operational efficiency?

A. Build the container image and run the docker scan command locally

B. Create a new CodePipeline stage that occurs after the container image is built

C. Create a new CodePipeline stage that occurs after source code has been retrieved from its repository

D. Add an action to the deployment stage of the pipeline so that the action occurs before the deployment to the EKS cluster

View answer

Correct Answer: B

Question #16

A developer needs to migrate an online retail application to AWS to handle an anticipated increase in traffic. The application currently runs on two servers: one server for the web application and another server for the database. The web server renders webpages and manages session state in memory. The database server hosts a MySQL database that contains order details. When traffic to the application is heavy, the memory usage for the web server approaches 100% and the application slows down considerably.The developer has found that most of the memory increase and performance decrease is related to the load of managing additional user sessions. For the web server migration, the developer will use Amazon EC2 instances with an Auto Scaling group behind an Application Load Balancer.Which additional set of changes should the developer make to the application to improve the application's performance?

A. Use an EC2 instance to host the MySQL database

B. Use Amazon ElastiCache for Memcached to store and manage the session data

C. Use Amazon ElastiCache for Memcached to store and manage the session data and the application data

D. Use the EC2 instance store to manage the session data

View answer

Correct Answer: B

Question #17

A company is planning to securely manage one-time fixed license keys in AWS. The company's development team needs to access the license keys in automaton scripts that run in Amazon EC2 instances and in AWS CloudFormation stacks.Which solution will meet these requirements MOST cost-effectively?

A. Amazon S3 with encrypted files prefixed with “config”

B. AWS Secrets Manager secrets with a tag that is named SecretString

C. AWS Systems Manager Parameter Store SecureString parameters

D. CloudFormation NoEcho parameters

View answer

Correct Answer: C

Question #18

A developer has written the following IAM policy to provide access to an Amazon S3 bucket:Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions?

A. Access on all buckets except the “DOC-EXAMPLE-BUCKET” bucket

B. Access on all buckets that start with “DOC-EXAMPLE-BUCKET” except the “DOC-EXAMPLE-BUCKET/secrets” bucket

C. Access on all objects in the “DOC-EXAMPLE-BUCKET” bucket along with access to all S3 actions for objects in the “DOC-EXAMPLE-BUCKET” bucket that start with “secrets”

D. Access on all objects in the “DOC-EXAMPLE-BUCKET” bucket except on objects that start with “secrets”

View answer

Correct Answer: D

Question #19

A developer created an AWS Lambda function that accesses resources in a VPC. The Lambda function polls an Amazon Simple Queue Service (Amazon SQS) queue for new messages through a VPC endpoint. Then the function calculates a rolling average of the numeric values that are contained in the messages. After initial tests of the Lambda function, the developer found that the value of the rolling average that the function returned was not accurate.How can the developer ensure that the function calculates an accurate rolling average?

A. Set the function's reserved concurrency to 1

B. Modify the function to store the values in Amazon ElastiCache

C. Set the function's provisioned concurrency to 1

D. Modify the function to store the values in the function's layers

View answer

Correct Answer: A

Question #20

A developer is creating a Ruby application and needs to automate the deployment, scaling, and management of an environment without requiring knowledge of the underlying infrastructure.Which service would best accomplish this task?

A. AWS CodeDeploy

B. AWS CloudFormation

C. AWS OpsWorks

D. AWS Elastic Beanstalk

View answer

Correct Answer: D

Question #21

A company is running a custom application on a set of on-premises Linux servers that are accessed using Amazon API Gateway. AWS X-Ray tracing has been enabled on the API test stage.How can a developer enable X-Ray tracing on the on-premises servers with the LEAST amount of configuration?

A. Install and run the X-Ray SDK on the on-premises servers to capture and relay the data to the X-Ray service

B. Install and run the X-Ray daemon on the on-premises servers to capture and relay the data to the X-Ray service

C. Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTraceSegments API call

D. Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTelemetryRecords API call

View answer

Correct Answer: B

Question #22

A development team maintains a web application by using a single AWS CloudFormation template. The template defines web servers and an Amazon RDS database. The team uses the Cloud Formation template to deploy the Cloud Formation stack to different environments.During a recent application deployment, a developer caused the primary development database to be dropped and recreated. The result of this incident was a loss of data. The team needs to avoid accidental database deletion in the future.Which solutions will meet these requirements? (Choose two.)

