Amazon DVA-C01 Exam
AWS Certified Developer - Associate DVA-C02 (Page 15 )

Updated On: 26-Jan-2026

A company that has large online business uses an Amazon DynamoDB table to store sales data. The company enabled Amazon DynamoDB Streams on the table. The transaction status of each sale is stored in a TransactionStatus attribute in the table. The value of the TransactionStatus attribute must be either failed, pending, or completed.
The company wants to be notified of failed sales where the Price attribute is above a specific threshold. A developer needs to set up notification for the failed sales.
Which solution will meet these requirements with the LEAST development effort?

  1. Create an event source mapping between DynamoDB Streams and an AWS Lambda function. Use Lambda event filtering to trigger the Lambda function only if sales fail when the price is above the specified threshold. Configure the Lambda function to publish the data to an Amazon Simple Notification Service (Amazon SNS) topic.
  2. Create an event source mapping between DynamoDB Streams and an AWS Lambda function. Configure the Lambda function handler code to publish to an Amazon Simple Notification Service (Amazon SNS) topic if sales fail when price is above the specified threshold.
  3. Create an event source mapping between DynamoDB Streams and an Amazon Simple Notification Service (Amazon SNS) topic. Use event filtering to publish to the SNS topic if sales fail when the price is above the specified threshold.
  4. Create an Amazon CloudWatch alarm to monitor the DynamoDB Streams sales data. Configure the alarm to publish to an Amazon Simple Notification Service (Amazon SNS) topic if sales fail due when price is above the specified threshold.

Answer(s): A



A developer received the following error message during an AWS CloudFormation deployment:
DELETE_FAILED (The following resource(s) failed to delete: [ASGInstanceRole12345678].)
Which action should the developer take to resolve this error?

  1. Contact AWS Support to report an issue with the Auto Scaling Groups (ASG) service.
  2. Add a DependsOn attribute to the ASGInstanceRole12345678 resource in the CloudFormation template. Then delete the stack.
  3. Modify the CloudFormation template to retain the ASGInstanceRole12345678 resource. Then manually delete the resource after deployment.
  4. Add a force parameter when calling CloudFormation with the role-arn of ASGInstanceRole12345678.

Answer(s): C



A developer needs temporary access to resources in a second account.
What is the MOST secure way to achieve this?

  1. Use the Amazon Cognito user pools to get short-lived credentials for the second account.
  2. Create a dedicated IAM access key for the second account, and send it by mail.
  3. Create a cross-account access role, and use sts:AssumeRole API to get short-lived credentials.
  4. Establish trust, and add an SSH key for the second account to the IAM user.

Answer(s): C



A company is developing a serverless application by using AWS Lambda functions. One of the Lambda functions needs to access an Amazon RDS DB instance. The DB instance is in a private subnet inside a VPC.
The company creates a role that includes the necessary permissions to access the DB instance. The company then assigns the role to the Lambda function. A developer must take additional action to give the Lambda function access to the DB instance.
What should the developer do to meet these requirements?

  1. Assign a public IP address to the DB instance. Modify the security group of the DB instance to allow inbound traffic from the IP address of the Lambda function.
  2. Set up an AWS Direct Connect connection between the Lambda function and the DB instance.
  3. Configure an Amazon CloudFront distribution to create a secure connection between the Lambda function and the DB instance.
  4. Configure the Lambda function to connect to the private subnets in the VPC. Add security group rules to allow traffic to the DB instance from the Lambda function.

Answer(s): D



A developer is writing an application to analyze the traffic to a fleet of Amazon EC2 instances. The EC2 instances run behind a public Application Load Balancer (ALB). An HTTP server runs on each of the EC2 instances, logging all requests to a log file.
The developer wants to capture the client public IP addresses. The developer analyzes the log files and notices only the IP address of the ALB.
What must the developer do to capture the client public IP addresses in the log file?

  1. Add a Host header to the HTTP server log configuration file.
  2. Install the Amazon CloudWatch Logs agent on each EC2 instance. Configure the agent to write to the log file.
  3. Install the AWS X-Ray daemon on each EC2 instance. Configure the daemon to write to the log file.
  4. Add an X-Forwarded-For header to the HTTP server log configuration file.

Answer(s): D



Viewing page 15 of 113
Viewing questions 71 - 75 out of 500 questions



Post your Comments and Discuss Amazon DVA-C01 exam prep with other Community members:

Join the DVA-C01 Discussion