DBS-C01 Deployment and Migration Practice Test 30 — 15 Questions

Question 1

A company is deploying a new Amazon Aurora PostgreSQL cluster. The security team requires that all data in transit is encrypted and that the cluster is only accessible from within a specific VPC. Which combination of steps should be taken to meet these requirements?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable SSL/TLS encryption for connections and configure the Aurora cluster in a private subnet with a security group that allows only the application's security group.. To encrypt data in transit, SSL/TLS must be enabled for client connections. To restrict access to within a VPC, the Aurora cluster should reside in a private subnet and use security groups to limit inbound traffic to the application's security group. This ensures the cluster is not publicly accessible and only reachable from authorized resources within the VPC.

Answer

Configure the Aurora cluster with a public endpoint and use a network ACL to allow only the corporate IP range, and enable SSL/TLS.

Answer

Use AWS PrivateLink to create an interface VPC endpoint for Aurora and enable IAM database authentication.

Answer

Enable encryption at rest using AWS KMS and configure the cluster in a public subnet with a security group that allows the corporate CIDR range.

Question 2

A company is migrating a 2 TB on-premises Microsoft SQL Server database to Amazon RDS for SQL Server. The migration must be completed with minimal downtime and the source database must remain online during the migration. Which AWS service or feature should be used to achieve this?

Accepted Answer

AWS Database Migration Service (AWS DMS) with ongoing replication.. AWS DMS with ongoing replication is designed for minimal-downtime migrations. It reads from the source's transaction logs to capture changes while the source remains online. The target RDS for SQL Server stays synchronized, and cutover can be quick, meeting the requirement.

Answer

AWS Snowball Edge to transfer the database backup, followed by restore.

Answer

Native SQL Server backup and restore to Amazon RDS for SQL Server.

Answer

SQL Server transactional replication to Amazon RDS for SQL Server.

Question 3

A financial services company is migrating a 10 TB on-premises Microsoft SQL Server database to Amazon RDS for SQL Server. The migration must be completed within a 6-hour maintenance window with minimal downtime. The company requires that the cutover be as fast as possible. Which migration strategy should be used?

Accepted Answer

Use AWS DMS with full load and change data capture (CDC) to replicate to RDS for SQL Server, then cut over during the maintenance window.. For a large SQL Server database with a tight cutover window, AWS DMS with full load and CDC is the most efficient strategy. It minimizes downtime by continuously replicating changes until cutover, allowing the target to be nearly synchronized. Native backup/restore or full load only would require longer downtime or risk data loss, and Always On adds unnecessary complexity.

Answer

Use native SQL Server backup and restore to Amazon RDS for SQL Server, then apply transaction log backups during the maintenance window.

Answer

Use SQL Server Always On availability groups to replicate to an Amazon EC2 instance, then use AWS DMS to replicate to RDS for SQL Server.

Answer

Use AWS Database Migration Service (AWS DMS) with full load only, followed by a manual data reconciliation process.

Question 4

A company is migrating a 1 TB MySQL database from an on-premises data center to Amazon Aurora MySQL. The migration must be completed with minimal downtime, and the team wants to use AWS DMS for ongoing replication. After the initial load, they notice that some tables are not replicating changes. The DMS task logs show errors related to binary logging. Which action should the team take to resolve the issue?

Accepted Answer

Set the source MySQL parameter binlog_format to ROW and ensure binlog_row_image is set to FULL. AWS DMS requires MySQL sources to use row-based binary logging (binlog_format=ROW) and binlog_row_image=FULL for change data capture. Without these settings, DMS cannot capture the necessary before and after images for updates and deletes, leading to replication errors. Correcting the binary logging format resolves the issue and allows ongoing replication to proceed.

Answer

Enable GTID-based replication on the source MySQL instance

Answer

Set the source MySQL parameter binlog_format to STATEMENT

Answer

Increase the value of max_binlog_size on the source MySQL instance

Question 5

A company is deploying a new Amazon Aurora PostgreSQL cluster. The security team requires that all data in transit is encrypted and that the cluster is only accessible from within a specific VPC. Which combination of steps should be taken to meet these requirements?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable encryption at rest on the Aurora cluster and select the customer-managed KMS key during cluster creation.. Aurora encryption must be enabled when the cluster is created, and you can choose a customer-managed KMS key. That key supports automatic annual rotation and custom key policies, satisfying both the encryption and rotation requirements. Other approaches either cannot encrypt Aurora storage or use a key that cannot be rotated by the customer.

