Exam AWS Certified Database - Specialty All Questions

View all questions & answers for the AWS Certified Database - Specialty exam

Exam AWS Certified Database - Specialty topic 1 question 67 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 67
Topic #: 1

[All AWS Certified Database - Specialty Questions]

A company is going to use an Amazon Aurora PostgreSQL DB cluster for an application backend. The DB cluster contains some tables with sensitive data. A
Database Specialist needs to control the access privileges at the table level.
How can the Database Specialist meet these requirements?

A. Use AWS IAM database authentication and restrict access to the tables using an IAM policy.
B. Configure the rules in a NACL to restrict outbound traffic from the Aurora DB cluster.
C. Execute GRANT and REVOKE commands that restrict access to the tables containing sensitive data.
D. Define access privileges to the tables containing sensitive data in the pg_hba.conf file.

Show Suggested Answer

Suggested Answer: C 🗳️

by BillyC at July 29, 2020, 2:10 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Pranava_GCP

1 year, 9 months ago

Selected Answer: C

C. Execute GRANT and REVOKE commands that restrict access to the tables containing sensitive data. https://aws.amazon.com/blogs/database/managing-postgresql-users-and-roles/#:~:text=GRANT%20SELECT%20ON%20TABLE%20mytable1%2C%20mytable2%20TO%20readonly%3B

upvoted 2 times

...

IhorK

1 year, 10 months ago

Selected Answer: C

https://aws.amazon.com/blogs/database/managing-postgresql-users-and-roles/

upvoted 2 times

...

sk1974

2 years, 2 months ago

I am leaning towards A since you do not need to issue a GRANT to revoke a permission. U use grant to grant access to a table . C is kind of confusing

upvoted 2 times

...

novice_expert

3 years, 1 month ago

Selected Answer: C

x A. Use AWS IAM database authentication and restrict access to the tables using an IAM policy. (this is for db access) x B. Configure the rules in a NACL to restrict outbound traffic from the Aurora DB cluster. (This is for Network Access Control) C. Execute GRANT and REVOKE commands that restrict access to the tables containing sensitive data. x D. Define access privileges to the tables containing sensitive data in the pg_hba.conf file. (not allowed)

upvoted 4 times

Zdujgfr567783ff

2 years ago

revoke dies not restrict access it revokes some existing grant

upvoted 1 times

...

TonyGe

3 years, 7 months ago

C. Table level means DCL

upvoted 3 times

...

AM

3 years, 7 months ago

This is easy. I am a DBA.Table level access is GRANT,REVOKE for many database flavors including Oracle an Postgres. Answer is C.

upvoted 2 times

...

myutran

3 years, 7 months ago

Ans: C

upvoted 2 times

...

GeeBeeEl

3 years, 7 months ago

I see answers like A or C, but I am looking for collateral support and cannot find any in the options selected so far. I choose A, see https://aws.amazon.com/blogs/database/managing-postgresql-users-and-roles/ You create roles and then attach policies to the roles. May you support your response with a link so that we can check to confirm your reasoning? Thanks

upvoted 1 times