[Q85-Q109] Easily To Pass New DBS-C01 Premium Exam Updated [Jan 09, 2024]

Share

Easily To Pass New DBS-C01 Premium Exam Updated [Jan 09, 2024]

DBS-C01 Certification All-in-One Exam Guide Jan-2024


By passing the AWS Certified Database - Specialty certification exam, individuals can demonstrate their expertise in AWS database services and enhance their career prospects. AWS Certified Database - Specialty (DBS-C01) Exam certification also provides individuals with access to exclusive AWS resources and community support, which can help them stay up to date with the latest developments in AWS database services.


Amazon DBS-C01 certification exam consists of 65 multiple-choice and multiple-response questions that must be completed within 180 minutes. DBS-C01 exam fee is $300, and it is available in several languages, including English, Japanese, Korean, and Simplified Chinese. To pass the exam, candidates must achieve a minimum score of 750 out of 1000 points. Upon passing the exam, candidates will receive a digital badge and a certificate that validates their skills and knowledge in AWS database services. AWS Certified Database - Specialty (DBS-C01) Exam certification is valid for three years, after which candidates must recertify to maintain their credentials.

 

NEW QUESTION # 85
A large retail company recently migrated its three-tier ecommerce applications to AWS. The company's backend database is hosted on Amazon Aurora PostgreSQL. During peak times, users complain about longer page load times. A database specialist reviewed Amazon RDS Performance Insights and found a spike in IO:XactSync wait events. The SQL attached to the wait events are all single INSERT statements.
How should this issue be resolved?

  • A. Modify the application to commit transactions in batches
  • B. Change the Aurora DB cluster storage to Provisioned IOPS (PIOPS).
  • C. Add an Amazon ElastiCache for Redis cluster and change the application to write through.
  • D. Add a new Aurora Replica to the Aurora DB cluster.

Answer: D


NEW QUESTION # 86
Amazon Neptune is being used by a corporation as the graph database for one of its products. During an ETL procedure, the company's data science team produced enormous volumes of temporary data by unintentionally. The Neptune DB cluster extended its storage capacity automatically to handle the added data, but the data science team erased the superfluous data.
What should a database professional do to prevent incurring extra expenditures for cluster volume space that is not being used?

  • A. Add a Neptune read replica to the cluster. Promote this replica as a new primary DB instance. Reset the storage space of the cluster.
  • B. Use the AWS CLI to turn on automatic resizing of the cluster volume.
  • C. Take a snapshot of the cluster volume. Restore the snapshot in another cluster with a smaller volume size.
  • D. Export the cluster data into a new Neptune DB cluster.

Answer: D

Explanation:
The only way to shrink the storage space used by your DB cluster when you have a large amount of unused allocated space is to export all the data in your graph and then reload it into a new DB cluster. Creating and restoring a snapshot does not reduce the amount of storage allocated for your DB cluster, because a snapshot retains the original image of the cluster's underlying storage.


NEW QUESTION # 87
A company is looking to move an on-premises IBM Db2 database running AIX on an IBM POWER7 server. Due to escalating support and maintenance costs, the company is exploring the option of moving the workload to an Amazon Aurora PostgreSQL DB cluster.
What is the quickest way for the company to gather data on the migration compatibility?

  • A. Run the AWS Schema Conversion Tool (AWS SCT) from the Db2 database to an Aurora DB cluster. Create a migration assessment report to evaluate the migration compatibility.
  • B. Perform a logical dump from the Db2 database and restore it to an Aurora DB cluster. Identify the gaps and compatibility of the objects migrated by comparing row counts from source and target tables.
  • C. Run native PostgreSQL logical replication from the Db2 database to an Aurora DB cluster to evaluate the migration compatibility.
  • D. Run AWS DMS from the Db2 database to an Aurora DB cluster. Identify the gaps and compatibility of the objects migrated by comparing the row counts from source and target tables.

