Courseiva

CCNA Management and Operations Questions

75 of 300 questions · Page 2/4 · Management and Operations · Answers revealed

Practice these questionsDomain overviewAll questions
76
MCQeasy

Refer to the exhibit. A database administrator runs the AWS CLI command to retrieve CloudWatch metrics for an Amazon RDS DB instance. The output shows a spike in WriteLatency at 10:05 UTC. What is the most likely cause of this spike?

A.The DB instance's gp2 volume has exhausted its burst credits.
B.The DB instance is in the process of taking a snapshot.
C.There is a large number of concurrent connections to the DB instance.
D.The DB instance experienced a Multi-AZ failover.
AnswerA

A sudden spike in write latency often indicates that the storage volume has exhausted its burst credits and is now using baseline performance, which may be slower.

Why this answer

A sudden spike in write latency often indicates that the storage volume has exhausted its burst credits and is now using baseline performance, which may be slower. Option B is incorrect because taking a snapshot causes I/O suspension, not necessarily a latency spike. Option C is incorrect because a large number of concurrent connections typically causes increased CPU and memory usage, not a latency spike.

Option D is incorrect because a Multi-AZ failover would cause a brief downtime, not a latency spike.

Practice this question →
77
MCQeasy

A database administrator needs to retain backups of an Amazon RDS for PostgreSQL DB instance for 7 years to meet compliance requirements. The automated backup retention period is limited to 35 days. Which solution should be used?

A.Export the automated backups to Amazon S3 and apply an S3 lifecycle policy.
B.Create manual snapshots at regular intervals and retain them for 7 years.
C.Increase the automated backup retention period to 7 years.
D.Use an AWS Lambda function to copy automated backups to an EC2 instance.
AnswerB

Manual snapshots are retained until deleted, suitable for long-term retention.

Why this answer

Manual snapshots are retained indefinitely until deleted. Automated backups have a max retention of 35 days. Exporting to S3 is an option but not directly a backup retention method; you can export snapshots to S3, but manual snapshots are the standard way to retain backups long-term.

EC2 instance backups are not applicable.

Practice this question →
78
MCQmedium

A company has an Amazon Redshift cluster with a single node. The cluster is used for reporting. Recently, queries have become slow, and the cluster's disk space is 80% full. Which action should be taken to improve query performance and manage storage?

A.Resize the cluster to include additional compute nodes.
B.Enable compression on all columns using the ENCODE AUTO option.
C.Modify the table's distribution style to DISTSTYLE ALL for all tables.
D.Run the VACUUM command to reclaim space from deleted rows.
AnswerA

Adding nodes distributes data across more slices, improving query parallelism and providing more storage.

Why this answer

Resizing the cluster to add compute nodes distributes data and workload across more nodes, improving query performance and increasing storage capacity. Option B is wrong because enabling compression (ENCODE AUTO) can reduce storage space but does not directly address the performance bottleneck caused by high disk usage on a single node; it also is not a quick fix for existing data. Option C is wrong because changing distribution style to ALL replicates all data to every node, which actually increases storage consumption and may worsen performance on a single-node cluster.

Option D is wrong because running VACUUM reclaims space from deleted rows, but the cluster is 80% full and VACUUM does not add new storage capacity; it may provide temporary relief but not a long-term solution for performance.

Practice this question →
79
MCQmedium

A company is running an Amazon RDS for PostgreSQL DB instance with Multi-AZ. The database experiences a failover during a maintenance window. After the failover, the application connection pool continues to use the old primary endpoint, causing connection errors. What is the BEST way to ensure application connections automatically redirect to the new primary after a failover?

A.Use the RDS endpoint (CNAME) provided by RDS, which automatically points to the primary instance.
B.Create a custom Route 53 failover routing policy pointing to both DB instances.
C.Modify the application connection string to point to the new primary IP address after each failover.
D.Configure the application to use a static IP address of the primary instance.
AnswerA

The RDS endpoint is a DNS CNAME that updates after failover, ensuring seamless redirection.

Why this answer

The RDS endpoint (CNAME) provided by Amazon RDS automatically points to the current primary instance. After a failover, RDS updates the CNAME record to point to the new primary, so application connections using the endpoint are seamlessly redirected without manual intervention. This is the simplest and most reliable approach.

Option B (Custom Route 53 failover routing) is unnecessary because RDS already provides a managed DNS endpoint. Option C (modifying connection string manually) is not automated and prone to human error. Option D (static IP) is not practical as RDS instances do not have static IPs; the DNS endpoint handles failover transparently.

Practice this question →
80
MCQhard

An administrator is troubleshooting a permissions issue. A user with the IAM policy shown is unable to share an automated system snapshot with another AWS account. Which action should the administrator take to resolve this issue?

A.Add the rds:ModifyDBSnapshotAttribute action to the policy.
B.Add the rds:CopyDBSnapshot action for cross-region copy.
C.Change the Resource to "arn:aws:rds:us-east-1:123456789012:snapshot:automated:*".
D.Change the Resource to "arn:aws:rds:us-east-1:123456789012:snapshot:rds:*".
AnswerC

Automated snapshots require a resource ARN that includes 'automated'.

Why this answer

The policy allows actions on DB snapshots, but automated snapshots have the resource type 'automated-snapshot' and require explicit resource ARN instead of '*'. Option A is wrong because the policy already includes the necessary actions. Option B is wrong because the issue is not about cross-region copying.

Option D is wrong because the issue is not about manual snapshots.

Practice this question →
81
MCQhard

A company has an Amazon DynamoDB table with on-demand capacity mode. They notice that write requests are being throttled during peak hours. The table has a global secondary index (GSI) that is also throttled. Which action should the database specialist take to resolve the throttling?

A.Review the partition key design and consider adding a suffix to distribute writes more evenly.
B.Enable DynamoDB Streams to offload write operations.
C.Switch to provisioned capacity mode and increase write capacity units (WCU).
D.Increase the write capacity of the GSI by updating the table's provisioned throughput.
AnswerA

Even distribution of write traffic across partitions reduces throttling.

Why this answer

The throttling of both the base table and the GSI during peak hours indicates a hot partition caused by an uneven distribution of write activity. Reviewing the partition key design and adding a suffix to distribute writes more evenly is the correct action because it addresses the root cause: DynamoDB's on-demand mode automatically scales capacity, but it cannot overcome a skewed access pattern that overloads a single partition. By spreading writes across more partitions, you eliminate the hot spot and prevent throttling without changing capacity mode.

Exam trap

The trap here is that candidates assume throttling is always a capacity issue and choose to increase provisioned throughput, but the real problem is a hot partition caused by an uneven write pattern, which on-demand mode cannot automatically resolve.

How to eliminate wrong answers

Option B is wrong because DynamoDB Streams capture a time-ordered sequence of item-level changes but do not offload write operations; they are used for event-driven processing, not for reducing write load. Option C is wrong because switching to provisioned capacity mode and increasing WCU does not fix the underlying hot partition issue; throttling will persist if writes are concentrated on a few partitions, and on-demand mode already provides unlimited throughput per partition. Option D is wrong because you cannot directly increase the write capacity of a GSI in on-demand mode; GSI throughput is shared with the base table, and throttling occurs when a GSI partition is overloaded due to uneven write distribution, not because of insufficient provisioned capacity.

Practice this question →
82
MCQhard

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database size is 2 TB and the network bandwidth is limited. The company needs to minimize downtime during migration. Which AWS service should be used?

A.Oracle Data Pump export and import
B.AWS Schema Conversion Tool (SCT)
C.AWS Database Migration Service (DMS)
D.AWS Snowball Edge
AnswerC

DMS can migrate live data with minimal downtime.

Why this answer

AWS DMS is the correct choice because it supports ongoing replication from Oracle to Amazon RDS for Oracle, allowing you to perform a live migration with minimal downtime. With a 2 TB database and limited bandwidth, DMS can use Change Data Capture (CDC) to keep the target synchronized while the initial full load runs, then switch over with only a brief outage. This makes it ideal for minimizing downtime compared to offline methods.

Exam trap

The trap here is that candidates often choose AWS Snowball Edge for any large database with limited bandwidth, overlooking that DMS with CDC can achieve minimal downtime even for multi-terabyte databases, whereas Snowball introduces significant operational delay and is better suited for petabyte-scale or disconnected environments.

How to eliminate wrong answers

Option A is wrong because Oracle Data Pump export and import is an offline, batch-oriented tool that requires the source database to be quiesced or taken offline during the export, causing significant downtime, and it does not handle ongoing replication. Option B is wrong because AWS Schema Conversion Tool (SCT) is designed for converting database schemas and code between different database engines (e.g., Oracle to Aurora), not for migrating data with minimal downtime; it is often used alongside DMS but cannot perform the data transfer itself. Option D is wrong because AWS Snowball Edge is a physical data transfer device intended for large-scale offline migrations (typically 10 TB+) when network bandwidth is extremely limited, but it introduces weeks of shipping and manual handling, which increases downtime and complexity for a 2 TB database that could be migrated online with DMS.

Practice this question →
83
MCQhard

A multinational e-commerce company runs an Amazon Aurora MySQL database for its product catalog. The database is 2 TB and has a high write volume. The company needs to create a test environment that contains a subset (10%) of the production data for developers to use. The test environment must be refreshed daily with the latest production data. The operations team wants to minimize cost and ensure that the test environment does not impact production performance. Which solution should they implement?

A.Use AWS DMS to continuously replicate a filtered subset of data to a test cluster.
B.Take a manual snapshot of the production cluster, restore it to a new cluster, and delete 90% of the data.
C.Use Aurora cloning to create a clone of the production cluster. Use database triggers or scripts to delete 90% of the data after cloning.
D.Create a read replica of the production cluster, promote it to a standalone cluster, and delete 90% of the data.
AnswerC

Cloning is fast, cost-effective, and does not impact production.

Why this answer

Using Aurora cloning creates a storage-level copy that shares the same underlying storage as the source cluster, minimizing cost and avoiding any performance impact on production because cloning does not involve copying data. After cloning, you can delete 90% of the data using scripts or triggers to retain only 10% for testing. Option A (DMS continuous replication) would incur additional cost and ongoing replication overhead.

Option B (snapshot and restore) would create a full 2 TB copy and then you would have to delete data, incurring storage costs for the full copy. Option D (read replica) would impact production replication and would also require deleting data after promotion.

Practice this question →
84
MCQeasy

A company has an Amazon RDS for PostgreSQL DB instance with automated backups enabled. The retention period is set to 7 days. A developer accidentally performed a DROP TABLE operation on a critical table 2 days ago. How can the table be recovered with minimal data loss?

A.Perform a point-in-time restore to a time just before the DROP TABLE operation.
B.Use the pg_dump utility to create a manual backup and restore it.
C.Create a read replica of the DB instance and promote it to a standalone instance.
D.Restore the DB instance from the oldest automated snapshot.
AnswerA

PITR allows recovery to any point within the retention period.

