TechNuggets Academy
DVA-C02

Free AWS Certified Developer - Associate Practice Test

12 exam-style questions with full explanations — no sign-up. Score yourself, then close your gaps with the full course.

Exam fee ~$1504 exam domainsLevel Intermediate2 timed practice tests in the course
Free practice — no sign-up📝 Real exam-style questions💡 Detailed explanations💸 30-day money-back via Udemy
Question 1 of 12 · Development with AWS Services
A developer's Lambda function writes payment records to a legacy on-premises database that can only accept 10 concurrent connections. The Lambda function is invoked by an SQS queue that can receive thousands of messages per minute. What is the BEST way to prevent the function from overwhelming the downstream database?
Reserved concurrency sets a hard cap on the maximum number of concurrent executions for that specific function, throttling any invocations beyond the limit so the database never receives more than 10 simultaneous connections.
Question 2 of 12 · Security
A company must allow a partner AWS account to access resources in their account temporarily, ensuring the partner's role cannot be assumed by an unrelated third party who somehow learns the role ARN. Which approach BEST meets this requirement?
A cross-account role with a trust policy requiring an external ID and assumed via STS AssumeRole prevents the confused deputy problem and issues short-lived, auditable temporary credentials instead of long-term keys.
Question 3 of 12 · Deployment
A developer configures AWS CodeDeploy to deploy a new Lambda function version. The deployment must shift 10% of traffic immediately, then the remaining 90% linearly every 10 minutes until 100% is reached, so that CloudWatch alarms have time to detect errors before full rollout. Which predefined CodeDeploy deployment configuration should be selected?
Linear10PercentEvery10Minutes shifts traffic in equal 10% increments every 10 minutes until reaching 100%, matching the described gradual linear rollout with alarm monitoring time between increments.
Question 4 of 12 · Troubleshooting and Optimization
A developer instruments a Lambda function with the AWS X-Ray SDK and needs to filter traces in the X-Ray console by a custom field called order_status. Which SDK call should be used so this field is indexed and searchable?
Annotations are indexed key-value pairs on a segment or subsegment that can be used to filter and group traces in the X-Ray console or via GetTraceSummaries; this is the only mechanism designed for searchable custom fields.
Question 5 of 12 · Development with AWS Services
Multiple application instances update the same DynamoDB item concurrently. The team must ensure that an update only succeeds if the item has not been modified by another process since it was last read, implementing optimistic concurrency control. Which approach BEST achieves this?
A ConditionExpression tied to a version number (e.g., version = :expectedVersion) makes the write atomic and conditional: DynamoDB rejects the update with a ConditionalCheckFailedException if another process already changed the item, which is the standard optimistic locking pattern tested on the exam.
Question 6 of 12 · Security
A mobile application must authenticate users with a username and password, and after login the app needs temporary AWS credentials to upload photos directly to an S3 bucket. Which combination of Amazon Cognito components should the developer implement?
This is the standard Cognito pattern: the User Pool authenticates the user and issues JWT tokens, and those tokens are federated into an Identity Pool, which uses STS to vend temporary IAM credentials for direct S3 access.
Question 7 of 12 · Deployment
A CloudFormation template for a network stack exports a value named 'VPCId' using the Outputs section with an Export field. A separate application stack needs to reference this VPC ID when creating a subnet resource. Which intrinsic function should be used in the application stack to retrieve this value?
Fn::ImportValue retrieves values that have been exported by another stack using the Export field in Outputs, enabling cross-stack references such as sharing a VPC ID between a network stack and an application stack.
Question 8 of 12 · Troubleshooting and Optimization
A DynamoDB table uses a partition key of order_date (e.g., '2026-06-01'). During flash sales, the table experiences heavy write throttling even though the table's aggregate provisioned throughput is far from being exhausted. What is the MOST likely root cause?
Using order_date as the partition key means every write for a given day targets the same physical partition. Each partition has hard throughput limits (1,000 WCU / 3,000 RCU), so throttling occurs there even if the table's total provisioned throughput is unused elsewhere — the classic hot partition problem.
Question 9 of 12 · Development with AWS Services
A developer generates an S3 presigned URL using the AWS SDK, signing it with temporary credentials from an assumed IAM role that expire in 1 hour. The developer sets the URL's ExpiresIn parameter to 604800 seconds (7 days). What happens when a user attempts to use the URL 2 hours after it was generated?
A presigned URL is only valid as long as both conditions hold: the ExpiresIn window has not elapsed AND the credentials used to sign it are still valid. Since the assumed role's temporary credentials expired after 1 hour, the request fails with an authentication error at 2 hours despite the 7-day ExpiresIn setting.
Question 10 of 12 · Security
A company requires that every object uploaded to a specific S3 bucket must be encrypted with AWS KMS (SSE-KMS), and any PutObject request that does not specify SSE-KMS encryption must be rejected outright. Which bucket policy statement satisfies this requirement?
A bucket policy Deny statement with a condition checking that the s3:x-amz-server-side-encryption header is not 'aws:kms' actively rejects any upload request that omits or misconfigures KMS encryption, enforcing the requirement at the API level.
Question 11 of 12 · Deployment
A serverless application defined with AWS SAM has five Lambda functions that all require the same 512 MB memory size, 10 second timeout, and identical environment variable for a table name. What is the MOST efficient way to apply these common settings across all functions without repeating them in each AWS::Serverless::Function resource?
The SAM template's Globals section lets you define common properties such as MemorySize, Timeout, and Environment variables once, and SAM automatically applies them to every AWS::Serverless::Function and AWS::Serverless::Api resource in the template, unless overridden individually.
Question 12 of 12 · Troubleshooting and Optimization
An S3 PUT event asynchronously invokes a Lambda function that occasionally fails due to a downstream service outage. The team needs failed events automatically captured together with the invocation result (Lambda response payload, error type, and stack trace) for automated reprocessing, without adding any custom error-handling code to the function. What should the developer configure?
Lambda destinations for asynchronous invocations capture a full invocation record — including the original event, the response payload, and error details — and route it to SQS, SNS, another Lambda function, or EventBridge, all without any code changes.
Ready for the real thing?

The full course: two full-length practice tests, video lessons for every exam domain, hands-on labs and detailed explanations.

$109.99 $34.99 with code FREETEST33 — valid through September 19.

Get my $34.99 deal →

DVA-C02 exam — quick answers

How much does the DVA-C02 exam cost?

The exam fee is approximately $150 and varies by region — confirm current pricing with the certification vendor before you book.

What topics are on the exam?

It covers 4 domains: Development with AWS Services (32%), Security (26%), Deployment (24%), Troubleshooting and Optimization (18%). The full course has a dedicated chapter, lab and practice-test coverage for each.

Is this practice test really free?

Yes — all questions on this page are free with explanations and no sign-up. The paid Udemy course adds two full-length timed exams, video lessons and hands-on labs.

How do I get the discount?

Use code FREETEST33 at checkout for $34.99 (list $109.99) through September 19 — the enroll button applies it automatically.

Will this prepare me for the real exam?

The questions mirror the real exam's style and are mapped to the official domains. This is exam-focused preparation — combine the free test with the full course's timed simulations to gauge your readiness.

More free practice by exam domain:
Development with AWS Services →Security →Deployment →Troubleshooting and Optimization →