A. Add a CloudFormation Deletion Policy attribute with the Retain value to the database resource

B. Update the CloudFormation stack policy to prevent updates to the database

C. Modify the database to use a Multi-AZ deployment

D. Create a CloudFormation stack set for the web application and database deployments

E. Add a Cloud Formation DeletionPolicy attribute with the Retain value to the stack

View answer

Correct Answer: AB

Question #23

A developer needs to perform geographic load testing of an API. The developer must deploy resources to multiple AWS Regions to support the load testing of the API.How can the developer meet these requirements without additional application code?

A. Create and deploy an AWS Lambda function in each desired Region

B. Create an AWS CloudFormation template that defines the load test resources

C. Create an AWS Systems Manager document that defines the resources

D. Create an AWS CloudFormation template that defines the load test resources

View answer

Correct Answer: B

Question #24

A developer is building a web application that uses Amazon API Gateway to expose an AWS Lambda function to process requests from clients. During testing, the developer notices that the API Gateway times out even though the Lambda function finishes under the set time limit.Which of the following API Gateway metrics in Amazon CloudWatch can help the developer troubleshoot the issue? (Choose two.)

A. CacheHitCount

B. IntegrationLatency

C. CacheMissCount

D. Latency

E. Count

View answer

Correct Answer: BD

Question #25

A company wants to deploy and maintain static websites on AWS. Each website's source code is hosted in one of several version control systems, including AWS CodeCommit, Bitbucket, and GitHub.The company wants to implement phased releases by using development, staging, user acceptance testing, and production environments in the AWS Cloud. Deployments to each environment must be started by code merges on the relevant Git branch. The company wants to use HTTPS for all data exchange. The company needs a solution that does not require servers to run continuously.Which solution will meet these requirements with the LEAST operational overhead?

A. Host each website by using AWS Amplify with a serverless backend

B. Host each website in AWS Elastic Beanstalk with multiple environments

C. Host each website in different Amazon S3 buckets for each environment

D. Host each website on its own Amazon EC2 instance

View answer

Correct Answer: A

Question #26

A developer is deploying an AWS Lambda function The developer wants the ability to return to older versions of the function quickly and seamlessly.How can the developer achieve this goal with the LEAST operational overhead?

A. Use AWS OpsWorks to perform blue/green deployments

B. Use a function alias with different versions

C. Maintain deployment packages for older versions in Amazon S3

D. Use AWS CodePipeline for deployments and rollbacks

View answer

Correct Answer: B

Question #27

A company has installed smart meters in all its customer locations. The smart meters measure power usage at 1-minute intervals and send the usage readings to a remote endpoint for collection. The company needs to create an endpoint that will receive the smart meter readings and store the readings in a database. The company wants to store the location ID and timestamp information.The company wants to give its customers low-latency access to their current usage and historical usage on demand. The company expects demand to increase significantly. The solution must not impact performance or include downtime while scaling.Which solution will meet these requirements MOST cost-effectively?

A. Store the smart meter readings in an Amazon RDS database

B. Store the smart meter readings in an Amazon DynamoDB table

C. Store the smart meter readings in Amazon ElastiCache for Redis

D. Store the smart meter readings in Amazon S3

View answer

Correct Answer: B

Question #28

A developer is incorporating AWS X-Ray into an application that handles personal identifiable information (PII). The application is hosted on Amazon EC2 instances. The application trace messages include encrypted PII and go to Amazon CloudWatch. The developer needs to ensure that no PII goes outside of the EC2 instances.Which solution will meet these requirements?

A. Manually instrument the X-Ray SDK in the application code

B. Use the X-Ray auto-instrumentation agent

C. Use Amazon Macie to detect and hide PII

D. Use AWS Distro for Open Telemetry

View answer

Correct Answer: A

Question #29

An ecommerce company is using an AWS Lambda function behind Amazon API Gateway as its application tier. To process orders during checkout, the application calls a POST API from the frontend. The POST API invokes the Lambda function asynchronously. In rare situations, the application has not processed orders. The Lambda application logs show no errors or failures.What should a developer do to solve this problem?