Why this answer

The correct approach is to perform a point-in-time restore (PITR) to a time just before the DROP TABLE operation. RDS for PostgreSQL with automated backups enabled supports PITR within the backup retention period (7 days). Since the table was dropped 2 days ago, restoring the DB instance to a point in time just before the drop will recover the table with minimal data loss.

Option B (pg_dump) is not a suitable recovery method because it requires a pre-existing backup; it cannot generate a backup retroactively. Option C (creating a read replica and promoting it) would create a copy of the current state, which already lacks the dropped table, so it does not help. Option D (restore from oldest automated snapshot) would revert the entire database to a 7-day-old state, losing all changes made in the last 7 days, including the table that was dropped only 2 days ago, resulting in greater data loss.

Practice this question →
85
MCQeasy

A company is using Amazon DynamoDB for a web application. The company notices that read requests to a particular table are throttled during peak hours. The table has a provisioned read capacity of 1000 read capacity units (RCUs). The read requests are mostly eventually consistent reads. What should the company do to reduce throttling without changing the application code?

A.Use Amazon ElastiCache to cache the read results.
B.Switch to strongly consistent reads to reduce the number of read requests.
C.Implement DynamoDB Accelerator (DAX) to cache read requests.
D.Increase the provisioned read capacity for the table.
AnswerD

Increasing provisioned read capacity directly addresses the throttling by allowing more read requests per second without any code changes.

Why this answer

Increasing provisioned read capacity directly provides more RCUs, reducing throttling without code changes. Option A is wrong because ElastiCache would require application code changes to implement caching. Option B is wrong: Switching to strongly consistent reads would double RCU consumption per read (for reads up to 4 KB) or increase it, worsening throttling.

Option C is wrong: DAX does require code changes to integrate (though minimal), and the question specifically asks for no application code changes.

Practice this question →
86
Multi-Selectmedium

A company is using Amazon DynamoDB with on-demand capacity. The operations team wants to monitor for throttled read requests. Which metric from Amazon CloudWatch should be used to set up an alarm for read throttling?

Select 1 answer
A.ConsumedWriteCapacityUnits
B.ReadThrottleEvents
C.ThrottledPutRecords
D.ProvisionedReadCapacityUnits
E.ThrottledGetRecords
AnswersB

ReadThrottleEvents directly counts throttled read requests on the table.

Why this answer

'ReadThrottleEvents' is a CloudWatch metric that directly indicates throttled read requests on a DynamoDB table. For write throttling, the correct metric is 'WriteThrottleEvents', but it is not among the options given. Therefore, only one option correctly answers the question as revised.

Practice this question →
87
MCQhard

A company is running a MongoDB-compatible Amazon DocumentDB cluster. The application experiences high write latency during peak hours. The database administrator checks the CloudWatch metrics and notices that the Write IOPS metric is consistently at the maximum for the instance size. What should the administrator do to reduce write latency?

A.Increase the instance size to a larger instance class with higher IOPS limits.
B.Switch to a memory-optimized instance class.
C.Increase the allocated storage size to improve I/O performance.
D.Enable Multi-AZ deployment to offload writes to the standby.
AnswerA

Increasing the instance size provides more IOPS capacity, which can reduce write latency if the instance is hitting IOPS limits.

Why this answer

Increasing the instance size provides more IOPS capacity, which can reduce write latency if the instance is hitting IOPS limits. Option B is incorrect because switching to a memory-optimized instance class does not directly increase IOPS capacity; it improves memory performance, not I/O throughput. Option C is incorrect because increasing allocated storage size may increase IOPS if using gp2, but the issue is hitting the maximum IOPS for the current instance, and simply increasing storage does not guarantee a proportional increase in IOPS limits.

Option D is incorrect because enabling Multi-AZ adds a standby replica for high availability but does not offload writes or increase write IOPS capacity on the primary.

Practice this question →
88
MCQhard

A company is using Amazon DynamoDB for a gaming application. During a new game launch, write traffic spikes and some users receive 'ProvisionedThroughputExceededException' errors. The company wants to handle these spikes automatically and cost-effectively. What should be done?

A.Implement application-level retries with exponential backoff and a queue.
B.Switch the table to on-demand capacity mode.
C.Increase the provisioned write capacity to the expected peak.
D.Enable DynamoDB auto scaling with a target utilization of 70%.
AnswerD

Auto scaling automatically adjusts capacity to handle traffic spikes.

Why this answer

DynamoDB auto scaling with a target utilization of 70% allows the table to automatically adjust provisioned write capacity in response to traffic spikes, handling the increased load without manual intervention. This approach is cost-effective as it scales down during low traffic periods, avoiding over-provisioning. The target utilization of 70% provides a buffer to absorb sudden spikes while maintaining performance.

Exam trap

The trap here is that candidates often choose on-demand capacity mode (Option B) thinking it is always the best for unpredictable traffic, but the question emphasizes cost-effectiveness, and auto scaling provides a cheaper alternative for workloads with some predictability or sustained baseline traffic.

How to eliminate wrong answers

Option A is wrong because application-level retries with exponential backoff and a queue only mitigate the symptoms of throttling by retrying failed requests, but do not address the root cause of insufficient write capacity, leading to potential latency and queue buildup. Option B is wrong because switching to on-demand capacity mode can handle spikes automatically but is generally more expensive for predictable or sustained workloads, making it less cost-effective than auto scaling for this scenario. Option C is wrong because increasing provisioned write capacity to the expected peak results in over-provisioning during normal traffic, leading to unnecessary costs, and does not automatically adjust to actual demand.

Practice this question →
89
MCQhard

A company is using Amazon DynamoDB with provisioned capacity and Auto Scaling. They notice that during a marketing campaign, write traffic exceeded the provisioned WCU and caused throttling. Auto Scaling increased the WCU, but the throttling persisted for several minutes. Which additional measure can prevent throttling during such predictable spikes?

A.Switch the table to on-demand capacity mode.
B.Enable DynamoDB Accelerator (DAX) to cache write requests.
C.Increase the maximum provisioned WCU in the Auto Scaling policy.
D.Configure a scheduled scaling action in Application Auto Scaling to increase WCU before the campaign.
AnswerD

Scheduled scaling pre-provisions capacity for known traffic patterns.

Why this answer

Using Application Auto Scaling scheduled scaling allows pre-scaling capacity before the predictable spike, preventing throttling. Option A is incorrect because on-demand mode is for unpredictable traffic and may be costlier; for predictable spikes, scheduled scaling is more cost-effective. Option B is wrong because DAX is a caching layer for reads, not writes.

Option C is wrong because simply increasing the maximum WCU does not pre-scale capacity; it only raises the upper limit that Auto Scaling can reach after throttling occurs.

Practice this question →
90
MCQmedium

A database administrator is troubleshooting a backup failure for an Amazon RDS for SQL Server DB instance. The error message states 'Insufficient storage capacity for backup. Free storage space is 0 GB.' The DB instance has 200 GB allocated storage. What is the most likely cause?

A.The DB instance has insufficient free storage space to perform the backup.
B.The DB instance has reached the maximum number of manual snapshots.
C.The transaction logs are consuming all allocated storage.
D.The backup retention period is set to 0 days, disabling automated backups.
AnswerA

The DB instance has insufficient free storage space to perform the backup. This is correct because RDS uses allocated storage for backup operations. When free space is 0 GB, backups cannot proceed.

Why this answer

RDS requires free storage space to perform backups and manage transaction logs. With 0 GB free, the backup fails. Option B is incorrect because the number of manual snapshots does not affect the storage capacity of the DB instance; manual snapshots are stored separately in Amazon S3.

Option C is incorrect because although transaction logs consume allocated storage, the error specifically indicates insufficient free storage for the backup operation, and the most likely cause is that the instance lacks free storage. Option D is incorrect because setting the backup retention period to 0 days disables automated backups entirely; it does not cause a backup failure due to insufficient storage.

Practice this question →
91
MCQeasy

A developer accidentally deleted a critical table from an Amazon RDS for MySQL DB instance. Automated backups are enabled with a retention period of 7 days. The deletion occurred 3 hours ago. What is the fastest way to restore the deleted table without affecting other tables?

A.Use the RDS Query Editor to run a flashback query that retrieves the deleted data.
B.Restore the DB instance from the latest manual snapshot and extract the table.
C.Restore the table from the automated backup using the AWS Management Console table-level restore feature.
D.Perform a point-in-time restore of the DB instance to a time just before the deletion, then export the table.
AnswerD

Point-in-time restore creates a new DB instance as it was at the specified time, allowing table extraction without affecting the original instance.

Why this answer

Point-in-time recovery (PITR) allows you to restore the entire DB instance to any second within the automated backup retention period (7 days). By restoring to a time just before the deletion, you can then extract the deleted table using mysqldump or SELECT INTO OUTFILE, and import it back into the original instance. This is the fastest method because it leverages existing automated backups without requiring a manual snapshot or waiting for a full restore of a large instance.

Exam trap

The trap here is that candidates confuse the table-level restore feature available in Amazon Aurora (via backtrack or cloning) with standard RDS MySQL, which lacks such granularity and requires a full instance restore for point-in-time recovery.

How to eliminate wrong answers

Option A is wrong because RDS for MySQL does not support flashback queries; that feature is specific to Oracle Database and Amazon Aurora with MySQL compatibility (using undo logs). Option B is wrong because restoring from a manual snapshot would require you to have taken one before the deletion, and the scenario only mentions automated backups, not manual snapshots; even if a manual snapshot existed, restoring the entire instance and then extracting the table is slower than PITR. Option C is wrong because RDS for MySQL does not offer a table-level restore feature from automated backups; that capability exists for Amazon Aurora (using backtrack or cloning) but not for standard RDS MySQL.

Practice this question →
92
MCQeasy

A company is using Amazon DynamoDB with auto scaling enabled. The table's read capacity is set to a minimum of 100 and maximum of 1000 read capacity units (RCUs). The actual consumed read capacity is consistently at 200 RCUs. What should the database specialist do to optimize costs without impacting performance?

A.Increase the minimum read capacity to 500 RCUs.
B.Lower the minimum read capacity to 200 RCUs.
C.Disable auto scaling and set the read capacity to 200 RCUs.
D.Decrease the maximum read capacity to 500 RCUs.
AnswerB

Matches the actual consumption, preventing over-provisioning.

Why this answer

Lowering the minimum read capacity to 200 RCUs matches the actual consumption, preventing over-provisioning when auto scaling scales down. This reduces costs without affecting performance, as the capacity remains sufficient for the consistent workload. Option A is incorrect because increasing the minimum would raise costs unnecessarily.

