Are you tired of looking for a source that'll keep you updated on the AWS Certified Database - Specialty Exam? Plus, has a collection of affordable, high-quality, and incredibly easy Amazon DBS-C01 Practice Questions? Well then, you are in luck because Salesforcexamdumps.com just updated them! Get Ready to become a AWS Certified Database Certified.
|
Add to cart | ||
Test Engine | Demo |
|
Add to cart |
PDF + Test Engine |
|
Add to cart |
Here are Amazon DBS-C01 PDF available features:
321 questions with answers | Updation Date : 03 Oct, 2023 |
1 day study required to pass exam | 100% Passing Assurance |
100% Money Back Guarantee | Free 3 Months Updates |
Students Passed
Average Marks
Questions From Dumps
Total Happy Clients
Amazon DBS-C01 is a necessary certification exam to get certified. The certification is a reward to the deserving candidate with perfect results. The AWS Certified Database Certification validates a candidate's expertise to work with Amazon. In this fast-paced world, a certification is the quickest way to gain your employer's approval. Try your luck in passing the AWS Certified Database - Specialty Exam and becoming a certified professional today. Salesforcexamdumps.com is always eager to extend a helping hand by providing approved and accepted Amazon DBS-C01 Practice Questions. Passing AWS Certified Database - Specialty will be your ticket to a better future!
Contrary to the belief that certification exams are generally hard to get through, passing AWS Certified Database - Specialty is incredibly easy. Provided you have access to a reliable resource such as Salesforcexamdumps.com Amazon DBS-C01 PDF. We have been in this business long enough to understand where most of the resources went wrong. Passing Amazon AWS Certified Database certification is all about having the right information. Hence, we filled our Amazon DBS-C01 Dumps with all the necessary data you need to pass. These carefully curated sets of AWS Certified Database - Specialty Practice Questions target the most repeated exam questions. So, you know they are essential and can ensure passing results. Stop wasting your time waiting around and order your set of Amazon DBS-C01 Braindumps now!
We aim to provide all AWS Certified Database certification exam candidates with the best resources at minimum rates. You can check out our free demo before pressing down the download to ensure Amazon DBS-C01 Practice Questions are what you wanted. And do not forget about the discount. We always provide our customers with a little extra.
Unlike other websites, Salesforcexamdumps.com prioritize the benefits of the AWS Certified Database - Specialty candidates. Not every Amazon exam candidate has full-time access to the internet. Plus, it's hard to sit in front of computer screens for too many hours. Are you also one of them? We understand that's why we are here with the AWS Certified Database solutions. Amazon DBS-C01 Question Answers offers two different formats PDF and Online Test Engine. One is for customers who like online platforms for real-like Exam stimulation. The other is for ones who prefer keeping their material close at hand. Moreover, you can download or print Amazon DBS-C01 Dumps with ease.
If you still have some queries, our team of experts is 24/7 in service to answer your questions. Just leave us a quick message in the chat-box below or email at [email protected].
A company recently migrated its line-of-business (LOB) application to AWS. The application uses an Amazon RDS for SQL Server DB instance as its database engine. The company must set up cross-Region disaster recovery for the application. The company needs a solution with the lowest possible RPO and RTO. Which solution will meet these requirements?
A. Create a cross-Region read replica of the DB instance. Promote the read replica at the
time of failover.
B. Set up SQL replication from the DB instance to an Amazon EC2 instance in the disaster recovery Region. Promote the EC2 instance as the primary server.
C. Use AWS Database Migration Service (AWS KMS) for ongoing replication of the DB instance in the disaster recovery Region.
D. Take manual snapshots of the DB instance in the primary Region. Copy the snapshots to the disaster recovery Region.
A financial services company runs an on-premises MySQL database for a critical application. The company is dissatisfied with its current database disaster recovery (DR) solution. The application experiences a significant amount of downtime whenever the database fails over to its DR facility. The application also experiences slower response times when reports are processed on the same database. To minimize the downtime in DR situations, the company has decided to migrate the database to AWS. The company requires a solution that is highly available and the most cost-effective. Which solution meets these requirements?
A. Create an Amazon RDS for MySQL Multi-AZ DB instance and configure a read replica
in a different Availability Zone. Configure the application to reference the replica instance
endpoint and report queries to reference the primary DB instance endpoint.
B. Create an Amazon RDS for MySQL Multi-AZ DB instance and configure a read replica in a different Availability Zone. Configure the application to reference the primary DB instance endpoint and report queries to reference the replica instance endpoint.
C. Create an Amazon Aurora DB cluster and configure an Aurora Replica in a different Availability Zone. Configure the application to reference the cluster endpoint and report queries to reference the reader endpoint.
D. Create an Amazon Aurora DB cluster and configure an Aurora Replica in a different Availability Zone. Configure the application to reference the primary DB instance endpoint and report queries to reference the replica instance endpoint.
A company has branch offices in the United States and Singapore. The company has a three-tier web application that uses a shared database. The database runs on an Amazon RDS for MySQL DB instance that is hosted in the us-west-2 Region. The application has a distributed front end that is deployed in us-west-2 and in the ap-southeast-1 Region. The company uses this front end as a dashboard that provides statistics to sales managers in each branch office. The dashboard loads more slowly in the Singapore branch office than in the United States branch office. The company needs a solution so that the dashboard loads consistently for users in each location. Which solution will meet these requirements in the MOST operationally efficient way?
