ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Developer - Associate DVA-C02 All Questions

View all questions & answers for the AWS Certified Developer - Associate DVA-C02 exam
Go to Exam

Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 135 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02
Question #: 135
Topic #: 1
[All AWS Certified Developer - Associate DVA-C02 Questions]

A company created four AWS Lambda functions that connect to a relational database server that runs on an Amazon RDS instance. A security team requires the company to automatically change the database password every 30 days.

Which solution will meet these requirements MOST securely?

  • A. Store the database credentials in the environment variables of the Lambda function. Deploy the Lambda function with the new credentials every 30 days.
  • B. Store the database credentials in AWS Secrets Manager. Configure a 30-day rotation schedule for the credentials.
  • C. Store the database credentials in AWS Systems Manager Parameter Store secure strings. Configure a 30-day schedule for the secure strings.
  • D. Store the database credentials in an Amazon S3 bucket that uses server-side encryption with customer-provided encryption keys (SSE-C). Configure a 30-day key rotation schedule for the customer key.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by cloudenthusiast at Aug. 4, 2023, 1:41 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Dushank
Highly Voted 1 year, 8 months ago
Selected Answer: B
The most secure and automated way to handle database credential rotation is to use AWS Secrets Manager. Secrets Manager can automatically rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. You can configure Secrets Manager to automatically rotate the secrets for you according to a schedule you specify, making it easier to adhere to best practices for security.
upvoted 6 times
...
tsangckl
Most Recent 11 months ago
This appear at 17 Jun exam
upvoted 1 times
...
65703c1
12 months ago
Selected Answer: B
B is the correct answer.
upvoted 1 times
...
RaidenKurosaki
1 year, 9 months ago
Selected Answer: B
Secrets Manager supports auto rotation. Systems Manager does not do that.
upvoted 4 times
...
Parsons
1 year, 9 months ago
Selected Answer: B
B is correct. Keyword: "automatically change the database password every 30 days"
upvoted 2 times
...
cloudenthusiast
1 year, 9 months ago
Selected Answer: B
Secrets Manager supports automatic rotation of secrets by using either built-in or custom Lambda functions
upvoted 3 times
niks1221
1 year, 9 months ago
DId you give your exam recently? If yes, how many questions were from here?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago