AWS Certified Developer - Associate (DVA-
C02) Study Quiz – 01 Guide 2026
1. What is an IAM Policy? A JSON document which defines one or more
permissions
A JSON document which defines one or
more permissions
The policy which determines how your
AWS bill will be paid
A file containing a user's private SSH key
A CSV file which contains a users Access
Key and Secret Access Key
2. IAM policy An IAM policy is an object in AWS that, when
associated with an identity or resource, de-
fines their permissions. AWS evaluates these
policies when an IAM principal (user or role)
makes a request. Permissions in the poli-
cies determine whether the request is al-
lowed or denied. Most policies are stored in
AWS as JSON documents. AWS supports six
types of policies: identity-based policies, re-
source-based policies, permissions bound-
aries, Organizations SCPs, ACLs, and session
policies.
3. Which of the following is NOT a feature of Allows you to set up biometric authentication,
IAM? so that no passwords are required
Identity federation for delegated access
to the AWS Management Console or AWS IAM doesn't have a feature to handle biomet-
ric authentication.
APIs
Next question
, AWS Certified Developer - Associate (DVA-
C02) Study Quiz – 01 Guide 2026
Fine-grained access control to AWS re-
sources
Allows you to set up biometric authentica-
tion, so that no passwords are required
Centralized control of your AWS account
4. IAM allows centralized control of AWS ac- True
counts.
True
False
5. Which of the following statements is NOT AWS recommends that EC2 instances have
true? credentials stored on them so that the in-
stances can access other resources (such as
AWS offers EC2 Instance Connect, a con- S3 buckets).
venient and robust solution for estab-
lishing connections to Linux instances
You can hard-code AWS access keys into your
through Secure Shell (SSH).
application or instances, but you're faced
AWS recommends IAM roles so that your with the added responsibility of distributing
applications can securely make API re- them to the instance securely and then the
quests from your instances. management headache of regularly rotating
them. AWS doesn't recommend this practice.
Control access to Amazon EC2 resources
by setting up security groups.
AWS recommends that EC2 instances
have credentials stored on them so that
the instances can access other resources
(such as S3 buckets).
6. IAM Role
, AWS Certified Developer - Associate (DVA-
C02) Study Quiz – 01 Guide 2026
Which IAM entity can you use to delegate
access to other trusted entities such as
IAM users, applications, or AWS services
like EC2?
IAM Role
IAM User
IAM Group
IAM Web Identity Federation
7. Groups Groups let you specify permissions for mul-
tiple users, which can make it easier to man-
age the permissions for those users.
8. IAM Role to delegate access to IAM users managed
within your account, to IAM users under a dif-
ferent AWS account, to a web service ottered
by AWS such as Amazon Elastic Compute
Cloud (Amazon EC2), or to an external user
authenticated by an external identity provider
(IdP) service that is compatible with SAML 2.0
or OpenID Connect, or a custom-built identity
broker. IAM Roles.
IAM roles allow applications to securely make
API requests from instances, without requir-
ing you to manage the security credentials
that the applications use.
9. Which statement best describes IAM? IAM allows you to manage users, groups, and
roles and their corresponding level of access
IAM allows you to manage users' pass- to the AWS Platform.
words only. AWS staff must create new
users for your organization. This is done
, AWS Certified Developer - Associate (DVA-
C02) Study Quiz – 01 Guide 2026
by raising a ticket.
IAM allows you to manage users, groups,
and roles and their corresponding level of
access to the AWS Platform.
IAM stands for Improvised Application
Management, and it allows you to de-
ploy and manage applications in the AWS
Cloud.
IAM allows you to manage permissions
for AWS resources only.
10. Which of the following is NOT a use of IAM Providing secure VPN access to AWS
in AWS?
Assigning permissions to allow and deny
access to AWS resources
Providing secure VPN access to AWS
Managing access to AWS services
Creating and managing users and groups
11. AWS VPN isn't an IAM feature. True
True
Flase
12. What is a primary function of IAM in Creating and managing users and groups
AWS?
