AmazonAmazon
DBS-C01 · Question #106
DBS-C01 Question #106: Real Exam Question with Answer & Explanation
Sign in or unlock DBS-C01 to reveal the answer and full explanation for question #106. The question stem and answer options stay visible for context.
Submitted by khalil_dz· Mar 6, 2026Database Security
Question
A company is going through a security audit. The audit team has identified cleartext master user password in the AWS CloudFormation templates for Amazon RDS for MySQL DB instances. The audit team has flagged this as a security risk to the database team. What should a database specialist do to mitigate this risk?
Options
- AChange all the databases to use AWS IAM for authentication and remove all the cleartext
- BUse an AWS Secrets Manager resource to generate a random password and reference the
- CRemove the passwords from the CloudFormation templates so Amazon RDS prompts for the
- DRemove the passwords from the CloudFormation template and store them in a separate file.
Unlock DBS-C01 to see the answer
You've previewed enough free DBS-C01 questions. Unlock DBS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Secrets Manager#CloudFormation#security best practices#database credentials#secret management