Amazon DBS-C01 Exam Questions Instant Access

Question 1

A company wants to automate the creation of secure test databases with random credentials to be stored safely for later use. The credentials should have sufficient information about each test database to initiate a connection and perform automated credential rotations. The credentials should not be logged or stored anywhere in an unencrypted form.

Which steps should a Database Specialist take to meet these requirements using an AWS CloudFormation template?

ACreate the database with the MasterUserName and MasterUserPassword properties set to the default values. Then, create the secret with the user name and password set to the same default values. Add a Secret Target Attachment resource with the SecretId and TargetId properties set to the Amazon Resource Names (ARNs) of the secret and the database. Finally, update the secret's password value with a randomly generated string set by the GenerateSecretString property.

BAdd a Mapping property from the database Amazon Resource Name (ARN) to the secret ARN. Then, create the secret with a chosen user name and a randomly generated password set by the GenerateSecretString property. Add the database with the MasterUserName and MasterUserPassword properties set to the user name of the secret.

CAdd a resource of type AWS::SecretsManager::Secret and specify the GenerateSecretString property. Then, define the database user name in the SecureStringTemplate template. Create a resource for the database and reference the secret string for the MasterUserName and MasterUserPassword properties. Then, add a resource of type AWS::SecretsManagerSecretTargetAttachment with the SecretId and TargetId properties set to the Amazon Resource Names (ARNs) of the secret and the database.

DCreate the secret with a chosen user name and a randomly generated password set by the GenerateSecretString property. Add an SecretTargetAttachment resource with the SecretId property set to the Amazon Resource Name (ARN) of the secret and the TargetId property set to a parameter value matching the desired database ARN. Then, create a database with the MasterUserName and MasterUserPassword properties set to the previously created values in the secret.

Answer : C

Question 2

A database specialist manages a critical Amazon RDS for MySQL DB instance for a company. The data stored daily could vary from .01% to 10% of the current database size. The database specialist needs to ensure that the DB instance storage grows as needed.

What is the MOST operationally efficient and cost-effective solution?

AConfigure RDS Storage Auto Scaling.

BConfigure RDS instance Auto Scaling.

CModify the DB instance allocated storage to meet the forecasted requirements.

DMonitor the Amazon CloudWatch FreeStorageSpace metric daily and add storage as required.

Answer : A

If your workload is unpredictable, you can enable storage autoscaling for an Amazon RDS DB instance. With storage autoscaling enabled, when Amazon RDS detects that you are running out of free database space it automatically scales up your storage. https://aws.amazon.com/about-aws/whats-new/2019/06/rds-storage-auto-scaling/

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIOPS.StorageTypes.html#USER_PIOPS.Autoscaling

Question 3

A large financial services company uses Amazon ElastiCache for Redis for its new application that has a global user base. A database administrator must develop a caching solution that will be available

across AWS Regions and include low-latency replication and failover capabilities for disaster recovery (DR). The company's security team requires the encryption of cross-Region data transfers.

Which solution meets these requirements with the LEAST amount of operational effort?

AEnable cluster mode in ElastiCache for Redis. Then create multiple clusters across Regions and replicate the cache data by using AWS Database Migration Service (AWS DMS). Promote a cluster in the failover Region to handle production traffic when DR is required.

BCreate a global datastore in ElastiCache for Redis. Then create replica clusters in two other Regions. Promote one of the replica clusters as primary when DR is required.

CDisable cluster mode in ElastiCache for Redis. Then create multiple replication groups across Regions and replicate the cache data by using AWS Database Migration Service (AWS DMS). Promote a replication group in the failover Region to primary when DR is required.

DCreate a snapshot of ElastiCache for Redis in the primary Region and copy it to the failover Region. Use the snapshot to restore the cluster from the failover Region when DR is required.

Answer : B

Correct Answer: B

Explanation from Amazon documents:

Amazon ElastiCache for Redis is a fully managed in-memory data store that supports Redis, an open source, key-value database. Amazon ElastiCache for Redis provides several features to enhance the performance, availability, scalability, and security of your Redis data, such as cluster mode, global datastore, replication groups, snapshots, and encryption.

A global datastore is a feature that allows you to create a cross-Region read replica of your ElastiCache for Redis cluster. A global datastore consists of a primary cluster that is replicated across up to two other Regions as secondary clusters. A global datastore provides low-latency reads and high availability for your Redis data across Regions. A global datastore also supports encryption of cross-Region data transfers using AWS Key Management Service (AWS KMS).

To create a global datastore in ElastiCache for Redis, you need to do the following:

Create a primary cluster in one Region. You can use an existing cluster or create a new one. The cluster must have cluster mode enabled and use Redis engine version 5.0.6 or later.

Create a global datastore and add the primary cluster to it. You can use the AWS Management Console, the AWS CLI, or the ElastiCache API to create a global datastore.

Create one or two secondary clusters in other Regions and add them to the global datastore. The secondary clusters must have the same specifications as the primary cluster, such as node type, number of shards, and number of replicas per shard.

