100% Free DVA-C02 Practice Exam Questions (2026)

Stay Ahead with Updated AWS Certified Developer Associate DVA-C02 Practice Tests & Verified Answers

Amazon DVA-C02 Dumps & Practice Test Questions 2026

Page: 1 / 122

Total 607 Questions | Updated On: Sep 02, 2026

Add To Cart

Question 1

A company has an application that uses an AWS Lambda function to process customer orders. The companynotices that the application processes some orders more than once.A developer needs to update the application to prevent duplicate processing.Which solution will meet this requirement with the LEAST implementation effort?

A : Implement a de-duplication mechanism that uses Amazon DynamoDB as the control database.Configure the Lambda function to check for the existence of a unique identifier before processing eachevent.

B : Create a custom Amazon ECS task to perform idempotency checks. Use AWS Step Functions tointegrate the ECS task with the Lambda function.

C : Configure the Lambda function to retry failed invocations. Implement a retry mechanism that has afixed delay between attempts to handle duplicate events.

D : Use Amazon Athena to query processed events to identify duplicate records. Add processing logic tothe Lambda function to handle the duplication scenarios that the query identifies.

Answer: A

Question 2

A company is concerned that a malicious user could deploy unauthorized changes to the code for an AWSLambda function. What can a developer do to ensure that only trusted code is deployed to Lambda?

A : Turn on the trusted code option in AWS CodeDeploy. Add the CodeDeploy digital certificate to theLambda package before deploying the package to Lambda.

B : Define the code signing configuration in the Lambda console. Use AWS Signer to digitally sign theLambda package before deploying the package to Lambda.

C : Link Lambda to AWS KMS in the Lambda console. Use AWS KMS to digitally sign the Lambdapackage before deploying the package to Lambda.

D : Set the KmsKeyArn property of the Lambda function to the Amazon Resource Name (ARN) of atrusted key before deploying the package to Lambda.

Answer: B

Question 3

A developer designed an application on an Amazon EC2 instance The application makes API requests toobjects in an Amazon S3 bucketWhich combination of steps will ensure that the application makes the API requests in the MOST securemanner? (Select TWO.)

A : Create an IAM user that has permissions to the S3 bucket. Add the user to an 1AM group

B : Create an IAM role that has permissions to the S3 bucket

C : Add the IAM role to an instance profile. Attach the instance profile to the EC2 instance.

D : Create an 1AM role that has permissions to the S3 bucket Assign the role to an 1AM group

E : Store the credentials of the IAM user in the environment variables on the EC2 instance

Answer: B,C

Question 4

A developer created a Node.js-based AWS Lambda function by using a container image of an AWS OS-onlybase image. There is a new security patch for Node.js that must be patched to the new Lambda function.Which solution will meet this requirement?

A : Set the runtime update mode of the Lambda function to Auto.

B : Patch the runtime version by redeploying the same version of the Lambda function.

C : Rebuild the Lambda container code with the latest version of the AWS OS base image. Publish a newversion of the Lambda function.

D : Rebuild the Lambda container code with the latest Node.js patch version. Publish a new version of theLambda function.

Answer: D

Question 5

A developer is using an AWS account to build an application that stores files in an Amazon S3 bucket. Files must be encrypted at rest by AWS KMS keys. A second AWS account must have access to read files from the bucket. The developer wants to minimize operational overhead for the application. Which combination of solutions will meet these requirements? (Select TWO.)

A : Use a customer managed key to encrypt the files. Create a key policy that grants kms: Decrypt permissions to the second AWS account.

B : Use an AWS managed key to encrypt the files. Create a key policy that grants kms:Decrypt permissions to the second AWS account.

C : Create a service control policy (SCP) that grants s3:GetObject permissions to the second AWS account.

D : Create a bucket policy for the S3 bucket that grants s3:GetObject permissions to the second AWS account.

E : Create a gateway endpoint for the S3 bucket. Modify the endpoint policy to grant s3:GetObject permissions to the second AWS account.

Answer: A,D

Page: 1 / 122

Total 607 Questions | Updated On: Sep 02, 2026

Add To Cart