Quiz IT certification exam

Question 1

A company's applications store data in Amazon Aurora MySQL DB clusters. The company has separate AWS accounts for its production, test, and development environments. To test new functionality in the test environment, the company's development team requires a copy of the production database four times a day.

Which solution meets this requirement with the MOST operational efficiency?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Share the Aurora DB cluster with the test account. Create a clone of the production database in the test account.

Answer

Take a manual snapshot in the production account. Share the snapshot with the test account. Restore the database from the snapshot.

Answer

Take a manual snapshot in the production account. Export the snapshot to Amazon S3. Copy the snapshot to an S3 bucket in the test account. Restore the database from the snapshot.

Answer

Share the Aurora DB cluster with the test account. Create a snapshot of the production database in the test account. Restore the database from the snapshot.

Question 2

An application reads and writes data to an Amazon RDS for MySQL DB instance. A new reporting dashboard needs read-only access to the database. When the application and reports are both under heavy load, the database experiencesperformance degradation. A database specialist needs to improve the database performance.What should the database specialist do to meet these requirements?

Accepted Answer

Create a read replica of the DB instance. Configure the reports to connect to the replication instance endpoint.

Answer

Create a read replica of the DB instance. Configure the application and reports to connect to the cluster endpoint.

Answer

Enable Multi-AZ deployment. Configure the reports to connect to the standby replica.

Answer

Enable Multi-AZ deployment. Configure the application and reports to connect to the cluster endpoint.

Question 3

A financial services company runs an on-premises MySQL database for a critical application. The company is dissatisfied with its current database disaster recovery (DR) solution. The application experiences a significant amount of downtime whenever the database fails over to its DR facility. The application also experiences slower response times when reports are processed on the same database. To minimize the downtime in DR situations, the company has decided to migrate the database to AWS. The company requires a solution that is highly available and the most costeffective.Which solution meets these requirements?

Accepted Answer

Create an Amazon Aurora DB cluster and configure an Aurora Replica in a different Availability Zone. Configure the application to reference the cluster endpoint and report queries to reference the reader endpoint.

Answer

Create an Amazon RDS for MySQL Multi-AZ DB instance and configure a read replica in a different Availability Zone. Configure the application to reference the replica instance endpoint and report queries to reference the primary DB instance endpoint.

Answer

Create an Amazon RDS for MySQL Multi-AZ DB instance and configure a read replica in a different Availability Zone. Configure the application to reference the primary DB instance endpoint and report queries to reference the replica instance endpoint.

Answer

Create an Amazon Aurora DB cluster and configure an Aurora Replica in a different Availability Zone. Configure the application to reference the primary DB instance endpoint and report queries to reference the replica instance endpoint.

Question 4

A company with 500,000 employees needs to supply its employee list to an application used by human resources. Every 30 minutes, the data is exported using the LDAP service to load into a new Amazon DynamoDB table. The data model has a base table with Employee ID for the partition key and a global secondary index with Organization ID as the partition key.While importing the data, a database specialist receives ProvisionedThroughputExceededException errors. After increasing the provisioned write capacity units (WCUs) to 50,000, the specialist receives the same errors. Amazon CloudWatch metrics show a consumption of 1,500 WCUs.What should the database specialist do to address the issue?

Accepted Answer

Change the data model to avoid hot partitions in the global secondary index.

Answer

Enable auto scaling for the table to automatically increase write capacity during bulk imports.

Answer

Modify the table to use on-demand capacity instead of provisioned capacity.

Answer

Increase the number of retries on the bulk loading application.

Question 5

A company has an application that uses an Amazon DynamoDB table as its data store. During normal business days, the throughput requirements from the application are uniform and consist of 5 standard write calls per second to theDynamoDB table. Each write call has 2 KB of data.For 1 hour each day, the company runs an additional automated job on the DynamoDB table that makes 20 write requests per second. No other application writes to the DynamoDB table. The DynamoDB table does not have to meet any additional capacity requirements.How should a database specialist configure the DynamoDB table's capacity to meet these requirements MOST cost-effectively?

Accepted Answer

Use DynamoDB provisioned capacity with 10 WCUs and auto scaling.