A. Inspect the frontend logs for API failures

B. Create and inspect the Lambda dead-letter queue

C. Inspect the Lambda logs in Amazon CloudWatch for possible errors

D. Make sure that caching is disabled for the POST API in API Gateway

View answer

Correct Answer: B

Question #30

A company is running a custom application on a set of on-premises Linux servers that are accessed using Amazon API Gateway. AWS X-Ray tracing has been enabled on the API test stage.How can a developer enable X-Ray tracing on the on-premises servers with the LEAST amount of configuration?

A. Install and run the X-Ray SDK on the on-premises servers to capture and relay the data to the X-Ray service

B. Install and run the X-Ray daemon on the on-premises servers to capture and relay the data to the X-Ray service

C. Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTraceSegments API call

D. Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTelemetryRecords API call

View answer

Correct Answer: B

Question #31

A company is migrating an on-premises database to Amazon RDS for MySQL. The company has read-heavy workloads. The company wants to refactor the code to achieve optimum read performance for queries.Which solution will meet this requirement with LEAST current and future effort?

A. Use a multi-AZ Amazon RDS deployment

B. Use a multi-AZ Amazon RDS deployment

C. Deploy Amazon RDS with one or more read replicas

D. Use open source replication software to create a copy of the MySQL database on an Amazon EC2 instance

View answer

Correct Answer: C

Question #32

A company is using an AWS Lambda function to process records from an Amazon Kinesis data stream. The company recently observed slow processing of the records. A developer notices that the iterator age metric for the function is increasing and that the Lambda run duration is constantly above normal.Which actions should the developer take to increase the processing speed? (Choose two.)

A. Increase the number of shards of the Kinesis data stream

B. Decrease the timeout of the Lambda function

C. Increase the memory that is allocated to the Lambda function

D. Decrease the number of shards of the Kinesis data stream

E. Increase the timeout of the Lambda function

View answer

Correct Answer: AC

Question #33

A developer needs to migrate an online retail application to AWS to handle an anticipated increase in traffic. The application currently runs on two servers: one server for the web application and another server for the database. The web server renders webpages and manages session state in memory. The database server hosts a MySQL database that contains order details. When traffic to the application is heavy, the memory usage for the web server approaches 100% and the application slows down considerably.The developer has found that most of the memory increase and performance decrease is related to the load of managing additional user sessions. For the web server migration, the developer will use Amazon EC2 instances with an Auto Scaling group behind an Application Load Balancer.Which additional set of changes should the developer make to the application to improve the application's performance?

A. Use an EC2 instance to host the MySQL database

B. Use Amazon ElastiCache for Memcached to store and manage the session data

C. Use Amazon ElastiCache for Memcached to store and manage the session data and the application data

D. Use the EC2 instance store to manage the session data

View answer

Correct Answer: B

Question #34

A company hosts a client-side web application for one of its subsidiaries on Amazon S3. The web application can be accessed through Amazon CloudFront from https://www.example.com. After a successful rollout, the company wants to host three more client-side web applications for its remaining subsidiaries on three separate S3 buckets.To achieve this goal, a developer moves all the common JavaScript files and web fonts to a central S3 bucket that serves the web applications. However, during testing, the developer notices that the browser blocks the JavaScript files and web fonts.What should the developer do to prevent the browser from blocking the JavaScript files and web fonts?

A. Create four access points that allow access to the central S3 bucket

B. Create a bucket policy that allows access to the central S3 bucket

C. Create a cross-origin resource sharing (CORS) configuration that allows access to the central S3 bucket

D. Create a Content-MD5 header that provides a message integrity check for the central S3 bucket

View answer

Correct Answer: C

Question #35

A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table.What is the simplest way to do this?

A. Write a script that deletes old records; schedule the script as a cron job on an Amazon EC2 instance

B. Add an attribute with the expiration time; enable the Time To Live feature based on that attribute

C. Each day, create a new table to hold session data; delete the previous day's table

D. Add an attribute with the expiration time; name the attribute ItemExpiration

View answer

Correct Answer: B

Question #36

A developer has an application that makes batch requests directly to Amazon DynamoDB by using the BatchGetItem low-level API operation. The responses frequently return values in the UnprocessedKeys element.Which actions should the developer take to increase the resiliency of the application when the batch response includes values in UnprocessedKeys? (Choose two.)

