Question 1,260 of 1,663
DBS-C01 Database Security Practice Question
A company uses an Amazon RDS for PostgreSQL database with Multi-AZ deployment. The security team wants to audit all SQL queries executed against the database for compliance purposes. Which solution should be implemented to capture and store the queries?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable PostgreSQL query logging and publish logs to Amazon CloudWatch Logs.
Enabling PostgreSQL query logging and publishing those logs to CloudWatch Logs captures all SQL queries for auditing. Option A is wrong because CloudTrail captures API calls, not SQL queries. Option B is wrong because Performance Insights captures performance metrics, not the text of SQL queries. Option C is wrong because RDS event notifications are for database events (e.g., failover, scaling), not for capturing SQL query text.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use AWS CloudTrail to capture SQL queries.
Why it's wrong here
CloudTrail records AWS API calls, not database-level SQL queries.
- ✗
Enable Performance Insights and store the data in CloudWatch Logs.
Why it's wrong here
Performance Insights provides database performance data but does not capture individual SQL queries for auditing.
- ✗
Enable RDS event notifications for database queries.
Why it's wrong here
RDS event notifications are for instance lifecycle events, not SQL queries.
- ✓
Enable PostgreSQL query logging and publish logs to Amazon CloudWatch Logs.
Why this is correct
PostgreSQL can log all queries, and those logs can be sent to CloudWatch Logs for storage and analysis.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 20, 2026
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.