Answer

Use DynamoDB provisioned capacity with 5 WCUs and auto scaling.

Answer

Use DynamoDB provisioned capacity with 5 WCUs and a write-through cache that DynamoDB Accelerator (DAX) provides.

Answer

Use DynamoDB provisioned capacity with 10 WCUs and no auto scaling.

Question 6

A company wants to build a new invoicing service for its cloud-native application on AWS. The company has a small development team and wants to focus on service feature development and minimize operations and maintenance as much as possible. The company expects the service to handle billions of requests and millions of new records every day. The service feature requirements, including data access patterns are well-defined. The service has an availability target of 99.99% with a milliseconds latency requirement. The database for the service will be the system of record for invoicing data. Which database solution meets these requirements at the LOWEST cost?

Accepted Answer

Amazon DynamoDB

Answer

Amazon Neptune

Answer

Amazon Aurora PostgreSQL Serverless

Answer

Amazon RDS for PostgreSQL

Question 7

Application developers have reported that an application is running slower as more users are added.The application database is running on an Amazon Aurora DB cluster with an Aurora Replic a. The application is written to take advantage of read scaling through reader endpoints. A database specialist looks at the performance metrics of the database and determines that, as new users were added to the database, the primary instance CPU utilization steadily increased while the Aurora Replica CPU utilization remained steady.How can the database specialist improve database performance while ensuring minimal downtime?

Accepted Answer

Modify a replica to a larger instance size that has more CPU capacity. Then, promote the modified replica.

Answer

Modify the Aurora DB cluster to add more replicas until the overall load stabilizes. Then, reduce the number of replicas once the application meets service level objectives.

Answer

Modify the primary instance to a larger instance size that offers more CPU capacity.

Answer

Restore the Aurora DB cluster to one that has an instance size with more CPU capacity. Then, swap the names of the old and new DB clusters.

Question 8

A company's database specialist implements an AWS Database Migration Service (AWS DMS) task for change data capture (CDC) to replicate data from an on- premises Oracle database to Amazon S3.When usage of the company's application increases, the database specialist notices multiple hours of latency with the CDC.Which solutions will reduce this latency? (Choose two.)

Accepted Answer

Configure the DMS task to run in limited large binary object (LOB) mode.

Accepted Answer

Replicate tables in parallel by creating multiple DMS tasks for sets of tables that do not participate in common transactions.

Answer

Configure the DMS task to run in full large binary object (LOB) mode.

Answer

Create a Multi-AZ replication instance.

Answer

Load tables in parallel by creating multiple replication instances for sets of tables that participate in common transactions.

Question 9

A software company is conducting a security audit of its three-node Amazon Aurora MySQL DB cluster.Which finding is a security concern that needs to be addressed?

Accepted Answer

The IAM credentials used by the application are not rotated regularly.

Answer

The AWS account root user does not have the minimum privileges required for client applications.

Answer

Encryption in transit is not configured for all Aurora native backup processes.

Answer

Each Aurora DB cluster node is not in a separate private VPC with restricted access.

Question 10

A company has an AWS CloudFormation stack that defines an Amazon RDS DB instance. The company accidentally deletes the stack and loses recent data from the DB instance. A database specialist must change the CloudFormation template for the RDS resource to reduce the chance of accidental data loss from the DB instance in the future.Which combination of actions should the database specialist take to meet this requirement? (Choose three.)

Accepted Answer

Set the DeletionProtection property to True.

Accepted Answer

Set the DeleteAutomatedBackups property to False.

Accepted Answer

Set the DeletionPolicy attribute to Retain.

Answer

Set the MultiAZ property to True.

Answer

Set the TerminationProtection property to True.

Answer

Set the DeletionPolicy attribute to No.

Question 11

A company has branch offices in the United States and Singapore. The company has a three-tier web application that uses a shared database. The database runs on an Amazon RDS for MySQL DB instance that is hosted in the us-west-2 Region. The application has a distributed front end that is deployed in us-west-2 and in the ap-southeast-1 Region. The company uses this front end as a dashboard that provides statistics to sales managers in each branch office.The dashboard loads more slowly in the Singapore branch office than in the United States branch office. The company needs a solution so that the dashboard loads consistently for users in each location.Which solution will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Create an RDS read replica in ap-southeast-1 from the primary DB instance in us-west-2. Reconfigure the ap-southeast-1 front-end dashboard to access the read replica.

