AWS Certified Database - Specialty

• #81Pilih 2

  A company is load testing its three-tier production web application deployed with an AWS CloudFormation template on AWS. The Application team is making changes to deploy additional Amazon EC2 and AWS Lambda resources to expand the load testing capacity. A Database Specialist wants to ensure that the changes made by the Application team will not change the Amazon RDS database resources already deployed. Which combination of steps would allow the Database Specialist to accomplish this? (Choose two.)

  • AReview the stack drift before modifying the template.
  • BCreate and review a change set before applying it.
  • CExport the database resources as stack outputs.
  • DDefine the database resources in a nested stack.
  • ESet a stack policy for the database resources.
  Tampilkan jawaban
• #82

  A database specialist must load 25 GB of data files from a company’s on-premises storage to an Amazon Neptune database. Which approach to load the data is FASTEST?

  • AUpload the data to Amazon S3 and use the Loader command to load the data from Amazon S3 into the Neptune database.
  • BWrite a utility to read the data from the on-premises storage and run INSERT statements in a loop to load the data into the Neptune database.
  • CUse the AWS CLI to load the data directly from the on-premises storage into the Neptune database.
  • DUse AWS DataSync to load the data directly from the on-premises storage into the Neptune database.
  Tampilkan jawaban
• #83

  A Database Specialist is creating Amazon DynamoDB tables, Amazon CloudWatch alarms, and associated infrastructure for an Application team using a development AWS account. The team wants a deployment method that will standardize the core solution components while managing environment-specific settings separately, and wants to minimize rework due to configuration errors. Which process should the Database Specialist recommend to meet these requirements?

  • AOrganize common and environmental-specific parameters hierarchically in the AWS Systems Manager Parameter Store, then reference the parameters dynamically from an AWS CloudFormation template. Deploy the CloudFormation stack using the environment name as a parameter.
  • BCreate a parameterized AWS CloudFormation template that builds the required objects. Keep separate environment parameter files in separate Amazon S3 buckets. Provide an AWS CLI command that deploys the CloudFormation stack directly referencing the appropriate parameter bucket.
  • CCreate a parameterized AWS CloudFormation template that builds the required objects. Import the template into the CloudFormation interface in the AWS Management Console. Make the required changes to the parameters and deploy the CloudFormation stack.
  • DCreate an AWS Lambda function that builds the required objects using an AWS SDK. Set the required parameter values in a test event in the Lambda console for each environment that the Application team can modify, as needed. Deploy the infrastructure by triggering the test event in the console.
  Tampilkan jawaban
• #84

  A company has applications running on Amazon EC2 instances in a private subnet with no internet connectivity. The company deployed a new application that uses Amazon DynamoDB, but the application cannot connect to the DynamoDB tables. A developer already checked that all permissions are set correctly. What should a database specialist do to resolve this issue while minimizing access to external resources?

  • AAdd a route to an internet gateway in the subnet’s route table.
  • BAdd a route to a NAT gateway in the subnet’s route table.
  • CAssign a new security group to the EC2 instances with an outbound rule to ports 80 and 443.
  • DCreate a VPC endpoint for DynamoDB and add a route to the endpoint in the subnet’s route table.
  Tampilkan jawaban
• #85

  A company has deployed an e-commerce web application in a new AWS account. An Amazon RDS for MySQL Multi-AZ DB instance is part of this deployment with a database-1.xxxxxxxxxxxx.us-east-1.rds.amazonaws.com endpoint listening on port 3306. The company's Database Specialist is able to log in to MySQL and run queries from the bastion host using these details. When users try to utilize the application hosted in the AWS account, they are presented with a generic error message. The application servers are logging a 'could not connect to server: Connection times out' error message to Amazon CloudWatch Logs. What is the cause of this error?

  • AThe user name and password the application is using are incorrect.
  • BThe security group assigned to the application servers does not have the necessary rules to allow inbound connections from the DB instance.
  • CThe security group assigned to the DB instance does not have the necessary rules to allow inbound connections from the application servers.
  • DThe user name and password are correct, but the user is not authorized to use the DB instance.
  Tampilkan jawaban
• #86

  A company's database specialist disabled TLS on an Amazon DocumentDB cluster to perform benchmarking tests. A few days after this change was implemented, a database specialist trainee accidentally deleted multiple tables. The database specialist restored the database from available snapshots. An hour after restoring the cluster, the database specialist is still unable to connect to the new cluster endpoint. What should the database specialist do to connect to the new, restored Amazon DocumentDB cluster?

