AWS Developer Associate Awsdevsecurity — practice questions

Explore 2 free Awsdevsecurity questions in AWS Developer Associate Cloudcomputing. Open each question or exercise to read its content, reference answers and available explanation.

Practise Awsdevsecurity with Quill →

Awsdevsecurity questions and exercises with answers

Showing questions 1–2 of 2.

Which AWS service is purpose-built to store, retrieve, and (with supported targets) auto-rotate secrets like database passwords?Read the answer and worked solution →Which service generates and manages encryption keys backed by HSMs, with audit logs and granular key policies?Read the answer and worked solution →

Worked practice questions

Which AWS service is purpose-built to store, retrieve, and (with supported targets) auto-rotate secrets like database passwords?

Amazon Polly
AWS Trusted Advisor
Amazon Pinpoint
AWS Secrets Manager

Show answer and solution

Correct answer: D. AWS Secrets Manager

Secrets Manager stores secrets KMS-encrypted, exposes them via API with IAM, and rotates supported targets (RDS, Redshift, DocumentDB, third-party via Lambda). The others are advisory, TTS, and marketing analytics.

Open this question →

Which service generates and manages encryption keys backed by HSMs, with audit logs and granular key policies?

AWS Key Management Service (KMS)
Amazon S3 Glacier
Amazon Route 53
Amazon CloudWatch

Show answer and solution

Correct answer: A. AWS Key Management Service (KMS)

KMS is the managed crypto-key service — HSM-backed, audit via CloudTrail, key policies + IAM. The others are observability, archival storage, and DNS.