Amazon DBS-C01 Real Exam Questions [Jan 2026 Update] Free Practice Quiz (20 Questions)

Q: 11

Recently, a financial institution created a portfolio management service. The application's backend is powered by Amazon Aurora, which supports MySQL. The firm demands a response time of five minutes and a response time of five minutes. A database professional must create a disaster recovery system that is both efficient and has a low replication latency. How should the database professional tackle these requirements?

Options

Q: 12

An internet advertising firm stores its data in an Amazon DynamoDb table. Amazon DynamoDB Streams are enabled on the table, and one of the keys has a global secondary index. The table is encrypted using a customer-managed AWS Key Management Service (AWS KMS) key. The firm has chosen to grow worldwide and want to duplicate the database using DynamoDB global tables in a new AWS Region. An administrator observes the following upon review: No role with the dynamodb: CreateGlobalTable permission exists in the account. An empty table with the same name exists in the new Region where replication is desired. A global secondary index with the same partition key but a different sort key exists in the new Region where replication is desired. Which settings will prevent you from creating a global table or replica in the new Region? (Select two.)

Options

Q: 13

A business is transferring its on-premises database workloads to the Amazon Web Services (AWS) Cloud. A database professional migrating an Oracle database with a huge table to Amazon RDS has picked AWS DMS. The database professional observes that AWS DMS is consuming considerable time migrating the data. Which activities would increase the pace of data migration? (Select three.)

Options

Q: 14

A company is running an Amazon RDS for MySQL Multi-AZ DB instance for a business-critical workload. RDS encryption for the DB instance is disabled. A recent security audit concluded that all business-critical applications must encrypt data at rest. The company has asked its database specialist to formulate a plan to accomplish this for the DB instance. Which process should the database specialist recommend?

Options

Q: 15

A company is building a software as a service application. As part of the new user sign-on workflow, a Python script invokes the CreateTable operation using the Amazon DynamoDB API. After the call returns, the script attempts to call PutItem. Occasionally, the PutItem request fails with a ResourceNotFoundException error, which causes the workflow to fail. The development team has confirmed that the same table name is used in the two API calls. How should a database specialist fix this issue?

Options

Q: 16

A company has a web application that uses Amazon API Gateway to route HTTPS requests to AWS Lambda functions. The application uses an Amazon Aurora MySQL database for its data storage. The application has experienced unpredictable surges in traffic that overwhelm the database with too many connection requests. The company needs to implement a scalable solution that is more resilient to database failures as quickly as possible. Which solution will meet these requirements MOST cost-effectively?

Options

Correct Answer:

Explanation

Correct Answer :- A

Explanation:

Explanation from Amazon documents:

Amazon Aurora Serverless is an on-demand, auto-scaling configuration for Amazon Aurora MySQL

that automatically starts up, shuts down, and scales capacity up or down based on your application’s

needs. Aurora Serverless is ideal for applications with unpredictable or intermittent traffic patterns

that experience sudden spikes or drops in demand. Aurora Serverless also provides high availability

and durability by replicating your data across multiple Availability Zones and continuously backing up

your data to Amazon S3.

Migrating the Aurora MySQL database to Amazon Aurora Serverless by restoring a snapshot will

meet the requirements of implementing a scalable solution that is more resilient to database failures

as quickly as possible. This solution will allow the company to benefit from the auto-scaling and high

availability features of Aurora Serverless, which will handle the unpredictable surges in traffic and

prevent connection issues. This solution will also be cost-effective, as the company will only pay for

the database capacity that they use. The migration process will be simple and fast, as the company

can use the AWS Management Console, the AWS CLI, or the RDS API to restore a snapshot of their

existing Aurora MySQL database to an Aurora Serverless DB cluster, and then change the endpoint in

the Lambda functions to use the new database.

Therefore, option A is the correct solution to meet the requirements. Option B is not cost-effective

because migrating the Aurora MySQL database to Amazon DynamoDB tables by using AWS DMS will

incur additional time and cost, and may require significant code changes to adapt to a different data

model and query language. Option C is not scalable because creating an EventBridge rule that

invokes a Lambda function to end any connections in the sleep state will not address the root cause

of the connection issues, which is the lack of database capacity to handle the traffic spikes. Option D

is not scalable because increasing the instance class for the Aurora database with more memory and

setting a larger value for the max_connections parameter will not provide auto-scaling or high

availability, and may still result in connection issues if the traffic exceeds the provisioned capacity.

Q: 17

A database specialist is responsible for an Amazon RDS for MySQL DB instance with one read replic a. The DB instance and the read replica are assigned to the default parameter group. The database team currently runs test queries against a read replica. The database team wants to create additional tables in the read replica that will only be accessible from the read replica to benefit the tests. Which should the database specialist do to allow the database team to create the test tables?

Options

Q: 18

A company wants to automate the creation of secure test databases with random credentials to be stored safely for later use. The credentials should have sufficient information about each test database to initiate a connection and perform automated credential rotations. The credentials should not be logged or stored anywhere in an unencrypted form. Which steps should a Database Specialist take to meet these requirements using an AWS CloudFormation template?

