ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 46 - DBS-C01 discussion

Report
Export

A media company is using Amazon RDS for PostgreSQL to store user dat a. The RDS DB instance currently has a publicly accessible setting enabled and is hosted in a public subnet. Following a recent AWS Well- Architected Framework review, a Database Specialist was given new security requirements.

Only certain on-premises corporate network IPs should connect to the DB instance. Connectivity is allowed from the corporate network only.

Which combination of steps does the Database Specialist need to take to meet these new requirements? (Choose three.)

A.
Modify the pg_hba.conf file. Add the required corporate network IPs and remove the unwanted IPs.
Answers
A.
Modify the pg_hba.conf file. Add the required corporate network IPs and remove the unwanted IPs.
B.
Modify the associated security group. Add the required corporate network IPs and remove the unwanted IPs.
Answers
B.
Modify the associated security group. Add the required corporate network IPs and remove the unwanted IPs.
C.
Move the DB instance to a private subnet using AWS DMS.
Answers
C.
Move the DB instance to a private subnet using AWS DMS.
D.
Enable VPC peering between the application host running on the corporate network and the VPC associated with the DB instance.
Answers
D.
Enable VPC peering between the application host running on the corporate network and the VPC associated with the DB instance.
E.
Disable the publicly accessible setting.
Answers
E.
Disable the publicly accessible setting.
F.
Connect to the DB instance using private IPs and a VPN.
Answers
F.
Connect to the DB instance using private IPs and a VPN.
Suggested answer: B, E, F

Explanation:


https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html#USER_VPC.Hiding

asked 16/09/2024
Ilias Akarkach
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first