A. Retry the batch operation immediately

B. Retry the batch operation with exponential backoff and randomized delay

C. Update the application to use an AWS software development kit (AWS SDK) to make the requests

D. Increase the provisioned read capacity of the DynamoDB tables that the operation accesses

E. Increase the provisioned write capacity of the DynamoDB tables that the operation accesses

View answer

Correct Answer: BD

Question #37

A developer has an application that stores data in an Amazon S3 bucket. The application uses an HTTP API to store and retrieve objects. When the PutObject API operation adds objects to the S3 bucket the developer must encrypt these objects at rest by using server-side encryption with Amazon S3 managed keys (SSE-S3).Which solution will meet this requirement?

A. Create an AWS Key Management Service (AWS KMS) key

B. Set the x-amz-server-side-encryption header when invoking the PutObject API operation

C. Provide the encryption key in the HTTP header of every request

D. Apply TLS to encrypt the traffic to the S3 bucket

View answer

Correct Answer: B

Question #38

A developer needs to migrate an online retail application to AWS to handle an anticipated increase in traffic. The application currently runs on two servers: one server for the web application and another server for the database. The web server renders webpages and manages session state in memory. The database server hosts a MySQL database that contains order details. When traffic to the application is heavy, the memory usage for the web server approaches 100% and the application slows down considerably.The developer has found that most of the memory increase and performance decrease is related to the load of managing additional user sessions. For the web server migration, the developer will use Amazon EC2 instances with an Auto Scaling group behind an Application Load Balancer.Which additional set of changes should the developer make to the application to improve the application's performance?

A. Use an EC2 instance to host the MySQL database

B. Use Amazon ElastiCache for Memcached to store and manage the session data

C. Use Amazon ElastiCache for Memcached to store and manage the session data and the application data

D. Use the EC2 instance store to manage the session data

View answer

Correct Answer: B

Question #39

A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company has set up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in.What is the MOST operationally efficient solution that meets this requirement?

A. Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification

B. Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification

C. Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification

D. Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose

View answer

Correct Answer: B

Question #40

A developer has created an AWS Lambda function that is written in Python. The Lambda function reads data from objects in Amazon S3 and writes data to an Amazon DynamoDB table. The function is successfully invoked from an S3 event notification when an object is created. However, the function fails when it attempts to write to the DynamoDB table.What is the MOST likely cause of this issue?

A. The Lambda function's concurrency limit has been exceeded

B. DynamoDB table requires a global secondary index (GSI) to support writes

C. The Lambda function does not have IAM permissions to write to DynamoDB

D. The DynamoDB table is not running in the same Availability Zone as the Lambda function

View answer

Correct Answer: C

Question #41

A developer is writing an AWS Lambda function. The developer wants to log key events that occur while the Lambda function runs. The developer wants to include a unique identifier to associate the events with a specific function invocation. The developer adds the following code to the Lambda function:Which solution will meet this requirement?

A. Obtain the request identifier from the AWS request ID field in the context object

B. Obtain the request identifier from the AWS request ID field in the event object

C. Obtain the request identifier from the AWS request ID field in the event object

D. Obtain the request identifier from the AWS request ID field in the context object

View answer

Correct Answer: A

Question #42

A developer is creating a Ruby application and needs to automate the deployment, scaling, and management of an environment without requiring knowledge of the underlying infrastructure.Which service would best accomplish this task?

A. AWS CodeDeploy

B. AWS CloudFormation

C. AWS OpsWorks

D. AWS Elastic Beanstalk

View answer

Correct Answer: D

Question #43

A developer is creating an application that will be deployed on IoT devices. The application will send data to a RESTful API that is deployed as an AWS Lambda function. The application will assign each API request a unique identifier. The volume of API requests from the application can randomly increase at any given time of day.During periods of request throttling, the application might need to retry requests. The API must be able to handle duplicate requests without inconsistencies or data loss.Which solution will meet these requirements?

A. Create an Amazon RDS for MySQL DB instance

B. Create an Amazon DynamoDB table

C. Create an Amazon DynamoDB table

D. Create an Amazon ElastiCache for Memcached instance

View answer

Correct Answer: B

Question #44

A company is creating a REST service using an Amazon API Gateway with AWS Lambda integration. The service must run different versions for testing purposes.

