AWS Certified Database - Specialty

• #141

  Developers have requested a new Amazon Redshift cluster so they can load new third-party marketing data. The new cluster is ready and the user credentials are given to the developers. The developers indicate that their copy jobs fail with the following error message: 'Amazon Invalid operation: S3ServiceException:Access Denied,Status 403,Error AccessDenied.' The developers need to load this data soon, so a database specialist must act quickly to solve this issue. What is the MOST secure solution?

  • ACreate a new IAM role with the same user name as the Amazon Redshift developer user ID. Provide the IAM role with read-only access to Amazon S3 with the assume role action.
  • BCreate a new IAM role with read-only access to the Amazon S3 bucket and include the assume role action. Modify the Amazon Redshift cluster to add the IAM role.
  • CCreate a new IAM role with read-only access to the Amazon S3 bucket with the assume role action. Add this role to the developer IAM user ID used for the copy job that ended with an error message.
  • DCreate a new IAM user with access keys and a new role with read-only access to the Amazon S3 bucket. Add this role to the Amazon Redshift cluster. Change the copy job to use the access keys created.
  उत्तर दिखाएँ
• #142

  A company is developing a multi-tier web application hosted on AWS using Amazon Aurora as the database. The application needs to be deployed to production and other non-production environments. A Database Specialist needs to specify different MasterUsername and MasterUserPassword properties in the AWS CloudFormation templates used for automated deployment. The CloudFormation templates are version controlled in the company's code repository. The company also needs to meet compliance requirement by routinely rotating its database master password for production. What is most secure solution to store the master password?

  • AStore the master password in a parameter file in each environment. Reference the environment-specific parameter file in the CloudFormation template.
  • BEncrypt the master password using an AWS KMS key. Store the encrypted master password in the CloudFormation template.
  • CUse the secretsmanager dynamic reference to retrieve the master password stored in AWS Secrets Manager and enable automatic rotation.
  • DUse the ssm dynamic reference to retrieve the master password stored in the AWS Systems Manager Parameter Store and enable automatic rotation.
  उत्तर दिखाएँ
• #143

  A company wants to migrate its on-premises MySQL databases to Amazon RDS for MySQL. To comply with the company’s security policy, all databases must be encrypted at rest. RDS DB instance snapshots must also be shared across various accounts to provision testing and staging environments. Which solution meets these requirements?

  • ACreate an RDS for MySQL DB instance with an AWS Key Management Service (AWS KMS) customer managed CMK. Update the key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, andthen allow the kms:CreateGrant action.
  • BCreate an RDS for MySQL DB instance with an AWS managed CMK. Create a new key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.
  • CCreate an RDS for MySQL DB instance with an AWS owned CMK. Create a new key policy to include the administrator user name of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.
  • DCreate an RDS for MySQL DB instance with an AWS CloudHSM key. Update the key policy to include the Amazon Resource Name (ARN) of the other AWS accounts as a principal, and then allow the kms:CreateGrant action.
  उत्तर दिखाएँ
• #144

  An electric utility company wants to store power plant sensor data in an Amazon DynamoDB table. The utility company has over 100 power plants and each power plant has over 200 sensors that send data every 2 seconds. The sensor data includes time with milliseconds precision, a value, and a fault attribute if the sensor is malfunctioning. Power plants are identified by a globally unique identifier. Sensors are identified by a unique identifier within each power plant. A database specialist needs to design the table to support an efficient method of finding all faulty sensors within a given power plant. Which schema should the database specialist use when creating the DynamoDB table to achieve the fastest query time when looking for faulty sensors?

  • AUse the plant identifier as the partition key and the measurement time as the sort key. Create a global secondary index (GSI) with the plant identifier as the partition key and the fault attribute as the sort key.
  • BCreate a composite of the plant identifier and sensor identifier as the partition key. Use the measurement time as the sort key. Create a local secondary index (LSI) on the fault attribute.
  • CCreate a composite of the plant identifier and sensor identifier as the partition key. Use the measurement time as the sort key. Create a global secondary index (GSI) with the plant identifier as the partition key and the fault attribute as thesort key.
  • DUse the plant identifier as the partition key and the sensor identifier as the sort key. Create a local secondary index (LSI) on the fault attribute.
  उत्तर दिखाएँ
• #145

  A company wants to migrate its existing on-premises Oracle database to Amazon Aurora PostgreSQL. The migration must be completed with minimal downtime using AWS DMS. A Database Specialist must validate that the data was migrated accurately from the source to the target before the cutover. The migration must have minimal impact on the performance of the source database. Which approach will MOST effectively meet these requirements?

