Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon Exam DBS-C01 Topic 3 Question 96 Discussion

Actual exam question for Amazon's DBS-C01 exam
Question #: 96
Topic #: 3
[All DBS-C01 Questions]

A Database Specialist is designing a disaster recovery strategy for a production Amazon DynamoDB table. The table uses provisioned read/write capacity mode, global secondary indexes, and time to live (TTL). The Database Specialist has restored the latest backup to a new table.

To prepare the new table with identical settings, which steps should be performed? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B, C

by Sue at Jun 28, 2024, 10:36 PM

Limited Time Offer

25%

Off

Get Premium DBS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Tawna
9 months ago
Haha, A and D? What is this, the 1990s? We're talking about a modern cloud database, not some ancient on-premise system.
upvoted 0 times
Whitney
8 months ago
E) Activate encryption at rest using the modify-db-cluster command with the ---storage-encrypted parameter set to true. Set the security group of the cluster to allow only the application instance's security group to connect.
upvoted 0 times
...
Deangelo
8 months ago
B) Download the SSL .pem public key for Amazon DocumentDB. Add the key to the application package and make sure the application is using the key while connecting to the cluster.
upvoted 0 times
...
...
Amber
9 months ago
Creating an Amazon DocumentDB VPC endpoint to control traffic sounds like a good idea too.
upvoted 0 times
...
Valentine
9 months ago
This is a no-brainer. C and E are the clear choices. Restoring an encrypted cluster and setting up encryption at rest - that's the way to go!
upvoted 0 times
...
Jeannetta
9 months ago
A and D? Seriously? Using SSH for database connections is just overkill. And a VPC endpoint won't encrypt the data itself.
upvoted 0 times
Eleonore
8 months ago
Exactly, focusing on encrypting the data itself and controlling access through security groups is the way to go.
upvoted 0 times
...
Donette
8 months ago
True, using SSH for database connections can be unnecessary. Encryption at rest and in transit are the key here.
upvoted 0 times
...
Marshall
9 months ago
E) Activate encryption at rest using the modify-db-cluster command with the ---storage-encrypted parameter set to true. Set the security group of the cluster to allow only the application instance's security group to connect.
upvoted 0 times
...
Matthew
9 months ago
B) Download the SSL .pem public key for Amazon DocumentDB. Add the key to the application package and make sure the application is using the key while connecting to the cluster.
upvoted 0 times
...
...
Anabel
9 months ago
We should also activate encryption at rest for the data in Amazon DocumentDB.
upvoted 0 times
...
Nichelle
9 months ago
I'm leaning towards B and E. The SSL certificate is important for secure communication, and encryption at rest is a must-have for sensitive data.
upvoted 0 times
Sharika
8 months ago
Yes, and encrypting data at rest adds an extra layer of security to protect sensitive information.
upvoted 0 times
...
Annelle
9 months ago
I agree, using the SSL certificate for secure communication is crucial.
upvoted 0 times
...
...
Alexis
9 months ago
Hmm, I think C and E are the correct options here. Encrypting the data at rest and in transit is crucial for maintaining data security.
upvoted 0 times
Nobuko
9 months ago
Yes, C and E seem like the best options to ensure the data is encrypted both in transit and at rest.
upvoted 0 times
...
Yolando
9 months ago
I agree, encrypting the data at rest and in transit is essential for security.
upvoted 0 times
...
...
Denny
9 months ago
I agree. We could download the SSL .pem public key for Amazon DocumentDB and update the application to use it.
upvoted 0 times
...
Tiffiny
10 months ago
I think we should definitely encrypt the traffic between the application and Amazon DocumentDB.
upvoted 0 times
...

Save Cancel