Quiz IT certification exam

Question 1

A company is developing a new web application. An AWS CloudFormation template was created as a part of the build process.

Recently, a change was made to an AWS::RDS::DBInstance resource in the template. The CharacterSetName property was changed to allow the application to process international text. A change set was generated using the new template, which indicated that the existing DB instance should be replaced during an upgrade.

What should a database specialist do to prevent data loss during the stack upgrade?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Deactivate any applications that are using the DB instance. Create a snapshot of the DB instance. Modify the template to add the DBSnapshotIdentifier property with the ID of the DB snapshot. Update the stack and reactivate the applications.

Answer

Create a snapshot of the DB instance. Modify the template to add the DBSnapshotIdentifier property with the ID of the DB snapshot. Update the stack.

Answer

Modify the stack policy using the aws cloudformation update-stack command and the set-stackpolicy command, then make the DB resource protected.

Answer

Create a snapshot of the DB instance. Update the stack. Restore the database to a new instance.

Question 2

A company recently acquired a new business. A database specialist must migrate an unencrypted 12 TB Amazon RDS for MySQL DB instance to a new AWS account. The database specialist needs to minimize the amount of time required to migrate the database.Which solution meets these requirements?

Accepted Answer

Create a snapshot of the source DB instance in the source account. Share the snapshot with the destination account. In the target account, create a DB instance from the snapshot.

Answer

Use AWS Resource Access Manager to share the source DB instance with the destination account. Create a DB instance in the destination account using the shared resource.

Answer

Create a read replica of the DB instance. Give the destination account access to the read replica. In the destination account, create a snapshot of the shared read replica and provision a new RDS for MySQL DB instance.

Answer

Use mysqldump to back up the source database. Create an RDS for MySQL DB instance in the destination account. Use the mysql command to restore the backup in the destination database.

Question 3

A company has applications running on Amazon EC2 instances in a private subnet with no internet connectivity. The company deployed a new application that uses Amazon DynamoDB, but the application cannot connect to the DynamoDB tables. A developer already checked that all permissions are set correctly.What should a database specialist do to resolve this issue while minimizing access to external resources?

Accepted Answer

Create a VPC endpoint for DynamoDB and add a route to the endpoint in the subnet’s route table.

Answer

Add a route to an internet gateway in the subnet’s route table.

Answer

Add a route to a NAT gateway in the subnet’s route table.

Answer

Assign a new security group to the EC2 instances with an outbound rule to ports 80 and 443.

Question 4

The Amazon CloudWatch metric for FreeLocalStorage on an Amazon Aurora MySQL DB instance shows that the amount of local storage is below 10 MB. A database engineer must increase the local storage available in the Aurora DB instance.How should the database engineer meet this requirement?

Accepted Answer

Modify the DB instance to use an instance class that provides more local SSD storage.

Answer

Modify the Aurora DB cluster to enable automatic volume resizing.

Answer

Increase the local storage by upgrading the database engine version.

Answer

Modify the DB instance and configure the required storage volume in the configuration section.

Question 5

A company has an ecommerce web application with an Amazon RDS for MySQL DB instance. The marketing team has noticed some unexpected updates to the product and pricing information on the website, which is impacting sales targets. The marketing team wants a database specialist to audit future database activity to help identify how and when the changes are being made.What should the database specialist do to meet these requirements? (Choose two.)

Accepted Answer

Enable auditing of CONNECT and QUERY_DML events.

Accepted Answer

Publish the database logs to Amazon CloudWatch Logs.

Answer

Create an RDS event subscription to the audit event type.

Answer

SSH to the DB instance and review the database logs.

Answer

Enable Enhanced Monitoring on the DB instance.

Question 6

A large gaming company is creating a centralized solution to store player session state for multiple online games. The workload required key-value storage with low latency and will be an equal mix of reads and writes. Data should be written into the AWS Region closest to the user across the games’ geographically distributed user base. The architecture should minimize the amount of overhead required to manage the replication of data between Regions.Which solution meets these requirements?

