AWS Certified Developer Associate Practice Test

Questions for exam DVA-C02 on writing, securing and shipping code, each tied to an AWS documentation page.

What is the longest timeout that can be set for a standard Lambda function?

Pick an answer, then press Check answer. Then you see Correct or Not quite, with the reason. Keys: A to D pick, Enter checks.

Print covers the next 65 questions. Share this set copies a link to the same questions in the same order.

Exam mode: 65 questions, 130 minutes.

More options

Unofficial practice questions, not affiliated with Amazon Web Services, Inc. Bank checked October 9, 2026.

All 65 questions

Development with AWS Services 21

  • A consumer receives a message from an SQS queue whose settings were never changed. For how long is the message hidden from other consumers? Amazon SQS Developer Guide: Amazon SQS visibility timeout
  • A CPU-bound Lambda function runs too slowly. Which setting also raises the CPU power the function gets? AWS Lambda Developer Guide: Configure Lambda function memory
  • A Lambda function behind an API Gateway Lambda proxy integration returns a plain string. API Gateway answers the client with 502 Bad Gateway. Why? Amazon API Gateway Developer Guide: Lambda proxy integrations in API Gateway
  • A Lambda function is attached to a VPC to reach a private database. Its calls to a public third-party API now time out. Why? AWS Lambda Developer Guide: Giving Lambda functions access to resources in an Amazon VPC
  • A Lambda function reads batches of ten messages from an SQS queue. One message fails and all ten return to the queue. How can the function report only the failed message? AWS Lambda Developer Guide: Handling errors for an SQS event source in Lambda
Show all 65 questions (60 more)

Development with AWS Services, continued

  • A producer retries a send to an SQS FIFO queue three minutes later with the same message deduplication ID. What does the queue do with the second copy? Amazon SQS Developer Guide: Using the message deduplication ID in Amazon SQS
  • A producer wants every new message in a queue to stay invisible to consumers for a few minutes after it is sent. Which SQS feature does this, and what is its limit? Amazon SQS Developer Guide: Amazon SQS delay queues
  • A provisioned table must serve 10 strongly consistent reads per second of items that are 6 KB each. How many read capacity units does this take? Amazon DynamoDB Developer Guide: DynamoDB provisioned capacity mode
  • A REST API must reshape the JSON a backend returns before the client sees it. What does API Gateway use for this? Amazon API Gateway Developer Guide: Mapping template transformations for REST APIs in API Gateway
  • A REST API should reject requests that lack a required query string before the backend is called. Which API Gateway feature does this, and what does the caller get? Amazon API Gateway Developer Guide: Request validation for REST APIs in API Gateway
  • A team wants only "order cancelled" events from an event bus to start a function. What does an EventBridge rule use to select them? Amazon EventBridge: Amazon EventBridge event patterns
  • A worker polls an SQS queue that is often empty, and most ReceiveMessage calls return nothing. Which change cuts the empty responses, and what is its longest wait? Amazon SQS Developer Guide: Amazon SQS short and long polling
  • An application must read an item right after writing it and always see the new value. What should a GetItem call set? Amazon DynamoDB Developer Guide: DynamoDB read consistency
  • An order workflow can wait days for a human approval and must keep a full execution history. Which Step Functions workflow type fits? AWS Step Functions: Choosing workflow type in Step Functions
  • An S3 event invokes a Lambda function asynchronously, and the function returns an error. What does Lambda do by default? AWS Lambda Developer Guide: How Lambda handles errors and retries with asynchronous invocation
  • For failed asynchronous invocations, how does a Lambda destination differ from a dead-letter queue? AWS Lambda Developer Guide: Capturing records of Lambda asynchronous invocations
  • In Kinesis Data Streams, what decides which shard a data record is written to? Amazon Kinesis Data Streams: Amazon Kinesis Data Streams Terminology and concepts
  • Several Lambda functions share the same libraries. Where do layer contents appear in the execution environment, and how many layers can one function use? AWS Lambda Developer Guide: Managing Lambda dependencies with layers
  • What is the longest timeout that can be set for a standard Lambda function? AWS Lambda Developer Guide: Configure Lambda function timeout
  • Why is a DynamoDB Scan usually less efficient than a Query? Amazon DynamoDB Developer Guide: Best practices for querying and scanning data in DynamoDB
  • With lazy loading, when is data written to an ElastiCache cache? Amazon ElastiCache User Guide: Caching strategies for Memcached

