Home/Practice Test/AWS/Free DVA-C02 Practice Test | Prepare for AWS Developer Associate 600 Exam Questions

Free DVA-C02 Practice Test | Prepare for AWS Developer Associate 600 Exam Questions

Can you build, deploy, and troubleshoot applications on AWS?
Use this DVA-C02 practice test to put your developer skills to work.

Real Exam Style
Questions
Detailed
Explanations
All Domains
Covered
Timed
Practice
4.8919 learner reviews across Microsoft, AWS, and CompTIA tracksVerified purchases
Jump Straight to the DVA-C02 Questions (No Sign-Up or Credit Card required)
Why choose us
1
Expert Explanations + Sources Master every concept with clarity.
2
2026-Fresh Questions Always current, never outdated.
3
Real Exam Simulation Practice like you'll test.
4
90-Day Free Updates Stay ahead of changes.
5
Start in 60 Seconds No waiting, instant access.

DVA-C02 exam at a glance

AWS Certified Developer – Associate · Associate level

Exam codeDVA-C02
CertificationAWS Certified Developer – Associate
LevelAssociate
Number of questions65 total (50 scored + 15 unscored pretest questions)
Duration130 minutes
Passing score720 on a scale of 100-1000
Question formatsMultiple choice and multiple response
DeliveryPearson VUE testing center or online proctored (OnVUE)
Exam cost150 USD (pricing varies by country)
LanguagesEnglish, Japanese, Korean, Portuguese (Brazil), Simplified Chinese, Spanish (Latin America)
Certification validity3 years; recertify by retaking DVA-C02 or passing a higher-level role-based AWS exam
Retake policyMust wait 14 days after a failed attempt; no cap on number of attempts; full exam fee required per attempt
PrerequisitesNone required; AWS recommends 1+ years hands-on experience developing on AWS

Intended for individuals in a developer role who develop, test, deploy, and debug AWS Cloud-based applications. Recommended experience is 1+ years of hands-on AWS application development.

Skills measured and their weighting

Skill areaWeight
Development with AWS Services32%
Security26%
Deployment24%
Troubleshooting and Optimization18%

Source: aws.amazon.com — official DVA-C02 exam page (Exam Guide v2.1, December 12 2024). Figures on this page were checked against Amazon Web Services (AWS)’s official documentation. Amazon Web Services (AWS) can change exam length, cost and scoring without notice, so confirm the details there before you book.

Sit the whole exam before you sit the whole exam

The full bank covers every domain, with timed mode and per-domain scoring.

Premium
Timed mode Per-domain score tracking Unlimited free updates PDF + Practice Test
Get the full bank 30-day money back

DVA-C02 Practice Questions By Domains

4 domains covered
Premium 200 of 600 free

Practice the full exam, not a sample

Unlock the full bank and practise every domain end to end.

Unlock all 600 questions

AWS DVA-C02 Practice Test

Preparing for the AWS Certified Developer – Associate exam is easier when you know what the real test expects and use practice questions with a clear purpose. This AWS DVA-C02 practice test guide explains the exam format, content domains, important services, scoring, study methods, and exam-day steps in student-friendly language. You can also Browse practice tests by vendor when you want to compare certification paths or prepare for another technology exam.

What Is the AWS DVA-C02 Practice Test?

An AWS DVA-C02 practice test is a collection of questions designed to help you prepare for the AWS Certified Developer – Associate certification exam. Good practice questions do more than ask you to remember AWS service names. They present development situations and ask you to choose a secure, reliable, or efficient solution.

For example, a question might describe an AWS Lambda function that fails while processing messages. You may need to decide whether to change its timeout, configure a dead-letter queue, adjust permissions, or improve error handling. Another question might ask how an application should store database credentials without placing them directly in source code.

The official AWS Certified Developer – Associate page says the certification validates the ability to develop, test, deploy, and debug AWS cloud-based applications. A well-designed practice test should therefore help you apply AWS knowledge to development tasks—not simply memorize definitions.

Who Should Take the DVA-C02 Exam?