Answer: A

Explanation:
Reference:
* Converts DB/DW schema from source to target (including procedures / views / secondary indexes / FK and constraints)
* Mainly for heterogeneous DB migrations and DW migrations


NEW QUESTION # 88
A clothing company uses a custom ecommerce application and a PostgreSQL database to sell clothes to thousands of users from multiple countries. The company is migrating its application and database from its on- premises data center to the AWS Cloud. The company has selected Amazon EC2 for the application and Amazon RDS for PostgreSQL for the database. The company requires database passwords to be changed every 60 days. A Database Specialist needs to ensure that the credentials used by the web application to connect to the database are managed securely.
Which approach should the Database Specialist take to securely manage the database credentials?

  • A. Store the credentials in a text file in an Amazon S3 bucket. Restrict permissions on the bucket to the IAM role associated with the instance profile only. Modify the application to download the text file and retrieve the credentials on start up. Update the text file every 60 days.
  • B. Store the credentials in an encrypted text file in the application AMI. Use AWS KMS to store the key for decrypting the text file. Modify the application to decrypt the text file and retrieve the credentials on start up. Update the text file and publish a new AMI every 60 days.
  • C. Configure IAM database authentication for the application to connect to the database. Create an IAM user and map it to a separate database user for each ecommerce user. Require users to update their passwords every 60 days.
  • D. Store the credentials in AWS Secrets Manager. Restrict permissions on the secret to only the IAM role associated with the instance profile. Modify the application to retrieve the credentials from Secrets Manager on start up. Configure the rotation interval to 60 days.

Answer: D


NEW QUESTION # 89
A company wants to improve its ecommerce website on AWS. A database specialist decides to add Amazon ElastiCache for Redis in the implementation stack to ease the workload off the database and shorten the website response times. The database specialist must also ensure the ecommerce website is highly available within the company's AWS Region.
How should the database specialist deploy ElastiCache to meet this requirement?

  • A. Launch an ElastiCache cluster in the primary Availability Zone and restore the cluster's snapshot to a different Availability Zone during disaster recovery.
  • B. Launch an ElastiCache for Redis cluster and select read replicas in different Availability Zones.
  • C. Launch two ElastiCache for Redis clusters in two different Availability Zones. Configure Redis streams to replicate the cache from the primary cluster to another.
  • D. Launch an ElastiCache for Redis cluster using the AWS CLI with the -cluster-enabled switch.

Answer: B

Explanation:
Explanation
https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/AutoFailover.html You can enable Multi-AZ only on Redis (cluster mode disabled) clusters that have at least one available read replica. Clusters without read replicas do not provide high availability or fault tolerance.


NEW QUESTION # 90
A retail company with its main office in New York and another office in Tokyo plans to build a database solution on AWS. The company's main workload consists of a mission-critical application that updates its application data in a data store. The team at the Tokyo office is building dashboards with complex analytical queries using the application dat a. The dashboards will be used to make buying decisions, so they need to have access to the application data in less than 1 second.
Which solution meets these requirements?

  • A. Use an Amazon RDS for MySQL DB instance deployed in the us-east-1 Region with a read replica instance in the ap-northeast-1 Region. Have the dashboard application read from the read replica.
  • B. Use an Amazon RDS DB instance deployed in the us-east-1 Region with a read replica instance in the ap- northeast-1 Region. Create an Amazon ElastiCache cluster in the ap-northeast-1 Region to cache application data from the replica to generate the dashboards.
  • C. Use an Amazon Aurora global database. Deploy the writer instance in the us-east-1 Region and the replica in the ap-northeast-1 Region. Have the dashboard application read from the replica ap-northeast-1 Region.
  • D. Use an Amazon DynamoDB global table in the us-east-1 Region with replication into the ap-northeast-1 Region. Use Amazon QuickSight for displaying dashboard results.

