DVA-C02: 1326 practice questions with explanations
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

DVA-C02 practice questions: 1326 questions with full explanations

4 domains 1326 questions 130 min exam
Questions on the exam
65
Time allowed
130 minutes format →
Passing score
720 of 1000 — vendor, checked September 4, 2026 detail →
Exam fee
$150 — vendor, checked September 4, 2026 detail →

1326 practice questions for AWS Certified Developer Associate DVA-C02 (retires December 2026), grouped by exam domain. Every question below shows all four options, which one is correct, and why each of the other three is not — the wrong answers are where most candidates lose marks.

Not sure where you stand? Take the free 5-min DVA-C02 readiness check →

DVA-C02 exam format →  ·  DVA-C02 passing score →  · DVA-C02 exam cost →

Questions by domain

Sample questions

Increase the function's configured memory allocation: Which configuration change most directly increases the C

Development with AWS Services Medium
A developer operates a CPU-bound Lambda function that processes images. Warm invocations take too long, and downstream services respond normally. Which configuration change most directly increases the CPU resources available to each invocation?
  1. Increase the function's configured timeout value.
    A longer timeout permits an invocation to run longer, but it does not add CPU capacity. It does not directly address the CPU-bound processing bottleneck.
  2. Configure provisioned concurrency for the function.
    Provisioned concurrency prepares execution environments before requests arrive, reducing startup latency. It does not increase the CPU capacity used during this CPU-bound processing.
  3. Configure reserved concurrency for the function.
    Reserved concurrency reserves capacity and limits maximum concurrent executions. It can protect downstream resources, but it does not increase the CPU power available to each invocation.
  4. Increase the function's configured memory allocation. ✓
    Lambda allocates CPU power in proportion to configured memory. Increasing memory can therefore provide more CPU capacity for this CPU-bound workload and shorten invocation processing time.
The trap
For CPU-bound Lambda workloads, evaluate memory before changing timeout or concurrency settings.

All 424 Development with AWS Services questions →

Use a Cognito user pool and send a validated access token: Which configuration should the developer use?

Security Medium
A web application authenticates users and calls an API that requires an OAuth access token with an application-specific scope. Users do not need direct AWS resource access. Which configuration should the developer use?
  1. Use IAM Identity Center to obtain credentials for signed AWS API requests.
    AWS credentials for signing requests do not replace the required application OAuth access token.
  2. Use a Cognito user pool and send a validated access token to the API. ✓
    A user pool authenticates users and issues JWTs. An access token carries scopes and authorization claims intended for APIs; the application must validate its signature, issuer, and expiration before trusting it.
  3. Use a Cognito identity pool and sign requests with temporary AWS credentials.
    This supports AWS credential-based access, rather than the required OAuth access-token authorization.
  4. Use a Cognito user pool and send its ID token to the API.
    An ID token describes the authenticated identity; this API specifically requires an access token with a scope.
The trap
Distinguish user pools for authentication and JWT issuance from identity pools for temporary AWS credentials.

All 343 Security questions →

Use the AWS SAM CLI to invoke and step through: Which approach best meets this requirement?

Deployment Medium
A developer is preparing a serverless application for deployment. A Lambda function returns an unexpected response for a locally available test event, and the team wants a shorter feedback loop before deploying any infrastructure. The developer must reproduce the invocation locally and step through the function code. Which approach best meets this requirement?
  1. Create a development API Gateway stage and configure its stage variables.
    API Gateway stages provide named deployment environments with stage-specific configuration and variables, but a stage is a deployed API environment rather than the local debugging mechanism required here.
  2. Use the AWS SAM CLI to invoke and step through the function locally. ✓
    The AWS SAM CLI supports local testing and step-through debugging of serverless applications before deployment, directly satisfying the need to reproduce the event and inspect execution locally.
  3. Extend a CloudFormation template with AWS SAM resources and deploy the transformed stack.
    AWS SAM templates provide infrastructure-as-code shorthand that is transformed into CloudFormation resources for deployment, but this approach does not itself provide the requested local step-through workflow.
  4. Place shared debugging libraries in a Lambda layer and attach it to the function.
    Lambda layers package shared libraries or dependencies separately from function code and can be reused, but dependency packaging does not establish the requested local invocation and step-through debugging process.
The trap
Match local reproduction and step-through debugging requirements to the AWS SAM CLI.