Answer

Create the Aurora cluster unencrypted, then use AWS KMS to encrypt the underlying EBS volumes after deployment.

Answer

Use an encrypted Amazon S3 bucket as the Aurora storage backend and enable default encryption on the bucket.

Answer

Enable encryption at rest using the default AWS managed key aws/aurora and enable annual rotation on that key.

Question 6

A company is migrating its on-premises MySQL database to Amazon Aurora MySQL. The database is 1 TB and has a high write workload. The company wants to minimize downtime and ensure data consistency. They plan to use AWS DMS. During testing, they notice that the replication instance is experiencing high CPU utilization and the migration is slower than expected. Which action should they take to improve performance?

Accepted Answer

Increase the size of the replication instance to a larger instance class.. High CPU utilization on the AWS DMS replication instance during a migration indicates that the instance lacks sufficient resources. Scaling up to a larger instance class provides more CPU and memory, directly addressing the bottleneck and improving migration performance. Other options do not resolve the CPU constraint on the replication instance.

Answer

Enable Multi-AZ on the replication instance to improve availability and performance.

Answer

Change the target endpoint to use a larger instance class for the Aurora cluster.

Answer

Reduce the number of tables in the migration task to lower the load on the replication instance.

Question 7

A company is planning to migrate an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server. The database is 1 TB and the company wants to minimize downtime. The migration must also ensure that the target database is highly available. Which TWO steps should be taken to meet these requirements? (Choose two.)

Accepted Answer

Configure the RDS for SQL Server instance with a Multi-AZ deployment.. To minimize downtime, AWS DMS with ongoing replication keeps the target synchronized until cutover. To ensure high availability, the RDS for SQL Server instance should be configured for Multi-AZ deployment, which provides automatic failover to a standby in another AZ. Together, these steps meet both requirements.

Answer

Deploy the RDS for SQL Server instance in a single Availability Zone to reduce latency.

Answer

Use native SQL Server backup and restore to migrate the database.

Answer

Enable automated backups with a retention period of 35 days.

Question 8

A startup is deploying a new Amazon DynamoDB table for an order-processing application. The team expects highly unpredictable read and write traffic with long idle periods and occasional sharp bursts. They want to avoid capacity planning and minimize cost. Which DynamoDB capacity mode should they choose?

Accepted Answer

On-demand capacity mode for the table.. DynamoDB on-demand capacity mode removes the need to specify read and write capacity, scales automatically with traffic, and charges per request. That makes it well suited to unpredictable, bursty workloads with idle periods, and it avoids the throttling risk that provisioned mode can exhibit during sudden spikes.

Answer

Provisioned capacity mode with reserved capacity purchased for one year.

Answer

Provisioned capacity mode with auto scaling configured on the table.

Answer

Global tables with provisioned capacity in two Regions.

Question 9

A solutions architect is deploying a new Amazon Aurora MySQL DB cluster that will use a custom parameter group. The architect creates the parameter group with the default settings and associates it with the DB cluster. After the cluster is running, the architect modifies a dynamic parameter in the parameter group and wants the change to take effect immediately without rebooting the cluster. Which action should the architect take?

Accepted Answer

Modify the parameter value and choose the immediate apply option.. For dynamic parameters in Aurora, you can modify the parameter value and choose to apply the change immediately, which takes effect without rebooting the DB cluster. This provides minimal disruption and meets the requirement. Static parameters would require a reboot, but the scenario specifies a dynamic parameter. The other options either cause unnecessary downtime or delay the change.

Answer

Modify the parameter value and wait for the next maintenance window to apply it.

Answer

Reboot the DB cluster to apply the parameter change.

Answer

Create a new parameter group with the desired value, associate it with the DB cluster, and reboot.

Question 10

A company is deploying a new Amazon Aurora PostgreSQL cluster. The security team requires that all data in transit is encrypted and that the cluster is only accessible from within a specific VPC. Which combination of steps should be taken to meet these requirements?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Modify the Aurora cluster parameter group to set rds.force_ssl to 1 and reboot the cluster.. To enforce SSL/TLS for all connections to an Aurora PostgreSQL cluster, the rds.force_ssl parameter must be set to 1 in the cluster parameter group. This parameter, when enabled, rejects any connection that does not use SSL. After modifying the parameter group, a reboot of the cluster is required for the change to take effect. This ensures that all applications connect securely, meeting the company's requirement.

Answer

Attach an IAM policy to the Aurora cluster that denies connections without SSL.

