A Review Of 100% Guarantee DBS-C01 Latest Exam

NEW QUESTION 1
A clothing company uses a custom ecommerce application and a PostgreSQL database to sell clothes to thousands of users from multiple countries. The company is migrating its application and database from its on premises data center to the AWS Cloud. The company has selected Amazon EC2 for the application and Amazon RDS for PostgreSQL for the database. The company requires database passwords to be changed every 60 days. A Database Specialist needs to ensure that the credentials used by the web application to connect to the database are managed securely.
Which approach should the Database Specialist take to securely manage the database credentials?

• A. Store the credentials in a text file in an Amazon S3 bucke
• B. Restrict permissions on the bucket to the IAM role associated with the instance profile onl
• C. Modify the application to download the text file and retrieve the credentials on start u
• D. Update the text file every 60 days.
• E. Configure IAM database authentication for the application to connect to the databas
• F. Create an IAM user and map it to a separate database user for each ecommerce use
• G. Require users to update their passwords every 60 days.
• H. Store the credentials in AWS Secrets Manage
• I. Restrict permissions on the secret to only the IAM role associated with the instance profil
• J. Modify the application to retrieve the credentials from Secrets Manager on start u
• K. Configure the rotation interval to 60 days.
• L. Store the credentials in an encrypted text file in the application AM
• M. Use AWS KMS to store the key fordecrypting the text fil
• N. Modify the application to decrypt the text file and retrieve the credentials on start u
• O. Update the text file and publish a new AMI every 60 days.

Answer: B

NEW QUESTION 2
A company wants to migrate its existing on-premises Oracle database to Amazon Aurora PostgreSQL. The migration must be completed with minimal downtime using AWS DMS. A Database Specialist must validate that the data was migrated accurately from the source to the target before the cutover. The migration must have minimal impact on the performance of the source database.
Which approach will MOST effectively meet these requirements?

• A. Use the AWS Schema Conversion Tool (AWS SCT) to convert source Oracle database schemas to the target Aurora DB cluste
• B. Verify the datatype of the columns.
• C. Use the table metrics of the AWS DMS task created for migrating the data to verify the statistics for the tables being migrated and to verify that the data definition language (DDL) statements are completed.
• D. Enable the AWS Schema Conversion Tool (AWS SCT) premigration validation and review the premigrationchecklist to make sure there are no issues with the conversion.
• E. Enable AWS DMS data validation on the task so the AWS DMS task compares the source and targetrecords, and reports any mismatches.

Answer: D

NEW QUESTION 3
A media company is using Amazon RDS for PostgreSQL to store user data. The RDS DB instance currently has a publicly accessible setting enabled and is hosted in a public subnet. Following a recent AWS Well- Architected Framework review, a Database Specialist was given new security requirements.
Only certain on-premises corporate network IPs should connect to the DB instance.
Connectivity is allowed from the corporate network only. Which combination of steps does the Database Specialist need to take to meet these new requirements?
(Choose three.)

• A. Modify the pg_hba.conf fil
• B. Add the required corporate network IPs and remove the unwanted IPs.
• C. Modify the associated security grou
• D. Add the required corporate network IPs and remove the unwanted IPs.
• E. Move the DB instance to a private subnet using AWS DMS.
• F. Enable VPC peering between the application host running on the corporate network and the VPC associated with the DB instance.
• G. Disable the publicly accessible setting.
• H. Connect to the DB instance using private IPs and a VPN.

Answer: DEF

NEW QUESTION 4
After restoring an Amazon RDS snapshot from 3 days ago, a company’s Development team cannot connect tothe restored RDS DB instance. What is the likely cause of this problem?

• A. The restored DB instance does not have Enhanced Monitoring enabled
• B. The production DB instance is using a custom parameter group
• C. The restored DB instance is using the default security group
• D. The production DB instance is using a custom option group

Answer: B

NEW QUESTION 5
A financial company wants to store sensitive user data in an Amazon Aurora PostgreSQL DB cluster. The database will be accessed by multiple applications across the company. The company has mandated that all communications to the database be encrypted and the server identity must be validated. Any non-SSL-based connections should be disallowed access to the database.
Which solution addresses these requirements?