Answer

Take a snapshot of the DB instance in us-west-2. Create a new DB instance in ap-southeast-2 from the snapshot. Reconfigure the ap-southeast-1 front-end dashboard to access the new DB instance.

Answer

Create a new DB instance in ap-southeast-1. Use AWS Database Migration Service (AWS DMS) and change data capture (CDC) to update the new DB instance in ap-southeast-1. Reconfigure the apsoutheast- 1 front-end dashboard to access the new DB instance.

Answer

Create an RDS read replica in us-west-2, where the primary DB instance resides. Create a read replica in ap-southeast-1 from the read replica in us-west-2. Reconfigure the ap-southeast-1 frontend dashboard to access the read replica in ap-southeast-1.

Question 12

A company is using an Amazon ElastiCache for Redis cluster to host its online shopping website.Shoppers receive the following error when the website's application queries the cluster:Which solutions will resolve this memory issues with the LEAST amount of effort? (Choose three.)

Accepted Answer

Reduce the TTL value for keys on the node.

Accepted Answer

Choose a larger node type.

Accepted Answer

Test different values in the parameter group for the maxmemory-policy parameter to find the ideal value to use.

Answer

Increase the number of nodes.

Answer

Monitor the EngineCPUUtilization Amazon CloudWatch metric. Create an AWS Lambda function to delete keys on nodes when a threshold is reached.

Answer

Increase the TTL value for keys on the node.

Question 13

A company uses Microsoft SQL Server on Amazon RDS in a Multi-AZ deployment as the database engine for its application. The company was recently acquired by another company. A database specialist must rename the database to follow a new naming standard.Which combination of steps should the database specialist take to rename the database? (Choose two.)

Accepted Answer

Turn off Multi-AZ for the DB instance. Rename the database with the rdsadmin.dbo.rds_modify_db_name stored procedure. Turn on Multi-AZ Mirroring.

Accepted Answer

Update the application with the new database connection string.

Answer

Turn off automatic snapshots for the DB instance. Rename the database with the rdsadmin.dbo.rds_modify_db_name stored procedure. Turn on the automatic snapshots.

Answer

Delete all existing snapshots for the DB instance. Use the rdsadmin.dbo.rds_modify_db_name stored procedure.

Answer

Update the DNS record for the DB instance.

Question 14

A company is planning to use Amazon RDS for SQL Server for one of its critical applications. The company's security team requires that the users of the RDS for SQL Server DB instance are authenticated with on-premises Microsoft ActiveDirectory credentials.Which combination of steps should a database specialist take to meet this requirement? (Choose three.)

Accepted Answer

Create a directory by using AWS Directory Service for Microsoft Active Directory.

Accepted Answer

Create an IAM role that uses the AmazonRDSDirectoryServiceAccess managed IAM policy.

Accepted Answer

Create a one-way forest trust from the AWS Directory Service for Microsoft Active Directory directory to the on-premises Active Directory.

Answer

Extend the on-premises Active Directory to AWS by using AD Connector.

Answer

Create an IAM user that uses the AmazonRDSDirectoryServiceAccess managed IAM policy.

Answer

Create an Active Directory domain controller on Amazon EC2.

Question 15

A company is developing an application that performs intensive in-memory operations on advanced data structures such as sorted sets. The application requires sub-millisecond latency for reads and writes. The application occasionally must run a group of commands as an ACID-compliant operation.A database specialist is setting up the database for this application. The database specialist needs the ability to create a new database cluster from the latest backup of the production cluster.Which type of cluster should the database specialist create to meet these requirements?

Accepted Answer

Amazon ElastiCache for Redis

Answer

Amazon ElastiCache for Memcached

Answer

Amazon Neptune

Answer

Amazon DynamoDB Accelerator (DAX)

Question 16

A company uses Amazon Aurora MySQL as the primary database engine for many of its applications.A database specialist must create a dashboard to provide the company with information about user connections to databases. According to compliance requirements, the company must retain all connection logs for at least 7 years.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Enable advanced auditing on the Aurora cluster to log CONNECT events. Export audit logs from Amazon CloudWatch to Amazon S3 by using an AWS Lambda function that is invoked by an Amazon EventBridge (Amazon CloudWatch Events) scheduled event. Build a dashboard by using Amazon QuickSight.

