Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon DVA-C02 Exam - Topic 3 Question 62 Discussion

A company has an existing application that has hardcoded database credentials A developer needs to modify the existing application The application is deployed in two AWS Regions with an active-passive failover configuration to meet company's disaster recovery strategyThe developer needs a solution to store the credentials outside the code. The solution must comply With the company's disaster recovery strategyWhich solution Will meet these requirements in the MOST secure way?
A) Store the credentials in AWS Secrets Manager in the primary Region. Enable secret replication to the secondary Region Update the application to use the Amazon Resource Name (ARN) based on the Region.
B) Store credentials in AWS Systems Manager Parameter Store in the primary Region. Enable parameter replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region.
C) Store credentials in a config file. Upload the config file to an S3 bucket in me primary Region. Enable Cross-Region Replication (CRR) to an S3 bucket in the secondary region. Update the application to access the config file from the S3 bucket based on the Region.
D) Store credentials in a config file. Upload the config file to an Amazon Elastic File System (Amazon EFS) file system. Update the application to use the Amazon EFS file system Regional endpoints to access the config file in the primary and secondary Regions.

Amazon DVA-C02 Exam - Topic 3 Question 62 Discussion

Actual exam question for Amazon's DVA-C02 exam
Question #: 62
Topic #: 3
[All DVA-C02 Questions]

A company has an existing application that has hardcoded database credentials A developer needs to modify the existing application The application is deployed in two AWS Regions with an active-passive failover configuration to meet company's disaster recovery strategy

The developer needs a solution to store the credentials outside the code. The solution must comply With the company's disaster recovery strategy

Which solution Will meet these requirements in the MOST secure way?

Show Suggested Answer Hide Answer
Suggested Answer: A

AWS Secrets Manager is a service that allows you to store and manage secrets, such as database credentials, API keys, and passwords, in a secure and centralized way.It also provides features such as automatic secret rotation, auditing, and monitoring1. By using AWS Secrets Manager, you can avoid hardcoding credentials in your code, which is a bad security practice and makes it difficult to update them.You can also replicate your secrets to another Region, which is useful for disaster recovery purposes2. To access your secrets from your application, you can use the ARN of the secret, which is a unique identifier that includes the Region name.This way, your application can use the appropriate secret based on the Region where it is deployed3.

AWS Secrets Manager

Replicating and sharing secrets

Using your own encryption keys


by Amina at Apr 05, 2026, 08:11 PM

Limited Time Offer

25%

Off

Get Premium DVA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Justine
3 days ago
But A has more features for managing secrets.
upvoted 0 times
...
German
8 days ago
Option B is good too. Parameter Store is simpler and still secure.
upvoted 0 times
...
Meghan
13 days ago
I agree, A is secure and supports replication.
upvoted 0 times
...
Felicidad
18 days ago
I think option A is the best. Secrets Manager is designed for this.
upvoted 0 times
...
Lenita
23 days ago
I’m surprised they even considered EFS for this. Doesn’t make sense.
upvoted 0 times
...
Kris
29 days ago
Wait, why would anyone use a config file? Seems risky!
upvoted 0 times
...
Adrianna
1 month ago
Parameter Store works too, but not as secure as Secrets Manager.
upvoted 0 times
...
Beckie
3 months ago
I agree, Secrets Manager is designed for this!
upvoted 0 times
...
Cassi
3 months ago
Option A is the best choice for security and compliance.
upvoted 0 times
...
Leslie
4 months ago
I vaguely recall that using ARNs for region-specific access is important. So, options A and B seem to align with that requirement, but I’m leaning towards A for the added security features.
upvoted 0 times
...
Isadora
4 months ago
I practiced a similar question where we had to choose between S3 and EFS for storing config files. I think options C and D might not be as secure since they involve config files, which can be less protected.
upvoted 0 times
...
Ligia
4 months ago
I'm not entirely sure, but I think AWS Systems Manager Parameter Store is also a viable option. Option B might work, but I feel like it doesn't have the same level of security as Secrets Manager.
upvoted 0 times
...
Veta
4 months ago
I remember we discussed using AWS Secrets Manager for storing sensitive information securely. It seems like option A could be the best choice since it supports replication.
upvoted 0 times
...

Save Cancel