Security 17

  • A CloudFormation template needs a password that is stored in Secrets Manager, and the value must not appear in the template. What should the template use? AWS CloudFormation User Guide: Get values stored in other services using dynamic references
  • A developer's code runs on a laptop and on EC2 with no credentials in the code. How does an AWS SDK find credentials? AWS SDKs and Tools: AWS SDKs and Tools standardized credential providers
  • A mobile app has signed a user in and now needs temporary AWS credentials to upload directly to S3. Which Cognito component provides them? Amazon Cognito Developer Guide: Amazon Cognito identity pools
  • A regulator requires that data is already encrypted before it leaves the application for Amazon S3. Which approach is this? Amazon S3 User Guide: Protecting data by using client-side encryption
  • A user in account B must decrypt with a KMS key that lives in account A. What has to allow it? AWS KMS Developer Guide: Allowing users in other accounts to use a KMS key
  • A user without AWS credentials must download one private S3 object for the next ten minutes. What should the application give the user? Amazon S3 User Guide: Download and upload objects with presigned URLs
  • A web app must sign users in and receive JSON web tokens for them. Which part of Amazon Cognito answers "who is this user?" Amazon Cognito Developer Guide: What is Amazon Cognito?
  • After sign-in, a Cognito user pool issues tokens. Which one carries claims about the user's identity, such as name and email address? Amazon Cognito Developer Guide: Understanding user pool JSON web tokens (JWTs)
  • An API must authorize callers with a custom scheme based on a bearer token from a third-party provider. What does a Lambda authorizer return to API Gateway? Amazon API Gateway Developer Guide: Use API Gateway Lambda authorizers
  • An application must encrypt a 2 GB file with a key protected by AWS KMS. Which KMS operation does it call first? AWS KMS API Reference: GenerateDataKey
  • Containers in one ECS task need to call Amazon SQS. Where should the permissions be granted? Amazon Elastic Container Service: Amazon ECS task IAM role
  • In a multi-tenant DynamoDB table, each user may read only items whose partition key equals that user's ID. Which IAM condition key enforces this? Amazon DynamoDB Developer Guide: Using IAM policy conditions for fine-grained access control
  • What gives a Lambda function permission to write to a DynamoDB table? AWS Lambda Developer Guide: Defining Lambda function permissions with an execution role
  • What is the largest plaintext that the KMS Encrypt operation accepts? AWS KMS API Reference: Encrypt
  • Where does the Lambda guide recommend keeping a database password that a function needs? AWS Lambda Developer Guide: Securing Lambda environment variables
  • Which three values make up the temporary security credentials that AssumeRole returns? AWS STS API Reference: AssumeRole
  • With automatic rotation turned on and no custom period set, how often does AWS KMS generate new key material for a KMS key? AWS KMS Developer Guide: Rotate AWS KMS keys

Deployment 15

  • A CodeDeploy deployment uses a configuration named Canary10Percent5Minutes. How does traffic shift? AWS CodeDeploy User Guide: Working with deployment configurations in CodeDeploy
  • A developer publishes version 3 of a Lambda function, then wants to change its code. What must the developer do? AWS Lambda Developer Guide: Manage Lambda function versions
  • A developer wants to run a Lambda function once on a laptop with a sample S3 event, before deploying. Which two AWS SAM CLI commands do this? AWS SAM Developer Guide: Introduction to testing with the sam local command
  • A function's dependencies make its .zip package far larger than Lambda allows. Which package type accepts up to 10 GB? AWS Lambda Developer Guide: Lambda quotas
  • A release must stop before the production stage until a manager signs off. What should be added to the pipeline in CodePipeline? AWS CodePipeline User Guide: Add a manual approval action to a stage
  • A REST API's HTTP integration should call a different backend host on each stage. With a stage variable named url, what goes in the integration request? Amazon API Gateway Developer Guide: Use stage variables for a REST API in API Gateway
  • A team deploys a SAM application for the first time and wants the CLI to ask for the stack name, Region and other settings. Which command does this? AWS SAM Developer Guide: Introduction to deploying with AWS SAM
  • A team wants 10 percent of invocations to reach a new Lambda version while 90 percent stay on the old one. What should it configure? AWS Lambda Developer Guide: Implement Lambda canary deployments using a weighted alias
  • An Elastic Beanstalk environment must keep full capacity while a new version rolls out in batches. Which deployment policy does this? AWS Elastic Beanstalk Developer Guide: Deployment policies and settings
  • Before updating a production stack, a team wants to see which resources CloudFormation would replace or delete. What should it create? AWS CloudFormation User Guide: Update CloudFormation stacks using change sets
  • In a SAM template, which pair of properties makes each deployment of a function shift traffic gradually through CodeDeploy? AWS SAM Developer Guide: Deploying serverless applications gradually with AWS SAM
  • In an API Gateway canary release, what happens to the base version of the API? Amazon API Gateway Developer Guide: Set up an API Gateway canary release deployment
  • In an EC2 deployment with CodeDeploy, which lifecycle event comes last and is used to verify that the deployment succeeded? AWS CodeDeploy User Guide: AppSpec 'hooks' section
  • Where does CodeBuild look for the build commands by default? AWS CodeBuild User Guide: Build specification reference for CodeBuild
  • Which line must an AWS SAM template contain so that CloudFormation treats it as a SAM template? AWS SAM Developer Guide: AWS SAM template anatomy