Option C is incorrect because disabling auto scaling removes the ability to handle traffic spikes automatically. Option D is incorrect because decreasing the maximum could cause throttling during unexpected demand spikes.

Practice this question →
93
Matchingmedium

Match each AWS monitoring tool to its capability for databases.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Collects metrics and logs, sets alarms

Visualizes database performance and identifies bottlenecks

Provides OS-level metrics for RDS instances

Records API calls for auditing and governance

SNS-based alerts for database events like failovers

Why these pairings

Correct matches: CloudWatch monitors metrics and logs, Performance Insights analyzes database load, Enhanced Monitoring provides OS-level metrics, and CloudTrail records API activity. Common confusions include mixing Enhanced Monitoring with CloudWatch and Performance Insights with CloudTrail.

Practice this question →
94
MCQmedium

A DBA runs the IAM policy simulation above. The DBA can describe the DB instance but cannot modify it. What is the most likely cause?

A.The resource ARN in the simulation is incorrect.
B.An IAM policy explicitly denies the rds:ModifyDBInstance action.
C.The DBA's IAM policy does not include an allow for rds:ModifyDBInstance.
D.The DBA is not within the VPC where the DB instance resides.
AnswerB

The evaluation result shows 'explicitDeny' for ModifyDBInstance.

Why this answer

The simulation shows that the DBA can describe the DB instance but cannot modify it. Since the simulation evaluates all applicable IAM policies, an explicit deny for rds:ModifyDBInstance in any attached policy will override any allow and cause the modify action to fail. This is the most likely cause because explicit denies are evaluated first and cannot be overridden by other policies.

Exam trap

The trap here is that candidates often assume a missing allow is the cause, but AWS IAM simulation results clearly distinguish between implicit deny (no policy allows) and explicit deny (a policy specifically denies), and the question's phrasing 'cannot modify' combined with the simulation context points to an explicit deny as the most likely cause.

How to eliminate wrong answers

Option A is wrong because if the resource ARN were incorrect, the simulation would likely fail for all actions, not just the modify action; the DBA can still describe the instance, so the ARN is valid. Option C is wrong because even if the DBA's policy does not include an allow for rds:ModifyDBInstance, the default IAM behavior is to deny implicitly, but the question states the DBA cannot modify, which could be due to an implicit deny; however, the most likely cause given the simulation context is an explicit deny, as implicit denies would also prevent the action but are less specific to the simulation output. Option D is wrong because VPC membership does not affect IAM authorization; IAM policies control API access regardless of network location, and the DBA is already able to describe the instance, proving network connectivity is not the issue.

Practice this question →
95
MCQeasy

A company is running an Amazon RDS for MySQL DB instance. The database performance has degraded over time, and the company suspects that slow queries are the cause. Which AWS service should the company use to identify the slow queries and analyze the database performance?

A.AWS Trusted Advisor
B.Amazon RDS Enhanced Monitoring
C.Amazon CloudWatch Logs
D.Amazon RDS Performance Insights
AnswerD

Amazon RDS Performance Insights provides a dashboard to analyze database performance and identify slow queries.

Why this answer

Performance Insights provides a dashboard to analyze database performance and identify slow queries. AWS Trusted Advisor (A) provides best-practice checks, not query analysis. Amazon RDS Enhanced Monitoring (B) provides OS metrics, not query details.

Amazon CloudWatch Logs (C) is for logs, not query analysis.

Practice this question →
96
Multi-Selecthard

A company is migrating a 5 TB MySQL database to Amazon Aurora MySQL. The migration must have minimal downtime and support ongoing replication. The source database is in a corporate data center with a 500 Mbps internet connection. Which THREE steps should the database specialist take?

Select 3 answers
A.Establish a VPN connection to AWS and use mysqldump.
B.Use AWS Schema Conversion Tool (AWS SCT) to convert the schema.
C.Create an Aurora read replica from the source database.
D.Set up AWS Database Migration Service (AWS DMS) with change data capture (CDC).
E.Use an AWS Snowball Edge device to transfer the initial data load.
AnswersB, D, E

SCT helps with schema conversion if needed.

Why this answer

Options B, D, and E are correct. Option B: The AWS Schema Conversion Tool (AWS SCT) converts the source MySQL schema to be compatible with Aurora MySQL, which is often necessary due to differences in storage engines or features. Option D: AWS Database Migration Service (AWS DMS) with change data capture (CDC) enables ongoing replication and minimizes downtime by continuously syncing changes from the source database to the target Aurora database.

Option E: An AWS Snowball Edge device is used for the initial data load, which transfers the 5 TB database over a fast local connection to AWS, reducing the time required compared to the 500 Mbps internet connection. Option A is incorrect because using a VPN and mysqldump would result in significant downtime and slower data transfer; it does not support ongoing replication. Option C is incorrect because creating an Aurora read replica is not a migration method; read replicas are used for read scaling within a managed Aurora environment, not for migrating data from an external source.

Practice this question →
97
MCQhard

A company is using Amazon DynamoDB with global tables (multi-region) for a gaming application. The application writes to a table in us-east-1 and reads from a table in eu-west-1. The team notices that writes in us-east-1 are taking longer than expected to propagate to eu-west-1. What is the most likely cause?

A.Network latency between the regions is causing replication delay
B.The write capacity in eu-west-1 is insufficient
C.Conflicts are being resolved due to concurrent writes
D.DynamoDB Streams is disabled on the table
AnswerA

Global tables use asynchronous replication; inter-region latency adds propagation time.

Why this answer

DynamoDB global tables use asynchronous replication across regions, and network latency between regions is the primary factor causing delays in propagation. Option B is incorrect because read and write capacity is independent per region; insufficient capacity in eu-west-1 does not affect replication speed from us-east-1. Option C is incorrect while conflict resolution can occur with concurrent writes, it does not inherently cause delays; replication delay is due to network latency.

Option D is incorrect because DynamoDB Streams are required for global tables to function; if they were disabled, replication would not occur at all, not just be delayed.

Practice this question →
98
MCQmedium

Refer to the exhibit. A DBA deploys this CloudFormation stack. After creation, the DBA needs to enable deletion protection for the DB instance. Which modification to the template would accomplish this?

A.Add 'DeletionProtection': true to the Properties.
B.Add 'DeletionPolicy: Retain' to the resource.
C.Add 'PreventRDSDeletion: true' to the Properties.
D.Add 'DeletionProtection': 'Enabled' to the Properties.
AnswerA

Correct property to enable deletion protection.

Why this answer

Adding 'DeletionProtection': true to the Properties of the AWS::RDS::DBInstance resource enables deletion protection for that DB instance. Option B is incorrect because 'DeletionPolicy: Retain' is a CloudFormation resource-level attribute that retains the resource when the stack is deleted, but it does not prevent deletion of the resource outside of CloudFormation. Option C is incorrect because 'PreventRDSDeletion' is not a valid property for RDS.

Option D is incorrect because the correct syntax is 'DeletionProtection': true, not 'Enabled'.

Practice this question →
99
MCQeasy

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 500 GB and has a 4-hour downtime window. Which AWS service should be used to perform the migration with minimal downtime?

A.AWS Database Migration Service (DMS)
B.Oracle Data Pump using Amazon RDS option groups
C.AWS Snowball Edge
D.Amazon S3 Transfer Acceleration
AnswerA

DMS can perform a one-time full load and then ongoing replication to minimize downtime.

Why this answer

AWS Database Migration Service (DMS) is the correct choice because it supports ongoing replication (change data capture) to minimize downtime during the migration. Oracle Data Pump is an export/import tool that requires downtime and cannot perform continuous replication. AWS Snowball Edge is for offline bulk data transfer, not suitable for a 4-hour window with minimal downtime.

Amazon S3 Transfer Acceleration only speeds up uploads to S3, not a database migration tool. Therefore, DMS is the recommended service for minimal downtime migration.

Practice this question →
100
MCQhard

A company uses Amazon DynamoDB to store session data for a web application. The application is experiencing occasional throttling (ProvisionedThroughputExceededException) during peak hours. The DynamoDB table has on-demand capacity mode. Which combination of steps should be taken to resolve the issue?

A.Review the partition key design and consider using a write sharding pattern to distribute traffic evenly.
B.Enable DynamoDB Accelerator (DAX) to cache the frequently accessed items.
C.Enable auto scaling for the table and set minimum and maximum capacity.
D.Switch to provisioned capacity and increase the read and write capacity units.
AnswerA

A hot partition causes throttling even in on-demand mode; distributing the writes across partitions resolves the issue.

Why this answer

Even with on-demand capacity, DynamoDB applies a per-partition throughput limit (3,000 RCU or 1,000 WCU). Throttling occurs when traffic is unevenly distributed across partitions due to a suboptimal partition key. Reviewing the partition key and applying a write sharding pattern (e.g., adding a random suffix) distributes writes evenly, preventing throttling.

Option B (DAX) only reduces read load and does not fix write throttling. Option C (auto scaling) is for provisioned mode, not on-demand. Option D (switching to provisioned) does not resolve uneven partition access; proper key design is still needed.

Practice this question →
101
MCQhard

A database specialist observes the CloudWatch metric for a production RDS for MySQL instance. The max_connections parameter is set to 150. The Sum of DatabaseConnections over 1-minute periods is shown. The application reports intermittent connection failures. What is the most likely cause?

A.The number of connections exceeded the max_connections limit.
B.The average number of connections is below the limit.
C.The DatabaseConnections metric is unreliable.
D.The application is not using connection pooling.
AnswerA

The Sum metric shows up to 200 connections per minute, exceeding the limit.

Why this answer

The Sum metric over 1-minute period represents the total number of connections during that minute. A Sum of 200 indicates that at some point during the minute, connections exceeded the max_connections of 150, causing failures. Option B is wrong because the metric shows Sum, not average.

Option C is wrong because connection pooling reduces connections, not increases. Option D is wrong because the metric clearly shows high connection counts.

Practice this question →
102
Multi-Selecteasy

A company is using Amazon RDS for Oracle with Automated Backups enabled. The database size is 1 TB. The company wants to improve the backup and restore performance. Which TWO actions should be taken? (Choose two.)

Select 2 answers
A.Use Provisioned IOPS storage for the database.
B.Enable backup compression.
C.Use a smaller DB instance class to reduce backup size.
D.Increase the backup retention period to 35 days.
E.Disable Multi-AZ to reduce backup time.
AnswersA, B

Higher IOPS improves backup and restore throughput.

Why this answer

Using Provisioned IOPS storage improves I/O performance, which speeds up backup and restore operations. Option B is correct because enabling backup compression reduces the backup size, leading to faster transfer and restore times. Option C is wrong because using a smaller DB instance class would degrade performance, not improve it.