All 321 Deployment questions →

Use CloudWatch Logs Insights to query the log groups: Which approach best meets this requirement?

Troubleshooting and Optimization Medium
A developer investigates intermittent errors in a distributed application whose Lambda functions write logs to separate CloudWatch log groups. The developer needs to identify whether the errors correlate with a specific request field and summarize the pattern without exporting the logs. Which approach best meets this requirement?
  1. Enable JSON logging for future Lambda invocations.
    Changing future log output does not query the error events already recorded.
  2. Use CloudWatch Logs Insights to query the log groups, filter error events, and aggregate the request field. ✓
    CloudWatch Logs Insights runs queries over log groups to filter, aggregate, and analyze log events, which directly supports summarizing the error pattern without exporting the logs.
  3. Apply a CloudWatch Logs data protection policy to the log groups.
    Masking sensitive data does not perform the requested error-field aggregation.
  4. Inspect service errors and latency in an X-Ray trace map.
    A dependency map does not aggregate the existing request fields across log groups.
The trap
Distinguish the log-analysis mechanism from telemetry formatting, data protection, and service-dependency visualization.

All 238 Troubleshooting and Optimization questions →

Store the API key in Secrets Manager: Which solution meets these requirements?

Development with AWS Services Medium
A Lambda function calls a third-party payment API. The API key must not appear in the deployment package, and the payment provider rotates the key periodically. The team wants to reduce repeated secret-service calls while ensuring the function eventually observes rotations. Which solution meets these requirements?
  1. Store the API key in Secrets Manager, retrieve it at runtime, and use client-side caching with a refresh interval. ✓
    Secrets Manager supports runtime retrieval instead of hard-coding secrets in application code or deployment artifacts. Client-side caching reduces retrieval latency and API-call cost, while refreshing allows rotated values to be observed.
  2. Assign the Lambda function an IAM role and use its temporary credentials as the payment API key.
    IAM roles provide temporary AWS credentials for workloads, whereas the payment provider requires its own API key. The third-party secret should be retrieved from a secret-management service at runtime.
  3. Store the API key as a Lambda environment variable encrypted with a customer managed KMS key.
    Lambda encrypts environment variables at rest and supports customer managed KMS keys, but this approach does not use the stated runtime secret-retrieval and refresh behavior for a periodically rotated key.
  4. Embed the API key in the deployment package and replace the package whenever the provider rotates the key.
    Embedding the key keeps a long-lived secret in source or deployment artifacts. Runtime retrieval through Secrets Manager avoids hard-coding credentials in those locations.
The trap
Encryption at rest protects stored values; it does not replace runtime secret management or rotation-aware retrieval.

All 424 Development with AWS Services questions →

Encrypt each document with a data key: Which design implements envelope encryption?

Security Medium
A developer is designing an application that encrypts large customer documents before storing them. The application must protect each document’s encryption material with AWS KMS, and the encrypted document and required decryption material must be stored together. Which design implements envelope encryption?
  1. Store the plaintext data key next to each encrypted document.
    Retaining the plaintext key next to the ciphertext defeats the intended key protection.
  2. Encrypt each document with a data key, encrypt that data key with a KMS key, and store the encrypted data key with the ciphertext. ✓
    This separates payload encryption from key protection: the data key encrypts the document, while the KMS key encrypts the data key. The encrypted data key can be stored with the ciphertext.
  3. Rotate the KMS key periodically and keep the documents unencrypted in the data store.
    Key rotation does not encrypt documents that the application stores as plaintext.
  4. Encrypt each document directly with the KMS key, and store only the resulting ciphertext with the document.
    This omits the data key that envelope encryption uses to encrypt application data. Envelope encryption instead has the KMS key protect the data key.
The trap
Remember the division of responsibilities: data key for application data, KMS key for the data key.

