TheoryAWS Developer Associate Prep 2
Practice Test
Practice 505+ real AWS Developer Associate Prep 2 questions with clear explanations, realistic mock exams, and progress tracking - free to start and fully offline.
Heads up: the app and the web exam use separate accounts — a web unlock and an in-app purchase do not carry over. Buy on the web to practice on the web.
AWS Developer Associate Prep 2 exam — full Q&A walkthrough
Every question read aloud with the answer explained. Play it on your commute, then test yourself.
30 free AWS Developer Associate Prep 2 questions
Sampled across every topic area — not just the first page. Try them as a quiz or flip them as flashcards.
-
AWS Developer Associate Prep 2
A developer needs to identify performance bottlenecks in a distributed application deployed across multiple AWS services. Which AWS service should be used?
Correct — D. AWS X-Ray provides distributed tracing functionality that helps developers analyze and debug distributed applications. It offers end-to-end visibility of requests as they travel through the application, making it ideal for identifying performance bottlenecks in distributed systems. -
AWS Developer Associate Prep 2
Which CloudWatch Logs feature should a developer use to extract specific data fields from logs and create metrics from them?
Correct — C. CloudWatch Logs Metric Filters allow developers to define patterns to extract values from logs and convert them into CloudWatch metrics, which can then be used for monitoring, alerting, and visualization. -
AWS Developer Associate Prep 2
A Lambda function is sometimes timing out during execution. How can a developer identify the root cause of these timeouts?
Correct — B. Adding detailed logging with timestamps helps track execution progress and identify which operations are taking longer than expected, helping to pinpoint the cause of Lambda timeouts. -
AWS Developer Associate Prep 2
Which tool should a developer use to analyze and debug latency issues in an application that spans multiple AWS services?
Correct — A. AWS X-Ray provides tracing capabilities that help developers analyze and debug latency issues in distributed applications by visualizing the full request path across multiple services. -
AWS Developer Associate Prep 2
A developer wants to monitor custom application metrics in real-time. Which approach is most appropriate?
Correct — D. Using the CloudWatch PutMetricData API allows developers to send custom metrics directly to CloudWatch, enabling real-time monitoring of application-specific data points. -
AWS Developer Associate Prep 2
Which query language is used in CloudWatch Logs Insights to analyze log data?
Correct — C. CloudWatch Logs Insights uses its own purpose-built query language designed specifically for querying and analyzing log data stored in CloudWatch Logs. -
AWS Developer Associate Prep 2
What should a developer implement to handle transient failures when an application interacts with AWS services?
Correct — B. Implementing exponential backoff with jitter is a best practice for handling transient failures in AWS service interactions by gradually increasing retry intervals and adding randomness to prevent retry storms. -
AWS Developer Associate Prep 2
A developer needs to optimize a DynamoDB-based application that is experiencing throttled requests. Which approach should they consider first?
Correct — A. DynamoDB Auto Scaling automatically adjusts provisioned throughput capacity in response to traffic patterns, which can help prevent throttling due to capacity limitations. -
AWS Developer Associate Prep 2
Which feature helps prevent Lambda functions from overwhelming downstream resources?
Correct — D. Reserved concurrency sets a limit on the maximum number of concurrent executions for a Lambda function, which helps prevent overwhelming downstream resources by controlling the rate of requests. -
AWS Developer Associate Prep 2
A developer wants to improve the performance of an application that frequently retrieves the same data from DynamoDB. Which service should be implemented?
Correct — C. DAX (DynamoDB Accelerator) is an in-memory cache specifically designed for DynamoDB that can dramatically improve read performance for frequently accessed data. -
AWS Developer Associate Prep 2
Which CloudWatch feature can a developer use to create alerts when application errors exceed a certain threshold?
Correct — B. CloudWatch Alarms can monitor metrics over specified time periods and trigger actions when thresholds are exceeded, making them ideal for alerting on application error rates. -
AWS Developer Associate Prep 2
When investigating why an AWS Lambda function is taking longer to execute than expected, which metric should a developer analyze first?
Correct — A. The Duration metric provides information about how long a Lambda function execution takes, making it the most relevant metric to investigate execution time issues. -
AWS Developer Associate Prep 2
A developer is using AWS X-Ray to trace requests in a microservices application. What must be added to the application code to make this work?
Correct — D. The X-Ray SDK must be integrated into application code to capture and send trace data to the X-Ray service, enabling distributed tracing functionality. -
AWS Developer Associate Prep 2
Which technique can a developer use to improve the cold start performance of a Lambda function?