Accepted Answer

Amazon RDS for MySQL with multi-Region read replicas

Answer

Amazon Aurora global database

Answer

Amazon RDS for Oracle with GoldenGate

Answer

Amazon DynamoDB global tables

Question 7

A company is running an on-premises application comprised of a web tier, an application tier, and a MySQL database tier. The database is used primarily during business hours with random activity peaks throughout the day. A database specialist needs to improve the availability and reduce the cost of the MySQL database tier as part of the company’s migration to AWS. Which MySQL database option would meet these requirements?

Accepted Answer

Amazon Aurora MySQL cluster

Answer

Amazon RDS for MySQL with Multi-AZ

Answer

Amazon Aurora Serverless MySQL cluster

Answer

Amazon RDS for MySQL with read replica

Question 8

A company wants to migrate its Microsoft SQL Server Enterprise Edition database instance from onpremises to AWS. A deep review is performed and the AWS Schema Conversion Tool (AWS SCT) provides options for running this workload on Amazon RDS for SQL Server Enterprise Edition, Amazon RDS for SQL Server Standard Edition, Amazon Aurora MySQL, and Amazon Aurora PostgreSQL. The company does not want to use its own SQL server license and does not want to change from Microsoft SQL Server.What is the MOST cost-effective and operationally efficient solution?

Accepted Answer

Run SQL Server Standard Edition on Amazon RDS.

Answer

Run SQL Server Enterprise Edition on Amazon EC2.

Answer

Run SQL Server Enterprise Edition on Amazon RDS.

Answer

Run Amazon Aurora MySQL leveraging SQL Server on Linux compatibility libraries.

Question 9

A company’s ecommerce website uses Amazon DynamoDB for purchase orders. Each order is made up of a Customer ID and an Order ID. The DynamoDB table uses the Customer ID as the partition key and the Order ID as the sort key.To meet a new requirement, the company also wants the ability to query the table by using a third attribute named Invoice ID. Queries using the Invoice ID must be strongly consistent. A database specialist must provide this capability with optimal performance and minimal overhead.What should the database administrator do to meet these requirements?

Accepted Answer

Recreate the table by using the latest snapshot while adding a local secondary index on Invoice ID.

Answer

Add a global secondary index on Invoice ID to the existing table.

Answer

Add a local secondary index on Invoice ID to the existing table.

Answer

Use the partition key and a FilterExpression parameter with a filter on Invoice ID for all queries.

Question 10

A company wants to migrate its on-premises MySQL databases to Amazon RDS for MySQL. To comply with the company’s security policy, all databases must be encrypted at rest. RDS DB instance snapshots must also be shared across various accounts to provision testing and staging environments.Which solution meets these requirements?

Accepted Answer

Create an RDS for MySQL DB instance with an AWS Key Management Service (AWS KMS) customer managed CMK. Update the key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

Answer

Create an RDS for MySQL DB instance with an AWS managed CMK. Create a new key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

Answer

Create an RDS for MySQL DB instance with an AWS owned CMK. Create a new key policy to include the administrator user name of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

Answer

Create an RDS for MySQL DB instance with an AWS CloudHSM key. Update the key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.

Question 11

A retail company manages a web application that stores data in an Amazon DynamoDB table. The company is undergoing account consolidation efforts. A database engineer needs to migrate the DynamoDB table from the current AWS account to a new AWS account.Which strategy meets these requirements with the LEAST amount of administrative work?

Accepted Answer

Use AWS Data Pipeline in the current account to export the data from the DynamoDB table to a file in Amazon S3. Use Data Pipeline to import the data from the S3 file to a DynamoDB table in the new account.

Answer

Use AWS Glue to crawl the data in the DynamoDB table. Create a job using an available blueprint to export the data to Amazon S3. Import the data from the S3 file to a DynamoDB table in the new account.

Answer

Create an AWS Lambda function to scan the items of the DynamoDB table in the current account and write to a file in Amazon S3. Create another Lambda function to read the S3 file and restore the items of a DynamoDB table in the new account.

Answer

Configure Amazon DynamoDB Streams for the DynamoDB table in the current account. Create an AWS Lambda function to read from the stream and write to a file in Amazon S3. Create another Lambda function to read the S3 file and restore the items to a DynamoDB table in the new account.

