DBS-C01 Workload-Specific Database Design Practice Question
Exhibit
Refer to the exhibit.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"dynamodb:GetItem",
"dynamodb:PutItem",
"dynamodb:UpdateItem",
"dynamodb:DeleteItem",
"dynamodb:Query"
],
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders"
},
{
"Effect": "Allow",
"Action": [
"dynamodb:GetItem",
"dynamodb:Query"
],
"Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders/index/OrderDateIndex"
}
]
}An IAM policy is attached to an application role that accesses a DynamoDB table named 'Orders'. The table has a global secondary index named 'OrderDateIndex'. The application needs to write new orders and query the index. Based on the exhibit, will the application be able to perform these operations?
⚠ Common exam trap
Candidates often assume a policy allowing actions on a table automatically extends to its global secondary indexes, but DynamoDB requires separate ARN entries for index-level operations like Query.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Yes, the policy allows both writes and querying the index.
The IAM policy grants `dynamodb:PutItem` on the table and `dynamodb:Query` on the index. Since the policy explicitly allows both actions on their respective ARNs, the application can write new orders to the 'Orders' table and query the 'OrderDateIndex' global secondary index. Option B is correct because the policy covers both required operations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Yes, but only writes are allowed; index queries are denied.
Why it's wrong here
Index queries are allowed.
- ✓
Yes, the policy allows both writes and querying the index.
Why this is correct
PutItem allowed on table, Query allowed on index.
- ✗
No, the policy does not grant access to the index.
Why it's wrong here
Index is included in the policy.
- ✗
No, the policy denies Query on the index.
Why it's wrong here
Query is explicitly allowed on the index.
Go deeper
Related to this question
About these practice questions
One of 1,663 original DBS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.