AWS Developer Associate — Practice Questions flashcards
6 of 60 questions free to study here · 4 topics · the whole deck is built into Willys
Multiple-choice practice questions, one best answer each, on Lambda, DynamoDB, API Gateway, messaging, IAM, Cognito, KMS and secrets, CI/CD deployment, and monitoring and troubleshooting.
Practice deck · part of AWS Certified Developer – Associate · written against: Exam DVA-C02 guide. Updated 2026-10-10.
Study the free sample
6 questions from the deck as they are. Flip, rate yourself, filter by topic; your progress stays in this browser.
Tap the card or press Space to flip
The 6 sample questions as a list
-
An S3 upload invokes a Lambda function asynchronously. The team wants successful results sent to one SQS queue and failed events sent to another, with the request and response or error details in each record. What should they configure?
A) An S3 event notification that targets both queues
B) An SQS redrive policy with a maximum receive count
C) A dead-letter queue on the function for both outcomes
D) Lambda destinations for on-success and on-failureD) Lambda destinations for on-success and on-failureDevelopment with AWS Services › Lambda
Destinations deliver an invocation record that includes the request and the response or error, and they offer an on-success route as well as on-failure. A dead-letter queue only catches failed events and has no success path. -
A Lambda function processes SQS messages in batches. When one message in a batch fails, the whole batch returns to the queue and messages that already succeeded are processed again. The team does not want to shrink the batch size. What is the best fix?
A) Raise the queue's visibility timeout well above the function's timeout
B) Configure a dead-letter queue on the Lambda function itself
C) Enable content-based deduplication on the source queue
D) Enable ReportBatchItemFailures and return only the failed message IDsD) Enable ReportBatchItemFailures and return only the failed message IDsDevelopment with AWS Services › Lambda
With partial batch responses the handler reports just the failed message IDs, so Lambda deletes the successful ones and only the failures become visible again. A function-level dead-letter queue applies to asynchronous invocations, not to messages Lambda polls from SQS. -
An application running on EC2 instances must read and write a DynamoDB table. What is the recommended way to give it credentials?
A) Store an IAM user's access keys in the application's config file
B) Attach an IAM role to the instances through an instance profile
C) Bake an IAM user's access keys into the AMI as environment values
D) Store the root user's access keys in Secrets Manager for startupB) Attach an IAM role to the instances through an instance profileSecurity › IAM for Application Code
An instance profile delivers temporary role credentials that the SDK's default credential chain picks up and rotates automatically. Long-term access keys stored on the instance or in the image can leak and must be rotated by hand. -
A developer added an S3 notification that should invoke a Lambda function, and granted lambda:InvokeFunction in the function's execution role. The function is never invoked. What fixes it?
A) Add S3 as a trusted principal in the execution role's trust policy
B) Add a lambda:InvokeFunction statement to the bucket policy
C) Grant s3:GetObject on the bucket to the execution role
D) Add a statement for S3 to the function's resource-based policyD) Add a statement for S3 to the function's resource-based policySecurity › IAM for Application Code
The execution role controls what the function may call; permission for S3 to invoke the function belongs in the function's resource-based policy. A bucket policy governs access to the bucket, not to the function. -
A CodeBuild project needs an API token during the build. The token must never be committed to the repository or shown in plaintext in the project's settings. How should the buildspec get it?
A) Pass it from the source stage to the build as an extra pipeline artifact
B) Add it as a plaintext environment variable in the build project
C) Write it into the commands of the buildspec's pre_build phase
D) Map it in the env section under secrets-manager or parameter-storeD) Map it in the env section under secrets-manager or parameter-storeDeployment › CodePipeline and CodeBuild
Mapping the value under secrets-manager or parameter-store makes CodeBuild fetch it at build time into an environment variable, as long as the service role can read it. A plaintext project variable is visible to anyone who can view the project. -
On-call engineers are paged too often. They want a single page only when both the error-rate alarm and the latency alarm are in ALARM at the same time. What should they create?
A) A composite alarm that combines both alarms with AND
B) An alarm with a higher datapoints-to-alarm setting
C) A metric math alarm that averages the two metrics
D) Two alarms that notify through the same SNS topicA) A composite alarm that combines both alarms with ANDTroubleshooting and Optimization › CloudWatch Metrics and Alarms
A composite alarm evaluates a rule over other alarms' states and only it needs to notify. Sending both alarms to one topic still pages whenever either fires.
Unlock the whole deck
You are studying a free 6-question sample. All 60 questions of AWS Developer Associate — Practice Questions, the other 2 AWS Certified Developer – Associate decks, and spaced-repetition scheduling are built into Willys. 14-day free trial, then $14.99 a year.
In Willys, tap Exam Library at the top of your Decks (or Browse Exam Library… under the + button), find the exam on its shelf or by search, tick it and tap Add.
More AWS Certified Developer – Associate decks
← All AWS Certified Developer – Associate decks, with the study guide and topic outline.
About these cards
Review status: Second-reader reviewed, with corrections applied.
Checked against:
- AWS Certified Developer – Associate DVA-C02 exam guide — topic outline only; no text copied
These are independent study notes written for Willys. They are not official exam material, may contain mistakes, and are no substitute for your course, your teacher or the exam owner's own publications. Found an error? Tell us — corrections ship as a new version of the deck.
Amazon Web Services, AWS and AWS Certified are trademarks of Amazon.com, Inc. or its affiliates. This product is not affiliated with, sponsored by, or endorsed by Amazon Web Services.
Use of these pages is covered by our Terms of Use.