Answer

Capture connection attempts to the Aurora cluster with AWS Cloud Trail by using the DescribeEvents API operation. Create a CloudTrail trail to export connection logs to Amazon S3. Build a dashboard by using Amazon QuickSight.

Answer

Start a database activity stream for the Aurora cluster. Push the activity records to an Amazon Kinesis data stream. Build a dynamic dashboard by using AWS Lambda.

Answer

Publish the DatabaseConnections metric for the Aurora DB instances to Amazon CloudWatch. Build a dashboard by using CloudWatch dashboards.

Question 17

A company requires near-real-time notifications when changes are made to Amazon RDS DB security groups.Which solution will meet this requirement with the LEAST operational overhead?

Accepted Answer

Configure an RDS event notification subscription for DB security group events.

Answer

Create an AWS Lambda function that monitors DB security group changes. Create an Amazon Simple Notification Service (Amazon SNS) topic for notification.

Answer

Turn on AWS CloudTrail. Configure notifications for the detection of changes to DB security groups.

Answer

Configure an Amazon CloudWatch alarm for RDS metrics about changes to DB security groups.

Question 18

A development team asks a database specialist to create a copy of a production Amazon RDS for MySQL DB instance every morning. The development team will use the copied DB instance as a testing environment for development. The original DB instance and the copy will be hosted in different VPCs of the same AWS account. The development team wants the copy to be available by 6 AM each day and wants to use the same endpoint address each day.Which combination of steps should the database specialist take to meet these requirements MOST cost-effectively? (Choose three.)

Accepted Answer

Create a snapshot of the production database each day before the 6 AM deadline.

Accepted Answer

Create an RDS for MySQL DB instance from the snapshot. Select the desired DB instance size.

Accepted Answer

Update a defined Amazon Route 53 CNAME record to point to the copied DB instance.

Answer

Set up an AWS Database Migration Service (AWS DMS) migration task to copy the snapshot to the copied DB instance.

Answer

Use the CopySnapshot action on the production DB instance to create a snapshot before 6 AM.

Answer

Update a defined Amazon Route 53 alias record to point to the copied DB instance.

Question 19

A company is launching a new Amazon RDS for MySQL Multi-AZ DB instance to be used as a data store for a custom-built application. After a series of tests with point-in-time recovery disabled, the company decides that it must have point-in-time recovery reenabled before using the DB instance to store production data.What should a database specialist do so that point-in-time recovery can be successful?

Accepted Answer

Modify the DB instance and configure a backup retention period

Answer

Enable binary logging in the DB parameter group used by the DB instance.

Answer

Modify the DB instance and enable audit logs to be pushed to Amazon CloudWatch Logs.

Answer

Set up a scheduled job to create manual DB instance snapshots.

Question 20

A company has a database fleet that includes an Amazon RDS for MySQL DB instance. During an audit, the company discovered that the data that is stored on the DB instance is unencrypted.A database specialist must enable encryption for the DB instance. The database specialist also must encrypt all connections to the DB instance.Which combination of actions should the database specialist take to meet these requirements?(Choose three.)

Accepted Answer

In the RDS console, choose ? “Enable encryption ?” to encrypt the DB instance by using an AWS Key Management Service (AWS KMS) key.

Accepted Answer

Create a snapshot of the unencrypted DB instance. Encrypt the snapshot by using an AWS Key Management Service (AWS KMS) key. Restore the DB instance from the encrypted snapshot. Delete the original DB instance.

Accepted Answer

Use SSL/TLS from the application to encrypt a connection to the DB instance.

Answer

Encrypt the read replica of the unencrypted DB instance by using an AWS Key Management Service (AWS KMS) key. Fail over the read replica to the primary DB instance.

Answer

Require SSL connections for applicable database user accounts.

Answer

Enable SSH encryption on the DB instance.

