ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 20 - DBS-C01 discussion

Report
Export

A financial services company is developing a shared data service that supports different applications from throughout the company. A Database Specialist designed a solution to leverage Amazon ElastiCache for Redis with cluster mode enabled to enhance performance and scalability. The cluster is configured to listen on port 6379.

Which combination of steps should the Database Specialist take to secure the cache data and protect it from unauthorized access? (Choose three.)

A.
Enable in-transit and at-rest encryption on the ElastiCache cluster.
Answers
A.
Enable in-transit and at-rest encryption on the ElastiCache cluster.
B.
Ensure that Amazon CloudWatch metrics are configured in the ElastiCache cluster.
Answers
B.
Ensure that Amazon CloudWatch metrics are configured in the ElastiCache cluster.
C.
Ensure the security group for the ElastiCache cluster allows all inbound traffic from itself and inbound traffic on TCP port 6379 from trusted clients only.
Answers
C.
Ensure the security group for the ElastiCache cluster allows all inbound traffic from itself and inbound traffic on TCP port 6379 from trusted clients only.
D.
Create an IAM policy to allow the application service roles to access all ElastiCache API actions.
Answers
D.
Create an IAM policy to allow the application service roles to access all ElastiCache API actions.
E.
Ensure the security group for the ElastiCache clients authorize inbound TCP port 6379 and port 22 traffic from the trusted ElastiCache cluster’s security group.
Answers
E.
Ensure the security group for the ElastiCache clients authorize inbound TCP port 6379 and port 22 traffic from the trusted ElastiCache cluster’s security group.
F.
Ensure the cluster is created with the auth-token parameter and that the parameter is used in all subsequent commands.
Answers
F.
Ensure the cluster is created with the auth-token parameter and that the parameter is used in all subsequent commands.
Suggested answer: A, C, F

Explanation:


https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/encryption.html

asked 16/09/2024
William Hanna
30 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first