A. Use an X-Version header to denote which version is being called and pass that header to the Lambda function(s)

B. Create an API Gateway Lambda authorizer to route API clients to the correct API version

C. Create an API Gateway resource policy to isolate versions and provide context to the Lambda function (s)

D. Deploy the API versions as unique stages with unique endpoints and use stage variables to provide further context

View answer

Correct Answer: D

Question #45

A company is building a web application on AWS. When a customer sends a request, the application will generate reports and then make the reports available to the customer within one hour. Reports should be accessible to the customer for 8 hours. Some reports are larger than 1 MB. Each report is unique to the customer. The application should delete all reports that are older than 2 days.Which solution will meet these requirements with the LEAST operational overhead?

A. Generate the reports and then store the reports as Amazon DynamoDB items that have a specified TTL

B. Generate the reports and then store the reports in an Amazon S3 bucket that uses server-side encryption

C. Generate the reports and then store the reports in an Amazon S3 bucket that uses server-side encryption

D. Generate the reports and then store the reports in an Amazon RDS database with a date stamp

View answer

Correct Answer: C

Question #46

A company is running Amazon EC2 instances in multiple AWS accounts. A developer needs to implement an application that collects all the lifecycle events of the EC2 instances. The application needs to store the lifecycle events in a single Amazon Simple Queue Service (Amazon SQS) queue in the company's main AWS account for further processing.Which solution will meet these requirements?

A. Configure Amazon EC2 to deliver the EC2 instance lifecycle events from all accounts to the Amazon EventBridge event bus of the main account

B. Use the resource policies of the SQS queue in the main account to give each account permissions to write to that SQS queue

C. Write an AWS Lambda function that scans through all EC2 instances in the company accounts to detect EC2 instance lifecycle changes

D. Configure the permissions on the main account event bus to receive events from all accounts

View answer

Correct Answer: D

Question #47

A company is implementing an application on Amazon EC2 instances. The application needs to process incoming transactions. When the application detects a transaction that is not valid, the application must send a chat message to the company's support team. To send the message, the application needs to retrieve the access token to authenticate by using the chat API.A developer needs to implement a solution to store the access token. The access token must be encrypted at rest and in transit. The access token must also be accessible from other AWS accounts.Which solution will meet these requirements with the LEAST management overhead?

A. Use an AWS Systems Manager Parameter Store SecureString parameter that uses an AWS Key Management Service (AWS KMS) AWS managed key to store the access token

B. Encrypt the access token by using an AWS Key Management Service (AWS KMS) customer managed key

C. Use AWS Secrets Manager with an AWS Key Management Service (AWS KMS) customer managed key to store the access token

D. Encrypt the access token by using an AWS Key Management Service (AWS KMS) AWS managed key

View answer

Correct Answer: C

Question #48

A company is planning to securely manage one-time fixed license keys in AWS. The company's development team needs to access the license keys in automaton scripts that run in Amazon EC2 instances and in AWS CloudFormation stacks.Which solution will meet these requirements MOST cost-effectively?

A. Amazon S3 with encrypted files prefixed with “config”

B. AWS Secrets Manager secrets with a tag that is named SecretString

C. AWS Systems Manager Parameter Store SecureString parameters

D. CloudFormation NoEcho parameters

View answer

Correct Answer: C

Question #49

An engineer created an A/B test of a new feature on an Amazon CloudWatch Evidently project. The engineer configured two variations of the feature (Variation A and Variation B) for the test. The engineer wants to work exclusively with Variation A. The engineer needs to make updates so that Variation A is the only variation that appears when the engineer hits the application's endpoint.Which solution will meet this requirement?

A. Add an override to the feature

B. Add an override to the feature

C. Add an experiment to the project

D. Add an experiment to the project

View answer

Correct Answer: A

Question #50

A developer needs to migrate an online retail application to AWS to handle an anticipated increase in traffic.The application currently runs on two servers: one server for the web application and another server for the database. The web server renders webpages and manages session state in memory. The database server hosts a MySQL database that contains order details. When traffic to the application is heavy, the memory usage for the web server approaches 100% and the application slows down considerably.The developer has found that most of the memory increase and performance decrease is related to the load of managing additional user sessions. For the web server migration, the developer will use Amazon EC2 instances with an Auto Scaling group behind an Application Load Balancer.Which additional set of changes should the developer make to the application to improve the application's performance?