A. Take a snapshot of the DB instance in us-west-2. Create a new DB instance in apsoutheast-2 from the snapshot. Reconfigure the ap-southeast-1 front-end dashboard to
access the new DB instance.
B. Create an RDS read replica in ap-southeast-1 from the primary DB instance in us-west2. Reconfigure the ap-southeast-1 front-end dashboard to access the read replica.
C. Create a new DB instance in ap-southeast-1. Use AWS Database Migration Service (AWS DMS) and change data capture (CDC) to update the new DB instance in apsoutheast-1. Reconfigure the ap-southeast-1 front-end dashboard to access the new DB instance.
D. Create an RDS read replica in us-west-2, where the primary DB instance resides. Create a read replica in ap-southeast-1 from the read replica in us-west-2. Reconfigure the ap-southeast-1 front-end dashboard to access the read replica in ap-southeast-1.
A software-as-a-service (SaaS) company is using an Amazon Aurora Serverless DB cluster for its production MySQL database. The DB cluster has general logs and slow query logs enabled. A database engineer must use the most operationally efficient solution with minimal resource utilization to retain the logs and facilitate interactive search and analysis. Which solution meets these requirements?
A. Use an AWS Lambda function to ship database logs to an Amazon S3 bucket. Use Amazon Athena and Amazon QuickSight to search and analyze the logs.
B. Download the logs from the DB cluster and store them in Amazon S3 by using manual
scripts. Use Amazon Athena and Amazon QuickSight to search and analyze the logs.
C. Use an AWS Lambda function to ship database logs to an Amazon S3 bucket. Use Amazon Elasticsearch Service (Amazon ES) and Kibana to search and analyze the logs.
D. Use Amazon CloudWatch Logs Insights to search and analyze the logs when the logs are automatically uploaded by the DB cluster.
A gaming company uses Amazon Aurora Serverless for one of its internal applications. The company's developers use Amazon RDS Data API to work with the Aurora Serverless DB cluster. After a recent security review, the company is mandating security enhancements. A database specialist must ensure that access to RDS Data API is private and never passes through the public internet. What should the database specialist do to meet this requirement?
A. Modify the Aurora Serverless cluster by selecting a VPC with private subnets.
B. Modify the Aurora Serverless cluster by unchecking the publicly accessible option.
C. Create an interface VPC endpoint that uses AWS PrivateLink for RDS Data API.
D. Create a gateway VPC endpoint for RDS Data API.
A company runs a customer relationship management (CRM) system that is hosted onpremises with a MySQL database as the backend. A custom stored procedure is used to send email notifications to another system when data is inserted into a table. The company has noticed that the performance of the CRM system has decreased due to database reporting applications used by various teams. The company requires an AWS solution that would reduce maintenance, improve performance, and accommodate the email notification feature. Which AWS solution meets these requirements?
A. Use MySQL running on an Amazon EC2 instance with Auto Scaling to accommodate
the reporting applications. Configure a stored procedure and an AWS Lambda function that
uses Amazon SES to send email notifications to the other system.
B. Use Amazon Aurora MySQL in a multi-master cluster to accommodate the reporting applications. Configure Amazon RDS event subscriptions to publish a message to an Amazon SNS topic and subscribe the other system's email address to the topic.
C. Use MySQL running on an Amazon EC2 instance with a read replica to accommodate the reporting applications. Configure Amazon SES integration to send email notifications to the other system.
D. Use Amazon Aurora MySQL with a read replica for the reporting applications. Configure a stored procedure and an AWS Lambda function to publish a message to an Amazon SNS topic. Subscribe the other system's email address to the topic.
A security team is conducting an audit for a financial company. The security team discovers that the database credentials of an Amazon RDS for MySQL DB instance are hardcoded in the source code. The source code is stored in a shared location for automatic deployment and is exposed to all users who can access the location. A database specialist must use encryption to ensure that the credentials are not visible in the source code. Which solution will meet these requirements?
A. Use an AWS Key Management Service (AWS KMS) key to encrypt the most recent
database backup. Restore the backup as a new database to activate encryption.
B. Store the source code to access the credentials in an AWS Systems Manager Parameter Store secure string parameter that is encrypted by AWS Key Management Service (AWS KMS). Access the code with calls to Systems Manager.
C. Store the credentials in an AWS Systems Manager Parameter Store secure string parameter that is encrypted by AWS Key Management Service (AWS KMS). Access the credentials with calls to Systems Manager.
D. Use an AWS Key Management Service (AWS KMS) key to encrypt the DB instance at rest. Activate RDS encryption in transit by using SSL certificates.
Developers have requested a new Amazon Redshift cluster so they can load new thirdparty marketing data. The new cluster is ready and the user credentials are given to the developers. The developers indicate that their copy jobs fail with the following error message: “Amazon Invalid operation: S3ServiceException:Access Denied,Status 403,Error AccessDenied.” The developers need to load this data soon, so a database specialist must act quickly to solve this issue. What is the MOST secure solution?
A. Create a new IAM role with the same user name as the Amazon Redshift developer
user ID. Provide the IAM role with read-only access to Amazon S3 with the assume role
action.
B. Create a new IAM role with read-only access to the Amazon S3 bucket and include the assume role action. Modify the Amazon Redshift cluster to add the IAM role.
C. Create a new IAM role with read-only access to the Amazon S3 bucket with the assume role action. Add this role to the developer IAM user ID used for the copy job that ended with an error message.