Question 21

A company has an ecommerce website that runs on AWS. The website uses an Amazon RDS for MySQL database. A database specialist wants to enforce the use of temporary credentials to access the database.Which solution will meet this requirement?

Accepted Answer

Use AWS Identity and Access Management (IAM) database authentication.

Answer

Use MySQL native database authentication.

Answer

Use AWS Secrets Manager to rotate the credentials.

Answer

Use AWS Systems Manager Parameter Store for authentication.

Question 22

A manufacturing company has an. inventory system that stores information in an Amazon Aurora MySQL DB cluster. The database tables are partitioned. The database size has grown to 3 TB. Users run one-time queries by using a SQL client. Queries that use an equijoin to join large tables are taking a long time to run.Which action will improve query performance with the LEAST operational effort?

Accepted Answer

Enable hash joins on the database by setting the variable optimizer_switch to hash_join=on.

Answer

Migrate the database to a new Amazon Redshift data warehouse.

Answer

Take a snapshot of the DB cluster. Create a new DB instance by using the snapshot, and enable parallel query mode.

Answer

Add an Aurora read replica.

Question 23

A company is running a business-critical application on premises by using Microsoft SQL Server. A database specialist is planning to migrate the instance with several databases to the AWS Cloud. The database specialist will use SQL Server Standard edition hosted on Amazon EC2 Windows instances.The solution must provide high availability and must avoid a single point of failure in the SQL Server deployment architecture. Which solution will meet these requirements?

Accepted Answer

Set up Always On Failover Cluster Instances as a single SQL Server instance. Use Multi-AZ Amazon FSx for Windows File Server as a shared storage option to host the databases.

Answer

Create Amazon RDS for SQL Server Multi-AZ DB instances. Use Amazon S3 as a shared storage option to host the databases.

Answer

Set up Always On availability groups to group one or more user databases that fail over together across multiple SQL Server instances. Use Multi-AZ Amazon FSx for Windows File Server as a shared storage option to host the databases.

Answer

Create an Application Load Balancer to distribute database traffic across multiple EC2 instances in multiple Availability Zones. Use Amazon S3 as a shared storage option to host the databases.

Question 24

A company plans to use AWS Database Migration Service (AWS DMS) to migrate its database from one Amazon EC2 instance to another EC2 instance as a full load task. The company wants the database to be inactive during the migration. The company will use a dms.t3.medium instance to perform the migration and will use the default settings for the migration.Which solution will MOST improve the performance of the data migration?

Accepted Answer

Drop all indexes on the source tables.

Answer

Increase the number of tables that are loaded in parallel.

Answer

Change the processing mode from the batch optimized apply option to transactional mode.

Answer

Enable Multi-AZ on the target database while the full load task is in progress.

Question 25

A finance company migrated its 3 ?¢?’ on-premises PostgreSQL database to an Amazon Aurora PostgreSQL DB cluster. During a review after the migration, a database specialist discovers that the database is not encrypted at rest. The database must be encrypted at rest as soon as possible to meet security requirements. The database specialist must enable encryption for the DB cluster with minimal downtime.Which solution will meet these requirements?

Accepted Answer

Take a snapshot of the unencrypted DB cluster and restore it to a new DB cluster with encryption enabled. Update any database connection strings to reference the new DB cluster endpoint, and then delete the unencrypted DB cluster.

Answer

Modify the unencrypted DB cluster using the AWS Management Console. Enable encryption and choose to apply the change immediately.

Answer

Create an encrypted Aurora Replica of the unencrypted DB cluster. Promote the Aurora Replica as the new master.

Answer

Create a new DB cluster with encryption enabled and use the pg_dump and pg_restore utilities to load data to the new DB cluster. Update any database connection strings to reference the new DB cluster endpoint, and then delete the unencrypted DB cluster.

Question 26

A company has a on-premises Oracle Real Application Clusters (RAC) database. The company wants to migrate the database to AWS and reduce licensing costs. The company's application team wants to store JSON payloads that expire after 28 hours. The company has development capacity if code changes are required.Which solution meets these requirements?

Accepted Answer

Use Amazon DynamoDB and leverage the Time to Live (TTL) feature to automatically expire the data.

Answer

Use Amazon RDS for Oracle with Multi-AZ. Create an AWS Lambda function to purge the expired data. Schedule the Lambda function to run daily using Amazon EventBridge.