A. se the EC2 instance store to manage the session data

B. se an EC2 instance to host the MySQL database

C. se Amazon ElastiCache for Memcached to store and manage the session data and the application data

D. se Amazon ElastiCache for Memcached to store and manage the session data

View answer

Correct Answer: D

Question #51

A developer wants to use an AWS AppSync API to invoke AWS Lambda functions to return data. Some of the Lambda functions perform long-running processes. The AWS AppSync API needs to return responses immediately.Which solution will meet these requirements with the LEAST operational overhead?

A. ncrease the timeout setting for the Lambda functions to accommodate longer processing times

B. onfigure the Lambda functions to be AWS AppSync data sources

C. et up an Amazon SQS queue

D. nable caching, and increase the duration of the AWS AppSync cache TTL

View answer

Correct Answer: B

Question #52

A company is running Amazon EC2 instances in multiple AWS accounts. A developer needs to implement an application that collects all the lifecycle events of the EC2 instances. The application needs to store the lifecycle events in a single Amazon Simple Queue Service (Amazon SQS) queue in the company's main AWS account for further processing.Which solution will meet these requirements?

A. Configure Amazon EC2 to deliver the EC2 instance lifecycle events from all accounts to the Amazon EventBridge event bus of the main account

B. Use the resource policies of the SQS queue in the main account to give each account permissions to write to that SQS queue

C. Write an AWS Lambda function that scans through all EC2 instances in the company accounts to detect EC2 instance lifecycle changes

D. Configure the permissions on the main account event bus to receive events from all accounts

View answer

Correct Answer: D

Question #53

A developer is testing a new file storage application that uses an Amazon CloudFront distribution to serve content from an Amazon S3 bucket. The distribution accesses the S3 bucket by using an origin access identity (OAI). The S3 bucket's permissions explicitly deny access to all other users.The application prompts users to authenticate on a login page and then uses signed cookies to allow users to access their personal storage directories. The developer has configured the distribution to use its default cache behavior with restricted viewer access and has set the origin to point to the S3 bucket. However, when the developer tries to navigate to the login page, the developer receives a 403 Forbidden error.The developer needs to implement a solution to allow unauthenticated access to the login page. The solution also must keep all private content secure.Which solution will meet these requirements?

A. Add a second cache behavior to the distribution with the same origin as the default cache behavior

B. Add a second cache behavior to the distribution with the same origin as the default cache behavior

C. Add a second origin as a failover origin to the default cache behavior

D. Add a bucket policy to the S3 bucket to allow read access

View answer

Correct Answer: A

Question #54

A company is implementing an application on Amazon EC2 instances. The application needs to process incoming transactions. When the application detects a transaction that is not valid, the application must send a chat message to the company's support team. To send the message, the application needs to retrieve the access token to authenticate by using the chat API.A developer needs to implement a solution to store the access token. The access token must be encrypted at rest and in transit. The access token must also be accessible from other AWS accounts.Which solution will meet these requirements with the LEAST management overhead?

A. Use an AWS Systems Manager Parameter Store SecureString parameter that uses an AWS Key Management Service (AWS KMS) AWS managed key to store the access token

B. Encrypt the access token by using an AWS Key Management Service (AWS KMS) customer managed key

C. Use AWS Secrets Manager with an AWS Key Management Service (AWS KMS) customer managed key to store the access token

D. Encrypt the access token by using an AWS Key Management Service (AWS KMS) AWS managed key

View answer

Correct Answer: C

Question #55

A company is building a web application on AWS. When a customer sends a request, the application will generate reports and then make the reports available to the customer within one hour. Reports should be accessible to the customer for 8 hours. Some reports are larger than 1 MB. Each report is unique to the customer. The application should delete all reports that are older than 2 days.Which solution will meet these requirements with the LEAST operational overhead?

A. Generate the reports and then store the reports as Amazon DynamoDB items that have a specified TTL

B. Generate the reports and then store the reports in an Amazon S3 bucket that uses server-side encryption

C. Generate the reports and then store the reports in an Amazon S3 bucket that uses server-side encryption

D. Generate the reports and then store the reports in an Amazon RDS database with a date stamp

View answer

Correct Answer: C

Question #56

A company is migrating a legacy application to Amazon EC2 instances. The application uses a user name and password that are stored in the source code to connect to a MySQL database.The company will migrate the database to an Amazon RDS for MySQL DB instance. As part of the migration, the company needs to implement a secure way to store and automatically rotate the database credentials.Which solution will meet these requirements?