• A. Set the rds.force_ssl=0 parameter in DB parameter group
• B. Download and use the Amazon RDS certificatebundle and configure the PostgreSQL connection string with sslmode=allow.
• C. Set the rds.force_ssl=1 parameter in DB parameter group
• D. Download and use the Amazon RDS certificatebundle and configure the PostgreSQL connection string with sslmode=disable.
• E. Set the rds.force_ssl=0 parameter in DB parameter group
• F. Download and use the Amazon RDS certificatebundle and configure the PostgreSQL connection string with sslmode=verify-ca.
• G. Set the rds.force_ssl=1 parameter in DB parameter group
• H. Download and use the Amazon RDS certificatebundle and configure the PostgreSQL connection string with sslmode=verify-full.

Answer: D

NEW QUESTION 6
A financial company has allocated an Amazon RDS MariaDB DB instance with large storage capacity to accommodate migration efforts. Post-migration, the company purged unwanted data from the instance. The company now want to downsize storage to save money. The solution must have the least impact on production and near-zero downtime.
Which solution would meet these requirements?

• A. Create a snapshot of the old databases and restore the snapshot with the required storage
• B. Create a new RDS DB instance with the required storage and move the databases from the old instancesto the new instance using AWS DMS
• C. Create a new database using native backup and restore
• D. Create a new read replica and make it the primary by terminating the existing primary

Answer: A

NEW QUESTION 7
A company is using Amazon with Aurora Replicas for read-only workload scaling. A Database Specialist needs to split up two read-only applications so each application always connects to a dedicated replica. The Database Specialist wants to implement load balancing and high availability for the read-only applications.
Which solution meets these requirements?

• A. Use a specific instance endpoint for each replica and add the instance endpoint to each read-onlyapplication connection string.
• B. Use reader endpoints for both the read-only workload applications.
• C. Use a reader endpoint for one read-only application and use an instance endpoint for the other read-onlyapplication.
• D. Use custom endpoints for the two read-only applications.

Answer: B

NEW QUESTION 8
A company is running a two-tier ecommerce application in one AWS account. The web server is deployed using an Amazon RDS for MySQL Multi-AZ DB instance. A Developer mistakenly deleted the database in the production environment. The database has been restored, but this resulted in hours of downtime and lost revenue.
Which combination of changes in existing IAM policies should a Database Specialist make to prevent an error like this from happening in the future? (Choose three.)

• A. Grant least privilege to groups, users, and roles
• B. Allow all users to restore a database from a backup that will reduce the overall downtime to restore thedatabase
• C. Enable multi-factor authentication for sensitive operations to access sensitive resources and APIoperations
• D. Use policy conditions to restrict access to selective IP addresses
• E. Use AccessList Controls policy type to restrict users for database instance deletion
• F. Enable AWS CloudTrail logging and Enhanced Monitoring

Answer: ACD

NEW QUESTION 9
An ecommerce company has tasked a Database Specialist with creating a reporting dashboard that visualizes critical business metrics that will be pulled from the core production database running on Amazon Aurora. Data that is read by the dashboard should be available within 100 milliseconds of an update.
The Database Specialist needs to review the current configuration of the Aurora DB cluster and develop a cost-effective solution. The solution needs to accommodate the unpredictable read workload from the reporting dashboard without any impact on the write availability and performance of the DB cluster.
Which solution meets these requirements?

• A. Turn on the serverless option in the DB cluster so it can automatically scale based on demand.
• B. Provision a clone of the existing DB cluster for the new Application team.
• C. Create a separate DB cluster for the new workload, refresh from the source DB cluster, and set up ongoingreplication using AWS DMS change data capture (CDC).
• D. Add an automatic scaling policy to the DB cluster to add Aurora Replicas to the cluster based on CPUconsumption.

Answer: A

NEW QUESTION 10
A Database Specialist is creating a new Amazon Neptune DB cluster, and is attempting to load fata from Amazon S3 into the Neptune DB cluster using the Neptune bulk loader API. The Database Specialist receives the following error:
“Unable to connect to s3 endpoint. Provided source = s3://mybucket/graphdata/ and region = us-east-1. Please verify your S3 configuration.”
Which combination of actions should the Database Specialist take to troubleshoot the problem? (Choose two.)

