DBS-C01 Practice Test

A large company is using an Amazon RDS for Oracle Multi-AZ DB instance with a Java application. As a part
of its disaster recovery annual testing, the company would like to simulate an Availability Zone failure and
record how the application reacts during the DB instance failover activity. The company does not want to
make any code changes for this activity.
What should the company do to achieve this in the shortest amount of time?

A.

Use a blue-green deployment with a complete application-level failover test

B.

Use the RDS console to reboot the DB instance by choosing the option to reboot with failover

C.

Use RDS fault injection queries to simulate the primary node failure

D.

Add a rule to the NACL to deny all traffic on the subnets associated with a single Availability Zone

A media company is using Amazon RDS for PostgreSQL to store user data. The RDS DB instance currently
has a publicly accessible setting enabled and is hosted in a public subnet. Following a recent AWS Well-
Architected Framework review, a Database Specialist was given new security requirements.
Only certain on-premises corporate network IPs should connect to the DB instance.
Connectivity is allowed from the corporate network only. Which combination of steps does the Database
Specialist need to take to meet these new requirements?
Choose three.)

A.

Modify the pg_hba.conf file. Add the required corporate network IPs and remove the unwanted IPs.

B.

Modify the associated security group. Add the required corporate network IPs and remove the unwanted
IPs.

C.

Move the DB instance to a private subnet using AWS DMS.

D.

Enable VPC peering between the application host running on the corporate network and the VPC
associated with the DB instance.

E.

Disable the publicly accessible setting.

F.

Connect to the DB instance using private IPs and a VPN.

A Database Specialist is working with a company to launch a new website built on Amazon Aurora with
several Aurora Replicas. This new website will replace an on-premises website connected to a legacy
relational database. Due to stability issues in the legacy database, the company would like to test the resiliency
of Aurora.
Which action can the Database Specialist take to test the resiliency of the Aurora DB cluster?

A.

Stop the DB cluster and analyze how the website responds

B.

Use Aurora fault injection to crash the master DB instance

C.

Remove the DB cluster endpoint to simulate a master DB instance failure

D.

Use Aurora Backtrack to crash the DB cluster

A large financial services company requires that all data be encrypted in transit. A Developer is attempting to
connect to an Amazon RDS DB instance using the company VPC for the first time with credentials provided
by a Database Specialist. Other members of the Development team can connect, but this user is consistently
receiving an error indicating a communications link failure. The Developer asked the Database Specialist to
reset the password a number of times, but the error persists.
Which step should be taken to troubleshoot this issue?

A.

Ensure that the database option group for the RDS DB instance allows ingress from the
Developermachine’s IP address

B.

Ensure that the RDS DB instance’s subnet group includes a public subnet to allow the Developer
toconnect

C.

Ensure that the RDS DB instance has not reached its maximum connections limit

D.

Ensure that the connection is using SSL and is addressing the port where the RDS DB instance is
listeningfor encrypted connections

A company maintains several databases using Amazon RDS for MySQL and PostgreSQL. Each RDS database
generates log files with retention periods set to their default values. The company has now mandated that
database logs be maintained for up to 90 days in a centralized repository to facilitate real-time and
after-the-fact analyses.
What should a Database Specialist do to meet these requirements with minimal effort?

A.

Create an AWS Lambda function to pull logs from the RDS databases and consolidate the log files in an
Amazon S3 bucket. Set a lifecycle policy to expire the objects after 90 days

B.

Modify the RDS databases to publish log to Amazon CloudWatch Logs. Change the log retention policy
for each log group to expire the events after 90 days.

C.

Write a stored procedure in each RDS database to download the logs and consolidate the log files in an
Amazon S3 bucket. Set a lifecycle policy to expire the objects after 90 days.

D.

Create an AWS Lambda function to download the logs from the RDS databases and publish the logs to
Amazon CloudWatch Logs. Change the log retention policy for the log group to expire the events after
90 days.