DBS-C01 Online Practice Questions and Answers

A company is running a website on Amazon EC2 instances deployed in multiple Availability Zones (AZs). The site performs a high number of repetitive reads and writes each second on an Amazon RDS for MySQL Multi- AZ DB instance with General Purpose SSD (gp2) storage. After comprehensive testing and analysis, a database specialist discovers that there is high read latency and high CPU utilization on the DB instance.

Which approach should the database specialist to take to resolve this issue without changing the application?

A. Implementing sharding to distribute the load to multiple RDS for MySQL databases.

B. Use the same RDS for MySQL instance class with Provisioned IOPS (PIOPS) storage.

C. Add an RDS for MySQL read replica.

D. Modify the RDS for MySQL database class to a bigger size and implement Provisioned IOPS (PIOPS).

A development team asks a database specialist to create a copy of a production Amazon RDS for MySQL DB instance every morning. The development team will use the copied DB instance as a testing environment for development. The original DB instance and the copy will be hosted in different VPCs of the same AWS account. The development team wants the copy to be available by 6 AM each day and wants to use the same endpoint address each day.

Which combination of steps should the database specialist take to meet these requirements MOST cost-effectively? (Choose three.)

A. Create a snapshot of the production database each day before the 6 AM deadline.

B. Create an RDS for MySQL DB instance from the snapshot. Select the desired DB instance size.

C. Update a defined Amazon Route 53 CNAME record to point to the copied DB instance.

D. Set up an AWS Database Migration Service (AWS DMS) migration task to copy the snapshot to the copied DB instance.

E. Use the CopySnapshot action on the production DB instance to create a snapshot before 6 AM.

F. Update a defined Amazon Route 53 alias record to point to the copied DB instance.

A clothing company uses a custom ecommerce application and a PostgreSQL database to sell clothes to thousands of users from multiple countries. The company is migrating its application and database from its on- premises data center to the AWS Cloud. The company has selected Amazon EC2 for the application and Amazon RDS for PostgreSQL for the database. The company requires database passwords to be changed every 60 days. A Database Specialist needs to ensure that the credentials used by the web application to connect to the database are managed securely.

Which approach should the Database Specialist take to securely manage the database credentials?

A. Store the credentials in a text file in an Amazon S3 bucket. Restrict permissions on the bucket to the IAM role associated with the instance profile only. Modify the application to download the text file and retrieve the credentials on start up. Update the text file every 60 days.

B. Configure IAM database authentication for the application to connect to the database. Create an IAM user and map it to a separate database user for each ecommerce user. Require users to update their passwords every 60 days.

C. Store the credentials in AWS Secrets Manager. Restrict permissions on the secret to only the IAM role associated with the instance profile. Modify the application to retrieve the credentials from Secrets Manager on start up. Configure the rotation interval to 60 days.

D. Store the credentials in an encrypted text file in the application AMI. Use AWS KMS to store the key for decrypting the text file. Modify the application to decrypt the text file and retrieve the credentials on start up. Update the text file and publish a new AMI every 60 days.

A company uses an Amazon RDS for PostgreSQL database in the us-east-2 Region. The company wants to have a copy of the database available in the us-west-2 Region as part of a new disaster recovery strategy.

A database architect needs to create the new database. There can be little to no downtime to the source database. The database architect has decided to use AWS Database Migration Service (AWS DMS) to replicate the database across Regions. The database architect will use full load mode and then will switch to change data capture (CDC) mode.

Which parameters must the database architect configure to support CDC mode for the RDS for PostgreSQL database? (Choose three.)

A. Set wal_level = logical.

B. Set wal_level = replica.

C. Set max_replication_slots to 1 or more, depending on the number of DMS tasks.

D. Set max_replication_slots to 0 to support dynamic allocation of slots.

E. Set wal_sender_timeout to 20,000 milliseconds.

F. Set wal_sender_timeout to 5,000 milliseconds.

An ecommerce company is running Amazon RDS for Microsoft SQL Server. The company is planning to perform testing in a development environment with production data. The development environment and the production environment are in separate AWS accounts. Both environments use AWS Key Management Service (AWS KMS) encrypted databases with both manual and automated snapshots. A database specialist needs to share a KMS encrypted production RDS snapshot with the development account.

