ExamGecko
Home Home / Amazon / DBS-C01

Amazon DBS-C01 Practice Test - Questions Answers, Page 16

Question list
Search
Search

List of questions

Search

Related questions











A major organization maintains a number of Amazon DB clusters. Each of these clusters is configured differently to meet certain needs. These configurations may be classified into wider groups based on the team and use case.

A database administrator wishes to streamline the process of storing and updating these settings.

Additionally, the database administrator want to guarantee that changes to certain configuration categories are automatically implemented to all instances as necessary.

Which AWS service or functionality will assist in automating and achieving this goal?

A.
AWS Systems Manager Parameter Store
A.
AWS Systems Manager Parameter Store
Answers
B.
DB parameter group
B.
DB parameter group
Answers
C.
AWS Config
C.
AWS Config
Answers
D.
AWS Secrets Manager
D.
AWS Secrets Manager
Answers
Suggested answer: B

Explanation:


Database parameters specify how the database is configured. For example, database parameters can specify the amount of resources, such as memory, to allocate to a database.

In one AWS account, a business runs a two-tier ecommerce application. An Amazon RDS for MySQL Multi-AZ database instance serves as the application's backend. A developer removed the database instance in the production environment by accident. Although the organization recovers the database, the incident results in hours of outage and financial loss.

Which combination of adjustments would reduce the likelihood that this error will occur again in the future? (Select three.)

A.
Grant least privilege to groups, IAM users, and roles.
A.
Grant least privilege to groups, IAM users, and roles.
Answers
B.
Allow all users to restore a database from a backup.
B.
Allow all users to restore a database from a backup.
Answers
C.
Enable deletion protection on existing production DB instances.
C.
Enable deletion protection on existing production DB instances.
Answers
D.
Use an ACL policy to restrict users from DB instance deletion.
D.
Use an ACL policy to restrict users from DB instance deletion.
Answers
E.
Enable AWS CloudTrail logging and Enhanced Monitoring.
E.
Enable AWS CloudTrail logging and Enhanced Monitoring.
Answers
Suggested answer: A, C, D

Explanation:


A database specialist needs to configure an Amazon RDS for MySQL DB instance to close noninteractive connections that are inactive after 900 seconds.

What should the database specialist do to accomplish this task?

A.
Create a custom DB parameter group and set the wait_timeout parameter value to 900. Associate the DB instance with the custom parameter group.
A.
Create a custom DB parameter group and set the wait_timeout parameter value to 900. Associate the DB instance with the custom parameter group.
Answers
B.
Connect to the MySQL database and run the SET SESSION wait_timeout=900 command.
B.
Connect to the MySQL database and run the SET SESSION wait_timeout=900 command.
Answers
C.
Edit the my.cnf file and set the wait_timeout parameter value to 900. Restart the DB instance.
C.
Edit the my.cnf file and set the wait_timeout parameter value to 900. Restart the DB instance.
Answers
D.
Modify the default DB parameter group and set the wait_timeout parameter value to 900.
D.
Modify the default DB parameter group and set the wait_timeout parameter value to 900.
Answers
Suggested answer: A

Explanation:


https://aws.amazon.com/fr/blogs/database/best-practices-for-configuring-parameters-for-amazonrds-for-mysql-part-3-parameters-related-to-security-operational-manageability-and-connectivity-timeout/

"You can set parameters globally using a parameter group. Alternatively, you can set them for aparticular session using the SET command." https://aws.amazon.com/blogs/database/best-practicesfor-configuring-parameters-for-amazon-rds- for-mysql-part-1-parameters-related-to-performance/

A database professional maintains a fleet of Amazon RDS database instances that are configured to utilize the default database parameter group. A database expert must connect a custom parameter group with certain database instances.

When will the instances be allocated to this new parameter group once the database specialist performs this change?

A.
Instantaneously after the change is made to the parameter group
A.
Instantaneously after the change is made to the parameter group
Answers
B.
In the next scheduled maintenance window of the DB instances
B.
In the next scheduled maintenance window of the DB instances
Answers
C.
After the DB instances are manually rebooted
C.
After the DB instances are manually rebooted
Answers
D.
Within 24 hours after the change is made to the parameter group
D.
Within 24 hours after the change is made to the parameter group
Answers
Suggested answer: C

Explanation:


When you associate a new DB parameter group with a DB instance, the modified static and dynamic parameters are applied only after the DB instance is rebooted.

A small startup firm wishes to move a 4 TB MySQL database from on-premises to AWS through an Amazon RDS for MySQL DB instance.

Which migration approach would result in the LEAST amount of downtime?