Answer

Use Amazon DocumentDB with a read replica in a different Availability Zone. Use DocumentDB change streams to expire the data.

Answer

Use Amazon Aurora PostgreSQL with Multi-AZ and leverage the Time to Live (TTL) feature to automatically expire the data.

Question 27

A database specialist is working on an Amazon RDS for PostgreSQL DB instance that is experiencing application performance issues due to the addition of new workloads. The database has 5 ?¢?’ of storage space with Provisioned IOPS.Amazon CloudWatch metrics show that the average disk queue depth is greater than 200 and that the disk I/O response time is significantly higher than usual.What should the database specialist do to improve the performance of the application immediately?

Accepted Answer

Increase the Provisioned IOPS rate on the storage.

Answer

Increase the available storage space.

Answer

Use General Purpose SSD (gp2) storage with burst credits.

Answer

Create a read replica to offload Read IOPS from the DB instance.

Question 28

A software company uses an Amazon RDS for MySQL Multi-AZ DB instance as a data store for its critical applications. During an application upgrade process, a database specialist runs a custom SQL script that accidentally removes some of the default permissions of the master user.What is the MOST operationally efficient way to restore the default permissions of the master user?

Accepted Answer

Modify the DB instance and set a new master user password.

Answer

Use AWS Secrets Manager to modify the master user password and restart the DB instance.

Answer

Create a new master user for the DB instance.

Answer

Review the IAM user that owns the DB instance, and add missing permissions.

Question 29

An ecommerce company uses Amazon DynamoDB as the backend for its payments system. A new regulation requires the company to log all data access requests for financial audits. For this purpose, the company plans to use AWS logging and save logs to Amazon S3 How can a database specialist activate logging on the database?

Accepted Answer

Use AWS CloudTrail to monitor DynamoDB data-plane and control-plane operations.

Answer

Use AWS CloudTrail to monitor DynamoDB control-plane operations. Create a DynamoDB stream to monitor data-plane operations. Pass the stream to Amazon Kinesis Data Streams. Use that stream as a source for Amazon Kinesis Data Firehose to store the data in an Amazon S3 bucket.

Answer

Use AWS CloudTrail to monitor DynamoDB data-plane operations. Create a DynamoDB stream to monitor control-plane operations. Pass the stream to Amazon Kinesis Data Streams. Use that stream as a source for Amazon Kinesis Data Firehose to store the data in an Amazon S3 bucket.

Answer

Create two trails in AWS CloudTrail. Use Trail1 to monitor DynamoDB control-plane operations. Use Trail2 to monitor DynamoDB data-plane operations.

Question 30

A vehicle insurance company needs to choose a highly available database to track vehicle owners and their insurance details. The persisted data should be immutable in the database, including the complete and sequenced history of changes over time with all the owners and insurance transfer details for a vehicle.The data should be easily verifiable for the data lineage of an insurance claim.Which approach meets these requirements with MINIMAL effort?

Accepted Answer

Create an Amazon QLDB ledger to store the insurance details. Validate the data by choosing the ledger name in the digest request to verify the data lineage of an insurance claim.

Answer

Create a blockchain to store the insurance details. Validate the data using a hash function to verify the data lineage of an insurance claim.

Answer

Create an Amazon DynamoDB table to store the insurance details. Validate the data using AWS DMS validation by moving the data to Amazon S3 to verify the data lineage of an insurance claim.

Answer

Create an Amazon Aurora database to store the insurance details. Validate the data using AWS DMS validation by moving the data to Amazon S3 to verify the data lineage of an insurance claim.

Question 31

A company is planning to migrate a 40 TB Oracle database to an Amazon Aurora PostgreSQL DB cluster by using a single AWS Database Migration Service (AWS DMS) task within a single replication instance. During early testing, AWS DMS is not scaling to the company's needs. Full load and change data capture (CDC) are taking days to complete.The source database server and the target DB cluster have enough network bandwidth and CPU bandwidth for the additional workload. The replication instance has enough resources to support the replication. A database specialist needs to improve database performance, reduce data migration time, and create multiple DMS tasks.Which combination of changes will meet these requirements? (Choose two.)