D. Create a new IAM user with access keys and a new role with read-only access to the Amazon S3 bucket. Add this role to the Amazon Redshift cluster. Change the copy job to use the access keys created.
A company's database specialist implements an AWS Database Migration Service (AWS DMS) task for change data capture (CDC) to replicate data from an on- premises Oracle database to Amazon S3. When usage of the company's application increases, the database specialist notices multiple hours of latency with the CDC. Which solutions will reduce this latency? (Choose two.)
A. Configure the DMS task to run in full large binary object (LOB) mode.
B. Configure the DMS task to run in limited large binary object (LOB) mode.
C. Create a Multi-AZ replication instance.
D. Load tables in parallel by creating multiple replication instances for sets of tables that participate in common transactions.
E. Replicate tables in parallel by creating multiple DMS tasks for sets of tables that do not participate in common transactions.
A company plans to migrate a MySQL-based application from an on-premises environment to AWS. The application performs database joins across several tables and uses indexes for faster query response times. The company needs the database to be highly available with automatic failover. Which solution on AWS will meet these requirements with the LEAST operational overhead?
A. Deploy an Amazon RDS DB instance with a read replica.
B. Deploy an Amazon RDS Multi-AZ DB instance.
C. Deploy Amazon DynamoDB global tables.
D. Deploy multiple Amazon RDS DB instances. Use Amazon Route 53 DNS with failover health checks configured.
A company's development team needs to have production data restored in a staging AWS account. The production database is running on an Amazon RDS for PostgreSQL Multi-AZ DB instance, which has AWS KMS encryption enabled using the default KMS key. A database specialist planned to share the most recent automated snapshot with the staging account, but discovered that the option to share snapshots is disabled in the AWS Management Console. What should the database specialist do to resolve this?
A. Disable automated backups in the DB instance. Share both the automated snapshot and
the default KMS key with the staging account. Restore the snapshot in the staging account
and enable automated backups.
B. Copy the automated snapshot specifying a custom KMS encryption key. Share both the copied snapshot and the custom KMS encryption key with the staging account. Restore the snapshot to the staging account within the same Region.
C. Modify the DB instance to use a custom KMS encryption key. Share both the automated snapshot and the custom KMS encryption key with the staging account. Restore the snapshot in the staging account.
D. Copy the automated snapshot while keeping the default KMS key. Share both the snapshot and the default KMS key with the staging account. Restore the snapshot in the staging account.
An online retail company is planning a multi-day flash sale that must support processing of up to 5,000 orders per second. The number of orders and exact schedule for the sale will vary each day. During the sale, approximately 10,000 concurrent users will look at the deals before buying items. Outside of the sale, the traffic volume is very low. The acceptable performance for read/write queries should be under 25 ms. Order items are about 2 KB in size and have a unique identifier. The company requires the most costeffective solution that will automatically scale and is highly available. Which solution meets these requirements?
A. Amazon DynamoDB with on-demand capacity mode
B. Amazon Aurora with one writer node and an Aurora Replica with the parallel query feature enabled
C. Amazon DynamoDB with provisioned capacity mode with 5,000 write capacity units (WCUs) and 10,000 read capacity units (RCUs)
D. Amazon Aurora with one writer node and two cross-Region Aurora Replicas
A company wants to build a new invoicing service for its cloud-native application on AWS. The company has a small development team and wants to focus on service feature development and minimize operations and maintenance as much as possible. The company expects the service to handle billions of requests and millions of new records every day. The service feature requirements, including data access patterns are welldefined. The service has an availability target of 99.99% with a milliseconds latency requirement. The database for the service will be the system of record for invoicing data. Which database solution meets these requirements at the LOWEST cost?
A. Amazon Neptune
B. Amazon Aurora PostgreSQL Serverless
C. Amazon RDS for PostgreSQL
D. Amazon DynamoDB
Recently, a gaming firm purchased a popular iOS game that is especially popular during the Christmas season. The business has opted to include a leaderboard into the game, which will be powered by Amazon DynamoDB. The application's load is likely to increase significantly throughout the Christmas season. Which solution satisfies these criteria at the lowest possible cost?
A. DynamoDB Streams
B. DynamoDB with DynamoDB Accelerator
C. DynamoDB with on-demand capacity mode
D. DynamoDB with provisioned capacity mode with Auto Scaling
An ecommerce company uses a backend application that stores data in an Amazon DynamoDB table. The backend application runs in a private subnet in a VPC and must connect to this table. The company must minimize any network latency that results from network connectivity issues, even during periods of heavy application usage. A database administrator also needs the ability to use a private connection to connect to the DynamoDB table from the application. Which solution will meet these requirements?
A. Use network ACLs to ensure that any outgoing or incoming connections to any port
except DynamoDB are deactivated. Encrypt API calls by using TLS.
B. Create a VPC endpoint for DynamoDB in the application's VPC. Use the VPC endpoint to access the table.
C. Create an AWS Lambda function that has access to DynamoDB. Restrict outgoing
access only to this Lambda function from the application.
D. Use a VPN to route all communication to DynamoDB through the company's own corporate network infrastructure.
A finance company migrated its 3 ¢’ on-premises PostgreSQL database to an Amazon Aurora PostgreSQL DB cluster. During a review after the migration, a database specialist discovers that the database is not encrypted at rest. The database must be encrypted at rest as soon as possible to meet security requirements. The database specialist must enable encryption for the DB cluster with minimal downtime. Which solution will meet these requirements?