Question 12

A company uses the Amazon DynamoDB table contractDB in us-east-1 for its contract system with the following schema: orderID (primary key) timestamp (sort key) contract (map) createdBy (string) customerEmail (string) After a problem in production, the operations team has asked a database specialist to provide an IAM policy to read items from the database to debug the application. In addition, the developer is not allowed to access the value of the customerEmail field to stay compliant.Which IAM policy should the database specialist use to achieve these requirements?

Accepted Answer

Question 13

A company has an application that uses an Amazon DynamoDB table to store user dat a. Every morning, a single-threaded process calls the DynamoDB API Scan operation to scan the entire table and generate a critical start-of-day report for management. A successful marketing campaign recently doubled the number of items in the table, and now the process takes too long to run and the report is not generated in time.A database specialist needs to improve the performance of the process. The database specialist notes that, when the process is running, 15% of the table’s provisioned read capacity units (RCUs) are being used.What should the database specialist do?

Accepted Answer

Use four threads and parallel DynamoDB API Scan operations.

Answer

Enable auto scaling for the DynamoDB table.

Answer

Double the table’s provisioned RCUs.

Answer

Set the Limit and Offset parameters before every call to the API.

Question 14

A company is building a software as a service application. As part of the new user sign-on workflow, a Python script invokes the CreateTable operation using the Amazon DynamoDB API. After the call returns, the script attempts to call PutItem.Occasionally, the PutItem request fails with a ResourceNotFoundException error, which causes the workflow to fail. The development team has confirmed that the same table name is used in the two API calls. How should a database specialist fix this issue?

Accepted Answer

Change the application to call DescribeTable periodically until the TableStatus is ACTIVE, then call PutItem.

Answer

Add an allow statement for the dynamodb:PutItem action in a policy attached to the role used by the application creating the table.

Answer

Set the StreamEnabled property of the StreamSpecification parameter to true, then call PutItem.

Answer

Add a ConditionExpression parameter in the PutItem request.

Question 15

To meet new data compliance requirements, a company needs to keep critical data durably stored and readily accessible for 7 years. Data that is more than 1 year old is considered archival data and must automatically be moved out of the Amazon Aurora MySQL DB cluster every week. On average, around 10 GB of new data is added to the database every month. A database specialist must choose the most operationally efficient solution to migrate the archival data to Amazon S3.Which solution meets these requirements?

Accepted Answer

Configure an AWS Lambda function that exports archival data from the DB cluster to Amazon S3 using a SELECT INTO OUTFILE S3 statement, then deletes the archival data from the DB cluster. Schedule the Lambda function to run weekly using Amazon EventBridge (Amazon CloudWatch Events).

Answer

Create a custom script that exports archival data from the DB cluster to Amazon S3 using a SQL view, then deletes the archival data from the DB cluster. Launch an Amazon EC2 instance with a weekly cron job to execute the custom script.

Answer

Configure two AWS Lambda functions: one that exports archival data from the DB cluster to Amazon S3 using the mysqldump utility, and another that deletes the archival data from the DB cluster. Schedule both Lambda functions to run weekly using Amazon EventBridge (Amazon CloudWatch Events).

Answer

Use AWS Database Migration Service (AWS DMS) to continually export the archival data from the DB cluster to Amazon S3. Configure an AWS Data Pipeline process to run weekly that executes a custom SQL script to delete the archival data from the DB cluster.

Question 16

A company developed a new application that is deployed on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances use the security group named sg-application-servers.The company needs a database to store the data from the application and decides to use an Amazon RDS for MySQL DB instance. The DB instance is deployed in private DB subnet.What is the MOST restrictive configuration for the DB instance security group?

Accepted Answer

Only allow incoming traffic from   the sg-application-servers security group on port 3306.

Answer

Only allow incoming traffic from   the sg-application-servers security group on port 443.

Answer

Only allow incoming traffic from   the subnet of the application servers on port 3306.

Answer

Only allow incoming traffic from   the subnet of the application servers on port 443.

