Developer - Associate Practice Questions
Prepare for DVA-C01 with more than an answer.
Unlock the full exam and previous versions
- v1Version 1 212 questions Locked
- DVA-C01Legacy AWS Certified Developer - Associate 350 questions Current
- 1
A company is using Amazon API Gateway to manage its public-facing API. The CISO requires that the APIs be used by test account users only.
What is the MOST secure way to restrict API access to users of this particular AWS account?Show answer details
Correct answer: B
API Gateway resource policies enable fine-grained access control based on IP addresses, VPC endpoints, or IAM conditions, providing additional security layers beyond authentication. Reference: https://aws.amazon.com/blogs/compute/control-access-to-your-apis-using-amazon-api-gateway-resource-policies/
- 2
A nightly batch job loads 1 million new records into a DynamoDB table. The records are only needed for one hour, and the table needs to be empty by the next night’s batch job.
Which is the MOST efficient and cost-effective method to provide an empty table?Show answer details
Correct answer: D
Deleting and recreating the table is the most cost-effective approach for clearing large amounts of temporary data, avoiding millions of individual delete operations.
- 3
How should custom libraries be utilized in AWS Lambda?
Show answer details
Correct answer: D
Lambda functions access environment variables at runtime to configure behavior without modifying code, enabling secure storage of configuration data and credentials. Reference: https://docs.aws.amazon.com/lambda/latest/dg/env_variables.html
- 4
A video-hosting website has two types of members: those who pay a fee, and those who do not. Each video upload places a message in Amazon SQS. A fleet of Amazon EC2 instances polls Amazon SQS and processes each video.
The developer needs to ensure that the videos uploaded by the paying members are processed first.
How can the developer meet this requirement?Show answer details
Correct answer: B
SQS does not support message priorities within a single queue. Using separate queues and polling the priority queue first is the standard pattern for priority processing.
- 5
An application needs to encrypt data that is written to Amazon S3 where the keys are managed in an on-premises data center, and the encryption is handled by S3.
Which type of encryption should be used?Show answer details
Correct answer: A
S3 bucket-level default encryption ensures all objects are encrypted at rest using AES-256 or KMS keys, providing compliance and security without application-level changes. Reference: https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html
- 6
A Developer is designing an AWS Lambda function that create temporary files that are less than 10 MB during execution. The temporary files will be accessed and modified multiple times during execution. The Developer has no need to save or retrieve these files in the future.
Where should the temporary file be stored?Show answer details
Correct answer: C
Lambda deployment packages can include custom libraries and dependencies packaged as ZIP files or Lambda Layers for code reusability across functions. Reference: https://docs.aws.amazon.com/lambda/latest/dg/lambda-dg.pdf
- 7
A team of Developers must migrate an application running inside an AWS Elastic Beanstalk environment from a Classic Load Balancer to an Application Load Balancer.
Which steps should be taken to accomplish the task using the AWS Management Console?Show answer details
Correct answer: C
Load balancer type cannot be changed in existing Elastic Beanstalk environments. You must clone the environment with the new load balancer type and use environment swapping.
- 8
The developer needs to create an application that supports Security Assertion Markup Language (SAML) and Facebook authentication. It must also allow access to AWS services, such as Amazon DynamoDB.
Which AWS service or feature will meet these requirements with the LEAST amount of additional coding?Show answer details
Correct answer: B
Amazon Cognito identity pools provide temporary AWS credentials that allow authenticated users to access AWS services like DynamoDB. While user pools handle SAML and Facebook authentication, identity pools are required for AWS service access.
- 9
A developer wants to ensure the Amazon EC2 instances in AWS Elastic Beanstalk execute a certain set of commands before the application is ready to use.
Which Elastic Beanstalk feature will allow the developer to accomplish this?Show answer details
Correct answer: C
Elastic Beanstalk .ebextensions configuration files allow you to run commands, install packages, and modify settings before your application starts. These configuration files are processed during environment deployment to customize EC2 instances.
- 10
A Developer is using AWS CLI, but when running list commands on a large number of resources, it is timing out.
What can be done to avoid this time-out?Show answer details
Correct answer: C
AWS CLI pagination automatically handles large result sets by breaking them into smaller chunks, preventing timeouts when listing many resources. Use --page-size to control chunk size and --max-items to limit total results returned.