  • AChange the restored cluster's parameter group to the original cluster's custom parameter group.
  • BChange the restored cluster's parameter group to the Amazon DocumentDB default parameter group.
  • CConfigure the interface VPC endpoint and associate the new Amazon DocumentDB cluster.
  • DRun the syncInstances command in AWS DataSync.
  Tampilkan jawaban
• #87

  A company is running its line of business application on AWS, which uses Amazon RDS for MySQL at the persistent data store. The company wants to minimize downtime when it migrates the database to Amazon Aurora. Which migration method should a Database Specialist use?

  • ATake a snapshot of the RDS for MySQL DB instance and create a new Aurora DB cluster with the option to migrate snapshots.
  • BMake a backup of the RDS for MySQL DB instance using the mysqldump utility, create a new Aurora DB cluster, and restore the backup.
  • CCreate an Aurora Replica from the RDS for MySQL DB instance and promote the Aurora DB cluster.
  • DCreate a clone of the RDS for MySQL DB instance and promote the Aurora DB cluster.
  Tampilkan jawaban
• #88

  A retail company is about to migrate its online and mobile store to AWS. The company's CEO has strategic plans to grow the brand globally. A Database Specialist has been challenged to provide predictable read and write database performance with minimal operational overhead. What should the Database Specialist do to meet these requirements?

  • AUse Amazon DynamoDB global tables to synchronize transactions.
  • BUse Amazon EMR to copy the orders table data across Regions.
  • CUse Amazon Aurora Global Database to synchronize all transactions.
  • DUse Amazon DynamoDB Streams to replicate all DynamoDB transactions and sync them.
  Tampilkan jawaban
• #89

  A gaming company is developing a new mobile game and decides to store the data for each user in Amazon DynamoDB. To make the registration process as easy as possible, users can log in with their existing Facebook or Amazon accounts. The company expects more than 10,000 users. How should a database specialist implement access control with the LEAST operational effort?

  • AUse web identity federation on the mobile app and AWS STS with an attached IAM role to get temporary credentials to access DynamoDB.
  • BUse web identity federation on the mobile app and create individual IAM users with credentials to access DynamoDB.
  • CUse a self-developed user management system on the mobile app that lets users access the data from DynamoDB through an API.
  • DUse a single IAM user on the mobile app to access DynamoDB.
  Tampilkan jawaban
• #90

  A company is running its production databases in a 3 TB Amazon Aurora MySQL DB cluster. The DB cluster is deployed to the us-east-1 Region. For disaster recovery (DR) purposes, the company's database specialist needs to make the DB cluster rapidly available in another AWS Region to cover the production load with an RTO of less than 2 hours. What is the MOST operationally efficient solution to meet these requirements?

  • AImplement an AWS Lambda function to take a snapshot of the production DB cluster every 2 hours, and copy that snapshot to an Amazon S3 bucket in the DR Region. Restore the snapshot to an appropriately sized DB cluster in the DR Region.
  • BAdd a cross-Region read replica in the DR Region with the same instance type as the current primary instance. If the read replica in the DR Region needs to be used for production, promote the read replica to become a standalone DB cluster.
  • CCreate a smaller DB cluster in the DR Region. Configure an AWS Database Migration Service (AWS DMS) task with change data capture (CDC) enabled to replicate data from the current production DB cluster to the DB cluster in the DR Region.
  • DCreate an Aurora global database that spans two Regions. Use AWS Database Migration Service (AWS DMS) to migrate the existing database to the new global database.
  Tampilkan jawaban
• #91Pilih 2

  A company uses Amazon Aurora for secure financial transactions. The data must always be encrypted at rest and in transit to meet compliance requirements. Which combination of actions should a database specialist take to meet these requirements? (Choose two.)