Question 17

A company is moving its fraud detection application from on premises to the AWS Cloud and is using Amazon Neptune for data storage. The company has set up a 1 Gbps AWS Direct Connect connection to migrate 25 TB of fraud detection data from the on-premises data center to a Neptune DB instance.The company already has an Amazon S3 bucket and an S3 VPC endpoint, and 80% of the company’s network bandwidth is available.How should the company perform this data load?

Accepted Answer

Use AWS DataSync to transfer the data from on premises to the S3 bucket. Use the Loader command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

Answer

Use an AWS SDK with a multipart upload to transfer the data from on premises to the S3 bucket. Use the Copy command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

Answer

Use AWS Database Migration Service (AWS DMS) to transfer the data from on premises to the S3 bucket. Use the Loader command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

Answer

Use the AWS CLI to transfer the data from on premises to the S3 bucket. Use the Copy command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

Question 18

A company migrated one of its business-critical database workloads to an Amazon Aurora Multi-AZ DB cluster. The company requires a very low RTO and needs to improve the application recovery time after database failovers.Which approach meets these requirements?

Accepted Answer

Create an Amazon RDS Proxy database proxy and update client connections to point to the proxy endpoint.

Answer

Set the max_connections parameter to 16,000 in the instance-level parameter group.

Answer

Modify the client connection timeout to 300 seconds.

Answer

Enable the query cache at the instance level.

Question 19

A company is using an Amazon RDS for MySQL DB instance for its internal applications. A security audit shows that the DB instance is not encrypted at rest. The company’s application team needs to encrypt the DB instance.What should the team do to meet this requirement?

Accepted Answer

Stop the DB instance and create a snapshot. Copy the snapshot into another encrypted snapshot. Restore the encrypted snapshot to a new encrypted DB instance. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.

Answer

Stop the DB instance and modify it to enable encryption. Apply this setting immediately without waiting for the next scheduled RDS maintenance window.

Answer

Stop the DB instance and create an encrypted snapshot. Restore the encrypted snapshot to a new encrypted DB instance. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.

Answer

Create an encrypted read replica of the DB instance. Promote the read replica to master. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.

Question 20

A database specialist must create nightly backups of an Amazon DynamoDB table in a mission-critical workload as part of a disaster recovery strategy.Which backup methodology should the database specialist use to MINIMIZE management overhead?

Accepted Answer

Create a backup plan using AWS Backup, specify a backup frequency of every 24 hours, and give the plan a nightly backup window.

Answer

Install the AWS CLI on an Amazon EC2 instance. Write a CLI command that creates a backup of the DynamoDB table. Create a scheduled job or task that executes the command on a nightly basis.

Answer

Create an AWS Lambda function that creates a backup of the DynamoDB table. Create an Amazon CloudWatch Events rule that executes the Lambda function on a nightly basis.

Answer

Configure DynamoDB backup and restore for an on-demand backup frequency of every 24 hours.

Question 21

A company is using a Single-AZ Amazon RDS for MySQL DB instance for development. The DB instance is experiencing slow performance when queries are executed. Amazon CloudWatch metrics indicate that the instance requires more I/O capacity.Which actions can a database specialist perform to resolve this issue? (Choose two.)

Accepted Answer

Change to a database instance class with higher throughput.

Accepted Answer

Convert from General Purpose to Provisioned IOPS (PIOPS).

Answer

Restart the application tool used to execute queries.

Answer

Convert from Single-AZ to Multi-AZ.

Answer

Increase the I/O parameter in Amazon RDS Enhanced Monitoring.

Question 22

A company has an AWS CloudFormation template written in JSON that is used to launch new Amazon RDS for MySQL DB instances. The security team has asked a database specialist to ensure that the master password is automatically rotated every 30 days for all new DB instances that are launched using the template.What is the MOST operationally efficient solution to meet these requirements?

Accepted Answer

Create an AWS Lambda function to rotate the secret. Modify the CloudFormation template to add an AWS::SecretsManager::RotationSchedule resource. Configure the RotationLambdaARN value and, for the RotationRules property, set the AutomaticallyAfterDays parameter to 30.

