Amazon Exam DBS-C01 Topic 9 Question 7 Discussion

Actual exam question for Amazon's DBS-C01 exam

Question #: 7
Topic #: 9

A company is developing a multi-tier web application hosted on AWS using Amazon Aurora as the database.

The application needs to be deployed to production and other non-production environments. A Database Specialist needs to specify different MasterUsername and MasterUserPassword properties in the AWS CloudFormation templates used for automated deployment. The CloudFormation templates are version controlled in the company's code repository. The company also needs to meet compliance requirement by routinely rotating its database master password for production.

What is most secure solution to store the master password?

AStore the master password in a parameter file in each environment. Reference the environment-specific parameter file in the CloudFormation template.

BEncrypt the master password using an AWS KMS key. Store the encrypted master password in the
CloudFormation template.

CUse the secretsmanager dynamic reference to retrieve the master password stored in AWS Secrets
Manager and enable automatic rotation.

DUse the ssm dynamic reference to retrieve the master password stored in the AWS Systems Manager
Parameter Store and enable automatic rotation.

Show Suggested Answer

Suggested Answer: C

by Adell at May 06, 2022, 08:14 AM

Limited Time Offer

25%

Off

Get Premium DBS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!