DVA-C02 Security Practice Question
A developer is creating an IAM policy to allow access to an Amazon DynamoDB table. The policy must allow the user to read and write items, but not to delete the table or modify its schema. Which TWO DynamoDB actions should be included in the policy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
GetItem
GetItem and PutItem are the actions for reading and writing individual items. DeleteTable and UpdateTable are administrative actions that should not be allowed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
UpdateTable
Why it's wrong here
The UpdateTable action is a control plane operation used to modify the configuration or schema of an entire DynamoDB table, such as adjusting provisioned throughput settings or adding/removing global secondary indexes. It does not interact with individual data items within the table, making it unsuitable for the requirement of reading or writing specific data records.
- ✗
Scan
Why it's wrong here
Scan reads multiple items but is not required for reading; the requirement is read items, but Scan is still a read action. However, the question asks for the TWO actions specifically for reading and writing individual items. GetItem and PutItem are the best match.
- ✓
GetItem
Why this is correct
The GetItem action is a fundamental data plane operation in DynamoDB, specifically designed to retrieve a single item from a table. It requires the full primary key (partition key and sort key, if applicable) to uniquely identify and fetch the desired data record, making it the precise action for reading individual items.
- ✗
DeleteTable
Why it's wrong here
The DeleteTable action is a highly destructive control plane operation that permanently removes an entire DynamoDB table, including all its data, indexes, and associated configurations. This action is not related to manipulating individual data items and would grant excessive permissions far beyond merely reading or writing specific records.
- ✓
PutItem
Why this is correct
The PutItem action is a core data plane operation in DynamoDB used to write a single item into a table. This action can either create a new item or completely replace an existing item if an item with the same primary key already exists, making it the direct method for writing individual data records.
Go deeper
Related to this question
About these practice questions
This DVA-C02 question is part of Courseiva's 1,135-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DVA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DVA-C02 exam.