Answer: C

Explanation:
https://aws.amazon.com/blogs/database/aurora-postgresql-disaster-recovery-solutions-using-amazon-aurora-global-database/


NEW QUESTION # 91
A company with branch offices in Portland, New York, and Singapore has a three-tier web application that leverages a shared database. The database runs on Amazon RDS for MySQL and is hosted in the us-west-2 Region. The application has a distributed front end deployed in the us-west-2, ap-southheast-1, and us-east-2 Regions.
This front end is used as a dashboard for Sales Managers in each branch office to see current sales statistics. There are complaints that the dashboard performs more slowly in the Singapore location than it does in Portland or New York. A solution is needed to provide consistent performance for all users in each location.
Which set of actions will meet these requirements?

  • A. Take a snapshot of the instance in the us-west-2 Region. Create a new instance from the snapshot in the ap-southeast-1 Region. Reconfigure the ap-southeast-1 front-end dashboard to access this instance.
  • B. Create a new RDS instance in the ap-southeast-1 Region. Use AWS DMS and change data capture (CDC) to update the new instance in the ap-southeast-1 Region. Reconfigure the ap-southeast-1 front-end dashboard to access this instance.
  • C. Create an RDS read replica in the us-west-2 Region where the primary instance resides. Create a read replica in the ap-southeast-1 Region from the read replica located on the us-west-2 Region. Reconfigure the ap-southeast-1 front-end dashboard to access this instance.
  • D. Create an RDS read replica in the ap-southeast-1 Region from the primary RDS DB instance in the us- west-2 Region. Reconfigure the ap-southeast-1 front-end dashboard to access this instance.

Answer: D

Explanation:
https://aws.amazon.com/rds/features/read-replicas/
"Amazon RDS Read Replicas provide enhanced performance and durability for RDS database (DB) instances. They make it easy to elastically scale out beyond the capacity constraints of a single DB instance for read-heavy database workloads. You can create one or more replicas of a given source DB Instance and serve high-volume application read traffic from multiple copies of your data, thereby increasing aggregate read throughput. "
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReadRepl.XRgn.html


NEW QUESTION # 92
A company is using an Amazon RDS for MySQL DB instance for its internal applications. A security audit shows that the DB instance is not encrypted at rest. The company's application team needs to encrypt the DB instance.
What should the team do to meet this requirement?

  • A. Stop the DB instance and create a snapshot. Copy the snapshot into another encrypted snapshot. Restore the encrypted snapshot to a new encrypted DB instance. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.
  • B. Stop the DB instance and create an encrypted snapshot. Restore the encrypted snapshot to a new encrypted DB instance. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.
  • C. Create an encrypted read replica of the DB instance. Promote the read replica to master. Delete the original DB instance, and update the applications to point to the new encrypted DB instance.
  • D. Stop the DB instance and modify it to enable encryption. Apply this setting immediately without waiting for the next scheduled RDS maintenance window.

Answer: D


NEW QUESTION # 93
A company is planning to use Amazon RDS for SQL Server for one of its critical applications. The company's security team requires that the users of the RDS for SQL Server DB instance are authenticated with on-premises Microsoft Active Directory credentials.
Which combination of steps should a database specialist take to meet this requirement? (Choose three.)

  • A. Extend the on-premises Active Directory to AWS by using AD Connector.
  • B. Create a directory by using AWS Directory Service for Microsoft Active Directory.
  • C. Create an IAM role that uses the AmazonRDSDirectoryServiceAccess managed IAM policy.
  • D. Create an Active Directory domain controller on Amazon EC2.
  • E. Create a one-way forest trust from the AWS Directory Service for Microsoft Active Directory directory to the on-premises Active Directory.
  • F. Create an IAM user that uses the AmazonRDSDirectoryServiceAccess managed IAM policy.

Answer: B,C,E


NEW QUESTION # 94
A business's mission-critical production workload is being operated on a 500 GB Amazon Aurora MySQL DB cluster. A database engineer must migrate the workload without causing data loss to a new Amazon Aurora Serverless MySQL DB cluster.
Which approach will result in the LEAST amount of downtime and the LEAST amount of application impact?

