How are AWS Developer Associate questions generated?

dotCreds builds AWS Developer Associate practice questions from public exam objectives and AWS certification and documentation references. The questions are written for realistic study practice, not copied from exam dumps.

How are explanations sourced?

Each question includes an explanation and, when available, a source link back to the provider documentation or reference used to validate the answer. That keeps the practice tied to study material you can actually review.

The page tracks today's answered count and accuracy for the 10-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.

The site is the fastest way to start AWS Developer Associate practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.

Free AWS Developer Associate Practice Test

AWS Developer Associate Practice Test

Start today’s free 10-question AWS Developer Associate set with source-backed explanations, local progress, and a fresh rotation every morning.

10 Free Daily Questions Source-backed Explanations 200 Verified Questions

Questions updated at Aug 23, 2026, 8:12 PM CDT

Unlock the full DVA-C02 bank

200 verified questions Exam Mode Practice Mode Detailed explanations Weak-area review No subscription - one-time unlock

Get the complete source-backed bank with Interview Questions, the full Study Guide, full Course Notes, detailed explanations, weak-area review, and exam-style practice.

Interview Questions Full Study Guide Full Course Notes Exam Mode Practice Mode Guided Course Detailed explanations Weak-area review No subscription

What you get with free practice

10 Free Questions Daily Fresh set every day from the live bank

Detailed Explanations Learn with clear source-backed answers

Track Your Progress Daily history and performance insights

Upgrade Anytime Unlock the full bank when you are ready

Unlock the full DVA-C02 bank.

Get the full bank, Exam Mode, Practice Mode, question sets, random tests, readiness tracking, saved box scores, and review tools for this exam.

The PDF versions keep questions first and move the answer review, explanations, and distractor notes to the back of the file.

200 verified exam-style questions Every choice explained Exam Mode and Practice Mode Question sets and random tests Readiness score and trends Previous test box scores

You've answered 0/10 questions in today's set.

Locked: 190 more questions in the full bank.

Locked: exam simulation mode, practice mode, readiness tracking, and saved review history.

Checkout stays on this page, so you can keep practicing, unlock the full bank, and start Exam Mode or Practice Mode when you are ready.

Cheat Sheets

Why candidates miss this

The distractor ‘Retry the oversized message with exponential backoff’ is tempting because it’s a common troubleshooting technique. However, it doesn’t address the underlying problem of exceeding the SQS payload size, and simply retrying the message won’t prevent the issue from recurring. The decisive clue is the explicit mention of the 256KB quota, highlighting the need for a solution that respects service limits. Likely wrong answer: Retry the oversized message with exponential backoff. Review focus: AWS Well-Architected Framework

Interview question

Q: How would you design around the SQS message-size limit when upload payloads can exceed 256 KB during peak load? Strong answer: I would store the large upload in Amazon S3 and send a small SQS message containing the object key and required metadata. If the payload can be partitioned safely, I would also consider splitting it, but retries cannot make an oversized SQS message fit within the quota.

256-KB quota
S3 pointer pattern
payload redesign
quota-aware retries

Caution: The question tests understanding of SQS limitations and the need for application-level solutions.

Why this matters

Failure to adhere to SQS payload limits during peak loads can lead to application instability, service disruptions, and potential revenue loss due to failed transactions. Implementing the recommended action—splitting or batching payloads—mitigates this risk, ensuring continuous application operation and preventing financial repercussions. This is a critical step in maintaining service availability and protecting business operations.

Question 1 An application utilizes SQS to process user uploads. The application anticipates peak loads that could exceed the 256KB SQS payload size. To ensure application stability during these events, what is the most appropriate action to implement based on the AWS Well-Architected Framework?

Answer choices

A. Increase the SQS payload size to accommodate larger data transfers, for the stated requirement.
B. Keep each SQS message within the 256-KB quota by splitting or batching smaller payloads, as presented.
C. Retry the oversized message with exponential backoff, for the described technical objective and its associated operational control requirements.
D. Utilize a different messaging service with a larger payload capacity, for the stated implementation and support requirements.

Correct answer

Keep each SQS message within the 256-KB quota by splitting or batching smaller payloads, as presented.

SQS has a fixed maximum message size. Retries do not change that quota, so the application must split or otherwise redesign oversized payloads so each message fits.

