Free Amazon DVA-C02 Practice Test Questions

Question 1

A social media company is designing a platform that allows users to upload data, which is stored in AmazonS3. Users can upload data encrypted with a public key. The company wants to ensure that only the companycan decrypt the uploaded content using an asymmetric encryption key. The data must always be encrypted intransit and at rest.Options:

A : Use server-side encryption with Amazon S3 managed keys (SSE-S3) to encrypt the data.

B : Use server-side encryption with customer-provided encryption keys (SSE-C) to encrypt the data.

C : Use client-side encryption with a data key to encrypt the data.

D : Use client-side encryption with a customer-managed encryption key to encrypt the data.

Answer: D

Question 2

A developer supports an application that accesses data in an Amazon DynamoDB table. One of the itemattributes is expirationDate in the timestamp format. The application uses this attribute to find items, archivethem, and remove them from the table based on the timestamp valueThe application will be decommissioned soon, and the developer must find another way to implement thisfunctionality. The developer needs a solution that will require the least amount of code to write.Which solution will meet these requirements?

A : Enable TTL on the expirationDate attribute in the table. Create a DynamoDB stream. Create an AWSLambda function to process the deleted items. Create a DynamoDB trigger for the Lambda function.

B : Create two AWS Lambda functions one to delete the items and one to process the items Create aDynamoDB stream Use the Deleteltem API operation to delete the items based on the expirationDateattribute Use the GetRecords API operation to get the items from the DynamoDB stream and processthem

C : Create two AWS Lambda functions, one to delete the items and one to process the items. Create anAmazon EventBndge scheduled rule to invoke the Lambda Functions Use the Deleteltem API operationto delete the items based on the expirationDate attribute. Use the GetRecords API operation to get theitems from the DynamoDB table and process them.

D : Enable TTL on the expirationDate attribute in the table Specify an Amazon Simple Queue Service(Amazon SQS > dead-letter queue as the target to delete the items Create an AWS Lambda function toprocess the items

Answer: A

Question 3

A company has a serverless application that uses Amazon API Gateway and AWS Lambda functions to expose a RESTful API. The company uses a continuous integration and continuous delivery (CI/CD) workflow to deploy the application to multiple environments. The company wants to implement automated integration tests after deployment. A developer needs to set up the necessary infrastructure and processes to automate the deployment and integration tests for the serverless application.

A : Configure API Gateway stages to represent each application environment. Use AWS SAM templates to manage the infrastructure for the Lambda functions and API resources. Use AWS CodeBuild to implement automated deployment tests to validate the deployments in each stage.

B : Configure API Gateway stages to represent each application environment. Use AWS CloudFormation to manage the infrastructure for the Lambda functions and API resources. Use AWS CodeBuild to implement automated deployment tests to validate the deployments in each stage.

C : Use AWS CodePipeline to create a CI/CD pipeline. Configure API Gateway stages to represent each application environment. Use AWS CloudFormation templates to manage the infrastructure for the Lambda functions and API resources. Use AWS CodeBuild to implement automated deployment tests to validate the deployments in each stage.

D : Use AWS CloudFormation to create and deploy the application infrastructure in each application environment. Use the AWS CLI to invoke Lambda functions to perform deployment tests after each deployment.

Answer: C

Question 4

A development team uses AWS CodeBuild as part of a CI/CD pipeline. The project includes hundreds of unitand integration tests, and total build time continues to increase. The team wants faster feedback and loweroverall testing duration without managing additional infrastructure.Which solution will meet these requirements with the LEAST operational overhead ?

A : Configure multiple CodeBuild projects and manually split tests across them.

B : Configure CodeBuild to split tests across multiple parallel compute environments.

C : Run all tests sequentially in a single CodeBuild environment.

D : Use Amazon EC2 instances with a custom test runner to distribute tests.

Answer: B

Question 5

A developer must securely access a secret during a build process in an AWS CodeBuild project that has anIAM role. The secret must remain encrypted at rest and must be passed to the buildspec.yml file withoutappearing in the build logs. Which solution will meet these requirements with the LEAST operationaloverhead?

A : Configure AWS Secrets Manager to store the secret. Configure the env section of the buildspec.yml fileto have a secrets-manager key-value entry that references the secret. Grant the CodeBuild IAM role theminimum necessary permissions to access the secret.

B : Store the secret in an encrypted Amazon S3 bucket. Download the secret during the build process. UseNoEcho to mask the value of the secret. Grant the CodeBuild IAM role the minimum necessarypermissions to access the S3 bucket.

C : Configure AWS Systems Manager Parameter Store to store the secret. Configure the env section of thebuildspec.yml file to have a parameter-store key-value entry that references the parameter. Grant theCodeBuild IAM role the minimum necessary permissions to access the parameter.

D : Store the secret in AWS Systems Manager Parameter Store. Use a pre-build step to retrieve theparameter by using AWS CLI commands. Mask the parameter in the buildspec.yml file. Grant theCodeBuild IAM role the minimum necessary permissions to access the parameter.

Answer: A

Free Amazon DVA-C02 Exam Practice Questions 2026