Exam AWS Certified Database - Specialty topic 1 question 305 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 305
Topic #: 1

[All AWS Certified Database - Specialty Questions]

A company is using a 1 TB Amazon RDS for PostgreSQL DB instance to store user data. During a security review, a security engineer sees that the DB instance is not encrypted at rest.

How should a database specialist correct this issue with the LEAST amount of downtime and no data loss?

A. Modify the DB instance by using the RDS management console, and enable encryption. Apply the changes immediately.
B. Create a manual DB instance snapshot and then create an encrypted copy of that snapshot. Use this snapshot to create a new encrypted DB instance. Modify the application to connect to the new DB instance.
C. Create a new encrypted DB instance and use AWS Database Migration Service (AWS DMS) to migrate the existing database to the encrypted DB instance. Once the instances are in sync, modify the application to connect to the new DB instance.
D. Create an encrypted read replica. Once the read replica is in sync, promote it to primary. Modify the application to connect to the new primary instance.

Show Suggested Answer

Suggested Answer: C 🗳️

by openkg at March 23, 2023, 11:23 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

MultiAZ

1 year, 6 months ago

C gives the LEAST downtime B is easier and less risky, but requires hours of downtime

upvoted 1 times

...

Pranava_GCP

1 year, 10 months ago

Selected Answer: C

C. use AWS Database Migration Service (AWS DMS) https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/encrypt-an-existing-amazon-rds-for-postgresql-db-instance.html " This pattern uses the AWS Database Migration Service (AWS DMS) to migrate and continuously replicate the data so that the cutover to the new, encrypted database can be done with minimal downtime. "

upvoted 2 times

...

Windy

1 year, 11 months ago

It's C

upvoted 1 times

...

Kodoma

2 years, 1 month ago

Selected Answer: C

C is right.

upvoted 1 times

...

tsk9921

2 years, 2 months ago

D seems right choice considering 1 TB size and LEAST downtime req. Without these specific hints, snapshot is good (option B).

upvoted 1 times

tsk9921

2 years, 2 months ago

I meant to say C (not D...sorry for fat finger) is right.

upvoted 1 times

...

SeemaDataReader

2 years, 2 months ago

This pattern uses the AWS Database Migration Service (AWS DMS) to migrate and continuously replicate the data so that the cutover to the new, encrypted database can be done with minimal downtime. https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/encrypt-an-existing-amazon-rds-for-postgresql-db-instance.html

upvoted 3 times

...