Correct — C. Provisioned Concurrency keeps Lambda functions initialized and ready to respond to requests, effectively eliminating cold starts for the specified concurrency level. -
AWS Developer Associate Prep 2
Which CloudWatch Logs feature should a developer use to extract structured data from unstructured logs?
Correct — B. CloudWatch Logs Insights supports JSON parsing using specialized syntax that can extract structured data from JSON-formatted logs, enabling analysis of specific fields. -
AWS Developer Associate Prep 2
Which AWS service can help a developer find unused or underutilized resources to optimize costs?
Correct — A. AWS Trusted Advisor provides recommendations for optimizing AWS resources, including identifying idle or underutilized resources to help reduce costs. -
AWS Developer Associate Prep 2
A developer wants to reduce the latency of an application that frequently reads from an Amazon RDS database. Which caching solution should be implemented?
Correct — D. Amazon ElastiCache for Redis provides an in-memory data store that can be placed in front of RDS to cache frequently accessed data, reducing latency and database load. -
AWS Developer Associate Prep 2
What should a developer implement to correlate log entries across multiple services in a distributed application?
Correct — C. A correlation ID is a unique identifier passed between services that allows log entries from different components to be connected, facilitating troubleshooting across service boundaries. -
AWS Developer Associate Prep 2
Which CloudWatch feature allows a developer to search and analyze log data interactively?
Correct — B. CloudWatch Logs Insights is a fully integrated query and visualization tool that allows developers to interactively search and analyze log data in CloudWatch Logs. -
AWS Developer Associate Prep 2
A developer needs to profile a Lambda function to identify performance issues. Which AWS service should be used?
Correct — A. AWS Lambda Power Tuning is an AWS Solution that helps developers optimize Lambda functions by running performance tests across different memory configurations to find the optimal settings. -
AWS Developer Associate Prep 2
A developer is building a web application that needs to authenticate users against an existing corporate directory. Which AWS service should be used to implement identity federation?
Correct — D. Amazon Cognito supports identity federation with external identity providers including SAML, OIDC, Facebook, Google, etc., allowing users to authenticate with existing credentials while accessing AWS resources. -
AWS Developer Associate Prep 2
Which of the following is a best practice for securing AWS Lambda environment variables containing sensitive information?
Correct — C. AWS KMS should be used to encrypt sensitive environment variables in Lambda functions, providing an additional layer of security for sensitive data beyond the default encryption that Lambda provides. -
AWS Developer Associate Prep 2
A developer needs to grant an Amazon S3 bucket access to an AWS Lambda function. Which type of policy should be used?
Correct — B. Resource-based policies are attached directly to the resource (in this case, the S3 bucket) and define who has access to that resource and what actions they can perform. -
AWS Developer Associate Prep 2
Which AWS service should be used to securely store and automatically rotate database credentials used by an application?
Correct — A. AWS Secrets Manager is designed to protect access to applications, services, and IT resources without hardcoding credentials. It offers automatic rotation of secrets for supported services. -
AWS Developer Associate Prep 2
A developer is implementing OAuth 2.0 authentication in an application. Which type of token is commonly used to securely transmit authentication information between parties?
Correct — D. JSON Web Tokens (JWT) are an open standard for securely transmitting information between parties as a JSON object. They're commonly used with OAuth 2.0 to represent claims between two parties. -
AWS Developer Associate Prep 2
Which AWS service can be used to enforce encryption of data at rest in an Amazon S3 bucket?
Correct — C. AWS Key Management Service (KMS) manages encryption keys and integrates with S3 to enforce server-side encryption of objects stored in S3 buckets. -
AWS Developer Associate Prep 2
A developer needs to implement fine-grained access control for objects in an Amazon S3 bucket. Which S3 feature should be used?
Correct — B. Amazon S3 Access Control Lists (ACLs) provide fine-grained control over specific objects within buckets, allowing you to manage permissions at the object level. -
AWS Developer Associate Prep 2
Which of the following is a best practice for managing AWS access credentials in a CI/CD pipeline?
Correct — A. IAM roles provide temporary credentials that automatically rotate, making them more secure than using long-term access keys in CI/CD environments. -
AWS Developer Associate Prep 2
When implementing SAML 2.0 federation with AWS, which service acts as the identity provider (IdP)?
Correct — D. In a SAML 2.0 federation with AWS, the external corporate directory (like Active Directory or another SAML-compatible identity system) acts as the identity provider, authenticating users and providing assertions to AWS. -
AWS Developer Associate Prep 2
A developer needs to secure communication between microservices in an Amazon ECS cluster. Which AWS service should be used?
Correct — C. AWS Certificate Manager provides, manages, and deploys public and private SSL/TLS certificates for use with AWS services, making it the appropriate choice for securing communication between microservices.