Option D is wrong because increasing the backup retention period to 35 days does not affect backup performance; it only increases the storage used. Option E is wrong because disabling Multi-AZ would reduce availability and does not improve backup performance; in fact, Multi-AZ can improve backup performance by offloading backups to the standby instance.

Practice this question →
103
MCQmedium

An Amazon RDS for MySQL DB instance has a high number of connections and the application is experiencing slow response times. The database administrator wants to identify the queries that are causing the most load. Which approach is most effective?

A.Enable slow query logs and analyze them in CloudWatch Logs
B.Monitor the DatabaseConnections metric in CloudWatch
C.Enable Amazon RDS Performance Insights and review the top SQL queries
D.Check RDS events for any error messages
AnswerC

Performance Insights provides real-time and historical analysis of database load and top queries.

Why this answer

Performance Insights provides a dashboard to identify top queries by load. Option A is wrong because it shows connections, not query performance. Option B is wrong because CloudWatch logs show slow queries but not in real-time.

Option D is wrong because RDS events show instance events, not query load.

Practice this question →
104
MCQmedium

A company is using Amazon Redshift for data warehousing. They notice that query performance has degraded over time. The database administrator checks the system tables and finds that there is significant skew in data distribution across slices. What action should be taken to improve query performance?

A.Recreate the table with a different distribution style, such as KEY distribution on a column with high cardinality.
B.Increase the number of nodes in the cluster.
C.Run the VACUUM command to reclaim space and update statistics.
D.Modify the sort keys to better match the query patterns.
AnswerA

Changing distribution style can redistribute data evenly across slices, reducing skew.

Why this answer

Data skew causes some slices to have more data, leading to slower queries. Recreating the table with a different distribution style, such as KEY distribution on a column with high cardinality, can distribute data more evenly across slices. Option B is incorrect because adding more nodes does not automatically redistribute existing data; the skewed distribution persists.

Option C is incorrect because running VACUUM reclaims space and updates statistics but does not address data skew. Option D is incorrect because modifying sort keys improves query performance by optimizing data ordering but does not fix uneven data distribution across slices.

Practice this question →
105
MCQmedium

A company is using Amazon RDS for SQL Server with Always On Availability Groups. The primary DB instance is in us-east-1, and the secondary is in us-west-2. The application writes to the primary and reads from the secondary. The secondary instance becomes unreachable due to a network issue. What happens to the primary instance?

A.The primary continues to accept read and write operations.
B.The primary stops accepting write operations.
C.The primary automatically fails over to the secondary.
D.The primary becomes read-only until the secondary is restored.
AnswerA

The primary continues to accept read and write operations normally because the failure of the secondary does not impact primary operations in an Always On Availability Group setup.

Why this answer

When the secondary DB instance (read replica) becomes unreachable, the primary continues to accept read and write operations normally. The secondary is an asynchronous replica, so its failure does not affect the primary. Option B is wrong because the primary does not stop accepting writes; write operations continue.

Option C is wrong because failover is not automatic for asynchronous replicas; manual intervention would be required to promote the secondary. Option D is wrong because the primary remains fully available and does not become read-only.

Practice this question →
106
MCQmedium

A company is running an Amazon RDS for SQL Server DB instance. The company needs to capture changes to a specific table and replicate them to an Amazon S3 bucket in near real time. Which AWS service should be used to achieve this?

A.AWS Glue
B.AWS Database Migration Service (AWS DMS) with ongoing replication
C.Amazon RDS for SQL Server native replication
D.Amazon Kinesis Data Streams
AnswerB

DMS supports change data capture to replicate changes to S3 nearly in real time.

Why this answer

AWS DMS with ongoing replication (change data capture) is the correct choice because it can continuously capture changes from the RDS for SQL Server source and replicate them to an Amazon S3 bucket in near real time. Option A (AWS Glue) is incorrect because AWS Glue is a batch ETL service, not designed for real-time change data capture. Option C (Amazon RDS for SQL Server native replication) is incorrect because native replication features like Always On Availability Groups or log shipping replicate data to another SQL Server instance, not directly to S3.

Option D (Amazon Kinesis Data Streams) is incorrect because while it can ingest streaming data, it would require additional custom application logic to capture changes from RDS and push to Kinesis, making it less straightforward than DMS for this use case.

Practice this question →
107
MCQhard

A database specialist created the above IAM policy for a user. When the user attempts to delete an item from the Orders table, what happens?

A.The user cannot delete items because the Deny statement takes precedence.
B.The user cannot delete items because the policy does not include a condition.
C.The user can delete items because the Allow statement grants permission.
D.The user can delete items only if they have another policy that allows it.
AnswerA

Explicit Deny overrides any Allow.

Why this answer

In IAM, an explicit Deny overrides any Allow. Even though there is an Allow statement that grants DeleteItem permission, the explicit Deny for DeleteItem takes precedence, so the user cannot delete items. Option B is incorrect because the presence of a condition is irrelevant; the Deny is unconditional.

Option C is incorrect because the Allow is overridden by the Deny. Option D is incorrect because the Deny in this policy explicitly blocks deletion regardless of other policies.

Practice this question →
108
MCQmedium

A company uses Amazon DynamoDB with provisioned capacity for a gaming application. During a new game launch, write traffic spikes to 2x the provisioned write capacity for 30 minutes. Some writes are throttled. The company wants to handle these predictable spikes without manual intervention. What is the MOST cost-effective solution?

A.Increase the provisioned write capacity to 2x the baseline permanently.
B.Change the table to on-demand capacity mode.
C.Enable DynamoDB auto scaling with a target utilization of 70%.
D.Use Amazon SQS to buffer writes and process them later.
AnswerC

Auto scaling dynamically adjusts capacity to match traffic, cost-effective for predictable spikes.

Why this answer

DynamoDB auto scaling automatically adjusts provisioned capacity based on actual usage, handling predictable spikes without manual intervention while minimizing cost by scaling down when demand drops. Option A is wrong because permanently doubling capacity leads to wasted resources and higher costs. Option B is wrong because on-demand mode can be more expensive for predictable workloads with consistent baseline traffic.

Option D is wrong because SQS buffers writes but does not directly address DynamoDB write throttling; it adds latency and complexity without solving the capacity issue.

Practice this question →
109
MCQmedium

A company runs an Amazon RDS for MySQL Multi-AZ DB instance. The application experiences intermittent read latency spikes. The DB instance type is db.r5.large with 500 GB of General Purpose SSD (gp2) storage. The spike occurs during peak hours when read activity is high. Which action would most effectively reduce read latency?

A.Change the storage type to Provisioned IOPS (io1).
B.Enable Multi-AZ with a standby replica.
C.Increase the allocated storage to 1 TB to improve IOPS.
D.Create an Amazon RDS read replica and direct read traffic to it.
AnswerD

Creating an RDS read replica offloads read traffic from the primary instance, reducing read contention and latency.

Why this answer

Adding an RDS read replica offloads read traffic from the primary DB instance, reducing read contention and latency. Option A is incorrect because changing to io1 improves I/O performance but does not address read contention from high read load on the primary. Option B is incorrect because Multi-AZ provides high availability but the standby replica does not serve read traffic.

Option C is incorrect because increasing storage increases baseline IOPS but does not offload read operations.

Practice this question →
110
MCQmedium

A company is running Amazon Redshift for data warehousing. The data warehouse is used for complex analytical queries. Recently, query performance has degraded due to data skew. Which steps should be taken to address this issue?

A.Apply sort keys on the skewed columns.
B.Apply compression on the skewed columns.
C.Re-evaluate the distribution style of the tables.
D.Increase the number of nodes in the cluster.
AnswerC

Choosing the right distribution style can evenly distribute data across nodes.

Why this answer

Data skew in Amazon Redshift occurs when data is unevenly distributed across slices, causing some nodes to process more data than others and degrading query performance. Re-evaluating the distribution style (e.g., switching from AUTO or EVEN to KEY on a column with high cardinality and even distribution, or using ALL for small dimension tables) redistributes the data evenly, mitigating skew and improving parallel query execution.

Exam trap

The trap here is that candidates confuse data skew (uneven distribution across slices) with data sorting or compression, leading them to incorrectly choose sort keys or compression as solutions, whereas only distribution style changes directly address the underlying imbalance.

How to eliminate wrong answers

Option A is wrong because sort keys determine the physical order of data on disk within each slice, which improves query performance for range-restricted or sorted data but does not address data distribution across slices or nodes. Option B is wrong because compression reduces storage footprint and I/O by encoding column data, but it does not affect how rows are distributed across slices or nodes, so it cannot fix data skew. Option D is wrong because adding nodes increases cluster capacity and parallelism but does not resolve the root cause of skew; if data is already skewed, adding nodes may even worsen the imbalance as new nodes receive disproportionately small amounts of data.

Practice this question →
111
MCQmedium

A company is using Amazon RDS for MySQL with a cross-Region read replica to support disaster recovery. The primary DB instance is in us-west-2, and the read replica is in us-east-1. The read replica is used for reporting and also serves as a failover target. The operations team notices that the read replica lag is consistently above 10 seconds during peak hours. What should the team do to reduce replica lag?

A.Increase the DB instance class of the read replica.
B.Enable Multi-AZ on the primary DB instance.
C.Increase the backup retention period for the primary DB instance.
D.Disable binary logging (binlog) on the primary DB instance.
AnswerA

A larger instance class can process replication events faster.

Why this answer

Increasing the DB instance class of the read replica provides more CPU and memory resources, which allows the replica to apply changes from the binary log more quickly. Cross-Region replication lag is often caused by the replica being unable to keep up with the write rate on the primary, so scaling up the replica directly addresses the bottleneck in applying binlog events.

Exam trap

The trap here is that candidates may think enabling Multi-AZ on the primary will reduce replica lag, but Multi-AZ only provides synchronous replication within the same Region and does not affect cross-Region asynchronous replication performance.

How to eliminate wrong answers

Option B is wrong because enabling Multi-AZ on the primary provides high availability and automatic failover within the same Region, but does not affect the replication throughput to a cross-Region read replica. Option C is wrong because increasing the backup retention period only affects how long automated backups are retained; it has no impact on replication lag. Option D is wrong because disabling binary logging on the primary would stop all replication, including the cross-Region read replica, and is not a valid method to reduce lag.

Practice this question →
112
Multi-Selectmedium

Which TWO of the following are valid strategies for reducing costs for an Amazon DynamoDB table with on-demand capacity mode? (Choose TWO.)

Select 2 answers
A.Implement DynamoDB Accelerator (DAX) to cache reads.
B.Use Amazon DynamoDB TTL to automatically delete expired data.
C.Enable DynamoDB global tables to distribute traffic.
D.Use DynamoDB Streams to process updates asynchronously.
E.Switch to provisioned capacity mode with auto scaling.
AnswersA, E

DAX reduces the number of read requests to DynamoDB, lowering read capacity consumption.