  • A. Replicate the data between the existing DB cluster and a new Aurora Serverless DB cluster by using AWS Database Migration Service (AWS DMS) with change data capture (CDC) enabled.
  • B. Modify the existing DB cluster and update the Aurora configuration to Serverless.
  • C. Create an Aurora Serverless replica from the existing DB cluster and promote it to primary when the replica lag is minimal.
  • D. Create a snapshot of the existing DB cluster and restore it to a new Aurora Serverless DB cluster.

Answer: A

Explanation:
https://medium.com/@souri29/how-to-migrate-from-amazon-rds-aurora-or-mysql-to-amazon-aurora-serverless-55f9a4a74078


NEW QUESTION # 95
A business just transitioned from an on-premises Oracle database to Amazon Aurora PostgreSQL. Following the move, the organization observed that every day around 3:00 PM, the application's response time is substantially slower. The firm has determined that the problem is with the database, not the application.
Which set of procedures should the Database Specialist do to locate the erroneous PostgreSQL query most efficiently?

  • A. Create an Amazon CloudWatch dashboard to show the number of connections, CPU usage, and disk space consumption. Watch these dashboards during the next slow period.
  • B. Modify the logging database parameter to log all the queries related to locking in the database and then check the logs after the next slow period for this information.
  • C. Enable Amazon RDS Performance Insights on the PostgreSQL database. Use the metrics to identify any queries that are related to spikes in the graph during the next slow period.
  • D. Launch an Amazon EC2 instance, and install and configure an open-source PostgreSQL monitoring tool that will run reports based on the output error logs.

Answer: C

Explanation:
Explanation
https://aws.amazon.com/blogs/database/optimizing-and-tuning-queries-in-amazon-rds-postgresql-based-on-nativ
"AWS recently released a feature called Amazon RDS Performance Insights, which provides an easy-to-understand dashboard for detecting performance problems in terms of load." "AWS recently released a feature called Amazon RDS Performance Insights, which provides an easy-to-understand dashboard for detecting performance problems in terms of load."


NEW QUESTION # 96
A company's applications store data in Amazon Aurora MySQL DB clusters. The company has separate AWS accounts for its production, test, and development environments. To test new functionality in the test environment, the company's development team requires a copy of the production database four times a day.
Which solution meets this requirement with the MOST operational efficiency?

  • A. Take a manual snapshot in the production account. Export the snapshot to Amazon S3. Copy the snapshot to an S3 bucket in the test account. Restore the database from the snapshot.
  • B. Share the Aurora DB cluster with the test account. Create a snapshot of the production database in the test account. Restore the database from the snapshot.
  • C. Take a manual snapshot in the production account. Share the snapshot with the test account. Restore the database from the snapshot.
  • D. Share the Aurora DB cluster with the test account. Create a clone of the production database in the test account.

Answer: D

Explanation:
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Clone.html
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Clone.html#Aurora.Managing.Clone.Cross-Account


NEW QUESTION # 97
A database administrator needs to save a particular automated database snapshot from an Amazon RDS for Microsoft SQL Server DB instance for longer than the maximum number of days.
Which solution will meet these requirements in the MOST operationally efficient way?

  • A. Change the retention period of the snapshot to 45 days.
  • B. Create a native SQL Server backup. Save the backup to an Amazon S3 bucket.
  • C. Create a manual copy of the snapshot.
  • D. Export the contents of the snapshot to an Amazon S3 bucket.

Answer: C

Explanation:
Correct Answer: A
Explanation from Amazon documents:
Amazon RDS for Microsoft SQL Server supports two types of database snapshots: automated and manual. Automated snapshots are taken daily and are retained for a period of time that you specify, from 1 to 35 days. Manual snapshots are taken by you and are retained until you delete them.
To save a particular automated database snapshot for longer than the maximum number of days, the database administrator can create a manual copy of the snapshot. This can be done using the AWS Management Console, the AWS CLI, or the RDS API. The manual copy of the snapshot will be retained until it is deleted, regardless of the retention period of the automated snapshot. This solution is the most operationally efficient way to meet the requirements, because it does not require any additional steps or resources.
Therefore, option A is the correct solution to meet the requirements. Option B is not operationally efficient because it requires exporting the contents of the snapshot to an Amazon S3 bucket, which can be time-consuming and costly. Option C is not possible because the maximum retention period for automated snapshots is 35 days, not 45 days. Option D is not operationally efficient because it requires creating a native SQL Server backup and saving it to an Amazon S3 bucket, which can also be time-consuming and costly.