Wrong-answer review

A. Increase the SQS payload size to accommodate larger data transfers, for the stated requirement.: Increasing the SQS payload size is not possible, as fixed service quotas cannot be changed, and this approach does not address the underlying issue of potential overload.
C. Retry the oversized message with exponential backoff, for the described technical objective and its associated operational control requirements.: Exponential backoff helps with transient failures and throttling, not with a message that permanently exceeds the payload quota.
D. Utilize a different messaging service with a larger payload capacity, for the stated implementation and support requirements.: Switching messaging services introduces unnecessary complexity and potential compatibility issues when the current service meets the application's needs.

Extra learning features

Objective/domain: 1. Development with AWS Services (32%)

Source: AWS Well-Architected Framework

Question 2 Your team is implementing automated testing for a new application. To ensure the most effective validation, which approach should be prioritized to identify and rectify common misconfigurations early in the development lifecycle?

A. Utilize security unit tests to check for authentication and authorization vulnerabilities, as the primary implementation for the described business requirement.
B. Implement integration tests to validate the interaction between different application modules, within the defined security and accountability boundaries.
C. Focus solely on unit tests to verify individual code components in isolation, for the stated scenario.
D. Conduct performance tests to measure the application's response times under various load conditions, in the described situation.

Utilize security unit tests to check for authentication and authorization vulnerabilities, as the primary implementation for the described business requirement.

Objective/domain: 3. Deployment (24%)

Question 3 Your application requires secure access to a REST API from multiple VPCs, including VPCs in other AWS accounts. What is the recommended approach to establish this secure connectivity?

A. Create a public API endpoint and manage access control using IAM policies, for evaluation.
B. Utilize AWS Lambda functions as intermediaries for API requests, under the documented operational and governance requirements.
C. Employ API Gateway with private API endpoints and interface VPC endpoints, for the affected environment.
D. Deploy the API directly into each VPC using EC2 instances, under this approach.

Employ API Gateway with private API endpoints and interface VPC endpoints, for the affected environment.

Source: Integrating Microservices by Using Serverless Services

Question 4 Your application uses an IAM role to access an S3 bucket. To minimize the risk of compromised credentials, which action should you implement to ensure temporary credentials are used for this role?

A. Utilize long-term IAM role credentials for increased security, for the described technical objective and its associated operational control requirements, within this design.
B. Configure the IAM role with a restrictive policy limiting access to only the necessary S3 bucket, as the organization’s selected response.
C. Rotate the IAM role credentials every 24 hours regardless of usage, under the stated decision criteria.
D. Prefer short-term temporary credentials over long-term static credentials for the IAM role, as the organization’s selected response.

Prefer short-term temporary credentials over long-term static credentials for the IAM role, as the organization’s selected response.

Objective/domain: 2. Security (26%)

Source: AWS Well-Architected Security Pillar

Question 5 You have deployed an authentication microservice on an EC2 Auto Scaling group. Because the service has a tight recovery time objective, which monitoring configuration best supports rapid detection of instance or scaling failures?

A. Configure detailed monitoring for EC2 instances and Auto Scaling, as the recommended implementation across the complete governed service lifecycle.
B. Configure default monitoring for EC2 instances and Auto Scaling, for the stated scenario.
C. Configure enhanced monitoring for an RDS database that the scenario does not identify, as selected.
D. Configure CloudWatch Logs metric filters without enabling detailed EC2 monitoring, for the stated implementation and support requirements.

Configure detailed monitoring for EC2 instances and Auto Scaling, as the recommended implementation across the complete governed service lifecycle.

Objective/domain: 4. Troubleshooting and Optimization (18%)

Question 6 You need to quickly test a new application deployment in a production-like environment without incurring significant costs. Considering the ability to create and decommission resources on demand, which approach best aligns with your requirements and minimizes operational overhead?

A. Utilize a full-scale, permanently running EC2 instance for testing purposes, for the described technical objective and its associated operational control requirements, in context.
B. Configure a Lambda function to simulate user traffic and test application functionality, as the recommended implementation across the complete governed service lifecycle.
C. Implement a dedicated test account with limited access and a restricted set of resources, under the documented operational and governance requirements.
D. Employ AWS CloudFormation to provision a temporary test environment, scaling up resources during testing and then deleting them afterward.

Employ AWS CloudFormation to provision a temporary test environment, scaling up resources during testing and then deleting them afterward.

Question 7 A microservice needs temporary credentials to access other AWS services. What is the most secure method for providing these credentials?