Options

Q: 19

A company has a reporting application that runs on an Amazon EC2 instance in an isolated developer account on AWS. The application needs to retrieve data during non-peak company hours from an Amazon Aurora PostgreSQL database that runs in the companys production account The companys security team requires that access to production resources complies with AWS best security practices A database administrator needs to provide the reporting application with access to the production database. The company has already configured VPC peering between the production account and developer account The company has also updated the route tables in both accounts With the necessary entries to correctly set up VPC peering What must the database administrator do to finish providing connectivity to the reporting application? Add an inbound security group rule to the database security group that allows access from the developer account VPC CIDR on port 5432. Add an outbound security group rule to the EC2 security group that allows access to the production account VPC CIDR on port 5432. Add an outbound security group rule to the database security group that allows access from the developer account VPC CIDR on port 5432. Add an outbound security group rule to the EC2 security group that allows access to the production account VPC CIDR on port 5432. Add an inbound security group rule to the database security group that allows access from the developer account VPC CIDR on all TCP ports. Add an inbound security group rule to the EC2 security group that allows access to the production account VPC CIDR on port 5432_ Add an inbound security group rule to the database security group that allows access from the developer account VPC CIDR on port 5432_ Add an outbound security group rule to the EC2 security group that allows access to the production account VPC CIDR on all TCP ports

Your Answer

Correct Answer:

Explanation

The correct answer is

A. Add an inbound security group rule to the database security group that allows access from the

developer account VPC CIDR on port 5432. Add an outbound security group rule to the EC2 security

group that allows access to the production account VPC CIDR on port 5432.

The explanation is as follows:

To allow the reporting application to access the production database, the database administrator

needs to configure the security group rules for both the database and the EC2 instance. The security

group rules must allow traffic between the peered VPCs on the port that the database uses, which is

5432 for PostgreSQL1.

Option A is correct because it adds an inbound rule to the database security group that allows access

from the developer account VPC CIDR on port 5432. This means that the database can accept

connections from the EC2 instance in the peered VPC. It also adds an outbound rule to the EC2

security group that allows access to the production account VPC CIDR on port 5432. This means that

the EC2 instance can initiate connections to the database in the peered VPC.

Option B is incorrect because it adds an outbound rule to the database security group, which is not

necessary. The database does not need to initiate connections to the EC2 instance, only accept them.

It also does not add an inbound rule to the EC2 security group, which is not required. The EC2

instance does not need to accept connections from the database, only initiate them.

Option C is incorrect because it adds an inbound rule to the database security group that allows

access from the developer account VPC CIDR on all TCP ports. This is too permissive and violates the

principle of least privilege2. It also adds an inbound rule to the EC2 security group that allows access

to the production account VPC CIDR on port 5432. This is unnecessary and does not help with

connectivity.

Option D is incorrect because it adds an outbound rule to the EC2 security group that allows access

to the production account VPC CIDR on all TCP ports. This is too permissive and violates the principle

of least privilege2. It also does not add an outbound rule to the database security group, which is not

needed.

Reference: 1: [Working with PostgreSQL and pgAdmin - Amazon Aurora] 2: [Security best practices in

IAM - AWS Identity and Access Management]

Q: 20

A company uses a large, growing, and high performance on-premises Microsoft SQL Server instance With an Always On availability group cluster size of 120 TIE. The company uses a third-party backup product that requires system-level access to the databases. The company will continue to use this third-party backup product in the future. The company wants to move the DB cluster to AWS with the least possible downtime and data loss. The company needs a 2 Gbps connection to sustain Always On asynchronous data replication between the company's data center and AWS. Which combination of actions should a database specialist take to meet these requirements? (Select THREE.) Establish an AWS Direct Connect hosted connection between the companfs data center and AWS Create an AWS Site-to-Site VPN connection between the companVs data center and AWS over the internet Use AWS Database Migration Service (AWS DMS) to migrate the on-premises SQL Server databases to Amazon RDS for SQL Server Configure Always On availability groups for SQL Server. Deploy a new SQL Server Always On availability group DB cluster on Amazon EC2 Configure Always On distributed availability groups between the on-premises DB cluster and the AWS DB cluster_ Fail over to the AWS DB cluster when it is time to migrate. Grant system-level access to the third-party backup product to perform backups of the Amazon RDS for SQL Server DB instance. Configure the third-party backup product to perform backups of the DB cluster on Amazon EC2.

Your Answer

Question 11 of 20 · Page 2 / 2

Premium Access Includes

✓ Quiz Simulator
✓ Exam Mode
✓ Progress Tracking
✓ Question Saving
✓ Flash Cards
✓ Drag & Drops
✓ 3 Months Access
✓ PDF Downloads

Get Premium Access

Premium Access Includes

FLASH OFFER

avail 10% DISCOUNT on YOUR PURCHASE