Book Image

AWS Certified Database – Specialty (DBS-C01) Certification Guide

By : Kate Gawron
5 (1)
Book Image

AWS Certified Database – Specialty (DBS-C01) Certification Guide

5 (1)
By: Kate Gawron

Overview of this book

The AWS Certified Database – Specialty certification is one of the most challenging AWS certifications. It validates your comprehensive understanding of databases, including the concepts of design, migration, deployment, access, maintenance, automation, monitoring, security, and troubleshooting. With this guide, you'll understand how to use various AWS databases, such as Aurora Serverless and Global Database, and even services such as Redshift and Neptune. You’ll start with an introduction to the AWS databases, and then delve into workload-specific database design. As you advance through the chapters, you'll learn about migrating and deploying the databases, along with database security techniques such as encryption, auditing, and access controls. This AWS book will also cover monitoring, troubleshooting, and disaster recovery techniques, before testing all the knowledge you've gained throughout the book with the help of mock tests. By the end of this book, you'll have covered everything you need to pass the DBS-C01 AWS certification exam and have a handy, on-the-job desk reference guide.
Table of Contents (24 chapters)
1
Part 1: Introduction to Databases on AWS
Free Chapter
2
Chapter 1: AWS Certified Database – Specialty Overview
5
Part 2: Workload-Specific Database Design
12
Part 3: Deployment and Migration and Database Security
16
Part 4: Monitoring and Optimization
20
Part 5: Assessment
21
Chapter 16: Exam Practice

Chapter 12

  1. 3

You cannot modify the login.cnf file on RDS.

Provisioning a database in a public subnet is not secure.

Provisioning a database in a private subnet protected by security groups is the correct answer.

Using NACLs can help further secure a VPC, but you also need security groups, so this is incorrect.

  1. 2

Exporting to S3 is not an option here.

Creating a snapshot, encrypting a copy of it, and then creating a new snapshot is the best option.

You cannot add encryption using Modify, so this is incorrect.

  1. 3

You cannot restore a snapshot into a database with encryption enabled.

Using IAM authentication for each individual user will remove the reliance on shared passwords and will enforce the policy of each individual having their own account.

  1. 2

Applications use the RDS endpoint to access the database, so the IP change would not break the service.

It is most likely the new EC2 is not in the security group...