AWS Certified Developer - Associate (DVA-C02) #14 Exam Tips and Frequently Missed Patterns

4 min read

From #2 through #13 we’ve gone once around the four domains. This post isn’t about knowledge but about the skill of converting it into points at the exam center. DVA-C02 is mostly scenario questions, so even with the same knowledge, your score hinges on how you filter the choices.

Time Management #

  • It’s 65 questions / 130 minutes, so about 2 minutes per question.
  • On the first pass, just flag the questions you’d dwell on and move on. Lock in the easy questions first.
  • The 2-minute rule: don’t cling to one question for more than 2 minutes. Finish all, then come back.
  • If English isn’t your native language, you can request 30 extra minutes (ESL extension) before the exam (when taking it in English).

Filter Choices with Constraint Keywords #

A question’s constraint keywords decide the answer. Look for the following in the prompt.

  • Cost/cheap (cost-effective, cheapest) → the cheaper option (HTTP API, On-Demand, Standard queue, etc.).
  • Latency/real-time (low latency, real-time) → cache (DAX/ElastiCache/CloudFront), provisioned concurrency.
  • Ordering/no duplicates (ordering, exactly-once) → SQS FIFO.
  • Zero downtime/fast rollback → Blue/Green.
  • Automatic rotation (rotate) → Secrets Manager.
  • Audit (audit, who decrypted) → SSE-KMS / CloudTrail.
  • No key storage/direct upload → IAM Role / presigned URL / Identity Pool.

Multiple-response and BEST/MOST questions #

  • Multiple response (Choose TWO/THREE) — You must select exactly that many to be correct, with no partial credit. Check the count first.
  • BEST / MOST appropriate — Several choices work, but pick the one that best fits the constraints (cost, latency, security). It asks not “does it work?” but “is it the most appropriate?”.
  • Eliminate anti-pattern choices first — Hardcoded access keys, using root, abusing Scan, plaintext secrets in environment variables are almost always wrong.

The Most Frequently Confused Concept Pairs #

PairWhat divides them
SQS vs SNSQueue (one consumer pulls) vs pub/sub (many subscribers push)
SNS vs EventBridgeSimple high-speed fan-out vs content-based routing,SaaS,schedule
Standard queue vs FIFOThroughput vs ordering,deduplication
User Pool vs Identity PoolAuthentication (JWT) vs temporary AWS credentials
Secrets Manager vs Parameter StoreBuilt-in automatic rotation vs free,tiered (no rotation)
DAX vs ElastiCacheDynamoDB-specific vs general-purpose
Reserved vs provisioned concurrencySecuring/limiting quantity vs eliminating cold starts
502 vs 504Response format error vs timeout
CodeBuild vs CodeDeployBuild vs deploy
in-place vs blue/greenLow cost,slow rollback vs zero downtime,fast rollback
CloudWatch vs CloudTrailPerformance,logs vs API audit
LSI vs GSIAt creation,same PK vs anytime,different PK

Just skimming this table right before the exam lets you quickly filter several questions.

Per-Domain Keyword → Service Quick Mapping #

Domain 1 — Development #

  • Runs briefly on events, no server management → Lambda
  • Eliminate cold starts → Provisioned concurrency
  • HTTP API gateway, cost,latency first → HTTP API
  • Per-customer call limits → REST API + usage plans
  • Query a non-key attribute → GSI
  • Prevent concurrent-modification conflicts → Conditional write + version
  • React to changes → DynamoDB Streams + Lambda
  • One event → durable processing by multiple systems → SNS + SQS fan-out
  • Multi-step workflow → Step Functions

Domain 2 — Security #

  • Login/JWT → Cognito User Pool
  • Temporary AWS credentials → Cognito Identity Pool
  • AWS access from code → IAM Role
  • Auto-rotated secrets → Secrets Manager
  • Decryption audit → SSE-KMS
  • Large-data encryption → Envelope encryption

Domain 3 — Deployment #

  • Build → CodeBuild (buildspec), deploy → CodeDeploy (appspec), flow → CodePipeline
  • Serverless IaC → SAM, general IaC → CloudFormation
  • Preview the impact of an update → Change set
  • Zero downtime,fast rollback → Blue/Green
  • Gradual exposure of a new version → Canary (alias weighting)

Domain 4 — Troubleshooting,Optimization #

  • Request-path bottleneck → X-Ray
  • Custom metrics without an API call → EMF
  • EC2 memory metric → CloudWatch Agent
  • Lambda is slow → Raise memory (CPU proportional)
  • 502 → response format, 504 → timeout, 429 → backoff

Just-Before-the-Exam Checklist #

  • Can you explain the table of 12 confused pairs without hesitation?
  • Do you distinguish retry and failure handling per invocation type (sync/async/stream)?
  • Can you split User Pool and Identity Pool in one sentence?
  • Do you distinguish buildspec and appspec, CodeBuild and CodeDeploy?
  • Can you instantly answer 502/504/429/ConditionalCheckFailed?
  • Do you reflexively filter out anti-pattern choices (key hardcoding, root, Scan, plaintext secrets)?

Wrap-up #

DVA-C02 is an exam that asks not for memorization but for choosing the service or option that fits the constraints. Grab the constraint keywords in the prompt first — cost, latency, ordering, security, rollback — eliminate anti-patterns, then split the last two with the criterion of the confused pair. Once this flow is second nature, you won’t be shaken even by a scenario you’ve never seen.

Next — Full-Scale Mock Exam #

Now it’s the real deal. In #15 Full-Scale Mock Exam, you solve 50 questions matched to the real exam’s weights on the clock. If a weak domain surfaces, go back to its post and shore it up one last time.

X