FREE AWS Developer Associate Exam Questions [2023

Previously we’ve covered free AWS Solutions Architect Associate exam questions to help you in your AWS Certified Solutions Architect exam preparation. Now, extending this series, here we bring the FREE AWS Developer Associate exam questions to help you with your AWS Certified Developer Associate exam preparation and make you ready for the exam.

AWS Certified Developer Associate exam (DVA-C02) is intended for the candidates in the developer role, who have at least one year of working experience in the development and maintenance of AWS applications.

The AWS Certified Developer Associate exam validates the ability of the individuals in

Developing, Debugging, and Deploying cloud applications on the AWS platform
Understanding the core AWS services, basic AWS architecture, and best AWS practices

We have launched 100+ hands-on labs for this exam. These guided labs would help you to understand the concepts in real time. Along with you can also explore Whizlabs AWS Playground.

Latest Updates

We have a recent update on the AWS Certified Developer Associate exam that is changing on February 28, 2023. The last date to take the current exam was February 27, 2023. The new exam would have more emphasis on deployment and management with a reduced focus on development and refactoring. The new exam code will be DVA0C02.

Note: From January 1, 2023, all AWS Certification exams will be taken through Pearson VUE. The last day for candidates to complete an exam appointment through PSI is December 31, 2022, at 11:59 pm UTC.

Table of Contents

Exam Domain for AWS Developer Associate Exam (DVA-C02)

Following is the skillset for the AWS Certified Developer Associate exam:

Domain	Weightage
Developing with AWS services	32%
Security	26%
Deployment	24%
Troubleshooting and Optimization	18%

Prepare with Free AWS Developer Associate Practice

Exam (DVA-C02) Questions

During your AWS preparation for the AWS Certified Developer Associate exam, you may find a number of resources for your exam preparation. So, it becomes important to choose the right preparation guide while you’re preparing for any AWS developer associate certification exam. Similarly, it is mandatory to choose the right AWS Developer Associate exam preparation guide that could guide you with the right sequence of preparation steps. Also, that could provide you with good materials for the preparation like books, white papers, documentation, online courses, and sample questions.

Not to mention, every preparation step has its own importance. You may easily find all the resources and do well with your exam preparation. But the practice is the most important part. Practicing with AWS Developer Associate exam questions helps you check your preparation level and thus makes you confident to pass the certification exam.

So, our team of subject matter experts and certified professionals has brought some important AWS Developer Associate exam questions for you that are free. These questions are in the same pattern as that of the actual exam. Also, you will get a complete explanation of the questions with the related AWS documentation. So, what are you thinking? Try these questions now.

1. What is used in S3 to enable client web applications that are loaded in one domain to interact with resources of the different domains? Choose the correct answer from the options below

A. CORS Configuration

B. Public Object Permissions

C. Public ACL Permissions

D. None of the above

Answer: A

Explanation: Cross-origin resource sharing (CORS) configuration is a way to interact with resources in a different domain for the client web applications loaded in one domain. With CORS, you can build client-side web applications with Amazon S3 and also allow cross-origin to have access to the S3 resources selectively.

For more information on S3 CORS configuration, please visit the link:

http://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html

2. Which of the descriptions below best describes what the following bucket policy does?

{
   “Version”:”2012-10-17″,
   “Id”:”Statement1”,
   “Statement”:[
      {
         “Sid”:” Statement2″,
         “Effect”:”Allow”,
         “Principal”:”*”,
         “Action”:[
            “s3:GetObject”,
            “s3:PutObject”
         ],
         “Resource”:”arn:aws:s3:::mybucket/*”,
         “Condition”:{
            “StringLike”:{
               “aws:Referer”:[
                  “http://www.example.com/*”,
                  “http://www.demo.com/*”
               ]
            }
         }
      }
   ]
}

Choose the correct answer from the options below

A. It allows read or write actions on the bucket ‘mybucket’

B. It allows read access to the bucket ‘mybucket’ but only if it is accessed from example.com or demo.com

C. It allows unlimited access to the bucket ‘mybucket’

D. It allows read or write access to the bucket ‘mybucket’ but only if it is accessed from example.com or demo.com

Answer: D

Explanation: The PutObject allows one to put objects in an S3 bucket.