A.
Deploy a new RDS for MySQL DB instance and configure it for access from the on-premises data center. Use the mysqldump utility to create an initial snapshot from the on-premises MySQL server, and copy it to an Amazon S3 bucket. Import the snapshot into the DB instance utilizing the MySQL utilities running on an Amazon EC2 instance. Immediately point the application to the DB instance.
A.
Deploy a new RDS for MySQL DB instance and configure it for access from the on-premises data center. Use the mysqldump utility to create an initial snapshot from the on-premises MySQL server, and copy it to an Amazon S3 bucket. Import the snapshot into the DB instance utilizing the MySQL utilities running on an Amazon EC2 instance. Immediately point the application to the DB instance.
Answers
B.
Deploy a new Amazon EC2 instance, install the MySQL software on the EC2 instance, and configure networking for access from the on-premises data center. Use the mysqldump utility to create a snapshot of the on-premises MySQL server. Copy the snapshot into the EC2 instance and restore it into the EC2 MySQL instance. Use AWS DMS to migrate data into a new RDS for MySQL DB instance. Point the application to the DB instance.
B.
Deploy a new Amazon EC2 instance, install the MySQL software on the EC2 instance, and configure networking for access from the on-premises data center. Use the mysqldump utility to create a snapshot of the on-premises MySQL server. Copy the snapshot into the EC2 instance and restore it into the EC2 MySQL instance. Use AWS DMS to migrate data into a new RDS for MySQL DB instance. Point the application to the DB instance.
Answers
C.
Deploy a new Amazon EC2 instance, install the MySQL software on the EC2 instance, and configure networking for access from the on-premises data center. Use the mysqldump utility to create a snapshot of the on-premises MySQL server. Copy the snapshot into an Amazon S3 bucket and import the snapshot into a new RDS for MySQL DB instance using the MySQL utilities running on an EC2 instance. Point the application to the DB instance.
C.
Deploy a new Amazon EC2 instance, install the MySQL software on the EC2 instance, and configure networking for access from the on-premises data center. Use the mysqldump utility to create a snapshot of the on-premises MySQL server. Copy the snapshot into an Amazon S3 bucket and import the snapshot into a new RDS for MySQL DB instance using the MySQL utilities running on an EC2 instance. Point the application to the DB instance.
Answers
D.
Deploy a new RDS for MySQL DB instance and configure it for access from the on-premises data center. Use the mysqldump utility to create an initial snapshot from the on-premises MySQL server, and copy it to an Amazon S3 bucket. Import the snapshot into the DB instance using the MySQL utilities running on an Amazon EC2 instance. Establish replication into the new DB instance using MySQL replication. Stop application access to the on-premises MySQL server and let the remaining transactions replicate over. Point the application to the DB instance.
D.
Deploy a new RDS for MySQL DB instance and configure it for access from the on-premises data center. Use the mysqldump utility to create an initial snapshot from the on-premises MySQL server, and copy it to an Amazon S3 bucket. Import the snapshot into the DB instance using the MySQL utilities running on an Amazon EC2 instance. Establish replication into the new DB instance using MySQL replication. Stop application access to the on-premises MySQL server and let the remaining transactions replicate over. Point the application to the DB instance.
Answers
Suggested answer: D

Explanation:


https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/MySQL.Procedural.Importing.NonRDSRepl.html

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/MySQL.Procedural.Importing.External.

Repl.html

Amazon RDS for Oracle with Transparent Data Encryption is used by a financial services organization (TDE). At all times, the organization is obligated to encrypt its data at rest. The decryption key must be widely distributed, and access to the key must be restricted. The organization must be able to rotate the encryption key on demand to comply with regulatory requirements. If any possible security vulnerabilities are discovered, the organization must be able to disable the key. Additionally, the company's overhead must be kept to a minimal.

What method should the database administrator use to configure the encryption to fulfill these specifications?

A.
AWS CloudHSM
A.
AWS CloudHSM
Answers
B.
AWS Key Management Service (AWS KMS) with an AWS managed key
B.
AWS Key Management Service (AWS KMS) with an AWS managed key
Answers
C.
AWS Key Management Service (AWS KMS) with server-side encryption
C.
AWS Key Management Service (AWS KMS) with server-side encryption
Answers
D.
AWS Key Management Service (AWS KMS) CMK with customer-provided material
D.
AWS Key Management Service (AWS KMS) CMK with customer-provided material
Answers
Suggested answer: D

Explanation:


https://docs.aws.amazon.com/whitepapers/latest/kms-best-practices/aws-managed-and-customermanaged-cmks.html

A business is launching a new Amazon RDS for SQL Server database instance. The organization wishes to allow auditing of the SQL Server database.

Which measures should a database professional perform in combination to achieve this requirement? (Select two.)

A.
Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store audit logs on Amazon S3.
A.
Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store audit logs on Amazon S3.
Answers
B.
Set up a parameter group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the parameter group with the DB instance.
B.
Set up a parameter group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the parameter group with the DB instance.
Answers
C.
Disable Multi-AZ on the DB instance, and then enable auditing. Enable Multi-AZ after auditing is enabled.
C.
Disable Multi-AZ on the DB instance, and then enable auditing. Enable Multi-AZ after auditing is enabled.
Answers
D.
Disable automated backup on the DB instance, and then enable auditing. Enable automated backup after auditing is enabled.
D.
Disable automated backup on the DB instance, and then enable auditing. Enable automated backup after auditing is enabled.
Answers
E.
Set up an options group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the options group with the DB instance.
E.
Set up an options group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the options group with the DB instance.
Answers
Suggested answer: A, E

Explanation:


https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.Options.Audit.html

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/security_iam_service-with-iam.html

A business maintains a SQL Server database on-premises. Active Directory authentication is used to provide users access to the database. The organization transferred their database successfully to Amazon RDS for SQL Server. The organization, however, has reservations regarding user authentication in the AWS Cloud environment.