Why this answer

Implementing DAX reduces the number of read requests to the underlying DynamoDB table by serving cached results, which lowers read capacity consumption and thus reduces costs for on-demand tables. Switching to provisioned capacity with auto scaling allows you to pay for a baseline of read/write capacity units rather than per-request pricing, which is more cost-effective for predictable or steady workloads.

Exam trap

The trap here is that candidates often think TTL or Streams reduce operational costs, but they only affect storage or enable event-driven processing, not the per-request billing that drives on-demand costs.

Practice this question →
113
MCQeasy

A developer accidentally deleted a table in an Amazon RDS for PostgreSQL DB instance. The instance has automated backups enabled with a retention period of 7 days. The deletion occurred 2 hours ago. What is the quickest way to recover the table?

A.Perform a point-in-time recovery to a time just before the deletion.
B.Use PostgreSQL pg_dump to connect and dump the table from the current instance.
C.Download the automated backup file from S3 and restore the table.
D.Restore the DB instance from the latest automated snapshot.
AnswerA

Point-in-time recovery uses transaction logs to restore to any time within the retention period.

Why this answer

Point-in-time recovery (PITR) allows restoring the RDS for PostgreSQL DB instance to any time within the 7-day backup retention period. Since the deletion occurred 2 hours ago, you can restore the instance to a time just before the deletion, then connect to the restored instance and extract the deleted table using pg_dump or similar tools. This is the quickest method because it does not require restoring a full snapshot and then applying transaction logs manually.

Option B is incorrect because pg_dump cannot export a table that has already been deleted from the current instance. Option C is incorrect because automated backup files are not directly accessible as downloadable files from S3; they are used internally by RDS for PITR. Option D is incorrect because restoring from the latest automated snapshot would not recover the table if the snapshot was taken after the deletion, or if the snapshot includes the deletion state.

Practice this question →
114
MCQmedium

A company is running an Amazon Redshift cluster with a single node. They need to improve query performance for large analytical workloads. Which action would provide the most immediate performance improvement?

A.Distribute the data across all slices.
B.Apply compression encodings to all columns.
C.Increase the number of nodes in the cluster.
D.Run the VACUUM command to reclaim space.
AnswerC

Adding nodes increases processing power and memory.

Why this answer

Adding more nodes to the cluster distributes the workload and improves parallelism. Option A is wrong because using a single node, distributing data across slices is limited. Option B is wrong because compression is already used typically.

Option D is wrong because VACUUM reclaims space but does not significantly improve performance for large workloads.

Practice this question →
115
MCQmedium

A company is running an Amazon RDS for MySQL DB instance. The DB instance is experiencing high CPU utilization due to a sudden increase in read traffic. The company needs to reduce the load on the primary DB instance with minimal downtime. Which solution should be used?

A.Modify the DB instance to a larger instance class.
B.Use an Amazon ElastiCache cluster to cache frequent queries.
C.Enable Multi-AZ on the DB instance.
D.Create an RDS read replica and redirect read queries to it.
AnswerD

Read replicas offload read traffic and can be created without downtime.

Why this answer

Creating an Amazon RDS read replica allows you to offload read traffic from the primary DB instance to one or more read replicas, which can handle SELECT queries. This reduces CPU utilization on the primary instance with minimal downtime, as read replicas are asynchronous replicas that can be promoted to a primary if needed. Redirecting read queries to the read replica effectively distributes the load without requiring a change to the primary instance's configuration.

Exam trap

The trap here is that candidates often confuse Multi-AZ (which provides high availability but does not offload read traffic) with read replicas (which are designed to offload read traffic), leading them to select Option C incorrectly.

How to eliminate wrong answers

Option A is wrong because modifying the DB instance to a larger instance class requires a reboot, causing downtime, and it addresses the symptom (high CPU) by scaling vertically rather than distributing the read load, which is less cost-effective for read-heavy workloads. Option B is wrong because while Amazon ElastiCache can cache frequent queries and reduce read load, it requires application changes to implement caching logic and does not directly offload existing read traffic from the RDS instance; it is a complementary solution, not a direct replacement for read replicas in this scenario. Option C is wrong because enabling Multi-AZ provides high availability by creating a standby replica in another Availability Zone, but the standby cannot serve read traffic; it only handles failover, so it does not reduce CPU utilization on the primary instance.

Practice this question →
116
MCQeasy

A developer accidentally deleted a production RDS for PostgreSQL DB instance. The company has automated backups enabled with a retention period of 7 days. What is the fastest way to restore the database to the state just before the deletion?

A.Recover the instance from the Amazon RDS Recycle Bin.
B.Restore from the latest automated snapshot that was taken before deletion.
C.Use the AWS DMS to migrate the data from the deleted instance to a new one.
D.Create a new DB instance and use point-in-time recovery to the time just before deletion.
AnswerD

Point-in-time recovery can be used to restore to any time within the retention window, even for deleted instances.

Why this answer

When automated backups are enabled, you can perform point-in-time recovery (PITR) to restore the database to any point within the retention period, including just before deletion. RDS retains the automated backups and transaction logs for the retention period even after the instance is deleted. Option A is incorrect because Amazon RDS does not use a Recycle Bin for DB instances.

Option B is incorrect because restoring from the latest automated snapshot would not recover transactions after that snapshot; you need PITR to get the state just before deletion. Option C is incorrect because AWS DMS is for migrating data between databases, not for recovering a deleted instance.

Practice this question →
117
MCQhard

A company runs an Amazon Aurora MySQL database. The database experiences a sudden spike in connections and then becomes unresponsive. The DB instance has a db.r5.large class with 8 GB memory. The maximum connections parameter is set to the default. Which is the most likely cause of the unresponsiveness?

A.The DB instance's EBS burst balance dropped to zero
B.The storage volume ran out of allocated space
C.The number of connections exceeded the max_connections limit
D.A read replica had high replication lag
AnswerC

Exceeding max_connections can cause the database to reject connections and become unresponsive.

Why this answer

The default max_connections for Aurora MySQL is based on memory, and with 8 GB, it is about 800. A spike exceeding that can exhaust resources. Option A is wrong because storage auto-scaling is seamless.

Option B is wrong because burst balance applies to gp2 volumes, but Aurora uses cluster storage. Option D is wrong because replica lag would affect reads, not make the instance unresponsive.

Practice this question →
118
Multi-Selectmedium

Which THREE actions can be performed using the AWS CLI for Amazon Aurora? (Choose three.)

Select 3 answers
A.Create a DB cluster from a snapshot using 'aws rds restore-db-cluster-from-snapshot'
B.Fail over an Aurora DB cluster using 'aws rds failover-db-cluster'
C.Modify the DB cluster parameter group using 'aws rds modify-db-cluster-parameter-group'
D.Change the storage type of an Aurora cluster using 'aws rds modify-db-instance'
E.Enable auto-scaling for Aurora Replicas using 'aws rds enable-autoscaling'
AnswersA, B, C

Valid CLI command.

Why this answer

All three are valid AWS CLI actions for Aurora. RestoreDBClusterFromS3 is for MySQL, but it exists.

Practice this question →
119
Multi-Selectmedium

A company is migrating a large on-premises Oracle database to Amazon RDS for Oracle. The database is 5 TB in size, and the migration must be completed within a week. The company has a dedicated 10 Gbps AWS Direct Connect connection. Which TWO AWS services should the company use to minimize downtime during the migration?

Select 2 answers
A.AWS Schema Conversion Tool (AWS SCT)
B.AWS DataSync
C.AWS Snowball
D.AWS Database Migration Service (AWS DMS)
E.Amazon RDS for Oracle
AnswersA, D

SCT can convert the Oracle schema to Amazon RDS for Oracle compatible schema, if needed.

Why this answer

AWS DMS can handle ongoing replication to minimize downtime. AWS SCT can convert the schema if needed, and AWS DMS can migrate data. AWS Snowball is for offline data transfer, which may not be needed with Direct Connect.

RDS is the target, not a migration service. AWS DataSync is for file data, not databases. The correct options are A and D.

Practice this question →
120
MCQmedium

A company runs a production Amazon RDS for PostgreSQL database. The database specialist needs to perform a major version upgrade with minimal downtime. Which strategy should the specialist use?

A.Create a read replica with the new major version, promote it to primary, and update the application connection string.
B.Take a snapshot of the database, launch a new instance from the snapshot, and upgrade it.
C.Modify the DB instance to the new version directly using the AWS Management Console.
D.Schedule a maintenance window during off-peak hours and apply the upgrade.
AnswerA

This minimizes downtime by using a replica.

Why this answer

Creating a read replica with the new major version, promoting it to primary, and updating the application connection string minimizes downtime by allowing the replica to catch up with the source database before promotion. This approach avoids the prolonged unavailability associated with in-place upgrades, as the promotion process typically takes only a few seconds, and the application can be switched over with a simple connection string update.

Exam trap

The trap here is that candidates often assume in-place upgrades via maintenance windows or direct modification are sufficient for minimal downtime, but they fail to recognize that major version upgrades require significant offline time, whereas the read replica promotion strategy effectively decouples the upgrade process from the production workload.

How to eliminate wrong answers

Option B is wrong because taking a snapshot and launching a new instance from it requires restoring the snapshot, which can take hours for large databases, and then upgrading the new instance, resulting in significant downtime. Option C is wrong because modifying the DB instance directly to a new major version using the AWS Management Console triggers an in-place upgrade that requires the database to be offline for the duration of the upgrade process, which can be lengthy and cause unacceptable downtime. Option D is wrong because scheduling a maintenance window during off-peak hours still performs an in-place major version upgrade, which requires the database to be offline and does not reduce downtime compared to the read replica promotion method.

Practice this question →
121
MCQhard

A company is running an Amazon DynamoDB table with global secondary indexes (GSIs). Write activity increases, and the 'ThrottledWriteEvents' metric for a GSI spikes. The table itself is not throttled. What is the most likely cause?

A.The index is too large for the base table.
B.The GSI's partition key is not sufficiently distributed.
C.The table's write capacity is set too low.
D.The GSI's read capacity is set too low.
AnswerB

A skewed partition key causes hot partitions on the GSI, leading to write throttling.

Why this answer

Write sharding on the GSI partition key can cause hot partitions. Option A is wrong because read capacity on the GSI does not affect writes. Option C is wrong because write capacity on the table is separate from GSI.

Option D is wrong because the issue is about throttling on GSI, not table.

Practice this question →
122
Multi-Selecteasy

Which TWO of the following are benefits of using Amazon RDS Proxy? (Choose TWO.)

Select 2 answers
A.Reduces the number of database connections by pooling them.
B.Automatically encrypts all traffic between the application and the database.
C.Improves application scalability by handling connection surges.
D.Provides built-in read/write splitting for read replicas.
E.Reduces storage costs by compressing data in transit.
AnswersA, C

Connection pooling reduces the number of open connections.

