Amazon DBS-C01 Online Practice Questions and Exam Preparation

Amazon DBS-C01 Online Questions & Answers

• Question 81:

  A company's ecommerce website uses Amazon DynamoDB for purchase orders. Each order is made up of a Customer ID and an Order ID. The DynamoDB table uses the Customer ID as the partition key and the Order ID as the sort key.

  To meet a new requirement, the company also wants the ability to query the table by using a third attribute named Invoice ID. Queries using the Invoice ID must be strongly consistent. A database specialist must provide this capability with optimal performance and minimal overhead.

  What should the database administrator do to meet these requirements?

  A. Add a global secondary index on Invoice ID to the existing table.
  B. Add a local secondary index on Invoice ID to the existing table.
  C. Recreate the table by using the latest snapshot while adding a local secondary index on Invoice ID.
  D. Use the partition key and a FilterExpression parameter with a filter on Invoice ID for all queries.
  C. Recreate the table by using the latest snapshot while adding a local secondary index on Invoice ID.

  ---

  Explanation/Reference:

  as Local secondary index can only be created while creating the Dynamodb table. and query needs to use third attribute on top of primary and sort key, so Local Secondary index has primary and sort key as well as the third attribute. Global secondary index can be created without primary and sort key

• Question 82:

  A marketing company is developing an application to track responses to email message campaigns. The company needs a database storage solution that is optimized to work with highly connected data. The database needs to limit connections and programmatic access to the data by using IAM policies.

  Which solution will meet these requirements?

  A. Amazon ElastiCache for Redis cluster
  B. Amazon Aurora MySQL DB cluster
  C. Amazon DynamoDB table
  D. Amazon Neptune DB cluster
  D. Amazon Neptune DB cluster

  ---

  Explanation/Reference:

  Amazon Neptune is a fast, reliable, fully managed graph database service that makes it easy to build and run applications that work with highly connected data sets1. Graph databases are designed to store and query data that has complex

  relationships and interconnections, such as social networks, recommendation engines, fraud detection, and knowledge graphs2. Amazon Neptune supports two popular graph models: Property Graph and Resource Description Framework

  (RDF), and their respective query languages:

  Apache TinkerPop Gremlin and SPARQL2.

  Amazon Neptune also supports IAM policies to control access to the database resources and operations. You can use IAM database authentication to authenticate users and applications that connect to a Neptune DB cluster. IAM database

  authentication works with MySQL and PostgreSQL database clients. You can also use IAM roles to manage access to Neptune from other AWS services, such as Amazon EC2, AWS Lambda, and Amazon SageMaker2.

  Therefore, Amazon Neptune DB cluster is a suitable solution for the marketing company's requirements, as it can provide a graph database storage solution that is optimized for highly connected data and can limit connections and

  programmatic access by using IAM policies.

• Question 83:

  The Amazon CloudWatch metric for FreeLocalStorage on an Amazon Aurora MySQL DB instance shows that the amount of local storage is below 10 MB. A database engineer must increase the local storage available in the Aurora DB instance.

  How should the database engineer meet this requirement?

  A. Modify the DB instance to use an instance class that provides more local SSD storage.
  B. Modify the Aurora DB cluster to enable automatic volume resizing.
  C. Increase the local storage by upgrading the database engine version.
  D. Modify the DB instance and configure the required storage volume in the configuration section.
  A. Modify the DB instance to use an instance class that provides more local SSD storage.

  ---

  Explanation/Reference:

  https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.AuroraMySQL.Monitoring.Metrics.html Unlike for other DB engines, for Aurora DB instances this metric reports the amount of storage available to each DB instance. This value depends on the DB instance class (for pricing information, see the Amazon RDS product page). You can increase the amount of free storage space for an instance by choosing a larger DB instance class for your instance."

• Question 84:

  A database expert is responsible for building a highly available online transaction processing (OLTP) solution that makes use of Amazon RDS for MySQL production databases. Disaster recovery criteria include a cross-regional deployment and an RPO and RTO of 5 and 30 minutes, respectively.

  What should the database professional do to ensure that the database meets the criteria for high availability and disaster recovery?