A. Modify the unencrypted DB cluster using the AWS Management Console. Enable
encryption and choose to apply the change immediately.
B. Take a snapshot of the unencrypted DB cluster and restore it to a new DB cluster with encryption enabled. Update any database connection strings to reference the new DB cluster endpoint, and then delete the unencrypted DB cluster.
C. Create an encrypted Aurora Replica of the unencrypted DB cluster. Promote the Aurora Replica as the new master.
D. Create a new DB cluster with encryption enabled and use the pg_dump and pg_restore utilities to load data to the new DB cluster. Update any database connection strings to reference the new DB cluster endpoint, and then delete the unencrypted DB cluster.
An internet advertising firm stores its data in an Amazon DynamoDb table. Amazon DynamoDB Streams are enabled on the table, and one of the keys has a global secondary index. The table is encrypted using a customer-managed AWS Key Management Service (AWS KMS) key. The firm has chosen to grow worldwide and want to duplicate the database using DynamoDB global tables in a new AWS Region. An administrator observes the following upon review: No role with the dynamodb: CreateGlobalTable permission exists in the account. An empty table with the same name exists in the new Region where replication is desired. A global secondary index with the same partition key but a different sort key exists in the new Region where replication is desired. Which settings will prevent you from creating a global table or replica in the new Region? (Select two.)
A. A global secondary index with the same partition key but a different sort key exists in the
new Region where replication is desired.
B. An empty table with the same name exists in the Region where replication is desired.
C. No role with the dynamodb:CreateGlobalTable permission exists in the account.
D. DynamoDB Streams is enabled for the table.
E. The table is encrypted using a KMS customer managed key.
A company is planning to use Amazon RDS for SQL Server for one of its critical applications. The company's security team requires that the users of the RDS for SQL Server DB instance are authenticated with on-premises Microsoft Active Directory credentials. Which combination of steps should a database specialist take to meet this requirement? (Choose three.)
A. Extend the on-premises Active Directory to AWS by using AD Connector.
B. Create an IAM user that uses the AmazonRDSDirectoryServiceAccess managed IAM policy.
C. Create a directory by using AWS Directory Service for Microsoft Active Directory.
D. Create an Active Directory domain controller on Amazon EC2.
E. Create an IAM role that uses the AmazonRDSDirectoryServiceAccess managed IAM policy.
F. Create a one-way forest trust from the AWS Directory Service for Microsoft Active Directory directory to the on-premises Active Directory.
A company hosts a 2 TB Oracle database in its on-premises data center. A database specialist is migrating the database from on premises to an Amazon Aurora PostgreSQL database on AWS. The database specialist identifies a problem that relates to compatibility Oracle stores metadata in its data dictionary in uppercase, but PostgreSQL stores the metadata in lowercase. The database specialist must resolve this problem to complete the migration. What is the MOST operationally efficient solution that meets these requirements?
A. Override the default uppercase format of Oracle schema by encasing object names in
quotation marks during creation.
B. Use AWS Database Migration Service (AWS DMS) mapping rules with rule-action as convert-lowercase.
C. Use the AWS Schema Conversion Tool conversion agent to convert the metadata from uppercase to lowercase.
D. Use an AWS Glue job that is attached to an AWS Database Migration Service (AWS DMS) replication task to convert the metadata from uppercase to lowercase.
A company is developing a multi-tier web application hosted on AWS using Amazon Aurora as the database. The application needs to be deployed to production and other nonproduction environments. A Database Specialist needs to specify different MasterUsername and MasterUserPassword properties in the AWS CloudFormation templates used for automated deployment. The CloudFormation templates are version controlled in the company’s code repository. The company also needs to meet compliance requirement by routinely rotating its database master password for production. What is most secure solution to store the master password?
A. Store the master password in a parameter file in each environment. Reference the
environment-specific parameter file in the CloudFormation template.
B. Encrypt the master password using an AWS KMS key. Store the encrypted master password in the CloudFormation template.
C. Use the secretsmanager dynamic reference to retrieve the master password stored in AWS Secrets Manager and enable automatic rotation.
D. Use the ssm dynamic reference to retrieve the master password stored in the AWS Systems Manager Parameter Store and enable automatic rotation.
A Database Specialist is creating Amazon DynamoDB tables, Amazon CloudWatch alarms, and associated infrastructure for an Application team using a development AWS account. The team wants a deployment method that will standardize the core solution components while managing environmentspecific settings separately, and wants to minimize rework due to configuration errors. Which process should the Database Specialist recommend to meet these requirements?
A. Organize common and environmental-specific parameters hierarchically in the AWS
Systems Manager Parameter Store, then reference the parameters dynamically from an AWS CloudFormation template. Deploy the CloudFormation stack using the environment
name as a parameter.
B. Create a parameterized AWS CloudFormation template that builds the required objects. Keep separate environment parameter files in separate Amazon S3 buckets. Provide an AWS CLI command that deploys the CloudFormation stack directly referencing the appropriate parameter bucket.
C. Create a parameterized AWS CloudFormation template that builds the required objects. Import the template into the CloudFormation interface in the AWS Management Console. Make the required changes to the parameters and deploy the CloudFormation stack.
