DBS-C01 Database Security Practice Question
A company is using Amazon Aurora MySQL and needs to audit database logins. Which of the following can be used to capture login events? (Choose TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Database Activity Streams
Options B and E are correct. Database Activity Streams (DAS) in Amazon Aurora capture login events and other database activities. Additionally, the Aurora MySQL audit plugin can be enabled to log connections, including login attempts. Option A (VPC Flow Logs) captures network traffic, not database logins. Option C (Enhanced Monitoring) captures OS-level metrics from the database host. Option D (AWS CloudTrail) records API calls made to AWS services, not database-level events.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VPC Flow Logs
Why it's wrong here
Flow Logs capture network traffic, not database logins.
- ✓
Database Activity Streams
Why this is correct
DAS captures database activity including logins.
- ✗
Enhanced Monitoring
Why it's wrong here
Enhanced Monitoring does not capture database logins.
- ✗
AWS CloudTrail
Why it's wrong here
CloudTrail captures API calls, not database logins.
- ✓
Aurora MySQL audit plugin
Why this is correct
The audit plugin can log connections.
Go deeper
Related to this question
About these practice questions
One of 1,663 original DBS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on DBS-C01
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company uses Amazon Aurora MySQL and needs to audit all database logins, including failed attempts. Which feature should be enabled?
easy- ✓ A.Database Activity Streams
- B.Enhanced Monitoring
- C.VPC Flow Logs
- D.AWS CloudTrail
Why A: Database Activity Streams provide a near real-time stream of database activity, including logins and failed attempts, and integrate with AWS CloudWatch and third-party tools. Option B (Enhanced Monitoring) is incorrect because it provides OS-level metrics like CPU and memory usage, not database login auditing. Option C (VPC Flow Logs) is incorrect because they capture IP traffic metadata, not database-level events. Option D (AWS CloudTrail) is incorrect because it records API calls made to AWS services, not database login events within Aurora.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.