NEW QUESTION # 98
A company uses the Amazon DynamoDB table contractDB in us-east-1 for its contract system with the following schema:
orderID (primary key) timestamp (sort key) contract (map) createdBy (string) customerEmail (string) After a problem in production, the operations team has asked a database specialist to provide an IAM policy to read items from the database to debug the application. In addition, the developer is not allowed to access the value of the customerEmail field to stay compliant.
Which IAM policy should the database specialist use to achieve these requirements?

  • A.
  • B.
  • C.
  • D.

Answer: C


NEW QUESTION # 99
A company is using Amazon Redshift. A database specialist needs to allow an existing Redshift cluster to access data from other Redshift clusters. Amazon RDS for PostgreSQL databases, and AWS Glue Data Catalog tables.
Which combination of steps will meet these requirements with the MOST operational efficiency? (Choose three.)

  • A. Take a snapshot of the required tables from the other Redshift clusters. Restore the snapshot into the existing Redshift cluster.
  • B. Create external tables in the existing Redshift database to connect to the AWS Glue Data Catalog tables.
  • C. Use data sharing to access data from the other Redshift clusters.
  • D. Unload the RDS tables and the tables from the other Redshift clusters into Amazon S3. Run COPY commands to load the tables into the existing Redshift cluster.
  • E. Use federated queries to access data in Amazon RDS.
  • F. Use AWS Glue jobs to transfer the AWS Glue Data Catalog tables into Amazon S3. Create external tables in the existing Redshift database to access this data.

Answer: B,C,E

Explanation:
Explanation from Amazon documents:
To allow an existing Redshift cluster to access data from other Redshift clusters, Amazon RDS for PostgreSQL databases, and AWS Glue Data Catalog tables, the database specialist should use the following features123:
Create external tables in the existing Redshift database to connect to the AWS Glue Data Catalog tables.
This feature allows you to query data stored in Amazon S3 using the AWS Glue Data Catalog as the metadata store. You can create external tables in your Redshift database that reference the data catalog tables and use SQL to query the data in S3. This feature is operationally efficient because it does not require moving or copying the data from S3 to Redshift1.
Use federated queries to access data in Amazon RDS. This feature allows you to query and join data from one or more Amazon RDS for PostgreSQL and Amazon Aurora PostgreSQL databases with data already in your Amazon Redshift cluster. You can use SQL to query the RDS databases directly from your Redshift cluster without having to load or unload any data. This feature is operationally efficient because it reduces data movement and storage costs, and simplifies data access and analysis2.
Use data sharing to access data from the other Redshift clusters. This feature allows you to securely share live data across different Redshift clusters without the complexity and delays associated with data copies and data movement. You can share data within or across AWS accounts using a consumer-producer model. The producer cluster grants privileges on one or more schemas, called datashares, to the consumer clusters. The consumer clusters can then query the shared data in the producer cluster as if it were local tables. This feature is operationally efficient because it enables real-time and transactionally consistent data access, and eliminates data duplication and stale data issues3.
Therefore, option B, D, and E are the correct steps to meet the requirements with the most operational efficiency. Option A is not efficient because it involves taking and restoring snapshots, which can be time-consuming and costly. Option C is not efficient because it involves unloading and loading data between S3 and Redshift, which can also incur additional time and cost. Option F is not necessary because it involves transferring the AWS Glue Data Catalog tables into S3, which can be avoided by using external tables to connect to the data catalog tables directly.