A. Utilize IAM roles for EC2 instances or execution roles for Lambda functions to provide temporary credentials
B. Embed the temporary credentials directly into the microservice’s code, for the described technical objective and its associated operational control requirements.
C. Store the temporary credentials in an environment variable within the microservice’s container, under the documented operational and governance requirements.
D. Hardcode the credentials into the application’s configuration file, as the primary implementation for the described business requirement.

Utilize IAM roles for EC2 instances or execution roles for Lambda functions to provide temporary credentials

Question 8 You need to create an alarm that alerts you only when the combined CPU and memory utilization of your application exceeds a certain threshold. You have already created two alarms: one monitoring CPU utilization and another monitoring memory utilization. What is the best way to configure an alarm to trigger based on these two alarms?

A. Create a simple static alarm that monitors the sum of CPU and memory utilization, for the described technical objective and its associated operational control requirements.
B. Create a composite alarm that uses a rule expression to combine the conditions of the CPU and memory utilization alarms.
C. Increase the sensitivity of both individual alarms to ensure they trigger more frequently, as the selected approach for the stated technical and business outcome.
D. Disable the memory utilization alarm to avoid unnecessary notifications, as the selected approach for the stated technical and business outcome, as selected.

Create a composite alarm that uses a rule expression to combine the conditions of the CPU and memory utilization alarms.

Question 9 Your team is deploying a new version of a web application using AWS Elastic Beanstalk. To minimize downtime and ensure a smooth transition, which deployment strategy should you implement to leverage the benefits of a blue/green environment?

A. Use AWS CodeDeploy for a one-at-a-time deployment to reduce risk, for the affected environment.
B. Implement a full-at-a-time deployment to quickly update all instances, within the defined security and accountability boundaries.
C. Utilize the blue/green deployment strategy with traffic rerouting for minimal downtime, for the stated requirement.
D. Employ AWS CloudFormation to create identical environments for rapid updates, within the defined security and accountability boundaries.

Utilize the blue/green deployment strategy with traffic rerouting for minimal downtime, for the stated requirement.

Source: Introduction to DevOps on AWS

Question 10 A development team is migrating a monolithic application to a microservices architecture. To proactively identify and address security vulnerabilities across these newly decoupled services, what should they implement first?

A. Implement web application penetration testing after initial deployment, for consideration.
B. Set up a security monitoring service like AWS Security Hub, for the specified implementation requirement.
C. Configure a centralized authentication service for all microservices, within the described context.
D. Immediately deploy all microservices to a staging environment for testing, within the proposed design.

Set up a security monitoring service like AWS Security Hub, for the specified implementation requirement.

AWS Developer Associate Practice Test

Unlock the full DVA-C02 bank

Practice with explanations that teach.

What you get with free practice

An application utilizes SQS to process user uploads. The application anticipates peak loads that could exceed the 256KB SQS payload size. To ensure application stability during these events, what is the most appropriate action to implement based on the AWS Well-Architected Framework?

Your team is implementing automated testing for a new application. To ensure the most effective validation, which approach should be prioritized to identify and rectify common misconfigurations early in the development lifecycle?

Your application requires secure access to a REST API from multiple VPCs, including VPCs in other AWS accounts. What is the recommended approach to establish this secure connectivity?

Your application uses an IAM role to access an S3 bucket. To minimize the risk of compromised credentials, which action should you implement to ensure temporary credentials are used for this role?

You have deployed an authentication microservice on an EC2 Auto Scaling group. Because the service has a tight recovery time objective, which monitoring configuration best supports rapid detection of instance or scaling failures?

You need to quickly test a new application deployment in a production-like environment without incurring significant costs. Considering the ability to create and decommission resources on demand, which approach best aligns with your requirements and minimizes operational overhead?

A microservice needs temporary credentials to access other AWS services. What is the most secure method for providing these credentials?

Your team is deploying a new version of a web application using AWS Elastic Beanstalk. To minimize downtime and ensure a smooth transition, which deployment strategy should you implement to leverage the benefits of a blue/green environment?

A development team is migrating a monolithic application to a microservices architecture. To proactively identify and address security vulnerabilities across these newly decoupled services, what should they implement first?

You are viewing today’s free 10. Unlock 190 more questions.

Build your practice session

Set your target once.

Customize your session

Unlock the full DVA-C02 bank.

7-day score keeper

Keep today’s practice moving

Answer choices

Correct answer

Wrong-answer review

Extra learning features

Why candidates miss this

Interview question

Why this matters

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

Answer choices

Correct answer

How are AWS Developer Associate questions generated?

How are explanations sourced?

What score do I get?

Why use this site?