DVA-C02 is designed for people who perform a developer role. It may be a suitable goal for:

  • Software developers who build or maintain applications on AWS
  • Cloud developers who use serverless and managed AWS services
  • DevOps professionals who work closely with application deployment pipelines
  • Backend developers who use AWS APIs, command-line tools, or SDKs
  • Students who have learned cloud development and want to validate practical skills
  • Existing AWS users who want a role-based Associate certification

There is no mandatory certification or training course that you must complete first. However, AWS recommends at least one year of hands-on development and maintenance experience. You should also be comfortable with at least one high-level programming language, basic application lifecycle concepts, AWS APIs, the AWS Command Line Interface, AWS SDKs, and deploying code through an existing continuous integration and continuous delivery process.

If you are completely new to IT or cloud computing, begin with basic AWS concepts and simple hands-on exercises. AWS notes that candidates without IT work experience may benefit from earning AWS Certified Cloud Practitioner first. It is a recommendation, not a requirement. You can Explore AWS certification exams to see other AWS practice options and choose a starting point that matches your experience.

Why Use an AWS DVA-C02 Practice Test?

Reading a study guide helps you learn concepts, but practice questions show whether you can use those concepts under exam conditions. They can help in several ways.

Find knowledge gaps early

Take a short diagnostic test before beginning a detailed study plan. Your score is less important than the pattern of your mistakes. If most of your incorrect answers involve IAM permissions, DynamoDB access patterns, or Lambda event handling, you know where to focus.

Learn how AWS scenario questions work

Many questions contain several options that are technically possible. The task is to choose the answer that best meets the stated requirements. Words such as most secure, least operational effort, lowest latency, fault tolerant, or cost-effective change what the best answer is.

Improve time management

With 65 questions in 130 minutes, the simple average is two minutes per question. Some questions take less time, leaving extra minutes for longer scenarios. Timed mock tests help you learn when to answer, when to eliminate options, and when to flag a difficult item for review.

Turn mistakes into revision notes

An incorrect answer is useful when you understand it. For every missed question, record:

  • The concept being tested
  • Why your answer was wrong
  • Why the correct answer satisfies the requirement
  • The AWS feature or limitation you need to review
  • A short rule you can remember later

This creates a personal review list based on your real weaknesses instead of a generic list of topics.

DVA-C02 Exam Domains and What to Practice

AWS uses compensatory scoring, which means you pass based on your overall score rather than meeting a separate passing score in every domain. However, domain weights indicate how much of the scored exam each area represents. Study all four domains and give extra practice time to the larger ones.

Domain 1: Development with AWS Services — 32%

This is the largest domain. The official Development with AWS Services outline groups it into three tasks: developing code for applications hosted on AWS, developing AWS Lambda code, and using data stores in application development.

Application patterns and AWS integrations

Understand common patterns such as event-driven applications, microservices, monolithic applications, orchestration, choreography, and fanout. You should be able to distinguish:

  • Stateful from stateless application behavior
  • Tightly coupled from loosely coupled components
  • Synchronous from asynchronous communication
  • Normal failures from failures that require retry, backoff, or a circuit breaker

Practice questions may ask you to connect services appropriately. Amazon SQS can buffer work between components. Amazon SNS can fan out messages to multiple subscribers. Amazon EventBridge can route events to targets based on rules. AWS Step Functions can coordinate a multi-step workflow. Focus on why you would select each option, not only what its name means.

You should also understand how application code calls AWS services through APIs and AWS SDKs. Review request handling, response handling, pagination, retries, error handling, and the use of temporary credentials. Know the basics of creating and maintaining APIs, validating requests, transforming data, and testing application code.

AWS Lambda development

Lambda receives considerable attention because it combines application code, events, security, monitoring, and configuration. Practice the following:

  • Choosing a runtime, handler, memory setting, timeout, and environment variables
  • Understanding triggers, destinations, layers, and extensions
  • Managing concurrency and performance
  • Handling asynchronous failures with retries, dead-letter queues, or destinations
  • Allowing a function to reach private resources in a VPC
  • Integrating Lambda with services such as API Gateway, SQS, SNS, EventBridge, DynamoDB, and Amazon S3
  • Processing or transforming near-real-time data
  • Testing functions and event payloads

Do not study configuration values in isolation. Think about cause and effect. Increasing Lambda memory also changes available CPU. A function that times out may need better code, more resources, a longer timeout, or a different design. The scenario determines the answer.