NEW QUESTION # 100
A team of Database Specialists is currently investigating performance issues on an Amazon RDS for MySQL DB instance and is reviewing related metrics. The team wants to narrow the possibilities down to specific database wait events to better understand the situation.
How can the Database Specialists accomplish this?

  • A. Enable the option to push all database logs to Amazon CloudWatch for advanced analysis
  • B. Enable Amazon RDS Performance Insights and review the appropriate dashboard
  • C. Enable Enhanced Monitoring will the appropriate settings
  • D. Create appropriate Amazon CloudWatch dashboards to contain specific periods of time

Answer: B


NEW QUESTION # 101
A company has multiple applications serving data from a secure on-premises database. The company is migrating all applications and databases to the AWS Cloud. The IT Risk and Compliance department requires that auditing be enabled on all secure databases to capture all log ins, log outs, failed logins, permission changes, and database schema changes. A Database Specialist has recommended Amazon Aurora MySQL as the migration target, and leveraging the Advanced Auditing feature in Aurora.
Which events need to be specified in the Advanced Auditing configuration to satisfy the minimum auditing requirements? (Choose three.)

  • A. QUERY
  • B. TABLE
  • C. QUERY_DCL
  • D. QUERY_DDL
  • E. CONNECT
  • F. QUERY_DML

Answer: C,D,E

Explanation:
Connect - logins / DCL - authorizations (grant,revoke), DDL - schema updates


NEW QUESTION # 102
A company has a web application that uses Amazon API Gateway to route HTTPS requests to AWS Lambda functions. The application uses an Amazon Aurora MySQL database for its data storage. The application has experienced unpredictable surges in traffic that overwhelm the database with too many connection requests.
The company needs to implement a scalable solution that is more resilient to database failures as quickly as possible.
Which solution will meet these requirements MOST cost-effectively?

  • A. Migrate the Aurora MySQL database to Amazon Aurora Serverless by restoring a snapshot. Change the endpoint in the Lambda functions to use the new database.
  • B. Migrate the Aurora MySQL database to Amazon DynamoDB tables by using AWS Database Migration Service (AWS DMS). Change the endpoint in the Lambda functions to use the new database.
  • C. Increase the instance class for the Aurora database with more memory. Set a larger value for the max_connections parameter.
  • D. Create an Amazon EventBridge rule that invokes a Lambda function. Code the function to iterate over all existing connections and to call MySQL queries to end any connections in the sleep state.

Answer: A

Explanation:
Explanation from Amazon documents:
Amazon Aurora Serverless is an on-demand, auto-scaling configuration for Amazon Aurora MySQL that automatically starts up, shuts down, and scales capacity up or down based on your application's needs. Aurora Serverless is ideal for applications with unpredictable or intermittent traffic patterns that experience sudden spikes or drops in demand. Aurora Serverless also provides high availability and durability by replicating your data across multiple Availability Zones and continuously backing up your data to Amazon S3.
Migrating the Aurora MySQL database to Amazon Aurora Serverless by restoring a snapshot will meet the requirements of implementing a scalable solution that is more resilient to database failures as quickly as possible. This solution will allow the company to benefit from the auto-scaling and high availability features of Aurora Serverless, which will handle the unpredictable surges in traffic and prevent connection issues. This solution will also be cost-effective, as the company will only pay for the database capacity that they use. The migration process will be simple and fast, as the company can use the AWS Management Console, the AWS CLI, or the RDS API to restore a snapshot of their existing Aurora MySQL database to an Aurora Serverless DB cluster, and then change the endpoint in the Lambda functions to use the new database.
Therefore, option A is the correct solution to meet the requirements. Option B is not cost-effective because migrating the Aurora MySQL database to Amazon DynamoDB tables by using AWS DMS will incur additional time and cost, and may require significant code changes to adapt to a different data model and query language. Option C is not scalable because creating an EventBridge rule that invokes a Lambda function to end any connections in the sleep state will not address the root cause of the connection issues, which is the lack of database capacity to handle the traffic spikes. Option D is not scalable because increasing the instance class for the Aurora database with more memory and setting a larger value for the max_connections parameter will not provide auto-scaling or high availability, and may still result in connection issues if the traffic exceeds the provisioned capacity.