  • AUse the AWS Schema Conversion Tool (AWS SCT) to convert source Oracle database schemas to the target Aurora DB cluster. Verify the datatype of the columns.
  • BUse the table metrics of the AWS DMS task created for migrating the data to verify the statistics for the tables being migrated and to verify that the data definition language (DDL) statements are completed.
  • CEnable the AWS Schema Conversion Tool (AWS SCT) premigration validation and review the premigration checklist to make sure there are no issues with the conversion.
  • DEnable AWS DMS data validation on the task so the AWS DMS task compares the source and target records, and reports any mismatches.
  उत्तर दिखाएँ
• #146

  A company is using Amazon RDS for MySQL to redesign its business application. A Database Specialist has noticed that the Development team is restoring their MySQL database multiple times a day when Developers make mistakes in their schema updates. The Developers sometimes need to wait hours to the restores to complete. Multiple team members are working on the project, making it difficult to find the correct restore point for each mistake. Which approach should the Database Specialist take to reduce downtime?

  • ADeploy multiple read replicas and have the team members make changes to separate replica instances.
  • BMigrate to Amazon RDS for SQL Server, take a snapshot, and restore from the snapshot.
  • CMigrate to Amazon Aurora MySQL and enable the Aurora Backtrack feature.
  • DEnable the Amazon RDS for MySQL Backtrack feature.
  उत्तर दिखाएँ
• #147

  A company uses an Amazon RDS for PostgreSQL DB instance for its customer relationship management (CRM) system. New compliance requirements specify that the database must be encrypted at rest. Which action will meet these requirements?

  • ACreate an encrypted copy of manual snapshot of the DB instance. Restore a new DB instance from the encrypted snapshot.
  • BModify the DB instance and enable encryption.
  • CRestore a DB instance from the most recent automated snapshot and enable encryption.
  • DCreate an encrypted read replica of the DB instance. Promote the read replica to a standalone instance.
  उत्तर दिखाएँ
• #148

  A large financial services company requires that all data be encrypted in transit. A Developer is attempting to connect to an Amazon RDS DB instance using the company VPC for the first time with credentials provided by a Database Specialist. Other members of the Development team can connect, but this user is consistently receiving an error indicating a communications link failure. The Developer asked the Database Specialist to reset the password a number of times, but the error persists. Which step should be taken to troubleshoot this issue?

  • AEnsure that the database option group for the RDS DB instance allows ingress from the Developer machine's IP address.
  • BEnsure that the RDS DB instance's subnet group includes a public subnet to allow the Developer to connect.
  • CEnsure that the RDS DB instance has not reached its maximum connections limit.
  • DEnsure that the connection is using SSL and is addressing the port where the RDS DB instance is listening for encrypted connections.
  उत्तर दिखाएँ
• #1492 चुनें

  A company is using Amazon RDS for PostgreSQL. The Security team wants all database connection requests to be logged and retained for 180 days. The RDS for PostgreSQL DB instance is currently using the default parameter group. A Database Specialist has identified that setting the log_connections parameter to 1 will enable connections logging. Which combination of steps should the Database Specialist take to meet the logging and retention requirements? (Choose two.)

  • AUpdate the log_connections parameter in the default parameter group.
  • BCreate a custom parameter group, update the log_connections parameter, and associate the parameter with the DB instance.
  • CEnable publishing of database engine logs to Amazon CloudWatch Logs and set the event expiration to 180 days.
  • DEnable publishing of database engine logs to an Amazon S3 bucket and set the lifecycle policy to 180 days.
  • EConnect to the RDS PostgreSQL host and update the log_connections parameter in the postgresql.conf file.
  उत्तर दिखाएँ
• #150

  A company has an AWS CloudFormation template written in JSON that is used to launch new Amazon RDS for MySQL DB instances. The security team has asked a database specialist to ensure that the master password is automatically rotated every 30 days for all new DB instances that are launched using the template. What is the MOST operationally efficient solution to meet these requirements?

  • ASave the password in an Amazon S3 object. Encrypt the S3 object with an AWS KMS key. Set the KMS key to be rotated every 30 days by setting the EnableKeyRotation property to true. Use a CloudFormation custom resource to readthe S3 object to extract the password.
  • BCreate an AWS Lambda function to rotate the secret. Modify the CloudFormation template to add an AWS::SecretsManager::RotationSchedule resource.
  • CModify the CloudFormation template to use the AWS KMS key as the database password. Configure an Amazon EventBridge rule to invoke the KMS API to rotate the key every 30 days by setting the ScheduleExpression parameter to/30.
  • DIntegrate the Amazon RDS for MySQL DB instances with AWS IAM and centrally manage the master database user password.
  उत्तर दिखाएँ
• #1512 चुनें

  A company is planning on migrating a 500-GB database from Oracle to Amazon Aurora PostgreSQL using the AWS Schema Conversion Tool (AWS SCT) and AWS DMS. The database does not have any stored procedures to migrate but has some tables that are large or partitioned. The application is critical for business so a migration with minimal downtime is preferred. Which combination of steps should a database specialist take to accelerate the migration process? (Choose three.)