Data stores and caching

For Amazon DynamoDB, understand partition keys, sort keys, indexes, query versus scan, and strong versus eventual consistency. A good partition key spreads requests across values; a poor one can create uneven access. A query uses key conditions and is usually more targeted than scanning an entire table.

Also review serialization, data lifecycle management, caching, and choosing a data store from an application’s access pattern. You do not need to become a database administrator, but you should know when a key-value database, relational database, cache, object store, or search service fits the requirement.

Practice goal: Given a short application requirement, explain which service or feature you would use and why it is more suitable than the alternatives.

Domain 2: Security — 26%

Security is the second-largest domain. The official Security domain outline covers authentication and authorization, encryption, and management of sensitive data in code.

Authentication and authorization

Authentication confirms identity; authorization determines what that identity may do. Practice scenarios involving:

  • IAM users, roles, policies, and principals
  • Temporary credentials from AWS Security Token Service
  • Assuming an IAM role
  • Federated access and Amazon Cognito
  • Authenticated AWS API calls
  • Bearer tokens
  • Fine-grained application authorization
  • Cross-service authentication in microservice applications

The principle of least privilege is essential: grant only the actions and resources needed. Avoid long-term access keys in application code. Applications running on AWS should normally use an appropriate IAM role and temporary credentials.

Encryption

Know the difference between encryption at rest and encryption in transit, as well as server-side and client-side encryption. AWS KMS is important for creating and controlling encryption keys. Practice questions may involve key policies, permissions, key rotation, cross-account access, or deciding where encryption and decryption should occur.

You should not assume that having permission to use an AWS service automatically gives permission to use its KMS key. The calling identity must have the necessary access, and the key policy must allow the operation.

Secrets and sensitive data

Passwords, API keys, tokens, and database credentials should not be hardcoded in source files or stored in public repositories. Review AWS Secrets Manager, encrypted configuration values, secure environment-variable handling, data masking, sanitization, and protection of personally identifiable information.

Practice identifying insecure choices. Logging a complete authorization token, placing credentials in a Lambda deployment package, or returning sensitive error details to a client can expose data even when the main storage service is encrypted.

Practice goal: Select the option that provides the required access while reducing exposed credentials and unnecessary permissions.

Domain 3: Deployment — 24%

The official Deployment domain outline covers application artifacts, testing in development environments, automated deployment testing, and deployment through AWS CI/CD services.

Preparing applications for deployment

Know how code, dependencies, environment variables, configuration files, and container images are packaged. Understand why development, testing, staging, and production environments need controlled configuration. Review code repositories and the resource requirements of an application, including memory and compute needs.

AWS AppConfig can help manage and safely release application configuration changes. Keep configuration separate from code where appropriate so a value can change without rebuilding the entire application.

Testing applications and infrastructure as code

Practice unit tests, integration tests, mock APIs, event payloads, and testing through development endpoints. For an event-driven application, verify not only the happy path but also malformed events, retries, duplicates, and downstream failures.

Understand the purpose of AWS CloudFormation, AWS Serverless Application Model (AWS SAM), and AWS Cloud Development Kit. You should be able to read or update an existing infrastructure-as-code template and recognize how it produces repeatable environments. The exam guide places designing an entire CI/CD pipeline outside the target role, but using and working with an existing pipeline is in scope.

Release and deployment strategies

Know the basic purpose of all-at-once, rolling, canary, linear, and blue/green deployments. A canary deployment sends a small portion of traffic to a new version before wider release. Blue/green keeps separate old and new environments so traffic can be switched. The correct strategy depends on risk, rollback needs, cost, and acceptable deployment time.

