AWS-Certified-Database-Specialty Free Practice Test

A company’s Security department established new requirements that state internal users must connect to an existing Amazon RDS for SQL Server DB instance using their corporate Active Directory (AD) credentials. A Database Specialist must make the modifications needed to fulfill this requirement.
Which combination of actions should the Database Specialist take? (Choose three.)

1. A. Disable Transparent Data Encryption (TDE) on the RDS SQL Server DB instance.
2. B. Modify the RDS SQL Server DB instance to use the directory for Windows authenticatio
3. C. Create appropriate new logins.
4. D. Use the AWS Management Console to create an AWS Managed Microsoft A
5. E. Create a trust relationship with the corporate AD.
6. F. Stop the RDS SQL Server DB instance, modify it to use the directory for Windows authentication, and start it agai
7. G. Create appropriate new logins.
8. H. Use the AWS Management Console to create an AD Connecto
9. I. Create a trust relationship with the corporate AD.
10. J. Configure the AWS Managed Microsoft AD domain controller Security Group.

Correct Answer: BCF
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html

A database specialist must create nightly backups of an Amazon DynamoDB table in a mission-critical workload as part of a disaster recovery strategy.
Which backup methodology should the database specialist use to MINIMIZE management overhead?

1. A. Install the AWS CLI on an Amazon EC2 instanc
2. B. Write a CLI command that creates a backup of the DynamoDB tabl
3. C. Create a scheduled job or task that executes the command on a nightly basis.
4. D. Create an AWS Lambda function that creates a backup of the DynamoDB tabl
5. E. Create an Amazon CloudWatch Events rule that executes the Lambda function on a nightly basis.
6. F. Create a backup plan using AWS Backup, specify a backup frequency of every 24 hours, and give the plan a nightly backup window.
7. G. Configure DynamoDB backup and restore for an on-demand backup frequency of every 24 hours.

Correct Answer: C
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/CreateBackup.html#:~:text=If you%2 https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/backuprestore_HowItWorks.html

A business maintains a SQL Server database on-premises. Active Directory authentication is used to provide users access to the database. The organization transferred their database successfully to Amazon RDS for SQL Server. The organization, however, has reservations regarding user authentication in the AWS Cloud environment.
Which authentication solution should a database professional provide?

1. A. Deploy Active Directory Federation Services (AD FS) on premises and configure it with an on-premises Active Director
2. B. Set up delegation between the on- premises AD FS and AWS Security Token Service (AWS STS) to map user identities to a role using theAmazonRDSDirectoryServiceAccess managed IAM policy.
3. C. Establish a forest trust between the on-premises Active Directory and AWS Directory Service for Microsoft Active Director
4. D. Use AWS SSO to configure an Active Directory user delegated to access the databases in RDS for SQL Server.
5. E. Use Active Directory Connector to redirect directory requests to the company€™s on-premises Active Directory without caching any information in the clou
6. F. Use the RDS master user credentials to connect to the DB instance and configure SQL Server logins and users from the Active Directory users and groups.
7. G. Establish a forest trust between the on-premises Active Directory and AWS Directory Service for Microsoft Active Director
8. H. Ensure RDS for SQL Server is using mixed mode authenticatio
9. I. Use the RDS master user credentials to connect to the DB instance and configure SQL Server logins and users from the Active Directory users and groups.

Correct Answer: D
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html

A Database Specialist is designing a disaster recovery strategy for a production Amazon DynamoDB table. The table uses provisioned read/write capacity mode, global secondary indexes, and time to live (TTL). The Database Specialist has restored the latest backup to a new table.
To prepare the new table with identical settings, which steps should be performed? (Choose two.)

1. A. Re-create global secondary indexes in the new table
2. B. Define IAM policies for access to the new table
3. C. Define the TTL settings
4. D. Encrypt the table from the AWS Management Console or use the update-table command
5. E. Set the provisioned read and write capacity

Correct Answer: BC
The following items need to be reconfigured after restoring the DynamoDB table.
--AutoScaling policy
--IAM policy
--CloudWatch settings
--Tags
--Stream settings
--TTL
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/backuprestore_HowItWorks.html

A company is concerned about the cost of a large-scale, transactional application using Amazon DynamoDB that only needs to store data for 2 days before it is deleted. In looking at the tables, a Database Specialist notices that much of the data is months old, and goes back to when the application was first deployed.
What can the Database Specialist do to reduce the overall cost?

1. A. Create a new attribute in each table to track the expiration time and create an AWS Glue transformation to delete entries more than 2 days old.
2. B. Create a new attribute in each table to track the expiration time and enable DynamoDB Streams on each table.
3. C. Create a new attribute in each table to track the expiration time and enable time to live (TTL) on each table.
4. D. Create an Amazon CloudWatch Events event to export the data to Amazon S3 daily using AWS Data Pipeline and then truncate the Amazon DynamoDB table.

Correct Answer: C
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/TTL.html