DBS-C01 Database Security Practice Question
A company is using an Amazon DynamoDB table with a global table configuration across two AWS regions. The security team wants to ensure that all data is encrypted in transit between the regions. What should the team do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
No additional action is required; DynamoDB global tables encrypt all replication traffic in transit by default.
DynamoDB global tables automatically encrypt all replication traffic in transit using TLS, so no additional configuration is required. Option A is incorrect because internet gateways are not involved in inter-region replication; DynamoDB global tables use the AWS backbone network. Option B is incorrect because CloudFront is a content delivery network and does not handle DynamoDB replication traffic. Option C is incorrect because VPC peering is not required; global tables operate outside of VPCs and do not traverse VPC peering connections.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure an Internet gateway in each region and enforce HTTPS for all traffic.
Why it's wrong here
Internet gateway is for internet traffic, not required for global tables.
- ✗
Use AWS CloudFront to route traffic between the regions with SSL/TLS termination.
Why it's wrong here
CloudFront is a CDN, not used for DynamoDB replication.
- ✗
Set up a VPC peering connection between the two regions and route DynamoDB traffic through it.
Why it's wrong here
DynamoDB global tables do not require VPC peering.
- ✓
No additional action is required; DynamoDB global tables encrypt all replication traffic in transit by default.
Why this is correct
Replication traffic between regions is automatically encrypted.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DBS-C01 question from scratch — 1,663 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.