Review Lambda versions and aliases, API Gateway stages, container image tags, branches, labels, automated tests, and rollback behavior. Also understand how a code commit can trigger build, test, and deployment actions through services such as AWS CodeBuild, AWS CodeDeploy, and AWS CodePipeline.

Practice goal: Choose a packaging, testing, or release method that meets the scenario’s safety, speed, and rollback requirements.

Domain 4: Troubleshooting and Optimization — 18%

Although this is the smallest domain, it can connect to every other area. The official Troubleshooting and Optimization outline covers root-cause analysis, observability, and application optimization.

Logs, metrics, traces, and alerts

Learn what each signal tells you:

  • Logs record events and application details.
  • Metrics show numerical behavior over time, such as errors, duration, or request count.
  • Traces follow a request across application components.
  • Alarms and notifications alert people or systems when a condition is met.

Amazon CloudWatch supports logs, metrics, dashboards, queries, and alarms. AWS X-Ray helps trace requests through distributed applications. AWS CloudTrail records AWS API activity and is useful when you need to know who or what made a control-plane change.

Practice locating the most relevant signal. A function’s application exception may appear in its logs, a latency pattern may be clearer in metrics or traces, and an unexpected configuration change may be found in CloudTrail history.

Root-cause analysis and optimization

Be ready to debug code, service integrations, permissions, and deployment failures. Review structured logging, custom metrics, tracing annotations, health checks, readiness probes, and alerts.

Optimization questions may involve concurrency, memory, compute, filters, caching, or inefficient data access. Look for the bottleneck before changing the architecture. For example, a slow application could be caused by repeated remote calls, a DynamoDB scan, a cold cache, limited concurrency, or insufficient Lambda memory. Different causes require different fixes.

Practice goal: Read the evidence in a scenario, identify the likely cause, and select the smallest effective correction.

Important AWS Services for DVA-C02 Preparation

AWS publishes a current in-scope services list, but warns that the list is non-exhaustive and subject to change. Do not try to memorize every service equally. Start with the services that appear across multiple domains.

PurposeServices and tools to review
Serverless developmentAWS Lambda, Amazon API Gateway, AWS SAM
Messaging and eventsAmazon SQS, Amazon SNS, Amazon EventBridge, AWS Step Functions, AWS AppSync
Data and storageAmazon DynamoDB, Amazon S3, Amazon RDS, Amazon Aurora, Amazon ElastiCache, Amazon Kinesis
SecurityIAM, AWS STS, AWS KMS, AWS Secrets Manager, Amazon Cognito
Deployment and automationAWS CodeBuild, AWS CodeDeploy, AWS CodePipeline, AWS CloudFormation, AWS CDK, AWS AppConfig
Monitoring and troubleshootingAmazon CloudWatch, AWS X-Ray, AWS CloudTrail
Compute and containersAmazon EC2, AWS Elastic Beanstalk, Amazon ECR, Amazon ECS, Amazon EKS
Delivery and networkingAmazon CloudFront, Elastic Load Balancing, Amazon Route 53, Amazon VPC

For each major service, learn its purpose, common integrations, permissions, failure behavior, scaling basics, and the situations where another service would be a better choice. That comparison skill is more valuable than remembering a long list of facts.

Are AI and Amazon Q Developer on the DVA-C02 Exam?

The current exam guide includes Amazon Q Developer in official domain task statements, such as assisting with development and generating automated tests. The guide also lists emerging AI-related topics that may appear as unscored pretest questions. Those emerging topics include AI-assisted code generation and review, security risks of AI integration, AI-generated tests, CI/CD assistance, troubleshooting support, and identifying optimization opportunities.

This distinction is important: the guide says emerging topics may be included only as unscored questions until they are formally added to the content outline. Because you cannot identify unscored questions during the exam, answer them normally. Review the current AWS exam guide again shortly before your test in case the outline has changed.

How to Use DVA-C02 Practice Questions Effectively

A practice test works best when it is part of a repeatable study cycle. Combine practice questions with hands-on work and reliable Test Preparation Resources so you learn both the exam language and the actual AWS behavior.

Step 1: Take a diagnostic test

Complete a short mixed-domain test without notes. Do not worry if the first result is low. Use it to identify your starting point and rank the domains from weakest to strongest.

