A company is using Amazon RDS for PostgreSQL. The Security team wants all database connection requests to be logged and retained for 180 days. The RDS for PostgreSQL DB instance is currently using the default parameter group. A Database Specialist has identified that setting the log_connections parameter to 1 will enable connections logging.
Which combination of steps should the Database Specialist take to meet the logging and retention requirements? (Choose two.)

1. A. Update the log_connections parameter in the default parameter group
2. B. Create a custom parameter group, update the log_connections parameter, and associate the parameter with the DB instance
3. C. Enable publishing of database engine logs to Amazon CloudWatch Logs and set the event expiration to 180 days
4. D. Enable publishing of database engine logs to an Amazon S3 bucket and set the lifecycle policy to 180 days
5. E. Connect to the RDS PostgreSQL host and update the log_connections parameter in the postgresql.conf file

Correct Answer: AE

A company is releasing a new mobile game featuring a team play mode. As a group of mobile device users play together, an item containing their statuses is updated in an Amazon DynamoDB table. Periodically, the other users’ devices read the latest statuses of their teammates from the table using the BatchGetltemn operation.
Prior to launch, some testers submitted bug reports claiming that the status data they were seeing in the game was not up-to-date. The developers are unable to replicate this issue and have asked a database specialist for a recommendation.
Which recommendation would resolve this issue?

1. A. Ensure the DynamoDB table is configured to be always consistent.
2. B. Ensure the BatchGetltem operation is called with the ConsistentRead parameter set to false.
3. C. Enable a stream on the DynamoDB table and subscribe each device to the stream to ensure all devices receive up-to-date status information.
4. D. Ensure the BatchGetltem operation is called with the ConsistentRead parameter set to true.

Correct Answer: D
https://docs.aws.amazon.com/ja_jp/amazondynamodb/latest/developerguide/API_BatchGetItem_v20111205.htm By default, BatchGetItem performs eventually consistent reads on every table in the request. If you want strongly consistent reads instead, you can set ConsistentRead to true for any or all tables.

A banking company recently launched an Amazon RDS for MySQL DB instance as part of a proof-of-concept project. A database specialist has configured automated database snapshots. As a part of routine testing, the database specialist noticed one day that the automated database snapshot was not created.
Which of the following are possible reasons why the snapshot was not created? (Choose two.)

1. A. A copy of the RDS automated snapshot for this DB instance is in progress within the same AWS Region.
2. B. A copy of the RDS automated snapshot for this DB instance is in progress in a different AWS Region.
3. C. The RDS maintenance window is not configured.
4. D. The RDS DB instance is in the STORAGE_FULL state.
5. E. RDS event notifications have not been enabled.

Correct Answer: AD
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html

A company has an AWS CloudFormation template written in JSON that is used to launch new Amazon RDS for MySQL DB instances. The security team has asked a database specialist to ensure that the master password is automatically rotated every 30 days for all new DB instances that are launched using the template.
What is the MOST operationally efficient solution to meet these requirements?

1. A. Save the password in an Amazon S3 objec
2. B. Encrypt the S3 object with an AWS KMS ke
3. C. Set the KMS key to be rotated every 30 days by setting the EnableKeyRotation property to tru
4. D. Use a CloudFormation custom resource to read the S3 object to extract the password.
5. E. Create an AWS Lambda function to rotate the secre
6. F. Modify the CloudFormation template to add an AWS::SecretsManager::RotationSchedule resourc
7. G. Configure the RotationLambdaARN value and, for the RotationRules property, set the AutomaticallyAfterDays parameter to 30.
8. H. Modify the CloudFormation template to use the AWS KMS key as the database passwor
9. I. Configure an Amazon EventBridge rule to invoke the KMS API to rotate the key every 30 days by setting the ScheduleExpression parameter to ***/30***.
10. J. Integrate the Amazon RDS for MySQL DB instances with AWS IAM and centrally manage the master database user password.

Correct Answer: B
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-rotationsche

A large financial services company requires that all data be encrypted in transit. A Developer is attempting to connect to an Amazon RDS DB instance using the company VPC for the first time with credentials provided by a Database Specialist. Other members of the Development team can connect, but this user is consistently receiving an error indicating a communications link failure. The Developer asked the Database Specialist to reset the password a number of times, but the error persists.
Which step should be taken to troubleshoot this issue?

1. A. Ensure that the database option group for the RDS DB instance allows ingress from the Developer machine’s IP address
2. B. Ensure that the RDS DB instance’s subnet group includes a public subnet to allow the Developer to connect
3. C. Ensure that the RDS DB instance has not reached its maximum connections limit
4. D. Ensure that the connection is using SSL and is addressing the port where the RDS DB instance is listening for encrypted connections

Correct Answer: D
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/SQLServer.Concepts.General.SSL.Using.html