• A. Check that Amazon S3 has an IAM role granting read access to Neptune
• B. Check that an Amazon S3 VPC endpoint exists
• C. Check that a Neptune VPC endpoint exists
• D. Check that Amazon EC2 has an IAM role granting read access to Amazon S3
• E. Check that Neptune has an IAM role granting read access to Amazon S3

Answer: BD

NEW QUESTION 11
An online gaming company is planning to launch a new game with Amazon DynamoDB as its data store. The database should be designated to support the following use cases:
Update scores in real time whenever a player is playing the game.
Retrieve a player’s score details for a specific game session.
A Database Specialist decides to implement a DynamoDB table. Each player has a unique user_id and each game has a unique game_id.
Which choice of keys is recommended for the DynamoDB table?

• A. Create a global secondary index with game_id as the partition key
• B. Create a global secondary index with user_id as the partition key
• C. Create a composite primary key with game_id as the partition key and user_id as the sort key
• D. Create a composite primary key with user_id as the partition key and game_id as the sort key

Answer: B

NEW QUESTION 12
A Database Specialist must create a read replica to isolate read-only queries for an Amazon RDS for MySQLDB instance. Immediately after creating the read replica, users that query it report slow response times.
What could be causing these slow response times?

• A. New volumes created from snapshots load lazily in the background
• B. Long-running statements on the master
• C. Insufficient resources on the master
• D. Overload of a single replication thread by excessive writes on the master

Answer: B

NEW QUESTION 13
A company is developing a multi-tier web application hosted on AWS using Amazon Aurora as the database.
The application needs to be deployed to production and other non-production environments. A Database Specialist needs to specify different MasterUsername and MasterUserPassword properties in the AWS CloudFormation templates used for automated deployment. The CloudFormation templates are version controlled in the company’s code repository. The company also needs to meet compliance requirement by routinely rotating its database master password for production.
What is most secure solution to store the master password?

• A. Store the master password in a parameter file in each environmen
• B. Reference the environment-specific parameter file in the CloudFormation template.
• C. Encrypt the master password using an AWS KMS ke
• D. Store the encrypted master password in theCloudFormation template.
• E. Use the secretsmanager dynamic reference to retrieve the master password stored in AWS SecretsManager and enable automatic rotation.
• F. Use the ssm dynamic reference to retrieve the master password stored in the AWS Systems ManagerParameter Store and enable automatic rotation.

Answer: C

NEW QUESTION 14
A Database Specialist is planning to create a read replica of an existing Amazon RDS for MySQL Multi-AZ DB instance. When using the AWS Management Console to conduct this task, the Database Specialist discovers that the source RDS DB instance does not appear in the read replica source selection box, so the read replica cannot be created.
What is the most likely reason for this?

• A. The source DB instance has to be converted to Single-AZ first to create a read replica from it.
• B. Enhanced Monitoring is not enabled on the source DB instance.
• C. The minor MySQL version in the source DB instance does not support read replicas.
• D. Automated backups are not enabled on the source DB instance.

Answer: D

NEW QUESTION 15
A company’s Security department established new requirements that state internal users must connect to an existing Amazon RDS for SQL Server DB instance using their corporate Active Directory (AD) credentials. A Database Specialist must make the modifications needed to fulfill this requirement.
Which combination of actions should the Database Specialist take? (Choose three.)

• A. Disable Transparent Data Encryption (TDE) on the RDS SQL Server DB instance.
• B. Modify the RDS SQL Server DB instance to use the directory for Windows authentication.Createappropriate new logins.
• C. Use the AWS Management Console to create an AWS Managed Microsoft A
• D. Create a trust relationshipwith the corporate AD.
• E. Stop the RDS SQL Server DB instance, modify it to use the directory for Windows authentication, and startit agai
• F. Create appropriate new logins.
• G. Use the AWS Management Console to create an AD Connecto
• H. Create a trust relationship withthecorporate AD.
• I. Configure the AWS Managed Microsoft AD domain controller Security Group.

