← All exams
Home · AWS Developer Associate (DVA-C02)

AWS Developer Associate (DVA-C02)

Practice for the AWS developer cert — build, deploy and debug on AWS.

Pass mark 46/65 130 minutes AWS How many can I get wrong?
Don't cram it, drill it. Ten questions a topic beats an hour re-reading.
Free practice questions
Try 3 real AWS Developer Associate (DVA-C02) questions
Have a go, then reveal the worked explanation. A taster from a bank of 310 original questions — unlock for unlimited drills and full timed mocks.
Q1. A developer building a Lambda function in Python wants to reuse an expensive DynamoDB client connection across invocations to reduce latency on warm starts. Where should the client be instantiated?
  • A.  Outside the handler function, at global/module scope
  • B.  Inside the handler function so a new client is created on every invocation
  • C.  Inside a try/except block within the handler
  • D.  In a separate Lambda layer with no code reference
Show answer & explanation
✓ Answer: A. Outside the handler function, at global/module scope
Code outside the handler runs once per execution environment and persists across warm invocations. Initializing SDK clients at module scope lets subsequent invocations in the same execution environment reuse the client, avoiding the overhead of re-creating it each time.
Q2. A DynamoDB table uses on-demand capacity mode. A sudden spike sends traffic to roughly double the previous peak within a few minutes. What happens?
  • A.  DynamoDB scales automatically to accommodate the new peak without manual provisioning, though a brief throttling window can occur if traffic more than doubles the previous peak in under 30 minutes
  • B.  The table stops accepting writes until a support ticket increases capacity
  • C.  DynamoDB automatically switches the table to provisioned mode to handle the spike
  • D.  Requests are silently dropped and no error is returned to the client
Show answer & explanation
✓ Answer: A. DynamoDB scales automatically to accommodate the new peak without manual provisioning, though a brief throttling window can occur if traffic more than doubles the previous peak in under 30 minutes
On-demand tables scale to serve up to double the previous traffic peak within 30 minutes; exceeding that rate can cause brief throttling until DynamoDB adapts. It never silently switches billing modes or drops requests without returning a throttling error.
Q3. An application needs to encrypt data client-side before sending it to S3, using a data key that is itself protected by a KMS customer master key, without making a network call to KMS for every encryption operation. Which approach best fits this requirement?
  • A.  Call kms:Encrypt directly on every object before upload
  • B.  Use envelope encryption: generate a data key with kms:GenerateDataKey, use the plaintext key to encrypt data locally, then discard the plaintext key and store only the encrypted key
  • C.  Store the KMS key's private key locally and encrypt with it directly
  • D.  Use kms:GenerateDataKeyWithoutPlaintext and encrypt the data using the encrypted key directly
Show answer & explanation
✓ Answer: B. Use envelope encryption: generate a data key with kms:GenerateDataKey, use the plaintext key to encrypt data locally, then discard the plaintext key and store only the encrypted key
Envelope encryption is the standard KMS pattern: GenerateDataKey returns a plaintext data key (used locally for fast symmetric encryption without repeated KMS calls) and its KMS-encrypted counterpart (stored alongside the ciphertext for later decryption). Calling kms:Encrypt per object is limited by KMS request size and throughput limits for encrypting the object itself. KMS does not expose private key material for symmetric CMKs, and GenerateDataKeyWithoutPlaintext returns no usable plaintext key for immediate local encryption.
Exam format (pass mark, question count, timing) verified against AWS Certification. Questions are our own, not the official paper.
Start here
Ten questions to see where you stand
Two minutes, no timer, marked the moment you finish with every answer explained. Then you'll know which topics need the work before you sit a full mock.
Exam mode
Full mock exam
65 random questions, real timing, marked against the official pass mark. Different every time.
Create a free account for a full mock
No card needed. A free account unlocks a full timed mock and 3 drills on every exam.
Try it free
Topic drills
Ten quick questions on one topic, marked instantly with explanations.
1 free drill left — then a free account unlocks 3 + a full mock.
Development with AWS services & SDKs · 45
Serverless (Lambda, API Gateway, DynamoDB) · 45
Security (IAM, Cognito, KMS, Secrets Manager) · 60
Deployment (CI/CD, CodePipeline, Elastic Beanstalk) · 59
Monitoring & troubleshooting (CloudWatch, X-Ray) · 48
Refactoring & optimisation · 53
AWS Developer Associate (DVA-C02) — common questions
Frequently asked
How many questions are in the AWS Developer Associate (DVA-C02)?
The exam has 65 questions. Every Revision Robin mock uses the same 65-question format so your practice matches the real thing.
What is the pass mark for the AWS Developer Associate (DVA-C02)?
You need 46 out of 65 correct to pass, which is about 71%. Our mocks mark you against this exact threshold.
How long do you get?
The test is timed at 130 minutes. Our full mock runs on the same clock so you can practise your pacing.
Are these the real exam questions?
No. Our questions are original and written to match the current syllabus, so they give realistic practice without copying the official paper. Every answer comes with a plain-English explanation. Always confirm current rules and content with AWS.