Accepted Answer

Use a smaller set of tables with each DMS task. Set the MaxFullLoadSubTasks parameter to a higher value.

Accepted Answer

Use parallel load with different data boundaries for larger tables.

Answer

Increase the value of the ParallelLoadThreads parameter in the DMS task settings for the tables.

Answer

Use a smaller set of tables with each DMS task. Set the MaxFullLoadSubTasks parameter to a lower value.

Answer

Run the DMS tasks on a larger instance class. Increase local storage on the instance.

Question 32

A healthcare company is running an application on Amazon EC2 in a public subnet and using Amazon DocumentDB (with MongoDB compatibility) as the storage layer. An audit reveals that the traffic between the application and Amazon DocumentDB is not encrypted and that the DocumentDB cluster is not encrypted at rest. A database specialist must correct these issues and ensure that the data in transit and the data at rest are encrypted.Which actions should the database specialist take to meet these requirements? (Select TWO.)

Accepted Answer

Download the SSL .pem public key for Amazon DocumentDB. Add the key to the application package and make sure the application is using the key while connecting to the cluster.

Accepted Answer

Create a snapshot of the unencrypted cluster. Restore the unencrypted snapshot as a new cluster with the ---storage-encrypted parameter set to true. Update the application to point to the new cluster.

Answer

Download the SSH RSA public key for Amazon DocumentDB. Update the application configuration to use the instance endpoint instead of the cluster endpoint and run queries over SSH.

Answer

Create an Amazon DocumentDB VPC endpoint to prevent the traffic from going to the Amazon DocumentDB public endpoint. Set a VPC endpoint policy to allow only the application instance's security group to connect.

Answer

Activate encryption at rest using the modify-db-cluster command with the ---storage-encrypted parameter set to true. Set the security group of the cluster to allow only the application instance's security group to connect.

Question 33

A database specialist is planning to migrate a 4 TB Microsoft SQL Server DB instance from on premises to Amazon RDS for SQL Server. The database is primarily used for nightly batch processing.Which RDS storage option meets these requirements MOST cost-effectively?

Accepted Answer

General Purpose SSD storage

Answer

Provisioned IOPS storage

Answer

Magnetic storage

Answer

Throughput Optimized hard disk drives (HDD)

Question 34

An online retailer uses Amazon DynamoDB for its product catalog and order dat a. Some popular items have led to frequently accessed keys in the data, and the company is using DynamoDB Accelerator (DAX) as the caching solution to cater to the frequently accessed keys. As the number of popular products is growing, the company realizes that more items need to be cached. The company observes a high cache miss rate and needs a solution to address this issue.What should a database specialist do to accommodate the changing requirements for DAX?

Accepted Answer

Create a new DAX cluster using a larger node type. Change the DAX endpoint in the application to point to the new cluster.

Answer

Increase the number of nodes in the existing DAX cluster.

Answer

Create a new DAX cluster with more nodes. Change the DAX endpoint in the application to point to the new cluster.

Answer

Modify the node type in the existing DAX cluster.

Question 35

A database specialist is designing the database for a software-as-a-service (SaaS) version of an employee information application. In the current architecture, the change history of employee records is stored in a single table in an Amazon RDS for Oracle database. Triggers on the employee table populate the history table with historical records.This architecture has two major challenges. First, there is no way to guarantee that the records have not been changed in the history table. Second, queries on the history table are slow because of the large size of the table and the need to run the queries against a large subset of data in the table.The database specialist must design a solution that prevents modification of the historical records. The solution also must maximize the speed of the queries.Which solution will meet these requirements?

Accepted Answer

Write employee record history to Amazon Quantum Ledger Database (Amazon QLDB) for historical records and to an Amazon OpenSearch Service domain for queries.

Answer

Migrate the current solution to an Amazon DynamoDB table. Use DynamoDB Streams to keep track of changes. Use DynamoDB Accelerator (DAX) to improve query performance.

Answer

Use Amazon Aurora PostgreSQL to store employee record history in a single table. Use Aurora Auto Scaling to provision more capacity.

Answer

Build a solution that uses an Amazon Redshift cluster for historical records. Query the Redshift cluster directly as needed.