For more information on S3 bucket policy examples, please visit the link:

http://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html

3. Is the default visibility timeout for an SQS queue 1 minute?

A. True

B. False

Answer: B

Explanation: The visibility timeout of each queue is 30 seconds by default. It is possible to change this setting for all the queues. Typically, the visibility timeout is set to the average time it takes in processing and deleting a message from the queue. While receiving messages, special visibility timeout can be set for the returned messages without making any change in the overall timeout of the queue

For more information on SQS please visit the below link:

https://aws.amazon.com/sqs/faqs/

4. When a failure occurs during stack creation in Cloudformation, does a rollback occur?

A. True

B. False

Answer: A

Explanation: By default, the “automatic rollback on error” feature is enabled. It causes AWS CloudFormation to be created successfully for a stack until the point of error is deleted. This is useful when the default limit for Elastic IP addresses is exceeded accidentally, or you can’t access an EC2 AMI you want to run.

This feature makes you depend on the fact that stacks may either be fully created or not at all. It simplifies the layered solutions system administration built on the top of the AWS CloudFormation.

For more information on CloudFormation, please refer to the below link:

https://aws.amazon.com/cloudformation/faqs/

Preparing for an AWS interview? Read these top 50 AWS Interview Questions and Answers and get ready to ace the interview.

5. An administrator is getting an error while trying to create a new bucket in S3? You feel that bucket limit has been crossed. What is the bucket limit per account in AWS? Choose the correct answer from the options below

A. 100

B. 50

C. 1000

D. 150

Answer: A

Explanation: This is clearly mentioned in the AWS documentation.

For more information on AWS service limitations, please visit the link:

http://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html

6. Which of the below functions is used in Cloudformation to retrieve an object from a set of objects? Choose an answer from the options below

A. Fn::GetAtt

B. Fn::Combine

C. Fn::Join

D. Fn::Select

Answer: D

Explanation: This is clearly given in the AWS documentation

For more information on the function please refer to the below link:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-select.html

7. Which of the below functions is used in Cloudformation to append a set of values into a single value? Choose an answer from the options below

A. Fn::GetAtt

B. Fn::Combine

C. Fn::Join

D. Fn::Select

Answer: C

Explanation: This is clearly given in the AWS documentation

For more information on the function please refer to the below link:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-join.html

8. What is the max size of an item that corresponds to a single write capacity unit? (While creating an index or table in Amazon DynamoDB, it is required to specify the capacity requirements for the read and write activity)?.

Choose an answer from the options below.

A. 1 KB

B. 4 KB

C. 2 KB

D. 8 KB

Answer: A

Explanation: This is clearly given in the AWS documentation

For more information on DynamoDB provisioned throughput please refer to the below link:

http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/HowItWorks.ProvisionedThroughput.html

Good preparation always brings good results. Follow this comprehensive guide for your AWS Developer Associate Exam Preparation and give your preparation a new edge.

9. What can be used in DynamoDB as a part of the Query API call for the filtration of results based on the primary keys’ values? Choose an answer from the options below

A. Expressions

B. Conditions

C. Query API

D. Scan API

Answer: A

Explanation: This is clearly provided in the AWS documentation

For more information on DynamoDB please refer to the below link:

https://aws.amazon.com/dynamodb/faqs/

10. Can a global secondary index create at the same time as the table creation?

A. True

B. False

Answer: A

Explanation: This is clearly given in the AWS documentation

For more information on DynamoDB Indexes, please visit the link:

http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/SecondaryIndexes.html

11. A Global Secondary Index can have a different partition key and sort key from those of its base table.

A. True

B. False

Answer: A

Explanation: GSI can also use the same partition key as the base table. Even in the AWS documentation, they say that GSI can use a different partition key and sort key. However, anywhere in the document, they are not saying that it has to be different.