D. Create an AWS Lambda function that builds the required objects using an AWS SDK. Set the required parameter values in a test event in the Lambda console for each environment that the Application team can modify, as needed. Deploy the infrastructure by triggering the test event in the console.
A retail company uses Amazon Redshift Spectrum to run complex analytical queries on objects that are stored in an Amazon S3 bucket. The objects are joined with multiple dimension tables that are stored in an Amazon Redshift database. The company uses the database to create monthly and quarterly aggregated reports. Users who attempt to run queries are reporting the following error message: error: Spectrum Scan Error: Access throttled Which solution will resolve this error?
A. Check file sizes of fact tables in Amazon S3, and look for large files. Break up large files
into smaller files of equal size between 100 MB and 1 GB
B. Reduce the number of queries that users can run in parallel.
C. Check file sizes of fact tables in Amazon S3, and look for small files. Merge the small files into larger files of at least 64 MB in size.
D. Review and optimize queries that submit a large aggregation step to Redshift Spectrum.
A manufacturing company has an. inventory system that stores information in an Amazon Aurora MySQL DB cluster. The database tables are partitioned. The database size has grown to 3 TB. Users run one-time queries by using a SQL client. Queries that use an equijoin to join large tables are taking a long time to run. Which action will improve query performance with the LEAST operational effort?
A. Migrate the database to a new Amazon Redshift data warehouse.
B. Enable hash joins on the database by setting the variable optimizer_switch to hash_join=on.
C. Take a snapshot of the DB cluster. Create a new DB instance by using the snapshot, and enable parallel query mode.
D. Add an Aurora read replica.
A business is launching a new Amazon RDS for SQL Server database instance. The organization wishes to allow auditing of the SQL Server database. Which measures should a database professional perform in combination to achieve this requirement? (Select two.)
A. Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS
to store audit logs on Amazon S3.
B. Set up a parameter group to configure an IAM role and an Amazon S3 bucket for audit log storage. Associate the parameter group with the DB instance.
C. Disable Multi-AZ on the DB instance, and then enable auditing. Enable Multi-AZ after auditing is enabled.
D. Disable automated backup on the DB instance, and then enable auditing. Enable automated backup after auditing is enabled.
E. Set up an options group to configure an IAM role and an Amazon S3 bucket for audit log
storage. Associate the options group with the DB instance.
A company hosts an on-premises Microsoft SQL Server Enterprise edition database with Transparent Data Encryption (TDE) enabled. The database is 20 TB in size and includes sparse tables. The company needs to migrate the database to Amazon RDS for SQL Server during a maintenance window that is scheduled for an upcoming weekend. Data-atrest encryption must be enabled for the target DB instance. Which combination of steps should the company take to migrate the database to AWS in the MOST operationally efficient manner? (Choose two.)
A. Use AWS Database Migration Service (AWS DMS) to migrate from the on-premises
source database to the RDS for SQL Server target database.
B. Disable TDE. Create a database backup without encryption. Copy the backup to Amazon S3.
C. Restore the backup to the RDS for SQL Server DB instance. Enable TDE for the RDS for SQL Server DB instance.
D. Set up an AWS Snowball Edge device. Copy the database backup to the device. Send the device to AWS. Restore the database from Amazon S3.
E. Encrypt the data with client-side encryption before transferring the data to Amazon RDS.
A company uses an on-premises Microsoft SQL Server database to host relational and JSON data and to run daily ETL and advanced analytics. The company wants to migrate the database to the AWS Cloud. Database specialist must choose one or more AWS services to run the company's workloads. Which solution will meet these requirements in the MOST operationally efficient manner?
A. Use Amazon Redshift for relational data. Use Amazon DynamoDB for JSON data
B. Use Amazon Redshift for relational data and JSON data.
C. Use Amazon RDS for relational data. Use Amazon Neptune for JSON data
D. Use Amazon Redshift for relational data. Use Amazon S3 for JSON data.
A pharmaceutical company uses Amazon Quantum Ledger Database (Amazon QLDB) to store its clinical trial data records. The company has an application that runs as AWS Lambda functions. The application is hosted in the private subnet in a VPC. The application does not have internet access and needs to read some of the clinical data records. The company is concerned that traffic between the QLDB ledger and the VPC could leave the AWS network. The company needs to secure access to the QLDB ledger and allow the VPC traffic to have read-only access. Which security strategy should a database specialist implement to meet these requirements?
A. Move the QLDB ledger into a private database subnet inside the VPC. Run the Lambda
functions inside the same VPC in an application private subnet. Ensure that the VPC route
table allows read-only flow from the application subnet to the database subnet.
B. Create an AWS PrivateLink VPC endpoint for the QLDB ledger. Attach a VPC policy to the VPC endpoint to allow read-only traffic for the Lambda functions that run inside the VPC.
C. Add a security group to the QLDB ledger to allow access from the private subnets inside the VPC where the Lambda functions that access the QLDB ledger are running.
D. Create a VPN connection to ensure pairing of the private subnet where the Lambda functions are running with the private subnet where the QLDB ledger is deployed.
A company has a quarterly customer survey. The survey uses an Amazon EC2 instance that is hosted in a public subnet to host a customer survey website. The company uses an Amazon RDS DB instance that is hosted in a private subnet in the same VPC to store the survey results. The company takes a snapshot of the DB instance after a survey is complete, deletes the DB instance, and then restores the DB instance from the snapshot when the survey needs to be conducted again. A database specialist discovers that the customer survey website times out when it attempts to establish a connection to the restored DB instance. What is the root cause of this problem?
