Courseiva
← DBS-C01
Full test
Database Security →easyMultiple ChoiceObjective-mapped

DBS-C01 Database Security Practice Question

A company is using Amazon Aurora MySQL and needs to audit all database logins and query activity. Which feature should be enabled to meet this requirement?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Enable Advanced Auditing through the DB cluster parameter group by setting the server_audit_logging parameter and related parameters.

Amazon Aurora MySQL's Advanced Auditing feature, enabled by setting the server_audit_logging parameter and related parameters in the DB cluster parameter group, captures all database logins and query activity. Option A (audit_log_enabled) is a different, less detailed audit log feature, not the full advanced auditing. Option B (Enhanced Monitoring) monitors OS-level metrics, not database activity. Option C (CloudTrail) logs AWS API calls, not database queries.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Enable database audit logs by setting the audit_log_enabled parameter to 1.

    Why it's wrong here

    Aurora MySQL uses the 'Advanced Auditing' feature, not just a parameter.

  • ✗

    Enable RDS Enhanced Monitoring.

    Why it's wrong here

    Enhanced Monitoring provides OS metrics, not query auditing.

  • ✗

    Enable AWS CloudTrail to log database queries.

    Why it's wrong here

    CloudTrail logs API calls, not database queries.

  • ✓

    Enable Advanced Auditing through the DB cluster parameter group by setting the server_audit_logging parameter and related parameters.

    Why this is correct

    This is the correct feature for auditing queries and logins in Aurora MySQL.

About these practice questions

One of 1,663 original DBS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.