C02) Study Quiz – 01 Guide 2026
1. What is an IAM Policy? A JSON document which defines one or more
permissions
A JSON document which defines one or
more permissions
The policy which determines how your
AWS bill will be paid
A file containing a user's private SSH key
A CSV file which contains a users Access
Key and Secret Access Key
2. IAM policy An IAM policy is an object in AWS that, when
associated with an identity or resource, de-
fines their permissions. AWS evaluates these
policies when an IAM principal (user or role)
makes a request. Permissions in the poli-
cies determine whether the request is al-
lowed or denied. Most policies are stored in
AWS as JSON documents. AWS supports six
types of policies: identity-based policies, re-
source-based policies, permissions bound-
aries, Organizations SCPs, ACLs, and session
policies.
3. Which of the following is NOT a feature of Allows you to set up biometric authentication,
IAM? so that no passwords are required
Identity federation for delegated access
to the AWS Management Console or AWS IAM doesn't have a feature to handle biomet-
ric authentication.
APIs
Next question
, AWS Certified Developer - Associate (DVA-
C02) Study Quiz – 01 Guide 2026
Fine-grained access control to AWS re-
sources
Allows you to set up biometric authentica-
tion, so that no passwords are required
Centralized control of your AWS account
4. IAM allows centralized control of AWS ac- True
counts.
True
False
5. Which of the following statements is NOT AWS recommends that EC2 instances have
true? credentials stored on them so that the in-
stances can access other resources (such as
AWS offers EC2 Instance Connect, a con- S3 buckets).
venient and robust solution for estab-
lishing connections to Linux instances
You can hard-code AWS access keys into your
through Secure Shell (SSH).
application or instances, but you're faced
AWS recommends IAM roles so that your with the added responsibility of distributing
applications can securely make API re- them to the instance securely and then the
quests from your instances. management headache of regularly rotating
them. AWS doesn't recommend this practice.
Control access to Amazon EC2 resources
by setting up security groups.
AWS recommends that EC2 instances
have credentials stored on them so that
the instances can access other resources
(such as S3 buckets).
6. IAM Role
, AWS Certified Developer - Associate (DVA-
C02) Study Quiz – 01 Guide 2026
Which IAM entity can you use to delegate
access to other trusted entities such as
IAM users, applications, or AWS services
like EC2?
IAM Role
IAM User
IAM Group
IAM Web Identity Federation
7. Groups Groups let you specify permissions for mul-
tiple users, which can make it easier to man-
age the permissions for those users.
8. IAM Role to delegate access to IAM users managed
within your account, to IAM users under a dif-
ferent AWS account, to a web service ottered
by AWS such as Amazon Elastic Compute
Cloud (Amazon EC2), or to an external user
authenticated by an external identity provider
(IdP) service that is compatible with SAML 2.0
or OpenID Connect, or a custom-built identity
broker. IAM Roles.
IAM roles allow applications to securely make
API requests from instances, without requir-
ing you to manage the security credentials
that the applications use.
9. Which statement best describes IAM? IAM allows you to manage users, groups, and
roles and their corresponding level of access
IAM allows you to manage users' pass- to the AWS Platform.
words only. AWS staff must create new
users for your organization. This is done
, AWS Certified Developer - Associate (DVA-
C02) Study Quiz – 01 Guide 2026
by raising a ticket.
IAM allows you to manage users, groups,
and roles and their corresponding level of
access to the AWS Platform.
IAM stands for Improvised Application
Management, and it allows you to de-
ploy and manage applications in the AWS
Cloud.
IAM allows you to manage permissions
for AWS resources only.
10. Which of the following is NOT a use of IAM Providing secure VPN access to AWS
in AWS?
Assigning permissions to allow and deny
access to AWS resources
Providing secure VPN access to AWS
Managing access to AWS services
Creating and managing users and groups
11. AWS VPN isn't an IAM feature. True
True
Flase
12. What is a primary function of IAM in Creating and managing users and groups
AWS?
