Security
This domain carries 26% of the DVA-C02 exam. Practise it with original questions that explain every answer option.
- Certification
- DVA-C02
- Exam weight
- 26%
- Subdomains
- 3
- Objectives
- 15
What this domain covers
Example question from this domain
A developer assumes a role for a deployment task. The administrator wants to further restrict that single session so it can deploy only one stack, even though the role normally has broader permissions. Which IAM feature should be used?
- A session policy passed when assuming the role
- A larger Lambda memory setting
- An S3 event notification
- A CloudWatch dashboard widget
A session policy passed when assuming the role — Session policies can restrict the permissions available during a specific role session without changing the role's base policies.
A larger Lambda memory setting — Lambda memory affects function performance characteristics, not IAM role session scope.
An S3 event notification — S3 event notifications trigger processing when objects change and do not restrict assumed-role permissions.
A CloudWatch dashboard widget — A dashboard widget visualizes metrics and does not control IAM session permissions.
Continue with DVA-C02
Domain names and weightings follow the vendor's published exam guide. ExamNova questions are written in-house and are not exam dumps.