DBS-C01 Database Security Practice Question
A developer accidentally exposed an Amazon RDS snapshot to the public. What is the quickest way to remediate this issue?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Modify the snapshot permissions to set it to private.
The quickest remediation is to modify the snapshot permissions to make it private. This immediately revokes public access. Option A is incorrect because deleting the snapshot would remove the backup entirely, which is unnecessary and could risk data loss if no other backup exists. Option B is incorrect because copying the snapshot does not change the original's permissions; the original remains public. Option C is incorrect because sharing with a specific account does not revoke public access; it only adds an additional permission. Therefore, modifying the snapshot to private is the direct and fastest fix.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Delete the snapshot and create a new one from the source DB instance.
Why it's wrong here
Deleting the snapshot removes the backup entirely, which is unnecessary and could risk data loss if no other backup exists. It does not fix the exposure quickly.
- ✗
Copy the snapshot to a new snapshot and delete the original.
Why it's wrong here
Copying the snapshot does not change the original's permissions; the original remains public. This does not remediate the exposure.
- ✗
Share the snapshot with only the required AWS account.
Why it's wrong here
Sharing with a specific account does not revoke public access; it only adds an additional permission. The snapshot remains public.
- ✓
Modify the snapshot permissions to set it to private.
Why this is correct
Modifying the snapshot permissions to private immediately revokes public access. This is the quickest remediation.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DBS-C01 question from scratch — 1,663 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.