ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 44 - DBS-C01 discussion

Report
Export

The Security team for a finance company was notified of an internal security breach that happened 3 weeks ago. A Database Specialist must start producing audit logs out of the production Amazon Aurora PostgreSQL cluster for the Security team to use for monitoring and alerting. The Security team is required to perform real- time alerting and monitoring outside the Aurora DB cluster and wants to have the cluster push encrypted files to the chosen solution.

Which approach will meet these requirements?

A.
Use pg_audit to generate audit logs and send the logs to the Security team.
Answers
A.
Use pg_audit to generate audit logs and send the logs to the Security team.
B.
Use AWS CloudTrail to audit the DB cluster and the Security team will get data from Amazon S3.
Answers
B.
Use AWS CloudTrail to audit the DB cluster and the Security team will get data from Amazon S3.
C.
Set up database activity streams and connect the data stream from Amazon Kinesis to consumer applications.
Answers
C.
Set up database activity streams and connect the data stream from Amazon Kinesis to consumer applications.
D.
Turn on verbose logging and set up a schedule for the logs to be dumped out for the Security team.
Answers
D.
Turn on verbose logging and set up a schedule for the logs to be dumped out for the Security team.
Suggested answer: C

Explanation:


https://aws.amazon.com/about-aws/whats-new/2019/05/amazon-aurora-with-postgresqlcompatibility-supports-database-activity-streams/" Database Activity Streams for Amazon Aurora with PostgreSQL compatibility provides a near real-time data stream of the database activity in your relational database to help you monitor activity.

When integrated with third party database activity monitoring tools, Database Activity Streams can monitor and audit database activity to provide safeguards for your database and help meet compliance and regulatory requirements."

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Overview.LoggingAndMonitoring.html

asked 16/09/2024
Michael Craig
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first