  • ACreate an Aurora Replica with encryption enabled using AWS Key Management Service (AWS KMS). Then promote the replica to master.
  • BUse SSL/TLS to secure the in-transit connection between the financial application and the Aurora DB cluster.
  • CModify the existing Aurora DB cluster and enable encryption using an AWS Key Management Service (AWS KMS) encryption key. Apply the changes immediately.
  • DTake a snapshot of the Aurora DB cluster and encrypt the snapshot using an AWS Key Management Service (AWS KMS) encryption key. Restore the snapshot to a new DB cluster and update the financial application database endpoints.
  • EUse AWS Key Management Service (AWS KMS) to secure the in-transit connection between the financial application and the Aurora DB cluster.
  Tampilkan jawaban
• #92Pilih 3

  A media company is using Amazon RDS for PostgreSQL to store user data. The RDS DB instance currently has a publicly accessible setting enabled and is hosted in a public subnet. Following a recent AWS Well-Architected Framework review, a Database Specialist was given new security requirements. Only certain on-premises corporate network IPs should connect to the DB instance. Connectivity is allowed from the corporate network only. Which combination of steps does the Database Specialist need to take to meet these new requirements? (Choose three.)

  • AModify the pg_hba.conf file. Add the required corporate network IPs and remove the unwanted IPs.
  • BModify the associated security group. Add the required corporate network IPs and remove the unwanted IPs.
  • CMove the DB instance to a private subnet using AWS DMS.
  • DEnable VPC peering between the application host running on the corporate network and the VPC associated with the DB instance.
  • EDisable the publicly accessible setting.
  • FConnect to the DB instance using private IPs and a VPN.
  Tampilkan jawaban
• #93

  A company is running an Amazon RDS for MySQL Multi-AZ DB instance for a business-critical workload. RDS encryption for the DB instance is disabled. A recent security audit concluded that all business-critical applications must encrypt data at rest. The company has asked its database specialist to formulate a plan to accomplish this for the DB instance. Which process should the database specialist recommend?

  • ACreate an encrypted snapshot of the unencrypted DB instance. Copy the encrypted snapshot to Amazon S3. Restore the DB instance from the encrypted snapshot using Amazon S3.
  • BCreate a new RDS for MySQL DB instance with encryption enabled. Restore the unencrypted snapshot to this DB instance.
  • CCreate a snapshot of the unencrypted DB instance. Create an encrypted copy of the snapshot. Restore the DB instance from the encrypted snapshot.
  • DTemporarily shut down the unencrypted DB instance. Enable AWS KMS encryption in the AWS Management Console using an AWS managed CMK. Restart the DB instance in an encrypted state.
  Tampilkan jawaban
• #94

  A large company is using an Amazon RDS for Oracle Multi-AZ DB instance with a Java application. As a part of its disaster recovery annual testing, the company would like to simulate an Availability Zone failure and record how the application reacts during the DB instance failover activity. The company does not want to make any code changes for this activity. What should the company do to achieve this in the shortest amount of time?

  • AUse a blue-green deployment with a complete application-level failover test.
  • BUse the RDS console to reboot the DB instance by choosing the option to reboot with failover.
  • CUse RDS fault injection queries to simulate the primary node failure.
  • DAdd a rule to the NACL to deny all traffic on the subnets associated with a single Availability Zone.
  Tampilkan jawaban
• #95

  A financial company recently launched a portfolio management solution. The backend of the application is powered by Amazon Aurora with MySQL compatibility. The company requires an RTO of 5 minutes and an RPO of 5 minutes. A database specialist must configure an efficient disaster recovery solution with minimal replication lag. Which approach should the database specialist take to meet these requirements?

  • AConfigure AWS Database Migration Service (AWS DMS) and create a replica in a different AWS Region.
  • BConfigure an Amazon Aurora global database and add a different AWS Region.
  • CConfigure a binlog and create a replica in a different AWS Region.
  • DConfigure a cross-Region read replica.
  Tampilkan jawaban
• #96Pilih 3

  A financial services company is developing a shared data service that supports different applications from throughout the company. A Database Specialist designed a solution to leverage Amazon ElastiCache for Redis with cluster mode enabled to enhance performance and scalability. The cluster is configured to listen on port 6379. Which combination of steps should the Database Specialist take to secure the cache data and protect it from unauthorized access? (Choose three.)