Troubleshooting and Optimization 12

  • A burst of invocations to one Lambda function exhausts the connections of a small database. Which setting caps how many instances of the function run at once? AWS Lambda Developer Guide: Configuring reserved concurrency for a function
  • A checkout function must answer in milliseconds even after an idle period. Which setting keeps execution environments initialized ahead of requests? AWS Lambda Developer Guide: Configuring provisioned concurrency for a function
  • A custom metric must show spikes that last only a few seconds. What granularity does a high-resolution metric give? Amazon CloudWatch User Guide: Publish custom metrics (PutMetricData / EMF)
  • A developer wants to find X-Ray traces by customer ID using filter expressions. How should the ID be recorded? AWS X-Ray Developer Guide: AWS X-Ray concepts
  • A Lambda function should publish custom metrics without slowing itself down with extra API calls. Which approach writes the metrics as log lines? Amazon CloudWatch User Guide: Embedding metrics within logs
  • A new Lambda function runs without errors, but nothing appears in CloudWatch Logs. What is the likely cause? AWS Lambda Developer Guide: Sending Lambda function logs to CloudWatch Logs
  • A REST API stage has caching turned on with default settings. For how long is a cached response reused? Amazon API Gateway Developer Guide: Cache settings for REST APIs in API Gateway
  • An alarm should fire when the word ERROR appears too often in an application's log group. What turns log data into a metric? Amazon CloudWatch Logs User Guide: Creating metrics from log events using filters
  • An application on EC2 uses the X-Ray SDK, but no traces arrive. The X-Ray daemon is not running. What does the daemon do? AWS X-Ray Developer Guide: AWS X-Ray daemon
  • Clients of a REST API begin to receive 429 Too Many Requests. What does this status show? Amazon API Gateway Developer Guide: Throttle requests to your REST APIs for better throughput in API Gateway
  • Three services subscribe to one SNS topic, but each wants only messages of one type. What should each subscription have, so the services stop discarding unwanted messages? Amazon SNS Developer Guide: Amazon SNS message filtering
  • With the default sampling rule, which requests does the X-Ray SDK record? AWS X-Ray Developer Guide: Configuring sampling rules

How this list was compiled: Own questions, written to the four content domains and weightings of the exam guide Amazon Web Services publishes for AWS Certified Developer - Associate (DVA-C02), exam guide version 2.1 at https://docs.aws.amazon.com/aws-certification/latest/developer-associate-02/developer-associate-02.html (read 2026-10-09, with its four domain pages), with the exam length from https://aws.amazon.com/certification/certified-developer-associate/ (read 2026-10-09). Facts were read on 2026-10-09 in AWS's public documentation at docs.aws.amazon.com and, where named, on aws.amazon.com. Each question names the page it was written from and links to it. Licence: Own work. Every question, wrong choice and explanation was written for this site from the task statements of the exam guide and the public AWS pages named in each question. Nothing is copied or reworded from an AWS exam, an AWS sample question or official practice question set, a practice product or a question dump.

How it works

Here are 65 of our own questions for the AWS Certified Developer Associate exam, DVA-C02, sorted by its four domains. The test is unofficial, is not affiliated with Amazon Web Services, Inc., and copies nothing from the real exam.

Read the full guide

What the DVA-C02 exam asks

Version 2.1 of AWS's exam guide, read on October 9, 2026, weights development with AWS services 32%, security 26%, deployment 24%, and troubleshooting and optimization 18%. It allows 130 minutes.

What this bank leaves out

The guide says unscored questions may cover emerging topics such as AI-assisted development tools. Those are not in this bank, and neither are multiple-response questions.

  • The SQS quotas page gives 1,048,576 bytes (1 MiB) as the largest message.
  • A Lambda proxy integration that returns anything but the required JSON gets a 502 from API Gateway.
  • X-Ray annotations are indexed for filter expressions. Metadata are not.

Questions and answers

How many questions are on the AWS Developer Associate exam?

The DVA-C02 exam guide counts 50 scored questions and 15 unscored ones, 65 in all, each multiple choice or multiple response.

What is the passing score for DVA-C02?

The exam guide gives a minimum passing score of 720 on a scale of 100 to 1,000. It is a scaled score, so a percent on this page cannot be turned into a pass or a fail.

Is this practice test for DVA-C02?

Yes. It follows version 2.1 of the DVA-C02 exam guide, which AWS dates December 12, 2024. AWS's certification page gives November 30, 2026 as the last day to take DVA-C02 and says registration for DVA-C03 opens October 27, 2026.

Are these practice tests the real AWS exam questions?

No. They are our own, written from the guide's skills list and AWS's documentation pages.