A. The VPC peering connection has not been configured properly for the EC2 instance to
communicate with the DB instance.
B. The route table of the private subnet that hosts the DB instance does not have a NAT
gateway configured for communication with the EC2 instance.
C. The public subnet that hosts the EC2 instance does not have an internet gateway configured for communication with the DB instance.
D. The wrong security group was associated with the new DB instance when it was restored from the snapshot.
A company is launching a new Amazon RDS for MySQL Multi-AZ DB instance to be used as a data store for a custom-built application. After a series of tests with point-in-time recovery disabled, the company decides that it must have point-in-time recovery reenabled before using the DB instance to store production data. What should a database specialist do so that point-in-time recovery can be successful?
A. Enable binary logging in the DB parameter group used by the DB instance.
B. Modify the DB instance and enable audit logs to be pushed to Amazon CloudWatch Logs.
C. Modify the DB instance and configure a backup retention period
D. Set up a scheduled job to create manual DB instance snapshots.
A company is running a blogging platform. A security audit determines that the Amazon RDS DB instance that is used by the platform is not configured to encrypt the data at rest. The company must encrypt the DB instance within 30 days. What should a database specialist do to meet this requirement with the LEAST amount of downtime?
A. Create a read replica of the DB instance, and enable encryption. When the read replica
is available, promote the read replica and update the endpoint that is used by the
application. Delete the unencrypted DB instance.
B. Take a snapshot of the DB instance. Make an encrypted copy of the snapshot. Restore the encrypted snapshot. When the new DB instance is available, update the endpoint that is used by the application. Delete the unencrypted DB instance.
C. Create a new encrypted DB instance. Perform an initial data load, and set up logical replication between the two DB instances When the new DB instance is in sync with the source DB instance, update the endpoint that is used by the application. Delete the unencrypted DB instance.
D. Convert the DB instance to an Amazon Aurora DB cluster, and enable encryption. When the DB cluster is available, update the endpoint that is used by the application to the cluster endpoint. Delete the unencrypted DB instance.
A company is using an Amazon ElastiCache for Redis cluster to host its online shopping website. Shoppers receive the following error when the website's application queries the cluster: Which solutions will resolve this memory issues with the LEAST amount of effort? (Choose three.)
A. Reduce the TTL value for keys on the node.
B. Choose a larger node type.
C. Test different values in the parameter group for the maxmemory-policy parameter to find the ideal value to use.
D. Increase the number of nodes.
E. Monitor the EngineCPUUtilization Amazon CloudWatch metric. Create an AWS Lambda function to delete keys on nodes when a threshold is reached.
F. Increase the TTL value for keys on the node
A company has an on-premises production Microsoft SQL Server with 250 GB of data in one database. A database specialist needs to migrate this on-premises SQL Server to Amazon RDS for SQL Server. The nightly native SQL Server backup file is approximately 120 GB in size. The application can be down for an extended period of time to complete the migration. Connectivity between the on-premises environment and AWS can be initiated from on-premises only. How can the database be migrated from on-premises to Amazon RDS with the LEAST amount of effort?
A. Back up the SQL Server database using a native SQL Server backup. Upload the
backup files to Amazon S3. Download the backup files on an Amazon EC2 instance and
restore them from the EC2 instance into the new production RDS instance.
B. Back up the SQL Server database using a native SQL Server backup. Upload the backup files to Amazon S3. Restore the backup files from the S3 bucket into the new production RDS instance.
C. Provision and configure AWS DMS. Set up replication between the on-premises SQL Server environment to replicate the database to the new production RDS instance.
D. Back up the SQL Server database using AWS Backup. Once the backup is complete, restore the completed backup to an Amazon EC2 instance and move it to the new production RDS instance.
An information management services company is storing JSON documents on premises. The company is using a MongoDB 3.6 database but wants to migrate to AWS. The solution must be compatible, scalable, and fully managed. The solution also must result in as little downtime as possible during the migration. Which solution meets these requirements?
A. Create an AWS Database Migration Service (AWS DMS) replication instance, a source
endpoint for MongoDB, and a target endpoint of Amazon DocumentDB (with MongoDB
compatibility).
B. Create an AWS Database Migration Service (AWS DMS) replication instance, a source endpoint for MongoDB, and a target endpoint of a MongoDB image that is hosted on Amazon EC2
C. Use the mongodump and mongorestore tools to migrate the data from the source MongoDB deployment to Amazon DocumentDB (with MongoDB compatibility).
D. Use the mongodump and mongorestore tools to migrate the data from the source MongoDB deployment to a MongoDB image that is hosted on Amazon EC2.
A company requires near-real-time notifications when changes are made to Amazon RDS DB security groups. Which solution will meet this requirement with the LEAST operational overhead?
A. Configure an RDS event notification subscription for DB security group events.
B. Create an AWS Lambda function that monitors DB security group changes. Create an Amazon Simple Notification Service (Amazon SNS) topic for notification.
C. Turn on AWS CloudTrail. Configure notifications for the detection of changes to DB security groups.
D. Configure an Amazon CloudWatch alarm for RDS metrics about changes to DB security groups.
A company uses Amazon Aurora MySQL as the primary database engine for many of its applications. A database specialist must create a dashboard to provide the company with information about user connections to databases. According to compliance requirements, the company must retain all connection logs for at least 7 years. Which solution will meet these requirements MOST cost-effectively?