AWS Console Test:

“EmpID” is my base table partition key, which I’m using in both GSI and LSI.

The table is created successfully.

So now we have seen that we can create GSI with the same partition key as the Base table.

Global secondary index — Global secondary index is an index where both the partition key and sort key can be different from that of the base table. The global secondary index is named as global because here the queries can span all the data in the base table over all the partitions.

Local secondary index — Local secondary index is an index where the partition key is the same as that of the base table, while sort key is different. The local secondary index is named as local as all the partitions here are scoped to a base table partition having the same partition key value. For more information on DynamoDB Indexes, please visit the link:

http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/SecondaryIndexes.html

12. What in AWS can be used to restrict access to SWF?

A. ACL

B. SWF Roles

C. IAM

D. None of the above

Answer: C

Explanation: This is clearly mentioned in the AWS documentation

For more information on SWF, please visit the link:

https://aws.amazon.com/swf/faqs/

Also Read: Top AWS Developer Interview Questions

13. An IT admin has enabled long polling in their SQS queue. What must be done for long polling to be enabled in SQS? Choose the correct answer from the options below

A. Create a dead letter queue

B. Set the message size to 256KB

C. Set the ReceiveMessageWaitTimeSeconds property of the queue to 0 seconds

D. Set the ReceiveMessageWaitTimeSeconds property of the queue to 20 seconds

Answer: D

Explanation: Amazon SQS long polling is a method of retrieval of messages from SQS queues. It returns a response only when a message arrives in the message queue instead of short polling where the response returns immediately even when the message is empty.

As the messages are available, the retrieval of messages from Amazon SQS becomes inexpensive due to long polling. It may also reduce the cost of using SQS as it can reduce the empty receipts.

For more information on Long polling, please refer to the link:

http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-long-polling.html

14. As per the IAM decision logic, what is the first step of access permissions for any resource in AWS? Choose the correct answer from the options below

A. A default deny

B. An explicit deny

C. An allow

D. An explicit allow

Answer: A

The below diagram shows the evaluation logic of IAM policies. And as per the evaluation logic, it is clear that the above scenario leads to a default deny.

For more information on the IAM policy evaluation logic, please refer to the link:

http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html

15. Which API call is used to Bundle an Amazon instance store-backed Windows instance? Choose the correct answer from the options below

A. AllocateInstance

B. CreateImage

C. BundleInstance

D. ami-register-image

Answer: C

Explanation: This is given in the AWS documentation

For more information on BundleInstance, please refer to the below link:

http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_BundleInstance.html

Domain : Development with AWS Services

16. A developer is building an application that needs access to an S3 bucket. An IAM role is created with the required permissions to access the S3 bucket. Which API call should the Developer use in the application so that the code can access to the S3 bucket?

A. IAM: AccessRole
B. STS: GetSessionToken
C. IAM:GetRoleAccess
D. STS:AssumeRole

Correct Answer: D

Explanation

This is given in the AWS Documentation.
A role specifies a set of permissions that you can use to access AWS resources. In that sense, it is similar to an IAM user. An application assumes a role to receive permissions to carry out required tasks and interact with AWS resources. The role can be in your own account or any other AWS account. For more information about roles, their benefits, and how to create and configure them, see IAM Roles, and Creating IAM Roles. To learn about the different methods that you can use to assume a role, see Using IAM Roles.

Important

The permissions of your IAM user and any roles that you assume are not cumulative. Only one set of permissions is active at a time. When you assume a role, you temporarily give up your previous user or role permissions and work with the permissions assigned to the role. When you exit the role, your user permissions are automatically restored.

