Courseiva
← Back to AWS Certified Database Specialty DBS-C01 questions

Scenario-based practice

Refer to the Exhibit Practice Questions

Practise AWS Certified Database Specialty DBS-C01 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice testRead exam guide
15
scenario questions
DBS-C01
exam code
Amazon Web Services
vendor

Scenario guide

How to approach refer to the exhibit practice questions

Practise exhibit-style questions that ask you to read a topology, table, command output or diagram before choosing the best answer.

Quick answer

Exhibit-style questions test whether you can read a topology, command output, diagram or table before choosing the best answer.

How to extract the relevant detail from an exhibit.

How topology, command output or routing information affects the answer.

How to avoid answering from memory before reading the evidence.

How to map the exhibit back to the exam objective.

Related practice questions

Related DBS-C01 topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Workload-Specific Database Design practice questions

Practise DBS-C01 questions linked to Workload-Specific Database Design.

Deployment and Migration practice questions

Work through DBS-C01 questions on Deployment and Migration.

Management and Operations practice questions

Practise DBS-C01 questions linked to Management and Operations.

Monitoring and Troubleshooting practice questions

Monitoring and Troubleshooting practice questions for DBS-C01.

Database Security practice questions

Database Security practice questions for DBS-C01.

DBS-C01 fundamentals practice questions

Practise DBS-C01 questions linked to DBS-C01 fundamentals.

DBS-C01 scenario practice questions

Sharpen your DBS-C01 knowledge of DBS-C01 scenario.

DBS-C01 troubleshooting practice questions

Sharpen your DBS-C01 knowledge of DBS-C01 troubleshooting.

Practice set

Practice scenarios

Question 1hardmultiple choice
Full question →

Refer to the exhibit. A company has an S3 bucket with server-side encryption using AWS KMS. The bucket policy allows access to a user, but the user receives 'Access Denied' when trying to download an object. The IAM policy for the user is shown. What is the MOST likely cause?

Exhibit

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "kms:Decrypt",
      "Resource": "arn:aws:kms:us-east-1:123456789012:key/abc123",
      "Condition": {
        "StringEquals": {
          "kms:ViaService": "s3.amazonaws.com"
        }
      }
    }
  ]
}
Question 2mediummultiple choice
Full question →

Refer to the exhibit. A DBA sees the above log entries for an Amazon Aurora MySQL cluster. What is the most likely cause?

Exhibit

Refer to the exhibit.

```
# CloudWatch Logs log group: /aws/rds/cluster/mycluster/error
# Log stream: production-2024-05-01
2024-05-01T10:00:00Z [ERROR] [MY-000001] [Server] Table 'mydb.temp_data' is marked as crashed and should be repaired
2024-05-01T10:01:00Z [ERROR] [MY-000002] [InnoDB] Database page corruption on disk or a failed file read of page
```
Question 3mediummultiple choice
Full question →

Refer to the exhibit. An IAM policy is attached to an IAM role used by a Lambda function that writes to a DynamoDB table. The function also needs to read items from the table. What is the outcome of this policy?

Exhibit

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "dynamodb:PutItem",
      "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders"
    },
    {
      "Effect": "Deny",
      "Action": "dynamodb:GetItem",
      "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders"
    }
  ]
}
Question 4easymultiple choice
Full question →

A security auditor reviews the output of a DynamoDB table description command as shown in the exhibit. Which statement accurately describes the encryption configuration of the Users table?

Network Topology
aws dynamodb describe-tabletable-name Usersquery 'Table.SSEDescription'output jsonRefer to the exhibit."Status": "ENABLED","SSEType": "KMS","KMSMasterKeyArn": "arn:aws:kms:us-east-1:123456789012:key/abc12345-1234-1234-1234-123456789012"
Question 5easymultiple choice
Full question →

A company is running an Amazon RDS for MySQL instance as shown in the exhibit. The application is experiencing high write latency. The instance has a high number of write operations and the storage queue depth is consistently above 100. Which change would most effectively reduce write latency?

Network Topology
aws rds describe-db-instancesdb-instance-identifier mydbquery 'DBInstances[0].{Engine:EngineRefer to the exhibit.```"Engine": "mysql","DBInstanceClass": "db.m5.large","StorageType": "gp2","AllocatedStorage": 100,"MultiAZ": false
Question 6mediummultiple choice
Full question →

Refer to the exhibit. A developer runs the command against an RDS MySQL instance. The application team reports that the database is experiencing high read latency during peak hours. The database is not currently in Multi-AZ. What is the MOST cost-effective way to reduce read latency?

Network Topology
Command: aws rds describe-db-instancesdb-instance-identifier mydbRefer to the exhibit.Output:"DBInstances": ["DBInstanceIdentifier": "mydb","DBInstanceClass": "db.r5.large","Engine": "mysql","DBInstanceStatus": "available","MultiAZ": false,"Endpoint": {"Address": "mydb.abcdefghijk.us-east-1.rds.amazonaws.com","Port": 3306,"HostedZoneId": "Z1PVIF0JZ7T2V"},"ReadReplicaSourceDBInstanceIdentifier": null,"ReadReplicaDBInstanceIdentifiers": []
Question 7hardmultiple choice
Full question →

Refer to the exhibit. An application on an EC2 instance is trying to read an object from the S3 bucket 'data-lake-prod'. The instance is in a VPC with an IP address of 10.0.1.5. The application receives an Access Denied error. What is the cause?