  • AUse the AWS SCT data extraction agent to migrate the schema from Oracle to Aurora PostgreSQL.
  • BFor the large tables, change the setting for the maximum number of tables to load in parallel and perform a full load using AWS DMS.
  • CFor the large tables, create a table settings rule with a parallel load option in AWS DMS, then perform a full load using DMS.
  • DUse AWS DMS to set up change data capture (CDC) for continuous replication until the cutover date.
  • EUse AWS SCT to convert the schema from Oracle to Aurora PostgreSQL.
  • FUse AWS DMS to convert the schema from Oracle to Aurora PostgreSQL and for continuous replication.
  उत्तर दिखाएँ
• #152

  A global digital advertising company captures browsing metadata to contextually display relevant images, pages, and links to targeted users. A single page load can generate multiple events that need to be stored individually. The maximum size of an event is 200 KB and the average size is 10 KB. Each page load must query the user's browsing history to provide targeting recommendations. The advertising company expects over 1 billion page visits per day from users in the United States, Europe, Hong Kong, and India. The structure of the metadata varies depending on the event. Additionally, the browsing metadata must be written and read with very low latency to ensure a good viewing experience for the users. Which database solution meets these requirements?

  • AAmazon DocumentDB.
  • BAmazon RDS Multi-AZ deployment.
  • CAmazon DynamoDB global table.
  • DAmazon Aurora Global Database.
  उत्तर दिखाएँ
• #153

  A bank plans to use an Amazon RDS for MySQL DB instance. The database should support read-intensive traffic with very few repeated queries. Which solution meets these requirements?

  • ACreate an Amazon ElastiCache cluster. Use a write-through strategy to populate the cache.
  • BCreate an Amazon ElastiCache cluster. Use a lazy loading strategy to populate the cache.
  • CChange the DB instance to Multi-AZ with a standby instance in another AWS Region.
  • DCreate a read replica of the DB instance. Use the read replica to distribute the read traffic.
  उत्तर दिखाएँ
• #154

  To meet new data compliance requirements, a company needs to keep critical data durably stored and readily accessible for 7 years. Data that is more than 1 year old is considered archival data and must automatically be moved out of the Amazon Aurora MySQL DB cluster every week. On average, around 10 GB of new data is added to the database every month. A database specialist must choose the most operationally efficient solution to migrate the archival data to Amazon S3. Which solution meets these requirements?

  • ACreate a custom script that exports archival data from the DB cluster to Amazon S3 using a SQL view, then deletes the archival data from the DB cluster.
  • BConfigure an AWS Lambda function that exports archival data from the DB cluster to Amazon S3 using a SELECT INTO OUTFILE S3 statement, then deletes the archival data from the DB cluster. Schedule the Lambda function to runweekly using Amazon EventBridge (Amazon CloudWatch Events).
  • CConfigure two AWS Lambda functions: one that exports archival data from the DB cluster to Amazon S3 using the mysqldump utility, and another that deletes the archival data from the DB cluster. Schedule both Lambda functions to runweekly using Amazon EventBridge (Amazon CloudWatch Events).
  • DUse AWS Database Migration Service (AWS DMS) to continually export the archival data from the DB cluster to Amazon S3. Configure an AWS Data Pipeline process to run weekly that executes a custom SQL script to delete thearchival data from the DB cluster.
  उत्तर दिखाएँ
• #155

  A large automobile company is migrating the database of a critical financial application to Amazon DynamoDB. The company's risk and compliance policy requires that every change in the database be recorded as a log entry for audits. The system is anticipating more than 500,000 log entries each minute. Log entries should be stored in batches of at least 100,000 records in each file in Apache Parquet format. How should a database specialist implement these requirements with DynamoDB?