Why this answer

Amazon RDS Proxy acts as a connection broker between your application and the database, maintaining a pool of established connections. When the application opens a new connection, RDS Proxy reuses an idle connection from the pool, which reduces the total number of database connections and prevents the database from being overwhelmed. This pooling mechanism directly addresses the issue of connection exhaustion, especially in serverless or highly concurrent environments.

Exam trap

The trap here is that candidates often confuse RDS Proxy's connection pooling with other features like encryption, read/write splitting, or compression, which are separate capabilities not provided by the proxy itself.

Practice this question →
123
MCQmedium

A company has an Amazon DynamoDB table with on-demand capacity mode. The table experiences occasional spikes in traffic. During these spikes, some requests receive ProvisionedThroughputExceededException errors. The company wants to minimize these errors without changing the application. Which solution should be used?

A.Switch the table to provisioned capacity mode and enable auto scaling.
B.Enable DynamoDB Accelerator (DAX) for caching.
C.Increase the read and write capacity units manually.
D.Use DynamoDB global tables to distribute the load across multiple regions.
AnswerA

Provisioned capacity with auto scaling can handle burst traffic more effectively than on-demand in some cases.

Why this answer

DynamoDB on-demand mode automatically scales based on traffic volume, but it has a per-partition throughput limit. During sudden traffic spikes, this limit can be exceeded, causing ProvisionedThroughputExceededException errors. Switching to provisioned capacity mode with auto scaling allows you to set a higher baseline capacity and automatically scale up to handle bursts, reducing the likelihood of hitting per-partition limits.

Option B (DAX) only helps with read caching, not write throughput. Option C (manually increasing capacity) is not applicable in on-demand mode and would not auto-scale. Option D (global tables) replicates data across regions for disaster recovery, not for increasing throughput in a single region.

Practice this question →
124
MCQmedium

A company is running an Amazon RDS for MySQL Multi-AZ DB instance. They notice increased latency during peak hours. The DB instance type is db.r5.large, and the storage is General Purpose SSD (gp2) with 500 GB. The application is read-heavy with frequent SELECT queries. Which action would most likely resolve the latency issue without changing the DB instance class?

A.Enable Performance Insights and analyze queries.
B.Create an Amazon RDS read replica in the same region.
C.Enable Multi-AZ on the existing DB instance.
D.Increase the allocated storage to 1,000 GB.
AnswerB

Adding a read replica offloads read traffic from the primary instance, reducing latency.

Why this answer

Adding a read replica offloads read traffic from the primary instance, reducing latency. Option A is wrong because enabling Performance Insights is for monitoring and analysis, not directly improving performance. Option C is wrong because Multi-AZ is for high availability, not read scaling.

Option D is wrong because increasing storage size may improve IOPS but does not directly address the read load.

Practice this question →
125
Multi-Selectmedium

A company is using Amazon DynamoDB for a high-traffic web application. The table has on-demand capacity mode. During a marketing event, the application experiences throttling. Which TWO actions should the database specialist take to prevent throttling in future events?

Select 2 answers
A.Increase the read capacity units of the table.
B.Switch the table to provisioned capacity mode and increase write capacity units.
C.Pre-create a DynamoDB global table to distribute write traffic.
D.Decrease the write capacity units to reduce throttling.
E.Implement DynamoDB Accelerator (DAX) to offload read traffic.
AnswersC, E

Global tables spread writes across regions, reducing throttling.

Why this answer

Options C and E are correct. Option C: Pre-creating a DynamoDB global table can distribute write traffic across multiple regions, reducing the load on any single table and helping to prevent throttling during traffic spikes. Option E: Implementing DynamoDB Accelerator (DAX) offloads read traffic from the main table, reducing read capacity consumption and potential throttling.

Option A is incorrect because on-demand mode does not use read capacity units; it scales automatically. Option B is incorrect because switching to provisioned capacity requires capacity planning and does not automatically prevent throttling. Option D is incorrect because decreasing write capacity would likely worsen throttling.

Practice this question →
126
Multi-Selecthard

A company is migrating an on-premises Oracle database to Amazon Aurora PostgreSQL. The migration must have minimal downtime and support ongoing replication. Which THREE services should the company use? (Choose 3.)

Select 3 answers
A.AWS Snowball Edge
B.Amazon Aurora PostgreSQL
C.AWS DataSync
D.AWS Database Migration Service (AWS DMS)
E.AWS Schema Conversion Tool (AWS SCT)
AnswersB, D, E

Target database for migration.

Why this answer

Amazon Aurora PostgreSQL (Option B) is the target database for the migration. The company is migrating from Oracle to Aurora PostgreSQL, so Aurora PostgreSQL is the required destination. AWS DMS (Option D) handles the ongoing replication with minimal downtime by using change data capture (CDC) to continuously replicate changes from the source Oracle database to the target Aurora PostgreSQL.

AWS SCT (Option E) is necessary to convert the Oracle database schema and any stored procedures, functions, and other code objects to be compatible with PostgreSQL, as the two databases have different SQL dialects and data types.

Exam trap

The trap here is that candidates often confuse AWS DataSync or Snowball Edge as viable options for database migration with ongoing replication, but these services are for file or bulk data transfer, not for continuous change data capture or schema conversion.

Practice this question →
127
MCQeasy

Refer to the exhibit. A DBA is checking the backup configuration of an RDS MySQL instance. The current time is 2023-03-15T06:00:00Z. What is the most recent point to which the database can be restored?

A.2023-03-15T03:00:00Z
B.2023-03-15T05:30:00Z
C.2023-03-15T04:30:00Z
D.2023-03-15T06:00:00Z
AnswerC

This is the latest restorable time shown.

Why this answer

The latest restorable time is 2023-03-15T04:30:00Z, which is within the backup window. Option A is incorrect because 2023-03-15T03:00:00Z is earlier than the latest restorable time, so it is not the most recent point. Option B is incorrect because 2023-03-15T05:30:00Z is later than the latest restorable time, so it is not within the backup window.

Option D is incorrect because although the backup window ends at 06:00, the latest restorable time is 04:30, not 06:00.

Practice this question →
128
MCQhard

A database administrator sees the above error logs in CloudWatch for an Amazon RDS for PostgreSQL DB instance. The application team confirms that the password for 'app_user' is correct. What is the most likely cause of the authentication failures?

A.The password has expired for 'app_user'.
B.The user 'app_user' does not have the LOGIN privilege.
C.The host '10.0.1.50' is not listed in the pg_hba.conf file.
D.The database is in read-only mode.
AnswerC

RDS for PostgreSQL uses pg_hba.conf entries to allow client connections; if the host is not allowed, authentication fails despite correct password.

Why this answer

The errors show authentication failures from a specific host. If the password is correct, the most likely cause is that the host is not allowed by the pg_hba.conf configuration. RDS for PostgreSQL uses DB parameter groups to control pg_hba.conf rules; the rds.force_ssl parameter or the pg_hba.conf entries may not include that host.

Practice this question →
129
Multi-Selecthard

Which TWO of the following are valid actions to take when an Amazon Redshift query is taking longer than expected due to disk-based operations?

Select 2 answers
A.Use column compression to reduce the amount of data scanned.
B.Increase the number of workload management (WLM) query queues.
C.Redistribute data across nodes using a distribution style that minimizes data movement.
D.Change the sort keys to match the query's ORDER BY clause.
E.Increase the number of nodes in the cluster to provide more memory and CPU.
AnswersC, E

Correct: Redistributing data with a distribution style that minimizes data movement reduces the need for disk-based operations.

Why this answer

(redistributing data with appropriate distribution style) helps minimize data movement across nodes, reducing disk-based operations like spills. Option E (increasing nodes) adds more memory and CPU, enabling more in-memory processing and reducing disk spills. Option A is incorrect because column compression reduces storage but does not prevent disk-based operations.

Option B is incorrect because WLM queues manage concurrency, not query speed. Option D is incorrect because sort keys affect order-based optimizations but not disk spills.

Practice this question →
130
MCQeasy

A company wants to ensure that their Amazon RDS for PostgreSQL database is automatically backed up every day and retains backups for 30 days. Which configuration should they use?

A.Set the backup retention period to 0 to disable automated backups and use manual snapshots.
B.Create a manual snapshot daily using AWS Backup.
C.Enable Multi-AZ deployment for automatic failover.
D.Enable automated backups with a retention period of 30 days.
AnswerD

Automated backups are configurable up to 35 days.

Why this answer

Automated backups are enabled by default with a retention period of 1-35 days. Setting backup retention period to 30 days meets the requirement.

Practice this question →
131
Multi-Selecteasy

Which TWO AWS services can be used to monitor and set alarms on Amazon RDS database performance metrics? (Choose two.)

Select 2 answers
A.Amazon RDS Performance Insights
B.AWS Trusted Advisor
C.Amazon RDS Enhanced Monitoring
D.Amazon CloudWatch
E.AWS CloudTrail
AnswersC, D

Enhanced Monitoring provides OS-level metrics, which are sent to CloudWatch.

Why this answer

CloudWatch monitors metrics and can set alarms; Enhanced Monitoring provides OS-level metrics. RDS Performance Insights is for performance analysis, not alarms.

Practice this question →
132
MCQhard

Refer to the exhibit. An Amazon RDS for Oracle instance is experiencing ORA-00257 errors. The DBA has already increased the archive log retention setting. What is the most efficient next step to resolve the issue without manual intervention?

A.Configure archiving to Amazon S3 to offload logs.
B.Reboot the DB instance to clear the recovery area.
C.Modify the DB instance to increase the allocated storage.
D.Manually delete old archive logs from the recovery area using RMAN.
AnswerC

Increasing storage automatically increases the recovery area size.

Why this answer

The ORA-00257 error indicates the flash recovery area is full. In Amazon RDS for Oracle, the flash recovery area size is tied to the allocated storage (default is 30% of allocated storage). Increasing allocated storage automatically expands the recovery area, resolving the issue without manual intervention.

Option A is incorrect because Amazon RDS for Oracle does not support archiving redo logs directly to Amazon S3 as a built-in feature. Option B is incorrect because rebooting the DB instance does not free space in the recovery area; it only restarts the database. Option D is incorrect because manually deleting archive logs using RMAN requires manual intervention, which is not the most efficient automated solution.

Practice this question →
133
Multi-Selectmedium

Which TWO methods can be used to encrypt an existing unencrypted Amazon RDS for Oracle DB instance? (Choose 2.)

Select 2 answers
A.Use the AWS Management Console to toggle encryption on the DB instance.
B.Create a snapshot of the DB instance, copy the snapshot with encryption enabled, and restore the DB instance from the encrypted snapshot.
C.Modify the DB instance and enable encryption in the configuration.
D.Use AWS Database Migration Service (DMS) to migrate data to a new encrypted DB instance.
E.Create a read replica with encryption enabled.
AnswersB, D

This is a supported method to encrypt an existing instance.