All 343 Security questions →

Create and review a CloudFormation change set before: Which approach should the team use?

Deployment Medium
A development team updates an AWS SAM template for a production serverless application. Before applying the update, the team must identify whether existing CloudFormation resources will be replaced or deleted so they can review the impact and prevent unintended infrastructure changes. Which approach should the team use?
  1. Add a review action in CodePipeline before the deployment action.
    An approval action pauses a pipeline; a change set provides the resource-level preview to review.
  2. Execute the stack update and depend on CloudFormation rollback if the update fails.
    Rollback normally returns a failed stack operation to its last known stable state, but it does not provide the requested pre-execution preview of replacements or deletions.
  3. Deploy the SAM template because its transformation automatically previews resource replacements.
    SAM transforms infrastructure definitions; transformation alone is not an inspection of changes to an existing stack.
  4. Create and review a CloudFormation change set before executing the stack update. ✓
    A change set previews the resource changes that the stack update would make, helping the team identify potential replacements or deletions before execution.
The trap
Distinguish preview mechanisms from rollback mechanisms: a change set is reviewed before execution; rollback responds to a failed operation.

All 321 Deployment questions →

Configure provisioned concurrency for the Lambda function: Which configuration should the team use?

Troubleshooting and Optimization Medium
A developer operates a latency-sensitive Lambda function behind an API. Traffic follows a predictable daily schedule, and users experience higher response latency when traffic begins each morning. The function is already within its timeout and memory limits. The team wants initialized execution environments ready before requests arrive, with the least amount of application development effort. Which configuration should the team use?
  1. Configure reserved concurrency for the Lambda function during the expected traffic period.
    Reserved concurrency reserves capacity and limits maximum concurrent executions; it does not prepare initialized environments to reduce startup latency.
  2. Increase the Lambda function’s configured memory during the expected traffic period.
    More memory also provides more CPU, which can improve CPU-, network-, or memory-bound work, but this does not prepare execution environments before requests arrive.
  3. Configure provisioned concurrency for the Lambda function during the expected traffic period. ✓
    Provisioned concurrency prepares Lambda execution environments before invocations arrive, directly addressing startup latency for predictable, latency-sensitive traffic.
  4. Create a CloudWatch alarm that evaluates Lambda latency against a threshold.
    A CloudWatch alarm evaluates a metric and can invoke configured actions when its state changes, but monitoring a latency threshold does not itself prepare Lambda environments before invocations.
The trap
Distinguish provisioned concurrency, which reduces startup latency, from reserved concurrency, which reserves and caps concurrent capacity.

All 238 Troubleshooting and Optimization questions →

DVA-C02 exam: the facts

How many questions are on the DVA-C02 exam?

65, as published by the exam vendor.

How long is the DVA-C02 exam?

130 minutes. Across 65 questions that is about 120 seconds per question.

What topics does the DVA-C02 exam cover?

4 domains: Development with AWS Services, Security, Deployment, Troubleshooting and Optimization. Weights: Development with AWS Services 0.32%, Security 0.26%, Deployment 0.24%, Troubleshooting and Optimization 0.18%.

How many DVA-C02 practice questions does Certsqill have?

1326, spread across 4 exam domains. Every one shows all options, which is correct, and why each of the others is not.

Would you pass DVA-C02 today?

Five minutes, and you get a score per domain — not one number, but which section to open tonight.

Test your DVA-C02 readiness — free
Certsqill DVA-C02 question bank · 1326 questions across 4 domains · Every answer, right and wrong, comes with its own explanation.