A media company is using Amazon RDS for PostgreSQL to store user data. The RDS DB instance currently has a publicly accessible setting enabled and is hosted in a public subnet. Following a recent AWS Well- Architected Framework review, a Database Specialist was given new security requirements.
Only certain on-premises corporate network IPs should connect to the DB instance. Connectivity is allowed from the corporate network only.
Which combination of steps does the Database Specialist need to take to meet these new requirements?
(Choose three.)

• A.Modify the pg_hba.conf file. Add the required corporate network IPs and remove the unwanted IPs.
• B.Modify the associated security group. Add the required corporate network IPs and remove the unwanted IPs.
• C.Move the DB instance to a private subnet using AWS DMS.
• D.Enable VPC peering between the application host running on the corporate network and the VPC associated with the DB instance.
• E.Disable the publicly accessible setting.
• F.Connect to the DB instance using private IPs and a VPN.

Comment: *

Name: *

Email: *

Verification: *

A company is using Amazon RDS for PostgreSQL. The Security team wants all database connection requests to be logged and retained for 180 days. The RDS for PostgreSQL DB instance is currently using the default parameter group. A Database Specialist has identified that setting the log_connections parameter to 1 will enable connections logging.
Which combination of steps should the Database Specialist take to meet the logging and retention requirements? (Choose two.)

• A.Update the log_connections parameter in the default parameter group
• B.Enable publishing of database engine logs to an Amazon S3 bucket and set the lifecycle policy to 180 days
• C.Create a custom parameter group, update the log_connections parameter, and associate the parameter with the DB instance
• D.Connect to the RDS PostgreSQL host and update the log_connections parameter in the postgresql.conf file
• E.Enable publishing of database engine logs to Amazon CloudWatch Logs and set the event expiration to 180 days

Comment: *

Name: *

Email: *

Verification: *

A company needs a data warehouse solution that keeps data in a consistent, highly structured format. The company requires fast responses for end-user queries when looking at data from the current year, and users must have access to the full 15-year dataset, when needed. This solution also needs to handle a fluctuating number incoming queries. Storage costs for the 100 TB of data must be kept low.
Which solution meets these requirements?

• A.Leverage an Amazon Redshift data warehouse solution using a dense storage instance to store the most recent data. Keep historical data on Amazon S3 and access it using the Amazon Redshift Spectrum layer. Provision enough instances to support high demand.
• B.Leverage an Amazon Redshift data warehouse solution using a dense storage instance to store the most recent data. Keep historical data on Amazon S3 and access it using the Amazon Redshift Spectrum layer. Leverage Amazon Redshift elastic resize.
• C.Leverage an Amazon Redshift data warehouse solution using a dense storage instance to store the most recent data. Keep historical data on Amazon S3 and access it using the Amazon Redshift Spectrum layer. Enable Amazon Redshift Concurrency Scaling.
• D.Leverage an Amazon Redshift data warehouse solution using a dense storage instance type while keeping all the data on local Amazon Redshift storage. Provision enough instances to support high demand.

Comment: *

Name: *

Email: *

Verification: *

An ecommerce company is running Amazon RDS for Microsoft SQL Server. The company is planning to perform testing in a development environment with production dat a. The development environment and the production environment are in separate AWS accounts. Both environments use AWS Key Management Service (AWS KMS) encrypted databases with both manual and automated snapshots. A database specialist needs to share a KMS encrypted production RDS snapshot with the development account.
Which combination of steps should the database specialist take to meet these requirements? (Select THREE.)

• A.Create an automated snapshot. Share the snapshot from the production account to the development account.
• B.Create a manual snapshot. Share the snapshot from the production account to the development account.
• C.Share the snapshot that is encrypted by using the development account default KMS encryption key.
• D.Share the snapshot that is encrypted by using the production account custom KMS encryption key.
• E.Allow the development account to access the production account KMS encryption key.
• F.Allow the production account to access the development account KMS encryption key.

Comment: *

Name: *

Email: *

Verification: *

A company has an application that uses an Amazon DynamoDB table as its data store. During normal business days, the throughput requirements from the application are uniform and consist of 5 standard write calls per second to the DynamoDB table. Each write call has 2 KB of data.
For 1 hour each day, the company runs an additional automated job on the DynamoDB table that makes 20 write requests per second. No other application writes to the DynamoDB table. The DynamoDB table does not have to meet any additional capacity requirements.
How should a database specialist configure the DynamoDB table's capacity to meet these requirements MOST cost-effectively?

• A.Use DynamoDB provisioned capacity with 5 WCUs and auto scaling.
• B.Use DynamoDB provisioned capacity with 5 WCUs and a write-through cache that DynamoDB Accelerator (DAX) provides.
• C.Use DynamoDB provisioned capacity with 10 WCUs and auto scaling.
• D.Use DynamoDB provisioned capacity with 10 WCUs and no auto scaling.

Comment: *

Name: *

Email: *

Verification: *