Why this answer

You can encrypt an existing unencrypted RDS for Oracle DB instance by taking a snapshot, copying it with encryption enabled, and then restoring the instance from the encrypted snapshot. This process creates a new encrypted DB instance from the snapshot copy, effectively encrypting the data at rest using AWS KMS. Option D is correct because AWS DMS can migrate data from an unencrypted source DB instance to a new target DB instance that has encryption enabled, allowing you to move the data while applying encryption during the migration process.

Exam trap

The trap here is that candidates often think encryption can be enabled via a simple modification or toggle in the console, but AWS requires a snapshot copy or migration because encryption is a volume-level attribute that cannot be changed on a running instance.

Practice this question →
134
Drag & Dropmedium

Arrange the steps to perform a point-in-time recovery (PITR) for an Amazon RDS for MySQL DB instance in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

PITR restores the database to a specific time within the backup retention window by selecting the restore option and specifying the time.

Practice this question →
135
MCQmedium

A database specialist is managing an Amazon RDS for Oracle DB instance. The instance has a large amount of data and the specialist needs to migrate it to a new instance in a different AWS Region. Which method would minimize downtime and be the most efficient?

A.Use AWS Database Migration Service (DMS) with ongoing replication to migrate to the target instance.
B.Export the database to Amazon S3 using Oracle Data Pump, then import into the new instance.
C.Create a cross-region read replica and promote it.
D.Take a full backup using Oracle RMAN, copy the backup files to the target region, and restore.
AnswerA

DMS supports minimal downtime with ongoing replication.

Why this answer

AWS DMS with ongoing replication (change data capture) allows you to perform a full load of the existing Oracle database to the target instance in the new region, and then continuously replicate changes from the source until you cut over. This minimizes downtime because you can keep the source database fully operational during the migration and only stop it for a brief period during the final switchover. It is the most efficient method for cross-region migrations because it handles schema conversion, data validation, and ongoing synchronization automatically.

Exam trap

The trap here is that candidates often assume cross-region read replicas are available for all RDS engines, but Amazon RDS for Oracle does not support cross-region read replicas, making Option C an invalid choice despite its appeal for minimizing downtime.

How to eliminate wrong answers

Option B is wrong because exporting to Amazon S3 using Oracle Data Pump requires the source database to be taken offline or placed in read-only mode during the export, and the import process also incurs significant downtime; it does not support ongoing replication, so the total downtime is much longer than with DMS. Option C is wrong because Amazon RDS for Oracle does not support cross-region read replicas; read replicas are only available within the same region for Oracle, and promoting a replica would not work across regions. Option D is wrong because taking a full RMAN backup and copying it to the target region requires the source database to be in backup mode or incur a brief outage, and the restore process is time-consuming; it also does not provide ongoing replication, so you would lose any changes made after the backup was taken, leading to data loss or extended downtime to capture incremental changes.

Practice this question →
136
Multi-Selecthard

Which THREE factors should be considered when selecting the backup strategy for an Amazon RDS for PostgreSQL DB instance? (Choose 3.)

Select 3 answers
A.The backup retention period
B.The Recovery Point Objective (RPO) requirement
C.The impact of the backup window on database performance
D.The need for Multi-AZ deployment
E.The encryption at rest requirement
AnswersA, B, C

Retention period determines how long backups are stored, affecting cost and compliance.

Why this answer

The backup retention period directly determines how far back you can perform a point-in-time recovery (PITR) for an RDS for PostgreSQL instance. Amazon RDS stores automated backups and transaction logs for the specified retention period (1 to 35 days), and this period must be aligned with your compliance and operational requirements. Choosing an appropriate retention period is a fundamental factor in defining the backup strategy.

Exam trap

AWS often tests the misconception that Multi-AZ deployment is part of the backup strategy, but in reality it is a high-availability feature that does not affect backup retention, RPO, or backup window performance.

Practice this question →
137
Multi-Selectmedium

A company is using Amazon DynamoDB for a gaming application. The application stores player scores in a table with a partition key of player_id and a sort key of timestamp. The company wants to query the top 10 scores for a given player efficiently. Which TWO steps should the company take to optimize this query?

Select 2 answers
A.Use the Query API with the LSI and scan index forward set to false to get the top scores.
B.Create a local secondary index (LSI) on the score attribute with the same partition key.
C.Use a Scan operation with a filter expression to retrieve the top scores.
D.Create a local secondary index on the timestamp attribute.
E.Create a global secondary index (GSI) on the score attribute.
AnswersA, B

Querying the LSI with ScanIndexForward=false returns items in descending order, efficiently retrieving the top scores.

Why this answer

The correct answers are A and B. A local secondary index (LSI) on the score attribute (option B) allows efficient sorting of items within the same partition key (player_id) by score. Using the Query API on this LSI with scanIndexForward set to false (option A) retrieves the top scores in descending order.

Option C (Scan with filter) is inefficient as it reads the entire table. Option D (LSI on timestamp) is redundant because the base table already has timestamp as sort key and does not sort by score. Option E (GSI on score) would not be efficient for per-player queries because you would need to query by score globally, not per player.

Practice this question →
138
MCQhard

A company is using Amazon DynamoDB with Auto Scaling enabled. During a flash sale, write traffic spikes and the application experiences ProvisionedThroughputExceededException errors. The DynamoDB table has provisioned write capacity of 1000 WCU and Auto Scaling is set to scale between 1000 and 10000 WCU. What is the most likely cause of the throttling?

A.Auto Scaling cannot react quickly enough to sudden traffic spikes.
B.The DynamoDB table has insufficient partitions to handle the traffic.
C.The table's burst capacity is exhausted and Auto Scaling has not yet increased capacity.
D.The Auto Scaling policy has a maximum WCU limit that is too low.
AnswerA

Auto Scaling adjusts capacity based on CloudWatch metrics with a delay.

Why this answer

DynamoDB Auto Scaling uses a target tracking policy that adjusts capacity based on consumed WCU over a period (typically 5 minutes). During sudden traffic spikes, the consumption increases rapidly, but Auto Scaling cannot react immediately; there is a lag before the scaling policy triggers and additional capacity is provisioned. This results in ProvisionedThroughputExceededException errors until the new capacity takes effect.

Option B is incorrect because throttling is due to insufficient write capacity, not partitioning. Option C is incorrect because burst capacity provides a short-term buffer but is quickly exhausted during sustained spikes. Option D is incorrect because the maximum WCU of 10000 is higher than the spike demand, so the limit is not the issue—the timing of the scaling action is the problem.

Practice this question →
139
Multi-Selecthard

A company is migrating an on-premises MongoDB database to Amazon DocumentDB. The migration must have minimal downtime. Which THREE steps should be taken? (Choose three.)

Select 3 answers
A.Use AWS Snowball Edge to transfer initial data.
B.Create an Amazon DocumentDB cluster as the target.
C.Use AWS DMS to perform a full load and then ongoing replication.
D.Shard the DocumentDB cluster across multiple regions.
E.Configure the source MongoDB to send oplog events to DMS.
AnswersB, C, E

DocumentDB is the target for migration.

Why this answer

You must create the target DocumentDB cluster before migration. Option C is correct: AWS DMS can perform a full load followed by ongoing replication to minimize downtime. Option E is correct: the source MongoDB must be configured to capture oplog events so that DMS can replicate changes.

Option A is incorrect because AWS Snowball Edge is for offline data transfer, which would not achieve minimal downtime. Option D is incorrect because sharding the cluster across multiple regions is not required for a migration with minimal downtime.

Practice this question →
140
MCQhard

A company uses Amazon DynamoDB with on-demand capacity for a mobile application. During a marketing campaign, write traffic spikes to 10,000 writes per second for 5 minutes. The application experiences throttling after the first minute. The DynamoDB table has a single partition key. What should be done to prevent throttling in future campaigns?

A.Redesign the partition key to ensure write traffic is evenly distributed across partitions.
B.Enable DynamoDB Accelerator (DAX) to cache write requests.
C.Switch to provisioned capacity and increase write capacity units to 10,000.
D.Pre-warm the table by writing dummy data before the campaign.
AnswerA

Throttling with on-demand capacity often results from a hot partition caused by a single partition key. On-demand capacity handles total throughput but still has per-partition throughput limits. Redesigning the partition key to distribute writes evenly across partitions resolves the hotspot.

Why this answer

Throttling with on-demand capacity often results from a hot partition caused by a single partition key. On-demand capacity handles total throughput but still has per-partition throughput limits. Redesigning the partition key to distribute writes evenly across partitions resolves the hotspot.

Option B is wrong because DAX is an in-memory cache for reads, not writes. Option C is wrong because switching to provisioned capacity with 10,000 WCUs would still hit partition-level limits if the partition key design is poor. Option D is wrong because pre-warming does not affect per-partition throughput ceilings.

Practice this question →
141
MCQeasy

A company is using Amazon DynamoDB with on-demand capacity mode. The application experiences occasional throttling during peak hours. The operations team wants to reduce throttling without changing the application code. What should they do?

A.Increase the read and write capacity units in the on-demand mode.
B.Switch to provisioned capacity mode and configure auto scaling.
C.Enable DynamoDB Accelerator (DAX) to cache reads.
D.Use DynamoDB global tables to distribute traffic across regions.
AnswerB

Provisioned capacity with auto scaling ensures adequate capacity for peak traffic.

Why this answer

DynamoDB on-demand capacity mode does not allow manual adjustment of capacity units; it scales automatically but can still throttle if traffic exceeds the previous peak by a large margin. Switching to provisioned capacity mode with auto scaling allows you to set a higher minimum capacity and scale proactively based on actual usage patterns, reducing throttling without code changes. This approach gives more control over capacity limits while still automating adjustments.

Exam trap

The trap here is that candidates assume on-demand mode never throttles, but it can throttle during sudden traffic spikes that exceed the previous 30-minute peak, and they mistakenly think increasing capacity units is possible in on-demand mode.

How to eliminate wrong answers

Option A is wrong because on-demand mode does not have configurable read/write capacity units; it automatically adjusts capacity based on traffic, and you cannot increase them manually. Option C is wrong because DAX only caches reads, reducing read load on the table, but it does not address write throttling or the root cause of capacity limits; it also requires application code changes to use the DAX client. Option D is wrong because global tables replicate data across regions for disaster recovery and low-latency reads, but they do not reduce throttling in a single region; they add complexity and cost without solving the immediate capacity issue.

Practice this question →
142
Multi-Selectmedium

A company uses Amazon DynamoDB for a gaming application. During a new game launch, the application experiences high latency and throttling on a table with a partition key of 'user_id' and a sort key of 'timestamp'. The access pattern is to query recent items for a given user. Which TWO design changes can improve performance?