  • AEnable Amazon DynamoDB Streams on the table. Create an AWS Lambda function triggered by the stream. Write the log entries to an Amazon S3 object.
  • BCreate a backup plan in AWS Backup to back up the DynamoDB table once a day. Create an AWS Lambda function that restores the backup in another table and compares both tables for changes. Generate the log entries and write them to an Amazon S3 object.
  • CEnable AWS CloudTrail logs on the table. Create an AWS Lambda function that reads the log files once an hour and filters DynamoDB API actions. Write the filtered log files to Amazon S3.
  • DEnable Amazon DynamoDB Streams on the table. Create an AWS Lambda function triggered by the stream. Write the log entries to an Amazon Kinesis Data Firehose delivery stream with buffering and Amazon S3 as the destination.
  उत्तर दिखाएँ
• #156

  The Development team recently executed a database script containing several data definition language (DDL) and data manipulation language (DML) statements on an Amazon Aurora MySQL DB cluster. The release accidentally deleted thousands of rows from an important table and broke some application functionality. This was discovered 4 hours after the release. Upon investigation, a Database Specialist tracked the issue to a DELETE command in the script with an incorrect WHERE clause filtering the wrong set of rows. The Aurora DB cluster has Backtrack enabled with an 8-hour backtrack window. The Database Administrator also took a manual snapshot of the DB cluster before the release started. The database needs to be returned to the correct state as quickly as possible to resume full application functionality. Data loss must be minimal. How can the Database Specialist accomplish this?

  • AQuickly rewind the DB cluster to a point in time before the release using Backtrack.
  • BPerform a point-in-time recovery (PITR) of the DB cluster to a time before the release and copy the deleted rows from the restored database to the original database.
  • CRestore the DB cluster using the manual backup snapshot created before the release and change the application configuration settings to point to the new DB cluster.
  • DCreate a clone of the DB cluster with Backtrack enabled. Rewind the cloned cluster to a point in time before the release. Copy deleted rows from the clone to the original database.
  उत्तर दिखाएँ
• #157

  A large retail company recently migrated its three-tier ecommerce applications to AWS. The company’s backend database is hosted on Amazon Aurora PostgreSQL. During peak times, users complain about longer page load times. A database specialist reviewed Amazon RDS Performance Insights and found a spike in IO:XactSync wait events. The SQL attached to the wait events are all single INSERT statements. How should this issue be resolved?

  • AModify the application to commit transactions in batches.
  • BAdd a new Aurora Replica to the Aurora DB cluster.
  • CAdd an Amazon ElastiCache for Redis cluster and change the application to write through.
  • DChange the Aurora DB cluster storage to Provisioned IOPS (PIOPS).
  उत्तर दिखाएँ
• #158

  A Database Specialist is designing a new database infrastructure for a ride hailing application. The application data includes a ride tracking system that stores GPS coordinates for all rides. Real-time statistics and metadata lookups must be performed with high throughput and microsecond latency. The database should be fault tolerant with minimal operational overhead and development effort. Which solution meets these requirements in the MOST efficient way?

  • AUse Amazon RDS for MySQL as the database and use Amazon ElastiCache.
  • BUse Amazon DynamoDB as the database and use DynamoDB Accelerator.
  • CUse Amazon Aurora MySQL as the database and use Aurora's buffer cache.
  • DUse Amazon DynamoDB as the database and use Amazon API Gateway.
  उत्तर दिखाएँ
• #1593 चुनें

  A company's Security department established new requirements that state internal users must connect to an existing Amazon RDS for SQL Server DB instance using their corporate Active Directory (AD) credentials. A Database Specialist must make the modifications needed to fulfill this requirement. Which combination of actions should the Database Specialist take? (Choose three.)

  • ADisable Transparent Data Encryption (TDE) on the RDS SQL Server DB instance.
  • BModify the RDS SQL Server DB instance to use the directory for Windows authentication. Create appropriate new logins.
  • CUse the AWS Management Console to create an AWS Managed Microsoft AD. Create a trust relationship with the corporate AD.
  • DStop the RDS SQL Server DB instance, modify it to use the directory for Windows authentication, and start it again. Create appropriate new logins.
  • EUse the AWS Management Console to create an AD Connector. Create a trust relationship with the corporate AD.
  • FConfigure the AWS Managed Microsoft AD domain controller Security Group.
  उत्तर दिखाएँ
• #1602 चुनें

  An online shopping company has a large inflow of shopping requests daily. As a result, there is a consistent load on the company’s Amazon RDS database. A database specialist needs to ensure the database is up and running at all times. The database specialist wants an automatic notification system for issues that may cause database downtime or for configuration changes made to the database. What should the database specialist do to achieve this? (Choose two.)

  • ACreate an Amazon CloudWatch Events event to send a notification using Amazon SNS on every API call logged in AWS CloudTrail.
  • BSubscribe to an RDS event subscription and configure it to use an Amazon SNS topic to send notifications.
  • CUse Amazon SES to send notifications based on configured Amazon CloudWatch Events events.
  • DConfigure Amazon CloudWatch alarms on various metrics, such as FreeStorageSpace for the RDS instance.
  • EEnable email notifications for AWS Trusted Advisor.
  उत्तर दिखाएँ

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