nerdexam
AmazonAmazon

DVA-C02 · Question #340

DVA-C02 Question #340: Real Exam Question with Answer & Explanation

Sign in or unlock DVA-C02 to reveal the answer and full explanation for question #340. The question stem and answer options stay visible for context.

Submitted by tyler.j· Mar 5, 2026Security

Question

A company runs a payment application on Amazon EC2 instances behind an Application Load Balance. The EC2 instances run in an Auto Scaling group across multiple Availability Zones. The application needs to retrieve application secrets during the application startup and export the secrets as environment variables. These secrets must be encrypted at rest and need to be rotated every month. Which solution will meet these requirements with the LEAST development effort?

Options

  • ASave the secrets in a text file and store the text file in Amazon S3. Provision a customer managed
  • BSave the secrets as strings in AWS Systems Manager Parameter Store and use the default AWS
  • CSave the secrets as base64 encoded environment variables in the application properties.
  • DStore the secrets in AWS Secrets Manager. Provision a new customer master key. Use the key to

Unlock DVA-C02 to see the answer

You've previewed enough free DVA-C02 questions. Unlock DVA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full DVA-C02 PracticeBrowse All DVA-C02 Questions