To assume a role, an application calls the AWS STS AssumeRole API operation and passes the ARN of the role to use. When you call AssumeRole, you can optionally pass a JSON policy. This allows you to restrict permissions for the role’s temporary credentials. This is useful when you need to give the temporary credentials to someone else. They can use the role’s temporary credentials in subsequent AWS API calls to access resources in the account that owns the role. You cannot use the passed policy to grant permissions that are in excess of those allowed by the permissions policy of the role that is being assumed. To learn more about how AWS determines the effective permissions of a role, see Policy Evaluation Logic.

Option A is incorrect because IAM does not have this API.
Option B is incorrect because STS: GetSessionToken is used if you want to use MFA to protect programmatic calls to specific AWS API operations like Amazon EC2 StopInstances. MFA-enabled IAM users would need to call GetSessionToken and submit an MFA code associated with their MFA device.
Option C is incorrect because IAM does not have this API.

For more information on switching roles, please refer to the below Link: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-api.html

17. A company is writing a Lambda function that will run in multiple stages, such a dev, test, and production. The function is dependent upon several external services, and it must call different endpoints for these services based on the function’s deployment stage.
What Lambda feature will enable the developer to ensure that the code references the correct endpoints when running in each stage?

A. Tagging
B. Concurrency
C. Aliases
D. Environment variables

Correct Answer: D

Explanation

You can create different environment variables in the Lambda function that can be used to point to the different services. The below screenshot from the AWS Documentation shows how this can be done with databases.

Option A is invalid since this can only be used to add metadata for the function.
Option B is invalid since this is used for managing the concurrency of execution.
Option C is invalid since this is used for managing the different versions of your Lambda function.

For more information on AWS Lambda environment variables, please refer to the below Link: https://docs.aws.amazon.com/lambda/latest/dg/env_variables.html

Domain : Deployment

18. You are using AWS SAM to define a Lambda function and configure CodeDeploy to manage deployment patterns. With the new Lambda function working as per expectation which of the following will shift traffic from the original Lambda function to the new Lambda function in the shortest time frame?

A. Canary10Percent5Minutes
B. Linear10PercentEvery10Minutes
C. Canary10Percent15Minutes
D. Linear10PercentEvery5Minute

Correct Answer: A

Explanation

With the Canary Deployment Preference type, Traffic is shifted in two intervals. With Canary10Percent5Minutes, 10 percent of traffic is shifted in the first interval while remaining all traffic is shifted after 5 minutes.

Option B is incorrect as Linear10PercentEvery10Minutes will add 10 percent traffic linearly to a new version every 10 minutes. So, after 100 minutes all traffic will be shifted to the new version.
Option C is incorrect as Canary10Percent15Minutes will send 10 percent traffic to the new version and 15 minutes later complete deployment by sending all traffic to the new version.
Option D is incorrect as Linear10PercentEvery5Minute will add 10 percent traffic linearly to the new version every 5 minutes. So, after 50 minutes all traffic will be shifted to the new version.

For more information on Deployment Preference Type for AWS SAM templates, refer to the following URL: https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/automating-updates-to-serverless-apps.html

Skill : Development with AWS Services

19. You are using S3 buckets to store images. These S3 buckets invoke a lambda function on upload. The Lambda function creates thumbnails of the images and stores them in another S3 bucket. An AWS CloudFormation template is used to create the Lambda function with the resource “AWS::Lambda::Function”. Which of the following attributes is the method name that Lambda calls to execute the function?
Sample CloudFormation template:

A. Function Name
B. Layers
C. Environment
D. Handler

Correct Answer: D

Explanation

The handler is the name of the method within a code that Lambda calls to execute the function.

Option A is incorrect as the version number changes when the functions are “published”, so FunctionName is incorrect.
Option B is incorrect as it’s a list of function layers added to the Lambda function execution environment.
Option C is incorrect as these are variables that are accessible during Lambda function execution.

