Free Amazon DVA-C02 Exam Questions

Become Amazon Certified with updated DVA-C02 exam questions and correct answers

Page: 1 / 110

Total 550 Questions | Updated On: Apr 21, 2026

Add To Cart

Question 1

A developer is creating a new batch application that will run on an Amazon EC2 instance. The applicationrequires read access to an Amazon S3 bucket. The developer needs to follow security best practices to grantS3 read access to the application.Which solution meets these requirements?

A : Add the permissions to an 1AM policy. Attach the policy to a role. Attach the role to the EC2 instanceprofile.

B : Add the permissions inline to an 1AM group. Attach the group to the EC2 instance profile.

C : Add the permissions to an 1AM policy. Attach the policy to a user. Attach the user to the EC2 instanceprofile.

D : Add the permissions to an 1AM policy. Use 1AM web identity federation to access the S3 bucket withthe policy.

Answer: A

Question 2

A development team uses AWS CodeBuild as part of a CI/CD pipeline. The project includes hundreds of unitand integration tests, and total build time continues to increase. The team wants faster feedback and loweroverall testing duration without managing additional infrastructure.Which solution will meet these requirements with the LEAST operational overhead ?

A : Configure multiple CodeBuild projects and manually split tests across them.

B : Configure CodeBuild to split tests across multiple parallel compute environments.

C : Run all tests sequentially in a single CodeBuild environment.

D : Use Amazon EC2 instances with a custom test runner to distribute tests.

Answer: B

Question 3

A company is building a micro services app1 cation that consists of many AWS Lambda functions. Thedevelopment team wants to use AWS Serverless Application Model (AWS SAM) templates to automaticallytest the Lambda functions. The development team plans to test a small percentage of traffic that is directed tonew updates before the team commits to a full deployment of the application.Which combination of steps will meet these requirements in the MOST operationally efficient way? (SelectTWO.)

A : Use AWS SAM CLI commands in AWS CodeDeploy lo invoke the Lambda functions to lest thedeployment

B : Declare the EventlnvokeConfig on the Lambda functions in the AWS SAM templates with OnSuccessand OnFailure configurations.

C : Enable gradual deployments through AWS SAM templates.

D : Set the deployment preference type to Canary10Percen130Minutes Use hooks to test the deployment.

E : Set the deployment preference type to Linear10PefcentEvery10Minutes Use hooks to test thedeployment.

Answer: C,D

Question 4

A developer must use multi-factor authentication (MFA) to access data in an Amazon S3 bucket that is inanother AWS account. Which AWS Security Token Service (AWS STS) API operation should the developeruse with the MFA information to meet this requirement?

A : AssumeRoleWithWebidentity

B : GetFederationToken

C : AssumeRoleWithSAML

D : AssumeRole

Answer: D

Question 5

A healthcare company is developing a multi-tier web application to manage patient records that are in an Amazon Aurora PostgreSQL database cluster. The company stores the application code in a Git repository and deploys the code to Amazon EC2 instances. The application must comply with security policies and follow the principle of least privilege. The company must securely manage database credentials and API keys within the application code. The company must have the ability to rotate encryption keys on demand. Which solution will meet these requirements?

A : Store database credentials and API keys in AWS Secrets Manager. Use AWS managed AWS KMS keys. Set up automatic key rotation. Use the AWS SDK to retrieve secrets.

B : Store the database credentials and API keys in AWS Secrets Manager. Use customer managed AWS KMS keys. Set up automatic key rotation. Create a key policy in the application to retrieve secrets by using the AWS SDK.

C : Store the database credentials in the application code. Separate credentials by using environmentspecific branches that have restricted access to the code repositories.

D : Store the database credentials and API keys as parameters in AWS Systems Manager Parameter Store. Encrypt the credentials and API keys with AWS managed AWS KMS keys. Use the AWS SDK to retrieve secrets.

Answer: A

Page: 1 / 110

Total 550 Questions | Updated On: Apr 21, 2026

Add To Cart