A database specialist was alerted that a production Amazon RDS MariaDB instance with 100 GB of storage was out of space. In response, the database specialist modified the DB instance and added 50 GB of storage capacity. Three hours later, a new alert is generated due to a lack of free space on the same DB instance. The database specialist decides to modify the instance immediately to increase its storage capacity by 20 GB.
What will happen when the modification is submitted?

• A.The request will fail because this storage capacity is too large.
• B.The request will succeed only if the primary instance is in active status.
• C.The request will succeed only if CPU utilization is less than 10%.
• D.The request will fail as the most recent modification was too soon.

Comment: *

Name: *

Email: *

Verification: *

A company wants to automate the creation of secure test databases with random credentials to be stored safely for later use. The credentials should have sufficient information about each test database to initiate a connection and perform automated credential rotations. The credentials should not be logged or stored anywhere in an unencrypted form.
Which steps should a Database Specialist take to meet these requirements using an AWS CloudFormation template?

• A.Add a resource of type AWS::SecretsManager::Secret and specify the GenerateSecretString property.
  Then, define the database user name in the SecureStringTemplate template. Create a resource for the database and reference the secret string for the MasterUserName and MasterUserPassword properties.
  Then, add a resource of type AWS::SecretsManagerSecretTargetAttachment with the SecretId and TargetId properties set to the Amazon Resource Names (ARNs) of the secret and the database.
• B.Add a Mapping property from the database Amazon Resource Name (ARN) to the secret ARN. Then, create the secret with a chosen user name and a randomly generated password set by the GenerateSecretString property. Add the database with the MasterUserName and MasterUserPassword properties set to the user name of the secret.
• C.Create the database with the MasterUserName and MasterUserPassword properties set to the default values. Then, create the secret with the user name and password set to the same default values. Add a Secret Target Attachment resource with the SecretId and TargetId properties set to the Amazon Resource Names (ARNs) of the secret and the database. Finally, update the secret's password value with a randomly generated string set by the GenerateSecretString property.
• D.Create the secret with a chosen user name and a randomly generated password set by the GenerateSecretString property. Add an SecretTargetAttachment resource with the SecretId property set to the Amazon Resource Name (ARN) of the secret and the TargetId property set to a parameter value matching the desired database ARN. Then, create a database with the MasterUserName and MasterUserPassword properties set to the previously created values in the secret.

Comment: *

Name: *

Email: *

Verification: *

A business is launching a new Amazon RDS for SQL Server database instance. The organization wishes to allow auditing of the SQL Server database.
Which measures should a database professional perform in combination to achieve this requirement? (Select two.)

• A.Create a service-linked role for Amazon RDS that grants permissions for Amazon RDS to store audit logs on Amazon S3.
• B.Set up a parameter group to configure an IAM role and an Amazon S3 bucket for audit log storage.Associate the parameter group with the DB instance.
• C.Disable Multi-AZ on the DB instance, and then enable auditing. Enable Multi-AZ after auditing is enabled.
• D.Disable automated backup on the DB instance, and then enable auditing. Enable automated backup after auditing is enabled.
• E.Set up an options group to configure an IAM role and an Amazon S3 bucket for audit log storage.Associate the options group with the DB instance.

Comment: *

Name: *

Email: *

Verification: *

A company has an AWS CloudFormation template written in JSON that is used to launch new Amazon RDS for MySQL DB instances. The security team has asked a database specialist to ensure that the master password is automatically rotated every 30 days for all new DB instances that are launched using the template.
What is the MOST operationally efficient solution to meet these requirements?

• A.Save the password in an Amazon S3 object. Encrypt the S3 object with an AWS KMS key. Set the KMS key to be rotated every 30 days by setting the EnableKeyRotation property to true. Use a CloudFormation custom resource to read the S3 object to extract the password.
• B.Create an AWS Lambda function to rotate the secret. Modify the CloudFormation template to add an AWS::SecretsManager::RotationSchedule resource. Configure the RotationLambdaARN value and, for the RotationRules property, set the AutomaticallyAfterDays parameter to 30.
• C.Modify the CloudFormation template to use the AWS KMS key as the database password. Configure an Amazon EventBridge rule to invoke the KMS API to rotate the key every 30 days by setting the ScheduleExpression parameter to ***/30***.
• D.Integrate the Amazon RDS for MySQL DB instances with AWS IAM and centrally manage the master database user password.

Comment: *

Name: *

Email: *

Verification: *

A database specialist is constructing an AWS CloudFormation stack using AWS CloudFormation. The database expert wishes to avoid the stack's Amazon RDS ProductionDatabase resource being accidentally deleted.
Which solution will satisfy this criterion?

• A.Create a stack policy to prevent updates. Include Effect : ProductionDatabase and Resource :
  Deny in the policy.
• B.Create an AWS CloudFormation stack in XML format. Set xAttribute as false.
• C.Create an RDS DB instance without the DeletionPolicy attribute. Disable termination protection.
• D.Create a stack policy to prevent updates. Include Effect, Deny, and Resource :ProductionDatabase in the policy.

Comment: *

Name: *

Email: *

Verification: *