A. Enable advanced auditing on the Aurora cluster to log CONNECT events. Export audit
logs from Amazon CloudWatch to Amazon S3 by using an AWS Lambda function that is
invoked by an Amazon EventBridge (Amazon CloudWatch Events) scheduled event. Build
a dashboard by using Amazon QuickSight.
B. Capture connection attempts to the Aurora cluster with AWS Cloud Trail by using the DescribeEvents API operation. Create a CloudTrail trail to export connection logs to Amazon S3. Build a dashboard by using Amazon QuickSight.
C. Start a database activity stream for the Aurora cluster. Push the activity records to an Amazon Kinesis data stream. Build a dynamic dashboard by using AWS Lambda.
D. Publish the DatabaseConnections metric for the Aurora DB instances to Amazon CloudWatch. Build a dashboard by using CloudWatch dashboards.
A database professional is tasked with the task of migrating 25 GB of data files from an onpremises storage system to an Amazon Neptune database. Which method of data loading is the FASTEST?
A. Upload the data to Amazon S3 and use the Loader command to load the data from
Amazon S3 into the Neptune database.
B. Write a utility to read the data from the on-premises storage and run INSERT statements in a loop to load the data into the Neptune database.
C. Use the AWS CLI to load the data directly from the on-premises storage into the Neptune database.
D. Use AWS DataSync to load the data directly from the on-premises storage into the Neptune database.
A company is running a business-critical application on premises by using Microsoft SQL Server. A database specialist is planning to migrate the instance with several databases to the AWS Cloud. The database specialist will use SQL Server Standard edition hosted on Amazon EC2 Windows instances. The solution must provide high availability and must avoid a single point of failure in the SQL Server deployment architecture. Which solution will meet these requirements?
A. Create Amazon RDS for SQL Server Multi-AZ DB instances. Use Amazon S3 as a
shared storage option to host the databases.
B. Set up Always On Failover Cluster Instances as a single SQL Server instance. Use Multi-AZ Amazon FSx for Windows File Server as a shared storage option to host the databases.
C. Set up Always On availability groups to group one or more user databases that fail over together across multiple SQL Server instances. Use Multi-AZ Amazon FSx for Windows File Server as a shared storage option to host the databases.
D. Create an Application Load Balancer to distribute database traffic across multiple EC2 instances in multiple Availability Zones. Use Amazon S3 as a shared storage option to host the databases.
Amazon DynamoDB global tables are being used by a business to power an online gaming game. The game is played by gamers from all around the globe. As the game became popularity, the amount of queries to DynamoDB substantially rose. Recently, gamers have complained about the game's condition being inconsistent between nations. A database professional notices that the ReplicationLatency metric for many replica tables is set to an abnormally high value. Which strategy will resolve the issue?
A. Configure all replica tables to use DynamoDB auto scaling.
B. Configure a DynamoDB Accelerator (DAX) cluster on each of the replicas.
C. Configure the primary table to use DynamoDB auto scaling and the replica tables to use manually provisioned capacity.
D. Configure the table-level write throughput limit service quota to a higher value.
A Database Specialist is constructing a new Amazon Neptune DB cluster and tries to load data from Amazon S3 using the Neptune bulk loader API. The Database Specialist is confronted with the following error message: €Unable to establish a connection to the s3 endpoint. The source URL is s3:/mybucket/graphdata/ and the region code is us-east-1. Kindly confirm your Configuration S3. Which of the following activities should the Database Specialist take to resolve the issue? (Select two.)
A. Check that Amazon S3 has an IAM role granting read access to Neptune
B. Check that an Amazon S3 VPC endpoint exists
C. Check that a Neptune VPC endpoint exists
D. Check that Amazon EC2 has an IAM role granting read access to Amazon S3
E. Check that Neptune has an IAM role granting read access to Amazon S3
A gaming company is evaluating Amazon ElastiCache as a solution to manage player leaderboards. Millions of players around the world will complete in annual tournaments. The company wants to implement an architecture that is highly available. The company also wants to ensure that maintenance activities have minimal impact on the availability of the gaming platform. Which combination of steps should the company take to meet these requirements? (Choose two.)
A. Deploy an ElastiCache for Redis cluster with read replicas and Multi-AZ enabled.
B. Deploy an ElastiCache for Memcached global datastore.
C. Deploy a single-node ElastiCache for Redis cluster with automatic backups enabled. In the event of a failure, create a new cluster and restore data from the most recent backup.
D. Use the default maintenance window to apply any required system changes and mandatory updates as soon as they are available.
E. Choose a preferred maintenance window at the time of lowest usage to apply any required changes and mandatory updates.
A pharmaceutical company's drug search API is using an Amazon Neptune DB cluster. A bulk uploader process automatically updates the information in the database a few times each week. A few weeks ago during a bulk upload, a database specialist noticed that the database started to respond frequently with a ThrottlingException error. The problem also occurred with subsequent uploads. The database specialist must create a solution to prevent ThrottlingException errors for the database. The solution must minimize the downtime of the cluster. Which solution meets these requirements?
A. Create a read replica that uses a larger instance size than the primary DB instance. Fail
over the primary DB instance to the read replica.
B. Add a read replica to each Availability Zone. Use an instance for the read replica that is the same size as the primary DB instance. Keep the traffic between the API and the database within the Availability Zone.