A. Store the database credentials in environment variables in an Amazon Machine Image (AMI)

B. Store the database credentials in AWS Systems Manager Parameter Store

C. Store the database credentials in environment variables on the EC2 instances

D. Store the database credentials in AWS Secrets Manager

View answer

Correct Answer: d

Question #57

A developer creates a VPC named VPC-A that has public and private subnets. The developer also creates an Amazon RDS database inside the private subnet of VPC-A. To perform some queries, the developer creates an AWS Lambda function in the default VPC. The Lambda function has code to access the RDS database. When the Lambda function runs, an error message indicates that the function cannot connect to the RDS database.How can the developer solve this problem?

A. Modify the RDS security group

B. Redeploy the Lambda function in the same subnet as the RDS instance

C. Create a security group for the Lambda function

D. Create an IAM role

View answer

Correct Answer: B

Question #58

A developer deployed an application to an Amazon EC2 instance. The application needs to know the public IPv4 address of the instance.How can the application find this information?

A. Query the instance metadata from http://169

B. Query the instance user data from http://169

C. Query the Amazon Machine Image (AMI) information from http://169

D. Check the hosts file of the operating system

View answer

Correct Answer: A

Question #59

An Amazon Kinesis Data Firehose delivery stream is receiving customer data that contains personally identifiable information. A developer needs to remove pattern-based customer identifiers from the data and store the modified data in an Amazon S3 bucket.What should the developer do to meet these requirements?

A. Implement Kinesis Data Firehose data transformation as an AWS Lambda function

B. Launch an Amazon EC2 instance

C. Create an Amazon OpenSearch Service instance

D. Create an AWS Step Functions workflow to remove the customer identifiers

View answer

Correct Answer: A

Question #60

A developer has written an AWS Lambda function. The function is CPU-bound. The developer wants to ensure that the function returns responses quickly.How can the developer improve the function's performance?

A. Increase the function's CPU core count

B. Increase the function's memory

C. Increase the function's reserved concurrency

D. Increase the function's timeout

View answer

Correct Answer: B

Question #61

A developer is creating an application that will give users the ability to store photos from their cellphones in the cloud. The application needs to support tens of thousands of users. The application uses an Amazon API Gateway REST API that is integrated with AWS Lambda functions to process the photos. The application stores details about the photos in Amazon DynamoDB.Users need to create an account to access the application. In the application, users must be able to upload photos and retrieve previously uploaded photos. The photos will range in size from 300 KB to 5 MB.Which solution will meet these requirements with the LEAST operational overhead?

A. Use Amazon Cognito user pools to manage user accounts

B. Use Amazon Cognito user pools to manage user accounts

C. Create an IAM user for each user of the application during the sign-up process

D. Create a users table in DynamoDB

View answer

Correct Answer: B

Question #62

A company is building a serverless application that uses AWS Lambda functions. The company needs to create a set of test events to test Lambda functions in a development environment. The test events will be created once and then will be used by all the developers in an IAM developer group. The test events must be editable by any of the IAM users in the IAM developer group.Which solution will meet these requirements?

A. Create and store the test events in Amazon S3 as JSON objects

B. Create the test events

C. Create and store the test events in Amazon DynamoDB

D. Create the test events

View answer

Correct Answer: B

Question #63

A company's new mobile app uses Amazon API Gateway. As the development team completes a new release of its APIs, a developer must safely and transparently roll out the API change.What is the SIMPLEST solution for the developer to use for rolling out the new API version to a limited number of users through API Gateway?

A. Create a new API in API Gateway

B. Validate the new API version and promote it to production during the window of lowest expected utilization

C. Implement an Amazon CloudWatch alarm to trigger a rollback if the observed HTTP 500 status code rate exceeds a predetermined threshold

D. Use the canary release deployment option in API Gateway

View answer

Correct Answer: D

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free AWS DVA-C02 Practice Questions & Answers 2026 Part5

View The Updated DVA-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free AWS DVA-C02 Practice Questions & Answers 2026 Part5

View The Updated DVA-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now