Which combination of steps should the database specialist take to meet these requirements? (Select THREE.)

A. Create an automated snapshot. Share the snapshot from the production account to the development account.

B. Create a manual snapshot. Share the snapshot from the production account to the development account.

C. Share the snapshot that is encrypted by using the development account default KMS encryption key.

D. Share the snapshot that is encrypted by using the production account custom KMS encryption key.

E. Allow the development account to access the production account KMS encryption key.

F. Allow the production account to access the development account KMS encryption key.

A database professional maintains a fleet of Amazon RDS database instances that are configured to utilize the default database parameter group. A database expert must connect a custom parameter group with certain database instances. When will the instances be allocated to this new parameter group once the database specialist performs this change?

A. Instantaneously after the change is made to the parameter group

B. In the next scheduled maintenance window of the DB instances

C. After the DB instances are manually rebooted

D. Within 24 hours after the change is made to the parameter group

A company has multiple applications serving data from a secure on-premises database. The company is migrating all applications and databases to the AWS Cloud. The IT Risk and Compliance department requires that auditing be enabled on all secure databases to capture all log ins, log outs, failed logins, permission changes, and database schema changes. A Database Specialist has recommended Amazon Aurora MySQL as the migration target, and leveraging the Advanced Auditing feature in Aurora.

Which events need to be specified in the Advanced Auditing configuration to satisfy the minimum auditing requirements? (Choose three.)

A. CONNECT

B. QUERY_DCL

C. QUERY_DDL

D. QUERY_DML

E. TABLE

F. QUERY

A company is moving its fraud detection application from on premises to the AWS Cloud and is using Amazon Neptune for data storage. The company has set up a 1 Gbps AWS Direct Connect connection to migrate 25 TB of fraud detection data from the on-premises data center to a Neptune DB instance. The company already has an Amazon S3 bucket and an S3 VPC endpoint, and 80% of the company's network bandwidth is available.

How should the company perform this data load?

A. Use an AWS SDK with a multipart upload to transfer the data from on premises to the S3 bucket. Use the Copy command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

B. Use AWS Database Migration Service (AWS DMS) to transfer the data from on premises to the S3 bucket. Use the Loader command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

C. Use AWS DataSync to transfer the data from on premises to the S3 bucket. Use the Loader command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

D. Use the AWS CLI to transfer the data from on premises to the S3 bucket. Use the Copy command for Neptune to move the data in bulk from the S3 bucket to the Neptune DB instance.

A company migrated one of its business-critical database workloads to an Amazon Aurora Multi-AZ DB cluster. The company requires a very low RTO and needs to improve the application recovery time after database failovers.

Which approach meets these requirements?

A. Set the max_connections parameter to 16,000 in the instance-level parameter group.

B. Modify the client connection timeout to 300 seconds.

C. Create an Amazon RDS Proxy database proxy and update client connections to point to the proxy endpoint.

D. Enable the query cache at the instance level.

A marketing company is using Amazon DocumentDB and requires that database audit logs be enabled. A Database Specialist needs to configure monitoring so that all data definition language (DDL) statements performed are visible to the Administrator. The Database Specialist has set the audit_logs parameter to enabled in the cluster parameter group.

What should the Database Specialist do to automatically collect the database logs for the Administrator?

A. Enable DocumentDB to export the logs to Amazon CloudWatch Logs

B. Enable DocumentDB to export the logs to AWS CloudTrail

C. Enable DocumentDB Events to export the logs to Amazon CloudWatch Logs

D. Configure an AWS Lambda function to download the logs using the download-db-log- file-portion operation and store the logs in Amazon S3