  • AEnable in-transit and at-rest encryption on the ElastiCache cluster.
  • BEnsure that Amazon CloudWatch metrics are configured in the ElastiCache cluster.
  • CEnsure the security group for the ElastiCache cluster allows all inbound traffic from itself and inbound traffic on TCP port 6379 from trusted clients only.
  • DCreate an IAM policy to allow the application service roles to access all ElastiCache API actions.
  • EEnsure the security group for the ElastiCache clients authorize inbound TCP port 6379 and port 22 traffic from the trusted ElastiCache cluster's security group.
  • FEnsure the cluster is created with the auth-token parameter and that the parameter is used in all subsequent commands.
  Tampilkan jawaban
• #97

  A database specialist needs to configure an Amazon RDS for MySQL DB instance to close non-interactive connections that are inactive after 900 seconds. What should the database specialist do to accomplish this task?

  • ACreate a custom DB parameter group and set the wait_timeout parameter value to 900. Associate the DB instance with the custom parameter group.
  • BConnect to the MySQL database and run the SET SESSION wait_timeout=900 command.
  • CEdit the my.cnf file and set the wait_timeout parameter value to 900. Restart the DB instance.
  • DModify the default DB parameter group and set the wait_timeout parameter value to 900.
  Tampilkan jawaban
• #98Pilih 2

  An online advertising company uses an Amazon DynamoDb table as its data store. The table has Amazon DynamoDB Streams enabled and has a global secondary index on one of the keys. The table is encrypted using an AWS Key Management Service (AWS KMS) customer managed key. The company has decided to expand its operations globally and wants to replicate the database in a different AWS Region by using DynamoDB global tables. Upon review, an administrator notices the following: No role with the dynamodb: CreateGlobalTable permission exists in the account. An empty table with the same name exists in the new Region where replication is desired. A global secondary index with the same partition key but a different sort key exists in the new Region where replication is desired. Which configurations will block the creation of a global table or the creation of a replica in the new Region? (Choose two.)

  • AA global secondary index with the same partition key but a different sort key exists in the new Region where replication is desired.
  • BAn empty table with the same name exists in the Region where replication is desired.
  • CNo role with the dynamodb:CreateGlobalTable permission exists in the account.
  • DDynamoDB Streams is enabled for the table.
  • EThe table is encrypted using a KMS customer managed key.
  Tampilkan jawaban
• #99

  A retail company manages a web application that stores data in an Amazon DynamoDB table. The company is undergoing account consolidation efforts. A database engineer needs to migrate the DynamoDB table from the current AWS account to a new AWS account. Which strategy meets these requirements with the LEAST amount of administrative work?

  • AUse AWS Glue to crawl the data in the DynamoDB table. Create a job using an available blueprint to export the data to Amazon S3. Import the data from the S3 file to a DynamoDB table in the new account.
  • BCreate an AWS Lambda function to scan the items of the DynamoDB table in the current account and write to a file in Amazon S3. Create another Lambda function to read the S3 file and restore the items of a DynamoDB table in the newaccount.
  • CUse AWS Data Pipeline in the current account to export the data from the DynamoDB table to a file in Amazon S3. Use Data Pipeline to import the data from the S3 file to a DynamoDB table in the new account.
  • DConfigure Amazon DynamoDB Streams for the DynamoDB table in the current account. Create an AWS Lambda function to read from the stream and write to a file in Amazon S3. Create another Lambda function to read the S3 file andrestore the items to a DynamoDB table in the new account.
  Tampilkan jawaban
• #100

  A company is running a website on Amazon EC2 instances deployed in multiple Availability Zones (AZs). The site performs a high number of repetitive reads and writes each second on an Amazon RDS for MySQL Multi-AZ DB instance with General Purpose SSD (gp2) storage. After comprehensive testing and analysis, a database specialist discovers that there is high read latency and high CPU utilization on the DB instance. Which approach should the database specialist to take to resolve this issue without changing the application?

  • AImplementing sharding to distribute the load to multiple RDS for MySQL databases.
  • BUse the same RDS for MySQL instance class with Provisioned IOPS (PIOPS) storage.
  • CAdd an RDS for MySQL read replica.
  • DModify the RDS for MySQL database class to a bigger size and implement Provisioned IOPS (PIOPS).
  Tampilkan jawaban

Ingin melacak skor, mengikuti ujian simulasi berwaktu, dan mendapat penjelasan AI? Buat akun gratis