Answer

Save the password in an Amazon S3 object. Encrypt the S3 object with an AWS KMS key. Set the KMS key to be rotated every 30 days by setting the EnableKeyRotation property to true. Use a CloudFormation custom resource to read the S3 object to extract the password.

Answer

Modify the CloudFormation template to use the AWS KMS key as the database password. Configure an Amazon EventBridge rule to invoke the KMS API to rotate the key every 30 days by setting the ScheduleExpression parameter to ***/30***.

Answer

Integrate the Amazon RDS for MySQL DB instances with AWS IAM and centrally manage the master database user password.

Question 23

A startup company is building a new application to allow users to visualize their on-premises and cloud networking components. The company expects billions of components to be stored and requires responses in milliseconds. The application should be able to identify:The networks and routes affected if a particular component fails.The networks that have redundant routes between them.The networks that do not have redundant routes between them. The fastest path between two networks.Which database engine meets these requirements?

Accepted Answer

Amazon Neptune

Answer

Amazon Aurora MySQL

Answer

Amazon ElastiCache for Redis

Answer

Amazon DynamoDB

Question 24

An online retail company is planning a multi-day flash sale that must support processing of up to 5,000 orders per second. The number of orders and exact schedule for the sale will vary each day.During the sale, approximately 10,000 concurrent users will look at the deals before buying items.Outside of the sale, the traffic volume is very low. The acceptable performance for read/write queries should be under 25 ms. Order items are about 2 KB in size and have a unique identifier. The company requires the most cost-effective solution that will automatically scale and is highly available.Which solution meets these requirements?

Accepted Answer

Amazon DynamoDB with on-demand capacity mode

Answer

Amazon Aurora with one writer node and an Aurora Replica with the parallel query feature enabled

Answer

Amazon DynamoDB with provisioned capacity mode with 5,000 write capacity units (WCUs) and 10,000 read capacity units (RCUs)

Answer

Amazon Aurora with one writer node and two cross-Region Aurora Replicas

Question 25

A ride-hailing application uses an Amazon RDS for MySQL DB instance as persistent storage for bookings. This application is very popular and the company expects a tenfold increase in the user base in next few months. The application experiences more traffic during the morning and evening hours.This application has two parts:An in-house booking component that accepts online bookings that directly correspond to simultaneous requests from users.A third-party customer relationship management (CRM) component used by customer care representatives. The CRM uses queries to access booking data.A database specialist needs to design a cost-effective database solution to handle this workload.Which solution meets these requirements?

Accepted Answer

Use Amazon DynamoDB to accept the bookings. Enable DynamoDB Streams and associate an AWS Lambda function to capture changes and push the booking data to Amazon Athena, which is used by the CRM.

Answer

Use Amazon ElastiCache for Redis to accept the bookings. Associate an AWS Lambda function to capture changes and push the booking data to the RDS for MySQL DB instance used by the CRM.

Answer

Use Amazon DynamoDB to accept the bookings. Enable DynamoDB Streams and associate an AWS Lambda function to capture changes and push the booking data to an Amazon SQS queue. This triggers another Lambda function that pulls data from Amazon SQS and writes it to the RDS for MySQL DB instance used by the CRM.

Answer

Use Amazon ElastiCache for Redis to accept the bookings. Associate an AWS Lambda function to capture changes and push the booking data to an Amazon Redshift database used by the CRM.

Question 26

Amazon Aurora MySQL is being used by an ecommerce business to migrate its main application database. The firm is now doing OLTP stress testing using concurrent database connections. A database professional detected sluggish performance for several particular write operations during the first round of testing.Examining the Amazon CloudWatch stats for the Aurora DB cluster revealed a CPU usage of 90%.Which actions should the database professional take to determine the main cause of excessive CPU use and sluggish performance most effectively? (Select two.)

Accepted Answer

Enable Enhanced Monitoring at less than 30 seconds of granularity to review the operating system metrics before the next round of tests.

Accepted Answer

Review Amazon RDS Performance Insights to identify the top SQL statements and wait events.

Answer

Review the VolumeBytesUsed metric in CloudWatch to see if there is a spike in write I/O.

Answer

Review Amazon RDS API calls in AWS CloudTrail to identify long-running queries.