  A. Use a Multi-AZ deployment in each Region.
  B. Use read replica deployments in all Availability Zones of the secondary Region.
  C. Use Multi-AZ and read replica deployments within a Region.
  D. Use Multi-AZ and deploy a read replica in a secondary Region.
  D. Use Multi-AZ and deploy a read replica in a secondary Region.

• Question 85:

  An AWS CloudFormation stack that included an Amazon RDS DB instance was accidentally deleted and recent data was lost. A Database Specialist needs to add RDS settings to the CloudFormation template to reduce the chance of accidental instance data loss in the future.

  Which settings will meet this requirement? (Choose three.)

  A. Set DeletionProtection to True
  B. Set MultiAZ to True
  C. Set TerminationProtection to True
  D. Set DeleteAutomatedBackups to False
  E. Set DeletionPolicy to Delete
  F. Set DeletionPolicy to Retain
  A. Set DeletionProtection to True
  C. Set TerminationProtection to True
  F. Set DeletionPolicy to Retain

  ---

  Explanation/Reference:

  Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws- attribute- deletionpolicy.html https://aws.amazon.com/premiumsupport/knowledge-center/cloudformation-accidental- updates/

• Question 86:

  A company has a production environment running on Amazon RDS for SQL Server with an in-house web application as the front end. During the last application maintenance window, new functionality was added to the web application to enhance the reporting capabilities for management. Since the update, the application is slow to respond to some reporting queries.

  How should the company identify the source of the problem?

  A. Install and configure Amazon CloudWatch Application Insights for Microsoft .NET and Microsoft SQL Server. Use a CloudWatch dashboard to identify the root cause.
  B. Enable RDS Performance Insights and determine which query is creating the problem. Request changes to the query to address the problem.
  C. Use AWS X-Ray deployed with Amazon RDS to track query system traces.
  D. Create a support request and work with AWS Support to identify the source of the issue.
  B. Enable RDS Performance Insights and determine which query is creating the problem. Request changes to the query to address the problem.

  ---

  Explanation/Reference:

  Amazon RDS Performance Insights is a database performance tuning and monitoring feature that helps you quickly assess the load on your database, and determine when and where to take action. Performance Insights allows non-experts to detect performance problems with an easy-to-understand dashboard that visualizes database load. https://aws.amazon.com/rds/performance-insights/

• Question 87:

  A company's application team needs to select an AWS managed database service to store application and user data. The application team is familiar with MySQL but is open to new solutions. The application and user data is stored in 10

  tables and is de-normalized. The application will access this data through an API layer using an unique ID in each table. The company expects the traffic to be light at first, but the traffic Will Increase to thousands of transactions each second

  within the first year- The database service must support active reads and writes in multiple AWS Regions at the same time_ Query response times need to be less than 100 ms.

  Which AWS database solution will meet these requirements?

  A. Deploy an Amazon RDS for MySQL environment in each Region and leverage AWS Database Migration Service (AWS DMS) to set up a multi-Region bidirectional replication
  B. Deploy an Amazon Aurora MySOL global database with write forwarding turned on
  C. Deploy an Amazon DynamoDB database with global tables
  D. Deploy an Amazon DocumentDB global cluster across multiple Regions.
  C. Deploy an Amazon DynamoDB database with global tables

  ---

  Explanation/Reference:

• Question 88:

  A financial services company has an application deployed on AWS that uses an Amazon Aurora PostgreSQL DB cluster. A recent audit showed that no log files contained database administrator activity. A database specialist needs to recommend a solution to provide database access and activity logs. The solution should use the least amount of effort and have a minimal impact on performance.

  Which solution should the database specialist recommend?

  A. Enable Aurora Database Activity Streams on the database in synchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Kinesis Data Firehose destination to an Amazon S3 bucket.
  B. Create an AWS CloudTrail trail in the Region where the database runs. Associate the database activity logs with the trail.
  C. Enable Aurora Database Activity Streams on the database in asynchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Firehose destination to an Amazon S3 bucket.
  D. Allow connections to the DB cluster through a bastion host only. Restrict database access to the bastion host and application servers. Push the bastion host logs to Amazon CloudWatch Logs using the CloudWatch Logs agent.
  C. Enable Aurora Database Activity Streams on the database in asynchronous mode. Connect the Amazon Kinesis data stream to Kinesis Data Firehose. Set the Firehose destination to an Amazon S3 bucket.