Step 2: Study one objective at a time

Read the official task statement, review the related service documentation, and complete a small hands-on exercise. Examples include:

  • Invoke a Lambda function with a test event and inspect its CloudWatch logs.
  • Put messages on an SQS queue and observe retry or visibility behavior.
  • Create a DynamoDB table and compare a query with a scan.
  • Use an IAM role to grant only the permissions an application needs.
  • Store a sample secret securely and retrieve it from application code.
  • Deploy a simple AWS SAM or CloudFormation stack.

Use a personal sandbox account carefully, enable billing alerts, and remove resources after practice to avoid unexpected charges.

Step 3: Complete domain-focused questions

Answer sets from the domain you just studied. Review every explanation, including questions you answered correctly by guessing. If two options still seem equally valid, return to the scenario and identify the requirement that separates them.

Step 4: Repeat missed questions later

Do not immediately memorize the correct letter. Wait a few days, then solve the concept again in a differently worded question. You are ready when you can explain the rule and apply it to a new situation.

Step 5: Take a timed full-length mock test

Near the end of your preparation, simulate the 130-minute exam. Use 65 questions, close your notes, silence notifications, and take only the breaks allowed by your chosen simulation. Review the result by domain and question type.

A Simple Six-Week DVA-C02 Study Plan

Adjust this plan to match your background. A working AWS developer may move faster; a student building a first cloud application may need more time.

WeekMain focusPractice activity
1Exam overview, AWS SDKs, APIs, application patternsDiagnostic test and basic SDK exercise
2Lambda, API Gateway, messaging, and eventsBuild a small event-driven workflow; answer Domain 1 questions
3DynamoDB, storage, caching, and data accessCompare query/scan and consistency options; continue Domain 1 practice
4IAM, Cognito, KMS, STS, and secretsReview policies and secure a sample application; answer Domain 2 questions
5Packaging, testing, IaC, CI/CD, and deployment strategiesDeploy to a test environment; answer Domain 3 questions
6CloudWatch, X-Ray, troubleshooting, optimization, and final reviewAnswer Domain 4 questions and take two timed mixed-domain tests

After each week, write a one-page summary in your own words. Include confusing comparisons, common errors, and service limits that affected your answers. Short, personal notes are easier to revise than a large collection of copied documentation.

DVA-C02 Question-Answering Strategies

Read the requirement before judging the options

Identify the workload, the problem, and the desired outcome. If the question asks for the solution with the least operational effort, a managed AWS service may be better than custom code even when both would work.

Eliminate options that break a stated condition

Cross out answers that expose credentials, require unsupported behavior, add unnecessary management, or solve a different problem. Eliminating two clearly unsuitable options makes the final comparison easier.

Watch for security mistakes

Hardcoded credentials, overly broad permissions, public access without a requirement, unencrypted sensitive data, and secrets written to logs are common warning signs.

Separate similar services by purpose

SQS queues work items for consumers; SNS pushes messages to subscribers; EventBridge routes events using rules; Step Functions coordinates workflow states. Similar comparisons appear throughout the exam.

Flag difficult questions and keep moving

Do not let one long scenario use too much time. Choose your best answer, mark the item for review, and return if time remains. Remember that unanswered questions are incorrect.

Can You Take the AWS DVA-C02 Exam Online?

Yes. AWS states that all AWS Certification exams are available through Pearson VUE with online proctoring as well as testing-center delivery. For an online exam, you use your own compatible computer in a private space while a proctor monitors your screen and webcam. Communication with the proctor is required.

Before exam day, review AWS’s current scheduling and testing options and complete the required system test. Use a stable internet connection, clear your testing area, prepare acceptable identification, and follow the exact check-in instructions in your confirmation email.

If your home environment is noisy, your connection is unreliable, or you cannot meet the room rules, a testing center may be the less stressful option. Testing centers provide the computer and on-site check-in support, although appointment availability varies.