NEW QUESTION # 103
A startup company in the travel industry wants to create an application that includes a personal travel assistant to display information for nearby airports based on user location. The application will use Amazon DynamoDB and must be able to access and display attributes such as airline names, arrival times, and flight numbers. However, the application must not be able to access or display pilot names or passenger counts.
Which solution will meet these requirements MOST cost-effectively?

  • A. Use IAM policies with a combination of IAM conditions and actions to implement fine-grained access control.
  • B. Use DynamoDB resource policies to regulate access to specific tables, items, and attributes.
  • C. Use a proxy tier between the application and DynamoDB to regulate access to specific tables, items, and attributes.
  • D. Configure an AWS Lambda function to extract only allowed attributes from tables based on user profiles.

Answer: A

Explanation:
Explanation
https://aws.amazon.com/blogs/aws/fine-grained-access-control-for-amazon-dynamodb/


NEW QUESTION # 104
Developers have requested a new Amazon Redshift cluster so they can load new third-party marketing data.
The new cluster is ready and the user credentials are given to the developers. The developers indicate that their copy jobs fail with the following error message:
"Amazon Invalid operation: S3ServiceException:Access Denied,Status 403,Error AccessDenied." The developers need to load this data soon, so a database specialist must act quickly to solve this issue.
What is the MOST secure solution?

  • A. Create a new IAM user with access keys and a new role with read-only access to the Amazon S3 bucket.Add this role to the Amazon Redshift cluster. Change the copy job to use the access keys created.
  • B. Create a new IAM role with read-only access to the Amazon S3 bucket with the assume role action. Add this role to the developer IAM user ID used for the copy job that ended with an error message.
  • C. Create a new IAM role with the same user name as the Amazon Redshift developer user ID. Provide the IAM role with read-only access to Amazon S3 with the assume role action.
  • D. Create a new IAM role with read-only access to the Amazon S3 bucket and include the assume role action. Modify the Amazon Redshift cluster to add the IAM role.

Answer: D

Explanation:
Explanation
https://docs.aws.amazon.com/redshift/latest/gsg/rs-gsg-create-an-iam-role.html
"Now that you have created the new role, your next step is to attach it to your cluster. You can attach the role when you launch a new cluster or you can attach it to an existing cluster. In the next step, you attach the role to a new cluster."
https://docs.aws.amazon.com/redshift/latest/dg/copy-usage_notes-access-permissions.html


NEW QUESTION # 105
A company stores session history for its users in an Amazon DynamoDB table. The company has a large user base and generates large amounts of session data.
Teams analyze the session data for 1 week, and then the data is no longer needed. A database specialist needs to design an automated solution to purge session data that is more than 1 week old.
Which strategy meets these requirements with the MOST operational efficiency?

  • A. Create an AWS Step Functions state machine with a DynamoDB DeleteItem operation that uses the ConditionExpression parameter to delete items older than a week. Create an Amazon EventBridge (Amazon CloudWatch Events) scheduled rule that runs the Step Functions state machine on a weekly basis.
  • B. Create an AWS Lambda function to delete items older than a week from the DynamoDB table. Create an Amazon EventBridge (Amazon CloudWatch Events) scheduled rule that triggers the Lambda function on a weekly basis.
  • C. Enable TTL on the DynamoDB table and set a Number data type as the TTL attribute. DynamoDB will automatically delete items that have a TTL that is less than the current time.
  • D. Enable Amazon DynamoDB Streams on the table. Use a stream to invoke an AWS Lambda function to delete items older than a week from the DynamoDB table

Answer: C

Explanation:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/TTL.html


NEW QUESTION # 106
A manufacturing company's website uses an Amazon Aurora PostgreSQL DB cluster.
Which configurations will result in the LEAST application downtime during a failover? (Choose three.)