Answer

Enable Advance Auditing to log QUERY events in Amazon CloudWatch before the next round of tests.

Question 27

A financial organization must ensure that the most current 90 days of MySQL database backups are accessible. Amazon RDS for MySQL DB instances are used to host all MySQL databases. A database expert must create a solution that satisfies the criteria for backup retention with the least amount of development work feasible.Which strategy should the database administrator take?

Accepted Answer

Use AWS Backup to build a backup plan for the required retention period. Assign the DB instances to the backup plan.

Answer

Modify the DB instances to enable the automated backup option. Select the required backup retention period.

Answer

Automate a daily cron job on an Amazon EC2 instance to create MySQL dumps, transfer to Amazon S3, and implement an S3 Lifecycle policy to meet the retention requirement.

Answer

Use AWS Lambda to schedule a daily manual snapshot of the DB instances. Delete snapshots that exceed the retention requirement.

Question 28

A business is operating an on-premises application that is divided into three tiers: web, application, and MySQL database. The database is predominantly accessed during business hours, with occasional bursts of activity throughout the day.As part of the company's shift to AWS, a database expert wants to increase the availability and minimize the cost of the MySQL database tier.Which MySQL database choice satisfies these criteria?

Accepted Answer

Amazon Aurora Serverless MySQL cluster

Answer

Amazon RDS for MySQL with Multi-AZ

Answer

Amazon Aurora MySQL cluster

Answer

Amazon RDS for MySQL with read replica

Question 29

A stock market analysis firm maintains two locations: one in the us-east-1 Region and another in the eu-west-2 Region. The business want to build an AWS database solution capable of providing rapid and accurate updates.Dashboards with advanced analytical queries are used to present data in the eu-west-2 office.Because the corporation will use these dashboards to make purchasing choices, they must have less than a second to obtain application data.Which solution satisfies these criteria and gives the MOST CURRENT dashboard?

Accepted Answer

Use an Amazon Aurora global database. Deploy the primary DB cluster in us-east-1. Deploy the secondary DB cluster in eu-west-2. Configure the dashboard application to read from the secondary cluster.

Answer

Deploy an Amazon RDS DB instance in us-east-1 with a read replica instance in eu-west-2. Create an Amazon ElastiCache cluster in eu-west-2 to cache data from the read replica to generate the dashboards.

Answer

Use an Amazon DynamoDB global table in us-east-1 with replication into eu-west-2. Use multiactive replication to ensure that updates are quickly propagated to eu-west-2.

Answer

Deploy an Amazon RDS for MySQL DB instance in us-east-1 with a read replica instance in eu-west- 2. Configure the dashboard application to read from the read replica.

Question 30

A significant automotive manufacturer is switching a mission-critical finance application's database to Amazon DynamoDB. According to the company's risk and compliance policy, any update to the database must be documented as a log entry for auditing purposes. Each minute, the system anticipates about 500,000 log entries. Log entries should be kept in Apache Parquet files in batches of at least 100,000 records per file.How could a database professional approach these needs while using DynamoDB?

Accepted Answer

Enable Amazon DynamoDB Streams on the table. Create an AWS Lambda function triggered by the stream. Write the log entries to an Amazon Kinesis Data Firehose delivery stream with buffering and Amazon S3 as the destination.

Answer

Enable Amazon DynamoDB Streams on the table. Create an AWS Lambda function triggered by the stream. Write the log entries to an Amazon S3 object.

Answer

Create a backup plan in AWS Backup to back up the DynamoDB table once a day. Create an AWS Lambda function that restores the backup in another table and compares both tables for changes. Generate the log entries and write them to an Amazon S3 object.

Answer

Enable AWS CloudTrail logs on the table. Create an AWS Lambda function that reads the log files once an hour and filters DynamoDB API actions. Write the filtered log files to Amazon S3.

Question 31

A major organization maintains a number of Amazon DB clusters. Each of these clusters is configured differently to meet certain needs. These configurations may be classified into wider groups based on the team and use case.A database administrator wishes to streamline the process of storing and updating these settings.Additionally, the database administrator want to guarantee that changes to certain configuration categories are automatically implemented to all instances as necessary.Which AWS service or functionality will assist in automating and achieving this goal?