How to Schedule the DVA-C02 Exam

AWS currently directs candidates to schedule through an AWS Certification Account and Pearson VUE:

  1. Sign in to your AWS Certification Account.
  2. Select the option to schedule a new exam.
  3. Find AWS Certified Developer – Associate (DVA-C02).
  4. Choose scheduling with Pearson VUE.
  5. Select online proctoring or a testing center, then choose an available date and time.
  6. Pay the fee or use an eligible voucher.
  7. Read the entire confirmation email and verify your name, identification requirements, time zone, and appointment details.

According to the current AWS before-testing policy, an appointment can be rescheduled up to 24 hours before the scheduled time and can be rescheduled only twice. Changes within 24 hours generally are not allowed, and the exam fee may be forfeited. Always recheck the policy when scheduling because requirements can change.

Exam-Day Checklist

For an online-proctored exam

  • Run the system test on the same computer and network you will use.
  • Close prohibited applications and disconnect extra monitors if instructed.
  • Prepare the identification listed in your confirmation email.
  • Clear papers, phones, watches, and other restricted items from the area.
  • Ask other people not to enter the room.
  • Begin check-in at the permitted time rather than waiting until the appointment begins.

For a testing-center exam

  • Confirm the address, travel time, and arrival instructions.
  • Bring the required original identification.
  • Store personal belongings as directed by staff.
  • Read the testing agreement and tutorial carefully.
  • Use the question-review feature to manage flagged items.

Policies in your appointment email and on the provider’s website take priority over any general checklist.

What Happens After the Exam?

AWS says official results are available in your AWS Certification Account within five business days, although some results may take longer if they require review. If you pass, the Associate certification is valid for three years.

If you fail, the current AWS after-testing policy requires a 14-calendar-day wait before another attempt. There is no stated limit on the number of attempts, but you must pay the full registration fee for each one. Use the wait period to study the domain feedback, revisit weak objectives, and take a fresh practice test rather than simply repeating memorized questions.

Frequently Asked Questions About the AWS DVA-C02 Practice Test

What is the AWS DVA-C02 exam?

DVA-C02 is the exam code for AWS Certified Developer – Associate. It validates skills in developing, testing, deploying, securing, troubleshooting, and optimizing applications that use AWS services.

How many questions are on DVA-C02?

The exam has 65 questions. The official guide says 50 are scored and 15 are unscored. You will not know which questions are unscored.

How long is the DVA-C02 exam?

You receive 130 minutes to complete the exam. That is an average of two minutes per question.

What score do I need to pass DVA-C02?

The passing score is 720 on AWS’s 100–1,000 scaled-score system. Because scaled scoring is not the same as a raw percentage, do not assume that a particular practice-test percentage guarantees a pass.

How much does the exam cost?

The listed price is USD 150. Taxes and local currency pricing may apply. Confirm the final amount during registration.

Does DVA-C02 have prerequisites?

No formal prerequisite is required. AWS recommends one or more years of hands-on experience developing and maintaining AWS applications. Beginners can still work toward the exam, but should allow enough time for practical labs.

Which programming language should I learn?

AWS recommends proficiency in at least one high-level programming language. The exam is about AWS development decisions rather than testing one required language. Use a language supported by AWS SDKs and Lambda that you can read and debug confidently, such as Python, JavaScript or TypeScript, Java, C#, or Go.

Is DVA-C02 only about AWS Lambda?

No. Lambda is important, but the exam also covers application patterns, APIs, messaging, data stores, security, testing, deployment, monitoring, and optimization across many AWS services.

Are the questions multiple choice?

The exam includes multiple-choice questions with one correct response and multiple-response questions with two or more correct responses. A multiple-response item tells you how many responses to select.

Can I take DVA-C02 from home?

Yes. Pearson VUE offers online proctoring for AWS Certification exams. You must meet the computer, network, identification, room, and check-in requirements.

How many practice tests should I take?

There is no ideal number for everyone. Take one diagnostic test, use shorter domain tests during study, and complete at least one or two new full-length timed simulations near exam day. Reviewing explanations and correcting weak concepts is more valuable than rapidly completing many tests.

Are practice-test questions the same as live AWS exam questions?

