Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Amazon DBS-C01 Exam Questions

Exam Name: AWS Certified Database - Specialty
Exam Code: DBS-C01
Related Certification(s): Amazon Specialty Certification
Certification Provider: Amazon
Number of DBS-C01 practice questions in our database: 322 (updated: Jul. 10, 2024)
Expected DBS-C01 Exam Topics, as suggested by Amazon :
  • Topic 1: Determine access control and authentication mechanisms/ Determine strategies for disaster recovery and high availability
  • Topic 2: Managethe operational environment of a database solutionDomain/ Design database solutions for performance, compliance, and scalability
  • Topic 3: Recognize potential security vulnerabilities within database solutions/ Workload-Specific Database Design
  • Topic 4: Determine monitoring and alerting strategies/ Troubleshootand resolve common database issues
  • Topic 5: Determine data preparation and migration strategies/ Automate database solution deployments
  • Topic 6: Select appropriate database services for specific types of dataand workloads/ Optimize database performance
  • Topic 7: Comparethe costs of database solutions/ Determinemaintenance tasks and processes/ Determinebackup and restore strategies
  • Topic 8: Encryptdata atrest and intransit/ Executeand validate data migration/ Monitoring and Troubleshooting
  • Topic 9: Evaluateauditing solutions/ Deployment and Migration/ Management and Operations/ Database Security
Disscuss Amazon DBS-C01 Topics, Questions or Ask Anything Related

Gerardo

18 days ago
Just passed the AWS Certified Database - Specialty exam! Be prepared for questions on Amazon Aurora's multi-AZ deployments and read replicas. Understanding the differences in performance, scalability, and disaster recovery capabilities is crucial. Thanks to Pass4Success for their spot-on practice questions that helped me prep quickly!
upvoted 0 times
...

Alaine

21 days ago
I recently passed the Amazon AWS Certified Database - Specialty exam with the help of Pass4Success practice questions. The exam covered topics such as access control, disaster recovery, and database performance. One question that stood out to me was related to determining access control mechanisms for a database solution. I was unsure of the answer at first, but I managed to pass the exam.
upvoted 0 times
...

Trevor

1 months ago
Just passed the AWS Certified Database - Specialty exam! One tricky area was RDS performance optimization. Expect questions on read replicas, Multi-AZ deployments, and instance sizing. Make sure to understand how these features impact database performance. Big thanks to Pass4Success for their spot-on practice questions that helped me prepare quickly!
upvoted 0 times
...

Free Amazon DBS-C01 Exam Actual Questions

Note: Premium Questions for DBS-C01 were last updated On Jul. 10, 2024 (see below)

Question #1

A healthcare company is running an application on Amazon EC2 in a public subnet and using Amazon DocumentDB (with MongoDB compatibility) as the storage layer. An audit reveals that the traffic between the application and Amazon DocumentDB is not encrypted and that the DocumentDB cluster is not encrypted at rest. A database specialist must correct these issues and ensure that the data in transit and the data at rest are encrypted.

Which actions should the database specialist take to meet these requirements? (Select TWO.)

Reveal Solution Hide Solution
Correct Answer: B, C

Question #2

A database specialist needs to enable IAM authentication on an existing Amazon Aurora PostgreSQL DB cluster. The database specialist already has modified the DB cluster settings, has created IAM and database credentials, and has distributed the credentials to the appropriate users.

What should the database specialist do next to establish the credentials for the users to use to log in to the DB cluster?

Reveal Solution Hide Solution
Correct Answer: B

Correct Answer: B

Explanation from Amazon documents:

Amazon Aurora PostgreSQL supports IAM authentication, which is a method of using AWS Identity and Access Management (IAM) to manage database access. IAM authentication allows you to use IAM users and roles to control who can access your Aurora PostgreSQL DB cluster, instead of using a traditional database username and password. IAM authentication also provides more security by using temporary credentials that are automatically rotated.

To enable IAM authentication on an existing Aurora PostgreSQL DB cluster, the database specialist needs to do the following :

Modify the DB cluster settings to enable IAM database authentication. This can be done using the AWS Management Console, the AWS CLI, or the RDS API.

Create IAM and database credentials for each user who needs access to the DB cluster. The IAM credentials consist of an access key ID and a secret access key. The database credentials consist of a database username and an optional password. The IAM credentials and the database username must match.

Distribute the IAM and database credentials to the appropriate users. The users must keep their credentials secure and not share them with anyone else.

Run the generate-db-auth-token command with the user names to generate a temporary password for the users. This command is part of the AWS CLI and it generates an authentication token that is valid for 15 minutes. The authentication token is a string that has the same format as a password. The users can use this token as their password when they connect to the DB cluster using a SQL client.

Therefore, option B is the correct solution to establish the credentials for the users to use to log in to the DB cluster. Option A is incorrect because adding the users' IAM credentials to the Aurora cluster parameter group is not necessary or possible. A cluster parameter group is a collection of DB engine configuration values that define how a DB cluster operates. Option C is incorrect because adding the users' IAM credentials to the default credential profile and using the AWS Management Console to access the DB cluster is not supported or secure. The default credential profile is a file that stores your AWS credentials for use by AWS CLI or SDKs. The AWS Management Console does not allow you to connect to an Aurora PostgreSQL DB cluster using IAM authentication. Option D is incorrect because using an AWS Security Token Service (AWS STS) token by sending the IAM access key and secret key as headers to the DB cluster API endpoint is not supported or secure. AWS STS is a service that enables you to request temporary, limited-privilege credentials for IAM users or federated users. The DB cluster API endpoint is an endpoint that allows you to perform administrative actions on your DB cluster using RDS API calls.


Question #3

A healthcare company is running an application on Amazon EC2 in a public subnet and using Amazon DocumentDB (with MongoDB compatibility) as the storage layer. An audit reveals that the traffic between the application and Amazon DocumentDB is not encrypted and that the DocumentDB cluster is not encrypted at rest. A database specialist must correct these issues and ensure that the data in transit and the data at rest are encrypted.

Which actions should the database specialist take to meet these requirements? (Select TWO.)

Reveal Solution Hide Solution
Correct Answer: B, C

Question #5

A healthcare company is running an application on Amazon EC2 in a public subnet and using Amazon DocumentDB (with MongoDB compatibility) as the storage layer. An audit reveals that the traffic between the application and Amazon DocumentDB is not encrypted and that the DocumentDB cluster is not encrypted at rest. A database specialist must correct these issues and ensure that the data in transit and the data at rest are encrypted.

Which actions should the database specialist take to meet these requirements? (Select TWO.)

Reveal Solution Hide Solution
Correct Answer: B, C


Unlock Premium DBS-C01 Exam Questions with Advanced Practice Test Features:
  • Select Question Types you want
  • Set your Desired Pass Percentage
  • Allocate Time (Hours : Minutes)
  • Create Multiple Practice tests with Limited Questions
  • Customer Support
Get Full Access Now

Save Cancel