Exhibit

Refer to the exhibit.

-- IAM Policy attached to a role used by an EC2 instance:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::data-lake-prod/*"
    },
    {
      "Effect": "Allow",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::data-lake-prod/*"
    },
    {
      "Effect": "Deny",
      "Action": "s3:*",
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "aws:SourceIp": "10.0.0.0/8"
        }
      }
    }
  ]
}
Question 8hardmultiple choice
Full question →

Refer to the exhibit. A security engineer has applied this key policy to a customer managed KMS key used to encrypt a Secrets Manager secret containing database credentials. An application running on an Amazon EC2 instance in the same account and region is unable to decrypt the secret. What is the MOST likely cause?

Exhibit

Refer to the exhibit.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "kms:Decrypt",
      "Resource": "arn:aws:kms:us-east-1:123456789012:key/abc12345-...",
      "Condition": {
        "StringEquals": {
          "kms:ViaService": "secretsmanager.us-east-1.amazonaws.com",
          "kms:CallerAccount": "123456789012"
        }
      }
    }
  ]
}
Question 9easymultiple choice
Full question →

Refer to the exhibit. A developer created an IAM policy with the above command and attached it to a user. What is the security implication of this policy?

Network Topology
aws iam create-policypolicy-name RDSAccesspolicy-document '{Refer to the exhibit."Version": "2012-10-17","Statement": ["Effect": "Allow","Action": "rds:*","Resource": "*"}'
Question 10easymultiple choice
Full question →

A snapshot of an Amazon RDS DB instance is shown in the exhibit. What does the output indicate?

Network Topology
aws rds describe-db-snapshotsdb-snapshot-identifier my-snapshotquery "DBSnapshots[0].Status"query "DBSnapshots[0].Encrypted"Refer to the exhibit.```"Status": "encrypted""Encrypted": true
Question 11hardmultiple choice
Full question →

An administrator runs the CLI command shown in the exhibit and sees the output. The DB instance 'mydb' is currently running MySQL 5.7.22. What does the output indicate?

Network Topology
aws rds describe-db-instancesdb-instance-identifier mydbquery 'DBInstances[0].PendingModifiedValues'Refer to the exhibit.Output:"DBInstanceIdentifier": "mydb","EngineVersion": "5.7.23","MasterUserPassword": "****","DBParameterGroupName": "default.mysql5.7"
Question 12mediummultiple choice
Full question →

Refer to the exhibit. A DBA deploys this CloudFormation stack. After creation, the DBA needs to enable deletion protection for the DB instance. Which modification to the template would accomplish this?

Exhibit

Refer to the exhibit.

-- CloudFormation template snippet:

Resources:
  MyDBInstance:
    Type: AWS::RDS::DBInstance
    Properties:
      DBInstanceClass: db.r5.large
      Engine: MySQL
      MultiAZ: true
      DBName: mydb
      MasterUsername: admin
      MasterUserPassword: mypassword
      DBSubnetGroupName: !Ref MyDBSubnetGroup
      VPCSecurityGroups:
        - !Ref MySecurityGroup
      StorageType: gp2
      AllocatedStorage: 100
Question 13easymultiple choice
Full question →

Refer to the exhibit. A DBA is troubleshooting a performance issue on an RDS for MySQL DB instance. The DBA runs the AWS CLI command shown. Based on the output, which of the following is a potential performance bottleneck?

Network Topology
aws rds describe-db-instancesdb-instance-identifier mydbquery 'DBInstances[*].{Status:DBInstanceStatusoutput jsonRefer to the exhibit."Status": "available","Engine": "mysql","EngineVersion": "8.0.27","MultiAZ": false,"StorageType": "gp2"
Question 14mediummultiple choice
Full question →

Refer to the exhibit. A database administrator runs the AWS CLI command to describe events for an RDS instance. Which conclusion is most likely correct based on the output?

Network Topology
RDS> rds describe-eventssource-identifier mydb-instancesource-type db-instanceduration 360Refer to the exhibit."Events": ["SourceIdentifier": "mydb-instance","SourceType": "db-instance","Message": "DB instance restarted","EventCategories": ["failure"],"Date": "2023-08-01T12:00:00Z"},"Message": "Multi-AZ instance failover completed","failover""Date": "2023-08-01T11:45:00Z"
Question 15hardmultiple choice
Full question →

Refer to the exhibit. An IAM policy is attached to a role used by an application that accesses the DynamoDB 'Orders' table. The application needs to perform a Scan operation on the table. According to the policy, is the Scan operation allowed?

Exhibit

Refer to the exhibit.

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "dynamodb:GetItem",
                "dynamodb:PutItem",
                "dynamodb:UpdateItem",
                "dynamodb:DeleteItem",
                "dynamodb:Query",
                "dynamodb:Scan"
            ],
            "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders"
        },
        {
            "Effect": "Deny",
            "Action": "dynamodb:DeleteTable",
            "Resource": "arn:aws:dynamodb:us-east-1:123456789012:table/Orders"
        }
    ]
}
```

These DBS-C01 practice questions are part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style DBS-C01 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.