Legitimate practice questions should reflect the official objectives and style, not claim to reproduce protected live questions. Use practice tests to understand AWS concepts and improve decision-making. Avoid unauthorized exam content or so-called dumps.

How long should I study for DVA-C02?

Many learners can organize preparation into four to eight weeks, but the right time depends on existing AWS and software-development experience. Continue until you can explain all four domains, complete hands-on tasks, and perform consistently on unseen timed questions.

What should I do the day before the exam?

Review a short summary, verify your appointment and identification, test your equipment if taking the exam online, and rest. Avoid learning a large new topic at the last minute.

Top 15 Most Challenging DVA-C02 Questions

Question 1
Domain: Development with AWS Services
A firm is migrating an on‑premises database to Amazon RDS for MySQL with heavy read activity. The goal is to refactor code to maximize read query performance with the least future and current effort. Which approach satisfies this need?
  • A. Increase the number of connections or expand the connection pool for the existing database setup.
  • B. Keep using a Multi-AZ RDS deployment and modify the code to connect to the secondary instance.
  • C. Set up one or more RDS read replicas and adjust the app to point queries to the read replica URLs.
  • D. Install open-source replication on an EC2 host to duplicate the MySQL database and direct queries to the EC2 IP address.
Question 2
Domain: Security
A new API is built and will be accessed by users who must authenticate via a third‑party SAML identity provider. After authentication, users should be able to access other AWS services like S3 and DynamoDB. How can this be achieved?
  • A. Use an Amazon Cognito user pool with SAML as the resource server.
  • B. Use Amazon Cognito identity pools with a SAML identity provider as one of the authentication sources.
  • C. Rely on AWS IAM for sign-up and sign-in functionality.
  • D. Use CloudFront signed URLs to connect with the SAML provider.
Question 3
Domain: Deployment
A developer needs geographic load testing for an API and must deploy resources in several AWS Regions without changing the application code. How can this be accomplished?
  • A. Deploy a Lambda function in each target region that provisions a stack from a CloudFormation template when invoked.
  • B. Create a CloudFormation template for the load test and use the AWS CLI create-stack-set to instantiate it in the target Regions.
  • C. Create an AWS Systems Manager document that defines the resources and run it in the desired Regions.
  • D. Create a CloudFormation template for the load test and use the AWS CLI deploy command to create a stack for each Region.
These are the hard ones. There are 585 more. Every question explains why the wrong answers are wrong, with a link to official docs.
Get all 600 questions
Question 4
Domain: Troubleshooting and Optimization
An application must monitor end-to-end requests across multiple EC2-hosted microservices and debug issues within the services. What approach should be taken?
  • A. Aggregate logs and metrics with Amazon CloudWatch and build a dashboard.
  • B. Aggregate logs with AWS CloudTrail and build a dashboard.
  • C. Instrument all microservices with the AWS X-Ray SDK and use the X-Ray service map for monitoring.
  • D. Use AWS Health to monitor the microservices' health.
Question 5
Domain: Development with AWS Services
For a DynamoDB application, you want to fetch several specific items in a single API call with minimal impact on the database. Which API call should you use?
  • A. BatchGetItem
  • B. GetItem
  • C. Scan
  • D. Query
Question 6
Domain: Security
An EC2-hosted application lacks S3 read permissions due to its IAM role. To grant read access with minimal disruption, what is the best approach?
  • A. Add the needed permission to the role, terminate the current instance, and launch a new one.
  • B. Add the needed permission to the role so it takes effect automatically.
  • C. Add the needed permission to the role, then suspend and restart the existing instance.
  • D. Add the permission to the S3 bucket and restart the EC2 instance.
Question 7
Domain: Deployment
A company uses CloudFormation to deploy an API Gateway REST API integrated with Lambda and DynamoDB, with separate DynamoDB tables per stage (dev, test, prod). They want a production release that routes 20% of traffic to a canary version while keeping 80% on the existing version, minimizing customer impact. What is the best approach?
