AWS DVA-C02 Study Quiz 06 Practice Test
Guide 2026
1. What is a primary use case for Amazon Web Identity Federation for mobile applications
Cognito?
Monitoring AWS CloudWatch logs
Web Identity Federation for mobile
applications
Secure storage of database connec-
tion strings
Managing AWS EC2 instances
2. The preferred way to use web identity The preferred way to use web identity federation
federation for mobile apps for mobile apps is to use Amazon Cognito.
3. You are working on a mobile phone After the user has successfully logged in to Face-
app for an online retailer that stores book and received an authentication token, Cognito
customer data in DynamoDB. You should be used to exchange the token for tempo-
would like to allow new users to rary access to DynamoDB
sign-up using their Facebook creden-
tials. What is the recommended ap-
proach?
Write your own custom code which
allows the user to log in via Face-
book and receive an authentication to-
ken, then calls the AssumeRoleWith-
WebIdentity API and exchanges the
authentication tokens for temporary
access to DynamoDB
Embed encrypted AWS credentials
, AWS DVA-C02 Study Quiz 06 Practice Test
Guide 2026
into the application code, so that the
application can access DynamoDB on
the user's behalf.
After the user has successfully logged
in to Facebook and received an au-
thentication token, Cognito should be
used to exchange the token for tem-
porary access to DynamoDB
After the user has authenticated with
Facebook, allow them to download en-
crypted AWS credentials to their de-
vice so that the mobile app can access
DynamoDB
4. How does Amazon Cognito work with Amazon Cognito works with external identity
external identity providers that sup- providers that support SAML or OpenID Connect,
port SAML or OpenID Connect ? social identity providers (such as Facebook, Twitter,
Amazon) and you can also integrate your own iden-
tity provider.
5. Which allows users to use their social Web Identity Federation
media account to gain temporary ac-
cess to the AWS platform?
Facebook Sign-In Service
Active Directory Authentication Ser-
vices
Web Confederation Services
Web Identity Federation
6. Web Identity Federation Web identity federation removes the need for cre-
ating individual IAM users. Instead, users can sign
, AWS DVA-C02 Study Quiz 06 Practice Test
Guide 2026
in to an identity provider and then obtain tempo-
rary security credentials from AWS Security Token
Service (AWS STS).
Next question
7. What are the characteristics of an in- An inline policy is embedded in a user, group, or
line policy in AWS IAM? role and will be deleted if the associated identity is
deleted.
An inline policy is independent of the
user, group, or role and persists even
if the associated identity is deleted.
An inline policy can be attached to
multiple users and groups within your
AWS account and cannot be modified.
An inline policy can only be associated
with a user and not with a group or
role.
An inline policy is embedded in a user,
group, or role and will be deleted if the
associated identity is deleted.
8. inline policy An inline policy is a policy that's embedded in an
IAM identity (a user, group, or role). When you use
the AWS Management Console to delete an identi-
ty, the inline policies embedded in the identity are
deleted as well. That's because they are part of the
principal entity.
9. When using Web Identity Federation
to allow a user to access an AWS ser-
Guide 2026
1. What is a primary use case for Amazon Web Identity Federation for mobile applications
Cognito?
Monitoring AWS CloudWatch logs
Web Identity Federation for mobile
applications
Secure storage of database connec-
tion strings
Managing AWS EC2 instances
2. The preferred way to use web identity The preferred way to use web identity federation
federation for mobile apps for mobile apps is to use Amazon Cognito.
3. You are working on a mobile phone After the user has successfully logged in to Face-
app for an online retailer that stores book and received an authentication token, Cognito
customer data in DynamoDB. You should be used to exchange the token for tempo-
would like to allow new users to rary access to DynamoDB
sign-up using their Facebook creden-
tials. What is the recommended ap-
proach?
Write your own custom code which
allows the user to log in via Face-
book and receive an authentication to-
ken, then calls the AssumeRoleWith-
WebIdentity API and exchanges the
authentication tokens for temporary
access to DynamoDB
Embed encrypted AWS credentials
, AWS DVA-C02 Study Quiz 06 Practice Test
Guide 2026
into the application code, so that the
application can access DynamoDB on
the user's behalf.
After the user has successfully logged
in to Facebook and received an au-
thentication token, Cognito should be
used to exchange the token for tem-
porary access to DynamoDB
After the user has authenticated with
Facebook, allow them to download en-
crypted AWS credentials to their de-
vice so that the mobile app can access
DynamoDB
4. How does Amazon Cognito work with Amazon Cognito works with external identity
external identity providers that sup- providers that support SAML or OpenID Connect,
port SAML or OpenID Connect ? social identity providers (such as Facebook, Twitter,
Amazon) and you can also integrate your own iden-
tity provider.
5. Which allows users to use their social Web Identity Federation
media account to gain temporary ac-
cess to the AWS platform?
Facebook Sign-In Service
Active Directory Authentication Ser-
vices
Web Confederation Services
Web Identity Federation
6. Web Identity Federation Web identity federation removes the need for cre-
ating individual IAM users. Instead, users can sign
, AWS DVA-C02 Study Quiz 06 Practice Test
Guide 2026
in to an identity provider and then obtain tempo-
rary security credentials from AWS Security Token
Service (AWS STS).
Next question
7. What are the characteristics of an in- An inline policy is embedded in a user, group, or
line policy in AWS IAM? role and will be deleted if the associated identity is
deleted.
An inline policy is independent of the
user, group, or role and persists even
if the associated identity is deleted.
An inline policy can be attached to
multiple users and groups within your
AWS account and cannot be modified.
An inline policy can only be associated
with a user and not with a group or
role.
An inline policy is embedded in a user,
group, or role and will be deleted if the
associated identity is deleted.
8. inline policy An inline policy is a policy that's embedded in an
IAM identity (a user, group, or role). When you use
the AWS Management Console to delete an identi-
ty, the inline policies embedded in the identity are
deleted as well. That's because they are part of the
principal entity.
9. When using Web Identity Federation
to allow a user to access an AWS ser-