For more information on declaring Lambda Function in AWS CloudFormation Template, refer to the following URL: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html

Domain : Monitoring and Troubleshooting

20. Before deploying an application to production, the developer team needs to test the application latency locally using X-ray daemon. For this testing they want to skip checking Amazon EC2 instance metadata.
Which of the configuration settings can be done with daemon?

A. ~/xray-daemon$ ./xray -r
B. ~/xray-daemon$ ./xray -t
C. ~/xray-daemon$ ./xray -b
D. ~/xray-daemon$ ./xray -o

Correct Answer: D

Explanation

~/xray-daemon$ ./xray -o command option can be used while running X-Ray daemon locally & not on Amazon EC2 instance. This will skip checking Amazon EC2 instance metadata.

Option A is incorrect as this command can be used to assume an IAM role while saving results in different accounts.
Option B is incorrect as this command can be used to bind a different TCP port for the X-Ray service.
Option C is incorrect as this command can be used to bind a different UDP port for the X-Ray service.

For more information on configuring AWS X-Ray daemon, refer to the following URL: https://docs.aws.amazon.com/xray/latest/devguide/xray-daemon-configuration.html

Domain : Security

21. Your company currently stores its objects in S3. The current request rate is around 11000 GET requests per second. There is now a mandate for objects to be encrypted at rest. So you enable encryption using KMS. There are now performance issues being encountered. What could be the main reason behind this?

A. Amazon S3 will now throttle the requests since they are now being encrypted using KMS
B. You need to also enable versioning to ensure optimal performance
C. You are now exceeding the throttle limits for KMS API calls
D. You need to also enable CORS to ensure optimal performance

Correct Answer: C

Explanation

This is also mentioned in the AWS Documentation.

You can make API requests directly or by using an integrated AWS service that makes API requests to AWS KMS on your behalf. The limit applies to both kinds of requests.

Option A is incorrect because S3 will not throttle requests just because encryption is enabled.

For example, you might store data in Amazon S3 using server-side encryption with AWS KMS (SSE-KMS). Each time you upload or download an S3 object that’s encrypted with SSE-KMS, Amazon S3 makes a GenerateDataKey (for uploads) or Decrypt (for downloads) request to AWS KMS on your behalf. These requests count toward your limit, so AWS KMS throttles the requests if you exceed a combined total of 5500 (or 10,000) uploads or downloads per second of S3 objects encrypted with SSE-KMS.

Options B and D are incorrect because these will not help increase performance.

For more information on KMS limits improvement, please refer to the below URL: https://docs.aws.amazon.com/kms/latest/developerguide/limits.html

Domain : Deployment

22. Your company has asked you to maintain an application using Elastic Beanstalk. They have mentioned that when updates are made to the application, the infrastructure maintains its full capacity. Which of the following deployment methods should you use for this requirement?

A. All at once
B. Rolling
C. Immutable
D. Rolling with additional batch

Correct Answers: C and D

Explanation

Since the only requirement is that the infrastructure should maintain its full capacity, So answers should be both C & D.

You can now use an immutable deployment policy when updating your application or environment configuration on Elastic Beanstalk. This policy is well suited for updates in production environments where you want to minimize downtime and reduce the risk from failed deployments. It ensures that the impact of a failed deployment is limited to a single instance and allows your application to serve traffic at full capacity throughout the update.

You can now also use a rolling with additional batch policy when updating your application. This policy ensures that the impact of a failed deployment is limited to a single batch of instances and allows your application to serve traffic at full capacity throughout the update.

Option A is incorrect because All at once is used to deploy the new version to all instances simultaneously. All instances in your environment are out of service for a short time while the deployment occurs.
Option B is incorrect because Rolling is used to deploy the new version in batches. Each batch is taken out of service during the deployment phase, reducing your environment’s capacity by the number of instances in a batch.

Please refer to the following links for more information: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.html#environments-cfg-rollingdeployments-method, https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/environmentmgmt-updates-imm