1.3 The Four Domains & A Study Plan

The Four Domains and How to Plan Around Them

Quick Answer: The DVA-C02 has four domains: Development with AWS Services (32%), Security (26%), Deployment (24%), and Troubleshooting and Optimization (18%). The weights tell you exactly where to spend study time — Development and Security alone are 58% of the scored content.

The Official Domain Breakdown

Domain weights are not trivia — they are an allocation map. Applied to the 50 scored questions, a 32% domain delivers roughly 16 questions, Security about 13, Deployment about 12, and the 18% domain about 9. Spend your hours where the questions concentrate.

A Realistic Study Plan

Most candidates with about a year of AWS experience need 60-80 hours over 4-8 weeks. Mirror the domain weights:

1. Weeks 1-2 - Development (18-22 hrs). Master Lambda (triggers, reserved vs provisioned concurrency, deployment packages and layers, versions/aliases) and DynamoDB (partition vs sort keys, Global vs Local Secondary Indexes, Query vs Scan, on-demand vs provisioned capacity, DynamoDB Streams). Add API Gateway and S3 multipart uploads.
2. Weeks 3-4 - Security (14-18 hrs). Drill IAM policy evaluation logic (an explicit Deny always overrides any Allow), KMS envelope encryption, Cognito user pools (authentication) vs identity pools (authorization to AWS resources), and Secrets Manager (auto-rotation) vs Systems Manager Parameter Store (cheaper, no rotation).
3. Weeks 5-6 - Deployment (12-16 hrs). Practice CodePipeline/CodeBuild/CodeDeploy, deployment strategies (canary, linear, all-at-once, blue/green), and infrastructure as code with CloudFormation and SAM (sam build, sam deploy --guided).
4. Week 7 - Troubleshooting and Optimization (8-12 hrs). Work CloudWatch Logs Insights queries, X-Ray annotations (indexed, filterable) vs metadata (not indexed), and Lambda performance signals (cold starts, Duration, Throttles).
5. Week 8 - Review and practice exams. Take full-length timed tests, target 80%+, and re-study any domain scoring below that.

A Few High-Yield Facts to Anchor Each Domain

• Development: DynamoDB Scan reads the whole table and is far less efficient than a Query against a key — a recurring "fix the slow read" answer.
• Security: IAM denies by default; access is granted only by an explicit Allow that is not overridden by an explicit Deny.
• Deployment: CodeDeploy uses an appspec.yml; CodeBuild uses a buildspec.yml — memorize which file belongs to which service.
• Troubleshooting: X-Ray needs the active tracing setting plus the X-Ray SDK and an IAM permission to write segments.

Study Tactics That Work

• Build, do not just read. Deploy a small serverless app with SAM end to end; the exam rewards hands-on familiarity over recall.
• Read the question stem twice — DVA-C02 scenarios bury the real constraint (lowest cost, least latency, least privilege, no code change) in the wording.
• Eliminate distractors by ruling out services that technically work but ignore the stated constraint; usually two of four options are obviously wrong, leaving a constraint-based tie-break.

Reading the Constraint in a Scenario

Nearly every DVA-C02 question is a short story ending in a question like "which solution meets these requirements with the LEAST operational overhead?" The capitalized qualifier is the whole game. Train yourself to spot the qualifier and let it pick between two otherwise-valid answers:

A Worked Example of Domain Thinking

Suppose a scenario says: a Lambda function reads from DynamoDB and users report slow responses on a table with millions of items; the function performs a Scan filtered by a non-key attribute. This is a Development plus Troubleshooting question. The fix is to add a Global Secondary Index on the queried attribute and switch from Scan to Query, because a Scan reads every item before filtering while a Query targets a key directly. An answer that says "increase the Lambda memory" addresses the wrong layer and is the classic distractor.

Resources Worth Your Hours

• The official DVA-C02 Exam Guide and Sample Questions PDF from AWS — read these first to lock in the domain weights and question style.
• AWS Skill Builder, which includes a free official practice question set and an Exam Prep plan mapped to the four domains.
• Hands-on labs in a personal AWS account — staying inside the free tier (Lambda, DynamoDB on-demand, S3) is enough to practice every core service.
• Two or three full-length timed practice exams in the final week; treat any domain under 80% as a signal to circle back, not to keep grinding your strongest domain.