Which authentication solution should a database professional provide?

A.
Deploy Active Directory Federation Services (AD FS) on premises and configure it with an onpremises Active Directory. Set up delegation between the on- premises AD FS and AWS Security Token Service (AWS STS) to map user identities to a role using theAmazonRDSDirectoryServiceAccess managed IAM policy.
A.
Deploy Active Directory Federation Services (AD FS) on premises and configure it with an onpremises Active Directory. Set up delegation between the on- premises AD FS and AWS Security Token Service (AWS STS) to map user identities to a role using theAmazonRDSDirectoryServiceAccess managed IAM policy.
Answers
B.
Establish a forest trust between the on-premises Active Directory and AWS Directory Service for Microsoft Active Directory. Use AWS SSO to configure an Active Directory user delegated to access the databases in RDS for SQL Server.
B.
Establish a forest trust between the on-premises Active Directory and AWS Directory Service for Microsoft Active Directory. Use AWS SSO to configure an Active Directory user delegated to access the databases in RDS for SQL Server.
Answers
C.
Use Active Directory Connector to redirect directory requests to the company ?€™s on-premises Active Directory without caching any information in the cloud. Use the RDS master user credentials to connect to the DB instance and configure SQL Server logins and users from the Active Directory users and groups.
C.
Use Active Directory Connector to redirect directory requests to the company ?€™s on-premises Active Directory without caching any information in the cloud. Use the RDS master user credentials to connect to the DB instance and configure SQL Server logins and users from the Active Directory users and groups.
Answers
D.
Establish a forest trust between the on-premises Active Directory and AWS Directory Service for Microsoft Active Directory. Ensure RDS for SQL Server is using mixed mode authentication. Use the RDS master user credentials to connect to the DB instance and configure SQL Server logins and users from the Active Directory users and groups.
D.
Establish a forest trust between the on-premises Active Directory and AWS Directory Service for Microsoft Active Directory. Ensure RDS for SQL Server is using mixed mode authentication. Use the RDS master user credentials to connect to the DB instance and configure SQL Server logins and users from the Active Directory users and groups.
Answers
Suggested answer: D

Explanation:


https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html

A database expert is responsible for building a highly available online transaction processing (OLTP) solution that makes use of Amazon RDS for MySQL production databases. Disaster recovery criteria include a cross-regional deployment and an RPO and RTO of 5 and 30 minutes, respectively.

What should the database professional do to ensure that the database meets the criteria for high availability and disaster recovery?

A.
Use a Multi-AZ deployment in each Region.
A.
Use a Multi-AZ deployment in each Region.
Answers
B.
Use read replica deployments in all Availability Zones of the secondary Region.
B.
Use read replica deployments in all Availability Zones of the secondary Region.
Answers
C.
Use Multi-AZ and read replica deployments within a Region.
C.
Use Multi-AZ and read replica deployments within a Region.
Answers
D.
Use Multi-AZ and deploy a read replica in a secondary Region.
D.
Use Multi-AZ and deploy a read replica in a secondary Region.
Answers
Suggested answer: D

A financial services organization employs an Amazon Aurora PostgreSQL DB cluster to host an application on AWS. No log files detailing database administrator activity were discovered during a recent examination. A database professional must suggest a solution that enables access to the database and maintains activity logs. The solution should be simple to implement and have a negligible effect on performance.

Which database specialist solution should be recommended?

A.
Enable Aurora Database Activity Streams on the database in synchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Kinesis Data Firehose destination to an Amazon S3 bucket.
A.
Enable Aurora Database Activity Streams on the database in synchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Kinesis Data Firehose destination to an Amazon S3 bucket.
Answers
B.
Create an AWS CloudTrail trail in the Region where the database runs. Associate the database activity logs with the trail.
B.
Create an AWS CloudTrail trail in the Region where the database runs. Associate the database activity logs with the trail.
Answers
C.
Enable Aurora Database Activity Streams on the database in asynchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Firehose destination to an Amazon S3 bucket.
C.
Enable Aurora Database Activity Streams on the database in asynchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Firehose destination to an Amazon S3 bucket.
Answers
D.
Allow connections to the DB cluster through a bastion host only. Restrict database access to the bastion host and application servers. Push the bastion host logs to Amazon CloudWatch Logs using the CloudWatch Logs agent.
D.
Allow connections to the DB cluster through a bastion host only. Restrict database access to the bastion host and application servers. Push the bastion host logs to Amazon CloudWatch Logs using the CloudWatch Logs agent.
Answers
Suggested answer: C

Explanation:


https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/DBActivityStreams.Overview.html

Total 321 questions
Go to page: of 33