Answer: CDF

NEW QUESTION 16
A company is building a new web platform where user requests trigger an AWS Lambda function that performs an insert into an Amazon Aurora MySQL DB cluster. Initial tests with less than 10 users on the new platform yielded successful execution and fast response times. However, upon more extensive tests with the actual target of 3,000 concurrent users, Lambda functions are unable to connect to the DB cluster and receive too many connections errors.
Which of the following will resolve this issue?

• A. Edit the my.cnf file for the DB cluster to increase max_connections
• B. Increase the instance size of the DB cluster
• C. Change the DB cluster to Multi-AZ
• D. Increase the number of Aurora Replicas

Answer: B

NEW QUESTION 17
A company has an Amazon RDS Multi-AZ DB instances that is 200 GB in size with an RPO of 6 hours. To meet the company’s disaster recovery policies, the database backup needs to be copied into another Region. The company requires the solution to be cost-effective and operationally efficient.
What should a Database Specialist do to copy the database backup into a different Region?

• A. Use Amazon RDS automated snapshots and use AWS Lambda to copy the snapshot into another Region
• B. Use Amazon RDS automated snapshots every 6 hours and use Amazon S3 cross-Region replication tocopy the snapshot into another Region
• C. Create an AWS Lambda function to take an Amazon RDS snapshot every 6 hours and use a secondLambda function to copy the snapshot into another Region
• D. Create a cross-Region read replica for Amazon RDS in another Region and take an automated snapshot ofthe read replica

Answer: D

NEW QUESTION 18
A company is planning to close for several days. A Database Specialist needs to stop all applications alongwith the DB instances to ensure employees do not have access to the systems during this time. All databasesare running on Amazon RDS for MySQL.
The Database Specialist wrote and executed a script to stop all the DB instances. When reviewing the logs,the Database Specialist found that Amazon RDS DB instances with read replicas did not stop.
How should the Database Specialist edit the script to fix this issue?

• A. Stop the source instances before stopping their read replicas
• B. Delete each read replica before stopping its corresponding source instance
• C. Stop the read replicas before stopping their source instances
• D. Use the AWS CLI to stop each read replica and source instance at the same

Answer: D

NEW QUESTION 19
A Database Specialist is migrating an on-premises Microsoft SQL Server application database to Amazon RDS for PostgreSQL using AWS DMS. The application requires minimal downtime when the RDS DB instance goes live.
What change should the Database Specialist make to enable the migration?

• A. Configure the on-premises application database to act as a source for an AWS DMS full load with ongoing change data capture (CDC)
• B. Configure the AWS DMS replication instance to allow both full load and ongoing change data capture(CDC)
• C. Configure the AWS DMS task to generate full logs to allow for ongoing change data capture (CDC)
• D. Configure the AWS DMS connections to allow two-way communication to allow for ongoing change datacapture (CDC)

Answer: A

NEW QUESTION 20
An AWS CloudFormation stack that included an Amazon RDS DB instance was accidentally deleted and recent data was lost. A Database Specialist needs to add RDS settings to the CloudFormation template to reduce the chance of accidental instance data loss in the future.
Which settings will meet this requirement? (Choose three.)

• A. Set DeletionProtection to True
• B. Set MultiAZ to True
• C. Set TerminationProtection to True
• D. Set DeleteAutomatedBackups to False
• E. Set DeletionPolicy to Delete
• F. Set DeletionPolicy to Retain

Answer: ACF

NEW QUESTION 21
A gaming company wants to deploy a game in multiple Regions. The company plans to save local high scores in Amazon DynamoDB tables in each Region. A Database Specialist needs to design a solution to automate the deployment of the database with identical configurations in additional Regions, as needed. The solution should also automate configuration changes across all Regions.
Which solution would meet these requirements and deploy the DynamoDB tables?

• A. Create an AWS CLI command to deploy the DynamoDB table to all the Regions and save it for future deployments.
• B. Create an AWS CloudFormation template and deploy the template to all the Regions.
• C. Create an AWS CloudFormation template and use a stack set to deploy the template to all the Regions.
• D. Create DynamoDB tables using the AWS Management Console in all the Regions and create a step-bystep guide for future deployments.

Answer: B

NEW QUESTION 22
......