  ---

  Explanation/Reference:

  https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/DBActivityStreams.Ov erview.html

• Question 89:

  A clothing company uses a custom ecommerce application and a PostgreSQL database to sell clothes to thousands of users from multiple countries. The company is migrating its application and database from its on- premises data center to the AWS Cloud. The company has selected Amazon EC2 for the application and Amazon RDS for PostgreSQL for the database. The company requires database passwords to be changed every 60 days. A Database Specialist needs to ensure that the credentials used by the web application to connect to the database are managed securely.

  Which approach should the Database Specialist take to securely manage the database credentials?

  A. Store the credentials in a text file in an Amazon S3 bucket. Restrict permissions on the bucket to the IAM role associated with the instance profile only. Modify the application to download the text file and retrieve the credentials on start up. Update the text file every 60 days.
  B. Configure IAM database authentication for the application to connect to the database. Create an IAM user and map it to a separate database user for each ecommerce user. Require users to update their passwords every 60 days.
  C. Store the credentials in AWS Secrets Manager. Restrict permissions on the secret to only the IAM role associated with the instance profile. Modify the application to retrieve the credentials from Secrets Manager on start up. Configure the rotation interval to 60 days.
  D. Store the credentials in an encrypted text file in the application AMI. Use AWS KMS to store the key for decrypting the text file. Modify the application to decrypt the text file and retrieve the credentials on start up. Update the text file and publish a new AMI every 60 days.
  C. Store the credentials in AWS Secrets Manager. Restrict permissions on the secret to only the IAM role associated with the instance profile. Modify the application to retrieve the credentials from Secrets Manager on start up. Configure the rotation interval to 60 days.

  ---

  Explanation/Reference:

• Question 90:

  A company uses an Amazon Redshift cluster to run its analytical workloads. Corporate policy requires that the company's data be encrypted at rest with customer managed keys. The company's disaster recovery plan requires that backups of the cluster be copied into another AWS Region on a regular basis.

  How should a database specialist automate the process of backing up the cluster data in compliance with these policies?

  A. Copy the AWS Key Management Service (AWS KMS) customer managed key from the source Region to the destination Region. Set up an AWS Glue job in the source Region to copy the latest snapshot of the Amazon Redshift cluster from the source Region to the destination Region. Use a time-based schedule in AWS Glue to run the job on a daily basis.
  B. Create a new AWS Key Management Service (AWS KMS) customer managed key in the destination Region. Create a snapshot copy grant in the destination Region specifying the new key. In the source Region, configure cross-Region snapshots for the Amazon Redshift cluster specifying the destination Region, the snapshot copy grant, and retention periods for the snapshot.
  C. Copy the AWS Key Management Service (AWS KMS) customer-managed key from the source Region to the destination Region. Create Amazon S3 buckets in each Region using the keys from their respective Regions. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule an AWS Lambda function in the source Region to copy the latest snapshot to the S3 bucket in that Region. Configure S3 Cross-Region Replication to copy the snapshots to the destination Region, specifying the source and destination KMS key IDs in the replication configuration.
  D. Use the same customer-supplied key materials to create a CMK with the same private key in the destination Region. Configure cross-Region snapshots in the source Region targeting the destination Region. Specify the corresponding CMK in the destination Region to encrypt the snapshot.
  B. Create a new AWS Key Management Service (AWS KMS) customer managed key in the destination Region. Create a snapshot copy grant in the destination Region specifying the new key. In the source Region, configure cross-Region snapshots for the Amazon Redshift cluster specifying the destination Region, the snapshot copy grant, and retention periods for the snapshot.

  ---

  Explanation/Reference:

  According to the Amazon Redshift documentation1, you can enable database encryption for your clusters to help protect data at rest. You can use either AWS Key Management Service (AWS KMS) or a hardware security module (HSM) to

  manage the top-level encryption keys in this hierarchy. The process that Amazon Redshift uses for encryption differs depending on how you manage keys.

  To copy encrypted snapshots across Regions, you need to create a snapshot copy grant in the destination Region and specify a CMK in that Region. You also need to configure cross-Region snapshots in the source Region and provide the

  destination Region, the snapshot copy grant, and retention periods for the snapshots. This way, you can automate the process of backing up the cluster data in compliance with the corporate policies.