  • A. Deploy changes in small increments to production.
  • B. Use Route 53 weighted routing between production and testing stages.
  • C. Place an Application Load Balancer in front of API Gateway stages and weight traffic.
  • D. Configure canary deployment settings for the production API stage to route 20% to the canary.
Question 8
Domain: Troubleshooting and Optimization
A Java-based AWS Lambda function under test is not behaving as expected. To troubleshoot, which service should be used for tracing?
  • A. AWS Trusted Advisor
  • B. Amazon CloudWatch
  • C. AWS X-Ray
  • D. AWS CloudTrail
Question 9
Domain: Security
A REST API secured by API Gateway and Lambda returns HTTP 405 when a user provides invalid credentials. Which HTTP error should the API respond with for an unauthorized login attempt?
  • A. HTTP 401
  • B. HTTP 404
  • C. HTTP 503
  • D. HTTP 505
Question 10
Domain: Development with AWS Services
A firm wants to release a fresh UI to a staging audience before gradually expanding to 10% of production users in a single AWS Region. The method should target users based on their attributes and must validate configuration before deployment, with an option to rollback instantly without redeploying code. Which approach fits these needs?
  • A. Leverage environment variables and push new UI versions per environment to toggle feature flags.
  • B. Utilize AWS AppConfig feature flags with environment-scoped settings, phased rollouts, and instant rollback.
  • C. Store environment flags in AWS Systems Manager Parameter Store and read them at runtime in the app.
  • D. Run a custom feature flag service behind an Application Load Balancer and query it to target users and manage percentage rollouts.
Question 11
Domain: Security
A developer uses AWS IAM Identity Center to access the AWS CLI and SDKs from a local machine. Initial API calls worked after SSO setup, but now Access Denied errors occur without any changes to configurations. What is the most likely reason for this issue?
  • A. Permissions for the AWS CLI binary on the workstation were altered.
  • B. The assumed permission set via IAM Identity Center lacks necessary rights for the API call.
  • C. The federated role credentials from IAM Identity Center have expired.
  • D. The requests are being made against the wrong AWS account.
Question 12
Domain: Deployment
A company hosting a new app on AWS Elastic Beanstalk wants to deploy updates without any downtime. They require routing a defined portion of incoming traffic to a new version during a testing period. Which deployment type satisfies these criteria?
  • A. Rolling
  • B. Traffic-splitting
  • C. In-place
  • D. Immutable
Question 13
Domain: Troubleshooting and Optimization
An app uses Lambda functions to extract metadata from files uploaded to S3, storing metadata in DynamoDB. The app starts acting oddly, and the developer wants to inspect Lambda logs for errors. Where should the logs be found?
  • A. Amazon S3
  • B. AWS CloudTrail
  • C. Amazon CloudWatch
  • D. Amazon DynamoDB
Question 14
Domain: Development with AWS Services
A cloud-based video surveillance company stores 1 GB-average video files in S3 and processes them with a Lambda function that runs once per file. The process is I/O intensive and reads files multiple times. Which option delivers the best performance with minimal changes?
  • A. Attach a larger-than-1-GB EBS volume to the Lambda and copy files from S3 to it.
  • B. Attach an ENA to the Lambda to read files from S3.
  • C. Increase ephemeral storage to 2 GB and copy files to the Lambda’s /tmp directory.
  • D. Modify the Lambda code to read files directly from the S3 bucket.
Question 15
Domain: Security
An EC2-based app stores data in S3 and needs all traffic to be encrypted in transit. How can a developer guarantee this?
  • A. Install certificates on the EC2 instances.
  • B. Create a private VPC endpoint.
  • C. Configure the S3 bucket with SSE-KMS.
  • D. Create a bucket policy denying traffic unless aws:SecureTransport is true.
Disclaimer: Edurely is an independent educational platform. We are not affiliated with, authorized by, endorsed by, or in any way officially connected to AWS . Full disclaimer
Edurely
Curated By Edurely Team

The Edurely Team comprises certified professionals and subject matter experts dedicated to delivering accurate, up-to-date exam preparation materials. We rigorously review every resource to ensure it aligns with the latest industry standards and certification objectives to help you succeed.