Task 1: Implement Authentication And/or Authorization for Applications and AWS Services DVA-C02 Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   Two microservices communicate over a private network. The developer wants to ensure that the communication is encrypted and that both services can verify each other's identity. Which technique is designed for this purpose?

   • AMutual TLS (mTLS)
   • BAn API key sent in the query string
   • CBasic authentication with a shared username and password
   • DA pre-shared key used to encrypt the payload
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A developer needs to configure programmatic access to AWS for a script running on a developer's laptop. What is the recommended way to provide the script with AWS credentials?

   • AUse the instance profile of an EC2 instance to get credentials for the laptop
   • BCreate an IAM user with an access key and secret key, and configure the AWS CLI with the 'aws configure' command
   • CCreate an IAM role and attach it to the laptop's network interface
   • DStore the root user's access key in the script for simplicity
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   An IAM policy has an 'Effect' of 'Allow' and an 'Action' of 's3:ListBucket'. What does this policy grant the principal?

   • APermission to delete an S3 bucket
   • BPermission to list the objects in an S3 bucket
   • CPermission to read the contents of an S3 object
   • DPermission to create a new S3 bucket
   Reveal Solution Discussion Select an answer first