AWS-Certified-Database-Specialty Free Practice Test

A Database Specialist migrated an existing production MySQL database from on-premises to an Amazon RDS for MySQL DB instance. However, after the migration, the database needed to be encrypted at rest using AWS KMS. Due to the size of the database, reloading, the data into an encrypted database would be too time- consuming, so it is not an option.
How should the Database Specialist satisfy this new requirement?

1. A. Create a snapshot of the unencrypted RDS DB instanc
2. B. Create an encrypted copy of the unencrypted snapsho
3. C. Restore the encrypted snapshot copy.
4. D. Modify the RDS DB instanc
5. E. Enable the AWS KMS encryption option that leverages the AWS CLI.
6. F. Restore an unencrypted snapshot into a MySQL RDS DB instance that is encrypted.
7. G. Create an encrypted read replica of the RDS DB instanc
8. H. Promote it the master.

Correct Answer: A
"However, because you can encrypt a copy of an unencrypted DB snapshot, you can effectively add encryption to an unencrypted DB instance. That is, you can create a snapshot of your DB instance, and then create an encrypted copy of that snapshot. You can then restore a DB instance from the encrypted snapshot, and thus you have an encrypted copy of your original DB instance. For more information, see Copying a Snapshot." https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html

A company is developing a multi-tier web application hosted on AWS using Amazon Aurora as the database. The application needs to be deployed to production and other non-production environments. A Database Specialist needs to specify different MasterUsername and MasterUserPassword properties in the AWS CloudFormation templates used for automated deployment. The CloudFormation templates are version controlled in the company’s code repository. The company also needs to meet compliance requirement by routinely rotating its database master password for production.
What is most secure solution to store the master password?

1. A. Store the master password in a parameter file in each environmen
2. B. Reference the environment-specific parameter file in the CloudFormation template.
3. C. Encrypt the master password using an AWS KMS ke
4. D. Store the encrypted master password in the CloudFormation template.
5. E. Use the secretsmanager dynamic reference to retrieve the master password stored in AWS Secrets Manager and enable automatic rotation.
6. F. Use the ssm dynamic reference to retrieve the master password stored in the AWS Systems Manager Parameter Store and enable automatic rotation.

Correct Answer: C
"By using the secure string support in CloudFormation with dynamic references you can better maintain your infrastructure as code. You’ll be able to avoid hard coding passwords into your templates and you can keep these runtime configuration parameters separated from your code. Moreover, when properly used, secure strings will help keep your development and production code as similar as possible, while continuing to make your infrastructure code suitable for continuous deployment pipelines."
https://aws.amazon.com/blogs/mt/using-aws-systems-manager-parameter-store-secure-string-parameters-in-aws https://aws.amazon.com/blogs/security/how-to-use-aws-secrets-manager-rotate-credentials-amazon-rds-database

A database specialist manages a critical Amazon RDS for MySQL DB instance for a company. The data stored daily could vary from .01% to 10% of the current database size. The database specialist needs to ensure that the DB instance storage grows as needed.
What is the MOST operationally efficient and cost-effective solution?

1. A. Configure RDS Storage Auto Scaling.
2. B. Configure RDS instance Auto Scaling.
3. C. Modify the DB instance allocated storage to meet the forecasted requirements.
4. D. Monitor the Amazon CloudWatch FreeStorageSpace metric daily and add storage as required.

Correct Answer: A
If your workload is unpredictable, you can enable storage autoscaling for an Amazon RDS DB instance. With storage autoscaling enabled, when Amazon RDS detects that you are running out of free database space it automatically scales up your storage.
https://aws.amazon.com/about-aws/whats-new/2019/06/rds-storage-auto-scaling/
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIOPS.StorageTypes.html#USER_PIOPS.

A Database Specialist is setting up a new Amazon Aurora DB cluster with one primary instance and three Aurora Replicas for a highly intensive, business-critical application. The Aurora DB cluster has one medium- sized primary instance, one large-sized replica, and two medium sized replicas. The Database Specialist did not assign a promotion tier to the replicas.
In the event of a primary failure, what will occur?

1. A. Aurora will promote an Aurora Replica that is of the same size as the primary instance
2. B. Aurora will promote an arbitrary Aurora Replica
3. C. Aurora will promote the largest-sized Aurora Replica
4. D. Aurora will not promote an Aurora Replica

Correct Answer: C
Priority: If you don't select a value, the default is tier-1. This priority determines the order in which Aurora https://docs.amazonaws.cn/en_us/AmazonRDS/latest/AuroraUserGuide/aurora-replicas-adding.html
More than one Aurora Replica can share the same priority, resulting in promotion tiers. If two or more Aurora Replicas share the same priority, then Amazon RDS promotes the replica that is largest in size. If two or more Aurora Replicas share the same priority and size, then Amazon RDS promotes an arbitrary replica in the same promotion tier.
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.M If two or more Aurora Replicas share the same priority, then Amazon RDS promotes the replica that is largest in size. If two or more Aurora Replicas share the same priority and size, then Amazon RDS promotes an arbitrary replica in the same promotion tier. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.AuroraHighAvailability.html

In one AWS account, a business runs a two-tier ecommerce application. An Amazon RDS for MySQL
Multi-AZ database instance serves as the application's backend. A developer removed the database instance in the production environment by accident. Although the organization recovers the database, the incident results in hours of outage and financial loss.
Which combination of adjustments would reduce the likelihood that this error will occur again in the future? (Select three.)

1. A. Grant least privilege to groups, IAM users, and roles.
2. B. Allow all users to restore a database from a backup.
3. C. Enable deletion protection on existing production DB instances.
4. D. Use an ACL policy to restrict users from DB instance deletion.
5. E. Enable AWS CloudTrail logging and Enhanced Monitoring.

Correct Answer: ACD