Question 56 of 1,663
DBS-C01 Database Security Practice Question
A small business runs a web application on a single Amazon RDS for MySQL DB instance. The application uses a master user account for all database operations. The security team is concerned about the risk of SQL injection and wants to implement the principle of least privilege. They want to create separate database users for read-only and read-write operations. The application currently uses a single connection string. The developer needs to modify the application to use two separate users. What is the correct approach to implement this securely?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a read-only user and a read-write user in the database, grant minimal privileges, and modify the application to use the appropriate user for each operation.
Creating separate users with minimal privileges and modifying the application to use the appropriate user for each operation reduces the risk of SQL injection and enforces least privilege. Option A is wrong because using stored procedures with a single master user does not eliminate the need for separate users for different privilege levels. Option B is wrong because restricting IP address does not address the need for granular permissions. Option C is wrong because enabling IAM database authentication with a single IAM role does not provide separate read-only and read-write capabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use stored procedures for all database operations and grant execute only to the master user.
Why it's wrong here
Still uses a single user.
- ✗
Keep using the master user but restrict its IP address.
Why it's wrong here
Master user has full privileges.
- ✗
Enable IAM database authentication and use a single IAM role.
Why it's wrong here
Does not create separate users.
- ✓
Create a read-only user and a read-write user in the database, grant minimal privileges, and modify the application to use the appropriate user for each operation.
Why this is correct
Enforces least privilege.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 20, 2026
This DBS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DBS-C01 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.