Question 36

An ecommerce company is running Amazon RDS for Microsoft SQL Server. The company is planning to perform testing in a development environment with production dat a. The development environment and the production environment are in separate AWS accounts. Both environments use AWS Key Management Service (AWS KMS) encrypted databases with both manual and automated snapshots. A database specialist needs to share a KMS encrypted production RDS snapshot with the development account.Which combination of steps should the database specialist take to meet these requirements? (Select THREE.)

Accepted Answer

Create a manual snapshot. Share the snapshot from the production account to the development account.

Accepted Answer

Share the snapshot that is encrypted by using the production account custom KMS encryption key.

Accepted Answer

Allow the development account to access the production account KMS encryption key.

Answer

Create an automated snapshot. Share the snapshot from the production account to the development account.

Answer

Share the snapshot that is encrypted by using the development account default KMS encryption key.

Answer

Allow the production account to access the development account KMS encryption key.

Question 37

A news portal is looking for a data store to store 120 GB of metadata about its posts and comments. The posts and comments are not frequently looked up or updated. However, occasional lookups are expected to be served with single-digit millisecond latency on average.What is the MOST cost-effective solution?

Accepted Answer

Use Amazon S3 Standard-Infrequent Access (S3 Standard-IA) for data storage and use Amazon Athena to query the data.

Answer

Use Amazon DynamoDB with on-demand capacity mode. Purchase reserved capacity.

Answer

Use Amazon ElastiCache for Redis for data storage. Turn off cluster mode.

Answer

Use Amazon DynamoDB with on-demand capacity mode. Switch the table class to DynamoDB Standard-Infrequent Access (DynamoDB Standard-IA).

Question 38

A company is using AWS CloudFormation to provision and manage infrastructure resources, including a production database. During a recent CloudFormation stack update, a database specialist observed that changes were made to a database resource that is named ProductionDatabase. The company wants to prevent changes to only ProductionDatabase during future stack updates.Which stack policy will meet this requirement?

Accepted Answer

Question 39

A company uses an Amazon RDS for PostgreSQL database in the us-east-2 Region. The company wants to have a copy of the database available in the us-west-2 Region as part of a new disaster recovery strategy.A database architect needs to create the new database. There can be little to no downtime to the source database. The database architect has decided to use AWS Database Migration Service (AWS DMS) to replicate the database across Regions. The database architect will use full load mode and then will switch to change data capture (CDC) mode.Which parameters must the database architect configure to support CDC mode for the RDS for PostgreSQL database? (Choose three.)

Accepted Answer

Set wal_level = logical.

Accepted Answer

Set max_replication_slots to 1 or more, depending on the number of DMS tasks.

Accepted Answer

Set wal_sender_timeout to 20,000 milliseconds.

Answer

Set wal_level = replica.

Answer

Set max_replication_slots to 0 to support dynamic allocation of slots.

Answer

Set wal_sender_timeout to 5,000 milliseconds.

Question 40

A company needs to deploy an Amazon Aurora PostgreSQL DB instance into multiple accounts. The company will initiate each DB instance from an existing Aurora PostgreSQL DB instance that runs in a shared account. The company wants the process to be repeatable in case the company adds additional accounts in the future. The company also wants to be able to verify if manual changes have been made to the DB instance configurations after the company deploys the DB instances.A database specialist has determined that the company needs to create an AWS CloudFormation template with the necessary configuration to create a DB instance in an account by using a snapshot of the existing DB instance to initialize the DB instance. The company will also use the CloudFormation template's parameters to provide key values for the DB instance creation (account ID, etc.).Which final step will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Use the CloudFormation drift detection feature to check if the DB instance configurations have changed.

Answer

Create a bash script to compare the configuration to the current DB instance configuration and to report any changes.

Answer

Set up CloudFormation to use drift detection to send notifications if the DB instance configurations have been changed.

Answer

Create an AWS Lambda function to compare the configuration to the current DB instance configuration and to report any changes.

Amazon DBS-C01 Practice Test 7

Amazon DBS-C01 Practice Tests

Amazon DBS-C01 Practice Test 7

Question

Amazon DBS-C01 Practice Tests

Practice Tests