Answer

Use AWS Certificate Manager (ACM) to issue certificates and configure the Aurora cluster to require them.

Answer

Enable SSL enforcement on the Aurora cluster by setting the ssl parameter to 'on' in the database parameter group.

Question 11

A company is deploying a new Amazon RDS for MySQL database. They need to ensure that the database can be restored to any point in time within the last 7 days. Which feature should be enabled?

Accepted Answer

Automated backups. Automated backups are required for point-in-time recovery in Amazon RDS. When enabled, RDS continuously backs up the database and transaction logs, allowing restoration to any point within the retention period. This is the only feature that provides the required capability for restoring to any point in time within the last 7 days.

Answer

Manual snapshots

Answer

Multi-AZ deployment

Answer

Read replicas

Question 12

A company is deploying Amazon DynamoDB for a new application that requires a recovery point objective (RPO) of 5 minutes and a recovery time objective (RTO) of 1 hour across two AWS Regions. The application must continue to serve reads and writes in the secondary Region if the primary Region fails. Which deployment strategy should a database specialist recommend?

Accepted Answer

Configure DynamoDB global tables with the primary table in the primary Region and a replica table in the secondary Region.. DynamoDB global tables replicate data across Regions with sub-second to low-second latency, satisfying the 5-minute RPO, and provide an active-active replica that can accept reads and writes during a Regional failure. Because the data already exists in the secondary Region, failover is fast and meets the 1-hour RTO. PITR, custom Streams replication, and DAX do not provide multi-Region active-active replication.

Answer

Set up DynamoDB Streams on the primary table and use an AWS Lambda function to replicate items to a table in the secondary Region.

Answer

Enable DynamoDB point-in-time recovery (PITR) on the table and restore it to a new table in the secondary Region during a failover.

Answer

Create a DynamoDB Accelerator (DAX) cluster in each Region and point the application to the local cluster for reads and writes.

Question 13

A company is migrating a small on-premises PostgreSQL database to Amazon RDS for PostgreSQL. The database is 50 GB and the company can afford a short downtime window. They want to use AWS DMS for the migration. Which DMS task type should they choose to perform the migration with the least complexity?

Accepted Answer

Full load only. For a small database with an acceptable downtime window, a full load task is the simplest DMS option. It copies existing data without the overhead of setting up change data capture or ongoing replication. This minimizes complexity and is sufficient when near-zero downtime is not required.

Answer

Full load and change data capture (CDC)

Answer

Full load with validation only

Answer

Change data capture (CDC) only

Question 14

A logistics company is migrating an on-premises MongoDB 4.4 replica set to Amazon DocumentDB. The dataset is 800 GB and the company requires the cutover to complete with less than five minutes of application downtime. The source database can accept a brief read-only period. Which migration approach should the team use?

Accepted Answer

Use the AWS DMS MongoDB source endpoint with change data capture to continuously replicate to DocumentDB, then stop writes and wait for replication to catch up before cutover.. AWS DMS can read the MongoDB oplog to capture ongoing changes and apply them to Amazon DocumentDB, so the bulk of the 800 GB is replicated ahead of the cutover. Pausing writes briefly lets the remaining changes drain, enabling cutover within the five-minute downtime target.

Answer

Configure the on-premises MongoDB replica set to add the DocumentDB cluster as a member node and let normal replication synchronize the data.

Answer

Restore a MongoDB snapshot into Amazon S3 and use AWS Glue to load the collection data into DocumentDB.

Answer

Use mongodump and mongorestore against the DocumentDB cluster endpoint during the cutover window.

Question 15

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database uses a non-standard character set that is not supported by RDS for Oracle. The migration must preserve the data with minimal transformation. Which approach should the company take?

Accepted Answer

Convert the source database to a supported character set before migration, then use native tools or AWS DMS to migrate.. RDS for Oracle supports only a specific list of character sets. When the source uses an unsupported character set, the only viable approach is to convert the source database to a supported character set before migration. This ensures that the target DB instance can store the data correctly. After conversion, standard migration tools like Oracle Data Pump or AWS DMS can be used. Creating an instance with an unsupported character set is not possible.

Answer

Use Oracle GoldenGate to replicate data to RDS for Oracle, which will automatically map the character set.

Answer

Create an RDS for Oracle DB instance with the same non-standard character set using a custom parameter group.

Answer

Use AWS DMS to migrate the data to RDS for Oracle, specifying the target character set as the default.