C. Create a read replica that uses a larger instance size than the primary DB instance. Offload the reads from the primary DB instance.
D. Take the latest backup, and restore it in a DB cluster of a larger size. Point the application to the newly created DB cluster.
A company is using Amazon Aurora MySQL as the database for its retail application on AWS. The company receives a notification of a pending database upgrade and wants to ensure upgrades do not occur before or during the most critical time of year. Company leadership is concerned that an Amazon RDS maintenance window will cause an outage during data ingestion. Which step can be taken to ensure that the application is not interrupted?
A. Disable weekly maintenance on the DB cluster.
B. Clone the DB cluster and migrate it to a new copy of the database.
C. Choose to defer the upgrade and then find an appropriate down time for patching.
D. Set up an Aurora Replica and promote it to primary at the time of patching.
A software company uses an Amazon RDS for MySQL Multi-AZ DB instance as a data store for its critical applications. During an application upgrade process, a database specialist runs a custom SQL script that accidentally removes some of the default permissions of the master user. What is the MOST operationally efficient way to restore the default permissions of the master user?
A. Modify the DB instance and set a new master user password.
B. Use AWS Secrets Manager to modify the master user password and restart the DB instance.
C. Create a new master user for the DB instance.
D. Review the IAM user that owns the DB instance, and add missing permissions.
A company conducted a security audit of its AWS infrastructure. The audit identified that data was not encrypted in transit between application servers and a MySQL database that is hosted in Amazon RDS. After the audit, the company updated the application to use an encrypted connection. To prevent this problem from occurring again, the company's database team needs to configure the database to require in-transit encryption for all connections. Which solution will meet this requirement?
A. Update the parameter group in use by the DB instance, and set the
require_secure_transport parameter to ON.
B. Connect to the database, and use ALTER USER to enable the REQUIRE SSL option on the database user.
C. Update the security group in use by the DB instance, and remove port 80 to prevent unencrypted connections from being established.
D. Update the DB instance, and enable the Require Transport Layer Security option.
For the first time, a database professional is establishing a test graph database on Amazon Neptune. The database expert must input millions of rows of test observations from an Amazon S3.csv file. The database professional uploaded the data to the Neptune DB instance through a series of API calls. Which sequence of actions enables the database professional to upload the data most quickly? (Select three.)
A. Ensure Amazon Cognito returns the proper AWS STS tokens to authenticate the
Neptune DB instance to the S3 bucket hosting the CSV file.
B. Ensure the vertices and edges are specified in different .csv files with proper header column formatting.
C. Use AWS DMS to move data from Amazon S3 to the Neptune Loader.
D. Curl the S3 URI while inside the Neptune DB instance and then run the addVertex or addEdge commands.
E. Ensure an IAM role for the Neptune DB instance is configured with the appropriate permissions to allow access to the file in the S3 bucket.
F. Create an S3 VPC endpoint and issue an HTTP POST to the database€™s loader endpoint.
A company is using an Amazon Aurora MySQL database with Performance Insights enabled. A database specialist is checking Performance Insights and observes an alert message that starts with the following phrase: `Performance Insights is unable to collect SQL Digest statistics on new queries`¦` Which action will resolve this alert message?
A. Truncate the events_statements_summary_by_digest table.
B. Change the AWS Key Management Service (AWS KMS) key that is used to enable Performance Insights.
C. Set the value for the performance_schema parameter in the parameter group to 1.
D. Disable and reenable Performance Insights to be effective in the next maintenance window.
A company runs hundreds of Microsoft SQL Server databases on Windows servers in its on-premises data center. A database specialist needs to migrate these databases to Linux on AWS. Which combination of steps should the database specialist take to meet this requirement? (Choose three.)
A. Install AWS Systems Manager Agent on the on-premises servers. Use Systems
Manager Run Command to install the Windows to Linux replatforming assistant for
Microsoft SQL Server Databases.
B. Use AWS Systems Manager Run Command to install and configure the AWS Schema Conversion Tool on the on-premises servers.
C. On the Amazon EC2 console, launch EC2 instances and select a Linux AMI that
includes SQL Server. Install and configure AWS Systems Manager Agent on the EC2
instances.
D. On the AWS Management Console, set up Amazon RDS for SQL Server DB instances with Linux as the operating system. Install AWS Systems Manager Agent on the DB instances by using an options group.
E. Open the Windows to Linux replatforming assistant tool. Enter configuration details of the source and destination databases. Start migration.
F. On the AWS Management Console, set up AWS Database Migration Service (AWS DMS) by entering details of the source SQL Server database and the destination SQL Server database on AWS. Start migration.
An online gaming company is using an Amazon DynamoDB table in on-demand mode to store game scores. After an intensive advertisement campaign in South America, the average number of concurrent users rapidly increases from 100,000 to 500,000 in less than 10 minutes every day around 5 PM. The on-call software reliability engineer has observed that the application logs contain a high number of DynamoDB throttling exceptions caused by game score insertions around 5 PM. Customer service has also reported that several users are complaining about their scores not being registered. How should the database administrator remediate this issue at the lowest cost?
A. Enable auto scaling and set the target usage rate to 90%.
B. Switch the table to provisioned mode and enable auto scaling.
C. Switch the table to provisioned mode and set the throughput to the peak value.
D. Create a DynamoDB Accelerator cluster and use it to access the DynamoDB table.
Leave a comment
Your email address will not be published. Required fields are marked *