AWS-Certified-Database-Specialty Free Practice Test

A company has an AWS CloudFormation template written in JSON that is used to launch new Amazon RDS for MySQL DB instances. The security team has asked a database specialist to ensure that the master password is automatically rotated every 30 days for all new DB instances that are launched using the template.
What is the MOST operationally efficient solution to meet these requirements?

1. A. Save the password in an Amazon S3 objec
2. B. Encrypt the S3 object with an AWS KMS ke
3. C. Set the KMS key to be rotated every 30 days by setting the EnableKeyRotation property to tru
4. D. Use a CloudFormation custom resource to read the S3 object to extract the password.
5. E. Create an AWS Lambda function to rotate the secre
6. F. Modify the CloudFormation template to add an AWS::SecretsManager::RotationSchedule resourc
7. G. Configure the RotationLambdaARN value and, for the RotationRules property, set the AutomaticallyAfterDays parameter to 30.
8. H. Modify the CloudFormation template to use the AWS KMS key as the database passwor
9. I. Configure an Amazon EventBridge rule to invoke the KMS API to rotate the key every 30 days by setting the ScheduleExpression parameter to ***/30***.
10. J. Integrate the Amazon RDS for MySQL DB instances with AWS IAM and centrally manage the master database user password.

Correct Answer: B
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-rotationsche

A Database Specialist needs to speed up any failover that might occur on an Amazon Aurora PostgreSQL DB cluster. The Aurora DB cluster currently includes the primary instance and three Aurora Replicas.
How can the Database Specialist ensure that failovers occur with the least amount of downtime for the application?

1. A. Set the TCP keepalive parameters low
2. B. Call the AWS CLI failover-db-cluster command
3. C. Enable Enhanced Monitoring on the DB cluster
4. D. Start a database activity stream on the DB cluster

Correct Answer: A
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.BestPractices.html#Aur

A business uses Amazon EC2 instances in VPC A to serve an internal file-sharing application. This application is supported by an Amazon ElastiCache cluster in VPC B that is peering with VPC A. The corporation migrates the instances of its applications from VPC A to VPC B. The file-sharing application is no longer able to connect to the ElastiCache cluster, as shown by the logs.
What is the best course of action for a database professional to take in order to remedy this issue?

1. A. Create a second security group on the EC2 instance
2. B. Add an outbound rule to allow traffic from the ElastiCache cluster security group.
3. C. Delete the ElastiCache security grou
4. D. Add an interface VPC endpoint to enable the EC2 instances to connect to the ElastiCache cluster.
5. E. Modify the ElastiCache security group by adding outbound rules that allow traffic to VPC CIDR blocks from the ElastiCache cluster.
6. F. Modify the ElastiCache security group by adding an inbound rule that allows traffic from the EC2 instances security group to the ElastiCache cluster.

Correct Answer: D
https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-security-groups.html

A business's production databases are housed on a 3 TB Amazon Aurora MySQL DB cluster. The database cluster is installed in the region us-east-1. For disaster recovery (DR) requirements, the company's database expert needs to fast deploy the DB cluster in another AWS Region to handle the production load with an RTO of less than two hours.
Which approach is the MOST OPERATIONALLY EFFECTIVE in meeting these requirements?

1. A. Implement an AWS Lambda function to take a snapshot of the production DB cluster every 2 hours, and copy that snapshot to an Amazon S3 bucket in the DR Regio
2. B. Restore the snapshot to an appropriately sized DB cluster in the DR Region.
3. C. Add a cross-Region read replica in the DR Region with the same instance type as the current primary instanc
4. D. If the read replica in the DR Region needs to be used for production, promote the read replica to become a standalone DB cluster.
5. E. Create a smaller DB cluster in the DR Regio
6. F. Configure an AWS Database Migration Service (AWS DMS) task with change data capture (CDC) enabled to replicate data from the current production DB cluster to the DB cluster in the DR Region.
7. G. Create an Aurora global database that spans two Region
8. H. Use AWS Database Migration Service (AWS DMS) to migrate the existing database to the new global database.

Correct Answer: B
RTO is 2 hours. With 3 TB database, cross-region replica is a better option

A company is running its line of business application on AWS, which uses Amazon RDS for MySQL at the persistent data store. The company wants to minimize downtime when it migrates the database to Amazon Aurora.
Which migration method should a Database Specialist use?

1. A. Take a snapshot of the RDS for MySQL DB instance and create a new Aurora DB cluster with the option to migrate snapshots.
2. B. Make a backup of the RDS for MySQL DB instance using the mysqldump utility, create a new Aurora DB cluster, and restore the backup.
3. C. Create an Aurora Replica from the RDS for MySQL DB instance and promote the Aurora DB cluster.
4. D. Create a clone of the RDS for MySQL DB instance and promote the Aurora DB cluster.

Correct Answer: C
https://aws.amazon.com/blogs/database/best-practices-for-migrating-rds-for-mysql-databases-to-amazon-aurora/ https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Migrating.html#Aurora