Amazon Exam DVA-C01 Topic 7 Question 36 Discussion

Actual exam question for Amazon's DVA-C01 exam

Question #: 36
Topic #: 7

A company's security policies require all database passwords to be rotated every 30 days The company uses different database platforms, including Amazon Aurora databases and proprietary NoSQL document databases, for different applications A developer needs to implement a solution for password rotation

Which solution will meet these requirements?

ACreate an AWS Lambda rotation function that has appropriate 1AM permissions Store the password in AWS Secrets Manager Configure Secrets Manager to rotate the password by using the Lambda function

BEncrypt the existing password with AWS Key Management Service (AWS KMS) Export the existing password Generate a random password with AWS KMS Use the AWS KMS password renewal feature to replace the existing password with the new password.

CCreate an AWS Lambda rotation function that has appropriate 1AM permissions Store the password in AWS Systems Manager Parameter Store Configure Parameter Store to rotate the password by using the Lambda function

DIntegrate AWS Systems Manager Parameter Store with a Key Management Interoperability Protocol (KMIP)-compliant third-party secret manager to enable third-party database password rotation on AWS

Show Suggested Answer

Suggested Answer: D

by Larae at May 10, 2022, 12:35 AM

Limited Time Offer

25%

Off

Get Premium DVA-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

retab71998@sinagalore.com

2 years ago

ANS is C https://stackoverflow.com/questions/63683496/how-to-trigger-a-particular-version-of-lambda-from-s3-events

upvoted 1 times

...