  • A. Set JDBC connection string timeout variables to a low value.
  • B. Edit and enable Aurora DB cluster cache management in parameter groups.
  • C. Set Java DNS caching timeouts to a high value.
  • D. Create an Amazon CloudWatch alert triggering a restore in another Availability Zone when the primary Aurora DB cluster is unreachable.
  • E. Use the provided read and write Aurora endpoints to establish a connection to the Aurora DB cluster.
  • F. Set TCP keepalive parameters to a high value.

Answer: B,D,E


NEW QUESTION # 107
An ecommerce company is running Amazon RDS for Microsoft SQL Server. The company is planning to perform testing in a development environment with production dat a. The development environment and the production environment are in separate AWS accounts. Both environments use AWS Key Management Service (AWS KMS) encrypted databases with both manual and automated snapshots. A database specialist needs to share a KMS encrypted production RDS snapshot with the development account.
Which combination of steps should the database specialist take to meet these requirements? (Select THREE.)

  • A. Create a manual snapshot. Share the snapshot from the production account to the development account.
  • B. Share the snapshot that is encrypted by using the development account default KMS encryption key.
  • C. Allow the development account to access the production account KMS encryption key.
  • D. Allow the production account to access the development account KMS encryption key.
  • E. Share the snapshot that is encrypted by using the production account custom KMS encryption key.
  • F. Create an automated snapshot. Share the snapshot from the production account to the development account.

Answer: A,C,E

Explanation:
Correct Answer: B, D, E
Explanation from Amazon documents:
To share an encrypted Amazon RDS snapshot with another account, you need to do the following123:
Create a manual snapshot of the production database. You can't share an automated snapshot directly, but you can copy it to a manual snapshot and then share it1.
Use a custom KMS encryption key for the manual snapshot. You can't share a snapshot that is encrypted using the default KMS key of the source account1.
Share the snapshot with the development account by specifying the account ID of the target account1.
Allow the development account to access the custom KMS key of the source account by adding the target account ID to the key policy of the source account2.
Copy the shared snapshot to the development account by using a KMS key of the target account2.
Therefore, option B, D, and E are the correct steps to meet the requirements. Option A is incorrect because you can't share an automated snapshot. Option C is incorrect because you can't share a snapshot that is encrypted using the default KMS key. Option F is unnecessary because the production account does not need to access the development account KMS key.


NEW QUESTION # 108
A company is running its line of business application on AWS, which uses Amazon RDS for MySQL at the persistent data store. The company wants to minimize downtime when it migrates the database to Amazon Aurora.
Which migration method should a Database Specialist use?

  • A. Make a backup of the RDS for MySQL DB instance using the mysqldump utility, create a new Aurora DB cluster, and restore the backup.
  • B. Take a snapshot of the RDS for MySQL DB instance and create a new Aurora DB cluster with the option to migrate snapshots.
  • C. Create an Aurora Replica from the RDS for MySQL DB instance and promote the Aurora DB cluster.
  • D. Create a clone of the RDS for MySQL DB instance and promote the Aurora DB cluster.

Answer: C

Explanation:
https://aws.amazon.com/blogs/database/best-practices-for-migrating-rds-for-mysql-databases-to-amazon-aurora/
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Migrating.html#AuroraPostgreSQL.Migrating.RDSPostgreSQL.Replica


NEW QUESTION # 109
......


The AWS Certified Database - Specialty exam is ideal for individuals who work with large-scale databases, data warehousing, and big data processing. DBS-C01 exam requires candidates to possess a deep understanding of database design principles, data modeling, query optimization, and database security. AWS Certified Database - Specialty (DBS-C01) Exam certification validates the candidate's ability to design and implement scalable, secure, and highly available database solutions using AWS services.

 

Last DBS-C01 practice test reviews: Practice Test Amazon dumps: https://www.prep4sures.top/DBS-C01-exam-dumps-torrent.html

Get Real DBS-C01 Exam Dumps [Jan-2024] Practice Tests: https://drive.google.com/open?id=1mdKvSmgm1h8NPlZJqyzfjxjly2POO2dU