Select 2 answers
A.Use strongly consistent reads for all queries.
B.Use a composite key with 'game_id' as partition key and 'timestamp' as sort key.
C.Add a Global Secondary Index (GSI) with a different partition key.
D.Increase the provisioned read capacity for the table.
E.Enable DynamoDB Accelerator (DAX) to cache write operations.
AnswersB, C

A better partition key (game_id) can distribute writes evenly.

Why this answer

Using a composite key with 'game_id' as partition key and 'timestamp' as sort key distributes traffic more evenly if 'game_id' has high cardinality, reducing hot partitions. Option C is correct because adding a Global Secondary Index (GSI) with a different partition key allows queries to be served from the index, offloading read traffic from the base table. Option A is incorrect because strongly consistent reads do not solve hot partition issues and consume more throughput.

Option D is incorrect because increasing read capacity does not address the root cause of a hot partition; the table may still throttle requests to the hot partition. Option E is incorrect because DAX is a caching layer for reads, not writes, and does not resolve partition-level throttling.

Practice this question →
143
MCQmedium

A company runs an Amazon DynamoDB table with on-demand capacity. They notice that a specific partition key receives a high volume of read requests, causing throttling for that partition. What is the BEST solution to distribute the load evenly?

A.Create a global secondary index with a different partition key.
B.Add a random suffix to the partition key values to increase partition cardinality.
C.Use DynamoDB Accelerator (DAX) to cache reads.
D.Switch the table to provisioned capacity with auto-scaling.
AnswerB

This spreads reads across multiple partitions, reducing hot spots.

Why this answer

Adding a suffix to the partition key to create multiple partitions distributes read load across partitions.

Practice this question →
144
MCQhard

A DBA runs the above AWS CLI command. The DB instance is an Amazon RDS for MySQL instance. The DBA needs to connect to the database from an EC2 instance in the same VPC but cannot connect. Which action should be taken first?

A.Verify that the DB instance endpoint resolves correctly from the EC2 instance.
B.Check the inbound rules of the security group for port 3306.
C.Enable encryption on the DB instance.
D.Check the DB instance status in the output.
AnswerB

Security group inbound rules control access to the DB instance.

Why this answer

The most common cause of connectivity failure from an EC2 instance to an RDS for MySQL instance in the same VPC is that the security group associated with the RDS instance does not allow inbound traffic on port 3306 from the EC2 instance's security group or IP address. Checking the inbound rules of the security group for port 3306 is the first logical troubleshooting step because it directly addresses the network access control that governs whether the EC2 instance can initiate a TCP connection to the database.

Exam trap

The trap here is that candidates often jump to checking DNS resolution (Option A) or instance status (Option D) first, overlooking that security group inbound rules are the most frequent cause of connectivity failures in same-VPC RDS scenarios.

How to eliminate wrong answers

Option A is wrong because if the DB instance endpoint does not resolve correctly, the DBA would typically receive a 'Name or service not known' error, not a generic 'cannot connect' error; DNS resolution is rarely the first issue in a same-VPC scenario. Option C is wrong because enabling encryption on the DB instance (using AWS KMS) protects data at rest and in transit but does not affect network-level connectivity or security group rules; it would not resolve a connection failure caused by missing inbound rules. Option D is wrong because checking the DB instance status in the CLI output only confirms the instance is available and running, but a running instance can still be unreachable if security groups block traffic; this step does not diagnose the connectivity problem.

Practice this question →
145
MCQeasy

A database administrator notices that an Amazon RDS for MySQL DB instance has experienced a failover during a maintenance window. What is the most likely cause of this failover?

A.The DB instance ran out of storage and automatically failed over
B.A read replica was promoted to a primary instance
C.A manual failover was initiated by the administrator
D.A system update was applied during the maintenance window, causing a reboot
AnswerD

RDS applies patches during maintenance windows; Multi-AZ instances may fail over to reduce downtime.

Why this answer

The RDS maintenance window is used to apply system updates, which may require a reboot and failover if Multi-AZ is enabled. Option A is wrong because running out of storage does not cause a failover; instead, it would cause the instance to become unavailable. Option B is wrong because promoting a read replica is a manual action, not an automatic failover during maintenance.

Option C is wrong because a manual failover is initiated by the administrator, not automatically during the maintenance window.

Practice this question →
146
MCQhard

A development team is using Amazon DynamoDB with on-demand capacity mode for a new application. During initial testing, they notice that write requests are occasionally throttled during traffic bursts. They have enabled DynamoDB Accelerator (DAX) for read-heavy operations. What is the best recommendation to eliminate write throttling?

A.Enable DynamoDB adaptive capacity to automatically adjust partition throughput.
B.Switch to provisioned capacity mode with Auto Scaling.
C.Increase the DAX cluster node size to handle more write traffic.
D.Review the table's partition key design to avoid hot keys.
AnswerD

Hot keys cause throttling even with on-demand.

Why this answer

Write throttling in DynamoDB on-demand mode indicates a hot partition, often due to uneven partition key distribution. Reviewing and improving partition key design can eliminate hot keys and distribute write traffic evenly, preventing throttling. Option A is incorrect: while adaptive capacity helps, it does not fully resolve throttling from skewed access patterns.

Option B is incorrect: provisioned capacity with Auto Scaling adds complexity but does not address hot partitions; on-demand already scales automatically. Option C is incorrect: DAX is a read cache and does not affect write operations; increasing DAX node size only improves read performance.

Practice this question →
147
Multi-Selecthard

A database administrator is responsible for managing an Amazon RDS for Oracle DB instance. The DBA needs to ensure that all changes to the DB instance's security group rules are logged for audit purposes. Which TWO services can be used together to achieve this? (Select TWO.)

Select 2 answers
A.Amazon Inspector
B.AWS Config
C.AWS CloudTrail
D.Amazon CloudWatch Logs
E.Amazon VPC Flow Logs
AnswersC, D

CloudTrail records API calls that modify security group rules.

Why this answer

AWS CloudTrail logs API calls made to the AWS account, including changes to security group rules (e.g., AuthorizeSecurityGroupIngress). By sending CloudTrail logs to Amazon CloudWatch Logs, you can create metrics filters and alarms to monitor and alert on specific API calls, enabling audit logging of security group rule changes. AWS Config tracks configuration changes but does not provide real-time log streaming to CloudWatch Logs for API calls.

VPC Flow Logs capture network traffic, not API calls. Amazon Inspector is a vulnerability assessment service, not for logging API calls.

Practice this question →
148
Multi-Selecteasy

Which TWO of the following are valid methods to secure data at rest for an Amazon RDS for MySQL DB instance?

Select 1 answer
A.Enable SSL/TLS for connections to the DB instance.
B.Enable encryption at rest using AWS KMS.
C.Use the '--enable-encryption' flag when creating the DB instance.
D.Implement Transparent Data Encryption (TDE) using Oracle-compatible settings.
E.Use Amazon RDS encryption at the table level using the ENCRYPT option.
AnswersB

RDS supports encryption at rest using KMS.

Why this answer

(encryption at rest using AWS KMS) is correct because Amazon RDS for MySQL supports encryption at rest using AWS KMS, which encrypts the underlying storage and automated backups. Option C is incorrect because there is no '--enable-encryption' flag in the AWS CLI; the correct parameter to enable encryption during instance creation is '--storage-encrypted'. Therefore, option C does not represent a valid method.

Option A is incorrect because SSL/TLS secures data in transit, not at rest. Option D is incorrect because Transparent Data Encryption (TDE) is not supported for MySQL on RDS; it is available for Oracle and SQL Server. Option E is incorrect because Amazon RDS encryption is applied at the storage level, not the table level.

Practice this question →
149
MCQhard

A company attaches the above IAM policy to a user. The user tries to modify the DB instance 'prod-db' in us-east-1. What is the result?

A.The user cannot describe DB instances.
B.The user can modify prod-db because the Allow statement covers it.
C.The user cannot modify prod-db.
D.The user cannot modify any DB instance.
AnswerD

The explicit Deny with `Resource: "*"` denies `rds:ModifyDBInstance` on all DB instances, so the user cannot modify any DB instance. This option is correct.

Why this answer

The IAM policy includes an explicit Deny statement that denies the `rds:ModifyDBInstance` action on all resources (`Resource: "*"`). In AWS IAM, an explicit Deny overrides any Allow. Therefore, the user cannot modify any DB instance, including `prod-db`.

Options A and B are incorrect because the user can describe DB instances (unless denied) and the Allow does not override the Deny. Option C is incorrect because the Deny applies to all instances, not just `prod-db`.

Exam trap

Candidates often focus on the resource ARN in the Deny statement and miss that it is `"*"`, meaning it applies to all resources. They may think the Deny is scoped only to `prod-db` if they misread the policy.

How to eliminate wrong answers

Option A is wrong because the policy includes an Allow statement for `rds:DescribeDBInstances` on all resources, so the user can describe DB instances. Option B is wrong because the explicit Deny for `rds:ModifyDBInstance` overrides the Allow, preventing modification of `prod-db`. Option D is wrong because the Deny only applies to `rds:ModifyDBInstance`; the user can still modify other DB instances if allowed by other policies, but the explicit Deny blocks modification of any DB instance due to the wildcard resource in the Deny statement.

Practice this question →
150
Multi-Selectmedium

A company is using Amazon RDS for MySQL with Multi-AZ deployment. The primary instance recently experienced an unexpected failover due to a hardware failure. The database is 2 TB in size and has high write throughput. Which TWO actions should the database administrator take to minimize recovery time and ensure data durability?

Select 2 answers
A.Increase the DB instance class to a larger size to handle the write load.
B.Disable Multi-AZ and use a single-AZ deployment to avoid future failovers.
C.Enable automated backups with a retention period of 1 day to allow point-in-time recovery.
D.Take a manual snapshot of the DB instance immediately.
E.Verify that the failover completed successfully by checking the RDS event log and monitoring the new primary's status.
AnswersC, E

Automated backups enable point-in-time recovery, helping restore to the latest transaction.

Why this answer

Enabling automated backups with a retention period of 1 day allows for point-in-time recovery, which minimizes data loss and recovery time. Option E is correct because verifying that the failover completed successfully through the RDS event log and monitoring the new primary's status ensures data durability and confirms that the Multi-AZ deployment functioned properly. Option A is wrong because increasing the instance class does not directly reduce recovery time from a failover.

Option B is wrong because disabling Multi-AZ reduces availability and does not prevent hardware failures. Option D is wrong because manual snapshots are not as immediate as automated backups for point-in-time recovery and would take longer to restore.

Practice this question →
← PreviousPage 2 of 4 · 300 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Management and Operations questions.

Start 20-question session