Enable encryption in transit and at rest for the primary and secondary clusters. Specify a customer master key (CMK) from AWS KMS for each cluster.

By creating a global datastore in ElastiCache for Redis and creating replica clusters in two other Regions, the database administrator can develop a caching solution that will be available across Regions and include low-latency replication and failover capabilities for DR. This solution will also meet the security requirement of encrypting cross-Region data transfers using AWS KMS. This solution will also require the least amount of operational effort, as it does not involve any data migration or manual intervention.

Therefore, option B is the correct solution to meet the requirements. Option A is not optimal because enabling cluster mode in ElastiCache for Redis and creating multiple clusters across Regions will not provide cross-Region replication or failover capabilities. Using AWS DMS to replicate the cache data by using AWS DMS will incur additional time and cost, and may not support encryption of cross-Region data transfers. Option C is not optimal because disabling cluster mode in ElastiCache for Redis and creating multiple replication groups across Regions will not provide cross-Region replication or failover capabilities. Using AWS DMS to replicate the cache data will incur additional time and cost, and may not support encryption of cross-Region data transfers. Option D is not optimal because creating a snapshot of ElastiCache for Redis in the primary Region and copying it to the failover Region will not provide low-latency replication or high availability for the Redis data across Regions. Using the snapshot to restore the cluster from the failover Region when DR is required will involve manual intervention and downtime.

Question 4

For the first time, a database professional is establishing a test graph database on Amazon Neptune. The database expert must input millions of rows of test observations from an Amazon S3.csv file. The database professional uploaded the data to the Neptune DB instance through a series of API calls.

Which sequence of actions enables the database professional to upload the data most quickly? (Select three.)

AEnsure Amazon Cognito returns the proper AWS STS tokens to authenticate the Neptune DB instance to the S3 bucket hosting the CSV file.

BEnsure the vertices and edges are specified in different .csv files with proper header column formatting.

CUse AWS DMS to move data from Amazon S3 to the Neptune Loader.

DCurl the S3 URI while inside the Neptune DB instance and then run the addVertex or addEdge commands.

EEnsure an IAM role for the Neptune DB instance is configured with the appropriate permissions to allow access to the file in the S3 bucket.

FCreate an S3 VPC endpoint and issue an HTTP POST to the databases loader endpoint.

Answer : B, E, F

https://docs.aws.amazon.com/neptune/latest/userguide/bulk-load-optimize.html

Question 5

A software company uses an Amazon RDS for MySQL Multi-AZ DB instance as a data store for its critical applications. During an application upgrade process, a database specialist runs a custom SQL script that accidentally removes some of the default permissions of the master user.

What is the MOST operationally efficient way to restore the default permissions of the master user?

AModify the DB instance and set a new master user password.

BUse AWS Secrets Manager to modify the master user password and restart the DB instance.

CCreate a new master user for the DB instance.

DReview the IAM user that owns the DB instance, and add missing permissions.

Answer : A

Question 6

A gaming company is evaluating Amazon ElastiCache as a solution to manage player leaderboards. Millions of players around the world will complete in annual tournaments. The company wants to implement an architecture that is highly available. The company also wants to ensure that maintenance activities have minimal impact on the availability of the gaming platform.

Which combination of steps should the company take to meet these requirements? (Choose two.)

ADeploy an ElastiCache for Redis cluster with read replicas and Multi-AZ enabled.

BDeploy an ElastiCache for Memcached global datastore.

CDeploy a single-node ElastiCache for Redis cluster with automatic backups enabled. In the event of a failure, create a new cluster and restore data from the most recent backup.

DUse the default maintenance window to apply any required system changes and mandatory updates as soon as they are available.

EChoose a preferred maintenance window at the time of lowest usage to apply any required changes and mandatory updates.

Answer : A, E

https://aws.amazon.com/blogs/database/configuring-amazon-elasticache-for-redis-for-higher-availability/

Question 7

A company is using Amazon RDS for MySQL to redesign its business application. A Database Specialist has noticed that the Development team is restoring their MySQL database multiple times a day when Developers make mistakes in their schema updates. The Developers sometimes need to wait hours to the restores to complete.

Multiple team members are working on the project, making it difficult to find the correct restore point for each mistake.

Which approach should the Database Specialist take to reduce downtime?

ADeploy multiple read replicas and have the team members make changes to separate replica instances

BMigrate to Amazon RDS for SQL Server, take a snapshot, and restore from the snapshot

CMigrate to Amazon Aurora MySQL and enable the Aurora Backtrack feature

DEnable the Amazon RDS for MySQL Backtrack feature

Answer : C

'Amazon Aurora, a fully-managed relational database service in AWS, is now offering a backtrack feature. With Amazon Aurora with MySQL compatibility, users can backtrack, or 'rewind', a database cluster to a specific point in time, without restoring data from a backup. The backtrack process allows a point in time to be specified with one second resolution, and the rewind process typically takes minutes. This new feature facilitates developers in undoing mistakes like deleting data inappropriately or dropping the wrong table.'

Amazon AWS Certified Database - Specialty DBS-C01 Exam Questions