nerdexam
AmazonAmazon

DVA-C02 · Question #285

DVA-C02 Question #285: Real Exam Question with Answer & Explanation

Sign in or unlock DVA-C02 to reveal the answer and full explanation for question #285. The question stem and answer options stay visible for context.

Submitted by fatema_kw· Mar 5, 2026Security

Question

A company has an application that is hosted on Amazon EC2 instances. The application stores objects in an Amazon S3 bucket and allows users to download objects from the S3 bucket. A developer turns on S3 Block Public Access for the S3 bucket. After this change, users report errors when they attempt to download objects. The developer needs to implement a solution so that only users who are signed in to the application can access objects in the S3 bucket. Which combination of steps will meet these requirements in the MOST secure way? (Choose two.)

Options

  • ACreate an EC2 instance profile and role with an appropriate policy. Associate the role with the
  • BCreate an IAM user with an appropriate policy. Store the access key ID and secret access key on
  • CModify the application to use the S3 GeneratePresignedUrl API call.
  • DModify the application to use the S3 GetObject API call and to return the object handle to the
  • EModify the application to delegate requests to the S3 bucket.

Unlock DVA-C02 to see the answer

You've previewed enough free DVA-C02 questions. Unlock DVA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full DVA-C02 PracticeBrowse All DVA-C02 Questions