Accepted Answer

DB parameter group

Answer

AWS Systems Manager Parameter Store

Answer

AWS Config

Answer

AWS Secrets Manager

Question 32

In one AWS account, a business runs a two-tier ecommerce application. An Amazon RDS for MySQL Multi-AZ database instance serves as the application's backend. A developer removed the database instance in the production environment by accident. Although the organization recovers the database, the incident results in hours of outage and financial loss.Which combination of adjustments would reduce the likelihood that this error will occur again in the future? (Select three.)

Accepted Answer

Grant least privilege to groups, IAM users, and roles.

Accepted Answer

Enable deletion protection on existing production DB instances.

Accepted Answer

Use an ACL policy to restrict users from DB instance deletion.

Answer

Allow all users to restore a database from a backup.

Answer

Enable AWS CloudTrail logging and Enhanced Monitoring.

Question 33

A database specialist needs to configure an Amazon RDS for MySQL DB instance to close noninteractive connections that are inactive after 900 seconds.What should the database specialist do to accomplish this task?

Accepted Answer

Create a custom DB parameter group and set the wait_timeout parameter value to 900. Associate the DB instance with the custom parameter group.

Answer

Connect to the MySQL database and run the SET SESSION wait_timeout=900 command.

Answer

Edit the my.cnf file and set the wait_timeout parameter value to 900. Restart the DB instance.

Answer

Modify the default DB parameter group and set the wait_timeout parameter value to 900.

Question 34

A database professional maintains a fleet of Amazon RDS database instances that are configured to utilize the default database parameter group. A database expert must connect a custom parameter group with certain database instances.When will the instances be allocated to this new parameter group once the database specialist performs this change?

Accepted Answer

After the DB instances are manually rebooted

Answer

Instantaneously after the change is made to the parameter group

Answer

In the next scheduled maintenance window of the DB instances

Answer

Within 24 hours after the change is made to the parameter group

Question 35

A small startup firm wishes to move a 4 TB MySQL database from on-premises to AWS through an Amazon RDS for MySQL DB instance.Which migration approach would result in the LEAST amount of downtime?

Accepted Answer

Deploy a new RDS for MySQL DB instance and configure it for access from the on-premises data center. Use the mysqldump utility to create an initial snapshot from the on-premises MySQL server, and copy it to an Amazon S3 bucket. Import the snapshot into the DB instance using the MySQL utilities running on an Amazon EC2 instance. Establish replication into the new DB instance using MySQL replication. Stop application access to the on-premises MySQL server and let the remaining transactions replicate over. Point the application to the DB instance.

Answer

Deploy a new RDS for MySQL DB instance and configure it for access from the on-premises data center. Use the mysqldump utility to create an initial snapshot from the on-premises MySQL server, and copy it to an Amazon S3 bucket. Import the snapshot into the DB instance utilizing the MySQL utilities running on an Amazon EC2 instance. Immediately point the application to the DB instance.

Answer

Deploy a new Amazon EC2 instance, install the MySQL software on the EC2 instance, and configure networking for access from the on-premises data center. Use the mysqldump utility to create a snapshot of the on-premises MySQL server. Copy the snapshot into the EC2 instance and restore it into the EC2 MySQL instance. Use AWS DMS to migrate data into a new RDS for MySQL DB instance. Point the application to the DB instance.

Answer

Deploy a new Amazon EC2 instance, install the MySQL software on the EC2 instance, and configure networking for access from the on-premises data center. Use the mysqldump utility to create a snapshot of the on-premises MySQL server. Copy the snapshot into an Amazon S3 bucket and import the snapshot into a new RDS for MySQL DB instance using the MySQL utilities running on an EC2 instance. Point the application to the DB instance.

Question 36

Amazon RDS for Oracle with Transparent Data Encryption is used by a financial services organization (TDE). At all times, the organization is obligated to encrypt its data at rest. The decryption key must be widely distributed, and access to the key must be restricted. The organization must be able to rotate the encryption key on demand to comply with regulatory requirements. If any possible security vulnerabilities are discovered, the organization must be able to disable the key. Additionally, the company's overhead must be kept to a minimal.What method should the database administrator use to configure the encryption to fulfill these specifications?