AWS Developer Associate Prep 2 sample questions
Tap any question below to reveal the answer and a plain-English explanation.
AWS Developer Associate Prep 2 A developer needs to grant an Amazon S3 bucket access to an AWS Lambda function. Which type of policy should be used?
A. Identity-based policy
B. Resource-based policy ✓
C. Trust policy
D. Service control policy
Correct — B. Resource-based policies are attached directly to the resource (in this case, the S3 bucket) and define who has access to that resource and what actions they can perform.
AWS Developer Associate Prep 2 Which AWS service should be used to securely store and automatically rotate database credentials used by an application?
A. AWS Secrets Manager ✓
B. AWS Key Management Service (KMS)
C. AWS Certificate Manager
D. Amazon S3
Correct — A. AWS Secrets Manager is designed to protect access to applications, services, and IT resources without hardcoding credentials. It offers automatic rotation of secrets for supported services.
AWS Developer Associate Prep 2 A developer is implementing OAuth 2.0 authentication in an application. Which type of token is commonly used to securely transmit authentication information between parties?
A. SSH key
B. SMTP token
C. XML token
D. JWT (JSON Web Token) ✓
Correct — D. JSON Web Tokens (JWT) are an open standard for securely transmitting information between parties as a JSON object. They're commonly used with OAuth 2.0 to represent claims between two parties.
AWS Developer Associate Prep 2 Which AWS service can be used to enforce encryption of data at rest in an Amazon S3 bucket?
A. AWS WAF
B. AWS Shield
C. AWS Key Management Service (KMS) ✓
D. Amazon Inspector
Correct — C. AWS Key Management Service (KMS) manages encryption keys and integrates with S3 to enforce server-side encryption of objects stored in S3 buckets.
AWS Developer Associate Prep 2 A developer needs to implement fine-grained access control for objects in an Amazon S3 bucket. Which S3 feature should be used?
A. S3 Transfer Acceleration
B. S3 Access Control Lists (ACLs) ✓
C. S3 Event Notifications
D. S3 Intelligent-Tiering
Correct — B. Amazon S3 Access Control Lists (ACLs) provide fine-grained control over specific objects within buckets, allowing you to manage permissions at the object level.
AWS Developer Associate Prep 2 Which of the following is a best practice for managing AWS access credentials in a CI/CD pipeline?
A. Use IAM roles for EC2 instances or services running the pipeline ✓
B. Store access keys directly in your code repository
C. Hardcode credentials in your build scripts
D. Use the same access key for all environments
Correct — A. IAM roles provide temporary credentials that automatically rotate, making them more secure than using long-term access keys in CI/CD environments.
AWS Developer Associate Prep 2 When implementing SAML 2.0 federation with AWS, which service acts as the identity provider (IdP)?
A. Amazon API Gateway
B. Amazon Cognito
C. AWS IAM
D. The external corporate directory system ✓
Correct — D. In a SAML 2.0 federation with AWS, the external corporate directory (like Active Directory or another SAML-compatible identity system) acts as the identity provider, authenticating users and providing assertions to AWS.
AWS Developer Associate Prep 2 A developer needs to secure communication between microservices in an Amazon ECS cluster. Which AWS service should be used?
A. Amazon S3
B. AWS Secrets Manager
C. AWS Certificate Manager ✓
D. Amazon Cognito
Correct — C. AWS Certificate Manager provides, manages, and deploys public and private SSL/TLS certificates for use with AWS services, making it the appropriate choice for securing communication between microservices.
About the AWS Developer Associate Prep 2 test
The AWS Developer Associate Prep 2 measures the IT & Cybersecurity knowledge you'll actually rely on — tested the way the real exam asks it, not with trick questions. Practising real AWS Developer Associate Prep 2-style questions, then sitting a full timed mock exam, is the fastest way to walk in knowing you'll pass.
You will be tested on
- The core topics and terminology you'll be tested on
- Rules, standards and best-practice procedures
- Real-world scenarios and how to respond
- Common mistakes and how to avoid them
How TheoryPractice helps you pass
- Real exam-style questions with instant, detailed explanations
- Full timed mock exams that mirror the real test format
- Flashcards & quiz modes from the same question bank
- Progress tracking so you know exactly when you're ready
Topics in this question bank
The core topics and terminology you'll be tested on
Rules, standards and best-practice procedures
Real-world scenarios and how to respond
Common mistakes and how to avoid them
Full AWS Developer Associate Prep 2 bank + unlimited mocks
Try 30 questions free. Unlock the complete AWS Developer Associate Prep 2 question bank, every explanation, and unlimited timed mock exams. Practice on any device.
Unlock AWS Developer Associate Prep 2 →