Question 111
A gaming company is developing a new mobile game and decides to store the data for each user in Amazon DynamoDB. To make the registration process as easy as possible, users can log in with their existing Facebook or Amazon accounts. The company expects more than 10,000 users.
How should a database specialist implement access control with the LEAST operational effort?
A. Use web identity federation on the mobile app and AWS STS with an attached IAM role to get temporary credentials to access DynamoDB.
B. Use web identity federation on the mobile app and create individual IAM users with credentials to access DynamoDB.
C. Use a self-developed user management system on the mobile app that lets users access the data from DynamoDB through an API.
D. Use a single IAM user on the mobile app to access DynamoDB.
Question 112
A large retail company recently migrated its three-tier ecommerce applications to AWS. The company's backend database is hosted on Amazon AuroraPostgreSQL. During peak times, users complain about longer page load times. A database specialist reviewed Amazon RDS Performance Insights and found a spike in IO:XactSync wait events. The SQL attached to the wait events are all single INSERT statements.
How should this issue be resolved?
A. Modify the application to commit transactions in batches
B. Add a new Aurora Replica to the Aurora DB cluster.
C. Add an Amazon ElastiCache for Redis cluster and change the application to write through.
D. Change the Aurora DB cluster storage to Provisioned IOPS (PIOPS).
Question 113
A company uses Amazon DynamoDB as the data store for its ecommerce website. The website receives little to no traffic at night, and the majority of the traffic occurs during the day. The traffic growth during peak hours is gradual and predictable on a daily basis, but it can be orders of magnitude higher than during off- peak hours.
The company initially provisioned capacity based on its average volume during the day without accounting for the variability in traffic patterns. However, the website is experiencing a significant amount of throttling during peak hours. The company wants to reduce the amount of throttling while minimizing costs.
What should a database specialist do to meet these requirements?
A. Use reserved capacity. Set it to the capacity levels required for peak daytime throughput.
B. Use provisioned capacity. Set it to the capacity levels required for peak daytime throughput.
C. Use provisioned capacity. Create an AWS Application Auto Scaling policy to update capacity based on consumption.
D. Use on-demand capacity.
Question 114
A company uses an Amazon RDS for PostgreSQL DB instance for its customer relationship management (CRM) system. New compliance requirements specify that the database must be encrypted at rest.
Which action will meet these requirements?
A. Create an encrypted copy of manual snapshot of the DB instance. Restore a new DB instance from the encrypted snapshot.
B. Modify the DB instance and enable encryption.
C. Restore a DB instance from the most recent automated snapshot and enable encryption.
D. Create an encrypted read replica of the DB instance. Promote the read replica to a standalone instance.
Question 115
A database specialist was alerted that a production Amazon RDS MariaDB instance with 100 GB of storage was out of space. In response, the database specialist modified the DB instance and added 50 GB of storage capacity. Three hours later, a new alert is generated due to a lack of free space on the same DB instance.
The database specialist decides to modify the instance immediately to increase its storage capacity by 20 GB.
What will happen when the modification is submitted?
A. The request will fail because this storage capacity is too large.
B. The request will succeed only if the primary instance is in active status.
C. The request will succeed only if CPU utilization is less than 10%.
D. The request will fail as the most recent modification was too soon.
Question 116
A company uses Amazon Aurora for secure financial transactions. The data must always be encrypted at rest and in transit to meet compliance requirements.
Which combination of actions should a database specialist take to meet these requirements? (Choose two.)
A. Create an Aurora Replica with encryption enabled using AWS Key Management Service (AWS KMS). Then promote the replica to master.
B. Use SSL/TLS to secure the in-transit connection between the financial application and the Aurora DB cluster.
C. Modify the existing Aurora DB cluster and enable encryption using an AWS Key Management Service (AWS KMS) encryption key. Apply the changes immediately.
D. Take a snapshot of the Aurora DB cluster and encrypt the snapshot using an AWS Key Management Service (AWS KMS) encryption key. Restore the snapshot to a new DB cluster and update the financial application database endpoints.
E. Use AWS Key Management Service (AWS KMS) to secure the in-transit connection between the financial application and the Aurora DB cluster.
Question 117
A company is running a website on Amazon EC2 instances deployed in multiple Availability Zones (AZs). The site performs a high number of repetitive reads and writes each second on an Amazon RDS for MySQL Multi-AZ DB instance with General Purpose SSD (gp2) storage. After comprehensive testing and analysis, a database specialist discovers that there is high read latency and high CPU utilization on the DB instance.
Which approach should the database specialist take to resolve this issue without changing the application?
A. Implement sharding to distribute the load to multiple RDS for MySQL databases.
B. Use the same RDS for MySQL instance class with Provisioned IOPS (PIOPS) storage.
C. Add an RDS for MySQL read replica.
D. Modify the RDS for MySQL database class to a bigger size and implement Provisioned IOPS (PIOPS).
Question 118
A banking company recently launched an Amazon RDS for MySQL DB instance as part of a proof-of-concept project. A database specialist has configured automated database snapshots. As a part of routine testing, the database specialist noticed one day that the automated database snapshot was not created.
Which of the following are possible reasons why the snapshot was not created? (Choose two.)
A. A copy of the RDS automated snapshot for this DB instance is in progress within the same AWS Region.
B. A copy of the RDS automated snapshot for this DB instance is in progress in a different AWS Region.
C. The RDS maintenance window is not configured.
D. The RDS DB instance is in the STORAGE_FULL state.
E. RDS event notifications have not been enabled.
Question 119
An online shopping company has a large inflow of shopping requests daily. As a result, there is a consistent load on the company's Amazon RDS database. A database specialist needs to ensure the database is up and running at all times. The database specialist wants an automatic notification system for issues that may cause database downtime or for configuration changes made to the database.
What should the database specialist do to achieve this? (Choose two.)
A. Create an Amazon CloudWatch Events event to send a notification using Amazon SNS on every API call logged in AWS CloudTrail.
B. Subscribe to an RDS event subscription and configure it to use an Amazon SNS topic to send notifications.
C. Use Amazon SES to send notifications based on configured Amazon CloudWatch Events events.
D. Configure Amazon CloudWatch alarms on various metrics, such as FreeStorageSpace for the RDS instance.
E. Enable email notifications for AWS Trusted Advisor.
Question 120
A large company has a variety of Amazon DB clusters. Each of these clusters has various configurations that adhere to various requirements. Depending on the team and use case, these configurations can be organized into broader categories.
A database administrator wants to make the process of storing and modifying these parameters more systematic. The database administrator also wants to ensure that changes to individual categories of configurations are automatically applied to all instances when required.
Which AWS service or feature will help automate and achieve this objective?
A. AWS Systems Manager Parameter Store
B. DB parameter group
C. AWS Config
D. AWS Secrets Manager
