Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 214 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02

Question #: 214
Topic #: 1

[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company needs to migrate its customer transactions database from on premises to AWS. The database resides on an Oracle DB instance that runs on a Linux server. According to a new security requirement, the company must rotate the database password each year.

Which solution will meet these requirements with the LEAST operational overhead?

A. Convert the database to Amazon DynamoDB by using the AWS Schema Conversion Tool (AWS SCT). Store the password in AWS Systems Manager Parameter Store. Create an Amazon CloudWatch alarm to invoke an AWS Lambda function for yearly passtard rotation.
B. Migrate the database to Amazon RDS for Oracle. Store the password in AWS Secrets Manager. Turn on automatic rotation. Configure a yearly rotation schedule.
C. Migrate the database to an Amazon EC2 instance. Use AWS Systems Manager Parameter Store to keep and rotate the connection string by using an AWS Lambda function on a yearly schedule.
D. Migrate the database to Amazon Neptune by using the AWS Schema Conversion Tool (AWS SCT). Create an Amazon CloudWatch alarm to invoke an AWS Lambda function for yearly password rotation.

Show Suggested Answer

Suggested Answer: B 🗳️

by nexus2020 at June 20, 2023, 9:43 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

joleneinthebackyard

Highly Voted 1 year, 1 month ago

Selected Answer: B

Wish all questions are clear like this. A: Drop immediately at the first sentence B: sounds good C: host database in ec2 instance will never a choice. Plus SSM parameter store + lambda for password rotation is not as good as secret manager D: Again, don't migrate one type of database to another

upvoted 6 times

...

611c008

Most Recent 7 months, 1 week ago

Selected Answer: B

C is wrong as system manager parm store does not support auto rotate password

upvoted 1 times

...

kejam

11 months, 2 weeks ago

Selected Answer: B

Answer B https://aws.amazon.com/blogs/security/how-to-use-aws-secrets-manager-rotate-credentials-amazon-rds-database-types-oracle/

upvoted 2 times

...

career360guru

1 year, 1 month ago

Selected Answer: B

Option B

upvoted 2 times

...

dkcloudguru

1 year, 3 months ago

Doubt in question it mention yearly rotation, if you can see in Secret Manager the dropdown options are hourly, days, week, and months it doesn’t have the yearly option, however, you can mention 12 if that is the case then option B is correct else option C

upvoted 1 times

...