Accepted Answer

AWS Key Management Service (AWS KMS) CMK with customer-provided material

Answer

AWS CloudHSM

Answer

AWS Key Management Service (AWS KMS) with an AWS managed key

Answer

AWS Key Management Service (AWS KMS) with server-side encryption

Question 37

A business is launching a new Amazon RDS for SQL Server database instance. The organization wishes to allow auditing of the SQL Server database.Which measures should a database professional perform in combination to achieve this requirement? (Select two.)

Accepted Answer

Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store audit logs on Amazon S3.

Accepted Answer

Set up an options group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the options group with the DB instance.

Answer

Set up a parameter group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the parameter group with the DB instance.

Answer

Disable Multi-AZ on the DB instance, and then enable auditing. Enable Multi-AZ after auditing is enabled.

Answer

Disable automated backup on the DB instance, and then enable auditing. Enable automated backup after auditing is enabled.

Question 38

A business maintains a SQL Server database on-premises. Active Directory authentication is used to provide users access to the database. The organization transferred their database successfully to Amazon RDS for SQL Server. The organization, however, has reservations regarding user authentication in the AWS Cloud environment.Which authentication solution should a database professional provide?

Accepted Answer

Establish a forest trust between the on-premises Active Directory and AWS Directory Service for Microsoft Active Directory. Ensure RDS for SQL Server is using mixed mode authentication. Use the RDS master user credentials to connect to the DB instance and configure SQL Server logins and users from the Active Directory users and groups.

Answer

Deploy Active Directory Federation Services (AD FS) on premises and configure it with an onpremises Active Directory. Set up delegation between the on- premises AD FS and AWS Security Token Service (AWS STS) to map user identities to a role using theAmazonRDSDirectoryServiceAccess managed IAM policy.

Answer

Establish a forest trust between the on-premises Active Directory and AWS Directory Service for Microsoft Active Directory. Use AWS SSO to configure an Active Directory user delegated to access the databases in RDS for SQL Server.

Answer

Use Active Directory Connector to redirect directory requests to the company ?€™s on-premises Active Directory without caching any information in the cloud. Use the RDS master user credentials to connect to the DB instance and configure SQL Server logins and users from the Active Directory users and groups.

Question 39

A database expert is responsible for building a highly available online transaction processing (OLTP) solution that makes use of Amazon RDS for MySQL production databases. Disaster recovery criteria include a cross-regional deployment and an RPO and RTO of 5 and 30 minutes, respectively.What should the database professional do to ensure that the database meets the criteria for high availability and disaster recovery?

Accepted Answer

Use Multi-AZ and deploy a read replica in a secondary Region.

Answer

Use a Multi-AZ deployment in each Region.

Answer

Use read replica deployments in all Availability Zones of the secondary Region.

Answer

Use Multi-AZ and read replica deployments within a Region.

Question 40

A financial services organization employs an Amazon Aurora PostgreSQL DB cluster to host an application on AWS. No log files detailing database administrator activity were discovered during a recent examination. A database professional must suggest a solution that enables access to the database and maintains activity logs. The solution should be simple to implement and have a negligible effect on performance.Which database specialist solution should be recommended?

Accepted Answer

Enable Aurora Database Activity Streams on the database in asynchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Firehose destination to an Amazon S3 bucket.

Answer

Enable Aurora Database Activity Streams on the database in synchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Kinesis Data Firehose destination to an Amazon S3 bucket.

Answer

Create an AWS CloudTrail trail in the Region where the database runs. Associate the database activity logs with the trail.

Answer

Allow connections to the DB cluster through a bastion host only. Restrict database access to the bastion host and application servers. Push the bastion host logs to Amazon CloudWatch Logs using the CloudWatch Logs agent.

Amazon DBS-C01 Practice Test 4

Amazon DBS-C01 Practice Tests

Amazon DBS-C01 Practice Test 4

Question

Amazon DBS-C01 Practice Tests

Practice Tests